Preface, About This Manual | Cabletron Systems SmartSwitch manual

Preface

About This Manual

This manual provides detailed information and procedures for configuring the SmartSwitch Router (SSR) software. If you have not yet installed the SSR, use the instructions in the SmartSwitch Router Getting Started Guide to install the chassis and perform basic setup tasks, then return to this manual for more detailed configuration information.

Who Should Read This Manual?

Read this manual if you are a network administrator responsible for configuring and monitoring the SSR.

How to Use This Manual

If You Want To	See

Read overview information	Chapter 1, “SSR Product Overview” on
	page 29

Hot swap line cards and Control Modules	Chapter 2, “Hot Swapping Line Cards
	and Control Modules” on page 49

Configure bridging	Chapter 3, “Bridging Configuration
	Guide” on page 55

Configure SmartTRUNKs	Chapter 4, “SmartTRUNK Configuration
	Guide” on page 69

Configure Dynamic Host Configuration	Chapter 5, “DHCP Configuration Guide”
Protocol server	on page 75

Configure IP interfaces and global routing	Chapter 6, “IP Routing Configuration
parameters	Guide” on page 85

SmartSwitch Router User Reference Manual

25

Image 25

Cabletron Systems SmartSwitch manual Preface, About This Manual, Who Should Read This Manual?, How to Use This Manual

Contents

9032578-04 SmartSwitch Router User Reference Manual SmartSwitch Router User Reference Manual Vcci Notice Industry Canada Notice Cabletron SYSTEMS, INC Program License Agreement SmartSwitch Router User Reference Manual SmartSwitch Router User Reference Manual SmartSwitch Router User Reference Manual Cabletron Systems Limited Program License Agreement SmartSwitch Router User Reference Manual Laser Radiation and Connectors Safety Information EC Directive 73/23/EEC EC Directive 89/336/EEC SmartSwitch Router User Reference Manual Contents Hot Swapping Line Cards and Control Modules Creating a non-IP/non-IPX Vlan SmartTRUNK Configuration Guide Vrrp Configuration Guide 127 IP Multicast Overview 199 Multicast Routing Configuration Guide 199 209 Web Hosting Configuration Guide 233 255 QoS Configuration Guide 283 WAN Configuration Guide 315 Contents Preface How to Use This ManualAbout This Manual Who Should Read This Manual? Preface Managing the SSR using Cabletron’s Installing and setting up the SSRRelated Documentation For Information About See Preface SmartSwitch Router User Reference Manual Feature Specification SSR Hardware and software specificationsChapter SSR Product Overview Multicast IGMP, Dvmrp IPX RIP, SAP Supported Routing Protocols Supported Media Encapsulation Type Understanding the Command Line Interface Configuring the SmartSwitch RouterRouting Information Protocol RIP Version 1 Access Modes Basic Line Editing CommandsCommon CLI key commands Key Sequence Command User Mode Enable Mode Exit Configure Mode Pvst Boot Prom Mode Disabling a Function or Feature Loading System Images and Configuration FilesBoot and System Image Configuration Files Ssr# system show version Loading System Image Software Activating the Configuration Commands in the Scratchpad Loading Boot Prom SoftwareEnter the system image list command to verify the change CLI displays the following message Copying the Configuration to the Startup Configuration FileEnter yes or y to activate the changes Managing the SSR Displaying Configuration Changes Setting SSR Date and Time Setting the SSR NameConfiguring NTP Configuring Snmp Services Configuring the SSR CLIConfiguring DNS Configuring Logging Connecting Between the SSR and Other Systems Task Command Monitoring Configuration Show the type of Power-On Self Test Post Show the SSR login bannerShow the configuration changes Reboot Show the status of the switching fabric Hot Swapping Overview Chapter Hot Swapping Line Cards Control ModulesHot Swapping Line Cards Removing the Line Card Deactivating the Line Card Hot Swapping a Secondary Control Module Installing a New Line CardHot Swapping One Type of Line Card With Another Removing the Control Module Deactivating the Control Module Installing the Control Module Hot Swapping a Switching Fabric Module SSR 8600 only SSR-SF-16 Offline Switching Fabric Bridging Overview Chapter Bridging Configuration GuideSpanning Tree Ieee 802.1d Bridging Modes Flow-Based and Address-Based Vlan Overview MAC-address-based VLANs Port-based VLANsProtocol-based VLANs Subnet-based VLANs Multicast-based VLANs SSR Vlan SupportPolicy-based VLANs VLANs and the SSR Ports, VLANs, and L3 Interfaces Access Ports and Trunk Ports 802.1Q support Configuring Address-based or Flow-based Bridging Configuring SSR Bridging FunctionsExplicit and Implicit VLANs Address-Based Bridge Table Flow-Based Bridge Table Configuring Spanning Tree Setting the Bridge Priority Adjusting Spanning-Tree ParametersMore ports for a particular Vlan Adjusting Bridge Protocol Data Unit Bpdu Intervals Setting a Port PriorityAssigning Port Costs Defining the Forward Delay Interval Adjusting the Interval between Hello TimesDefining the Maximum Age Configuring Vlan Trunk Ports Configuring a Port or Protocol based VlanConfiguring VLANs for Bridging Creating a Port or Protocol Based Vlan Monitoring Bridging Configuring Layer-2 Filters Creating an IP or IPX Vlan Configuration ExamplesCreating a non-IP/non-IPX Vlan Show information on MACsPage Overview Chapter SmartTRUNK Configuration Guide Creating a SmartTRUNK Configuring SmartTRUNKsAdd Physical Ports to the SmartTRUNK Specify Traffic Distribution Policy Optional Monitoring SmartTRUNKs St.2 St.4 Router Switch Server Example Configurations SmartTRUNK Configuration Guide Page Chapter Configuration GuideDhcp Overview Configuring an IP Address Pool Configuring DhcpConfiguring Client Parameters Client Parameters Grouping Scopes with a Common Interface Configuring a Static IP Address Updating the Lease Database Configuring Dhcp Server ParametersMonitoring the Dhcp Server Define Dhcp network parameters for the scope ‘scope1’ Dhcp Configuration ExamplesDefine an IP address pool for addresses 10.1.1.10 through Define a static IP address for Configuring Secondary Subnets Include ‘scope2’ in the superscope ‘super1’ Secondary Subnets and Directly-Connected Clients Interacting with Relay Agents Define the address pool for ‘scope1’ Page IP Routing Overview Chapter IP Routing Configuration Guide SSR supports standards-based TCP, UDP, and IP IP Routing ProtocolsUnicast Routing Protocols Multicast Routing Protocols Configuring IP Addresses to Ports Configuring IP Interfaces and ParametersConfiguring IP Interfaces for a Vlan Specifying Ethernet Encapsulation Method Configuring ARP Cache Entries Configuring Address Resolution Protocol ARPConfiguring Proxy ARP Specifying IP Interfaces for Rarp Configuring Reverse Address Resolution Protocol RarpDefining MAC-to-IP Address Mappings Configuring IP Services Icmp Configuring DNS ParametersMonitoring Rarp Specify ping Configuring Direct Broadcast Configuring IP HelperConfiguring Denial of Service DOS Monitoring IP Parameters Configuring Router Discovery Assigning IP/IPX Interfaces IP Routing Configuration Guide Vrrp Overview Configuring Vrrp Backup Basic Vrrp ConfigurationConfiguration of Router R1 Following is the configuration file for Router R1 in Figure Configuration for Router R2 Symmetrical ConfigurationFollowing is the configuration file for Router R2 in Figure Symmetrical Vrrp Configuration Master for VRID=1 Master for VRID=2 Backup for VRID=2 Configuration of Router R2 Multi-Backup Configuration Multi-Backup Vrrp Configuration SmartSwitch Router User Reference Manual 101 Virtual Router Default Priority Configured Priority Configuration of Router R3 Additional ConfigurationFollowing is the configuration file for Router R3 in Figure Setting the Advertisement Interval Setting the Backup PrioritySetting Pre-empt Mode Monitoring Vrrp Setting an Authentication KeyIp-redundancy trace Ip-redundancy show Vrrp Configuration NotesVirtual routers Display information about all Specific virtual router SmartSwitch Router User Reference Manual 107 108 Configuring RIP Chapter RIP Configuration GuideRIP Overview Configuring RIP Parameters Configuring RIP InterfacesEnabling and Disabling RIP Characters Set the authentication method Set the authentication methodTo RIP Specify that RIP V2 packets Configuring RIP Route Default-Metric Configuring RIP Route PreferenceMonitoring RIP Configuration Example 114 Ospf Overview Ospf Enable Ospf Configuring OspfDisable Ospf Ospf Multipath Ospf Parameter Default Value Configuring Ospf Interface ParametersOspf Interface Parameters Create an Ospf area Configuring an Ospf AreaAdd an interface to an Ospf area Creating Virtual Links Configuring Ospf Area ParametersAdd a stub host to an Ospf area Add a network to an Ospf area for Create a virtual Configuring Ospf over Non-Broadcast Multiple AccessLink Set virtual link Monitoring Ospf Ospf Configuration Examples Exporting All RIP, Interface & Static Routes to Ospf Exporting All Interface & Static Routes to Ospf Create a Ospf export destination for type-2 routes Create a Ospf export destination for type-1 routesCreate a RIP export source Create a Static export source Create Ospf export source Create a RIP export destinationCreate OSPF-ASE export source R10 BGP Overview Chapter BGP Configuration Guide SSR BGP Implementation Basic BGP Tasks Setting the Router ID Setting the Autonomous System NumberConfiguring a BGP Peer Group Ip-router global set autonomous-system num1 loops num2 Autonomous-system number Where Adding and Removing a BGP Peer Using AS-Path Regular ExpressionsStarting BGP 132 AS-Path Regular Expression Examples Using the AS Path Prepend FeatureTo import MCI routes with a preference Following is an example BGP Configuration Examples BGP Peering Session Example AS-1 AS-2 CLI configuration for router SSR1 is as followsPhysical Link Peering Relationship CLI configuration for router SSR2 is as follows Ibgp Configuration ExampleGated.conf file for router SSR1 is as follows Gated.conf file for router SSR2 is as follows Ibgp Routing Group Example AS-64801 Sample Ibgp Configuration Routing Group Type Following lines in the Cisco router configure Ospf Ibgp Internal Group Example Sample Ibgp Configuration Internal Group Type Illustrates a sample Ibgp Internal group configuration SmartSwitch Router User Reference Manual 143 Configuration for router C1 a Cisco router is as follows Ebgp Multihop Configuration ExampleConfiguration for router C2 a Cisco router is as follows Physical Link AS-64800 CLI configuration for router SSR3 is as follows Community Attribute Example CLI configuration for router SSR4 is as followsGated.conf file for router SSR3 is as follows Gated.conf file for router SSR4 is as follows Sample BGP Configuration Specific Community Sample BGP Configuration Well-Known Community , router SSR11 has the following configuration , router SSR13 has the following configuration , router SSR14 has the following configuration , router SSR10 has the following configuration SmartSwitch Router User Reference Manual 153 LocalPref Attribute Example Sample BGP Configuration LocalPref Attribute Multi-Exit Discriminator Attribute Example Router SSR6 has the following CLI configuration Sample BGP Configuration MED Attribute Ebgp Aggregation Example Router SSR8 has the following CLI configurationAS-64900 AS-64901 Route Reflection Example Router SSR9 has the following CLI configuration AS-64902 Shows a sample configuration that uses route reflection SmartSwitch Router User Reference Manual 161 162 Route Import and Export Policy Overview Chapter Routing Policy Configuration Guide Preference Defined by CLI Command Default Default Preference ValuesPreference Import-Source Import Policies Route-Filter Export PoliciesExport-Destination Export-Source Specifying a Route Filter Aggregates and Generates Aggregate-Source Aggregate-Destination Authentication Methods Authentication Authentication Keys and Key Management Configuring Simple Routing Policies Redistributing Directly Attached Networks Redistributing Static Routes Redistributing RIP into Ospf Redistributing Ospf to RIP Redistributing RIP into RIPRedistributing Aggregate Routes To redistribute aggregate Simple Route Redistribution ExamplesRoutes into Ospf Example 1 Redistribution into RIP Exporting All Static Routes to All RIP Interfaces Exporting a Given Static Route to All RIP InterfacesExample 2 Redistribution into Ospf 176 Configuring Advanced Routing Policies 178 Creating an Export Source Creating an Export Destination Creating a Route Filter Creating an Import SourceCreating an Aggregate Route Create a RIP import SmartSwitch Router User Reference Manual 181 Creating an Aggregate Source Creating an Aggregate DestinationExamples of Import Policies Example 1 Importing from RIP R41 184 Example 2 Importing from Ospf 186 R41 Importing a Selected Subset of OSPF-ASE Routes Example 1 Exporting to RIP Examples of Export Policies Ip-router policy create rip-export-source ripExpSrc Exporting a Given Static Route to a Specific RIP Interface Exporting Aggregate-Routes into RIP Ip-router policy create aggr-export-source aggrExpSrc Example 2 Exporting to Ospf SmartSwitch Router User Reference Manual 195 196 SmartSwitch Router User Reference Manual 197 198 IP Multicast Overview Chapter Multicast Routing Configuration GuideIgmp Overview Dvmrp Overview Configuring Igmp on an IP Interface Configuring IgmpConfiguring Igmp Query Interval Configuring Igmp Response Wait Time Configuring Per-Interface Control of Igmp Membership Configuring DvmrpStarting and Stopping Dvmrp Configuring Dvmrp Parameters Configuring Dvmrp on an InterfaceConfiguring the Dvmrp Routing Metric Configuring a Dvmrp Tunnel Configuring Dvmrp TTL & Scope Monitoring Igmp & Dvmrp Multicast protocols Igmp Show all interfaces runningShow all multicast routes Page 208 Chapter IP Policy-Based Forwarding Configuration Guide Defining an ACL Profile Configuring IP PoliciesAssociating the Profile with an IP Policy Creating Multi-statement IP Policies Setting the IP Policy Action Setting Load Distribution for Next-hop Gateways Checking the Availability of Next-hop Gateways Applying an IP Policy to an Interface Routing Traffic to Different ISPs IP Policy Configuration ExamplesAn IP interface Apply a defined IP policy to All IP interfaces on the SSR Using an IP policy to route traffic to two different ISPs Using an IP policy to prioritize service to customers Prioritizing Service to Customers Using an IP policy to authenticate users through a firewall Authenticating Users through a Firewall Selecting Next Hop Gateway from IP Packet Information Firewall Load Balancing Display information about all Monitoring IP PoliciesIP policies Display statistics about a Ip-policy show interface interface SmartSwitch Router User Reference Manual 221 222 Chapter Network Address Translation Configuration Guide Setting Inside and Outside Interfaces Configuring NAT Managing Dynamic Bindings Setting NAT RulesStatic Dynamic Specify the FTP session timeout Static ConfigurationNAT and FTP Monitoring NAT First step is to create the interfaces Using Static NATNext, define the interfaces to be NAT inside or outside Then, define the NAT static rules Using Dynamic NAT Dynamic Configuration Dynamic NAT with IP Overload PAT Configuration Dynamic NAT with Outside Interface Redundancy Using Dynamic NAT with IP Overload Using Dynamic NAT with Matching Interface Redundancy 232 Chapter Web Hosting Configuration Guide Load Balancing Configuring Load BalancingCreating the Server Group Specifying Load Balancing Policy Optional Adding Servers to the Load Balancing Group Setting Server Status Setting Timeouts for Load Balancing Mappings Allowing Access to Load Balancing ServersLoad Balancing and FTP Displaying Load Balancing Information Configuration Examples 207.135.89.16 10.1.1.1 Ftp.quick..com 10.1.1.2 Ftp.quick.com Internet Router User Queries 207.135.89.16 207.135.89.17 207.135.89.18 Virtual IP Address Ranges Web Caching Configuring Web Caching Specifying the Clients for the Cache Group Optional Creating the Cache GroupRedirected to cache servers Not redirected to cache servers Other Configurations Configuration ExampleBypassing Cache Servers Monitoring Web-Caching Distributing Frequently-Accessed Sites Across Cache ServersProxy Server Redundancy Show cache server information Show caching policy information IPX Routing Overview Chapter IPX Routing Configuration GuideRIP Routing Information Protocol SAP Service Advertising Protocol Creating IPX Interfaces Configuring IPX RIP & SAPIPX Addresses Configuring IPX Addresses to Ports Configuring IPX Interfaces and ParametersConfiguring IPX Interfaces for a Vlan Specifying IPX Encapsulation Method Configuring Static Routes Configuring IPX RoutingEnabling IPX RIP Enabling SAP Controlling Access to IPX Networks Configuring Static SAP Table EntriesCreating an IPX Access Control List Creating an IPX SAP Access Control List Creating an IPX Type 20 Access Control ListCreating an IPX GNS Access Control List Monitoring an IPX Network Creating an IPX RIP Access Control List Adds a SAP access list Adds a GNS access list 254 Chapter Access Control List Configuration Guide Defining Selection Criteria in ACL Rules ACL Basics How ACL Rules are Evaluated Implicit Deny Rule Allowing External Responses to Established TCP Connections Creating and Modifying ACLs Following ACL illustrates this featureEditing ACLs Offline Maintaining ACLs Using the ACL Editor Applying ACLs to Interfaces Using ACLsThese uses of ACLs are described in the following sections Using ACLs as Profiles Applying ACLs to Services SSR Feature ACL Profile Usage Following SSR features use ACL profilesUsing Profile ACLs with the IP Policy Facility Using Profile ACLs with the Traffic Rate Limiting Facility Using Profile ACLs with the Port Mirroring Facility Using Profile ACLs with Dynamic NAT Redirecting Http Traffic to Cache Servers Using Profile ACLs with the Web Caching Facility Preventing Web Objects From Being Cached Enabling ACL Logging Monitoring ACLs 270 Security Overview Chapter Security Configuration Guide Configuring Radius Configuring SSR Access Security Monitoring Radius Configuring TacacsMonitoring Tacacs Monitoring Tacacs Plus Configuring Tacacs Plus Layer-2 Security Filters Configuring Passwords Configuring Layer-2 Port-to-Address Lock Filters Configuring Layer-2 Address Filters Configuring Layer-2 Secure Port Filters Configuring Layer-2 Static Entry FiltersConfigure a source static Configure a destination static Monitoring Layer-2 Security Filters Et.1.1 Et.1.2 Et.1.3 Hub Layer-2 Filter ExamplesStatic Entries Example Example 2 Secure Ports Port-to-Address Lock Examples Layer-3 Access Control Lists ACLs 282 QoS & Layer-2/Layer-3/Layer-4 Flow Overview Chapter QoS Configuration Guide Precedence for Layer-3 Flows Layer-2 and Layer-3 & Layer-4 Flow Specification Traffic Prioritization for Layer-2 Flows Configuring Layer-2 QoSSSR Queuing Policies Traffic Prioritization for Layer-3 & Layer-4 Flows Configuring IP QoS Policies Setting an IP QoS Policy Configuring IPX QoS PoliciesSetting an IPX QoS Policy Specifying Precedence for an IP QoS Policy Allocating Bandwidth for a Weighted-Fair Queuing Policy Configuring SSR Queueing PolicyToS Rewrite Specifying Precedence for an IPX QoS Policy MBZ Configuring ToS Rewrite for IP Packets Tos-rewrite Limiting Traffic Rate Monitoring QoSShow all IP QoS flows Show all IPX QoS flows Define a rate limit profile Example ConfigurationApply a rate limit profile to an Interface Interface interface Displaying Rate Limit Information 294 Performance Monitoring Overview Chapter Performance Monitoring Guide Show information about the master Show port error statisticsMAC table Show information about a Particular MAC address Show info about multicasts Monitoring Broadcast Traffic Configuring the SSR for Port MirroringOnly IP ACLs can be specified for port mirroring 298 Rmon Overview Configuring and Enabling Rmon Example of Rmon Configuration Commands Lite Rmon Groups Rmon Groups Professional Rmon Groups Standard Rmon Groups Control Tables Using Rmon Configuring Rmon Groups Num status enabledisable EnabledisableString status enabledisable Size owner string status enabledisable Oid type absolutedelta status enabledisable Port port owner string status enabledisableRmon protocol-distribution index index-number Rmon user-history-control index index-number Displaying Rmon Information Rmon CLI Filters 01000CCCCCCC Following shows Host table output without a CLI filter Using Rmon CLI Filters Troubleshooting RmonCreating Rmon CLI Filters 312 Ssr# rmon show status Rmon Status Allocating Memory to Rmon Rmon set memory number WAN Overview WAN Primary and Secondary Addresses Configuring WAN InterfacesStatic, Mapped, and Dynamic Peer IP/IPX Addresses Static Addresses Following command line displays two examples for PPP Following command line displays an example for a VlanMapped Addresses Dynamic Addresses Forcing Bridged Encapsulation Following command line displays an example for PPPPacket Compression Average Packet Size Example ConfigurationsNature of the Data Link Integrity Packet Encryption WAN Quality of Service Source Filtering and ACLs Weighted-Fair QueueingCongestion Management Random Early Discard RED Virtual Circuits Frame Relay OverviewAdaptive Shaping Permanent Virtual Circuits PVCs Configuring Frame Relay Interfaces for the SSR Applying a Service Profile to an Active Frame Relay WAN Port Setting up a Frame Relay Service Profile Monitoring Frame Relay WAN Ports Frame Relay Port Configuration 326 Point-to-Point Protocol PPP Overview Configuring PPP InterfacesUse of LCP Magic Numbers Defining the Type and Location of a PPP Interface Setting up a PPP Service Profile Configuring Multilink PPP Bundles Applying a Service Profile to an Active PPP PortCompression on MLP Bundles or Links Monitoring PPP WAN Ports PPP Port Configuration Ssrconfig# ppp apply service profile2 ports hs.5.1 Simple Configuration File WAN Configuration Examples Multi-router WAN configuration Multi-Router WAN Configuration Following configuration file applies to Router R1 Router R1 Configuration FileRouter R2 Configuration File Following configuration file applies to Router R2 Following configuration file applies to Router R3 Router R3 Configuration FileRouter R4 Configuration File Following configuration file applies to Router R4 Following configuration file applies to Router R5 Router R5 Configuration FileRouter R6 Configuration File Following configuration file applies to Router R6 SmartSwitch Router User Reference Manual 337 338