Dell PowerConnect B-MLXE16 Owner's manual

53-1002113-01

02 November 2010

PowerConnect B-MLXe

Configuration Guide

Information in this document is subject to change without notice.

Reproduction of these materials in any manner whatsoever without the written permission of Dell Inc. is strictly forbidden.

Trademarks used in this text: Dell, the DELL logo, Inspiron, Dell Precision, Dimension, OptiPlex, Latitude, PowerEdge, PowerVault,

PowerApp, Dell OpenManage and the YOURS IS HERE

logo are trademarks of Dell Inc.; Intel, Pentium, and Celeron are registered

trademarks of Intel Corporation in the U.S. and other countries; Microsoft, Windows, Windows Server, MS-DOS and Windows Vista

are either trademarks or registered trademarks of Microsoft Corporation in the United States and/or other countries.

Other trademarks and trade names may be used in this document to refer to either the entities claiming the marks and names or

their products. Dell Inc. disclaims any proprietary interest in trademarks and trade names other than its own.

Regulatory Model Codes: Brocade MLXe-4, Brocade MLXe-8, Brocade MLXe-16

PowerConnect B-MLXe Configuration Guide iii

53-1002113-01

Contents

About This Document

Audience . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . lvii

Supported features . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . lvii

Document conventions. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .lxiii

Text formatting . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . lxiii

Command syntax conventions . . . . . . . . . . . . . . . . . . . . . . . . . lxiv

Notes, cautions, and danger notices . . . . . . . . . . . . . . . . . . . . lxiv

Related publications . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .lxiv

Getting technical help or reporting errors . . . . . . . . . . . . . . . . . . . . . lxv

Contacting Dell . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . lxv

Chapter 1 Getting Started with the Command Line Interface

Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1

Logging on through the CLI. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2

On-line help . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2

Command completion . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2

Scroll control. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2

Line editing commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3

EXEC commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4

Global level . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4

CONFIG commands. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5

Accessing the CLI . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7

Single user in CONFIG mode. . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8

Multi-user conflict during deletion of

group configuration (or stanza). . . . . . . . . . . . . . . . . . . . . . . . . . . 9

Navigating among command levels . . . . . . . . . . . . . . . . . . . . . . . 9

CLI command structure . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10

Searching and filtering output. . . . . . . . . . . . . . . . . . . . . . . . . . .11

Allowable characters for LAG names . . . . . . . . . . . . . . . . . . . . . 15

CLI parsing enhancement . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 16

Syntax shortcuts . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 16

Saving configuration changes. . . . . . . . . . . . . . . . . . . . . . . . . . . 16

Chapter 2 Securing Access to Management Functions

Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17

Securing access methods . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .18

Restricting remote access to management functions . . . . . . . . . . . 20

Using ACLs to restrict remote access . . . . . . . . . . . . . . . . . . . . .20

iv PowerConnect B-MLXe Configuration Guide

53-1002113-01

Defining the console idle time . . . . . . . . . . . . . . . . . . . . . . . . . .22

Restricting remote access to the device to

specific IP addresses. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 23

Defining the Telnet idle time . . . . . . . . . . . . . . . . . . . . . . . . . . . . 24

Specifying the maximum login attempts for Telnet access. . . . 24

Restricting remote access to the device

to specific VLAN IDs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .25

Enabling specific access methods . . . . . . . . . . . . . . . . . . . . . . .26

Setting passwords. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .26

Setting a Telnet password . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 27

Setting passwords for management privilege levels. . . . . . . . . 27

Recovering from a lost password . . . . . . . . . . . . . . . . . . . . . . . .29

Displaying the SNMP community string . . . . . . . . . . . . . . . . . . .30

Disabling password encryption . . . . . . . . . . . . . . . . . . . . . . . . . .30

Specifying a minimum password length. . . . . . . . . . . . . . . . . . . 30

Setting up local user accounts. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 31

Configuring a local user account . . . . . . . . . . . . . . . . . . . . . . . . 31

Enhancements to username and password . . . . . . . . . . . . . . . . . . .33

Enabling enhanced user password combination

requirements . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .33

Requirement to accept the message of the day . . . . . . . . . . . . 36

Enhanced login lockout . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .36

Setting passwords to expire . . . . . . . . . . . . . . . . . . . . . . . . . . . . 36

Creating an encrypted all-numeric password . . . . . . . . . . . . . . 37

Granting access by time of day. . . . . . . . . . . . . . . . . . . . . . . . . . 37

Configuring SSL security for the Web

Management Interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 37

Enabling the SSL server on a PowerConnect router . . . . . . . . . 37

Importing digital certificates and RSA

private key files . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .38

Generating an SSL certificate . . . . . . . . . . . . . . . . . . . . . . . . . . .38

Configuring TACACS or TACACS+ security . . . . . . . . . . . . . . . . . . . . . 39

How TACACS+ differs from TACACS. . . . . . . . . . . . . . . . . . . . . . .39

TACACS or TACACS+ authentication, authorization,

and accounting . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 39

TACACS or TACACS+ configuration considerations . . . . . . . . . .43

Enabling SNMP traps for TACACS . . . . . . . . . . . . . . . . . . . . . . . .44

Identifying the TACACS or TACACS+ servers. . . . . . . . . . . . . . . .44

Specifying different servers for individual AAA

TACACS functions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .45

Setting optional TACACS or TACACS+ parameters . . . . . . . . . . . 46

Configuring authentication-method lists for

TACACS or TACACS+ . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 47

Configuring TACACS+ authorization . . . . . . . . . . . . . . . . . . . . . . 49

Configuring TACACS+ accounting . . . . . . . . . . . . . . . . . . . . . . . .52

Configuring an interface as the source for all

TACACS or TACACS+ packets . . . . . . . . . . . . . . . . . . . . . . . . . . . .53

Displaying TACACS or TACACS+ statistics and

configuration information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .54

Configuring RADIUS security . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .55

PowerConnect B-MLXe Configuration Guide v

53-1002113-01

RADIUS authentication, authorization, and

accounting . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .55

RADIUS configuration considerations. . . . . . . . . . . . . . . . . . . . .60

RADIUS configuration procedure . . . . . . . . . . . . . . . . . . . . . . . .60

Configuring Dell-specific attributes on the

RADIUS server . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 60

Enabling SNMP traps for RADIUS . . . . . . . . . . . . . . . . . . . . . . . . 62

Identifying the RADIUS server to the PowerConnect router . . .63

Specifying different servers for individual

AAA functions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 63

Setting RADIUS parameters . . . . . . . . . . . . . . . . . . . . . . . . . . . .64

Configuring authentication-method lists for RADIUS. . . . . . . . .65

Configuring RADIUS authorization . . . . . . . . . . . . . . . . . . . . . . .67

Configuring RADIUS accounting . . . . . . . . . . . . . . . . . . . . . . . . .68

Configuring an interface as the source for all

RADIUS packets . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .70

Displaying RADIUS configuration information . . . . . . . . . . . . . .70

Configuring AAA on the console . . . . . . . . . . . . . . . . . . . . . . . . . . . . .72

Configuring AAA authentication-method

lists for login . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 72

Configuring authentication-method lists . . . . . . . . . . . . . . . . . . . . . . 73

Configuration considerations for

authentication-method lists . . . . . . . . . . . . . . . . . . . . . . . . . . . . 74

Examples of authentication-method lists. . . . . . . . . . . . . . . . . .75

Chapter 3 Configuring Basic Parameters

Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 77

Entering system administration information. . . . . . . . . . . . . . . . . . . 78

Configuring Simple Network Management

(SNMP) traps . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 78

Specifying an SNMP trap receiver . . . . . . . . . . . . . . . . . . . . . . .79

Specifying a single trap source . . . . . . . . . . . . . . . . . . . . . . . . . . 80

Setting the SNMP trap holddown time . . . . . . . . . . . . . . . . . . . . 80

Disabling SNMP traps . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 81

Disabling Syslog messages and traps for

CLI access. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .82

Configuring SNMP ifIndex . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .83

On NetIron MLX Series devices only. . . . . . . . . . . . . . . . . . . . . . 83

Configuring optical monitoring . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .84

Displaying media information. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 85

Optics compatibility checking. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .86

Disabling transceiver type checking . . . . . . . . . . . . . . . . . . . . . . 87

Designating an interface as the packet source . . . . . . . . . . . . . . . . 87

Configuring an interface as the source for

all Telnet packets . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 87

Cancelling an outbound Telnet session . . . . . . . . . . . . . . . . . . . 88

vi PowerConnect B-MLXe Configuration Guide

53-1002113-01

Configuring an interface as the source for all

SSH packets . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .88

Configuring an interface as the source for all

SNTP packets . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .88

Configuring an interface as the source for all

TFTP packets . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .89

Configuring an interface as the source for all

TACACS or TACACS+ packets . . . . . . . . . . . . . . . . . . . . . . . . . . . .89

Configuring an interface as the source for all

RADIUS packets . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .90

Specifying a Simple Network Time Protocol

(SNTP) server. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .90

Configuring the device as an SNTP server . . . . . . . . . . . . . . . . . . . .92

Displaying SNTP server information . . . . . . . . . . . . . . . . . . . . . .93

Setting the system clock. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .94

DST “change" notice for networks using US

time zones . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .95

Creating a command alias . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .96

Removing an alias . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .96

Displaying a list of all configured alias . . . . . . . . . . . . . . . . . . . . 96

Limiting broadcast, multicast, or unknown

unicast rates . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .96

Limiting broadcasts . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 97

Limiting multicasts. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 97

Limiting unknown unicasts . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 97

Configuring CLI banners . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 97

Setting a message of the day banner. . . . . . . . . . . . . . . . . . . . .98

Setting a privileged EXEC CLI level banner . . . . . . . . . . . . . . . .98

Displaying a message on the console when an

incoming Telnet session Is detected. . . . . . . . . . . . . . . . . . . . . .98

Configuring terminal display. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .99

Checking the length of terminal displays . . . . . . . . . . . . . . . . . .99

Enabling or disabling routing protocols . . . . . . . . . . . . . . . . . . . . . . . 99

Displaying and modifying default settings

for system parameters . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .100

Enabling or disabling layer 2 switching . . . . . . . . . . . . . . . . . . . . .104

Configuring static MAC addresses . . . . . . . . . . . . . . . . . . . . . . . . .105

Changing the MAC age time . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .106

Configuring static ARP entries . . . . . . . . . . . . . . . . . . . . . . . . . . . . .106

Configuring system max values . . . . . . . . . . . . . . . . . . . . . . . . . . . .106

Configuring CAM size for an IPv4 multicast group . . . . . . . . . . . . .109

Configuring CAM size for an IPv6 multicast group . . . . . . . . . . . . .110

Configuring profiles with a zero-size IPv4 or

IPv6 ACL . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .111

PowerConnect B-MLXe Configuration Guide vii

53-1002113-01

Maintaining system-max configuration with

available system resources . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .112

Configuration time . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .112

Bootup time . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .112

L2 elements . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .114

L3 elements . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .114

VPLS elements . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .115

Miscellaneous elements . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .115

Monitoring dynamic memory allocation . . . . . . . . . . . . . . . . . . . . .115

Switch fabric fault monitoring . . . . . . . . . . . . . . . . . . . . . . . . . . . . .117

Displaying switch fabric information. . . . . . . . . . . . . . . . . . . . .117

Displaying switch fabric module information . . . . . . . . . . . . . .118

Powering a switch fabric link on or off manually . . . . . . . . . . .118

Powering a switch fabric module off automatically

on failure. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .119

Switch fabric log messages. . . . . . . . . . . . . . . . . . . . . . . . . . . .119

Switch fabric utilization monitoring . . . . . . . . . . . . . . . . . . . . . . . . .120

Verifying an image checksum. . . . . . . . . . . . . . . . . . . . . . . . . . . . . .121

Displaying information for an interface for an

Ethernet port . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .121

Displaying the full port name for an Ethernet interface . . . . .122

Displaying statistics information for an

Ethernet port . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .125

Monitoring Ethernet port statistics in real time. . . . . . . . . . . .125

Displaying recent traffic statistics for an Ethernet port . . . . .129

Configuring SNMP to revert ifType to legacy values . . . . . . . . . . . .131

Configuring snAgentConfigModuleType to return

original values . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .131

Preserving interface statistics in SNMP . . . . . . . . . . . . . . . . . . . . .132

Chapter 4 Configuring Interface Parameters

Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .133

Assigning a port name . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .134

Assigning an IP address to a port . . . . . . . . . . . . . . . . . . . . . . . . . .134

Modifying port speed . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .134

Modifying port mode. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .135

Auto Negotiation Speed Limit . . . . . . . . . . . . . . . . . . . . . . . . . .135

Disabling or re-enabling a port. . . . . . . . . . . . . . . . . . . . . . . . . . . . .136

Disabling Source Address Learning on a port. . . . . . . . . . . . . . . . .137

Changing the default Gigabit negotiation mode . . . . . . . . . . . . . . .137

Changing the negotiation mode . . . . . . . . . . . . . . . . . . . . . . . .137

Disabling or re-enabling flow control . . . . . . . . . . . . . . . . . . . . . . . .137

Specifying threshold values for flow control . . . . . . . . . . . . . .138

viii PowerConnect B-MLXe Configuration Guide

53-1002113-01

Modifying port priority (QoS). . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .139

Setting IP VPN packets with a TTL value of 1

to be dropped . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .139

Port transition hold timer . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .139

Port flap dampening . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .140

Configuring port link dampening on an interface . . . . . . . . . .140

Configuring port link dampening on a LAG . . . . . . . . . . . . . . .140

Re-enabling a port disabled by port link dampening. . . . . . . .140

Displaying ports configured with port link dampening . . . . . . 141

Port loop detection . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .142

Strict mode and Loose mode . . . . . . . . . . . . . . . . . . . . . . . . . .142

Recovering disabled ports. . . . . . . . . . . . . . . . . . . . . . . . . . . . .142

Disable duration and loop detection interval. . . . . . . . . . . . . .142

Enabling loop detection. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .143

Configuring a global loop detection interval . . . . . . . . . . . . . .144

Configuring the device to automatically

re-enable ports. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .144

Clearing loop-detection . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .144

Displaying loop-detection information . . . . . . . . . . . . . . . . . . .145

Syslog message . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .145

Mirroring and Monitoring . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .146

Configuration guidelines for monitoring traffic . . . . . . . . . . . .146

Assigning a mirror port and monitor ports . . . . . . . . . . . . . . . .146

Displaying mirror and monitor port configuration . . . . . . . . . .147

ACL-based inbound mirroring . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .148

Considerations when configuring ACL-based

inbound mirroring . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .148

Configuring ACL-based inbound mirroring . . . . . . . . . . . . . . . .149

10G WAN PHY fault and performance management. . . . . . . . . . .152

Wait for all cards feature . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .156

Link fault signaling . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .157

Displaying and clearing remote fault counters . . . . . . . . . . . . . . . .158

Limits and restrictions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .159

Local fault event detection and counters . . . . . . . . . . . . . . . . . . . .159

Displaying and clearing local fault counters . . . . . . . . . . . . . .159

Displaying Network Processor statistics . . . . . . . . . . . . . . . . . . . . .160

Relationships between some counters . . . . . . . . . . . . . . . . . .163

Clearing the NP statistics counters . . . . . . . . . . . . . . . . . . . . .163

Chapter 5 Enabling the Foundry Discovery Protocol (FDP) and

Reading Cisco Discovery Protocol (CDP) Packets

Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .165

Using FDP . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .165

Configuring FDP . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .166

Displaying FDP information . . . . . . . . . . . . . . . . . . . . . . . . . . . .167

Clearing FDP and CDP information. . . . . . . . . . . . . . . . . . . . . .169

PowerConnect B-MLXe Configuration Guide ix

53-1002113-01

Reading CDP packets . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .170

Enabling interception of CDP packets globally . . . . . . . . . . . .170

Enabling interception of CDP packets on

an interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .170

Displaying CDP information. . . . . . . . . . . . . . . . . . . . . . . . . . . .170

Clearing CDP information . . . . . . . . . . . . . . . . . . . . . . . . . . . . .172

Chapter 6 Using a Redundant Management Module

Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .175

How management module redundancy works . . . . . . . . . . . . . . . .175

Management module redundancy overview . . . . . . . . . . . . . .175

Management module switchover . . . . . . . . . . . . . . . . . . . . . . . 176

Switchover implications. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .177

Management module redundancy configuration . . . . . . . . . . . . . .178

Changing the default active chassis slot . . . . . . . . . . . . . . . . .178

Managing management module redundancy. . . . . . . . . . . . . . . . .179

File synchronization between active and standby

management modules . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .179

Manually switching over to the standby management

module . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .181

Rebooting the active and standby management

modules . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .181

Monitoring management module redundancy . . . . . . . . . . . . . . . .182

Determining management module status . . . . . . . . . . . . . . . .182

Monitoring the status change of a module . . . . . . . . . . . . . . .183

Displaying temperature information . . . . . . . . . . . . . . . . . . . . .184

Displaying switchover information . . . . . . . . . . . . . . . . . . . . . . . . . .184

Flash memory and PCMCIA flash card file

management commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .185

Verifying available flash space on the management

module before an image is copied. . . . . . . . . . . . . . . . . . . . . . . . . .186

Management focus . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .187

Flash memory file system . . . . . . . . . . . . . . . . . . . . . . . . . . . . .188

PCMCIA flash card file system. . . . . . . . . . . . . . . . . . . . . . . . . .189

Wildcards . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .190

Formatting a flash card . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .190

Determining the current management focus. . . . . . . . . . . . . .191

Switching the management focus . . . . . . . . . . . . . . . . . . . . . .191

Displaying a directory of the files . . . . . . . . . . . . . . . . . . . . . . .192

Displaying the contents of a file . . . . . . . . . . . . . . . . . . . . . . . .194

Displaying the hexadecimal output of a file. . . . . . . . . . . . . . .195

Creating a subdirectory . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .195

Removing a subdirectory. . . . . . . . . . . . . . . . . . . . . . . . . . . . . .197

Renaming a file . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .198

Changing the read-write attribute of a file . . . . . . . . . . . . . . . .198

Deleting a file . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .199

Recovering (“undeleting”) a file . . . . . . . . . . . . . . . . . . . . . . . .200

Appending a file to another file. . . . . . . . . . . . . . . . . . . . . . . . .200

x PowerConnect B-MLXe Configuration Guide

53-1002113-01

Copying files using the copy command . . . . . . . . . . . . . . . . . .201

Copying files using the cp command . . . . . . . . . . . . . . . . . . . .206

Loading the software . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .206

Saving configuration changes. . . . . . . . . . . . . . . . . . . . . . . . . .208

File management messages. . . . . . . . . . . . . . . . . . . . . . . . . . .209

Chapter 7 NetIron MLX Link Aggregation

Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .211

LAG formation rules . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .211

LAG load sharing . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .214

Hash based load sharing. . . . . . . . . . . . . . . . . . . . . . . . . . . . . .214

Per packet server LAG load sharing . . . . . . . . . . . . . . . . . . . . .217

Configuring a LAG . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .217

Creating a Link Aggregation Group (LAG) using

the LAG ID option . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .218

Deploying a LAG . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .222

Commands available under LAG once it is deployed . . . . . . .223

Configuring ACL-based mirroring. . . . . . . . . . . . . . . . . . . . . . . .223

Disabling ports within a LAG . . . . . . . . . . . . . . . . . . . . . . . . . . .224

Enabling ports within a LAG . . . . . . . . . . . . . . . . . . . . . . . . . . .224

Adding a Port to Currently Deployed LAG . . . . . . . . . . . . . . . . .224

Deleting a Port from a Currently Deployed LAG . . . . . . . . . . . .224

Monitoring an individual LAG port . . . . . . . . . . . . . . . . . . . . . .225

Assigning a name to a port within a LAG . . . . . . . . . . . . . . . . .226

Enabling sFlow forwarding on a port in a LAG . . . . . . . . . . . . .226

Setting the sFlow sampling rate for a port in a LAG . . . . . . . .226

Configuring a dynamic LAG within a VRF . . . . . . . . . . . . . . . . .227

Displaying LAG information . . . . . . . . . . . . . . . . . . . . . . . . . . . .227

Displaying LAG statistics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .232

Chapter 8 VLANs

Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .235

Tagged, untagged, and dual mode ports . . . . . . . . . . . . . . . . .236

Protocol-based VLANs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .237

VLAN configuration rules . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .238

VLAN ID range . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .238

Tagged VLANs. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .238

VLAN hierarchy . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .238

Multiple VLAN membership rules . . . . . . . . . . . . . . . . . . . . . . .239

Dual-mode default VLAN . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .239

Layer 2 control protocols on VLANs . . . . . . . . . . . . . . . . . . . . .240

Virtual interfaces and CPU protection co-existence

on VLANs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 241

Configuring port-based VLANs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 241

Strictly or explicitly tagging a port . . . . . . . . . . . . . . . . . . . . . . .242

Assigning or changing a VLAN priority . . . . . . . . . . . . . . . . . . .242

Assigning a different ID to the default VLAN . . . . . . . . . . . . . .243

PowerConnect B-MLXe Configuration Guide xi

53-1002113-01

Configuring protocol-based VLANs. . . . . . . . . . . . . . . . . . . . . . . . . .243

Configuring virtual routing interfaces . . . . . . . . . . . . . . . . . . . . . . .244

Integrated Switch Routing (ISR) . . . . . . . . . . . . . . . . . . . . . . . .244

VLAN groups . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .246

Configuring a VLAN group . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 247

Configuring super aggregated VLANs . . . . . . . . . . . . . . . . . . . . . . .248

Configuring aggregated VLANs . . . . . . . . . . . . . . . . . . . . . . . . .250

Complete CLI examples . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .252

Configuring 802.1q-in-q tagging. . . . . . . . . . . . . . . . . . . . . . . . . . . .255

Configuration rules . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .256

Enabling 802.1Q-in-Q tagging . . . . . . . . . . . . . . . . . . . . . . . . . .256

Example configuration. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .257

Configuring 802.1q tag-type translation . . . . . . . . . . . . . . . . . . . . .257

Configuration rules . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .259

Miscellaneous VLAN features. . . . . . . . . . . . . . . . . . . . . . . . . . . . . .260

Allocating memory for more VLANs or virtual

routing interfaces. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .260

Configuring uplink ports within a port-based VLAN. . . . . . . . .261

Configuring control protocols in VLANs . . . . . . . . . . . . . . . . . .261

Hardware flooding for layer 2 multicast and

broadcast packets. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .261

Unknown unicast flooding on VLAN ports . . . . . . . . . . . . . . . . . . . .262

Configuring VLAN CPU protection . . . . . . . . . . . . . . . . . . . . . . .262

Command changes to support 8x10G modules . . . . . . . . . . . . . . .263

Deprecated commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .263

Existing display command: . . . . . . . . . . . . . . . . . . . . . . . . . . . .265

Extended VLAN counters for 8x10G modules . . . . . . . . . . . . . . . . .265

Configuring extended VLAN counters . . . . . . . . . . . . . . . . . . . . . . .266

Enabling accounting on per-slot basis . . . . . . . . . . . . . . . . . . .266

Enabling accounting on switched or routed packets. . . . . . . .267

Displaying VLAN counters. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .267

Clearing extended VLAN counters . . . . . . . . . . . . . . . . . . . . . . . . . .269

Clearing counters for all VLANs. . . . . . . . . . . . . . . . . . . . . . . . .269

Clearing counters for a specific VLAN. . . . . . . . . . . . . . . . . . . .269

Clearing VLAN and port counters . . . . . . . . . . . . . . . . . . . . . . .270

Clearing VLAN counters on a port with a

specific priority . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .270

Clearing extended counters statistics on a port . . . . . . . . . . .270

Clearing extended counters statistics on

specific slot. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 271

IP interface commands. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 271

Displaying IP interface counters . . . . . . . . . . . . . . . . . . . . . . . . 271

Displaying IP virtual interface counters . . . . . . . . . . . . . . . . . . 271

Displaying detailed IP virtual interface counters . . . . . . . . . . .272

Clearing IP interface counters. . . . . . . . . . . . . . . . . . . . . . . . . .273

Clearing IP virtual interface counters . . . . . . . . . . . . . . . . . . . .273

xii PowerConnect B-MLXe Configuration Guide

53-1002113-01

Transparent VLAN flooding . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 274

Displaying VLAN information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .275

Displaying VLAN information . . . . . . . . . . . . . . . . . . . . . . . . . . .275

Displaying VLAN information for specific ports . . . . . . . . . . . .277

Displaying VLAN status and port types. . . . . . . . . . . . . . . . . . .277

Displaying VLAN group information . . . . . . . . . . . . . . . . . . . . .278

Configuring multi-port static MAC address . . . . . . . . . . . . . . . . . . .279

Limitations. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .279

Error messages . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .279

Displaying multi-port static MAC address information . . . . . . . . . .280

Displaying running configuration . . . . . . . . . . . . . . . . . . . . . . .281

Displaying changes in the MAC table . . . . . . . . . . . . . . . . . . . .281

SA and DA learning and aging . . . . . . . . . . . . . . . . . . . . . . . . . . . . .281

MP switchover and hitless upgrade. . . . . . . . . . . . . . . . . . . . . . . . .281

Flooding features . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .282

Chapter 9 Configuring Quality of Service for the NetIron MLX

Ingress Traffic processing through a router. . . . . . . . . . . . . . . . . . .284

Recognizing inbound packet priorities and mapping

to internal priority. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .285

Creating an Ingress decode policy map . . . . . . . . . . . . . . . . . . . . .286

Forcing or merging the priority of a packet . . . . . . . . . . . . . . . . . . .286

Forcing or merging the drop precedence of a packet. . . . . . . . . . .287

Egress Traffic processing exiting a router . . . . . . . . . . . . . . . . . . . .288

Creating an egress encode policy map . . . . . . . . . . . . . . . . . . . . . .288

Default QoS mappings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .288

Protocol Packet Prioritization . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .293

Configuring QoS. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .294

Configuring Ingress QoS procedures . . . . . . . . . . . . . . . . . . . .294

Configuring Egress QoS procedures . . . . . . . . . . . . . . . . . . . . .295

Configuring QoS procedures applicable to Ingress

and Egress . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .295

Configuring Ingress decode policy maps . . . . . . . . . . . . . . . . .295

Binding Ingress decode policy maps . . . . . . . . . . . . . . . . . . . .301

Configuring a force priority . . . . . . . . . . . . . . . . . . . . . . . . . . . .305

Configuring Egress encode policy maps. . . . . . . . . . . . . . . . . .307

Binding an Egress encode EXP policy map . . . . . . . . . . . . . . .311

Enabling a port to use the DEI bit for Ingress

and Egress processing. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .316

Specifying the trust level and enabling marking . . . . . . . . . . . 316

Packet mapping commands . . . . . . . . . . . . . . . . . . . . . . . . . . .318

Configuring support for super aggregate VLANs . . . . . . . . . . .320

Configuring port-level QoS commands on LAG ports . . . . . . .320

Displaying QoS information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .321

Displaying QoS configuration information . . . . . . . . . . . . . . . .321

PowerConnect B-MLXe Configuration Guide xiii

53-1002113-01

Displaying QoS packet and byte counters . . . . . . . . . . . . . . . .324

Weighted Random Early Discard (WRED) . . . . . . . . . . . . . . . . . . . .326

Configuring packet drop priority using WRED . . . . . . . . . . . . . . . . .328

Displaying the WRED configuration . . . . . . . . . . . . . . . . . . . . .334

Scheduling traffic for forwarding . . . . . . . . . . . . . . . . . . . . . . . . . . .334

Configuring traffic scheduling . . . . . . . . . . . . . . . . . . . . . . . . . .335

Egress port and priority based rate shaping . . . . . . . . . . . . . . . . . .337

Multicast queue size, flow control and rate shaping . . . . . . . .338

Traffic manager statistics display . . . . . . . . . . . . . . . . . . . . . . . . . .340

Displaying all traffic manager statistics for a router . . . . . . . .341

Displaying traffic manager statistics for a port group . . . . . . .341

Displaying traffic manager statistics for an

interface module . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .342

Displaying traffic manager statistics for

NI-MLX-10Gx8-M and NI-MLX-10Gx8-D modules. . . . . . . . . . .344

Displaying traffic manager statistics for the

4x10G module . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .344

Displaying traffic manager statistics for the

24x1G module . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .345

Clearing traffic manager statistics . . . . . . . . . . . . . . . . . . . . . .346

New network processor counters displayed for

packets to and from traffic manager . . . . . . . . . . . . . . . . . . . .347

QoS for NI-MLX-1Gx48-T modules . . . . . . . . . . . . . . . . . . . . . . . . . .348

Limitations on TM ports. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .348

Configuring priority queues from 8 to 4 . . . . . . . . . . . . . . . . . .348

QoS commands affected by priority queues . . . . . . . . . . . . . . . . . .349

Priority-based rate shaping . . . . . . . . . . . . . . . . . . . . . . . . . . . .349

Weighted Random Early Discard (WRED). . . . . . . . . . . . . . . . .349

Weighted-based scheduling and mixed strict priority . . . . . . .350

Error messages for CPU copy queue and traffic

manager statistics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .350

CPU copy queue . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .350

Traffic manager statistics . . . . . . . . . . . . . . . . . . . . . . . . . . . . .350

Chapter 10 Configuring Traffic Policing for the NetIron MLX

Traffic policing on the PowerConnect . . . . . . . . . . . . . . . . . . . . . . .353

Layer 2 ACL-based rate limiting . . . . . . . . . . . . . . . . . . . . . . . . . . . .366

Configuration rules and notes. . . . . . . . . . . . . . . . . . . . . . . . . .367

Editing a Layer 2 ACL Table . . . . . . . . . . . . . . . . . . . . . . . . . . . .367

Define rate limiting parameters . . . . . . . . . . . . . . . . . . . . . . . .367

Binding Layer 2 ACL-based rate limiting policy to a port . . . . .367

Specifying rate limiting parameters without a policy map . . .368

Display accounting. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .368

Rate limiting protocol traffic using Layer 2 inbound ACLs . . .368

Example of Layer 2 ACL to rate limit broadcast traffic . . . . . .369

Rate limiting ARP packets. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .369

Configuring rate limiting of ARP packets . . . . . . . . . . . . . . . . .370

Displaying statistics for ARP rate limiting. . . . . . . . . . . . . . . . .370

xiv PowerConnect B-MLXe Configuration Guide

53-1002113-01

Clearing Statistics for ARP Rate Limiting . . . . . . . . . . . . . . . . .370

Chapter 11 Configuring Spanning Tree Protocol

Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 371

IEEE 802.1D Spanning Tree Protocol (STP). . . . . . . . . . . . . . . . . . . 371

Enabling or disabling STP . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 371

Default STP bridge and port parameters . . . . . . . . . . . . . . . . .373

Changing STP bridge parameters . . . . . . . . . . . . . . . . . . . . . . . 374

Changing STP port parameters. . . . . . . . . . . . . . . . . . . . . . . . . 374

Root Guard . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .375

BPDU Guard . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .377

Displaying STP information . . . . . . . . . . . . . . . . . . . . . . . . . . . .380

IEEE Single Spanning Tree (SSTP) . . . . . . . . . . . . . . . . . . . . . . . . . .386

SSTP defaults . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .386

Displaying SSTP information . . . . . . . . . . . . . . . . . . . . . . . . . . .387

SuperSpan™ . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .388

Customer ID . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .388

BPDU forwarding . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .389

Preforwarding state . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .389

Combining single STP and multiple spanning trees . . . . . . . .390

Configuring SuperSpan . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .394

Displaying SuperSpan information . . . . . . . . . . . . . . . . . . . . . .396

PVST or PVST+ compatibility. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .396

Overview of PVST and PVST+ . . . . . . . . . . . . . . . . . . . . . . . . . .397

VLAN Tags and dual mode. . . . . . . . . . . . . . . . . . . . . . . . . . . . .397

Enabling PVST+ support . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .398

Displaying PVST+ support information. . . . . . . . . . . . . . . . . . .399

Configuration examples. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .399

802.1s Multiple Spanning Tree Protocol . . . . . . . . . . . . . . . . . . . . .401

Configuring STP under an ESI VLAN . . . . . . . . . . . . . . . . . . . . .412

Chapter 12 Configuring Rapid Spanning Tree Protocol

Bridges and bridge port roles. . . . . . . . . . . . . . . . . . . . . . . . . . . . . .413

Assignment of port roles . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .414

Ports on Switch 1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .415

Ports on Switch 2 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .415

Ports on Switch 3 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .415

Ports Switch 4 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .416

Edge ports and Edge port roles . . . . . . . . . . . . . . . . . . . . . . . . . . . .416

Point-to-point ports . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 417

Bridge port states . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 417

Edge port and non-Edge port states . . . . . . . . . . . . . . . . . . . . . . . .418

Changes to port roles and states. . . . . . . . . . . . . . . . . . . . . . . . . . .418

State machines . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .418

Handshake mechanisms. . . . . . . . . . . . . . . . . . . . . . . . . . . . . .419

PowerConnect B-MLXe Configuration Guide xv

53-1002113-01

Convergence in a simple topology . . . . . . . . . . . . . . . . . . . . . . . . . .430

Convergence at start up . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .431

Convergence after a link failure . . . . . . . . . . . . . . . . . . . . . . . .433

Convergence at link restoration . . . . . . . . . . . . . . . . . . . . . . . .434

Convergence in a complex RSTP topology. . . . . . . . . . . . . . . . . . . .435

Propagation of topology change . . . . . . . . . . . . . . . . . . . . . . . .438

Compatibility of RSTP with 802.1D . . . . . . . . . . . . . . . . . . . . . . . . .441

Configuring RSTP parameters . . . . . . . . . . . . . . . . . . . . . . . . . . . . .442

Enabling or disabling RSTP in a port-based VLAN . . . . . . . . . .442

Enabling or disabling RSTP on a single spanning tree . . . . . .443

Disabling or enabling RSTP on a port. . . . . . . . . . . . . . . . . . . .443

Changing RSTP bridge parameters. . . . . . . . . . . . . . . . . . . . . .443

Changing port parameters . . . . . . . . . . . . . . . . . . . . . . . . . . . .444

Displaying RSTP information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .445

Configuring RSTP under an ESI VLAN . . . . . . . . . . . . . . . . . . . . . . .449

Chapter 13 Metro Ring Protocol

Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .451

Metro Ring Protocol (MRP) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .451

MRP rings without shared interfaces (MRP Phase 1) . . . . . . . . . .453

Ring initialization. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .454

How ring breaks are detected and healed . . . . . . . . . . . . . . . . . . .457

Master VLANs and member VLANs in a topology group. . . . . . . . .461

Configuring MRP . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .462

Adding an MRP ring to a vlan . . . . . . . . . . . . . . . . . . . . . . . . . .463

Changing the hello and preforwarding times . . . . . . . . . . . . . .463

Changing the scale timer. . . . . . . . . . . . . . . . . . . . . . . . . . . . . .464

MRP Phase 2. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .465

Ring interface ownership. . . . . . . . . . . . . . . . . . . . . . . . . . . . . .467

Ring interface IDs and types . . . . . . . . . . . . . . . . . . . . . . . . . . .468

Selection of the master node for a ring . . . . . . . . . . . . . . . . . .469

RHP processing in rings with shared interfaces . . . . . . . . . . . 471

How ring breaks are detected and healed between

shared interfaces. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .472

Normal flow . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .473

Flow when a link breaks . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 474

Configuring MRP with shared interfaces . . . . . . . . . . . . . . . . .475

Tuning MRP timers . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 476

Flushing the mac table following an MRP event . . . . . . . . . . . 476

Hello time . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 476

Preforwarding time. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 476

Setting hello and preforwarding timers appropriately. . . . . . .477

Effect of the scale timer . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .478

Using MRP diagnostics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .479

Enabling MRP diagnostics. . . . . . . . . . . . . . . . . . . . . . . . . . . . .479

xvi PowerConnect B-MLXe Configuration Guide

53-1002113-01

Displaying MRP diagnostics . . . . . . . . . . . . . . . . . . . . . . . . . . .479

Displaying MRP information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .480

Displaying topology group information . . . . . . . . . . . . . . . . . . .480

Displaying ring information . . . . . . . . . . . . . . . . . . . . . . . . . . . .480

MRP CLI example . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .482

Commands on Switch A (master node) . . . . . . . . . . . . . . . . . .483

Commands on Switch B . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .483

Commands on Switch C. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .484

Commands on Switch D . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .484

Configuring MRP under an ESI VLAN. . . . . . . . . . . . . . . . . . . . . . . .485

Chapter 14 Ethernet Ring Protection Protocol

Ethernet Ring Protection. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .487

Ethernet Ring Protection components . . . . . . . . . . . . . . . . . . .488

Initializing a new ERN . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .492

Signal fail . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .496

Manual switch . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .498

Forced switch. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .500

Double Forced Switch . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .503

Dual-end blocking . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .503

Non-revertive mode. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .503

Interconnected rings . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .503

FBD flush optimization . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .505

Configuring ERP. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .505

Sample configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .505

Configuring ERP with IEEE 802.1ag. . . . . . . . . . . . . . . . . . . . . . . . .506

ERP commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .507

Assigning ERP IDs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .507

Naming an Ethernet Ring Node . . . . . . . . . . . . . . . . . . . . . . . .507

Configuring the default MAC ID. . . . . . . . . . . . . . . . . . . . . . . . .507

Enabling the ERP configuration . . . . . . . . . . . . . . . . . . . . . . . .508

Configuring interfaces . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .508

Assigning the RPL owner role and setting the RPL . . . . . . . . .508

Enabling sub-rings for multi-ring and ladder topologies . . . . .509

Configuring non-revertive mode . . . . . . . . . . . . . . . . . . . . . . . .509

Configuring and clearing a forced switch . . . . . . . . . . . . . . . . .509

Configuring and clearing a manual switch. . . . . . . . . . . . . . . .509

Configuring dual-end blocking . . . . . . . . . . . . . . . . . . . . . . . . .510

Configuring the guard timer . . . . . . . . . . . . . . . . . . . . . . . . . . .510

Configuring and clearing the wait to restore timer . . . . . . . . .511

Testing the WTR timer . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .511

Configuring and clearing the WTB timer . . . . . . . . . . . . . . . . .511

Configuring a hold-off timer . . . . . . . . . . . . . . . . . . . . . . . . . . .512

Configuring IEEE 802.1ag support . . . . . . . . . . . . . . . . . . . . . .512

Setting the ITU-T G.8032 version number . . . . . . . . . . . . . . . .512

PowerConnect B-MLXe Configuration Guide xvii

53-1002113-01

Viewing ERP operational status and clearing

ERP statistics. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .513

Viewing ERP operational status and statistics. . . . . . . . . . . . .513

Clearing ERP statistics. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .514

Chapter 15 Virtual Switch Redundancy Protocol (VSRP)

Layer 2 redundancy . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 517

Master election and failover . . . . . . . . . . . . . . . . . . . . . . . . . . . 517

VSRP failover . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 517

VSRP priority calculation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .518

MAC address failover on VSRP-aware devices. . . . . . . . . . . . .521

Configuring basic VSRP parameters . . . . . . . . . . . . . . . . . . . . . . . .522

Configuring optional VSRP parameters . . . . . . . . . . . . . . . . . .522

VSRP 2 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .524

Configuring VSRP 2 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .527

Displaying VSRP 2 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .527

Displaying VSRP information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .534

Displaying VRID information . . . . . . . . . . . . . . . . . . . . . . . . . . .534

Displaying the active interfaces for a VRID . . . . . . . . . . . . . . .537

VSRP fast start . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .537

VSRP slow start . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .539

VSRP and Foundry MRP signaling . . . . . . . . . . . . . . . . . . . . . . . . . .540

Chapter 16 Topology Groups

Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .543

Master VLAN and member VLANs . . . . . . . . . . . . . . . . . . . . . . . . . .543

Master VLANs and customer VLANs in Foundry MRP. . . . . . . . . . .544

Control ports and free ports . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .544

Configuration considerations . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .544

Configuring a topology group . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .545

Adding VPLS VLANs to topology groups . . . . . . . . . . . . . . . . . .546

Topology group support within an ESI . . . . . . . . . . . . . . . . . . .547

Displaying topology group information . . . . . . . . . . . . . . . . . . . . . .547

Displaying topology group information on a

NetIron MLX series router . . . . . . . . . . . . . . . . . . . . . . . . . . . . .547

Chapter 17 Configuring VRRP and VRRP-E

Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .551

Overview of VRRP . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .552

Standard VRRP. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .552

Enhancements to VRRP. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .554

Configuring unique virtual MAC addresses per VRID . . . . . . .555

Overview of VRRP-E. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .558

xviii PowerConnect B-MLXe Configuration Guide

53-1002113-01

ARP behavior with VRRP-E. . . . . . . . . . . . . . . . . . . . . . . . . . . . .559

Comparison of VRRP and VRRP-E . . . . . . . . . . . . . . . . . . . . . . . . . .560

VRRP and VRRP-E parameters . . . . . . . . . . . . . . . . . . . . . . . . . . . . .561

Configuring parameters specific to VRRP . . . . . . . . . . . . . . . . . . . .564

Configuring the VRRP version . . . . . . . . . . . . . . . . . . . . . . . . . .564

Configuring the Owner for IPv4 . . . . . . . . . . . . . . . . . . . . . . . . .564

Configuring the Owner for IPv6 . . . . . . . . . . . . . . . . . . . . . . . . .565

Configuring a Backup for IPv4. . . . . . . . . . . . . . . . . . . . . . . . . .565

Configuring a Backup for IPv6. . . . . . . . . . . . . . . . . . . . . . . . . .566

Configuration rules and feature limitations

for VRRP . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .567

Configuring parameters specific to VRRP-E . . . . . . . . . . . . . . . . . .567

Configuring IPv4 VRRP-E . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .567

Configuring IPv6 VRRP-E . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .568

Configuration rules and feature limitations

for VRRP-E . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .568

Configuring additional VRRP and VRRP-E parameters . . . . . . . . . .569

Authentication type . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .569

Suppressingf RIP advertisements on backup routers

for the backup up interface. . . . . . . . . . . . . . . . . . . . . . . . . . . .570

Hello interval . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .570

Dead interval . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 571

Backup hello message state and interval . . . . . . . . . . . . . . . . 571

Track port . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .572

Track priority. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .572

Backup preempt. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .573

Master router abdication and reinstatement. . . . . . . . . . . . . .573

VRRP-extended slow start . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 574

VRRP-extended scale timer. . . . . . . . . . . . . . . . . . . . . . . . . . . . 574

Displaying VRRP and VRRP-E information for IPv4 . . . . . . . . . . . . .575

Displaying summary information . . . . . . . . . . . . . . . . . . . . . . .575

Displaying detailed information . . . . . . . . . . . . . . . . . . . . . . . .577

Displaying statistics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .580

Displaying VRRP and VRRP-E information for IPv6 . . . . . . . . . . . . .581

Displaying summary information . . . . . . . . . . . . . . . . . . . . . . .581

Displaying detailed information . . . . . . . . . . . . . . . . . . . . . . . .582

Displaying statistics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .582

Displaying configuration information for

VRRP and VRRP-E . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .583

Clearing VRRP or VRRP-E statistics . . . . . . . . . . . . . . . . . . . . . . . . .583

Configuration examples . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .584

VRRP example for IPv4 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .584

VRRP example for IPv6 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .585

VRRP-E example for IPv4. . . . . . . . . . . . . . . . . . . . . . . . . . . . . .587

VRRP-E example for IPv6. . . . . . . . . . . . . . . . . . . . . . . . . . . . . .588

VRRP-E Extension for Server Virtualization . . . . . . . . . . . . . . . . . . .590

VRRP-E Extension for server virtualization

configuration example . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .591

PowerConnect B-MLXe Configuration Guide xix

53-1002113-01

Packets from the local subnet of the virtual

IP address. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .591

IPv4 VRF support . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .591

Configuration considerations . . . . . . . . . . . . . . . . . . . . . . . . . .592

Chapter 18 Multi-Chassis Trunking (MCT)

About Multi-Chassis Trunk (MCT) . . . . . . . . . . . . . . . . . . . . . . . . . . .593

How Multi-Chassis Trunking works . . . . . . . . . . . . . . . . . . . . . .594

Configuring MCT. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .600

Optional cluster operation features . . . . . . . . . . . . . . . . . . . . .615

Port loop detection. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .619

MCT failover scenarios . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .620

Show commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .621

Syslogs and debugging . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .622

Clear MAC commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .625

MCT configuration examples. . . . . . . . . . . . . . . . . . . . . . . . . . .627

Multi-Chassis Trunk (MCT) for VRRP or VRRP-E . . . . . . . . . . . . . . .644

One MCT switch is the VRRP or VRRP-E master router

and the other MCT switch is VRRP or VRRP-E

backup router . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .644

Chapter 19 Configuring IP

Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .649

The IP packet flow . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .650

ARP cache table . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .651

Static ARP table . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .652

IP route table . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .652

IP forwarding cache . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .653

IP packet queuing . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .654

Basic IP parameters and defaults . . . . . . . . . . . . . . . . . . . . . . . . . .654

When parameter changes take effect . . . . . . . . . . . . . . . . . . .654

IP global parameters . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .654

IP interface parameters. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .658

GRE IP tunnel . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .659

Considerations in implementing this feature. . . . . . . . . . . . . .659

GRE MTU enhancements . . . . . . . . . . . . . . . . . . . . . . . . . . . . .660

Configuring a GRE IP Tunnel . . . . . . . . . . . . . . . . . . . . . . . . . . .660

Multicast over GRE tunnel . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .667

Configuring PIM GRE tunnel . . . . . . . . . . . . . . . . . . . . . . . . . . .667

Configuring PIM GRE tunnel using the strict RPF check . . . . .668

Tunnel statistics for a GRE tunnel or IPv6 manual tunnel . . . . . . .668

Reload behavior and the source-ingress CAM partition . . . . .669

Operational notes. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .669

Enabling IP tunnel or manual IPv6 statistics . . . . . . . . . . . . . .671

Restart global timers . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .672

Configuring the graceful-restart max-hold-timer . . . . . . . . . . .673

Graceful-restart protocols-converge-timer . . . . . . . . . . . . . . . .674

xx PowerConnect B-MLXe Configuration Guide

53-1002113-01

Configuring IP parameters . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 674

Configuring IP addresses. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 674

Enabling hardware forwarding of IP option packets

based on L3 destination . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .677

Configuring domain name server (DNS) resolver . . . . . . . . . .679

Using Telnet and Secure Shell . . . . . . . . . . . . . . . . . . . . . . . . .681

Changing the encapsulation type for IP packets . . . . . . . . . . .681

Setting the maximum frame size globally . . . . . . . . . . . . . . . .681

Changing the MTU . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .682

Changing the router ID. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .684

Recalculating the router ID . . . . . . . . . . . . . . . . . . . . . . . . . . . .685

Specifying a single source interface for Telnet, SSH,

SNTP, TFTP, TACACS/TACACS+, or RADIUS packets . . . . . . . . .685

Configuring an interface as the source for Syslog packets . . . . . .686

Configuring ARP parameters . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .686

How ARP works. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .686

Rate limiting ARP packets . . . . . . . . . . . . . . . . . . . . . . . . . . . . .687

Changing the ARP aging period. . . . . . . . . . . . . . . . . . . . . . . . .688

Enabling proxy ARP . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .689

Enabling local proxy ARP . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .689

Disabling gratuitous ARP requests for local proxy ARP . . . . . .690

Creating static ARP entries . . . . . . . . . . . . . . . . . . . . . . . . . . . .690

Changing the ARP timer. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .691

Changing the ARP pending retry timer . . . . . . . . . . . . . . . . . . .691

Dynamic ARP inspection. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .691

ARP poisoning . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .692

How DAI works . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .692

Configuring DAI. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .693

Displaying ARP inspection information. . . . . . . . . . . . . . . . . . .696

Clearing ARP inspection counters. . . . . . . . . . . . . . . . . . . . . . .698

DHCP snooping . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .699

How DHCP snooping works . . . . . . . . . . . . . . . . . . . . . . . . . . . .699

System reboot and the binding database . . . . . . . . . . . . . . . .700

Configuring DHCP snooping . . . . . . . . . . . . . . . . . . . . . . . . . . .700

Clearing the DHCP binding database . . . . . . . . . . . . . . . . . . . .701

DHCP option 82 insertion. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .701

Displaying DHCP snooping status and ports . . . . . . . . . . . . . .702

Displaying DAI binding entries. . . . . . . . . . . . . . . . . . . . . . . . . .703

Displaying DHCP snooping statistics counters . . . . . . . . . . . .703

Clearing DHCP snooping counters . . . . . . . . . . . . . . . . . . . . . .705

DHCP snooping configuration example . . . . . . . . . . . . . . . . . .705

IP source guard . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .706

Enabling IP source guard. . . . . . . . . . . . . . . . . . . . . . . . . . . . . .706

Enabling IP source inspection on a VLAN. . . . . . . . . . . . . . . . .707

Displaying IP source inspection status and ports . . . . . . . . . .707

IP source guard CAM. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .708

Configuring IP source guard CAM partition . . . . . . . . . . . . . . .708

Displaying IP source guard CAM partition . . . . . . . . . . . . . . . .708

Configuring forwarding parameters . . . . . . . . . . . . . . . . . . . . . . . . .709

Page is loading ...

Dell PowerConnect B-MLXE16 Owner's manual

Related papers

Other documents