Manuals / Nortel Networks / Computer Equipment / Switch

Nortel Networks 42C4911 manual Ports and Trunking

Models: 42C4911

1 260

Download 260 pages 54.2 Kb

Page 93

CHAPTER 4

Ports and Trunking

Trunk groups can provide super-bandwidth, multi-link connections between GbE Switch Mod- ules or other trunk-capable devices. A trunk group is a group of ports that act together, combin- ing their bandwidth to create a single, larger virtual link. This chapter provides configuration background and examples for trunking multiple ports together:

“ Overview” on this page

“Port Trunking Example” on page 97

“Configurable Trunk Hash Algorithm” on page 100

“Link Aggregation Control Protocol” on page 101

42C4911, January 2007

93

Image 93

Nortel Networks 42C4911 manual Ports and Trunking

Contents

Application Guide Alteon OS Application Guide Contents Port-based Network Access Control Rapid Spanning Tree Protocol/Multiple Spanning Tree Protocol Part 2 IP Routing Border Gateway Protocol Part 3 High Availability Fundamentals Part 4 Appendices Alteon OS Application Guide Figures 3Two trunks, one Failover Trigger Tables Alteon OS Application Guide Who Should Use This Guide PrefaceWhat You’ll Find in This Guide Part 1 Basic SwitchingPart 3 High Availability Fundamentals AaBbCc123 Typographic ConventionsHow to Get Help Alteon OS Application Guide 20 „ Preface Part 1 Basic Switching Alteon OS Application Guide Accessing the Switch Factory-Default vs. MM assigned IP Addresses Management module setupConfiguring management module for switch access Default Gateway1Switch management on the BladeCenter management module Alteon OS Application Guide External management port setup Configuring the external management interfaceEnable port EXT7 Connect to the Switch via SSH Using TelnetBootp Relay Agent Telnet switch IP address -m-mgt-e-ext7-d-dataConfiguring the Bootp Relay Agent # /cfg/l3/bootp# /cfg/l3/if interface number/relay ena Dhcp Relay Agent Dhcp Relay Agent Configuration32 „ Accessing the Switch Using the Browser-Based Interface Configuring BBI Access via HttpConfiguring BBI Access via Https † TACACS+ † Ldap † NTP Cfg/sys/access/https/generate† FDB Snmp Using SnmpCfg/sys/ssnmp/rcomm Cfg/sys/ssnmp/wcomm Cfg/sys/ssnmp/trsrcUser Configuration Default configurationCLI User equivalent View based ConfigurationsConfiguring Snmp Trap Hosts Configure a user with no authentication and passwordSNMPv1 trap host Sys/ssnmp/snmpv3/tparam x/uname Configure an entry in the notify tableSNMPv3 trap host configuration SNMPv2 trap host configuration42 „ Accessing the Switch Securing Access to the Switch Radius Authentication and Authorization How Radius Authentication WorksConfiguring Radius on the Switch Main# /cfg/sys/radius Configure the Radius secretPrisrv SecsrvRadius Authentication Features in Alteon OS Radius Attributes for Alteon OS User Privileges Switch User AccountsTACACS+ Authentication How TACACS+ Authentication WorksTACACS+ Authentication Features in Alteon OS 4Default TACACS+ Authorization Levels AuthorizationAccounting Command Authorization and LoggingCfg/sys/tacacs/chpasss Cfg/sys/tacacs/chpasspConfigure the TACACS+ secret and second secret Configuring TACACS+ Authentication on the SwitchApply and save the configuration Main# /cfg/sys/tacacs+Configuring the Ldap Server Ldap Authentication and AuthorizationConfiguring Ldap Authentication on the Switch Configure the domain nameMain# /cfg/sys/ldap Secure Shell and Secure Copy # /cfg/sys/sshd/on Configuring SSH/SCP features on the switch# /cfg/sys/sshd/off # /cfg/sys/sshd/disUsing SSH and SCP Client Commands Configuring the SCP Administrator PasswordSsh 205.178.15.157 Login-name # scp scpadmin@205.178.15.157getcfg ad4.cfgTo apply and save the configuration # scp ad4.cfg scpadmin@205.178.15.157putcfgSSH and SCP Encryption of Management Messages Generating RSA Host and Server Keys for SSH Access Cfg/sys/sshd/hkeygenCfg/sys/sshd/skeygen SSH/SCP Integration with TACACS+ Authentication SSH/SCP Integration with Radius AuthenticationConsiderations for Configuring End User Accounts End User Access ControlUser Access Control Menu Strong Passwords# /cfg/sys/access/user # /cfg/sys/access/user/uidName user1 Passwd# cur # /cfg/sys/access/user/cur Listing Current UsersLogging into an End User Account Alteon OS Application Guide 42C4911, January Alteon OS Application Guide 66 „ Accessing the Switch Port-based Network Access Control Extensible Authentication Protocol over LAN Port Unauthorized 802.1x Authentication ProcessEAPoL Message Exchange „ Unauthorized 802.1x Port States„ Authorized „ Force UnauthorizedSupport for Radius Attributes Supported Radius AttributesConfiguration Guidelines 42C4911, January VLANs Overview Vlan Numbers VLANs and Port Vlan ID NumbersPvid Numbers Viewing VLANsCfg/port INT7/pvid Viewing and Configuring PVIDsAlteon OS Application Guide Vlan Tagging 1Default Vlan settings 2Port-based Vlan assignment 4802.1Q tag assignment Vlan Topologies and Design Considerations Vlan configuration rulesComponent Description Example 1 Multiple VLANs with Tagging Adapters86 „ VLANs Protocol-based VLANs Port-based vs. Protocol-based VLANs Pvlan Priority LevelsPvlan Tagging Configuring Pvlan Pvlan Configuration GuidelinesConfigure the priority value for the protocol Cfg/l2/vlanConfigure Vlan tagging for ports Enable the PvlanAdd member ports for this Pvlan Info/l2/vlan Verify Pvlan operationAlteon OS Application Guide 92 „ VLANs Ports and Trunking 1Port Trunk Group Built-In Fault Tolerance Before you configure static trunksStatistical Load Distribution Trunk group configuration rules Port Trunking Example Example below, three ports are trunked between two switchesRepeat the process on the other switch Info/l2/trunk Examine the trunking information on each switchConfigurable Trunk Hash Algorithm Link Aggregation Control Protocol Admin key102 „ Ports and Trunking Configuring Lacp Alteon OS Application Guide 104 „ Ports and Trunking Spanning Tree Group 1Ports, Trunk Groups, and VLANs Determining the Path for Forwarding BPDUs Bridge Protocol Data Units BPDUsBridge Priority Port PriorityPort Path Cost Spanning Tree Group configuration guidelinesAdding a Vlan to a Spanning Tree Group Creating a VlanAdding and removing ports from STGs Rules for Vlan Tagged portsMultiple Spanning Trees Default Spanning Tree configurationSwitch-Centric Spanning Tree Group Why Do We Need Multiple Spanning Trees?2Implementing Multiple Spanning Tree Groups Vlan Participation in Spanning Tree GroupsConfigure the following on application switch a Configuring Multiple Spanning Tree GroupsConfigure the following on GbE Switch Module B # /cfg/l2/vlan2# /cfg/l2/vlan3 Configure the following on application switch CPort Fast Forwarding Configuring Port Fast Forwarding# /cfg/port ext1 Fastfwd enaFast Uplink Convergence Configuring Fast Uplink Convergence# /cfg/l2/upfast ena # applyRapid Spanning Tree Protocol/Multiple Spanning Tree Protocol Port State Changes Rapid Spanning Tree ProtocolPort Type and Link Type Rstp Configuration GuidelinesEdge Port Link TypeConfigure Rapid Spanning Tree Rstp Configuration ExampleSet the Spanning Tree mode to Rapid Spanning Tree Configure STP Group 1 parametersMultiple Spanning Tree Protocol Mstp RegionCommon Internal Spanning Tree Mstp Configuration Example Mstp Configuration GuidelinesConfigure Multiple Spanning Tree Protocol Assign VLANs to Spanning Tree GroupsQuality of Service ACL Quality of Service „ Summary of packet classifiers Using ACL Filters2Well-Known Application Ports Understanding ACL Precedence Summary of ACL Actions„ Access Control Lists Using ACL GroupsACL Metering and Re-marking „ Access Control GroupsViewing ACL Statistics MeteringRe-Marking Configure an Access Control List ACL Configuration ExamplesExample Add ACL 1 to port EXT1Add ACL 3 to port EXT1 ACL 3# ipv4/sip 100.10.1.0ACL 3# action deny Using Dscp Values to Provide QoS Differentiated Services ConceptsPer Hop Behavior Dscp QoS Levels Default QoS Service LevelsDscp Re-marking and Mapping Enable Dscp re-marking on a port Dscp Re-marking Configuration ExampleMain# cfg/qos/dscp/on Main# cfg/port EXT13Layer 2 802.1q/802.1p Vlan tagged packet Using 802.1p Priorities to Provide QoSConfigure a port’s default 802.1p priority 802.1p Configuration ExampleQueuing and Scheduling Port EXT1# 8021ppriPart 2 IP Routing 142 42C4911, January Basic IP Routing IP Routing Benefits 1The Router Legacy Network Routing Between IP Subnets2Switch-Based Routing Topology Alteon OS Application Guide 1Subnet Routing Example IP Address Assignments Example of Subnet Routing# /cfg/l3/if # addr# ../if Add the switch ports to their respective VLANs Using VLANs to Segregate Broadcast DomainsVlan 3# /cfg/l3/if Add each IP interface to the appropriate VlanVlan # /info/vlanDynamic Host Configuration Protocol Dhcp Relay Agent # /cfg/l3/bootp Dhcp Relay Agent ConfigurationRouting Information Protocol Distance Vector ProtocolStability Routing Updates RIPv1RIPv2 RIP Features RIPv2 in RIPv1 compatibility modeTriggered updates PoisonDefault RIP Configuration ExampleAuthentication MetricTurn on RIP globally and enable RIP for each interface Add VLANs for routing interfacesAdd IP interfaces to VLANs 42C4911, January Igmp Igmp Snooping Configure Igmp Snooping Igmp Snooping Configuration ExampleAdd VLANs to Igmp Snooping and enable the feature View dynamic Igmp informationApply, verify, and save the configuration Configure a Static Multicast RouterStatic Multicast Router Cfg/l3/igmp/mrouterIgmp Relay Configuration GuidelinesConfigure an IP interface and assign VLANs Configure Igmp RelayEnable Igmp Relay and add VLANs to the downstream network Configure the upstream MroutersMulticast Router Apply Configuring the Range Additional Igmp FeaturesFastLeave Igmp FilteringConfigure Igmp Filtering Configuring the ActionEnable Igmp Filtering on the switch Define an Igmp filterFilt ena Assign the Igmp filter to a portBorder Gateway Protocol 1iBGP and eBGP Internal Routing Versus External RoutingForming BGP Peer Routers # /cfg/l3/rmap What is a Route Map?Incoming and Outgoing Route Maps 2Distributing Network Filters in Access Lists and Route MapsConfiguration Overview PrecedenceDefine network filter Set up the BGP attributes Optional Configure the attributes in the AS filter menuEnable the route map Assign the route map to a peer routerAggregating Routes Redistributing Routes BGP Attributes Local Preference AttributeMetric Multi-Exit Discriminator Attribute Selecting Route Paths in BGP 3BGP Failover Configuration Example BGP Failover ConfigurationEnable IP forwarding Define the VLANsDefine the IP interfaces On the switch, apply and save your configuration changes Configure BGP peer router 1# /cfg/l3/bgp Default Redistribution and Route Aggregation ExampleConfigure internal peer router 1 and external peer router Configure redistribution for PeerConfigure aggregation policy control Ospf Types of Ospf Areas Ospf OverviewNssa 2OSPF Domain and an Autonomous System Types of Ospf Routing DevicesLink-State Database Neighbors and AdjacenciesInternal Versus External Routing Shortest Path First TreeOspf Implementation in Alteon OS Configurable ParametersAssigning the Area Index Defining AreasAttaching an Area to a Network Using the Area ID to Assign the Ospf Area NumberElecting the Designated Router and Backup Interface CostSummarizing Routes # /cfg/l3/ospf/default metric value metric type 1 or Default Routes# /cfg/l3/ospf/aindex area index/type transit Virtual LinksRouter ID Authentication# /cfg/l3/ospf/if Enable Ospf authentication for Area 0 on switches 1, 2,Enable Ospf MD5 authentication for Area 0 on switches 1, 2, Enable Ospf authentication for Area 2 on switchConfigure MD5 key ID for Area 0 on switches 1, 2, Assign MD5 key ID to Ospf interfaces on switches 1, 2,Host Routes for Load Balancing Assign MD5 key ID to Ospf virtual link on switches 2Ospf Features Not Supported in This Release Ospf Configuration Examples Configure IP interfacesOptional Configure the router ID # enable Enable OspfExample 1 Simple Ospf Domain # /cfg/l3/if # addrDefine the backbone Apply and save the configuration changesDefine the stub area Attach the network interface to the backboneConfigure the router ID Configuring Ospf for a Virtual Link on Switch #1Example 2 Virtual Links IP # /cfg/l3/ospf/onConfigure the virtual link Define the transit areaAttach the network interface to the transit area # ../aindex Configuring Ospf for a Virtual Link on Switch #2Define the stub area Other Virtual Link Options7Summarizing Routes Example 3 Summarizing Routes# ena # /cfg/l3/if # addrVerifying Ospf Configuration 36.128.192.036.128.200.0 Alteon OS Application Guide 214 „ Ospf Part 3 High Availability Fundamentals 216 42C4911, January High Availability Vlan Monitor Layer 2 FailoverSetting the Failover Limit L2 Failover with Other FeaturesSpanning Tree Protocol InternetI t t L2 Failover Configurations2Two trunks, each in a different Failover Trigger 3Two trunks, one Failover Trigger Configuring Trunk Failover Configure Failover parameters# /cfg/failovr/on Vrrp Components Vrrp OverviewVirtual Router Virtual Router MAC AddressVirtual Interface Router Master and Backup Virtual RouterSelecting the Master Vrrp Router Vrrp OperationFailover Methods 4A Non-VRRP, Hot-Standby Configuration5Active-Active Redundancy Active-Active RedundancyVirtual Router Group Hot-Standby RedundancyTracking Vrrp Router Priority Alteon OS extensions to VrrpConfiguring the Switch for Tracking Virtual Router Deployment ConsiderationsAssigning Vrrp Virtual Router ID 232 „ High Availability Active-Active Configuration High Availability ConfigurationsConfigure client and server interfaces Task 1 Configure GbESMTurn on Vrrp and configure two Virtual Interface Routers Configure portsTurn off Spanning Tree Protocol globally Task 2 Configure GbESM Cfg/l3/vrrp/vr Hot-Standby Configuration 8Hot-Standby Configuration Enable Vrrp Hot Standby Configure Virtual Interface RoutersRouter Group# track/ports enaEnable tracking on ports 242 „ High Availability Part 4 Appendices 244 42C4911, January Troubleshooting Figure A-1Monitoring Ports Monitoring PortsLayer 2 Port Mirroring Port Mirroring behavior248 „ Appendix a Troubleshooting Layer 3 Port Mirroring Both Ports in Different GEAs /info/geaport command Enable port mirroring Configuring Port MirroringSpecify the monitoring port Select the ports that you want to mirrorPortMirroring # cur View the current configurationRadius Server Configuration Notes „ @alteon.dct Translation GlossaryVrid Virtual Router Numerics IndexIcmp 188 Snmp