Page is loading ...
SmartSwitch Router
User Reference Manual
9032578
SSR User Reference Manual iii
Notice
Cabletron Systems reserves the right to make changes in specifications and other information contained
in this document without prior notice. The reader should in all cases consult Cabletron Systems to
determine whether any such changes have been made.
The hardware, firmware, or software described in this manual is subject to change without notice.
IN NO EVENT SHALL CABLETRON SYSTEMS BE LIABLE FOR ANY INCIDENTAL,
INDIRECT, SPECIAL, OR CONSEQUENTIAL DAMAGES WHATSOEVER (INCLUDING BUT
NOT LIMITED TO LOST PROFITS) ARISING OUT OF OR RELATED TO THIS MANUAL OR
THE INFORMATION CONTAINED IN IT, EVEN IF CABLETRON SYSTEMS HAS BEEN
ADVISED OF, KNOWN, OR SHOULD HAVE KNOWN, THE POSSIBILITY OF SUCH
DAMAGES.
© Copyright April 1998 by:
Cabletron Systems, Inc.
35 Industrial Way
Rochester, NH 03867-5005
All Rights Reserved
Printed in the United States of America
Order Number:9032578
LANVIEW is a registered trademark, and SmartSwitch is a trademark of
Cabletron Systems, Inc.
CompuServe is a registered trademark of CompuServe, Inc.
i960 microprocessor is a registered trademark of Intel Corp.
Ethernet is a trademark of Xerox Corporation.
Notice
iv
FCC Notice
This device complies with Part 15 of the FCC rules. Operation is subject to the following two
conditions: (1) this device may not cause harmful interference, and (2) this device must accept any
interference received, including interference that may cause undesired operation.
NOTE: This equipment has been tested and found to comply with the limits for a Class A digital
device, pursuant to Part 15 of the FCC rules. These limits are designed to provide reasonable protection
against harmful interference when the equipment is operated in a commercial environment. This
equipment uses, generates, and can radiate radio frequency energy and if not installed in accordance
with the operator’s manual, may cause harmful interference to radio communications. Operation of this
equipment in a residential area is likely to cause interference in which case the user will be required to
correct the interference at his own expense.
WARNING: Changes or modifications made to this device which are not expressly approved by the
party responsible for compliance could void the user’s authority to operate the equipment.
VCCI Notice
This is a Class A product based on the standard of the Voluntary Control Council for Interference by
Information Technology Equipment (VCCI). If this equipment is used in a domestic environment, radio
disturbance may arise. When such trouble occurs, the user may be required to take corrective actions.
DOC Notice
This digital apparatus does not exceed the Class A limits for radio noise emissions from digital
apparatus set out in the Radio Interference Regulations of the Canadian Department of
Communications.
Le présent appareil numérique n’émet pas de bruits radioélectriques dépassant les limites applicables
aux appareils numériques de la class A prescrites dans le Règlement sur le brouillage radioélectrique
édicté par le ministère des Communications du Canada.
SSR User Reference Manual v
DECLARATION OF CONFORMITY
ADDENDUM
Application of Council Directive(s): 89/336/EEC
73/23/EEC
Manufacturer’s Name: Cabletron Systems, Inc.
Manufacturer’s Address: 35 Industrial Way
PO Box 5005
Rochester, NH 03867
European Representative Name: Mr. J. Solari
European Representative Address: Cabletron Systems Limited
Nexus House, Newbury
Business Park
London Road, Newbury
Berkshire RG13 2PZ, England
Conformance to Directive(s)/Product Standards:
EC Directive 89/336/EEC
EC Directive 73/23/EEC
EN 55022
EN 50082-1
EN 60950
Equipment Type/Environment: Networking Equipment, for
use in a Commercial or Light
Industrial Environment.
We the undersigned, hereby declare, under our sole responsibility, that the equipment
packaged with this notice conforms to the above directives.
Manufacturer Legal Representative in Europe
Mr. Ronald Fotino Mr. J. Solari
____________________________________________________ ____________________________________
Full Name Full Name
Principal Compliance Engineer Managing Director - E.M.E.A.
____________________________________________________ ____________________________________
Title Title
Rochester, NH, USA Newbury, Berkshire, England
____________________________________________________ ____________________________________
Location Location
Notice
vi
About This Manual
This manual provides detailed information and procedures for configuring the 8-slot
SmartSwitch Router (SSR-8) software. If you have not yet installed the SSR, use the
instructions in the SmartSwitch Router Getting Started Guide to install the chassis and
perform basic setup tasks, then return to this manual for more detailed configuration
information.
Who Should Read This Manual?
Read this manual if you are a network administrator responsible for configuring and
monitoring the SSR.
Preface
About This Manual
viii SSR User Reference Manual
How to Use This Manual
Related Documentation
The Cabletron Systems documentation set includes the following items. Refer to these
other documents to learn more about your product.
If You Want To... See...
Read overview information Chapter 1
Configure bridging Chapter 2
Configure IP interfaces and global routing parameters Chapter 3
Configure RIP routing Chapter 4
Configure OSPF routing Chapter 5
Configure Routing Policies Chapter 6
Configure IP Multicast routing Chapter 7
Configure IPX routing Chapter 8
Configure filters Chapter 9
Configure QoS (Quality of Service) parameters Chapter 10
Monitor performance Chapter 11
For Information About... See the...
Installing and setting up the SSR SmartSwitch Router Getting Started
Guide
Managing the SSR using Cabletron
Systems’ element management appli-
cation
CoreWatch User’s Manual and the
CoreWatch online help
The complete syntax for all CLI com-
mands
SmartSwitch Router Command Line
Interface Reference Manual
About This Manual
SSR User Reference Manual ix
System messages and SNMP traps SmartSwitch Router Error Message Ref-
erence Manual
For Information About... See the...
About This Manual
x SSR User Reference Manual
Contents
Chapter 1 SmartSwitch Router Product Overview
Supported Media (Encapsulation Type). . . . . . . . . . . . . . . . . . . 1-2
Supported Routing Protocols . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-2
Configuring the Cabletron SmartSwitch Router . . . . . . . . . . . . . 1-3
Understanding the Command Line Interface . . . . . . . . . . . . 1-3
Basic Line Editing Commands . . . . . . . . . . . . . . . . . . . . . . . 1-3
Access Modes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-4
User Mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-5
Enable Mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-6
Configure Mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-7
Boot PROM Mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-8
Disabling a Function or Feature . . . . . . . . . . . . . . . . . . . . . . 1-9
Loading System Images and Configuration Files. . . . . . . . . . . . 1-9
Boot and System Image. . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-9
Configuration Files . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-9
Loading System Image Software . . . . . . . . . . . . . . . . . . . . 1-10
Loading Boot PROM Software . . . . . . . . . . . . . . . . . . . . . . 1-11
Activate the Configuration Commands in the Scratchpad . 1-12
Copy the Configuration to the Startup Configuration File. . 1-13
Managing the SSR. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-13
Set SSR Name. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-14
Set SSR Date and Time. . . . . . . . . . . . . . . . . . . . . . . . . . . 1-14
Configure the SSR CLI. . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-14
Configure SNMP Services . . . . . . . . . . . . . . . . . . . . . . . . . 1-14
Configure DNS . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-15
Configure HTTP Services. . . . . . . . . . . . . . . . . . . . . . . . . . 1-15
Monitoring Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1-15
Chapter 2 Bridging Configuration Guide
Bridging Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-1
Contents
xii SSR User Reference Manual
Spanning Tree (IEEE 802.1d) . . . . . . . . . . . . . . . . . . . . . . . 2-1
Bridging Modes (Flow-Based and Address-Based) . . . . . . . 2-1
VLAN Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-2
SSR VLAN Support . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-3
VLANs and the SSR. . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-4
Ports, VLANs, and L3 Interfaces . . . . . . . . . . . . . . . . . . 2-4
Access Ports and Trunk Ports (802.1Q support) . . . . . . 2-5
Explicit and Implicit VLANs. . . . . . . . . . . . . . . . . . . . . . . 2-5
Configuring SSR Bridging Functions . . . . . . . . . . . . . . . . . . . . . 2-6
Configure Address-based or Flow-based Bridging. . . . . . . . 2-6
Configuring Spanning Tree . . . . . . . . . . . . . . . . . . . . . . . . . 2-7
Adjust Spanning-Tree Parameters. . . . . . . . . . . . . . . . . . . . 2-7
Set the Bridge Priority. . . . . . . . . . . . . . . . . . . . . . . . . . . 2-8
Set a Port Priority . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-8
Assign Port Costs. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-8
Adjust Bridge Protocol Data Unit (BPDU) Intervals . . . . 2-8
Configuring a Port or Protocol based VLAN. . . . . . . . . . . . . 2-9
Create a Port or Protocol Based VLAN . . . . . . . . . . . . . 2-9
Adding Ports to a VLAN . . . . . . . . . . . . . . . . . . . . . . . . . 2-9
Configuring VLAN Trunk Ports. . . . . . . . . . . . . . . . . . . . . . 2-10
Configure Bridging for Non-IP/IPX Protocols . . . . . . . . . . . 2-10
Configure Layer-2 Filters . . . . . . . . . . . . . . . . . . . . . . . . . . 2-10
Monitor Bridging. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-11
Configuration Examples. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2-11
Creating an IP or IPX VLAN. . . . . . . . . . . . . . . . . . . . . . . . 2-11
Chapter 3 IP Routing Configuration Guide
IP Routing Overview. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-1
IP Routing Protocols. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-1
Unicast Routing Protocols . . . . . . . . . . . . . . . . . . . . . . . 3-1
Multicast Routing Protocols . . . . . . . . . . . . . . . . . . . . . . 3-2
Contents
SSR User Reference Manual xiii
Configuring IP Interfaces and Parameters. . . . . . . . . . . . . . . . . 3-2
Configure IP Addresses to Ports . . . . . . . . . . . . . . . . . . . . . 3-2
Configure IP Interfaces for a VLAN . . . . . . . . . . . . . . . . . . . 3-3
Specify Ethernet Encapsulation Method. . . . . . . . . . . . . . . . 3-3
Configure Address Resolution Protocol . . . . . . . . . . . . . . . . 3-3
Configure ARP Cache Entries . . . . . . . . . . . . . . . . . . . . 3-4
Configure Proxy ARP . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-4
Configure DNS Parameters . . . . . . . . . . . . . . . . . . . . . . . . . 3-4
Configure IP Services (ICMP) . . . . . . . . . . . . . . . . . . . . . . . 3-5
Monitor IP Parameters . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-5
Configuration Examples . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3-6
Assigning IP/IPX Interfaces . . . . . . . . . . . . . . . . . . . . . . . . . 3-6
Chapter 4 RIP Configuration Guide
RIP Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-1
Configure RIP. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-1
Enabling and Disabling RIP . . . . . . . . . . . . . . . . . . . . . . . . . 4-1
Configuring RIP Interfaces . . . . . . . . . . . . . . . . . . . . . . . . . . 4-1
Configure RIP Parameters . . . . . . . . . . . . . . . . . . . . . . . . . . 4-2
Configure RIP Route Preference . . . . . . . . . . . . . . . . . . . . . 4-3
Configure RIP Route Default-Metric. . . . . . . . . . . . . . . . . . . 4-3
Monitoring RIP . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-4
Configuration Example. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4-5
Chapter 5 OSPF Configuration Guide
OSPF Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5-1
Configure OSPF. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5-1
Enable OSPF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5-2
Configure OSPF Interface Parameters. . . . . . . . . . . . . . . . . 5-2
Configure an OSPF Area . . . . . . . . . . . . . . . . . . . . . . . . . . . 5-4
Contents
xiv SSR User Reference Manual
Configure OSPF Area Parameters. . . . . . . . . . . . . . . . . . . . 5-4
Create Virtual Links . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5-5
Configure Autonomous System External (ASE) Link
Advertisements. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5-6
Configure OSPF over Non-Broadcast Multiple Access . . . . 5-6
Monitoring OSPF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5-6
OSPF Configuration Examples . . . . . . . . . . . . . . . . . . . . . . . . . 5-8
Chapter 6 Routing Policy Configuration Guide
Route Import and Export Policy Overview . . . . . . . . . . . . . . . . . 6-1
Preference . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6-1
Import Policies . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6-2
Import-Source. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6-3
Route-Filter. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6-4
Export Policies . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6-4
Export-Destination . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6-4
Export-Source. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6-4
Route-Filter. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6-5
Specifying a Route Filter . . . . . . . . . . . . . . . . . . . . . . . . . . . 6-5
Aggregates and Generates . . . . . . . . . . . . . . . . . . . . . . . . . 6-6
Aggregate-Destination . . . . . . . . . . . . . . . . . . . . . . . . . . 6-7
Aggregate-Source . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6-7
Route-Filter. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6-7
Authentication. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6-8
Authentication Methods . . . . . . . . . . . . . . . . . . . . . . . . . 6-8
Authentication Keys and Key Management . . . . . . . . . . 6-8
Configure Simple Routing Policies. . . . . . . . . . . . . . . . . . . . . . . 6-9
Redistributing Static Routes. . . . . . . . . . . . . . . . . . . . . . . . . 6-9
Redistributing Directly Attached Networks. . . . . . . . . . . . . 6-10
Redistributing RIP into RIP. . . . . . . . . . . . . . . . . . . . . . . . . 6-10
Redistributing RIP into OSPF. . . . . . . . . . . . . . . . . . . . . . . 6-10
Contents
SSR User Reference Manual xv
Redistributing OSPF to RIP . . . . . . . . . . . . . . . . . . . . . . . . 6-11
Redistributing Aggregate Routes . . . . . . . . . . . . . . . . . . . . 6-11
Simple Route Redistribution Examples . . . . . . . . . . . . . . . 6-11
Example 1: Redistribution into RIP. . . . . . . . . . . . . . . . 6-11
Example 2: Redistribution into OSPF. . . . . . . . . . . . . . 6-13
Configure Advanced Routing Policies . . . . . . . . . . . . . . . . . . . 6-15
Export Policies . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6-15
Creating an Export Destination. . . . . . . . . . . . . . . . . . . . . . 6-16
Creating an Export Source. . . . . . . . . . . . . . . . . . . . . . . . . 6-17
Import Policies . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6-17
Creating an Import Source . . . . . . . . . . . . . . . . . . . . . . . . . 6-18
Creating a Route Filter . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6-18
Creating an Aggregate Route. . . . . . . . . . . . . . . . . . . . . . . 6-18
Creating an Aggregate Destination . . . . . . . . . . . . . . . . . . 6-20
Creating an Aggregate Source. . . . . . . . . . . . . . . . . . . . . . 6-20
Examples of Import Policies. . . . . . . . . . . . . . . . . . . . . . . . 6-20
Example 1: Importing from RIP . . . . . . . . . . . . . . . . . . 6-20
Example 2: Importing from OSPF. . . . . . . . . . . . . . . . . 6-23
Examples of Export Policies. . . . . . . . . . . . . . . . . . . . . . . . 6-27
Example 1: Exporting to RIP . . . . . . . . . . . . . . . . . . . . 6-27
Example 2: Exporting to OSPF. . . . . . . . . . . . . . . . . . . 6-31
Chapter 7 Multicast Routing Configuration Guide
IP Multicast Overview. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7-1
IGMP Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7-1
DVMRP Overview. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7-1
Configure IGMP . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7-2
Configuring IGMP on an IP Interface . . . . . . . . . . . . . . . . . . 7-2
Configure IGMP Query Interval . . . . . . . . . . . . . . . . . . . . . . 7-3
Configure IGMP Response Wait Time . . . . . . . . . . . . . . . . . 7-3
Configure Per-Interface Control of IGMP Membership. . . . . 7-3
Contents
xvi SSR User Reference Manual
Configure DVMRP . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7-4
Starting and Stopping DVMRP. . . . . . . . . . . . . . . . . . . . . . . 7-4
Configure DVMRP on an Interface. . . . . . . . . . . . . . . . . . . . 7-4
Configure DVMRP Parameters . . . . . . . . . . . . . . . . . . . . . . 7-4
Configure the DVMRP Routing Metric . . . . . . . . . . . . . . . . . 7-5
Configure DVMRP TTL and Scope . . . . . . . . . . . . . . . . . . . 7-5
Configure a DVMRP Tunnel. . . . . . . . . . . . . . . . . . . . . . . . . 7-6
Monitor IGMP and DVMRP . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7-7
Configuration Examples. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7-7
Chapter 8 IPX Routing Configuration Guide
IPX Routing Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8-1
RIP (Routing Information Protocol) . . . . . . . . . . . . . . . . . . . 8-1
SAP (Service Advertising Protocol) . . . . . . . . . . . . . . . . . . . 8-2
Configuring IPX RIP and SAP . . . . . . . . . . . . . . . . . . . . . . . . . . 8-2
IPX RIP. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8-2
IPX SAP . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8-3
Creating IPX Interfaces . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8-3
IPX Addresses . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8-3
Configuring IPX Interfaces and Parameters. . . . . . . . . . . . . . . . 8-3
Configure IPX Addresses to Ports . . . . . . . . . . . . . . . . . . . . 8-3
Configure IPX Interfaces for a VLAN . . . . . . . . . . . . . . . . . . 8-3
Specify IPX Encapsulation Method . . . . . . . . . . . . . . . . . . . 8-4
Configure IPX Routing . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8-4
Enable IPX RIP . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8-4
Enable SAP . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8-5
Configure Static Routes . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8-5
Configure Static SAP Table Entries . . . . . . . . . . . . . . . . . . . 8-5
Control Access to IPX Networks . . . . . . . . . . . . . . . . . . . . . 8-5
Create an IPX Access Control List. . . . . . . . . . . . . . . . . 8-6
Create an IPX SAP Access Control List. . . . . . . . . . . . . 8-6
Contents
SSR User Reference Manual xvii
Create an IPX RIP Access Control List . . . . . . . . . . . . . 8-7
Monitor an IPX Network . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8-7
Configuration Examples . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8-7
Chapter 9 Security Configuration Guide
Security Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9-1
Configuring SSR Access Security . . . . . . . . . . . . . . . . . . . . . . . 9-1
Configure TACACS . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9-1
Monitor TACACS . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9-2
Configure Passwords . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9-2
L2 Security Filters. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9-2
Configuring Layer-2 Address Filters. . . . . . . . . . . . . . . . . . . 9-3
Configuring Layer-2 Port-to-Address Lock Filters . . . . . . . . 9-4
Configuring Layer-2 Static Entry Filters . . . . . . . . . . . . . . . . 9-4
Configuring Layer-2 Secure Port Filters . . . . . . . . . . . . . . . . 9-5
Monitor Layer-2 Security Filters . . . . . . . . . . . . . . . . . . . . . . 9-5
Layer-2 Filter Examples . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9-7
Example 1: Address Filters. . . . . . . . . . . . . . . . . . . . . . . 9-7
Example 2 : Secure Ports. . . . . . . . . . . . . . . . . . . . . . . . 9-8
L3 Access Control Lists (ACLs) . . . . . . . . . . . . . . . . . . . . . . . . . 9-9
Traffic Filters at Layer-3 and 4 (Access Control List) . . . . . . 9-9
The Anatomy of an ACL rule . . . . . . . . . . . . . . . . . . . . . . . . 9-9
The Ordering of ACL rules . . . . . . . . . . . . . . . . . . . . . . . . . 9-10
Implicit Deny Rule. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9-11
Applying ACLs to Interfaces. . . . . . . . . . . . . . . . . . . . . . . . 9-12
Applying ACLs to Services. . . . . . . . . . . . . . . . . . . . . . . . . 9-13
ACL Logging. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9-13
Maintaining ACLs offline using TFTP or RCP . . . . . . . . . . 9-14
Maintaining ACLs using the ACL Editor . . . . . . . . . . . . . . . 9-15
Configure ACL . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9-15
Defining an IP ACL. . . . . . . . . . . . . . . . . . . . . . . . . . . . 9-16
Contents
xviii SSR User Reference Manual
Defining an IPX ACL. . . . . . . . . . . . . . . . . . . . . . . . . . . 9-16
Applying an ACL to an Interface. . . . . . . . . . . . . . . . . . 9-16
Applying an ACL to a Service. . . . . . . . . . . . . . . . . . . . 9-16
Edit an ACL with the ACL Editor. . . . . . . . . . . . . . . . . . 9-16
Monitor Access Control Lists . . . . . . . . . . . . . . . . . . . . . . . 9-16
Chapter 10 QoS Configuration Guide
QoS and L2/L3/L4 flow Overview. . . . . . . . . . . . . . . . . . . . . . . 10-1
Layer-2, 3, 4 Flow Specification . . . . . . . . . . . . . . . . . . . . . 10-1
Precedence for Layer-3 Flows . . . . . . . . . . . . . . . . . . . . . . 10-2
SSR Queuing Policies . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10-2
Configure Layer-2 QoS . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10-2
Configure Layer-3 and 4 QoS . . . . . . . . . . . . . . . . . . . . . . . . . 10-3
Configure IP QoS Policies . . . . . . . . . . . . . . . . . . . . . . . . . 10-3
Set an IP QoS Policy . . . . . . . . . . . . . . . . . . . . . . . . . . 10-4
Specify Precedence for an IP QoS Policy . . . . . . . . . . 10-4
Configure IPX QoS Policies . . . . . . . . . . . . . . . . . . . . . . . . 10-4
Set an IPX QoS Policy . . . . . . . . . . . . . . . . . . . . . . . . . 10-4
Specify Precedence for an IPX QoS Policy . . . . . . . . . 10-5
Configure SSR Queuing Policy . . . . . . . . . . . . . . . . . . . . . . . . 10-5
Allocating Bandwidth for a Weighted-Fair Queuing Policy. 10-5
Monitor QoS. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10-6
Chapter 11 Performance Monitoring Guide
Performance Monitoring Overview. . . . . . . . . . . . . . . . . . . . . . 11-1
Chapter 1
Cha
p
ter 1 SmartSwitch Router Product
Overview
The 8-slot SmartSwitch Router (SSR-8) provides non-blocking, wire-speed Layer-2
(switching), Layer-3 (routing) and Layer-4 (application) switching. The hardware
provides wire-speed performance regardless of the performance monitoring, filtering,
and Quality of Service (QoS) features enabled by the software. You do not need to
accept performance compromises to run QoS or access control lists (ACLs).
The following table lists the basic hardware and software specifications for the SSR-8.
Feature Specification
Throughput • 16-Gbps non-blocking switching fabric
• 15 million packets-per-second routing throughput
Capacity • Up to 250,000 routes
• Up to 2,000,000 Layer-4 application flows
• 400,000 Layer-2 MAC addresses
• 4,096 Virtual LANs (VLANs)
• 20,000 Layer-2 security and access-control filters
• 3MB input/output buffering per Gigabit port
• 1MB input/output buffering per 10/100 port
Routing protocols • IP: RIPv1/v2, OSPF
• IPX: RIP, SAP
• Multicast: IGMP, DVMRP
Bridging and
VLAN protocols
• 802.1d Spanning Tree
• 802.1Q (VLAN trunking)
Media Interface
protocols
• 802.3 (10Base-T)
• 802.3u (100Base-TX, 100BASE-FX)
• 802.3x (1000Base-SX, 1000Base-LX)
• 802.3z (1000Base-SX, 1000Base-LX)
Chapter 1: SmartSwitch Router Product Overview
1 - 2 SSR User Reference Manual
Supported Media (Encapsulation Type)
The SSR supports the following industry-standard networking media:
• IP: IEEE 802.3 SNAP and Ethernet Type II
• IPX: IEEE 802.3 SNAP, Ethernet Type II, IPX 802.3, 802.2
• 802.1Q VLAN Encapsulation
Supported Routing Protocols
The SSR supports many routing protocols based on open standards. The SSR can
receive and forward packets concurrently from any combination of the following:
• Interior Gateway Protocols
• Open Shortest Path First (OSPF) Version 2
• Routing Information Protocol (RIP) Version 1, 2
Quality of Service
(QoS)
• Layer-2 prioritization (802.1p)
• Layer-3 source-destination flows
• Layer-4 source-destination flows
• Layer-4 application flows
RMON • RMONv1/v2 for each port
Management • SNMP
• CoreWatch Element Manager (GUI)
• Emacs-like Command Line Interface (CLI)
Port mirroring • Traffic to Control Module
• Traffic from specific ports
• Traffic to specific chassis slots (line cards)
Hot swapping • Power supply (when redundant supply is installed
and online)
Redundancy • Redundant and hot-swappable power supplies
Feature Specification
/
