Juniper Networks EX2500 manual Bridge Protocol Data Units BPDUs, Bridge Priority

Page 46

EX2500 Ethernet Switch Configuration Guide

The relationship between port, trunk groups, VLANs, and spanning trees is shown in Table 9.

Table 9: Ports, Trunk Groups, and VLANs

Switch Element

Belongs to

 

 

 

 

Port

Trunk group

 

 

or

 

 

One or more VLANs

 

 

 

 

Trunk group

One or more VLANs

 

 

 

 

VLAN (non-default)

RSTP: All VLANs in STG 1

 

 

PVRST+: One VLAN per Spanning Tree Group

 

 

MSTP: Multiple VLANs per Spanning Tree Group

 

 

 

 

 

 

 

NOTE: Due to Spanning Tree’s sequence of discarding, learning, and forwarding, lengthy delays might occur. You can use a port’s spanning-tree edge command to permit a port that participates in Spanning Tree to bypass the Discarding and Learning states, and enter directly into the Forwarding state.

Bridge Protocol Data Units (BPDUs)

To create a spanning tree, the switch generates a configuration Bridge Protocol Data Unit (BPDU), which it then forwards out of its ports. All switches in the Layer 2 network participating in the spanning tree gather information about other switches in the network through an exchange of BPDUs.

A BPDU is a 64-byte packet that is sent out at a configurable interval, which is typically set for 2 seconds. The BPDU is used to establish a path, much like a “hello” packet in IP routing. BPDUs contain information about the transmitting bridge and its ports, including bridge MAC address, bridge priority, port priority, and path cost.

The generic action of a switch upon receiving a BPDU is to compare the received BPDU to its own BPDU that it will transmit. If the received BPDU is better than its own BPDU, it will replace its BPDU with the received BPDU. Then, the switch uses this information to block any necessary ports.

Determining the Path for Forwarding BPDUs

When determining which port to use for forwarding and which port to block, the EX2500 switch uses information in the BPDU, including each bridge ID. A technique based on the “lowest root cost” is then computed to determine the most efficient path for forwarding.

Bridge Priority

The bridge priority parameter controls which bridge on the network is the STG root bridge. To make one switch become the root bridge, configure the bridge priority lower than all other switches and bridges on your network. The lower the value, the higher the bridge priority. Use the following command to configure the spanning-tree bridge priority:

ex2500(config)# spanning-tree stp 1 bridge priority <0-61440, in steps of 4096>

32„ Spanning Tree Overview

Image 46
Contents Configuration Guide North Mathilda Avenue Sunnyvale, CAIi „ Table of Contents Chapter VLANs Chapter Ports and Trunking Rmon Overview Rmon Group 1-Statistics Rmon Group 2-HistoryAppendixes Port Mirroring Overview Configuring Port MirroringIndexes Default Vlan Settings Port-Based Vlan AssignmentPage List of Tables EX2500 Ethernet Switch Configuration Guide „ List of Tables Audience About This GuideObjectives Supported PlatformsDocumentation Conventions Icon Meaning DescriptionDocumentation Feedback List of Technical PublicationsRequesting Technical Support Self-Help Online Tools and Resources Opening a Case with JtacEX2500 Ethernet Switch Applications Page Accessing the Switch Configuring the Management InterfaceDynamic Host Configuration Protocol Configure the default gateway. Enable the gatewayUsing Telnet Using the EX2500 Web Device ManagerConfiguring EX2500 Web Device Manager Access via Http Configuring EX2500 Web Device Manager Access via HttpsUsing Snmp SNMPv1, SNMPv2User Configuration Default ConfigurationSNMPv3 SNMPv2 Trap Host Configuration Configuring Snmp Trap HostsSNMPv1 Trap Host Configuration Configure an entry in the notify tableSecuring Access to the Switch SNMPv3 Trap Host ConfigurationConfiguring Radius on the Switch Radius Authentication and AuthorizationHow Radius Authentication Works Configure the Radius secretRadius Authentication Features in the EX2500 Switch Switch User Accounts Radius Attributes for EX2500 User PrivilegesHow TACACS+ Authentication Works TACACS+ AuthenticationTACACS+ Authentication Features in the EX2500 Switch „ starttime „ stoptime „ elapsedtime „ disccause Configuring TACACS+ Authentication on the Switch Command Authorization and LoggingConfigure the TACACS+ secret and second secret Secure Shell Configuring SSH Features on the SwitchGenerating RSA Host and Server Keys for SSH Access SSH Encryption of Management MessagesEnd User Access Control SSH Integration with Radius and TACACS+ AuthenticationConsiderations for Configuring End User Accounts User Access ControlListing Current Users Logging In to an End User AccountVLANs Vlan OverviewVlan Numbers „ Port configurationVLANs and Port Vlan ID Numbers Pvid NumbersIllustrates the default Vlan settings on the switch Vlan TaggingDefault Vlan Settings Port-Based Vlan Assignment Vlan Configuration Rules Vlan Topologies and Design ConsiderationsMultiple VLANs Configuration Example Multiple VLANs example in is described in TableEnable tagging on uplink ports that support multiple VLANs Private VLANs Private Vlan PortsConfigure a secondary Vlan and map it to the primary Vlan Private Vlan Configuration GuidelinesPrivate Vlan Configuration Example Verify the configurationSpanning Tree Protocol Spanning Tree OverviewDetermining the Path for Forwarding BPDUs Bridge Protocol Data Units BPDUsBridge Priority Port Priority Spanning Tree Group Configuration GuidelinesChanging the Spanning Tree Mode Port Path CostRules for Vlan Tagged Ports Creating a VlanAdding and Removing Ports from STGs Rapid Spanning Tree Protocol Port State ChangesPort Type and Link Type Rstp Configuration GuidelinesRstp Configuration Example Edge PortWhy Do We Need Multiple Spanning Trees? Default Spanning Tree ConfigurationPer Vlan Rapid Spanning Tree Pvrst Configuration Guidelines Configuring PvrstMstp Region Mstp Configuration GuidelinesMultiple Spanning Tree Protocol Common Internal Spanning TreeMultiple Spanning Tree Groups Configuration Example Implementing Multiple Spanning Tree GroupsFast Uplink Convergence VlanConfiguration Guidelines Configuring Fast Uplink ConvergenceTrunking Overview Ports and TrunkingStatistical Load Distribution Before Configuring Static Trunks Built-In Fault ToleranceTrunk Group Configuration Rules Port Trunking Configuration Example Port Trunk Group Configuration ExampleFollow these steps on the EX2500 switch Define a trunk group „ Destination MAC Dmac Configurable Trunk Hash AlgorithmLink Aggregation Control Protocol „ Destination IP DIP48 „ Link Aggregation Control Protocol Optionally Reducing Lacp Timeout Lacp Configuration GuidelinesConfiguring Lacp Set the Lacp modeEx2500config-if# lacp timeout short ex2500config-if# exit Quality of Service QoS OverviewUsing ACL Filters COSTo delete a MAC Extended ACL MAC Extended ACLsIP Standard ACLs To delete an IP Standard ACLIP Extended ACLs To delete an IP Extended ACLUnderstanding ACL Priority TCP/UDPViewing ACL Statistics ACL Configuration ExamplesAssigning ACLs to a Port ACL Example 1-Blocking Traffic to a HostACL Example 3-Blocking Http Traffic Add the ACL to a portACL Example 4-Blocking All Except Certain Packets Assign the ACLs to a portConfiguring Storm Control Using Storm Control FiltersBroadcast Storms Using Dscp Values to Provide QoS Differentiated Services ConceptsPer Hop Behavior Assured Forwarding Drop Precedence ClassQoS Levels Use the following command to perform Dscp mappingDscp Mapping Using 802.1p Priority to Provide QoS Shows the priority bits in a VLAN-tagged packetQueuing and Scheduling Remote Monitoring Rmon OverviewConfigure the Rmon statistics on a port Rmon Group 1-StatisticsThis configuration enables Rmon History collection on port Configuring Rmon HistoryConfigure the Rmon History parameters for a port Rmon Group 2-HistoryConfiguring Rmon Alarms Rmon Group 3-AlarmsAlarm MIB Objects Configure the Rmon Alarm parameters to track Icmp messagesEx2500config# rmon event 110 type log-only Rmon Group 9-EventsPage Igmp Igmp SnoopingFastLeave Igmp Snooping Configuration Example IGMPv3 SnoopingStatic Multicast Router Ex2500# show ip igmp groupsHigh Availability Through Uplink Failure Detection High Availability OverviewSpanning Tree Protocol with UFD UFD Configuration Guidelines Failure Detection PairUFD Configuration Example Monitoring UFDPage Appendixes EX2500 Ethernet Switch Configuration Guide 80 „ Appendixes „ Port Mirroring Overview on „ Configuring Port Mirroring on Port Mirroring OverviewConfiguring Port Mirroring Indexes „ Index onEX2500 Ethernet Switch Configuration Guide 84 „ Indexes Index NumericsPhysical. See switch ports Management interface, configuringMulti-links between switches, port trunking Internet Group Management Protocol. See IgmpSecurity Quality of Service. See QoSQoS Segmentation. See IP subnets Segments. See IP subnetsVirtual Local Area Networks. See VLANs Example showing multiple VLANs