Ports and Trunking | Blade ICE G8000 guide

RackSwitch G8000 Application Guide

Chapter 3: VLANs	47
Overview 48
VLANs and Port VLAN ID Numbers		49
VLAN numbers	49
PVID numbers	50
VLAN Tagging 51
VLAN Topologies and Design Considerations			55
VLAN configuration rules 55
Multiple VLANs with Tagging Adapters			56
VLAN configuration example		58
Private VLANs 59
Private VLAN ports 59
Configuration guidelines 60
Configuration example 60

Chapter 4: Ports and Trunking 63

Overview 64

Statistical load distribution 64

Built-In fault tolerance 64

Before you configure static trunks 65

Static trunk group configuration rules 65

Port Trunking Example 67

Configurable Trunk Hash Algorithm 69

Link Aggregation Control Protocol 70

LACP configuration guidelines 72

Configuring LACP 72

Chapter 5: Spanning Tree 73

Overview 74

Bridge Protocol Data Units (BPDUs) 75

Spanning Tree Group configuration guidelines 76 Rapid Spanning Tree Protocol 80

Port state changes 80

Port Type and Link Type 81 RSTP configuration guidelines 81 RSTP configuration example 82

Per VLAN Rapid Spanning Tree 83 Default Spanning Tree configuration 83

4	BMD00041, November 2008

Image 4

Blade ICE G8000 manual Ports and Trunking

Contents

Application Guide RackSwitch G8000 Application Guide Contents Ports and Trunking Quality of Service Appendix a Troubleshooting Figures RackSwitch G8000 Application Guide Tables RackSwitch G8000 Application Guide Preface Who Should Use This Guide What You’ll Find in This Guide Typographic Conventions Typographic Conventions How to Get Help Accessing the Switch Log on to the switch Enter IP interface mode Configuring an IP InterfaceConfigure the default gateway. Enable the gateway Using Telnet Configuring BBI access via Http Using the Browser-Based InterfaceConfiguring BBI access via Https RS G8000 config# access https import-certificate Using Snmp Default configurationSnmp v1 Snmp User configuration Privacy-password 22 „ Accessing the Switch Configuring Snmp Trap Hosts SNMPv2 trap host configurationConfigure an entry in the notify table SNMPv1 trap host SNMPv3 trap host configuration Securing Access to the Switch Radius Authentication and Authorization How Radius authentication works Configuring Radius Configure the Radius secret and enable the feature Radius authentication features in Blade OS Switch User Accounts Radius Attributes for G8000 user privileges TACACS+ Authentication How TACACS+ authentication works TACACS+ authentication features in Blade OS Authorization Command authorization and logging Accounting Configuring TACACS+ Authentication Configure the TACACS+ secret and second secret Secure Shell Configuring SSH features on the switchSSH encryption of management messages Generating RSA Host and Server Keys for SSH access SSH Integration with RADIUS/TACACS+ Authentication Considerations for configuring End User Accounts End User Access ControlUser Access Control Listing current Users Logging into an End User account RackSwitch G8000 Application Guide 38 „ Accessing the Switch Port-based Network Access Control Extensible Authentication Protocol over LAN 802.1X authentication process Port Unauthorized EAPoL message exchange 802.1X port states „ Unauthorized„ Authorized „ Force Unauthorized Supported Radius attributes Support for Radius Attributes Configuration guidelines BMD00041, November VLANs Overview Vlan numbers VLANs and Port Vlan ID NumbersViewing VLANs Viewing and Configuring PVIDs Pvid numbers Vlan Tagging 1Default Vlan settings 2Port-based Vlan assignment 4802.1Q tag assignment Vlan configuration rules Vlan Topologies and Design Considerations Multiple VLANs with Tagging Adapters Component Description Vlan Enable tagging on uplink ports that support multiple VLANs Vlan configuration exampleConfigure the VLANs and their member ports Private VLANs Private Vlan ports Configuration example Select a Vlan and define the Private Vlan type as primary Configure a secondary Vlan and map it to the primary Vlan Verify the configuration RackSwitch G8000 Application Guide 62 „ VLANs Ports and Trunking Built-In fault tolerance Statistical load distribution Before you configure static trunks Static trunk group configuration rules 66 „ Ports and Trunking Port Trunking Example Follow these steps on the G8000 Repeat the process on the other switch Examine the trunking information on each switch Configurable Trunk Hash Algorithm „ Source IP SIP + Destination IP DIP Admin key Link Aggregation Control Protocol RS G8000 # show lacp information Configuring Lacp Lacp configuration guidelinesSet the Lacp mode Spanning Tree 1Ports, Trunk Groups, and VLANs Bridge Protocol Data Units BPDUs Determining the Path for Forwarding BPDUs Spanning Tree Group configuration guidelines Changing the Spanning Tree mode Assigning a Vlan to a Spanning Tree Group Rules for Vlan Tagged ports Creating a VlanAdding and removing ports from STGs RackSwitch G8000 Application Guide Rapid Spanning Tree Protocol Port state changes Rstp configuration guidelines Port Type and Link TypeEdge Port Link Type Rstp configuration example Configure Rapid Spanning Tree Default Spanning Tree configuration Per Vlan Rapid Spanning Tree Why do we need multiple Spanning Trees? 1Two VLANs on one Spanning Tree Group Configuring Pvrst Pvrst configuration guidelinesSet the Spanning-tree mode to PVRST+ Mstp Region Multiple Spanning Tree ProtocolCommon Internal Spanning Tree Mstp configuration guidelines Passing Vlan Blocking Vlan Configuring Multiple Spanning Tree Groups Configure Multiple Spanning Tree Protocol 90 „ Spanning Tree Configuring Fast Uplink Convergence Fast Uplink Convergence RackSwitch G8000 Application Guide 92 „ Spanning Tree Quality of Service COS Using ACL Filters MAC Extended ACLs IP Standard ACLs IP Extended ACLs 1Well-known protocol types Understanding ACL priority Assigning ACLs to a port Use the following command to view ACL statistics Viewing ACL statistics ACL configuration examples Configure an Access Control ListExample Assign the ACL to port 100.10.1.0 Add the ACL to port Add the ACL to a port Configure IP ACLs to deny all other traffic Configure a MAC ACL to deny all other traffic Assign the ACLs to a port Configuring storm control Using Storm Control FiltersBroadcast storms Using Dscp Values to Provide QoS Differentiated Services Concepts RackSwitch G8000 Application Guide Per Hop Behavior Drop Class Precedence Default QoS Service Levels QoS Levels Use the following command to perform DSCP-to-802.1p mapping DSCP-to-802.1p mapping Using 802.1p Priority to Provide QoS 3Layer 2 802.1q/802.1p Vlan tagged packet Configure a port’s default 802.1p priority value to 802.1p configuration exampleQueuing and Scheduling Remote Monitoring Overview Configuring Rmon statistics Enable Rmon on a portConfigure the Rmon statistics on a port Rmon group 1-Statistics Rmon group 2-History History MIB Object ID Rmon group 3-Alarms Configuring Rmon HistoryConfigure the Rmon History parameters for a port View Rmon History for the port Alarm MIB objects Configuring Rmon Alarms Configure Rmon events Configure the Rmon Alarm parameters to track Icmp messagesConfigure the Rmon event parameters Rmon group 9-Events Basic IP Routing IP Routing Benefits Routing Between IP Subnets 1The Router Legacy Network 122 „ Basic IP Routing 2Switch-Based Routing Topology Example of Subnet Routing Using VLANs to segregate Broadcast Domains 1Subnet Routing Example IP Address Assignments Add the switch ports to their respective VLANs 3Subnet Routing Example Optional Vlan Ports Enable IP routing Configure the default gateway to the routers’ addressesAssign a Vlan to each IP interface Dynamic Host Configuration Protocol RackSwitch G8000 Application Guide 128 „ Basic IP Routing Igmp Igmp Snooping FastLeave IGMPv3 Snooping Igmp Snooping configuration example Configure Igmp SnoopingEnable IGMPv3 Snooping optional Add VLANs to Igmp Snooping View dynamic Igmp information RS G8000# show ip igmp groups Configure a Static Multicast Router Static Multicast Router High Availability Uplink Failure Detection 1Uplink Failure Detection example Spanning Tree Protocol with UFD Configuration guidelines Failure Detection Pair Monitoring UFD Configuring UFDTurn on Uplink Failure Detection UFD Troubleshooting Monitoring Ports Figure A-1Monitoring Ports Configuring Port Mirroring Enable port mirroringView the current configuration Port Mirroring behavior BMD00041, November Index Numerics Igmp TACACS+