AT-S39 Version 3.3.

1 Management Software Release Notes

AT-S39 Version 3.3.1 Management Software for the AT-8000 Series Fast Ethernet Switches Software Release Notes
Please read this document before you begin to use the AT-S39 management software. Supported Platforms AT-S39 Version 3.3.1 management software is supported on the following Allied Telesyn Fast Ethernet switches: AT-8012M AT-8012M-QS AT-8016F/xx (MT, SC, and ST) AT-8024 AT-8024GB AT-8024M AT-8026T AT-8026FC AT-8088/xx (MT and SC)

Product Documentation For hardware installation instructions, refer to the following guide: AT-8000 Series Installation Guide (PN 613-50244-00)

For management instructions, refer to the following guides: AT-S39 Management Software Users Guide (PN 613-50245-00) AT-S39 Command Line Users Guide (PN 613-50354-00)

The guides are available from the Allied Telesyn web site at www.alliedtelesyn.com.

613-50678-00 Rev A

Allied Telesyn, Inc.

AT-S39 Version 3.3.1 Management Software Release Notes

AT-S39 Version 3.3.1 New Feature The AT-S39 software has a new feature for displaying the current utilization of a switchs CPU. The utilization is display as a percentage of the CPUs total processing power. The feature can be useful in determining whether the CPU is experiencing an excessive amount of management protocol packets. (It should be noted that since a switchs CPU is not involved in forwarding Ethernet traffic between the switch ports, the utilization displayed by the feature does not reflect the amount of traffic the switch is handling.) To display the feature, select Diagnostics from the AT-S39 main menu and then select Performance from the Diagnostics menu. This feature is only available from the menu interface, and is not available from the command line interface or the web browser interface.

Resolved Issues The following issues were resolved in AT-S39 V3.3.1 software. Switch management was lost after a system restart or power cycle if EAPOL-Start packets from 802.1x Port-based Access Control were present on the ports during the restart. (Reference Customer # 126817) The sysservice MIB object returned the value 6 instead of the correct value 2, signifying a Layer 2 switch. (Reference Customer # 125747) The AT-S39 MIB files have been modified to eliminate problems some compilers were encountering with the NOTIFICATION-TYPE and MODULE-IDENTITY macros. (Reference Customer # 126630, 126631, and 126632) The switch sent extra SNMP traps when power-cycled (cold start). (Reference Customer # 126158) The switch sent extra SNMP traps when there was a change to the status of a port link. (Reference Customer # 125975) The management software did not always correctly update the IGMP Host List after a host node had issued a leave request. (2328) A host node that had left a multicast group was not allowed to rejoin the group if the switch had learned its maximum number of multicast groups. (2329) A switch set to the IGMP Multi-Host setting would continue to forward multicast packets to a switch port even after all the host nodes had sent leave requests. (2326) The switch did not forward multicast packets to a switch port manually configured as a multicast router port. (2324) The switch experienced a significant delay in redistributing traffic on a port trunk if one of the links in the trunk failed and the switch was running STP or RSP and the trunk ports had been configured as non-edge ports in spanning tree. (2474)

613-50678-00 Rev A

Allied Telesyn, Inc.

AT-S39 Version 3.3.1 Management Software Release Notes

Entering a system name, system contact, or switch location of more than 39 characters using SNMP management caused the switch to stop forwarding traffic. (2396) The switch would forward BPDU packets when spanning tree was disabled. The switch now forwards BPDU packets only when spanning tree is enabled (2248 and 2435) A switch port experienced very low throughput if it auto-negotiated to 10 Mbps, halfduplex mode after a system restart and there was heavy broadcast traffic present on the port during the restart. Restoring normal throughput required disabling the link and reestablishing it. (Reference Customer # 109626 and 112565) (2442 and 2443) The failure of a link in a port trunk consisting of AT-A47 modules periodically resulted in flooding of traffic on the remaining link. (2325) STP or RSTP convergence periodically resulted in a brief broadcast storm. This issue has been resolved by changing the default edge setting for the ports to No, meaning that the ports are considered by default as non-edge ports by spanning tree. (2358) Creating a port trunk and then resetting the switch would occasionally result in the switchs failure to forward traffic after completing the reset. (Reference Customer # 128600 and 129278) (2098)

Operational Notes The Collision (COL) LEDs are not operational on switch models that feature twisted pair ports. This problem does not apply to the twisted pair port LEDs on the AT-8088/xx switches. (Reference Customer # 109337) The 802.1x Port-based Access Control feature supports EAP-MD5 only. (Reference Customer # 121215) The default edge port setting in RSTP for all ports has been changed to No. The ports in the default setting are considered as point-to-point ports. Allied Telesyn recommends manually configuring the spanning tree settings for those ports that are edge ports by changing their edge port settings to Yes. Changing a ports state with the AtiswitchPortEntry object ID can cause the ports PVID value to revert to the default value 1. (Reference Customer # 130405) (2473) When implementing 802.1x Port-based Access Control, Allied Telesyn does not recommend connecting more than one supplicant to each authenticator port on the switch. (Reference Customer # 117941) Note Connecting multiple supplicants to a port set to the authenticator role does not conform to the IEEE 802.1x standard, can introduce security risks, and can result in undesirable switch behavior. To avoid this, Allied Telesyn recommends not using the authenticator role on a port that is connected to more than one end node, such as a port connected to another switch or a hub.

613-50678-00 Rev A

Allied Telesyn, Inc.

AT-S39 Version 3.3.1 Management Software Release Notes

To manage the switch using an SNMP management application, you must use the latest MIB files from Allied Telesyn. The files and version numbers are atistackinfo.mib, version 1.2, and atiswitch.mib, version 2.10. If an AT-A46 module is present before and after the software upgrade to Version 3.3.1, you must perform the following steps after completing the upgrade to insure the proper operation of the AT-A46 Auto-Negotiation port feature: Individually set the AT-A46 port settings to Auto 1000. (If the switch contains two ATA46 modules, configure each separately rather than simultaneously.) Reboot the switch.

A switch must have an IP address in order for you to upload or download an image file or configuration file to the unit using TFTP. This applies whether the TFTP upload or download is done when directly connected to the switch through the RS232 Terminal Port or when connected to the device through enhanced stacking. This does not apply to switch-toswitch downloads. The PathCost parameter in the SET STP PORT and SET RSTP PORT commands has been changed to PortCost . You must enter both a user name and password when starting a local, Telnet, or web browser management session. In some earlier AT-S39 software versions, you only had to enter a password. The user name for manager access is manager and the default password is friend The user name for operator access is operator and the default . password is operator Logging in as manager allows you to change a switchs parameters. . Logging in as operator allows you to view the settings, but not change any values. The 10/100/1000 Base-T twisted pair port on the AT-8026T switch and AT-A46 expansion card has two Auto-Negotiation settings: Auto_1000 and Auto_10_100. If you want the port to operate at 10 or 100 Mbps, you can choose Auto_10_100 or set the speed and duplex mode manually. If you want the port to operate at 1000 Mbps, you must select Auto_1000, which is the default setting. Additionally, you must reset the switch whenever you change the speed of a 10/100/1000 Base-T twisted pair port from 10 or 100 Mbps to 1000 Mbps. The Xmodem option for uploads and downloads is now hidden when you remotely manage a switch. Xmodem is only available from a local management session. Mirroring multiple ports to a port mirror can cause the mirror port to lose its link to the network analyzer. To avoid this problem, you should limit the number of source ports to be mirrored at any one time. The range for the maximum number of multicast groups has been changed to 1 to 255. The default value is now 64. The enhanced stacking feature of the AT-8000 Series switch uses the IP address 172.16.16.16. You must not assign this address to any device on your subnet if you intend to use the enhanced stacking feature.

613-50678-00 Rev A

Allied Telesyn, Inc.

AT-S39 Version 3.3.1 Management Software Release Notes

To change the speed of the port on an AT-A46 expansion module, Allied Telesyn recommends disabling the port first, and then reenabling it after you have changed its speed. STP port cost for the port on the AT-A46 module must be set manually. The default subnet mask has been changed from 255.255.0.0 to 0.0.0.0. When View Multicast Hosts List or View Multicast Routers List is selected in the IGMP System Monitoring web page, a browser child window displays a list of up to eight hosts or routers per page. If there are more than eight hosts or routers, a Next button is displayed in the child window and the user can view the next page of hosts or routers in groups of up to eight until the end of the list is reached. To go back to the beginning of the list or to view a previous page in the list, the user must do the following: 1. 2. 3. 4. Close the child window. Refresh the browser parent window (IGMP System Monitoring). Choose the View Multicast Hosts List or View Multicast Routers List radio button. Select the View button.

To change the stacking status of a switch (for instance, from slave to master), you must start a local management session on the switch, or assign the switch an IP address and then start a remote management session directly with the unit. You cannot change a switchs stacking status through enhanced stacking. You must manually set a ports MDI setting whenever you manually set a ports speed or duplex mode. The Auto-MDI setting is available only when a port is auto-negotiating speed and duplex mode. The default setting is MDI-X for a manually configured port. During boot up, the switch displays the following prompt: Press <CTRL>B to go to Boot Prompt. This prompt is intended for manufacturing purposes only. Should you inadvertently display the boot prompt (=>), type boot and press Return to start the switchs software.

Disconnecting and then reconnecting a management station from a switch port during a Telnet or web browser management session automatically ends the management session. You cannot configure a GBIC slot if no GBIC module is installed. Loading the AT-S39 firmware by the switch after a reset or a power cycle now takes between 30 to 40 seconds to complete. The AT-S39 management software adds validation information to a switchs configuration file when the file is uploaded to a workstation or server. The software will check for this validation when a configuration file is downloaded onto a switch. If the validation information is missing in the configuration file, the download is canceled. This feature is to prevent corrupted or invalid configuration files from being downloaded onto a switch.

613-50678-00 Rev A

Allied Telesyn, Inc.

AT-S39 Version 3.3.1 Management Software Release Notes

Note: This feature first appeared in Version 3.0.1. Configuration files from AT-8000 Series switches running earlier versions of the management software cannot be downloaded onto a switch running Version 3.0.1 or later. The AT-S39 management software supports the following RMON groups through SNMP: Group 1 - Statistics Group 2 - History Group 3 - Alarm Group 9 - Event

Managing an AT-8000 switch containing this version of AT-S39 using SNMP requires the following MIB versions or later. atiSwitch.mib Version 2.9 atiStackInfo.mib Version 1.1

The RSTP menus might display the Save Configuration Changes selection even when no changes have been made to the switchs parameter settings. Choosing the selection in such a situation does not alter any existing parameter settings. Continually updating the local management screen can cause the switch to delay the completion of STP or RSTP convergence. A Denial of Service attack on a switch running in the Limited security mode can cause the switch to delay tasks, such as RSTP convergence, until the attack ends. Management sessions might also be suspended, making it impossible to manage the switch. You cannot set a 10/100/1000Base-T port directly to Auto-MDI. Instead, you must do it indirectly by changing the speed of the port to either 10_100_Auto or 1000_Auto. The Balun bad cable detection feature has been modified. This feature is now supported only on 10 or 100 Mbps twisted pair ports operating in full-duplex mode. The switch may take up to twice the host/router timeout value to remove inactive host nodes and multicast routers from its IGMP table. The switch may take up to twice the MAC address aging time to remove inactive MAC addresses from the MAC address table. The port number for static MAC addresses is displayed as 0 when displaying MAC addresses by port number. The selection View by VLAN ID in the web browser management session does not display static MAC addresses. The equivalent selection in a local or Telnet management session, View MAC Addresses by VLAN ID, does display static MAC addresses.

613-50678-00 Rev A

Allied Telesyn, Inc.

AT-S39 Version 3.3.1 Management Software Release Notes

You cannot add static MAC addresses to a GBIC expansion slot from a web browser management session if no GBIC module is installed. Removing an untagged port from the Default_VLAN without assigning it to another VLAN will result in the port being an untagged member of no VLAN. Downloading a configuration file from a master to a slave switch deletes the slave switchs name, administrators name and comments. This information can be reentered once the configuration file is downloaded.

613-50678-00 Rev A

Allied Telesyn, Inc.

AT-S39 Version 3.3.1 Management Software Release Notes

Contacting Allied Telesyn Technical Support This section provides Allied Telesyn contact information for technical support as well as sales or corporate information. Online Support You can request technical support online by accessing the Allied Telesyn Knowledge Base from the following web site: www.alliedtelesyn.com/kb. You can use the Knowledge Base to submit questions to our technical support staff and review answers to previously asked questions. Email and Telephone Support For Technical Support via email or telephone, refer to the Support & Services section of the Allied Telesyn web site: http://www.alliedtelesyn.com. For Sales or Corporate Information You can contact Allied Telesyn for sales or corporate information at our web site: http://www.alliedtelesyn.com. To find the contact information for your country, select Contact Us then select Worldwide Contacts. Obtaining Management Software Updates New releases of management software for our managed products can be downloaded from either of the following Internet sites: Allied Telesyn web site: http://www.alliedtelesyn.com Allied Telesyn FTP server: ftp://ftp.alliedtelesyn.com

To download new software from the Allied Telesyn FTP server from your workstations command prompt, you will need FTP client software and you will be asked to log in to the server. Enter anonymous as the user name and your email address for the password.

Allied Telesyn, Inc. 3200 North First Street, San Jose, CA 95134 USA Copyright 2004 Allied Telesyn, Inc. All rights reserved. No part of this publication may be reproduced without prior written permission from Allied Telesyn, Inc.

613-50678-00 Rev A

Allied Telesyn, Inc.