Dell PowerConnect B-RX User guide

53-1001986-01

31 August 2010

®

BigIron RX Series

Configuration Guide

Supporting Multi-Service IronWare v02.7.03

Brocade, the B-wing symbol, BigIron, DCX, Fabric OS, FastIron, IronPoint, IronShield, IronView, IronWare, JetCore, NetIron,

SecureIron, ServerIron, StorageX, and TurboIron are registered trademarks, and DCFM, Extraordinary Networks, and SAN Health

are trademarks of Brocade Communications Systems, Inc., in the United States and/or in other countries. All other brands,

products, or service names are or may be trademarks or service marks of, and are used to identify, products or services of their

respective owners.

Notice: This document is for informational purposes only and does not set forth any warranty, expressed or implied, concerning

any equipment, equipment feature, or service offered or to be offered by Brocade. Brocade reserves the right to make changes to

this document at any time, without notice, and assumes no responsibility for its use. This informational document describes

features that may not be currently available. Contact a Brocade sales office for information on feature and product availability.

Export of technical data contained in this document may require an export license from the United States government.

The authors and Brocade Communications Systems, Inc. shall have no liability or responsibility to any person or entity with

respect to any loss, cost, liability, or damages arising from the information contained in this book or the computer programs that

accompany it.

The product described by this document may contain “open source” software covered by the GNU General Public License or other

open source license agreements. To find-out which open source software is included in Brocade products, view the licensing

terms applicable to the open source software, and obtain a copy of the programming source code, please visit

http://www.brocade.com/support/oscd.

Brocade Communications Systems, Incorporated

Document History

Corporate and Latin American Headquarters

Brocade Communications Systems, Inc.

130 Holger Way

San Jose, CA 95134

Tel: 1-408-333-8000

Fax: 1-408-333-8101

E-mail: info@brocade.com

Asia-Pacific Headquarters

Brocade Communications Systems China HK, Ltd.

No. 1 Guanghua Road

Chao Yang District

Units 2718 and 2818

Beijing 100020, China

Tel: +8610 6588 8888

Fax: +8610 6588 9999

E-mail: [email protected]

European Headquarters

Brocade Communications Switzerland Sàrl

Centre Swissair

Tour B - 4ème étage

29, Route de l'Aéroport

Case Postale 105

CH-1215 Genève 15

Switzerland

Tel: +41 22 799 5640

Fax: +41 22 799 5641

E-mail: emea-i[email protected]

Asia-Pacific Headquarters

Brocade Communications Systems Co., Ltd. (Shenzhen WFOE)

Citic Plaza

No. 233 Tian He Road North

Unit 1308 – 13th Floor

Guangzhou, China

Tel: +8620 3891 2000

Fax: +8620 3891 2111

E-mail: [email protected]

Title Publication number Summary of changes Date

BigIron RX Series Configuration Guide 53-1001986-01 Release 02.7.03 features Aug 2010

BigIron RX Series Configuration Guide iii

53-1001986-01

Contents

About This Document

Audience . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xli

Supported hardware and software . . . . . . . . . . . . . . . . . . . . . . . . . . xli

List of supported features . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xli

Unsupported features . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xliv

What’s new in this document. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xlv

Enhancements in release 02.7.03 . . . . . . . . . . . . . . . . . . . . . . . xlv

Enhancements in release 02.7.02 . . . . . . . . . . . . . . . . . . . . . . xlvi

Enhancements in release 02.7.00 . . . . . . . . . . . . . . . . . . . . . . xlvii

Enhancements in release 02.6.00. . . . . . . . . . . . . . . . . . . . . xlviii

Enhancements in patch release 02.5.00c . . . . . . . . . . . . . . . . . li

Enhancements in patch release 02.5.00b . . . . . . . . . . . . . . . . . li

Enhancements in release 02.5.00. . . . . . . . . . . . . . . . . . . . . . . . li

Enhancements in patch release 02.4.00c . . . . . . . . . . . . . . . . .lii

Enhancements in release 02.4.00. . . . . . . . . . . . . . . . . . . . . . . liii

Enhancements in patch release 02.3.00a . . . . . . . . . . . . . . . . lvii

Enhancements in release 02.3.00. . . . . . . . . . . . . . . . . . . . . . lviii

Enhancements in release 02.2.01. . . . . . . . . . . . . . . . . . . . . . lxiii

Enhancements in release 02.2.00g. . . . . . . . . . . . . . . . . . . . . lxvii

Enhancements in release 02.2.00. . . . . . . . . . . . . . . . . . . . . lxviii

Document conventions. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .lxix

Text formatting . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . lxix

Command syntax conventions . . . . . . . . . . . . . . . . . . . . . . . . . lxix

Notes, cautions, and danger notices . . . . . . . . . . . . . . . . . . . . lxix

Notice to the reader . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . lxx

Related publications . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . lxx

Getting technical help or reporting errors . . . . . . . . . . . . . . . . . . . . . lxx

Web access . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . lxxi

E-mail and telephone access . . . . . . . . . . . . . . . . . . . . . . . . . . lxxi

Chapter 1 Getting Started with the Command Line Interface

In this chapter . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1

Logging on through the CLI. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1

On-line help . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2

Command completion . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2

Scroll control. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2

Line editing commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3

EXEC commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3

Global level . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4

iv BigIron RX Series Configuration Guide

53-1001986-01

CONFIG commands. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4

Accessing the CLI . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7

Navigating among command levels . . . . . . . . . . . . . . . . . . . . . . . 8

CLI command structure . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8

Searching and filtering output . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9

Allowable characters for LAG names . . . . . . . . . . . . . . . . . . . . . 13

Syntax shortcuts . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .14

Saving configuration changes. . . . . . . . . . . . . . . . . . . . . . . . . . . 14

Chapter 2 Getting Familiar With the BigIron RX Series Switch Management

Applications

How to manage BigIron RX Series switch . . . . . . . . . . . . . . . . . . . . .15

Logging on through the CLI. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .15

On-line help . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 16

Command completion . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 16

Scroll control. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 16

Line editing commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 16

Searching and filtering output from CLI commands . . . . . . . . . 17

Allowable characters for LAG names . . . . . . . . . . . . . . . . . . . . . 21

Logging on through the Web Management Interface . . . . . . . . . . . .22

Web Management Interface . . . . . . . . . . . . . . . . . . . . . . . . . . . .23

Logging on through IronView Network Manager . . . . . . . . . . . . . . . . 24

Chapter 3 Using a Redundant Management Module

How management module redundancy works . . . . . . . . . . . . . . . . .25

Management module redundancy overview . . . . . . . . . . . . . . .25

Management module switchover . . . . . . . . . . . . . . . . . . . . . . . .26

Switchover implications. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 27

Management module redundancy configuration . . . . . . . . . . . . . . .29

Changing the default active Chassis slot . . . . . . . . . . . . . . . . . .29

Managing management module redundancy. . . . . . . . . . . . . . . . . .29

File synchronization between the active and standby

management modules . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .29

Manually switching over to the standby management

module . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .32

Rebooting the active and standby management

modules . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 32

Monitoring management module redundancy . . . . . . . . . . . . . . . . . 33

Determining management module status . . . . . . . . . . . . . . . . . 33

Displaying temperature information . . . . . . . . . . . . . . . . . . . . . .34

Displaying switchover information . . . . . . . . . . . . . . . . . . . . . . .34

BigIron RX Series Configuration Guide v

53-1001986-01

Flash memory and PCMCIA flash card file management

commands. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .36

Management focus . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 37

Flash memory file system . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 38

PCMCIA flash card file system. . . . . . . . . . . . . . . . . . . . . . . . . . .39

Wildcards . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 40

Formatting a flash card . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .40

Determining the current management focus. . . . . . . . . . . . . . . 41

Switching the management focus . . . . . . . . . . . . . . . . . . . . . . . 41

Displaying a directory of the files . . . . . . . . . . . . . . . . . . . . . . . .42

Displaying the contents of a file . . . . . . . . . . . . . . . . . . . . . . . . . 44

Displaying the hexadecimal output of a file. . . . . . . . . . . . . . . .45

Creating a subdirectory . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 45

Removing a subdirectory. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 47

Renaming a file . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .48

Changing the read-write attribute of a file . . . . . . . . . . . . . . . . .48

Deleting a file . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .49

Recovering (“undeleting”) a file . . . . . . . . . . . . . . . . . . . . . . . . .50

Appending a file to another file. . . . . . . . . . . . . . . . . . . . . . . . . . 51

Copying files using the copy command . . . . . . . . . . . . . . . . . . . 51

Copying files using the cp command . . . . . . . . . . . . . . . . . . . . . 55

Loading the software . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 56

Saving configuration changes. . . . . . . . . . . . . . . . . . . . . . . . . . .58

File management messages. . . . . . . . . . . . . . . . . . . . . . . . . . . .59

System Monitoring Service. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 59

Chapter 4 Securing Access to Management Functions

Securing access methods . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .63

Restricting remote access to management functions . . . . . . . . . . . 65

Using ACLs to restrict remote access . . . . . . . . . . . . . . . . . . . .65

Restricting remote access to the device to specific

IP addresses. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .68

Specifying the maximum number of login attempts for

Telnet access . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .69

Restricting remote access to the device to specific VLAN IDs . 69

Disabling specific access methods. . . . . . . . . . . . . . . . . . . . . . . 71

Setting passwords. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .72

Setting a Telnet password . . . . . . . . . . . . . . . . . . . . . . . . . . . . .72

Setting passwords for management privilege levels. . . . . . . . . 73

Recovering from a lost password . . . . . . . . . . . . . . . . . . . . . . . . 75

Displaying the SNMP community string . . . . . . . . . . . . . . . . . . .75

Disabling password encryption . . . . . . . . . . . . . . . . . . . . . . . . . . 76

Specifying a minimum password length. . . . . . . . . . . . . . . . . . . 76

Setting up local user accounts. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 76

Configuring a local user account . . . . . . . . . . . . . . . . . . . . . . . .77

Username, password and login rules . . . . . . . . . . . . . . . . . . . . .79

Configuring the strict password feature . . . . . . . . . . . . . . . . . . .80

vi BigIron RX Series Configuration Guide

53-1001986-01

Configuring SSL security for the Web Management Interface. . . . .82

Enabling the SSL server on the device. . . . . . . . . . . . . . . . . . . . 83

Importing digital certificates and RSA private key files. . . . . . .83

Generating an SSL certificate . . . . . . . . . . . . . . . . . . . . . . . . . . .84

Configuring TACACS and TACACS+ security . . . . . . . . . . . . . . . . . . . . 84

How TACACS+ differs from TACACS . . . . . . . . . . . . . . . . . . . . . . .84

TACACS and TACACS+ authentication, authorization,

and accounting . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 85

TACACS and TACACS+ configuration considerations . . . . . . . . .88

Enabling SNMP to configure TACACS and TACACS. . . . . . . . . . .89

Identifying the TACACS and TACACS+ servers . . . . . . . . . . . . . .89

Specifying different servers for individual AAA functions . . . . .90

Setting optional TACACS and TACACS+ parameters . . . . . . . . . 90

Configuring authentication-method lists for TACACS

and TACACS+ . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .92

Configuring TACACS+ authorization . . . . . . . . . . . . . . . . . . . . . . 94

Configuring TACACS+ accounting . . . . . . . . . . . . . . . . . . . . . . . . 97

Configuring an interface as the source for all TACACS

and TACACS+ packets . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .98

Displaying TACACS and TACACS+ statistics and

configuration information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .98

Configuring RADIUS security . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .100

RADIUS authentication, authorization, and accounting . . . . .100

RADIUS configuration considerations. . . . . . . . . . . . . . . . . . . .103

RADIUS configuration procedure . . . . . . . . . . . . . . . . . . . . . . .103

Configuring Brocade-specific attributes on the

RADIUS server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .104

Enabling SNMP to configure RADIUS . . . . . . . . . . . . . . . . . . . .105

Identifying the RADIUS server to the BigIron RX . . . . . . . . . . .105

Specifying different servers for individual AAA functions . . . .106

Setting RADIUS parameters . . . . . . . . . . . . . . . . . . . . . . . . . . .106

Configuring authentication-method lists for RADIUS. . . . . . . . 107

Configuring RADIUS authorization . . . . . . . . . . . . . . . . . . . . . .108

Configuring RADIUS accounting . . . . . . . . . . . . . . . . . . . . . . . .110

Configuring an interface as the source for all RADIUS

packets . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .111

Displaying RADIUS configuration information . . . . . . . . . . . . .112

Configuring authentication-method lists . . . . . . . . . . . . . . . . . . . . .113

Configuration considerations for authentication-

method lists . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .114

Examples of authentication-method lists. . . . . . . . . . . . . . . . .115

Chapter 5 Configuring Basic Parameters

Entering system administration information. . . . . . . . . . . . . . . . . . 117

Configuring Simple Network Management Protocol traps . . . . . . .118

Specifying an SNMP trap receiver . . . . . . . . . . . . . . . . . . . . . .118

Specifying a Single trap source. . . . . . . . . . . . . . . . . . . . . . . . .119

Setting the SNMP Trap holddown time. . . . . . . . . . . . . . . . . . .119

Disabling SNMP traps . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .120

Disabling Syslog messages and traps for CLI access . . . . . . .121

BigIron RX Series Configuration Guide vii

53-1001986-01

Configuring an interface as source for all Telnet packets . . . . . . .122

Cancelling an outbound Telnet session . . . . . . . . . . . . . . . . . .123

Configuring an interface as the source for all TFTP packets . . . . .123

Configuring an interface as the source for Syslog packets . . . . . .123

Specifying a Simple Network Time Protocol (SNTP) server . . . . . .124

Setting the system clock. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .126

New Daylight Saving Time (DST) . . . . . . . . . . . . . . . . . . . . . . . .127

Configuring CLI banners . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .128

Setting a message of the day banner. . . . . . . . . . . . . . . . . . . .128

Setting a privileged EXEC CLI level banner . . . . . . . . . . . . . . .129

Displaying a message on the console when an incoming

Telnet session is detected . . . . . . . . . . . . . . . . . . . . . . . . . . . . .129

Configuring terminal display. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .130

Checking the length of terminal displays . . . . . . . . . . . . . . . . .130

Enabling or disabling routing protocols . . . . . . . . . . . . . . . . . . . . . .130

Displaying and modifying system parameter default settings . . . .131

Enabling or disabling Layer 2 switching . . . . . . . . . . . . . . . . . . . .133

CAM partitioning for the BigIron RX . . . . . . . . . . . . . . . . . . . . . . . . .134

Re-distributing CAM allocations . . . . . . . . . . . . . . . . . . . . . . . .134

Nexthop table. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .135

Changing the MAC age time . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .136

Configuring static ARP entries . . . . . . . . . . . . . . . . . . . . . . . . . . . . .136

Pinging an IPv4 address . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .137

Chapter 6 Configuring Interface Parameters

Assigning a port name . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .139

Assigning an IP address to a port . . . . . . . . . . . . . . . . . . . . . . . . . .139

Speed/Duplex negotiation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .140

Disabling or re-enabling a port . . . . . . . . . . . . . . . . . . . . . . . . . . . .141

Changing the default Gigabit negotiation mode . . . . . . . . . . . . . . . 141

Changing the negotiation mode . . . . . . . . . . . . . . . . . . . . . . . .142

Disabling or re-enabling flow control . . . . . . . . . . . . . . . . . . . . . . . .142

Specifying threshold values for flow control . . . . . . . . . . . . . .142

Locking a port to restrict addresses . . . . . . . . . . . . . . . . . . . . . . . .143

Wait for all cards feature . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .143

Port transition hold timer . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .144

Port flap dampening . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .144

Modifying port priority (QoS). . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .145

Assigning a mirror port and monitor ports . . . . . . . . . . . . . . . . . . .146

Configuration guidelines for monitoring traffic . . . . . . . . . . . .146

Configuring port mirroring and monitoring. . . . . . . . . . . . . . . .146

viii BigIron RX Series Configuration Guide

53-1001986-01

Monitoring an individual trunk port . . . . . . . . . . . . . . . . . . . . . . . . .147

Mirror ports for Policy-Based Routing (PBR) traffic. . . . . . . . . . . . .148

About hardware-based PBR . . . . . . . . . . . . . . . . . . . . . . . . . . .148

Configuring mirror ports for PBR traffic . . . . . . . . . . . . . . . . . .149

Displaying mirror and monitor port configuration. . . . . . . . . . . . . .149

Enabling WAN PHY mode support . . . . . . . . . . . . . . . . . . . . . . . . . .150

Chapter 7 Configuring IP

Overview of configuring IP . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .151

The IP packet flow . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .151

ARP cache table . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .152

Static ARP table . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .152

IP Route table. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .153

IP forwarding cache . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .154

Basic IP parameters and defaults . . . . . . . . . . . . . . . . . . . . . . . . . .154

When parameter changes take effect . . . . . . . . . . . . . . . . . . .155

IP global parameters . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .155

IP interface parameters. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .158

Configuring IP parameters . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .159

Configuring IP addresses. . . . . . . . . . . . . . . . . . . . . . . . . . . . . .159

Changing the network mask display to prefix format . . . . . . .162

Configuring the default gateway . . . . . . . . . . . . . . . . . . . . . . . .162

GRE IP tunnel . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .163

IPv6 over IPv4 tunnels in hardware . . . . . . . . . . . . . . . . . . . . .168

Configuring Domain Name Server (DNS) resolver. . . . . . . . . .172

Adding host names to the DNS cache table . . . . . . . . . . . . . .173

Configuring packet parameters . . . . . . . . . . . . . . . . . . . . . . . . . . . .177

Changing the encapsulation type . . . . . . . . . . . . . . . . . . . . . . . 177

Setting maximum frame size per PPCR . . . . . . . . . . . . . . . . . .178

Changing the MTU . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .179

Changing the router ID . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .180

Specifying a single source interface for Telnet, TACACS,

TACACS+, or RADIUS packets . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .181

Configuring an interface as the source for Syslog packets . . . . . .183

IP fragmentation protection . . . . . . . . . . . . . . . . . . . . . . . . . . .184

IP option attack protection . . . . . . . . . . . . . . . . . . . . . . . . . . . .184

IP receive access list . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .184

Configuring ARP parameters . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .185

How ARP works. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .185

Rate limiting ARP packets . . . . . . . . . . . . . . . . . . . . . . . . . . . . .186

Applying a rate limit to ARP packets on an interface. . . . . . . .187

Clearing the rate limit for ARP packets. . . . . . . . . . . . . . . . . . .188

Changing the ARP aging period. . . . . . . . . . . . . . . . . . . . . . . . .188

Creating a floating static ARP entry . . . . . . . . . . . . . . . . . . . . .190

Static route ARP validation check. . . . . . . . . . . . . . . . . . . . . . .191

BigIron RX Series Configuration Guide ix

53-1001986-01

Configuring forwarding parameters . . . . . . . . . . . . . . . . . . . . . . . . .192

Disabling ICMP messages . . . . . . . . . . . . . . . . . . . . . . . . . . . . .194

Disabling ICMP redirect messages . . . . . . . . . . . . . . . . . . . . . .196

Configuring static routes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .197

Static route tagging . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .201

Configuring a default network route . . . . . . . . . . . . . . . . . . . . .206

Configuring IP load sharing . . . . . . . . . . . . . . . . . . . . . . . . . . . .207

Default route ECMP . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .210

IP receive access list . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .211

Configuring IRDP . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .212

Configuring UDP broadcast and IP helper parameters . . . . . .214

Configuring BootP/DHCP forwarding parameters . . . . . . . . . .216

Displaying IP information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .218

Displaying IP interface information. . . . . . . . . . . . . . . . . . . . . .221

Displaying interface name in Syslog. . . . . . . . . . . . . . . . . . . . .222

Displaying ARP entries. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .222

Displaying the forwarding cache. . . . . . . . . . . . . . . . . . . . . . . .224

Displaying the IP route table . . . . . . . . . . . . . . . . . . . . . . . . . . .226

Clearing IP routes. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .229

Displaying IP traffic statistics . . . . . . . . . . . . . . . . . . . . . . . . . .229

Displaying TCP traffic statistics. . . . . . . . . . . . . . . . . . . . . . . . .232

Chapter 8 Link Aggregation

Link aggregation overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .235

LAG formation rules . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .235

LAG load sharing . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .238

Migration from a pre-02.6.00 trunk or LACP configuration . . . . . .239

Configuration of a LAG . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .240

Creating a Link Aggregation Group (LAG) . . . . . . . . . . . . . . . .240

Deploying a LAG . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .243

Commands available under LAG once it is deployed . . . . . . .244

Configuring ACL-based mirroring. . . . . . . . . . . . . . . . . . . . . . . .244

Disabling ports within a LAG . . . . . . . . . . . . . . . . . . . . . . . . . . .244

Enabling ports within a LAG . . . . . . . . . . . . . . . . . . . . . . . . . . .245

Monitoring an individual LAG port . . . . . . . . . . . . . . . . . . . . . .245

Assigning a name to a port within a LAG . . . . . . . . . . . . . . . . .246

Enabling sFlow forwarding on a port within a LAG. . . . . . . . . .246

Setting the sFlow sampling rate for a port within a LAG . . . . .246

Displaying LAG information . . . . . . . . . . . . . . . . . . . . . . . . . . . . 247

Displaying LAG statistics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .250

Chapter 9 Configuring LLDP

Terms used in this chapter . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .253

LLDP overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .253

Benefits of LLDP . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .254

x BigIron RX Series Configuration Guide

53-1001986-01

General operating principles . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .255

Operating modes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .255

LLDP packets . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .255

TLV support. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .256

MIB support . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .259

Syslog messages. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .259

Configuring LLDP. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .259

Configuration notes and considerations . . . . . . . . . . . . . . . . .260

Enabling and disabling LLDP. . . . . . . . . . . . . . . . . . . . . . . . . . .260

Changing a port’s LLDP operating mode . . . . . . . . . . . . . . . . .261

Specifying the maximum number of LLDP neighbors . . . . . . .262

Enabling LLDP SNMP notifications and Syslog messages . . .263

Specifying the minimum time between SNMP traps and

Syslog messages . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .263

Changing the minimum time between LLDP transmissions . .264

Changing the interval between regular LLDP transmissions .264

Changing the holdtime multiplier for transmit TTL . . . . . . . . .265

Changing the minimum time between port reinitializations. .265

LLDP TLVs advertised by the Brocade device . . . . . . . . . . . . .266

Displaying LLDP statistics and configuration settings. . . . . . .272

LLDP configuration summary . . . . . . . . . . . . . . . . . . . . . . . . . .272

LLDP statistics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .273

LLDP neighbors . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 274

LLDP neighbors detail . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .275

LLDP configuration details . . . . . . . . . . . . . . . . . . . . . . . . . . . .277

Resetting LLDP statistics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .277

Chapter 10 Configuring Uni-Directional Link Detection (UDLD)

Configuration considerations . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .280

Configuring UDLD . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .280

Changing the keepalive interval . . . . . . . . . . . . . . . . . . . . . . . .280

Changing the keepalive retries . . . . . . . . . . . . . . . . . . . . . . . . .280

Displaying UDLD information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .281

Displaying information for all ports. . . . . . . . . . . . . . . . . . . . . .281

Displaying link-keepalive information. . . . . . . . . . . . . . . . . . . .281

Displaying information for a single port . . . . . . . . . . . . . . . . . .282

Clearing UDLD statistics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .284

Chapter 11 VLANs

Overview of Virtual Local Area Networks (VLANs). . . . . . . . . . . . . .285

Tagged, untagged, and dual-mode ports . . . . . . . . . . . . . . . . .285

Protocol-based VLANs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .287

BigIron RX Series Configuration Guide xi

53-1001986-01

VLAN configuration rules . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .288

VLAN ID range . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .288

Tagged VLANs. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .288

VLAN hierarchy . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .288

Multiple VLAN membership rules . . . . . . . . . . . . . . . . . . . . . . .288

Layer 2 control protocols on VLANs . . . . . . . . . . . . . . . . . . . . .289

Configuring port-based VLANs . . . . . . . . . . . . . . . . . . . . . . . . . . . . .289

VLAN byte accounting . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .290

Strictly or explicitly tagging a port . . . . . . . . . . . . . . . . . . . . . . .292

Assigning or changing a VLAN priority . . . . . . . . . . . . . . . . . . .292

Assigning a different ID to the default VLAN . . . . . . . . . . . . . .292

Configuring protocol-based VLANs. . . . . . . . . . . . . . . . . . . . . . . . . .293

Configuring an MSTP instance . . . . . . . . . . . . . . . . . . . . . . . . .294

Configuring virtual routing interfaces . . . . . . . . . . . . . . . . . . . . . . .294

Bridging and routing the same protocol simultaneously

on the same device . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .295

Integrated Switch Routing (ISR) . . . . . . . . . . . . . . . . . . . . . . . .296

VLAN groups . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .297

Configuring a VLAN group . . . . . . . . . . . . . . . . . . . . . . . . . . . . .297

Configuring super aggregated VLANs . . . . . . . . . . . . . . . . . . . . . . .299

Configuring aggregated VLANs . . . . . . . . . . . . . . . . . . . . . . . . .301

Complete CLI examples . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .302

Configuring 802.1q-in-q tagging. . . . . . . . . . . . . . . . . . . . . . . . . . . .305

Configuration rules . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .306

Enabling 802.1Q-in-Q tagging . . . . . . . . . . . . . . . . . . . . . . . . . .307

Example configuration. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .307

Configuring 802.1q tag-type translation . . . . . . . . . . . . . . . . . . . . .308

Configuration rules . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .310

Enabling 802.1q tag-type translation. . . . . . . . . . . . . . . . . . . .311

Private VLANs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .312

Implementation notes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .313

Configuration notes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .313

Configuring a private VLAN . . . . . . . . . . . . . . . . . . . . . . . . . . . .314

Enabling broadcast, multicast or unknown unicast traffic to the

private VLAN . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .316

CLI example for Figure 30 . . . . . . . . . . . . . . . . . . . . . . . . . . . . .316

Other VLAN features . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 317

Allocating memory for more VLANs or virtual routing

interfaces . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 317

Hardware flooding for Layer 2 multicast and broadcast

packets . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 317

Unknown unicast flooding on VLAN ports . . . . . . . . . . . . . . . .318

Flow based MAC learning . . . . . . . . . . . . . . . . . . . . . . . . . . . . .318

Configuring uplink ports within a port-based VLAN. . . . . . . . .319

Configuring control protocols in VLANs . . . . . . . . . . . . . . . . . .319

Other configuration options . . . . . . . . . . . . . . . . . . . . . . . . . . .320

xii BigIron RX Series Configuration Guide

53-1001986-01

Displaying VLAN information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .320

Displaying VLAN information . . . . . . . . . . . . . . . . . . . . . . . . . . .320

Displaying VLAN information for specific ports . . . . . . . . . . . .321

Displaying VLAN status and port types. . . . . . . . . . . . . . . . . . .321

Displaying VLAN group information . . . . . . . . . . . . . . . . . . . . .323

Transparent firewall mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .323

Enabling a transparent firewall . . . . . . . . . . . . . . . . . . . . . . . .323

Chapter 12 Configuring Spanning Tree Protocol

IEEE 802.1D Spanning Tree Protocol (STP) . . . . . . . . . . . . . . . . . .325

Enabling or disabling STP . . . . . . . . . . . . . . . . . . . . . . . . . . . . .325

Default STP bridge and port parameters . . . . . . . . . . . . . . . . .326

Changing STP bridge parameters . . . . . . . . . . . . . . . . . . . . . . .327

Changing STP port parameters. . . . . . . . . . . . . . . . . . . . . . . . .328

STP root guard . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .328

Spanning Tree Protocol (STP) BPDU guard. . . . . . . . . . . . . . . .329

Displaying STP information . . . . . . . . . . . . . . . . . . . . . . . . . . . .330

IEEE Single Spanning Tree (SSTP) . . . . . . . . . . . . . . . . . . . . . . . . . .336

SSTP defaults . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .336

Enabling SSTP . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .337

Displaying SSTP information . . . . . . . . . . . . . . . . . . . . . . . . . . .338

PVST/PVST+ compatibility . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .338

Overview of PVST and PVST+ . . . . . . . . . . . . . . . . . . . . . . . . . .339

VLAN tags and dual mode. . . . . . . . . . . . . . . . . . . . . . . . . . . . .339

Enabling PVST+ support . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .340

Displaying PVST+ support information. . . . . . . . . . . . . . . . . . .340

Configuration examples. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .341

SuperSpan™ . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .343

Customer ID . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .344

BPDU forwarding . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .344

Configuring SuperSpan . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .349

Chapter 13 Configuring Rapid Spanning Tree Protocol

Overview of Rapid Spanning Tree Protocol . . . . . . . . . . . . . . . . . . .353

Bridges and bridge port roles . . . . . . . . . . . . . . . . . . . . . . . . . .353

Assignment of port roles . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .354

Ports on Switch 1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .355

Ports on Switch 2 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .355

Ports on Switch 3 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .355

Ports Switch 4 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .356

Edge ports and edge port roles . . . . . . . . . . . . . . . . . . . . . . . . . . . .356

Point-to-point ports . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .357

Bridge port states . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .357

Edge port and non-edge port states . . . . . . . . . . . . . . . . . . . . . . . .358

Changes to port roles and states. . . . . . . . . . . . . . . . . . . . . . . . . . .358

BigIron RX Series Configuration Guide xiii

53-1001986-01

State machines . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .358

Handshake mechanisms. . . . . . . . . . . . . . . . . . . . . . . . . . . . . .359

Convergence in a simple topology . . . . . . . . . . . . . . . . . . . . . . . . . .369

Convergence at start up . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .370

Convergence after a link failure . . . . . . . . . . . . . . . . . . . . . . . .372

Convergence at link restoration . . . . . . . . . . . . . . . . . . . . . . . .373

Convergence in a complex RSTP topology. . . . . . . . . . . . . . . . . . . . 374

Propagation of topology change . . . . . . . . . . . . . . . . . . . . . . . .377

Compatibility of RSTP with 802.1D . . . . . . . . . . . . . . . . . . . . . . . . .380

Configuring RSTP parameters . . . . . . . . . . . . . . . . . . . . . . . . . . . . .381

Enabling or disabling RSTP in a port-based VLAN . . . . . . . . . .381

Enabling or disabling RSTP on a single spanning tree . . . . . .382

Disabling or enabling RSTP on a port. . . . . . . . . . . . . . . . . . . .382

Changing RSTP bridge parameters. . . . . . . . . . . . . . . . . . . . . .382

Changing port parameters . . . . . . . . . . . . . . . . . . . . . . . . . . . .383

Fast port span . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .384

Fast uplink span. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .386

Displaying RSTP information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .388

Chapter 14 Metro Ring Protocol (MRP) Phase 1 and 2

Metro Ring Protocol (MRP) phase 1. . . . . . . . . . . . . . . . . . . . . . . . .393

MRP rings without shared interfaces . . . . . . . . . . . . . . . . . . . . . . .394

Ring initialization. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .395

How ring breaks are detected and healed . . . . . . . . . . . . . . . . . . .398

Master VLANs and customer VLANs in a topology group . . . . . . . .400

Configuring MRP . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .402

Adding an MRP ring to a VLAN . . . . . . . . . . . . . . . . . . . . . . . . .403

Changing the hello and preforwarding times . . . . . . . . . . . . . .404

MRP phase 2 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .404

Ring initialization for shared interfaces. . . . . . . . . . . . . . . . . . . . . .406

How ring breaks are detected and healed between

shared interfaces. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .406

Selection of master node . . . . . . . . . . . . . . . . . . . . . . . . . . . . .407

RHP processing in rings with shared interfaces . . . . . . . . . . .407

Normal flow . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .408

Flow when a link breaks . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .409

Configuring MRP with shared interfaces . . . . . . . . . . . . . . . . .409

Using MRP diagnostics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 410

Enabling MRP diagnostics. . . . . . . . . . . . . . . . . . . . . . . . . . . . .410

Displaying MRP diagnostics . . . . . . . . . . . . . . . . . . . . . . . . . . . 411

Displaying MRP information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .411

Displaying topology group information . . . . . . . . . . . . . . . . . . .411

Displaying ring information . . . . . . . . . . . . . . . . . . . . . . . . . . . .412

xiv BigIron RX Series Configuration Guide

53-1001986-01

MRP CLI example . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .413

Commands on switch A (master node). . . . . . . . . . . . . . . . . . .414

Commands on switch B. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 414

Commands on switch C. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .415

Commands on switch D. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .415

Chapter 15 Virtual Switch Redundancy Protocol (VSRP)

Overview of Virtual Switch Redundancy Protocol (VSRP) . . . . . . . . 417

Layer 2 and Layer 3 redundancy . . . . . . . . . . . . . . . . . . . . . . .418

Master election and failover . . . . . . . . . . . . . . . . . . . . . . . . . . .418

Configuring basic VSRP parameters . . . . . . . . . . . . . . . . . . . . . . . .423

Enabling Layer 3 VSRP . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .424

Configuring optional VSRP parameters . . . . . . . . . . . . . . . . . . . . . .424

Disabling VSRP on a VRID . . . . . . . . . . . . . . . . . . . . . . . . . . . . .424

Configuring authentication . . . . . . . . . . . . . . . . . . . . . . . . . . . .424

Configuring a VRID IP address . . . . . . . . . . . . . . . . . . . . . . . . .425

VSRP fast start . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .426

Changing the backup priority . . . . . . . . . . . . . . . . . . . . . . . . . .427

Saving the timer values received from the master . . . . . . . . .427

VSRP slow start . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .428

Changing the Time-To-Live (TTL) . . . . . . . . . . . . . . . . . . . . . . . .428

Changing the hello interval . . . . . . . . . . . . . . . . . . . . . . . . . . . .429

Changing the dead interval . . . . . . . . . . . . . . . . . . . . . . . . . . . .429

Changing the backup hello state and interval . . . . . . . . . . . . .429

Changing the hold-down interval . . . . . . . . . . . . . . . . . . . . . . .430

Changing the default track priority . . . . . . . . . . . . . . . . . . . . . .430

Specifying a track port. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .431

Disabling or re-enabling backup pre-emption . . . . . . . . . . . . .431

Port transition hold timer . . . . . . . . . . . . . . . . . . . . . . . . . . . . .431

Clearing VSRP information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .432

VSRP and MRP signaling . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .432

Displaying VSRP information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .434

Displaying VRID information . . . . . . . . . . . . . . . . . . . . . . . . . . .434

Displaying a summary of VSRP information. . . . . . . . . . . . . . .436

Displaying VSRP packet statistics for VSRP . . . . . . . . . . . . . . .437

Displaying the active interfaces for a VRID . . . . . . . . . . . . . . .438

Chapter 16 Topology Groups

Topology overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .439

Master VLAN and member VLANs . . . . . . . . . . . . . . . . . . . . . . . . . .439

Master VLANs and customer VLANs in MRP . . . . . . . . . . . . . . . . . .440

Control ports and free ports . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .440

Configuration considerations . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .440

Configuring a topology group . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .441

BigIron RX Series Configuration Guide xv

53-1001986-01

Displaying topology group information . . . . . . . . . . . . . . . . . . . . . .441

Displaying topology group information . . . . . . . . . . . . . . . . . . .441

Chapter 17 Configuring VRRP and VRRPE

Overview of VRRP . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .443

Standard VRRP. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .443

Brocade enhancements of VRRP . . . . . . . . . . . . . . . . . . . . . . .445

Overview of VRRPE . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .447

VRRP and VRRPE parameters . . . . . . . . . . . . . . . . . . . . . . . . . . . . .450

Configuring parameters specific to VRRP . . . . . . . . . . . . . . . . . . . .452

Configuring the owner . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .452

Configuring basic VRRP parameters. . . . . . . . . . . . . . . . . . . . .452

Configuring the owner . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .453

Configuring a backup. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .453

Configuration rules for VRRP. . . . . . . . . . . . . . . . . . . . . . . . . . .453

Configuring parameters specific to VRRPE . . . . . . . . . . . . . . . . . . .454

Configuration rules for VRRPE . . . . . . . . . . . . . . . . . . . . . . . . .454

Configuring additional VRRP and VRRPE parameters . . . . . . . . . .454

Authentication type . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .455

Suppression of RIP advertisements on backup routers

for the backup up interface. . . . . . . . . . . . . . . . . . . . . . . . . . . .456

Hello interval . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .456

Dead interval . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .456

Backup hello message state and interval . . . . . . . . . . . . . . . .457

Track port . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .457

Track priority. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .457

Backup preempt. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .458

Master router abdication and reinstatement. . . . . . . . . . . . . .458

Displaying VRRP and VRRPE information . . . . . . . . . . . . . . . . . . . .459

Displaying summary information . . . . . . . . . . . . . . . . . . . . . . .459

Displaying detailed information . . . . . . . . . . . . . . . . . . . . . . . .461

Displaying statistics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .464

Clearing VRRP or VRRPE statistics . . . . . . . . . . . . . . . . . . . . . .465

Configuration examples . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .465

VRRP example . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .465

VRRPE example . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .467

Chapter 18 Configuring Quality of Service

Overview of Quality of Service (QoS) . . . . . . . . . . . . . . . . . . . . . . . .469

Classification . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .469

Processing of classified traffic . . . . . . . . . . . . . . . . . . . . . . . . .469

Marking . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .472

Configuring DSCP classification by interface . . . . . . . . . . . . . .472

Configuring port, MAC, and VLAN-based classification . . . . . .472

xvi BigIron RX Series Configuration Guide

53-1001986-01

Configuring ToS-based QoS . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 474

Enabling ToS-based QoS . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 474

Specifying trust level . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 474

Enabling marking . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 474

Configuring the QoS mappings. . . . . . . . . . . . . . . . . . . . . . . . . . . . .475

Changing the CoS –> DSCP mappings. . . . . . . . . . . . . . . . . . .475

Changing the DSCP –> DSCP mappings . . . . . . . . . . . . . . . . .475

Changing the DSCP –> internal forwarding priority

mappings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 476

Changing the CoS –> internal forwarding priority

mappings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .477

Displaying QoS configuration information . . . . . . . . . . . . . . . . . . . .477

Determining packet drop priority using WRED . . . . . . . . . . . . . . . .479

How WRED Operates . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .480

Calculating avg-q-size . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .480

Calculating packets that are dropped . . . . . . . . . . . . . . . . . . .480

Using WRED with rate limiting. . . . . . . . . . . . . . . . . . . . . . . . . .481

Configuring packet drop priority using WRED . . . . . . . . . . . . . . . . .481

Enabling WRED . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .481

Setting the averaging-weight (Wq) parameter . . . . . . . . . . . . .481

Displaying the WRED configuration . . . . . . . . . . . . . . . . . . . . .485

Scheduling traffic for forwarding . . . . . . . . . . . . . . . . . . . . . . . . . . .486

Configuring traffic scheduling . . . . . . . . . . . . . . . . . . . . . . . . . .486

Configuring multicast traffic engineering . . . . . . . . . . . . . . . . . . . .490

Displaying the multicast traffic engineering configuration . . .491

QoS for the oversubscribed 16 x 10GE modules . . . . . . . . . . . . . .492

Aggregation NP QOS modes . . . . . . . . . . . . . . . . . . . . . . . . . . .492

Port group assignments . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .492

Setting the server and storage modes . . . . . . . . . . . . . . . . . . .492

Switching between server and storage modes . . . . . . . . . . . .493

Qos profiles. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .493

Setting the group port weights . . . . . . . . . . . . . . . . . . . . . . . . .494

Calculating the values for WFQ storage mode traffic

scheduling . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .494

Egress port shaping. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .495

Mirroring ports . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .495

Supported ACLs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .495

Configuring QoS for the 16 x 10G module . . . . . . . . . . . . . . . .496

Chapter 19 Configuring Traffic Reduction

Traffic policing on the BigIron RX Series . . . . . . . . . . . . . . . . . . . . .499

Traffic reduction parameters and algorithm . . . . . . . . . . . . . . . . . .499

Requested rate. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .499

Maximum burst . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .500

Actual rate . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .500

Configuration considerations . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .501

BigIron RX Series Configuration Guide xvii

53-1001986-01

Configuring rate limiting policies . . . . . . . . . . . . . . . . . . . . . . . . . . .502

Configuring a port-based rate limiting policy . . . . . . . . . . . . . .502

Configuring a port-and-priority-based rate limiting policy . . . .503

Configuring a port-and-VLAN-based rate limiting policy . . . . .503

Configuring a VLAN-group-based rate limiting policy. . . . . . . .504

Configuring a port-and-IPv6 ACL-based traffic reduction . . . .506

NP based multicast, broadcast, and unknown-unicast

rate limiting . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .507

Displaying traffic reduction. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .507

Chapter 20 Layer 2 ACLs

Filtering based on ethertype . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .509

Configuration rules and notes . . . . . . . . . . . . . . . . . . . . . . . . . . . . .509

Configuring Layer 2 ACLs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 510

Creating a Layer 2 ACL table . . . . . . . . . . . . . . . . . . . . . . . . . . .510

Example Layer 2 ACL clauses . . . . . . . . . . . . . . . . . . . . . . . . . .511

Inserting and deleting Layer 2 ACL clauses . . . . . . . . . . . . . . .512

Binding a Layer 2 ACL table to an interface. . . . . . . . . . . . . . .512

Increasing the maximum number of clauses per

Layer 2 ACL table . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .512

Viewing Layer 2 ACLs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .512

Example of Layer 2 ACL deny by MAC address . . . . . . . . . . . .513

Chapter 21 Access Control List

How the BigIron RX processes ACLs . . . . . . . . . . . . . . . . . . . . . . . .515

Disabling or re-enabling Access Control Lists (ACLs) . . . . . . . . . . .516

Default ACL action. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .516

Types of IP ACLs. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .516

ACL IDs and entries. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 517

Enabling support for additional ACL statements . . . . . . . . . . . . . . 517

ACL-based inbound mirroring . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .518

Considerations when configuring ACL-based inbound

mirroring . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .518

Configuring ACL-based inbound mirroring . . . . . . . . . . . . . . . .518

Creating an ACL with a mirroring clause . . . . . . . . . . . . . . . . .518

Applying the ACL to an interface . . . . . . . . . . . . . . . . . . . . . . . .519

Specifying the destination mirror port . . . . . . . . . . . . . . . . . . .519

Configuring ACL-based mirroring for ACLs bound to virtual

interfaces . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .521

Configuring numbered and named ACLs. . . . . . . . . . . . . . . . . . . . .521

Configuring standard numbered ACLs . . . . . . . . . . . . . . . . . . .521

Configuring extended numbered ACLs . . . . . . . . . . . . . . . . . . .523

Configuring standard or extended named ACLs . . . . . . . . . . .531

Configuring super ACLs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .534

xviii BigIron RX Series Configuration Guide

53-1001986-01

Displaying ACL definitions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .536

Displaying of TCP/UDP numbers in ACLs . . . . . . . . . . . . . . . . .537

ACL logging . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .547

Enabling the new logging method. . . . . . . . . . . . . . . . . . . . . . .548

Specifying the wait time . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .548

Modifying ACLs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .548

Adding or deleting a comment . . . . . . . . . . . . . . . . . . . . . . . . .550

Deleting ACL entries . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .552

From numbered ACLs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .552

From named ACLs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .553

Applying ACLs to interfaces . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .554

Reapplying modified ACLs. . . . . . . . . . . . . . . . . . . . . . . . . . . . .554

ACL automatic rebind . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .554

Manually setting the ACL rebind . . . . . . . . . . . . . . . . . . . . . . . .554

Applying ACLs to a virtual routing interface . . . . . . . . . . . . . . .554

Configuring the Layer 4 session log timer . . . . . . . . . . . . . . . .555

Displaying ACL log entries . . . . . . . . . . . . . . . . . . . . . . . . . . . . .555

QoS options for IP ACLs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .556

Enabling ACL duplication check . . . . . . . . . . . . . . . . . . . . . . . . . . . .557

ACL accounting . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .557

Displaying accounting statistics for all ACLs . . . . . . . . . . . . . .557

Displaying statistics for an interface . . . . . . . . . . . . . . . . . . . .558

Clearing the ACL statistics. . . . . . . . . . . . . . . . . . . . . . . . . . . . .559

Enabling ACL filtering of fragmented or non-fragmented

packets . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .560

ACL filtering for traffic switched within a virtual routing

interface. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .561

ICMP filtering for extended ACLs . . . . . . . . . . . . . . . . . . . . . . . . . . .561

Troubleshooting ACLs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .563

Chapter 22 Policy-Based Routing

Policy-Based Routing (PBR) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .565

Configuration considerations . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .565

Configuring a PBR policy. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .566

Configure the ACLs. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .566

Configure the route map . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .567

Enabling PBR . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .568

Configuration examples . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .569

Basic example . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .569

Setting the next hop. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .570

Setting the output interface to the null interface . . . . . . . . . . 571

Trunk formation. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 571

BigIron RX Series Configuration Guide xix

53-1001986-01

Chapter 23 Configuring IP Multicast Protocols

Overview of IP multicasting . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .573

Multicast terms . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .573

Changing global IP multicast parameters . . . . . . . . . . . . . . . . . . . . 574

Defining the maximum number of DVMRP cache entries. . . . 574

Defining the maximum number of PIM cache entries. . . . . . . 574

IP multicast boundaries . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 574

Configuring multicast boundaries. . . . . . . . . . . . . . . . . . . . . . .575

Displaying multicast boundaries. . . . . . . . . . . . . . . . . . . . . . . .575

Passive Multicast Route Insertion (PMRI) . . . . . . . . . . . . . . . . . . . . 576

Configuring PMRI . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 576

Displaying hardware-drop . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 576

Changing IGMP V1 and V2 parameters. . . . . . . . . . . . . . . . . . . . . .577

Modifying IGMP (V1 and V2) query interval period . . . . . . . . .577

Modifying IGMP (V1 and V2) membership time. . . . . . . . . . . .577

Modifying IGMP (V1 and V2) maximum response time. . . . . .578

Adding an interface to a multicast group . . . . . . . . . . . . . . . . . . . .578

IGMP v3 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .579

Default IGMP version. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .580

Compatibility with IGMP V1 and V2 . . . . . . . . . . . . . . . . . . . . .580

Enabling the IGMP version per interface setting . . . . . . . . . . .581

Enabling the IGMP version on a physical port within a

virtual routing interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .581

Setting the query interval . . . . . . . . . . . . . . . . . . . . . . . . . . . . .583

Setting the group membership time. . . . . . . . . . . . . . . . . . . . .583

Setting the maximum response time . . . . . . . . . . . . . . . . . . . .583

Displaying IGMPv3 information. . . . . . . . . . . . . . . . . . . . . . . . .583

Clearing IGMP statistics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .587

IGMP V3 and source specific multicast protocols . . . . . . . . . .587

Configuring a static multicast route. . . . . . . . . . . . . . . . . . . . . . . . .587

Next hop validation check . . . . . . . . . . . . . . . . . . . . . . . . . . . . .589

PIM dense . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .589

Initiating PIM multicasts on a network . . . . . . . . . . . . . . . . . . .590

Pruning a multicast tree . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .590

Grafts to a multicast tree . . . . . . . . . . . . . . . . . . . . . . . . . . . . .592

PIM DM versions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .592

Configuring PIM DM . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .593

Failover time in a multi-path topology . . . . . . . . . . . . . . . . . . .597

Modifying the TTL. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .597

PIM Sparse . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .597

PIM Sparse router types . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .598

RP paths and SPT paths . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .599

Configuring PIM Sparse. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .599

Route selection precedence for multicast. . . . . . . . . . . . . . . . . . . .604

Configuring the route precedence by specifying the route types604

Displaying the route selection. . . . . . . . . . . . . . . . . . . . . . . . . .605

xx BigIron RX Series Configuration Guide

53-1001986-01

Changing the Shortest Path Tree (SPT) threshold . . . . . . . . . . . . .606

Changing the PIM join and prune message interval . . . . . . . .607

MLL optimization . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .607

Displaying PIM Sparse configuration information and

statistics. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .607

Displaying basic PIM Sparse configuration information . . . . .608

Displaying a list of multicast groups. . . . . . . . . . . . . . . . . . . . .609

Displaying BSR information. . . . . . . . . . . . . . . . . . . . . . . . . . . .610

Displaying candidate RP information . . . . . . . . . . . . . . . . . . . .611

Displaying RP-to-group mappings . . . . . . . . . . . . . . . . . . . . . . .612

Displaying RP information for a PIM Sparse group . . . . . . . . .612

Displaying the RP set list . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .613

Displaying multicast neighbor information. . . . . . . . . . . . . . . .613

Displaying information about an upstream neighbor device .614

Displaying the PIM multicast cache . . . . . . . . . . . . . . . . . . . . .615

Displaying PIM traffic statistics. . . . . . . . . . . . . . . . . . . . . . . . . 617

PIM-SSMv4 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 617

Enabling SSM . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .618

Configuring Multicast Source Discovery Protocol (MSDP) . . . . . . .618

Peer Reverse Path Forwarding (RPF) flooding . . . . . . . . . . . . .620

Source active caching . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .620

Configuring MSDP . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .620

Enabling MSDP. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .621

Configuring MSDP peers . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .621

Designating an interface’s IP address as the RP’s

IP address. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .622

Filtering MSDP source-group pairs . . . . . . . . . . . . . . . . . . . . . .622

Filtering incoming source-active messages . . . . . . . . . . . . . . .622

Filtering advertised source-active messages. . . . . . . . . . . . . .624

Displaying the differences before and after the source active

filters are applied . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .625

Configuring MSDP mesh groups . . . . . . . . . . . . . . . . . . . . . . . . . . .627

Configuring MSDP mesh group. . . . . . . . . . . . . . . . . . . . . . . . .628

Displaying summary information . . . . . . . . . . . . . . . . . . . . . . .634

Displaying peer information . . . . . . . . . . . . . . . . . . . . . . . . . . .635

Displaying source active cache information. . . . . . . . . . . . . . .638

Clearing MSDP information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .638

Clearing peer information . . . . . . . . . . . . . . . . . . . . . . . . . . . . .638

Clearing the source active cache . . . . . . . . . . . . . . . . . . . . . . .639

Clearing MSDP statistics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .639

DVMRP overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .639

Initiating DVMRP multicasts on a network . . . . . . . . . . . . . . . .640

Pruning a multicast tree . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .640

Grafts to a multicast tree . . . . . . . . . . . . . . . . . . . . . . . . . . . . .642

Page is loading ...

Dell PowerConnect B-RX User guide

Dell PowerConnect B-RX User guide

Related papers

Other documents