9032578-04
SmartSwitch Router User Reference Manual
 SmartSwitch Router User Reference Manual
 Vcci Notice
Industry Canada Notice
 Cabletron SYSTEMS, INC Program License Agreement
 SmartSwitch Router User Reference Manual
 SmartSwitch Router User Reference Manual
 SmartSwitch Router User Reference Manual
 Cabletron Systems Limited Program License Agreement
 SmartSwitch Router User Reference Manual
 Laser Radiation and Connectors
Safety Information
 EC Directive 73/23/EEC
EC Directive 89/336/EEC
 SmartSwitch Router User Reference Manual
 Contents
 Hot Swapping Line Cards and Control Modules
 Creating a non-IP/non-IPX Vlan
SmartTRUNK Configuration Guide
 Vrrp Configuration Guide
 127
 IP Multicast Overview 199
Multicast Routing Configuration Guide 199
 209
 Web Hosting Configuration Guide 233
 255
 QoS Configuration Guide 283
 WAN Configuration Guide 315
 Contents
 Preface
How to Use This Manual
About This Manual
Who Should Read This Manual?
 Preface
 Managing the SSR using Cabletron’s
Installing and setting up the SSR
Related Documentation
For Information About See
 Preface SmartSwitch Router User Reference Manual
 Feature Specification
SSR Hardware and software specifications
Chapter SSR Product Overview
 Multicast IGMP, Dvmrp
IPX RIP, SAP
 Supported Routing Protocols
Supported Media Encapsulation Type
 Understanding the Command Line Interface
Configuring the SmartSwitch Router
Routing Information Protocol RIP Version 1
 Access Modes
Basic Line Editing Commands
Common CLI key commands
Key Sequence Command
 User Mode
 Enable Mode
 Exit
 Configure Mode
 Pvst
Boot Prom Mode
 Disabling a Function or Feature
Loading System Images and Configuration Files
Boot and System Image
Configuration Files
 Ssr# system show version
Loading System Image Software
 Activating the Configuration Commands in the Scratchpad
Loading Boot Prom Software
Enter the system image list command to verify the change
 CLI displays the following message
Copying the Configuration to the Startup Configuration File
Enter yes or y to activate the changes
 Managing the SSR
Displaying Configuration Changes
 Setting SSR Date and Time
Setting the SSR Name
Configuring NTP
 Configuring Snmp Services
Configuring the SSR CLI
Configuring DNS
 Configuring Logging
Connecting Between the SSR and Other Systems
 Task Command
Monitoring Configuration
 Show the type of Power-On Self Test Post
Show the SSR login banner
Show the configuration changes
Reboot Show the status of the switching fabric
 Hot Swapping Overview
Chapter Hot Swapping Line Cards Control Modules
Hot Swapping Line Cards
 Removing the Line Card
Deactivating the Line Card
 Hot Swapping a Secondary Control Module
Installing a New Line Card
Hot Swapping One Type of Line Card With Another
 Removing the Control Module
Deactivating the Control Module
 Installing the Control Module
Hot Swapping a Switching Fabric Module SSR 8600 only
 SSR-SF-16 Offline Switching Fabric
 Bridging Overview
Chapter Bridging Configuration Guide
Spanning Tree Ieee 802.1d
 Bridging Modes Flow-Based and Address-Based
Vlan Overview
 MAC-address-based VLANs
Port-based VLANs
Protocol-based VLANs
Subnet-based VLANs
 Multicast-based VLANs
SSR Vlan Support
Policy-based VLANs
VLANs and the SSR
 Ports, VLANs, and L3 Interfaces
Access Ports and Trunk Ports 802.1Q support
 Configuring Address-based or Flow-based Bridging
Configuring SSR Bridging Functions
Explicit and Implicit VLANs
 Address-Based Bridge Table Flow-Based Bridge Table
Configuring Spanning Tree
 Setting the Bridge Priority
Adjusting Spanning-Tree Parameters
More ports for a particular Vlan
 Adjusting Bridge Protocol Data Unit Bpdu Intervals
Setting a Port Priority
Assigning Port Costs
 Defining the Forward Delay Interval
Adjusting the Interval between Hello Times
Defining the Maximum Age
 Configuring Vlan Trunk Ports
Configuring a Port or Protocol based Vlan
Configuring VLANs for Bridging
Creating a Port or Protocol Based Vlan
 Monitoring Bridging
Configuring Layer-2 Filters
 Creating an IP or IPX Vlan
Configuration Examples
Creating a non-IP/non-IPX Vlan
Show information on MACs
Page
 Overview
Chapter SmartTRUNK Configuration Guide
 Creating a SmartTRUNK
Configuring SmartTRUNKs
Add Physical Ports to the SmartTRUNK
 Specify Traffic Distribution Policy Optional
Monitoring SmartTRUNKs
 St.2 St.4 Router Switch Server
Example Configurations
 SmartTRUNK Configuration Guide
Page
 Chapter
Configuration Guide
Dhcp Overview
 Configuring an IP Address Pool
Configuring Dhcp
Configuring Client Parameters
Client Parameters
 Grouping Scopes with a Common Interface
Configuring a Static IP Address
 Updating the Lease Database
Configuring Dhcp Server Parameters
Monitoring the Dhcp Server
 Define Dhcp network parameters for the scope ‘scope1’
Dhcp Configuration Examples
Define an IP address pool for addresses 10.1.1.10 through
Define a static IP address for
 Configuring Secondary Subnets
 Include ‘scope2’ in the superscope ‘super1’
Secondary Subnets and Directly-Connected Clients
 Interacting with Relay Agents
 Define the address pool for ‘scope1’
Page
 IP Routing Overview
Chapter IP Routing Configuration Guide
 SSR supports standards-based TCP, UDP, and IP
IP Routing Protocols
Unicast Routing Protocols
Multicast Routing Protocols
 Configuring IP Addresses to Ports
Configuring IP Interfaces and Parameters
Configuring IP Interfaces for a Vlan
Specifying Ethernet Encapsulation Method
 Configuring ARP Cache Entries
Configuring Address Resolution Protocol ARP
Configuring Proxy ARP
 Specifying IP Interfaces for Rarp
Configuring Reverse Address Resolution Protocol Rarp
Defining MAC-to-IP Address Mappings
 Configuring IP Services Icmp
Configuring DNS Parameters
Monitoring Rarp
Specify ping
 Configuring Direct Broadcast
Configuring IP Helper
Configuring Denial of Service DOS
 Monitoring IP Parameters
Configuring Router Discovery
 Assigning IP/IPX Interfaces
 IP Routing Configuration Guide
 Vrrp Overview
Configuring Vrrp
 Backup
Basic Vrrp Configuration
Configuration of Router R1
Following is the configuration file for Router R1 in Figure
 Configuration for Router R2
Symmetrical Configuration
Following is the configuration file for Router R2 in Figure
 Symmetrical Vrrp Configuration
Master for VRID=1 Master for VRID=2 Backup for VRID=2
 Configuration of Router R2
Multi-Backup Configuration
 Multi-Backup Vrrp Configuration
 SmartSwitch Router User Reference Manual 101
 Virtual Router Default Priority Configured Priority
 Configuration of Router R3
Additional Configuration
Following is the configuration file for Router R3 in Figure
 Setting the Advertisement Interval
Setting the Backup Priority
Setting Pre-empt Mode
 Monitoring Vrrp
Setting an Authentication Key
Ip-redundancy trace
 Ip-redundancy show
Vrrp Configuration Notes
Virtual routers Display information about all
Specific virtual router
 SmartSwitch Router User Reference Manual 107
 108
 Configuring RIP
Chapter RIP Configuration Guide
RIP Overview
 Configuring RIP Parameters
Configuring RIP Interfaces
Enabling and Disabling RIP
 Characters Set the authentication method
Set the authentication method
To RIP
Specify that RIP V2 packets
 Configuring RIP Route Default-Metric
Configuring RIP Route Preference
Monitoring RIP
 Configuration Example
 114
 Ospf Overview
Ospf
 Enable Ospf
Configuring Ospf
Disable Ospf
Ospf Multipath
 Ospf Parameter Default Value
Configuring Ospf Interface Parameters
Ospf Interface Parameters
 Create an Ospf area
Configuring an Ospf Area
Add an interface to an Ospf area
 Creating Virtual Links
Configuring Ospf Area Parameters
Add a stub host to an Ospf area
Add a network to an Ospf area for
 Create a virtual
Configuring Ospf over Non-Broadcast Multiple Access
Link
Set virtual link
 Monitoring Ospf
 Ospf Configuration Examples
 Exporting All RIP, Interface & Static Routes to Ospf
Exporting All Interface & Static Routes to Ospf
 Create a Ospf export destination for type-2 routes
Create a Ospf export destination for type-1 routes
Create a RIP export source
Create a Static export source
 Create Ospf export source
Create a RIP export destination
Create OSPF-ASE export source
 R10
 BGP Overview
Chapter BGP Configuration Guide
 SSR BGP Implementation
Basic BGP Tasks
 Setting the Router ID
Setting the Autonomous System Number
Configuring a BGP Peer Group
Ip-router global set autonomous-system num1 loops num2
 Autonomous-system number
Where
 Adding and Removing a BGP Peer
Using AS-Path Regular Expressions
Starting BGP
 132
 AS-Path Regular Expression Examples
Using the AS Path Prepend Feature
To import MCI routes with a preference
 Following is an example
BGP Configuration Examples
 BGP Peering Session Example
 AS-1 AS-2
CLI configuration for router SSR1 is as follows
Physical Link Peering Relationship
 CLI configuration for router SSR2 is as follows
Ibgp Configuration Example
Gated.conf file for router SSR1 is as follows
Gated.conf file for router SSR2 is as follows
 Ibgp Routing Group Example
 AS-64801
Sample Ibgp Configuration Routing Group Type
 Following lines in the Cisco router configure Ospf
 Ibgp Internal Group Example
 Sample Ibgp Configuration Internal Group Type
Illustrates a sample Ibgp Internal group configuration
 SmartSwitch Router User Reference Manual 143
 Configuration for router C1 a Cisco router is as follows
Ebgp Multihop Configuration Example
Configuration for router C2 a Cisco router is as follows
 Physical Link
AS-64800
 CLI configuration for router SSR3 is as follows
 Community Attribute Example
CLI configuration for router SSR4 is as follows
Gated.conf file for router SSR3 is as follows
Gated.conf file for router SSR4 is as follows
 Sample BGP Configuration Specific Community
 Sample BGP Configuration Well-Known Community
 , router SSR11 has the following configuration
 , router SSR13 has the following configuration
 , router SSR14 has the following configuration
, router SSR10 has the following configuration
 SmartSwitch Router User Reference Manual 153
 LocalPref Attribute Example
 Sample BGP Configuration LocalPref Attribute
 Multi-Exit Discriminator Attribute Example
 Router SSR6 has the following CLI configuration
Sample BGP Configuration MED Attribute
 Ebgp Aggregation Example
Router SSR8 has the following CLI configuration
AS-64900
AS-64901
 Route Reflection Example
Router SSR9 has the following CLI configuration
 AS-64902
Shows a sample configuration that uses route reflection
 SmartSwitch Router User Reference Manual 161
 162
 Route Import and Export Policy Overview
Chapter Routing Policy Configuration Guide
 Preference Defined by CLI Command Default
Default Preference Values
Preference
 Import-Source
Import Policies
 Route-Filter
Export Policies
Export-Destination
Export-Source
 Specifying a Route Filter
 Aggregates and Generates
 Aggregate-Source
Aggregate-Destination
 Authentication Methods
Authentication
 Authentication Keys and Key Management
Configuring Simple Routing Policies
 Redistributing Directly Attached Networks
Redistributing Static Routes
 Redistributing RIP into Ospf Redistributing Ospf to RIP
Redistributing RIP into RIP
Redistributing Aggregate Routes
 To redistribute aggregate
Simple Route Redistribution Examples
Routes into Ospf
Example 1 Redistribution into RIP
 Exporting All Static Routes to All RIP Interfaces
Exporting a Given Static Route to All RIP Interfaces
Example 2 Redistribution into Ospf
 176
 Configuring Advanced Routing Policies
 178
 Creating an Export Source
Creating an Export Destination
 Creating a Route Filter
Creating an Import Source
Creating an Aggregate Route
Create a RIP import
 SmartSwitch Router User Reference Manual 181
 Creating an Aggregate Source
Creating an Aggregate Destination
Examples of Import Policies
Example 1 Importing from RIP
 R41
 184
 Example 2 Importing from Ospf
 186
 R41
 Importing a Selected Subset of OSPF-ASE Routes
 Example 1 Exporting to RIP
Examples of Export Policies
 Ip-router policy create rip-export-source ripExpSrc
 Exporting a Given Static Route to a Specific RIP Interface
 Exporting Aggregate-Routes into RIP
 Ip-router policy create aggr-export-source aggrExpSrc
 Example 2 Exporting to Ospf
 SmartSwitch Router User Reference Manual 195
 196
 SmartSwitch Router User Reference Manual 197
 198
 IP Multicast Overview
Chapter Multicast Routing Configuration Guide
Igmp Overview
 Dvmrp Overview
 Configuring Igmp on an IP Interface
Configuring Igmp
Configuring Igmp Query Interval
Configuring Igmp Response Wait Time
 Configuring Per-Interface Control of Igmp Membership
Configuring Dvmrp
Starting and Stopping Dvmrp
 Configuring Dvmrp Parameters
Configuring Dvmrp on an Interface
Configuring the Dvmrp Routing Metric
 Configuring a Dvmrp Tunnel
Configuring Dvmrp TTL & Scope
 Monitoring Igmp & Dvmrp
 Multicast protocols Igmp
Show all interfaces running
Show all multicast routes
Page
 208
 Chapter IP Policy-Based Forwarding Configuration Guide
 Defining an ACL Profile
Configuring IP Policies
Associating the Profile with an IP Policy
 Creating Multi-statement IP Policies
 Setting the IP Policy Action
Setting Load Distribution for Next-hop Gateways
 Checking the Availability of Next-hop Gateways
Applying an IP Policy to an Interface
 Routing Traffic to Different ISPs
IP Policy Configuration Examples
An IP interface Apply a defined IP policy to
All IP interfaces on the SSR
 Using an IP policy to route traffic to two different ISPs
 Using an IP policy to prioritize service to customers
Prioritizing Service to Customers
 Using an IP policy to authenticate users through a firewall
Authenticating Users through a Firewall
 Selecting Next Hop Gateway from IP Packet Information
Firewall Load Balancing
 Display information about all
Monitoring IP Policies
IP policies
Display statistics about a
 Ip-policy show interface interface
 SmartSwitch Router User Reference Manual 221
 222
 Chapter Network Address Translation Configuration Guide
 Setting Inside and Outside Interfaces
Configuring NAT
 Managing Dynamic Bindings
Setting NAT Rules
Static
Dynamic
 Specify the FTP session timeout
Static Configuration
NAT and FTP
Monitoring NAT
 First step is to create the interfaces
Using Static NAT
Next, define the interfaces to be NAT inside or outside
Then, define the NAT static rules
 Using Dynamic NAT
Dynamic Configuration
 Dynamic NAT with IP Overload PAT Configuration
 Dynamic NAT with Outside Interface Redundancy
Using Dynamic NAT with IP Overload
 Using Dynamic NAT with Matching Interface Redundancy
 232
 Chapter Web Hosting Configuration Guide
 Load Balancing
Configuring Load Balancing
Creating the Server Group
Specifying Load Balancing Policy Optional
 Adding Servers to the Load Balancing Group
Setting Server Status
 Setting Timeouts for Load Balancing Mappings
Allowing Access to Load Balancing Servers
Load Balancing and FTP
 Displaying Load Balancing Information
Configuration Examples
 207.135.89.16 10.1.1.1 Ftp.quick..com 10.1.1.2
Ftp.quick.com Internet Router User Queries
 207.135.89.16 207.135.89.17 207.135.89.18
Virtual IP Address Ranges
 Web Caching
Configuring Web Caching
 Specifying the Clients for the Cache Group Optional
Creating the Cache Group
Redirected to cache servers
Not redirected to cache servers
 Other Configurations
Configuration Example
Bypassing Cache Servers
 Monitoring Web-Caching
Distributing Frequently-Accessed Sites Across Cache Servers
Proxy Server Redundancy
 Show cache server information
Show caching policy information
 IPX Routing Overview
Chapter IPX Routing Configuration Guide
RIP Routing Information Protocol
 SAP Service Advertising Protocol
 Creating IPX Interfaces
Configuring IPX RIP & SAP
IPX Addresses
 Configuring IPX Addresses to Ports
Configuring IPX Interfaces and Parameters
Configuring IPX Interfaces for a Vlan
Specifying IPX Encapsulation Method
 Configuring Static Routes
Configuring IPX Routing
Enabling IPX RIP
Enabling SAP
 Controlling Access to IPX Networks
Configuring Static SAP Table Entries
Creating an IPX Access Control List
 Creating an IPX SAP Access Control List
Creating an IPX Type 20 Access Control List
Creating an IPX GNS Access Control List
 Monitoring an IPX Network
Creating an IPX RIP Access Control List
 Adds a SAP access list Adds a GNS access list
 254
 Chapter Access Control List Configuration Guide
 Defining Selection Criteria in ACL Rules
ACL Basics
 How ACL Rules are Evaluated
 Implicit Deny Rule
 Allowing External Responses to Established TCP Connections
 Creating and Modifying ACLs
Following ACL illustrates this feature
Editing ACLs Offline
 Maintaining ACLs Using the ACL Editor
 Applying ACLs to Interfaces
Using ACLs
These uses of ACLs are described in the following sections
 Using ACLs as Profiles
Applying ACLs to Services
 SSR Feature ACL Profile Usage
Following SSR features use ACL profiles
Using Profile ACLs with the IP Policy Facility
 Using Profile ACLs with the Traffic Rate Limiting Facility
 Using Profile ACLs with the Port Mirroring Facility
Using Profile ACLs with Dynamic NAT
 Redirecting Http Traffic to Cache Servers
Using Profile ACLs with the Web Caching Facility
 Preventing Web Objects From Being Cached
Enabling ACL Logging
 Monitoring ACLs
 270
 Security Overview
Chapter Security Configuration Guide
 Configuring Radius
Configuring SSR Access Security
 Monitoring Radius
Configuring Tacacs
Monitoring Tacacs
 Monitoring Tacacs Plus
Configuring Tacacs Plus
 Layer-2 Security Filters
Configuring Passwords
 Configuring Layer-2 Port-to-Address Lock Filters
Configuring Layer-2 Address Filters
 Configuring Layer-2 Secure Port Filters
Configuring Layer-2 Static Entry Filters
Configure a source static
Configure a destination static
 Monitoring Layer-2 Security Filters
 Et.1.1 Et.1.2 Et.1.3 Hub
Layer-2 Filter Examples
Static Entries Example
 Example 2 Secure Ports
Port-to-Address Lock Examples
 Layer-3 Access Control Lists ACLs
 282
 QoS & Layer-2/Layer-3/Layer-4 Flow Overview
Chapter QoS Configuration Guide
 Precedence for Layer-3 Flows
Layer-2 and Layer-3 & Layer-4 Flow Specification
 Traffic Prioritization for Layer-2 Flows
Configuring Layer-2 QoS
SSR Queuing Policies
 Traffic Prioritization for Layer-3 & Layer-4 Flows
Configuring IP QoS Policies
 Setting an IP QoS Policy
Configuring IPX QoS Policies
Setting an IPX QoS Policy
Specifying Precedence for an IP QoS Policy
 Allocating Bandwidth for a Weighted-Fair Queuing Policy
Configuring SSR Queueing Policy
ToS Rewrite
Specifying Precedence for an IPX QoS Policy
 MBZ
Configuring ToS Rewrite for IP Packets
 Tos-rewrite
 Limiting Traffic Rate
Monitoring QoS
Show all IP QoS flows
Show all IPX QoS flows
 Define a rate limit profile
Example Configuration
Apply a rate limit profile to an
Interface
 Interface interface
Displaying Rate Limit Information
 294
 Performance Monitoring Overview
Chapter Performance Monitoring Guide
 Show information about the master
Show port error statistics
MAC table Show information about a
Particular MAC address Show info about multicasts
 Monitoring Broadcast Traffic
Configuring the SSR for Port Mirroring
Only IP ACLs can be specified for port mirroring
 298
 Rmon Overview
Configuring and Enabling Rmon
 Example of Rmon Configuration Commands
 Lite Rmon Groups
Rmon Groups
 Professional Rmon Groups
Standard Rmon Groups
 Control Tables
 Using Rmon
 Configuring Rmon Groups
 Num status enabledisable
Enabledisable
String status enabledisable
Size owner string status enabledisable
 Oid type absolutedelta status enabledisable
Port port owner string status enabledisable
Rmon protocol-distribution index index-number
Rmon user-history-control index index-number
 Displaying Rmon Information
 Rmon CLI Filters
 01000CCCCCCC
Following shows Host table output without a CLI filter
 Using Rmon CLI Filters
Troubleshooting Rmon
Creating Rmon CLI Filters
 312
 Ssr# rmon show status Rmon Status
Allocating Memory to Rmon
 Rmon set memory number
 WAN Overview
WAN
 Primary and Secondary Addresses
Configuring WAN Interfaces
Static, Mapped, and Dynamic Peer IP/IPX Addresses
Static Addresses
 Following command line displays two examples for PPP
Following command line displays an example for a Vlan
Mapped Addresses
Dynamic Addresses
 Forcing Bridged Encapsulation
Following command line displays an example for PPP
Packet Compression
 Average Packet Size
Example Configurations
Nature of the Data
Link Integrity
 Packet Encryption
WAN Quality of Service
 Source Filtering and ACLs
Weighted-Fair Queueing
Congestion Management
Random Early Discard RED
 Virtual Circuits
Frame Relay Overview
Adaptive Shaping
 Permanent Virtual Circuits PVCs
Configuring Frame Relay Interfaces for the SSR
 Applying a Service Profile to an Active Frame Relay WAN Port
Setting up a Frame Relay Service Profile
 Monitoring Frame Relay WAN Ports
Frame Relay Port Configuration
 326
 Point-to-Point Protocol PPP Overview
Configuring PPP Interfaces
Use of LCP Magic Numbers
 Defining the Type and Location of a PPP Interface
Setting up a PPP Service Profile
 Configuring Multilink PPP Bundles
Applying a Service Profile to an Active PPP Port
Compression on MLP Bundles or Links
 Monitoring PPP WAN Ports
PPP Port Configuration
 Ssrconfig# ppp apply service profile2 ports hs.5.1
 Simple Configuration File
WAN Configuration Examples
 Multi-router WAN configuration
Multi-Router WAN Configuration
 Following configuration file applies to Router R1
Router R1 Configuration File
Router R2 Configuration File
Following configuration file applies to Router R2
 Following configuration file applies to Router R3
Router R3 Configuration File
Router R4 Configuration File
Following configuration file applies to Router R4
 Following configuration file applies to Router R5
Router R5 Configuration File
Router R6 Configuration File
Following configuration file applies to Router R6
 SmartSwitch Router User Reference Manual 337
 338