9032578-02
SmartSwitch Router User Reference Manual
SSR User Reference Manual
FCC Notice
Vcci Notice
Declaration of Conformity Addendum
SSR User Reference Manual
Contents
IP Routing Configuration Guide
Assigning IP/IPX Interfaces
RIP Configuration Guide
Routing Policy Configuration Guide 107
Creating IPX Interfaces 153
143
Security Configuration Guide 161
185
Contents
About This Manual
Preface
Who Should Read This Manual?
Related Documentation
How to Use This Manual
If You Want To See
For Information About See
Chapter SmartSwitch Router Product Overview
Feature Specification
SSR Hardware and software specifications
Supported Routing Protocols
Supported Media Encapsulation Type
Understanding the Command Line Interface
Configuring the Cabletron SmartSwitch Router
Basic Line Editing Commands
Common CLI key commands
Access Modes
Enable Mode
User Mode
Ospf
Configure Mode
Boot Prom Mode
Loading System Images and Configuration Files
Disabling a Function or Feature
Configuration Files
Boot and System Image
Loading System Image Software
Enter the system image list command to verify the change
Loading Boot Prom Software
Ctron-ssr-1#system show version
Activate the Configuration Commands in the Scratchpad
Managing the SSR
Copy the Configuration to the Startup Configuration File
CLI displays the following message
Enter yes or y to activate the changes
Configure the SSR CLI
Configure NTP
Set SSR Name
Set SSR Date and Time
Configure Snmp Services
Monitoring Configuration
Configure DNS
Task Command
Bridging Overview
Chapter Bridging Configuration Guide
Spanning Tree Ieee 802.1d
Bridging Modes Flow-Based and Address-Based
Vlan Overview
MAC-address-based VLANs
Port-based VLANs
Protocol-based VLANs
Subnet-based VLANs
Multicast-based VLANs
SSR Vlan Support
Policy-based VLANs
VLANs and the SSR
Ports, VLANs, and L3 Interfaces
Access Ports and Trunk Ports 802.1Q support
Configure Address-based or Flow-based Bridging
Configuring SSR Bridging Functions
Explicit and Implicit VLANs
Address-Based Bridge Table Flow-Based Bridge Table
Configuring Spanning Tree
Enable spanning tree on one or more ports
Adjust Spanning-Tree Parameters
Set the Bridge Priority
Set a Port Priority
Adjust the Interval between Hello Times
Adjust Bridge Protocol Data Unit Bpdu Intervals
Define the Forward Delay Interval
Assign Port Costs
Configuring Vlan Trunk Ports
Configuring a Port or Protocol based Vlan
Define the Maximum Age
Create a Port or Protocol Based Vlan
Configure Layer-2 Filters
Configure Bridging for Non-IP/IPX Protocols
Monitor Bridging
Creating an IP or IPX Vlan
Configuration Examples
IP Routing Overview
Chapter IP Routing Configuration Guide
SSR supports standards based TCP, UDP, and IP
IP Routing Protocols
Unicast Routing Protocols
Multicast Routing Protocols
Configure IP Addresses to Ports
Configuring IP Interfaces and Parameters
Configure IP Interfaces for a Vlan
Specify Ethernet Encapsulation Method
Configure ARP Cache Entries
Configure Address Resolution Protocol
Configure Proxy ARP
Configure IP Services Icmp
Configure DNS Parameters
Configure IP Helper
Specify ping
Monitor IP Parameters
Configure Direct Broadcast
Show ARP entries in routing table
Assigning IP/IPX Interfaces
Show DNS parameters
Page
Configure RIP
Chapter RIP Configuration Guide
RIP Overview
Configure RIP Parameters
Configuring RIP Interfaces
Enabling and Disabling RIP
Configure RIP Route Preference
Monitoring RIP
Configure RIP Route Default-Metric
Packets sent by the router Show RIP timer information
Configuration Example
Show detailed information of response
Page
Chapter
Configuration Guide
Ospf Overview
Enable Ospf
Configure Ospf
Enable Ospf
Disable Ospf
Ospf Parameter Default Value
Configure Ospf Interface Parameters
Ospf Interface Parameters
Create an Ospf area
Configure an Ospf Area
Add an interface to an Ospf area
Create Virtual Links
Configure Ospf Area Parameters
Add a stub host to an Ospf area
Add a network to an Ospf area for
Create a virtual
Configure Ospf over Non-Broadcast Multiple Access
Link
Set virtual link
Monitoring Ospf
Ospf Configuration Examples
Export All RIP, Interface & Static Routes to Ospf
Exporting All Interface & Static Routes to Ospf
Create a Ospf export destination for type-2 routes
Create a Ospf export destination for type-1 routes
Create a RIP export source
Create a Static export source
Create Ospf export source
Create a RIP export destination
Create OSPF-ASE export source
R10
BGP Overview
Chapter BGP Configuration Guide
SSR BGP Implementation
Basic BGP Tasks
Setting the Router ID
Setting the Autonomous System Number
Configuring a BGP Peer Group
Ip-router global set autonomous-system num1 loops num2
Autonomous-system number
Where
Adding a BGP Peer
Using AS-Path Regular Expressions
Starting BGP
Bgp add network ip-addr-maskall group number
To import MCI routes with a preference
AS-Path Regular Expression Examples
Using the AS Path Prepend Feature
BGP Peering Session Example
BGP Configuration Examples
Physical Link Peering Relationship
AS-1 AS-2
CLI configuration for router SSR2 is as follows
CLI configuration for router SSR1 is as follows
Gated.conf file for router SSR1 is as follows
Gated.conf file for router SSR2 is as follows
Ibgp Configuration Example
Ibgp Routing Group Example
AS-64801
Sample Ibgp Configuration Routing Group Type
Following lines in the Cisco router configure Ospf
Ibgp Internal Group Example
Sample Ibgp Configuration Internal Group Type
Illustrates a sample Ibgp Internal group configuration
Gated.conf file for router SSR1 is as follows
Configuration for router C1 a Cisco router is as follows
Ebgp Multihop Configuration Example
Configuration for router C2 a Cisco router is as follows
Physical Link
AS-64800
CLI configuration for router SSR3 is as follows
Community Attribute Example
CLI configuration for router SSR4 is as follows
Gated.conf file for router SSR3 is as follows
Gated.conf file for router SSR4 is as follows
Sample BGP Configuration Specific Community
Sample BGP Configuration Well-Known Community
, router SSR11 has the following configuration
, router SSR13 has the following configuration
, router SSR14 has the following configuration
, router SSR10 has the following configuration
BGP Configuration Guide
LocalPref Attribute Example
Sample BGP Configuration LocalPref Attribute
Multi-Exit Discriminator Attribute Example
Router SSR6 has the following CLI configuration
Sample BGP Configuration MED Attribute
Ebgp Aggregation Example
Router SSR8 has the following CLI configuration
AS-64900
AS-64901
Route Reflection Example
Router SSR9 has the following CLI configuration
AS-64902
Shows a sample configuration that uses route reflection
Bgp set peer-group rtr11 reflector-client
SmartSwitch Router User Reference Manual 105
106
Route Import and Export Policy Overview
Chapter Routing Policy Configuration Guide
Preference Defined by CLI Command Default
Default Preference Values
Preference
Import-Source
Import Policies
Route-Filter
Export Policies
Export-Destination
Export-Source
Specifying a Route Filter
Aggregates and Generates
Aggregate-Source
Aggregate-Destination
Authentication Methods
Authentication
Authentication Keys and Key Management
Configure Simple Routing Policies
Redistributing Directly Attached Networks
Redistributing Static Routes
Redistributing RIP into Ospf
Redistributing RIP into RIP
Redistributing Ospf to RIP
Redistributing Aggregate Routes
To redistribute aggregate
Simple Route Redistribution Examples
Routes into Ospf
Example 1 Redistribution into RIP
Exporting All Static Routes to All RIP Interfaces
Exporting a Given Static Route to All RIP Interfaces
Example 2 Redistribution into Ospf
120
Configure Advanced Routing Policies
122
Creating an Export Source
Creating an Export Destination
Creating a Route Filter
Creating an Import Source
Creating an Aggregate Route
Create a RIP import
SmartSwitch Router User Reference Manual 125
Creating an Aggregate Source
Creating an Aggregate Destination
Examples of Import Policies
Example 1 Importing from RIP
R41
128
Example 2 Importing from Ospf
130
131 Routing Policy Configuration
Importing a Selected Subset of OSPF-ASE Routes
Example 1 Exporting to RIP
Examples of Export Policies
Ip-router policy create rip-export-source ripExpSrc
Exporting a Given Static Route to a Specific RIP Interface
Exporting Aggregate-Routes into RIP
Ip-router policy create aggr-export-source aggrExpSrc
Example 2 Exporting to Ospf
SmartSwitch Router User Reference Manual 139
Exporting All RIP, Interface & Static Routes to Ospf
SmartSwitch Router User Reference Manual 141
142
IP Multicast Overview
Chapter Multicast Routing Configuration Guide
Igmp Overview
Dvmrp Overview
Configuring Igmp on an IP Interface
Configure Igmp
Configure Igmp Query Interval
Configure Igmp Response Wait Time
Configure Per-Interface Control of Igmp Membership
Configure Dvmrp
Starting and Stopping Dvmrp
Configure Dvmrp Parameters
Configure Dvmrp on an Interface
Configure the Dvmrp Routing Metric
Configure a Dvmrp Tunnel
Configure Dvmrp TTL & Scope
Monitor Igmp & Dvmrp
Multicast protocols Igmp
Show all interfaces running
Show all multicast routes
IPX Routing Overview
Chapter IPX Routing Configuration Guide
RIP Routing Information Protocol
SAP Service Advertising Protocol
Creating IPX Interfaces
Configuring IPX RIP & SAP
IPX Addresses
Configure IPX Addresses to Ports
Configuring IPX Interfaces and Parameters
Configure IPX Interfaces for a Vlan
Specify IPX Encapsulation Method
Enable IPX RIP
Configure IPX Routing
Enable SAP
Configure Static Routes
Control Access to IPX Networks
Configure Static SAP Table Entries
Create an IPX Access Control List
Create an IPX SAP Access Control List
Create an IPX Type 20 Access Control List
Create an IPX GNS Access Control List
Monitor an IPX Network
Create an IPX RIP Access Control List
Adds a SAP access list Adds a GNS access list
160
Security Overview
Chapter Security Configuration Guide
Configure Radius
Configuring SSR Access Security
Configure Tacacs
Monitor Radius
Monitor Tacacs
Configure Tacacs Plus
Monitor Tacacs Plus
Layer-2 Security Filters
Configure Passwords
Configuring Layer-2 Port-to-Address Lock Filters
Configuring Layer-2 Address Filters
Configuring Layer-2 Secure Port Filters
Configuring Layer-2 Static Entry Filters
Configure a source static
Configure a destination static
Monitor Layer-2 Security Filters
Et.1.1 et.1.2et.1.3
Layer-2 Filter Examples
Hub
Engineers, Consultant Engineering Finance File Servers
Example 2 Secure Ports
Port-to-Address Lock Examples
Layer-3 & Layer-4 Traffic Filters Access Control List
Layer-3 Access Control Lists ACLs
Anatomy of an ACL Rule
Ordering of ACL Rules
Implicit Deny Rule
Applying ACLs to Interfaces
ACL Logging
Applying ACLs to Services
Maintaining ACLs Offline Using Tftp or RCP
Configure ACL
Maintaining ACLs Using the ACL Editor
Defining an IP ACL
Applying an ACL to a Service
Monitoring Access Control Lists
Defining an IPX ACL
Applying an ACL to an Interface
Show ACLs on all IPX interfaces
Layer-2, Layer-3 & Layer-4 Flow Specification
Chapter QoS Configuration Guide
QoS & Layer-2/Layer-3/Layer-4 Flow Overview
SSR Queuing Policies
Precedence for Layer-3 Flows
Configuring Layer-3 & Layer-4 QoS
Configure Layer-2 QoS
Configuring IPX QoS Policies
Configuring IP QoS Policies
Setting an IP QoS Policy
Specifying Precedence for an IP QoS Policy
Allocating Bandwidth for a Weighted-Fair Queuing Policy
Configuring SSR Queueing Policy
Setting an IPX QoS Policy
Specifying Precedence for an IPX QoS Policy
Show all IP QoS flows
Monitoring QoS
Show all IPX QoS flows
Show all Layer-2 QoS flows
Performance Monitoring Overview
Chapter Performance Monitoring Guide
Show port error statistics
Bridging mode Show information about the master
Show all L2 flows for ports in flow
MAC table Show information about a
Port port list
Configuring the SSR for Port Mirroring
188
Hot Swapping Overview
Chapter Hot Swapping Line Cards Control Modules
Hot Swapping Line Cards
Removing the Line Card
Deactivating the Line Card
To deactivate the line card, do one of the following
To remove a line card from the SSR
To install a new line card
Installing a New Line Card
Hot Swapping a Secondary Control Module
Hot Swapping One Type of Line Card With Another
Removing the Control Module
Deactivating the Control Module
To deactivate the Control Module
To remove a Control Module from the SSR
Installing the Control Module
Hot Swapping a Switching Fabric Module SSR 8600 only
To install a new Control Module or line card into the slot
To deactivate the Switching Fabric Module
To install a Switching Fabric Module
To remove the Switching Fabric Module
Vrrp Overview
Configuring Vrrp
Backup
Basic Vrrp Configuration
Configuration of Router R1
Following is the configuration file for Router R1 in Figure
Configuration for Router R2
Symmetrical Configuration
Following is the configuration file for Router R2 in Figure
Symmetrical Vrrp Configuration
Master for VRID=1 Master for VRID=2 Backup for VRID=2
Configuration of Router R2
Multi-Backup Configuration
Multi-Backup Vrrp Configuration
SmartSwitch Router User Reference Manual 201
Virtual Router Default Priority Configured Priority
Configuration of Router R3
Additional Configuration
Following is the configuration file for Router R3 in Figure
Setting the Advertisement Interval
Setting the Backup Priority
Setting Pre-empt Mode
Monitoring Vrrp
Setting an Authentication Key
Ip-redundancy trace
Ip-redundancy show
Vrrp Configuration Notes
Virtual routers Display information about all
Specific virtual router
SmartSwitch Router User Reference Manual 207