Manuals / Nortel Networks / Computer Equipment / Switch

Nortel Networks 42C4911 manual Basic IP Routing

Models: 42C4911

1 260

Download 260 pages 54.2 Kb

Page 143

CHAPTER 8

Basic IP Routing

This chapter provides configuration background and examples for using the GbE Switch Mod- ule to perform IP routing functions. The following topics are addressed in this chapter:

“IP Routing Benefits” on page 144

“Routing Between IP Subnets” on page 145

“Example of Subnet Routing” on page 148

“Dynamic Host Configuration Protocol” on page 152

42C4911, January 2007

143

Image 143

Nortel Networks 42C4911 manual Basic IP Routing

Contents

Application Guide Alteon OS Application Guide Contents Port-based Network Access Control Rapid Spanning Tree Protocol/Multiple Spanning Tree Protocol Part 2 IP Routing Border Gateway Protocol Part 3 High Availability Fundamentals Part 4 Appendices Alteon OS Application Guide Figures 3Two trunks, one Failover Trigger Tables Alteon OS Application Guide Who Should Use This Guide PrefaceWhat You’ll Find in This Guide Part 1 Basic SwitchingPart 3 High Availability Fundamentals AaBbCc123 Typographic ConventionsHow to Get Help Alteon OS Application Guide 20 „ Preface Part 1 Basic Switching Alteon OS Application Guide Accessing the Switch Factory-Default vs. MM assigned IP Addresses Management module setupConfiguring management module for switch access Default Gateway1Switch management on the BladeCenter management module Alteon OS Application Guide Enable port EXT7 External management port setupConfiguring the external management interface Telnet switch IP address -m-mgt-e-ext7-d-data Using TelnetConnect to the Switch via SSH Bootp Relay Agent# /cfg/l3/if interface number/relay ena Configuring the Bootp Relay Agent# /cfg/l3/bootp Dhcp Relay Agent Dhcp Relay Agent Configuration32 „ Accessing the Switch Configuring BBI Access via Https Using the Browser-Based InterfaceConfiguring BBI Access via Http † TACACS+ † Ldap † NTP Cfg/sys/access/https/generate† FDB Cfg/sys/ssnmp/trsrc Using SnmpSnmp Cfg/sys/ssnmp/rcomm Cfg/sys/ssnmp/wcommUser Configuration Default configurationCLI User equivalent View based ConfigurationsSNMPv1 trap host Configuring Snmp Trap HostsConfigure a user with no authentication and password Sys/ssnmp/snmpv3/tparam x/uname Configure an entry in the notify tableSNMPv3 trap host configuration SNMPv2 trap host configuration42 „ Accessing the Switch Securing Access to the Switch Configuring Radius on the Switch Radius Authentication and AuthorizationHow Radius Authentication Works Secsrv Configure the Radius secretMain# /cfg/sys/radius PrisrvRadius Authentication Features in Alteon OS Radius Attributes for Alteon OS User Privileges Switch User AccountsTACACS+ Authentication Features in Alteon OS TACACS+ AuthenticationHow TACACS+ Authentication Works 4Default TACACS+ Authorization Levels AuthorizationAccounting Command Authorization and LoggingCfg/sys/tacacs/chpasss Cfg/sys/tacacs/chpasspMain# /cfg/sys/tacacs+ Configuring TACACS+ Authentication on the SwitchConfigure the TACACS+ secret and second secret Apply and save the configurationConfiguring the Ldap Server Ldap Authentication and AuthorizationMain# /cfg/sys/ldap Configuring Ldap Authentication on the SwitchConfigure the domain name Secure Shell and Secure Copy # /cfg/sys/sshd/dis Configuring SSH/SCP features on the switch# /cfg/sys/sshd/on # /cfg/sys/sshd/off# scp scpadmin@205.178.15.157getcfg ad4.cfg Configuring the SCP Administrator PasswordUsing SSH and SCP Client Commands Ssh 205.178.15.157 Login-nameSSH and SCP Encryption of Management Messages To apply and save the configuration# scp ad4.cfg scpadmin@205.178.15.157putcfg Cfg/sys/sshd/skeygen Generating RSA Host and Server Keys for SSH AccessCfg/sys/sshd/hkeygen SSH/SCP Integration with TACACS+ Authentication SSH/SCP Integration with Radius AuthenticationConsiderations for Configuring End User Accounts End User Access Control# /cfg/sys/access/user/uid Strong PasswordsUser Access Control Menu # /cfg/sys/access/user# cur Name user1Passwd Logging into an End User Account # /cfg/sys/access/user/curListing Current Users Alteon OS Application Guide 42C4911, January Alteon OS Application Guide 66 „ Accessing the Switch Port-based Network Access Control Extensible Authentication Protocol over LAN Port Unauthorized 802.1x Authentication ProcessEAPoL Message Exchange „ Force Unauthorized 802.1x Port States„ Unauthorized „ AuthorizedSupport for Radius Attributes Supported Radius AttributesConfiguration Guidelines 42C4911, January VLANs Overview Viewing VLANs VLANs and Port Vlan ID NumbersVlan Numbers Pvid NumbersCfg/port INT7/pvid Viewing and Configuring PVIDsAlteon OS Application Guide Vlan Tagging 1Default Vlan settings 2Port-based Vlan assignment 4802.1Q tag assignment Vlan Topologies and Design Considerations Vlan configuration rulesComponent Description Example 1 Multiple VLANs with Tagging Adapters86 „ VLANs Protocol-based VLANs Pvlan Tagging Port-based vs. Protocol-based VLANsPvlan Priority Levels Cfg/l2/vlan Pvlan Configuration GuidelinesConfiguring Pvlan Configure the priority value for the protocolAdd member ports for this Pvlan Configure Vlan tagging for portsEnable the Pvlan Info/l2/vlan Verify Pvlan operationAlteon OS Application Guide 92 „ VLANs Ports and Trunking 1Port Trunk Group Statistical Load Distribution Built-In Fault ToleranceBefore you configure static trunks Trunk group configuration rules Port Trunking Example Example below, three ports are trunked between two switchesRepeat the process on the other switch Info/l2/trunk Examine the trunking information on each switchConfigurable Trunk Hash Algorithm Link Aggregation Control Protocol Admin key102 „ Ports and Trunking Configuring Lacp Alteon OS Application Guide 104 „ Ports and Trunking Spanning Tree Group 1Ports, Trunk Groups, and VLANs Port Priority Bridge Protocol Data Units BPDUsDetermining the Path for Forwarding BPDUs Bridge PriorityCreating a Vlan Spanning Tree Group configuration guidelinesPort Path Cost Adding a Vlan to a Spanning Tree GroupAdding and removing ports from STGs Rules for Vlan Tagged portsMultiple Spanning Trees Default Spanning Tree configurationSwitch-Centric Spanning Tree Group Why Do We Need Multiple Spanning Trees?2Implementing Multiple Spanning Tree Groups Vlan Participation in Spanning Tree Groups# /cfg/l2/vlan2 Configuring Multiple Spanning Tree GroupsConfigure the following on application switch a Configure the following on GbE Switch Module B# /cfg/l2/vlan3 Configure the following on application switch CFastfwd ena Configuring Port Fast ForwardingPort Fast Forwarding # /cfg/port ext1# apply Configuring Fast Uplink ConvergenceFast Uplink Convergence # /cfg/l2/upfast enaRapid Spanning Tree Protocol/Multiple Spanning Tree Protocol Port State Changes Rapid Spanning Tree ProtocolLink Type Rstp Configuration GuidelinesPort Type and Link Type Edge PortConfigure STP Group 1 parameters Rstp Configuration ExampleConfigure Rapid Spanning Tree Set the Spanning Tree mode to Rapid Spanning TreeCommon Internal Spanning Tree Multiple Spanning Tree ProtocolMstp Region Assign VLANs to Spanning Tree Groups Mstp Configuration GuidelinesMstp Configuration Example Configure Multiple Spanning Tree ProtocolQuality of Service ACL Quality of Service „ Summary of packet classifiers Using ACL Filters2Well-Known Application Ports Understanding ACL Precedence Summary of ACL Actions„ Access Control Lists Using ACL GroupsACL Metering and Re-marking „ Access Control GroupsRe-Marking Viewing ACL StatisticsMetering Add ACL 1 to port EXT1 ACL Configuration ExamplesConfigure an Access Control List ExampleACL 3# action deny Add ACL 3 to port EXT1ACL 3# ipv4/sip 100.10.1.0 Per Hop Behavior Using Dscp Values to Provide QoSDifferentiated Services Concepts Dscp QoS Levels Default QoS Service LevelsDscp Re-marking and Mapping Main# cfg/port EXT1 Dscp Re-marking Configuration ExampleEnable Dscp re-marking on a port Main# cfg/qos/dscp/on3Layer 2 802.1q/802.1p Vlan tagged packet Using 802.1p Priorities to Provide QoSPort EXT1# 8021ppri 802.1p Configuration ExampleConfigure a port’s default 802.1p priority Queuing and SchedulingPart 2 IP Routing 142 42C4911, January Basic IP Routing IP Routing Benefits 1The Router Legacy Network Routing Between IP Subnets2Switch-Based Routing Topology Alteon OS Application Guide 1Subnet Routing Example IP Address Assignments Example of Subnet Routing# ../if # /cfg/l3/if# addr Add the switch ports to their respective VLANs Using VLANs to Segregate Broadcast Domains# /info/vlan Add each IP interface to the appropriate VlanVlan 3# /cfg/l3/if VlanDynamic Host Configuration Protocol Dhcp Relay Agent # /cfg/l3/bootp Dhcp Relay Agent ConfigurationStability Routing Information ProtocolDistance Vector Protocol RIPv2 Routing UpdatesRIPv1 Poison RIPv2 in RIPv1 compatibility modeRIP Features Triggered updatesMetric RIP Configuration ExampleDefault AuthenticationAdd IP interfaces to VLANs Turn on RIP globally and enable RIP for each interfaceAdd VLANs for routing interfaces 42C4911, January Igmp Igmp Snooping View dynamic Igmp information Igmp Snooping Configuration ExampleConfigure Igmp Snooping Add VLANs to Igmp Snooping and enable the featureCfg/l3/igmp/mrouter Configure a Static Multicast RouterApply, verify, and save the configuration Static Multicast RouterIgmp Relay Configuration GuidelinesConfigure the upstream Mrouters Configure Igmp RelayConfigure an IP interface and assign VLANs Enable Igmp Relay and add VLANs to the downstream networkMulticast Router Apply Igmp Filtering Additional Igmp FeaturesConfiguring the Range FastLeaveDefine an Igmp filter Configuring the ActionConfigure Igmp Filtering Enable Igmp Filtering on the switchFilt ena Assign the Igmp filter to a portBorder Gateway Protocol 1iBGP and eBGP Internal Routing Versus External RoutingForming BGP Peer Routers # /cfg/l3/rmap What is a Route Map?Incoming and Outgoing Route Maps 2Distributing Network Filters in Access Lists and Route MapsDefine network filter Configuration OverviewPrecedence Assign the route map to a peer router Optional Configure the attributes in the AS filter menuSet up the BGP attributes Enable the route mapAggregating Routes Redistributing Routes Metric Multi-Exit Discriminator Attribute BGP AttributesLocal Preference Attribute Selecting Route Paths in BGP 3BGP Failover Configuration Example BGP Failover ConfigurationDefine the IP interfaces Enable IP forwardingDefine the VLANs On the switch, apply and save your configuration changes Configure BGP peer router 1# /cfg/l3/bgp Default Redistribution and Route Aggregation ExampleConfigure aggregation policy control Configure internal peer router 1 and external peer routerConfigure redistribution for Peer Ospf Types of Ospf Areas Ospf OverviewNssa 2OSPF Domain and an Autonomous System Types of Ospf Routing DevicesLink-State Database Neighbors and AdjacenciesInternal Versus External Routing Shortest Path First TreeOspf Implementation in Alteon OS Configurable ParametersAssigning the Area Index Defining AreasAttaching an Area to a Network Using the Area ID to Assign the Ospf Area NumberSummarizing Routes Electing the Designated Router and BackupInterface Cost # /cfg/l3/ospf/default metric value metric type 1 or Default Routes# /cfg/l3/ospf/aindex area index/type transit Virtual LinksRouter ID Authentication# /cfg/l3/ospf/if Enable Ospf authentication for Area 0 on switches 1, 2,Assign MD5 key ID to Ospf interfaces on switches 1, 2, Enable Ospf authentication for Area 2 on switchEnable Ospf MD5 authentication for Area 0 on switches 1, 2, Configure MD5 key ID for Area 0 on switches 1, 2,Host Routes for Load Balancing Assign MD5 key ID to Ospf virtual link on switches 2Ospf Features Not Supported in This Release Optional Configure the router ID Ospf Configuration ExamplesConfigure IP interfaces # /cfg/l3/if # addr Enable Ospf# enable Example 1 Simple Ospf DomainAttach the network interface to the backbone Apply and save the configuration changesDefine the backbone Define the stub areaIP # /cfg/l3/ospf/on Configuring Ospf for a Virtual Link on Switch #1Configure the router ID Example 2 Virtual LinksAttach the network interface to the transit area Configure the virtual linkDefine the transit area # ../aindex Configuring Ospf for a Virtual Link on Switch #2Define the stub area Other Virtual Link Options7Summarizing Routes Example 3 Summarizing Routes# ena # /cfg/l3/if # addr36.128.200.0 Verifying Ospf Configuration36.128.192.0 Alteon OS Application Guide 214 „ Ospf Part 3 High Availability Fundamentals 216 42C4911, January High Availability Vlan Monitor Layer 2 FailoverSpanning Tree Protocol Setting the Failover LimitL2 Failover with Other Features InternetI t t L2 Failover Configurations2Two trunks, each in a different Failover Trigger 3Two trunks, one Failover Trigger # /cfg/failovr/on Configuring Trunk FailoverConfigure Failover parameters Virtual Router MAC Address Vrrp OverviewVrrp Components Virtual RouterVirtual Interface Router Master and Backup Virtual RouterSelecting the Master Vrrp Router Vrrp OperationFailover Methods 4A Non-VRRP, Hot-Standby Configuration5Active-Active Redundancy Active-Active RedundancyVirtual Router Group Hot-Standby RedundancyTracking Vrrp Router Priority Alteon OS extensions to VrrpAssigning Vrrp Virtual Router ID Configuring the Switch for TrackingVirtual Router Deployment Considerations 232 „ High Availability Active-Active Configuration High Availability ConfigurationsConfigure client and server interfaces Task 1 Configure GbESMTurn off Spanning Tree Protocol globally Turn on Vrrp and configure two Virtual Interface RoutersConfigure ports Task 2 Configure GbESM Cfg/l3/vrrp/vr Hot-Standby Configuration 8Hot-Standby Configuration Enable Vrrp Hot Standby Configure Virtual Interface RoutersRouter Group# track/ports enaEnable tracking on ports 242 „ High Availability Part 4 Appendices 244 42C4911, January Troubleshooting Figure A-1Monitoring Ports Monitoring PortsLayer 2 Port Mirroring Port Mirroring behavior248 „ Appendix a Troubleshooting Layer 3 Port Mirroring Both Ports in Different GEAs /info/geaport command Select the ports that you want to mirror Configuring Port MirroringEnable port mirroring Specify the monitoring portPortMirroring # cur View the current configurationRadius Server Configuration Notes „ @alteon.dct Translation GlossaryVrid Virtual Router Numerics IndexIcmp 188 Snmp