Manuals / Blade ICE / Computer Equipment / Computer Accessories

Blade ICE G8000 manual

Models: G8000

1 145

Page 66

RackSwitch G8000 Application Guide

All trunk members must be in the same Spanning Tree Group (STG) and can belong to only one Spanning Tree Group (STG). However if all ports are tagged, then all trunk ports can belong to multiple STGs.

When a trunk is enabled, the trunk’s Spanning Tree participation setting takes precedence over that of any trunk member.

You cannot configure a trunk member as a monitor port in a port-mirroring configuration.

Trunks cannot be monitored by a monitor port; however, trunk members can be moni- tored.

All ports in static trunks must be have the same link configuration (speed, duplex, flow control).

66 Chapter 4: Ports and Trunking

BMD00041, November 2008

Page 66

Image 66

Contents

Version RackSwitch G8000Application Guide Part Number BMD00041, NovemberRackSwitch G8000 Application Guide Chapter 2 Port-based Network Access Control ContentsChapter 1 Accessing the Switch PrefaceChapter 4 Ports and Trunking Chapter 5 Spanning TreeChapter 6 Quality of Service Chapter 7 Remote MonitoringChapter 9 IGMP Appendix A TroubleshootingChapter 8 Basic IP Routing Chapter 10 High AvailabilityFigures RackSwitch G8000 Application Guide BMD00041, NovemberTables RackSwitch G8000 Application Guide BMD00041, NovemberPreface Who Should Use This GuideWhat You’ll Find in This Guide Symbol Typographic ConventionsRackSwitch G8000 Application Guide Table 1 Typographic ConventionsHow to Get Help „ “Configuring an IP Interface” on page „ “Using Telnet” on page Accessing the SwitchCHAPTER „ “Using the Browser-Based Interface” on page „ “Using SNMP” on page4. Configure the default gateway. Enable the gateway Configuring an IP Interface1. Log on to the switch 2. Enter IP interface mode Command ReferenceUsing Telnet Using the Browser-Based Interface Configuring BBI access via HTTPConfiguring BBI access via HTTPS The BBI is organized at a high level as follows SNMP v1 Using SNMPDefault configuration SNMPUser configuration RS G8000 config# snmp-server group 5 group-name admingrp RackSwitch G8000 Application GuideRS G8000 config# snmp-server group 5 user-name admin 22 „ Chapter 1 Accessing the SwitchSNMPv1 trap host Configuring SNMP Trap HostsSNMPv2 trap host configuration 1. Configure an entry in the notify tableSNMPv3 trap host configuration „ “TACACS+ Authentication” on page Securing Access to the Switch„ “RADIUS Authentication and Authorization” on page „ “End User Access Control” on pageRADIUS Authentication and Authorization How RADIUS authentication worksConfiguring RADIUS 2. Configure the RADIUS secret and enable the featureRADIUS authentication features in Blade OS Vendor-supplied Switch User AccountsRADIUS Attributes for G8000 user privileges Vendor-suppliedTACACS+ Authentication How TACACS+ authentication worksTACACS+ authentication features in Blade OS AuthorizationRS G8000 config# tacacs-server privilege-mapping Command authorization and logging AccountingRS G8000 config# tacacs-server command-authorization 2. Configure the TACACS+ secret and second secret Configuring TACACS+ AuthenticationRS G8000 config# tacacs-server command-logging 4. Configure the number of retry attempts, and the timeout periodConfiguring SSH features on the switch Secure ShellSSH encryption of management messages RS G8000 config# ssh generate-host-key Generating RSA Host and Server Keys for SSH accessSSH Integration with RADIUS/TACACS+ Authentication RS G8000 config# ssh generate-server-keyUser Access Control End User Access ControlConsiderations for configuring End User Accounts Setting up User IDsLogging into an End User account Defining a User’s access levelListing current Users Enabling or Disabling a UserRackSwitch G8000 Application Guide 38 „ Chapter 1 Accessing the SwitchBMD00041, November „ “802.1X authentication process” on page Port-based Network Access Control„ “Extensible Authentication Protocol over LAN” on page „ “Configuration guidelines” on pageExtensible Authentication Protocol over LAN 802.1X authentication process Port UnauthorizedPort Authorized EAPoL message exchange „ Authorized 802.1X port states„ Unauthorized „ Force Unauthorized44 „ Chapter 2 Port-based Network Access Control Supported RADIUS attributesRackSwitch G8000 Application Guide Table 2 Support for RADIUS AttributesConfiguration guidelines RackSwitch G8000 Application Guide 46 „ Chapter 2 Port-based Network Access ControlBMD00041, November „ “VLANs and Port VLAN ID Numbers” on page „ “VLAN Tagging” on page VLANsCHAPTER „ “VLAN Topologies and Design Considerations” on pageOverview VLANs and Port VLAN ID Numbers VLAN numbersViewing VLANs Viewing and Configuring PVIDs PVID numbersVLAN Tagging Figure 3-1 Default VLAN settings BS45010AFigure 3-2 Port-based VLAN assignment Figure 3-3 802.1Q tagging after port-based VLAN assignmentBefore untagged packet Figure 3-4 802.1Q tag assignmentFigure 3-5 802.1Q tagging after 802.1Q tag assignment 16 bitsVLAN configuration rules VLAN Topologies and Design ConsiderationsMultiple VLANs with Tagging Adapters ComponentDescription Component Description2. Enable tagging on uplink ports that support multiple VLANs VLAN configuration example1. Enable VLAN tagging on server ports that support multiple VLANs 3. Configure the VLANs and their member portsPrivate VLANs Private VLAN portsConfiguration example Configuration guidelines1. Select a VLAN and define the Private VLAN type as primary RackSwitch G8000 Application Guide 2. Configure a secondary VLAN and map it to the primary VLAN3. Verify the configuration enableRackSwitch G8000 Application Guide 62 „ Chapter 3 VLANsBMD00041, November CHAPTER Ports and Trunking„ “Configurable Trunk Hash Algorithm” on page „ ““Overview” on page 64” „ “Port Trunking Example” on pageBuilt-In fault tolerance Statistical load distributionOverview Before you configure static trunks Static trunk group configuration rules„ All trunk members must be in the same Spanning Tree Group STG and can belong to only one Spanning Tree Group STG. However if all ports are tagged, then all trunk ports can belong to multiple STGs Trunk 1 Ports 1, 7, and Port Trunking ExampleTrunk 3 Ports 2, 23, and 1. Follow these steps on the G80004. Examine the trunking information on each switch 2. Repeat the process on the other switch3. Connect the switch ports that will be members in the trunk group RS G8000 config# portchannel 1 member 1,7,32Configurable Trunk Hash Algorithm Link Aggregation Control Protocol Admin keyEach port on the switch can have one of the following LACP modes LACP configuration guidelines Configuring LACP3. Set the LACP mode „ “Overview” on page „ “Rapid Spanning Tree Protocol” on page Spanning TreeCHAPTER „ “Per VLAN Rapid Spanning Tree” on pageOverview Table 5-1 Ports, Trunk Groups, and VLANsBridge Protocol Data Units BPDUs Determining the Path for Forwarding BPDUsBridge Priority Port Priority Spanning Tree Group configuration guidelinesChanging the Spanning Tree mode Port Path CostAssigning a VLAN to a Spanning Tree Group Creating a VLAN Rules for VLAN Tagged portsAdding and removing ports from STGs RackSwitch G8000 Application Guide BMD00041, NovemberChapter 5 Spanning Tree „ Rapid Spanning Tree Protocol Port state changesEdge Port RSTP configuration guidelinesPort Type and Link Type Link Type1. Configure port and VLAN membership on the switch RSTP configuration exampleConfigure Rapid Spanning Tree 2. Set the Spanning Tree mode to Rapid Spanning TreeDefault Spanning Tree configuration Per VLAN Rapid Spanning TreeWhy do we need multiple Spanning Trees? Figure 5-1 Two VLANs on one Spanning Tree GroupFigure 5-2 Two VLANs, each on a different Spanning Tree Group PVRST configuration guidelines Configuring PVRST1. Set the Spanning-tree mode to PVRST+ Multiple Spanning Tree Protocol MSTP RegionCommon Internal Spanning Tree MSTP configuration guidelines RackSwitch G8000 Application Guide Passing VLANBlocking VLAN Blocking VLANConfiguring Multiple Spanning Tree Groups 2. Configure Multiple Spanning Tree Protocolmember RackSwitch G8000 Application Guideenable memberConfiguration Guidelines Configuring Fast Uplink ConvergenceFast Uplink Convergence RackSwitch G8000 Application Guide 92 „ Chapter 5 Spanning TreeBMD00041, November „ “Using Storm Control Filters” on page Quality of Service„ “Overview” on page „ “Using ACL Filters” on page „ “Using DSCP Values to Provide QoS” on pageCOS Queue Permit/DenyFilter OverviewUsing ACL Filters MAC Extended ACLsIP Standard ACLs IP Extended ACLsRS G8000 config# no access-list ip extended RackSwitch G8000 Application GuideRS G8000 config# access-list ip extended Table 6-1 Well-known protocol typesPort 1 access group ACL IP Extended Understanding ACL priorityAssigning ACLs to a port ACL IP ExtendedViewing ACL statistics 1. Configure an Access Control List ACL configuration examplesExample 3. Verify the configurationExample Use this configuration to block traffic from a network destined for a specific host address. All traffic that ingresses port 10 with source IP from the class 100.10.1.0/24 and destination IP 200.20.2.2 is denied1. Configure an Access Control List 2. Assign the ACL to portRackSwitch G8000 Application Guide 1. Configure an Access Control List1. Configure an Access Control List config# ip access-list ip extended2. Configure IP ACLs to deny all other traffic 4. Configure a MAC ACL to deny all other trafficExample RS G8000 config-if# RackSwitch G8000 Application GuideRS G8000 config# interface port ip access-group 1103 inUsing Storm Control Filters Configuring storm controlBroadcast storms Using DSCP Values to Provide QoS Differentiated Services Concepts7 6 5 4 The switch can perform the following actions to the DSCP Per Hop Behavior RackSwitch G8000 Application Guide QoS LevelsDefault QoS Service Levels Service LevelDSCP-to-802.1p mapping Using 802.1p Priority to Provide QoS Figure 6-3 Layer 2 802.1q/802.1p VLAN tagged packet802.1p configuration example Queuing and Scheduling1. Configure a port’s default 802.1p priority value to Remote Monitoring OverviewCHAPTER 1. Enable RMON on a port Configuring RMON statisticsRMON group 1-Statistics 2. Configure the RMON statistics on a portRMON group 2-History History MIB Object IDRS G8000# show rmon history 1. Enable RMON on a port RMON group 3-AlarmsConfiguring RMON History 2. Configure the RMON History parameters for a portAlarm MIB objects Configuring RMON AlarmsExample 1. Configure the RMON Alarm parameters to track ICMP messages Configure RMON eventsRMON group 9-Events 1. Configure the RMON event parametersCHAPTER Basic IP Routing„ “Dynamic Host Configuration Protocol” on page „ “IP Routing Benefits” on pageIP Routing Benefits Routing Between IP Subnets Figure 8-1 The Router Legacy Network„ Traffic to the router increases, increasing congestion Example of Subnet Routing Figure 8-2 Switch-Based Routing Topology2. Assign an IP interface for each subnet attached to the switch Using VLANs to segregate Broadcast DomainsConfiguration example Table 8-1 Subnet Routing Example IP Address Assignmentsenable 4. Add the switch ports to their respective VLANsRackSwitch G8000 Application Guide enable8. Verify the configuration 6. Configure the default gateway to the routers’ addresses7. Enable IP routing 5. Assign a VLAN to each IP interfaceDynamic Host Configuration Protocol RackSwitch G8000 Application Guide 128 „ Chapter 8 Basic IP RoutingBMD00041, November „ “IGMP Snooping” on page „ “IGMPv3 Snooping” on page IGMPCHAPTER „ “Static Multicast Router” on pageIGMP Snooping RS G8000 config# no ip igmp floodFastLeave IGMPv3 SnoopingRS G8000 config# ip igmp fastleave VLAN number RS G8000 config# no ip igmp snoop igmpv3 exclude IGMP Snooping configuration exampleConfigure IGMP Snooping RS G8000 config# ip igmp snoop igmpv3 sourcesRS G8000# show ip igmp groups RackSwitch G8000 Application Guide5. View dynamic IGMP information RS G8000# show ip igmp mrouterConfigure a Static Multicast Router Static Multicast Router2. Verify the configuration „ “Uplink Failure Detection” on page High AvailabilityCHAPTER BMD00041, NovemberUplink Failure Detection Figure 10-1 Uplink Failure Detection exampleConfiguration guidelines Failure Detection PairSpanning Tree Protocol with UFD „ Link to Monitor LtM1. Configure Network Adapter Teaming on the servers Configuring UFDMonitoring UFD 2. Assign the Link to Monitor LtM ports„ “Monitoring Ports” on page TroubleshootingAPPENDIX A BMD00041, NovemberMonitoring Ports Figure A-1 Monitoring Ports2. Enable port mirroring Configuring Port MirroringPort Mirroring behavior 3. View the current configurationRackSwitch G8000 Application Guide 142 „ Appendix A TroubleshootingBMD00041, November Symbols IndexNumerics

All trunk members must be in the same Spanning Tree Group (STG) and can belong to only one Spanning Tree Group (STG). However if all ports are tagged, then all trunk ports can belong to multiple STGs.

All trunk members must be in the same Spanning Tree Group (STG) and can belong to only one Spanning Tree Group (STG). However if all ports are tagged, then all trunk ports can belong to multiple STGs.