3Com 11.1 manual IBM-Related Feature Settings for Token Ring Ports

Page 36

Notes and Cautions 37

These messages do not indicate a problem and can be ignored.

IBM-Related Services in IBM-related services such as DLSw and APPN are affected by parameter settings in Token Ring the BRidge, SR, and LLC2 Services. Table 12 shows the required settings in source route (SR), source route transparent (SRT), and transparent bridging environments for each of the IBM-related services. When a NETBuilder bridge/router token-ring port is configured for both an IBM service such as DLSw and transparent bridging

or SRT bridging, connectivity problems and frame copy errors can occur. For this reason, 3Com recommends configuring token ring ports for source route only when possible.

In Table 12, DLSw refers to data link switching, and LNM refers to LAN Net Manager. The settings are shown in abbreviated form. 3Com-recommended configurations are shaded and shown in bold.

Table 12 IBM-Related Feature Settings for Token Ring Ports

 

Port

Source Route

Transparen

 

Route

 

 

 

Configurat

Bridging

t Bridging

Bridging

Discovery

LLC2 CONTrol

Frame Copy

Services

ion

(-SR SRB)

(-BR TB)

(-BR CONT)

(-SR RD)

(-LLC2 CONT)

Errors

 

 

 

 

 

 

 

 

Bridging only

SR

SRB

NTB

B

NoLLC2

Disable

None

 

 

 

 

 

 

 

 

Bridging only

SRT

SRB

TB

B

NoLLC2

Disable

Low # Possible

Bridging only

T

NSRB

TB

B

NoLLC2

Disable

Low # Possible

 

 

 

 

 

 

 

 

LNM

SR

SRB

NTB

B

LLC2

Enable

None

 

 

 

 

 

 

 

 

DLSw

SR

SRB

NTB

NB B

LLC2

Enable

None

 

 

 

 

 

 

 

 

DLSw

SRT

SRB

TB

NB* B*

LLC2

Enable

High # Possible

DLSw

T

NSRB

TB

NB* B*

NoLLC2

Enable

High # Possible

APPN

SR

SRB

NTB

NB B

LLC2

Disable

None

 

 

 

 

 

 

 

 

APPN

SRT

SRB

TB

NB B

LLC2

Disable

None

APPN

T

NSRB

TB

NB B

LLC2

Disable

None

Default Setting

SRT

SRB

TB

NB

NoLLC2

Disable

None

*3Com recommends that you disable global bridging for this configuration. However, with global bridging disabled, the token-ring hardware does not filter unwanted transparent packets. The token-ring hardware copies each transparent packet for processing by the NETBuilder software. This can generate many frame copy errors (see Token Ring Frame Copy Errors below for more information.) If you are seeing many Frame Copy Errors, consider setting global bridging on, which allows the hardware to learn and filter unwanted transparent packets. Since DLSw cannot block bridging loops, you must insure that none exist. As an alternative, you can prevent the bridge from forwarding by entering the following command: SETDefault -BRidge CONTrol = NoForward. The NoForward parameter allows the hardware to filter unwanted transparent packets, allows DLSw to send and receive LLC2 SNA and NetBIOS packets, but prevents these and other packets from bridging.

The row in Table 12 labeled DLSw with port configuration SR represents DLSw in a source-route-only port configuration. The entries in this row expand to the following NETBuilder software configuration syntax:

SETDefault -BRidge CONTrol = Bridge NoBridge

SETDefault !<port> -SR SrcRouBridge = SrcRouBridge

SETDefault !<port> -BRidge TransparentBridge = NoTransparentBridge

SETDefault !<port> -SR RingNumber = <number> (1–4095) 0x<number> (1-FFF)

SETDefault !<port> -SR BridgeNumber = <number> (0-15) 0x<number> (0-F)

SETDefault !<port> -SR RouteDiscovery = LLC2

SETDefault !<port> -LLC2 CONTrol = Enable

In this configuration, global bridging (-BRidge CONTrol) can be set to either Bridge or NoBridge. Transparent bridging is disabled on token ring ports, source routing

Image 36
Contents NETBuilder Family Software Version 11.1 Release Notes 3Com Corporation Bayfront PlazaSanta Clara, California 95052-8145Contents Web Link Documentation Path Zmodem Time Out Known Problems Bcmfdinteg File Conversion ConsiderationsCPU Utilization Statistic Deleting ATM Neighbors Web Link Login Support NAT Proxy ARP RouteDiscovery Sdhlc Half-Duplex ModeDisplaying Configuration Profiles Dynamic Paths Limitations Accm Not ConfigurableAuthentication Header AH CONFigurationConfiguring IPsec How IPsec Works PoliciesStatPollInterval Netbuilder Software Version Release Notes EncryptionPackages Contact 3Com or your network supplierNew Products Supported PC Flash Memory CardsLists 3Comapproved vendors of the PC flash memory card Approved 20 MB Flash Memory CardsNew Features VPN Features Layer Two Tunneling ProtocolApproved Dram SIMMsExtensible Authentication Protocol Additional RAS EnhancementsDhcp Proxy Encryption StrengthVirtual Circuit Prioritization Summary of Encryption StrengthsEncryption Key Algorithm Package ID LengthIP Version 6 Phase Firewall EnhancementsBGP-4 Enhancements Ospf Not-So-Stubby-Area Nssa Frame Relay PVC Q.933 SupportData Over Voice B-Channel Isdn Specification Boundary Router Remote LAN DetectionFeatures Ascii Boot Token Ring in Fast Ethernet Tife56/64K CSU/DSU External Loopback NETBuilder Web Link ImprovementsUpgrade Management Utilities and NETBuilder Upgrade Link Application NotesFlash Load Placing a Data OverExample Toggle the respective paths. TypeNew Features Application Notes NETBuilder II Software Features SoftwareVersion 11.1 for the NETBuilder bridge/router platforms Other Features NETBuilder II Firmware RequirementsNETBuilder II Firmware Requirements IBM ProtocolsSuperStack II NETBuilder SI Software Features 438 458SuperStack II NETBuilder Ethernet and Token Ring Features Models Features Token RingMemory Requirements OfficeConnect NETBuilder Software Features Models Features Token Ring WAN ProtocolsModel and Software Package 112 132 111 145 131112 131 120 132 Additional OfficeConnect NETBuilder Models Software Features 117 137 116136 Memory Requirements Utilities for the Solaris 2.5 platforms Ruuhp111.1Utilities for the HP-UX 10.x platforms Ruuaix111.1NETBuilder Upgrade Management Utilities Known Issues Etc/passwd. You must add an entry can be ignoredPROfile Service Bridge Static RoutesDLSw SVCsDialog boxes will be fully visible without scrolling Token Ring a non-source routed framePorts in DCE Mode Supported Asynchronous ModemsSupported Synchronous Modem ModemsHistory, the PPP link does not come up IBM-Related Feature Settings for Token Ring Ports Token Ring Frame Copy Errors Frame Copy Errors under LAN Net Manager3Com Bridge/Routers and Supported Features Known Problems Interrupt the boot cycle and enter monitor mode This systemValue SHow !profileID -PROFILE CONFiguration Notation Known Problems ADD !v1 -PPP ARU user, password Limitations Processor/Frame Relay Relay port is Access for LLC2 Traffic Number of TCP ConnectionsFront-End IBM Boundary RoutingSpeed Multilink PPPPort running PPP Snmp ManagementService Point Source-Route Sdlc Adjacent LinkStations for Appn Source RouteUsing Netbuilder Family Software Update PagesConfiguring Ipsec Procedures in this section describe how to configure IPsecConfiguring IPsec Replace with this chapterCreating an Encryption Policy On bridge/router, 2 enterCreating a Security Policy On bridge/router 2, enterFor example, to create a new encryption key set, enter Manual key information, useTo disable Ipsec on port 1, enter Confidentiality and data integrityEnable Layer 2 Tunnelling by entering Assign an IP address to the tunnel virtual port by enteringCreate a route between the two tunnel endpoints by entering Configure an Ipsec policy/security association by enteringEnable Layer 2 Tunnelling Pptp by entering How IPsec WorksCreate a route between two tunnel endpoints by entering Intercepted and viewedHow IPsec Works Configuring Ipsec Reference for Netbuilder Family Ipsec Service Parameters CONFigurationIpsec Service Parameters and Commands CONTrolKeySet ManualKeyInfo ManualPOLicyIs assigned dynamically using Ipcp or Dhcp Policyname Name you assign to the policy you are addingBe all or ALL Srcipaddr/maskEncrypt phases, and the second 8 bytes for the decrypt Phase of the encrypt-decrypt-encryptSpecifies Cipher Block Chaining mode of the Data 239.255.255.254Ipsec Service Parameters Rsvp Service Parameters MaxFlowRate REQuestRESerVation UDPEndcapSR Service Parameters AllRoutesPlace this page in front of Chapter ROUte ROUte SR Service Parameters SYS Service Parameters SYS Service Parameters Weblink Service Parameters StatPollIntervalWeblink Service Parameters