Manuals / Nortel Networks / Computer Equipment / Switch

Nortel Networks 42C4911 manual 2Well-Known Application Ports

Models: 42C4911

1 260

Download 260 pages 54.2 Kb

Page 127

Alteon OS Application Guide

Table 7-2Well-Known Application Ports

Number	TCP/UDP	Number	TCP/UDP	Number	TCP/UDP
	Application		Application		Application

20	ftp-data	79	finger	179	bgp
21	ftp	80	http	194	irc
22	ssh	109	pop2	220	imap3
23	telnet	110	pop3	389	ldap
25	smtp	111	sunrpc	443	https
37	time	119	nntp	520	rip
42	name	123	ntp	554	rtsp
43	whois	143	imap	1645, 1812	Radius
53	domain	144	news	1813	Radius Accounting
69	tftp	161	snmp	1985	hsrp
70	gopher	162	snmptrap

Table 7-3	Well-Known TCP flag values

Flag	Value

URG	0x0020
ACK	0x0010
PSH	0x0008
RST	0x0004
SYN	0x0002
FIN	0x0001

Packet Format

Ethernet format (eth2, SNAP, LLC)

Ethernet tagging format

IP format (IPv4, IPv6)

Egress port packets

42C4911, January 2007

Chapter 7: Quality of Service 127

Image 127

Nortel Networks 42C4911 manual 2Well-Known Application Ports

Contents

Application Guide Alteon OS Application Guide Contents Port-based Network Access Control Rapid Spanning Tree Protocol/Multiple Spanning Tree Protocol Part 2 IP Routing Border Gateway Protocol Part 3 High Availability Fundamentals Part 4 Appendices Alteon OS Application Guide Figures 3Two trunks, one Failover Trigger Tables Alteon OS Application Guide Who Should Use This Guide PrefaceWhat You’ll Find in This Guide Part 1 Basic SwitchingPart 3 High Availability Fundamentals AaBbCc123 Typographic ConventionsHow to Get Help Alteon OS Application Guide 20 „ Preface Part 1 Basic Switching Alteon OS Application Guide Accessing the Switch Factory-Default vs. MM assigned IP Addresses Management module setupConfiguring management module for switch access Default Gateway1Switch management on the BladeCenter management module Alteon OS Application Guide Configuring the external management interface External management port setupEnable port EXT7 Telnet switch IP address -m-mgt-e-ext7-d-data Using TelnetConnect to the Switch via SSH Bootp Relay Agent# /cfg/l3/bootp Configuring the Bootp Relay Agent# /cfg/l3/if interface number/relay ena Dhcp Relay Agent Dhcp Relay Agent Configuration32 „ Accessing the Switch Configuring BBI Access via Http Using the Browser-Based InterfaceConfiguring BBI Access via Https † TACACS+ † Ldap † NTP Cfg/sys/access/https/generate† FDB Cfg/sys/ssnmp/trsrc Using SnmpSnmp Cfg/sys/ssnmp/rcomm Cfg/sys/ssnmp/wcommUser Configuration Default configurationCLI User equivalent View based ConfigurationsConfigure a user with no authentication and password Configuring Snmp Trap HostsSNMPv1 trap host Sys/ssnmp/snmpv3/tparam x/uname Configure an entry in the notify tableSNMPv3 trap host configuration SNMPv2 trap host configuration42 „ Accessing the Switch Securing Access to the Switch How Radius Authentication Works Radius Authentication and AuthorizationConfiguring Radius on the Switch Secsrv Configure the Radius secretMain# /cfg/sys/radius PrisrvRadius Authentication Features in Alteon OS Radius Attributes for Alteon OS User Privileges Switch User AccountsHow TACACS+ Authentication Works TACACS+ AuthenticationTACACS+ Authentication Features in Alteon OS 4Default TACACS+ Authorization Levels AuthorizationAccounting Command Authorization and LoggingCfg/sys/tacacs/chpasss Cfg/sys/tacacs/chpasspMain# /cfg/sys/tacacs+ Configuring TACACS+ Authentication on the SwitchConfigure the TACACS+ secret and second secret Apply and save the configurationConfiguring the Ldap Server Ldap Authentication and AuthorizationConfigure the domain name Configuring Ldap Authentication on the SwitchMain# /cfg/sys/ldap Secure Shell and Secure Copy # /cfg/sys/sshd/dis Configuring SSH/SCP features on the switch# /cfg/sys/sshd/on # /cfg/sys/sshd/off# scp scpadmin@205.178.15.157getcfg ad4.cfg Configuring the SCP Administrator PasswordUsing SSH and SCP Client Commands Ssh 205.178.15.157 Login-name# scp ad4.cfg scpadmin@205.178.15.157putcfg To apply and save the configurationSSH and SCP Encryption of Management Messages Cfg/sys/sshd/hkeygen Generating RSA Host and Server Keys for SSH AccessCfg/sys/sshd/skeygen SSH/SCP Integration with TACACS+ Authentication SSH/SCP Integration with Radius AuthenticationConsiderations for Configuring End User Accounts End User Access Control# /cfg/sys/access/user/uid Strong PasswordsUser Access Control Menu # /cfg/sys/access/userPasswd Name user1# cur Listing Current Users # /cfg/sys/access/user/curLogging into an End User Account Alteon OS Application Guide 42C4911, January Alteon OS Application Guide 66 „ Accessing the Switch Port-based Network Access Control Extensible Authentication Protocol over LAN Port Unauthorized 802.1x Authentication ProcessEAPoL Message Exchange „ Force Unauthorized 802.1x Port States„ Unauthorized „ AuthorizedSupport for Radius Attributes Supported Radius AttributesConfiguration Guidelines 42C4911, January VLANs Overview Viewing VLANs VLANs and Port Vlan ID NumbersVlan Numbers Pvid NumbersCfg/port INT7/pvid Viewing and Configuring PVIDsAlteon OS Application Guide Vlan Tagging 1Default Vlan settings 2Port-based Vlan assignment 4802.1Q tag assignment Vlan Topologies and Design Considerations Vlan configuration rulesComponent Description Example 1 Multiple VLANs with Tagging Adapters86 „ VLANs Protocol-based VLANs Pvlan Priority Levels Port-based vs. Protocol-based VLANsPvlan Tagging Cfg/l2/vlan Pvlan Configuration GuidelinesConfiguring Pvlan Configure the priority value for the protocolEnable the Pvlan Configure Vlan tagging for portsAdd member ports for this Pvlan Info/l2/vlan Verify Pvlan operationAlteon OS Application Guide 92 „ VLANs Ports and Trunking 1Port Trunk Group Before you configure static trunks Built-In Fault ToleranceStatistical Load Distribution Trunk group configuration rules Port Trunking Example Example below, three ports are trunked between two switchesRepeat the process on the other switch Info/l2/trunk Examine the trunking information on each switchConfigurable Trunk Hash Algorithm Link Aggregation Control Protocol Admin key102 „ Ports and Trunking Configuring Lacp Alteon OS Application Guide 104 „ Ports and Trunking Spanning Tree Group 1Ports, Trunk Groups, and VLANs Port Priority Bridge Protocol Data Units BPDUsDetermining the Path for Forwarding BPDUs Bridge PriorityCreating a Vlan Spanning Tree Group configuration guidelinesPort Path Cost Adding a Vlan to a Spanning Tree GroupAdding and removing ports from STGs Rules for Vlan Tagged portsMultiple Spanning Trees Default Spanning Tree configurationSwitch-Centric Spanning Tree Group Why Do We Need Multiple Spanning Trees?2Implementing Multiple Spanning Tree Groups Vlan Participation in Spanning Tree Groups# /cfg/l2/vlan2 Configuring Multiple Spanning Tree GroupsConfigure the following on application switch a Configure the following on GbE Switch Module B# /cfg/l2/vlan3 Configure the following on application switch CFastfwd ena Configuring Port Fast ForwardingPort Fast Forwarding # /cfg/port ext1# apply Configuring Fast Uplink ConvergenceFast Uplink Convergence # /cfg/l2/upfast enaRapid Spanning Tree Protocol/Multiple Spanning Tree Protocol Port State Changes Rapid Spanning Tree ProtocolLink Type Rstp Configuration GuidelinesPort Type and Link Type Edge PortConfigure STP Group 1 parameters Rstp Configuration ExampleConfigure Rapid Spanning Tree Set the Spanning Tree mode to Rapid Spanning TreeMstp Region Multiple Spanning Tree ProtocolCommon Internal Spanning Tree Assign VLANs to Spanning Tree Groups Mstp Configuration GuidelinesMstp Configuration Example Configure Multiple Spanning Tree ProtocolQuality of Service ACL Quality of Service „ Summary of packet classifiers Using ACL Filters2Well-Known Application Ports Understanding ACL Precedence Summary of ACL Actions„ Access Control Lists Using ACL GroupsACL Metering and Re-marking „ Access Control GroupsMetering Viewing ACL StatisticsRe-Marking Add ACL 1 to port EXT1 ACL Configuration ExamplesConfigure an Access Control List ExampleACL 3# ipv4/sip 100.10.1.0 Add ACL 3 to port EXT1ACL 3# action deny Differentiated Services Concepts Using Dscp Values to Provide QoSPer Hop Behavior Dscp QoS Levels Default QoS Service LevelsDscp Re-marking and Mapping Main# cfg/port EXT1 Dscp Re-marking Configuration ExampleEnable Dscp re-marking on a port Main# cfg/qos/dscp/on3Layer 2 802.1q/802.1p Vlan tagged packet Using 802.1p Priorities to Provide QoSPort EXT1# 8021ppri 802.1p Configuration ExampleConfigure a port’s default 802.1p priority Queuing and SchedulingPart 2 IP Routing 142 42C4911, January Basic IP Routing IP Routing Benefits 1The Router Legacy Network Routing Between IP Subnets2Switch-Based Routing Topology Alteon OS Application Guide 1Subnet Routing Example IP Address Assignments Example of Subnet Routing# addr # /cfg/l3/if# ../if Add the switch ports to their respective VLANs Using VLANs to Segregate Broadcast Domains# /info/vlan Add each IP interface to the appropriate VlanVlan 3# /cfg/l3/if VlanDynamic Host Configuration Protocol Dhcp Relay Agent # /cfg/l3/bootp Dhcp Relay Agent ConfigurationDistance Vector Protocol Routing Information ProtocolStability RIPv1 Routing UpdatesRIPv2 Poison RIPv2 in RIPv1 compatibility modeRIP Features Triggered updatesMetric RIP Configuration ExampleDefault AuthenticationAdd VLANs for routing interfaces Turn on RIP globally and enable RIP for each interfaceAdd IP interfaces to VLANs 42C4911, January Igmp Igmp Snooping View dynamic Igmp information Igmp Snooping Configuration ExampleConfigure Igmp Snooping Add VLANs to Igmp Snooping and enable the featureCfg/l3/igmp/mrouter Configure a Static Multicast RouterApply, verify, and save the configuration Static Multicast RouterIgmp Relay Configuration GuidelinesConfigure the upstream Mrouters Configure Igmp RelayConfigure an IP interface and assign VLANs Enable Igmp Relay and add VLANs to the downstream networkMulticast Router Apply Igmp Filtering Additional Igmp FeaturesConfiguring the Range FastLeaveDefine an Igmp filter Configuring the ActionConfigure Igmp Filtering Enable Igmp Filtering on the switchFilt ena Assign the Igmp filter to a portBorder Gateway Protocol 1iBGP and eBGP Internal Routing Versus External RoutingForming BGP Peer Routers # /cfg/l3/rmap What is a Route Map?Incoming and Outgoing Route Maps 2Distributing Network Filters in Access Lists and Route MapsPrecedence Configuration OverviewDefine network filter Assign the route map to a peer router Optional Configure the attributes in the AS filter menuSet up the BGP attributes Enable the route mapAggregating Routes Redistributing Routes Local Preference Attribute BGP AttributesMetric Multi-Exit Discriminator Attribute Selecting Route Paths in BGP 3BGP Failover Configuration Example BGP Failover ConfigurationDefine the VLANs Enable IP forwardingDefine the IP interfaces On the switch, apply and save your configuration changes Configure BGP peer router 1# /cfg/l3/bgp Default Redistribution and Route Aggregation ExampleConfigure redistribution for Peer Configure internal peer router 1 and external peer routerConfigure aggregation policy control Ospf Types of Ospf Areas Ospf OverviewNssa 2OSPF Domain and an Autonomous System Types of Ospf Routing DevicesLink-State Database Neighbors and AdjacenciesInternal Versus External Routing Shortest Path First TreeOspf Implementation in Alteon OS Configurable ParametersAssigning the Area Index Defining AreasAttaching an Area to a Network Using the Area ID to Assign the Ospf Area NumberInterface Cost Electing the Designated Router and BackupSummarizing Routes # /cfg/l3/ospf/default metric value metric type 1 or Default Routes# /cfg/l3/ospf/aindex area index/type transit Virtual LinksRouter ID Authentication# /cfg/l3/ospf/if Enable Ospf authentication for Area 0 on switches 1, 2,Assign MD5 key ID to Ospf interfaces on switches 1, 2, Enable Ospf authentication for Area 2 on switchEnable Ospf MD5 authentication for Area 0 on switches 1, 2, Configure MD5 key ID for Area 0 on switches 1, 2,Host Routes for Load Balancing Assign MD5 key ID to Ospf virtual link on switches 2Ospf Features Not Supported in This Release Configure IP interfaces Ospf Configuration ExamplesOptional Configure the router ID # /cfg/l3/if # addr Enable Ospf# enable Example 1 Simple Ospf DomainAttach the network interface to the backbone Apply and save the configuration changesDefine the backbone Define the stub areaIP # /cfg/l3/ospf/on Configuring Ospf for a Virtual Link on Switch #1Configure the router ID Example 2 Virtual LinksDefine the transit area Configure the virtual linkAttach the network interface to the transit area # ../aindex Configuring Ospf for a Virtual Link on Switch #2Define the stub area Other Virtual Link Options7Summarizing Routes Example 3 Summarizing Routes# ena # /cfg/l3/if # addr36.128.192.0 Verifying Ospf Configuration36.128.200.0 Alteon OS Application Guide 214 „ Ospf Part 3 High Availability Fundamentals 216 42C4911, January High Availability Vlan Monitor Layer 2 FailoverL2 Failover with Other Features Setting the Failover LimitSpanning Tree Protocol InternetI t t L2 Failover Configurations2Two trunks, each in a different Failover Trigger 3Two trunks, one Failover Trigger Configure Failover parameters Configuring Trunk Failover# /cfg/failovr/on Virtual Router MAC Address Vrrp OverviewVrrp Components Virtual RouterVirtual Interface Router Master and Backup Virtual RouterSelecting the Master Vrrp Router Vrrp OperationFailover Methods 4A Non-VRRP, Hot-Standby Configuration5Active-Active Redundancy Active-Active RedundancyVirtual Router Group Hot-Standby RedundancyTracking Vrrp Router Priority Alteon OS extensions to VrrpVirtual Router Deployment Considerations Configuring the Switch for TrackingAssigning Vrrp Virtual Router ID 232 „ High Availability Active-Active Configuration High Availability ConfigurationsConfigure client and server interfaces Task 1 Configure GbESMConfigure ports Turn on Vrrp and configure two Virtual Interface RoutersTurn off Spanning Tree Protocol globally Task 2 Configure GbESM Cfg/l3/vrrp/vr Hot-Standby Configuration 8Hot-Standby Configuration Enable Vrrp Hot Standby Configure Virtual Interface RoutersRouter Group# track/ports enaEnable tracking on ports 242 „ High Availability Part 4 Appendices 244 42C4911, January Troubleshooting Figure A-1Monitoring Ports Monitoring PortsLayer 2 Port Mirroring Port Mirroring behavior248 „ Appendix a Troubleshooting Layer 3 Port Mirroring Both Ports in Different GEAs /info/geaport command Select the ports that you want to mirror Configuring Port MirroringEnable port mirroring Specify the monitoring portPortMirroring # cur View the current configurationRadius Server Configuration Notes „ @alteon.dct Translation GlossaryVrid Virtual Router Numerics IndexIcmp 188 Snmp