Alcatel 9000 User guide

Part No. 060217-10, Rev. A

June 2006

OmniSwitch 6800 Series

OmniSwitch 6850 Series

OmniSwitch 9000 Series

Network Configuration Guide

www.alcatel.com

page -ii OmniSwitch 6800/6850/9000 Network Configuration Guide June 2006

This user guide documents release 6.1.1 of the OmniSwitch 9000 Series

and release 6.1.2 of the OmniSwitch 6800 Series and of the OmniSwitch 6850 Series.

The functionality described in this guide is subject to change without notice.

duced in whole or in part without the express written permission of Alcatel Internetworking, Inc.

Alcatel

®

and the Alcatel logo are registered trademarks of Alcatel. Xylan

®

, OmniSwitch

®

, OmniStack

®

,

and Alcatel OmniVista

®

are registered trademarks of Alcatel Internetworking, Inc.

OmniAccess™, Omni Switch/Router™, PolicyView™, RouterView™, SwitchManager™, VoiceView™,

WebView™, X-Cell™, X-Vision™, and the Xylan logo are trademarks of Alcatel Internetworking, Inc.

This OmniSwitch product contains components which may be covered by one or more of the following

U.S. Patents:

•U.S. Patent No. 6,339,830

•U.S. Patent No. 6,070,243

•U.S. Patent No. 6,061,368

•U.S. Patent No. 5,394,402

•U.S. Patent No. 6,047,024

•U.S. Patent No. 6,314,106

•U.S. Patent No. 6,542,507

•U.S. Patent No. 6,874,090

26801 West Agoura Road

Calabasas, CA 91301

(818) 880-3500 FAX (818) 880-3505

[email protected]

US Customer Support—(800) 995-2696

International Customer Support—(818) 878-4507

Internet—http://eservice.ind.alcatel.com

OmniSwitch 6800/6850/9000 Network Configuration Guide June 2006 page -iii

Contents

About This Guide ...................................................................................................... xxix

Supported Platforms ...................................................................................................... xxix

Who Should Read this Manual? ..................................................................................... xxx

When Should I Read this Manual? ................................................................................. xxx

What is in this Manual? .................................................................................................. xxx

What is Not in this Manual? .......................................................................................... xxxi

How is the Information Organized? .............................................................................. xxxi

Documentation Roadmap .............................................................................................xxxii

Related Documentation ............................................................................................... xxxiv

User Manual CD ......................................................................................................... xxxvi

Technical Support ....................................................................................................... xxxvi

Chapter 1 Configuring Ethernet Ports ......................................................................................1-1

In This Chapter ................................................................................................................1-1

Ethernet Specifications ....................................................................................................1-2

Ethernet Port Defaults (All Port Types) ..........................................................................1-2

Non Combo Port Defaults ...............................................................................................1-3

Combo Ethernet Port Defaults ........................................................................................1-3

Ethernet Ports Overview .................................................................................................1-4

OmniSwitch 6800 and 6850 Series Combo Ports ....................................................1-4

Valid Port Settings on OmniSwitch 6800 Series Switches ......................................1-5

Valid Port Settings on OmniSwitch 6850 Series Switches ......................................1-5

Valid Port Settings on OmniSwitch 9000 Series Switches ......................................1-6

10/100/1000 Crossover Supported ...........................................................................1-6

Autonegotiation Guidelines ......................................................................................1-7

Setting Ethernet Parameters for All Port Types ..............................................................1-8

Setting Trap Port Link Messages .............................................................................1-8

Enabling Trap Port Link Messages ...................................................................1-8

Disabling Trap Port Link Messages ..................................................................1-8

Resetting Statistics Counters ....................................................................................1-9

Enabling and Disabling Interfaces ...........................................................................1-9

Configuring Flood Rate Limiting ...........................................................................1-10

Flood Only Rate Limiting ...............................................................................1-10

Multicast Flood Rate Limiting ........................................................................1-11

Configuring the Peak Flood Rate Value ..........................................................1-11

page -iv OmniSwitch 6800/6850/9000 Network Configuration Guide June 2006

Configuring a Port Alias ........................................................................................1-12

Configuring Maximum Frame Sizes ......................................................................1-13

Setting Ethernet Parameters for Non Combo Ports .......................................................1-13

Setting Interface Line Speed ..................................................................................1-14

Configuring Duplex Mode .....................................................................................1-14

Configuring Inter-frame Gap Values ...............................................................1-16

Configuring Autonegotiation and Crossover Settings ...........................................1-17

Enabling and Disabling Autonegotiation ........................................................1-17

Configuring Crossover Settings ......................................................................1-17

Setting Combo Ethernet Port Parameters on OmniSwitch 6800 and 6850 Switches ...1-19

Setting the Combo Port Type and Mode ................................................................1-19

Setting Combo Ports to Forced Fiber ..............................................................1-19

Setting Combo Ports to Preferred Copper .......................................................1-20

Setting Combo Ports to Forced Copper ...........................................................1-20

Setting Combo Ports to Preferred Fiber ..........................................................1-21

Setting Interface Line Speed for Combo Ports .......................................................1-21

Configuring Duplex Mode for Combo Ports ..........................................................1-22

Configuring Autonegotiation and Crossover for Combo Ports ..............................1-23

Enabling and Disabling Autonegotiation for Combo Ports .............................1-23

Configuring Crossover Settings for Combo Ports ...........................................1-24

Combo Port Application Example ................................................................................1-25

Verifying Ethernet Port Configuration ..........................................................................1-27

Chapter 2 Managing Source Learning ...................................................................................2-1

In This Chapter ................................................................................................................2-1

Source Learning Specifications .......................................................................................2-2

Source Learning Defaults ...............................................................................................2-2

Sample MAC Address Table Configuration ...................................................................2-2

MAC Address Table Overview .......................................................................................2-4

Using Static MAC Addresses ..........................................................................................2-4

Configuring Static MAC Addresses .........................................................................2-5

Static MAC Addresses on Link Aggregate Ports ..............................................2-5

Configuring MAC Address Table Aging Time ..............................................................2-6

Selecting the Source Learning Mode ..............................................................................2-7

Displaying Source Learning Information ........................................................................2-8

Chapter 3 Using 802.1s Multiple Spanning Tree ..................................................................3-1

In This Chapter ................................................................................................................3-1

MST Specifications .........................................................................................................3-2

Spanning Tree Bridge Parameter Defaults ......................................................................3-2

Spanning Tree Port Parameter Defaults ..........................................................................3-3

MST Region Defaults .....................................................................................................3-3

OmniSwitch 6800/6850/9000 Network Configuration Guide June 2006 page -v

MST General Overview ..................................................................................................3-4

How MSTP Works ...................................................................................................3-4

Comparing MSTP with STP and RSTP ...................................................................3-7

What is a Multiple Spanning Tree Instance (MSTI) ................................................3-7

What is a Multiple Spanning Tree Region ...............................................................3-8

What is the Common Spanning Tree .......................................................................3-9

What is the Internal Spanning Tree (IST) Instance ..................................................3-9

What is the Common and Internal Spanning Tree Instance .....................................3-9

MST Configuration Overview ......................................................................................3-10

Using Spanning Tree Configuration Commands ...................................................3-10

Understanding Spanning Tree Modes ....................................................................3-11

MST Interoperability and Migration .............................................................................3-12

Migrating from Flat Mode STP/RSTP to Flat Mode MSTP ..................................3-12

Migrating from 1x1 Mode to Flat Mode MSTP .....................................................3-13

Quick Steps for Configuring an MST Region ...............................................................3-14

Quick Steps for Configuring MSTIs .............................................................................3-16

Verifying the MST Configuration .................................................................................3-19

Chapter 4 Configuring Learned Port Security ........................................................................4-1

In This Chapter ................................................................................................................4-1

Learned Port Security Specifications ..............................................................................4-2

Learned Port Security Defaults ......................................................................................4-2

Sample Learned Port Security Configuration .................................................................4-3

Learned Port Security Overview .....................................................................................4-4

How LPS Authorizes Source MAC Addresses ........................................................4-5

Dynamic Configuration of Authorized MAC Addresses .........................................4-5

Static Configuration of Authorized MAC Addresses ..............................................4-6

Understanding the LPS Table ..................................................................................4-6

Enabling/Disabling Learned Port Security ......................................................................4-7

Configuring a Source Learning Time Limit ....................................................................4-7

Configuring the Number of MAC Addresses Allowed ...................................................4-8

Configuring Authorized MAC Addresses .......................................................................4-8

Configuring an Authorized MAC Address Range ..........................................................4-9

Selecting the Security Violation Mode .........................................................................4-10

Displaying Learned Port Security Information .............................................................4-10

Chapter 5 Configuring VLANs ....................................................................................................5-1

In This Chapter ................................................................................................................5-1

VLAN Specifications ......................................................................................................5-2

VLAN Defaults ..............................................................................................................5-2

Sample VLAN Configuration .........................................................................................5-3

page -vi OmniSwitch 6800/6850/9000 Network Configuration Guide June 2006

VLAN Management Overview .......................................................................................5-4

Creating/Modifying VLANs ...........................................................................................5-5

Adding/Removing a VLAN .....................................................................................5-5

Enabling/Disabling the VLAN Administrative Status .............................................5-6

Modifying the VLAN Description ...........................................................................5-6

Defining VLAN Port Assignments .................................................................................5-7

Changing the Default VLAN Assignment for a Port ...............................................5-7

Configuring Dynamic VLAN Port Assignment .......................................................5-8

Configuring VLAN Rule Classification ............................................................5-8

Enabling/Disabling VLAN Mobile Tag Classification .....................................5-9

Enabling/Disabling Spanning Tree for a VLAN ...........................................................5-10

Enabling/Disabling VLAN Authentication ...................................................................5-11

Configuring VLAN Router Interfaces ..........................................................................5-11

Configuring an IPX Router Interface .....................................................................5-12

Modifying an IPX Router Interface .................................................................5-13

What is Single MAC Router Mode? ......................................................................5-13

Bridging VLANs Across Multiple Switches .................................................................5-14

Verifying the VLAN Configuration ..............................................................................5-15

Chapter 6 Configuring Spanning Tree Parameters .............................................................6-1

In This Chapter ................................................................................................................6-1

Spanning Tree Specifications ..........................................................................................6-2

Spanning Tree Bridge Parameter Defaults .....................................................................6-2

Spanning Tree Port Parameter Defaults ..........................................................................6-3

Multiple Spanning Tree (MST) Region Defaults ............................................................6-3

Spanning Tree Overview .................................................................................................6-4

How the Spanning Tree Topology is Calculated .....................................................6-4

Bridge Protocol Data Units (BPDU) .................................................................6-5

Topology Examples ...........................................................................................6-7

Spanning Tree Operating Modes ....................................................................................6-9

Using Flat Spanning Tree Mode ..............................................................................6-9

Using 1x1 Spanning Tree Mode .............................................................................6-10

Configuring STP Bridge Parameters .............................................................................6-12

Bridge Configuration Commands Overview ..........................................................6-12

Selecting the Bridge Protocol .................................................................................6-14

Configuring the Bridge Priority .............................................................................6-15

Configuring the Bridge Hello Time .......................................................................6-16

Configuring the Bridge Max Age Time .................................................................6-17

Configuring the Bridge Forward Delay Time ........................................................6-18

Enabling/Disabling the VLAN BPDU Switching Status .......................................6-19

Configuring the Path Cost Mode ............................................................................6-19

Using Automatic VLAN Containment ...................................................................6-20

Configuring STP Port Parameters .................................................................................6-21

Bridge Configuration Commands Overview ..........................................................6-21

OmniSwitch 6800/6850/9000 Network Configuration Guide June 2006 page -vii

Enabling/Disabling Spanning Tree on a Port .........................................................6-23

Spanning Tree on Link Aggregate Ports .........................................................6-24

Configuring Port Priority .......................................................................................6-24

Port Priority on Link Aggregate Ports .............................................................6-25

Configuring Port Path Cost ....................................................................................6-25

Path Cost for Link Aggregate Ports .................................................................6-27

Configuring Port Mode ..........................................................................................6-28

Mode for Link Aggregate Ports .......................................................................6-28

Configuring Port Connection Type ........................................................................6-29

Connection Type on Link Aggregate Ports .....................................................6-30

Sample Spanning Tree Configuration ...........................................................................6-31

Example Network Overview ..................................................................................6-31

Example Network Configuration Steps ..................................................................6-32

Verifying the Spanning Tree Configuration .................................................................6-34

Chapter 7 Assigning Ports to VLANs ........................................................................................7-1

In This Chapter ................................................................................................................7-1

Port Assignment Specifications ......................................................................................7-2

Port Assignment Defaults ..............................................................................................7-2

Sample VLAN Port Assignment .....................................................................................7-3

Statically Assigning Ports to VLANs .............................................................................7-4

Dynamically Assigning Ports to VLANs ........................................................................7-4

How Dynamic Port Assignment Works ...................................................................7-5

VLAN Mobile Tag Classification .....................................................................7-5

VLAN Rule Classification ................................................................................7-8

Configuring Dynamic VLAN Port Assignment .....................................................7-10

Enabling/Disabling Port Mobility ..........................................................................7-11

Ignoring Bridge Protocol Data Units (BPDU) ................................................7-11

Understanding Mobile Port Properties ..........................................................................7-12

What is a Configured Default VLAN? ...................................................................7-12

What is a Secondary VLAN? .................................................................................7-13

Configuring Mobile Port Properties .......................................................................7-16

Enable/Disable Default VLAN ........................................................................7-16

Enable/Disable Default VLAN Restore ..........................................................7-17

Enable/Disable Port Authentication ................................................................7-17

Enable/Disable 802.1X Port-Based Access Control .......................................7-18

Verifying VLAN Port Associations and Mobile Port Properties ..................................7-19

Understanding ‘show vlan port’ Output .................................................................7-19

Understanding ‘show vlan port mobile’ Output .....................................................7-20

Chapter 8 Configuring Port Mapping .......................................................................................8-1

In This Chapter ................................................................................................................8-1

Port Mapping Specifications ...........................................................................................8-2

Port Mapping Defaults ....................................................................................................8-2

Quick Steps for Configuring Port Mapping ................................................................... 8-2

page -viii OmniSwitch 6800/6850/9000 Network Configuration Guide June 2006

Creating/Deleting a Port Mapping Session .....................................................................8-3

Creating a Port Mapping Session .............................................................................8-3

Deleting a User/Network Port of a Session .......................................................8-3

Deleting a Port Mapping Session .............................................................................8-3

Enabling/Disabling a Port Mapping Session ...................................................................8-4

Enabling a Port Mapping Session ............................................................................8-4

Disabling a Port Mapping Session ...........................................................................8-4

Configuring a Port Mapping Direction ...........................................................................8-4

Configuring Unidirectional Port Mapping ...............................................................8-4

Restoring Bidirectional Port Mapping .....................................................................8-4

Sample Port Mapping Configuration ..............................................................................8-5

Example Port Mapping Overview ............................................................................8-5

Example Port Mapping Configuration Steps ...........................................................8-6

Verifying the Port Mapping Configuration .....................................................................8-6

Chapter 9 Defining VLAN Rules .................................................................................................9-1

In This Chapter ................................................................................................................9-1

VLAN Rules Specifications ............................................................................................9-2

VLAN Rules Defaults ....................................................................................................9-2

Sample VLAN Rule Configuration .................................................................................9-3

VLAN Rules Overview ...................................................................................................9-4

VLAN Rule Types ...................................................................................................9-4

DHCP Rules ......................................................................................................9-5

Binding Rules ....................................................................................................9-6

MAC Address Rules ..........................................................................................9-6

Network Address Rules .....................................................................................9-6

Protocol Rules ...................................................................................................9-6

Port Rules ..........................................................................................................9-7

Understanding VLAN Rule Precedence ..................................................................9-8

Configuring VLAN Rule Definitions ............................................................................9-11

Defining DHCP MAC Address Rules ....................................................................9-12

Defining DHCP MAC Range Rules .......................................................................9-13

Defining DHCP Port Rules ....................................................................................9-13

Defining DHCP Generic Rules ..............................................................................9-14

Defining Binding Rules ..........................................................................................9-14

How to Define a MAC-Port-IP Address Binding Rule ...................................9-15

How to Define a MAC-Port-Protocol Binding Rule .......................................9-15

How to Define a MAC-Port Binding Rule ......................................................9-16

How to Define a MAC-IP Address Binding Rule ...........................................9-16

How to Define an IP-Port Binding Rule ..........................................................9-16

How to Define a Port-Protocol Binding Rule ..................................................9-17

Defining MAC Address Rules ...............................................................................9-17

Defining MAC Range Rules ..................................................................................9-18

Defining IP Network Address Rules ......................................................................9-18

Defining IPX Network Address Rules ...................................................................9-19

Defining Protocol Rules .........................................................................................9-20

Defining Port Rules ................................................................................................9-21

OmniSwitch 6800/6850/9000 Network Configuration Guide June 2006 page -ix

Application Example: DHCP Rules ..............................................................................9-22

The VLANs .....................................................................................................9-22

DHCP Servers and Clients ..............................................................................9-22

Verifying VLAN Rule Configuration ...........................................................................9-25

Chapter 10 Using Interswitch Protocols ...................................................................................10-1

In This Chapter ..............................................................................................................10-1

AIP Specifications .........................................................................................................10-2

AMAP Defaults ............................................................................................................10-2

AMAP Overview ..........................................................................................................10-3

AMAP Transmission States ...................................................................................10-3

Discovery Transmission State .........................................................................10-4

Common Transmission State ...........................................................................10-4

Passive Reception State ...................................................................................10-4

Common Transmission and Remote Switches .......................................................10-5

Configuring AMAP .......................................................................................................10-5

Enabling or Disabling AMAP ................................................................................10-5

Configuring the AMAP Discovery Time-out Interval ...........................................10-5

Configuring the AMAP Common Time-out Interval .............................................10-6

Displaying AMAP Information ..............................................................................10-7

Chapter 11 Configuring 802.1Q .................................................................................................11-1

In this Chapter ...............................................................................................................11-1

802.1Q Specifications ...................................................................................................11-2

802.1Q Defaults Table ..................................................................................................11-2

802.1Q Overview ..........................................................................................................11-3

Configuring an 802.1Q VLAN .....................................................................................11-5

Enabling Tagging on a Port ....................................................................................11-5

Enabling Tagging with Link Aggregation .............................................................11-5

Configuring the Frame Type ..................................................................................11-6

Show 802.1Q Information ......................................................................................11-7

Application Example .....................................................................................................11-8

Verifying 802.1Q Configuration .................................................................................11-10

Chapter 12 Configuring IP ...........................................................................................................12-1

In This Chapter ..............................................................................................................12-1

IP Specifications ............................................................................................................12-2

IP Defaults .....................................................................................................................12-2

Quick Steps for Configuring IP Forwarding .................................................................12-3

IP Overview ..................................................................................................................12-4

IP Protocols ............................................................................................................12-4

Transport Protocols .........................................................................................12-4

page -x OmniSwitch 6800/6850/9000 Network Configuration Guide June 2006

Application-Layer Protocols ...........................................................................12-4

Additional IP Protocols ...................................................................................12-5

IP Forwarding ................................................................................................................12-6

Configuring an IP Router Interface ........................................................................12-7

Modifying an IP Router Interface ....................................................................12-8

Removing an IP Router Interface ....................................................................12-8

Configuring a Loopback0 Interface .......................................................................12-9

Loopback0 Address Advertisement ................................................................12-9

Configuring a BGP Peer Session with Loopback0 ..........................................12-9

Creating a Static Route .........................................................................................12-10

Creating a Default Route ......................................................................................12-10

Configuring Address Resolution Protocol (ARP) ................................................12-11

Adding a Permanent Entry to the ARP Table ...............................................12-11

Deleting a Permanent Entry from the ARP Table .........................................12-12

Clearing a Dynamic Entry from the ARP Table ...........................................12-12

Local Proxy ARP ...........................................................................................12-12

ARP Filtering ................................................................................................12-13

IP Configuration ..........................................................................................................12-14

Configuring the Router Primary Address .............................................................12-14

Configuring the Router ID ...................................................................................12-14

Configuring the Time-to-Live (TTL) Value ........................................................12-14

IP-Directed Broadcasts .........................................................................................12-14

Denial of Service (DoS) Filtering ........................................................................12-15

Enabling/Disabling IP Services ............................................................................12-18

Managing IP ................................................................................................................12-20

Internet Control Message Protocol (ICMP) .........................................................12-20

ICMP Control Table ......................................................................................12-23

ICMP Statistics Table ....................................................................................12-23

Using the Ping Command ....................................................................................12-23

Tracing an IP Route ..............................................................................................12-24

Displaying TCP Information ................................................................................12-24

Displaying UDP Information ...............................................................................12-24

Verifying the IP Configuration ...................................................................................12-25

Chapter 13 Configuring Static Link Aggregation ..................................................................13-1

In This Chapter ..............................................................................................................13-1

Static Link Aggregation Specifications ........................................................................13-2

Static Link Aggregation Default Values .......................................................................13-2

Quick Steps for Configuring Static Link Aggregation .................................................13-3

Static Link Aggregation Overview ...............................................................................13-5

Static Link Aggregation Operation ........................................................................13-5

Relationship to Other Features ...............................................................................13-6

Configuring Static Link Aggregation Groups ...............................................................13-7

Configuring Mandatory Static Link Aggregate Parameters ...................................13-7

Creating and Deleting a Static Link Aggregate Group ..........................................13-8

Creating a Static Aggregate Group ..................................................................13-8

Deleting a Static Aggregate Group ..................................................................13-8

OmniSwitch 6800/6850/9000 Network Configuration Guide June 2006 page -xi

Adding and Deleting Ports in a Static Aggregate Group .......................................13-9

Adding Ports to a Static Aggregate Group ......................................................13-9

Removing Ports from a Static Aggregate Group .............................................13-9

Modifying Static Aggregation Group Parameters .......................................................13-10

Modifying the Static Aggregate Group Name .....................................................13-10

Creating a Static Aggregate Group Name .....................................................13-10

Deleting a Static Aggregate Group Name .....................................................13-10

Modifying the Static Aggregate Group Administrative State ..............................13-10

Enabling the Static Aggregate Group Administrative State ..........................13-10

Disabling the Static Aggregate Group Administrative State .........................13-10

Application Example ...................................................................................................13-11

Displaying Static Link Aggregation Configuration and Statistics ..............................13-12

Chapter 14 Configuring Dynamic Link Aggregation ............................................................14-1

In This Chapter ..............................................................................................................14-1

Dynamic ink Aggregation Specifications .....................................................................14-2

Dynamic Link Aggregation Default Values .................................................................14-3

Quick Steps for Configuring Dynamic Link Aggregation ............................................14-4

Dynamic Link Aggregation Overview ..........................................................................14-7

Dynamic Link Aggregation Operation ...................................................................14-7

Relationship to Other Features ...............................................................................14-9

Configuring Dynamic Link Aggregate Groups ...........................................................14-10

Configuring Mandatory Dynamic Link Aggregate Parameters ...........................14-10

Creating and Deleting a Dynamic Aggregate Group ...........................................14-11

Creating a Dynamic Aggregate Group ..........................................................14-11

Deleting a Dynamic Aggregate Group ..........................................................14-11

Configuring Ports to Join and Removing Ports in a Dynamic Aggregate

Group ...................................................................................................................14-12

Configuring Ports To Join a Dynamic Aggregate Group ..............................14-12

Removing Ports from a Dynamic Aggregate Group .....................................14-13

Modifying Dynamic Link Aggregate Group Parameters ............................................14-14

Modifying Dynamic Aggregate Group Parameters .............................................14-14

Modifying the Dynamic Aggregate Group Name .........................................14-14

Modifying the Dynamic Aggregate Group Administrative State ..................14-15

Configuring and Deleting the Dynamic Aggregate Group Actor

Administrative Key ......................................................................................14-15

Modifying the Dynamic Aggregate Group Actor System Priority ...............14-16

Modifying the Dynamic Aggregate Group Actor System ID .......................14-16

Modifying the Dynamic Aggregate Group Partner Administrative Key ......14-17

Modifying the Dynamic Aggregate Group Partner System Priority .............14-17

Modifying the Dynamic Aggregate Group Partner System ID .....................14-18

Modifying Dynamic Link Aggregate Actor Port Parameters ..............................14-18

Modifying the Actor Port System Administrative State ................................14-19

Modifying the Actor Port System ID ............................................................14-20

Modifying the Actor Port System Priority ....................................................14-21

Modifying the Actor Port Priority .................................................................14-22

page -xii OmniSwitch 6800/6850/9000 Network Configuration Guide June 2006

Modifying Dynamic Aggregate Partner Port Parameters ....................................14-23

Modifying the Partner Port System Administrative State .............................14-23

Modifying the Partner Port Administrative Key ...........................................14-25

Modifying the Partner Port System ID ..........................................................14-25

Modifying the Partner Port System Priority ..................................................14-26

Modifying the Partner Port Administrative Status ........................................14-27

Modifying the Partner Port Priority ...............................................................14-27

Application Examples .................................................................................................14-29

Sample Network Overview ..................................................................................14-29

Link Aggregation and Spanning Tree Example ...................................................14-30

Link Aggregation and QoS Example ...................................................................14-31

Displaying Dynamic Link Aggregation Configuration and Statistics ........................14-33

Chapter 15 Configuring IPv6 .......................................................................................................15-1

In This Chapter ..............................................................................................................15-1

IPv6 Specifications ........................................................................................................15-2

IPv6 Defaults .................................................................................................................15-2

Quick Steps for Configuring IPv6 Routing ...................................................................15-3

IPv6 Overview ..............................................................................................................15-4

IPv6 Addressing .....................................................................................................15-5

IPv6 Address Notation ....................................................................................15-5

IPv6 Address Prefix Notation ..........................................................................15-6

Autoconfiguration of IPv6 Addresses .............................................................15-6

Tunneling IPv6 over IPv4 ......................................................................................15-7

6to4 Tunnels ....................................................................................................15-7

Configured Tunnels .........................................................................................15-9

Configuring an IPv6 Interface .....................................................................................15-10

Modifying an IPv6 Interface ................................................................................15-11

Removing an IPv6 Interface .................................................................................15-11

Assigning IPv6 Addresses ...........................................................................................15-12

Removing an IPv6 Address ..................................................................................15-13

Configuring IPv6 Tunnel Interfaces ............................................................................15-14

Verifying the IPv6 Configuration ...............................................................................15-15

Chapter 16 Configuring RIP .........................................................................................................16-1

In This Chapter ..............................................................................................................16-1

RIP Specifications .........................................................................................................16-2

RIP Defaults ..................................................................................................................16-2

Quick Steps for Configuring RIP Routing ....................................................................16-3

RIP Overview ................................................................................................................16-4

RIP Version 2 .........................................................................................................16-5

OmniSwitch 6800/6850/9000 Network Configuration Guide June 2006 page -xiii

RIP Routing ...................................................................................................................16-5

Loading RIP ...........................................................................................................16-6

Enabling RIP ..........................................................................................................16-6

Creating a RIP Interface .........................................................................................16-7

Enabling a RIP Interface ........................................................................................16-7

Configuring the RIP Interface Send Option ....................................................16-7

Configuring the RIP Interface Receive Option ...............................................16-8

Configuring the RIP Interface Metric ..............................................................16-8

Configuring the RIP Interface Route Tag .......................................................16-8

RIP Options ...................................................................................................................16-9

Configuring the RIP Forced Hold-Down Interval ..................................................16-9

Enabling a RIP Host Route ....................................................................................16-9

RIP Redistribution .......................................................................................................16-10

Enabling RIP Redistribution ................................................................................16-10

Configuring a RIP Redistribution Policy .............................................................16-10

Configuring a Redistribution Metric .............................................................16-11

Configuring a RIP Redistribution Filter ...............................................................16-11

Creating a Redistribution Filter .....................................................................16-12

Configuring a Redistribution Filter Action ...................................................16-12

Configuring a Redistribution Filter Metric ....................................................16-13

Configuring the Redistribution Filter Route Control Action ........................16-13

Configuring a Redistribution Filter Route Tag .............................................16-13

RIP Security ................................................................................................................16-14

Configuring Authentication Type ........................................................................16-14

Configuring Passwords ........................................................................................16-14

Verifying the RIP Configuration .................................................................................16-15

Chapter 17 Configuring RDP .......................................................................................................17-1

In This Chapter ..............................................................................................................17-1

RDP Specifications .......................................................................................................17-2

RDP Defaults ................................................................................................................17-2

Quick Steps for Configuring RDP ................................................................................17-3

RDP Overview ..............................................................................................................17-5

RDP Interfaces .......................................................................................................17-6

Security Concerns ..................................................................................................17-7

Enabling/Disabling RDP ...............................................................................................17-8

Creating an RDP Interface ............................................................................................17-8

Specifying an Advertisement Destination Address ................................................17-9

Defining the Advertisement Interval ......................................................................17-9

Setting the Maximum Advertisement Interval ................................................17-9

Setting the Minimum Advertisement Interval ...............................................17-10

Setting the Advertisement Lifetime .....................................................................17-10

Setting the Preference Levels for Router IP Addresses .......................................17-10

Verifying the RDP Configuration ...............................................................................17-11

page -xiv OmniSwitch 6800/6850/9000 Network Configuration Guide June 2006

Chapter 18 Configuring DHCP Relay .........................................................................................18-1

In This Chapter ..............................................................................................................18-1

DHCP Relay Specifications ..........................................................................................18-2

DHCP Relay Defaults ...................................................................................................18-3

Quick Steps for Setting Up DHCP Relay .....................................................................18-4

DHCP Relay Overview .................................................................................................18-5

DHCP .....................................................................................................................18-6

DHCP and the OmniSwitch ...................................................................................18-6

DHCP Relay and Authentication ...........................................................................18-6

External DHCP Relay Application ........................................................................18-7

Internal DHCP Relay .............................................................................................18-8

DHCP Relay Implementation .......................................................................................18-9

Global DHCP .........................................................................................................18-9

Setting the IP Address .....................................................................................18-9

Per-VLAN DHCP ..................................................................................................18-9

Identifying the VLAN .....................................................................................18-9

Configuring BOOTP/DHCP Relay Parameters ...................................................18-10

Setting the Forward Delay ....................................................................................18-10

Setting Maximum Hops .......................................................................................18-11

Setting the Relay Forwarding Option ...................................................................18-11

Using Automatic IP Configuration .............................................................................18-12

Enabling Automatic IP Configuration ..................................................................18-12

Configuring DHCP Security Features .........................................................................18-13

Using the Relay Agent Information Option (Option-82) .....................................18-13

How the Relay Agent Processes DHCP Packets from the Client .................18-13

How the Relay Agent Processes DHCP Packets from the Server .................18-14

Enabling the Relay Agent Information Option-82 ........................................18-14

Configuring a Relay Agent Information Option-82 Policy ...........................18-15

Using DHCP Snooping ........................................................................................18-15

DHCP Snooping Configuration Guidelines ..................................................18-16

Enabling DHCP Snooping .............................................................................18-17

Configuring the Port Trust Mode ..................................................................18-18

Configuring the Port Traffic Suppression Status ...........................................18-19

Configuring Port IP Source Filtering ............................................................18-19

Configuring Rate Limiting ............................................................................18-19

Configuring the DHCP Snooping Binding Table ..........................................18-20

Verifying the DHCP Relay Configuration ..................................................................18-22

Chapter 19 Configuring VRRP .....................................................................................................19-1

In This Chapter ..............................................................................................................19-1

VRRP Specifications .....................................................................................................19-2

VRRP Defaults ..............................................................................................................19-2

Quick Steps for Creating a Virtual Router ....................................................................19-3

OmniSwitch 6800/6850/9000 Network Configuration Guide June 2006 page -xv

VRRP Overview ............................................................................................................19-4

Why Use VRRP? ....................................................................................................19-5

Definition of a Virtual Router ................................................................................19-5

VRRP MAC Addresses ..........................................................................................19-6

ARP Requests ..................................................................................................19-6

ICMP Redirects ...............................................................................................19-6

VRRP Startup Delay ..............................................................................................19-6

VRRP Tracking ......................................................................................................19-7

Interaction With Other Features ....................................................................................19-7

Configuration Overview ................................................................................................19-8

Basic Virtual Router Configuration .......................................................................19-8

Creating a Virtual Router .......................................................................................19-8

Specifying an IP Address for a Virtual Router ......................................................19-9

Configuring the Advertisement Interval ..............................................................19-10

Configuring Virtual Router Priority .....................................................................19-10

Setting Preemption for Virtual Routers ................................................................19-11

Enabling/Disabling a Virtual Router ....................................................................19-11

Setting VRRP Traps .............................................................................................19-12

Setting VRRP Startup Delay ................................................................................19-12

Creating Tracking Policies ...................................................................................19-13

Associating a Tracking Policy With a Virtual Router ..........................................19-13

Verifying the VRRP Configuration ............................................................................19-14

VRRP Application Example .......................................................................................19-15

VRRP Tracking Example .....................................................................................19-17

Chapter 20 Configuring IPX .........................................................................................................20-1

In This Chapter ..............................................................................................................20-1

IPX Specifications .........................................................................................................20-2

IPX Defaults ..................................................................................................................20-2

Quick Steps for Configuring IPX Routing ....................................................................20-3

IPX Overview ................................................................................................................20-4

IPX Routing ..................................................................................................................20-6

Enabling IPX Routing ............................................................................................20-6

Creating an IPX Router Port ..................................................................................20-6

IPX Router Port Configuration Options ..........................................................20-7

Creating/Deleting a Default Route .........................................................................20-7

Creating/Deleting Static Routes .............................................................................20-8

Configuring Type-20 Packet Forwarding ..............................................................20-8

Configuring Extended RIP and SAP Packets .........................................................20-9

Configuring RIP and SAP Timers ..........................................................................20-9

Using the PING Command ..................................................................................20-10

IPX RIP/SAP Filtering ................................................................................................20-11

Configuring RIP Filters ........................................................................................20-12

Configuring SAP Filters .......................................................................................20-12

Configuring GNS Filters 20-13

IPX RIP/SAP Filter Precedence ....................................................................20-14

page -xvi OmniSwitch 6800/6850/9000 Network Configuration Guide June 2006

Flushing the IPX RIP/SAP Tables .......................................................................20-14

Verifying the IPX Configuration ................................................................................20-15

Chapter 21 Managing Authentication Servers ......................................................................21-1

In This Chapter ..............................................................................................................21-1

Authentication Server Specifications ............................................................................21-2

Server Defaults ..............................................................................................................21-3

RADIUS Authentication Servers ...........................................................................21-3

LDAP Authentication Servers ................................................................................21-3

Quick Steps For Configuring Authentication Servers ..................................................21-4

Server Overview ............................................................................................................21-5

Backup Authentication Servers ..............................................................................21-5

Authenticated Switch Access .................................................................................21-5

Authenticated VLANs ............................................................................................21-6

Port-Based Network Access Control (802.1X) ......................................................21-7

ACE/Server ...................................................................................................................21-8

Clearing an ACE/Server Secret ..............................................................................21-8

RADIUS Servers ...........................................................................................................21-9

RADIUS Server Attributes .....................................................................................21-9

Standard Attributes ..........................................................................................21-9

Vendor-Specific Attributes for RADIUS ......................................................21-11

Configuring Functional Privileges on the Server ..........................................21-12

RADIUS Accounting Server Attributes ........................................................21-13

Configuring the RADIUS Client ..........................................................................21-14

LDAP Servers .............................................................................................................21-15

Setting Up the LDAP Authentication Server .......................................................21-15

LDAP Server Details ............................................................................................21-16

LDIF File Structure .......................................................................................21-16

Common Entries ............................................................................................21-16

Directory Entries ...........................................................................................21-17

Directory Searches .........................................................................................21-18

Retrieving Directory Search Results .............................................................21-18

Directory Modifications ................................................................................21-18

Directory Compare and Sort ..........................................................................21-19

The LDAP URL ............................................................................................21-19

Password Policies and Directory Servers ......................................................21-20

Directory Server Schema for LDAP Authentication ............................................21-21

Vendor-Specific Attributes for LDAP Servers ..............................................21-21

LDAP Accounting Attributes ........................................................................21-22

Dynamic Logging ..........................................................................................21-24

Configuring the LDAP Authentication Client .....................................................21-25

Creating an LDAP Authentication Server .....................................................21-26

Modifying an LDAP Authentication Server ..................................................21-26

Setting Up SSL for an LDAP Authentication Server ....................................21-26

Removing an LDAP Authentication Server ..................................................21-27

Verifying the Authentication Server Configuration ....................................................21-27

OmniSwitch 6800/6850/9000 Network Configuration Guide June 2006 page -xvii

Chapter 22 Configuring Authenticated VLANs ......................................................................22-1

In This Chapter ..............................................................................................................22-1

Authenticated Network Overview .................................................................................22-2

AVLAN Configuration Overview .................................................................................22-4

Sample AVLAN Configuration .............................................................................22-5

Setting Up Authentication Clients ................................................................................22-7

Telnet Authentication Client ..................................................................................22-7

Web Browser Authentication Client ......................................................................22-7

Configuring the Web Browser Client Language File ......................................22-8

Required Files for Web Browser Clients .........................................................22-8

SSL for Web Browser Clients .......................................................................22-11

DNS Name and Web Browser Clients ..........................................................22-11

Installing the AV-Client .......................................................................................22-12

Loading the Microsoft DLC Protocol Stack ..................................................22-12

Loading the AV-Client Software ...................................................................22-13

Setting the AV-Client as Primary Network Login ........................................22-18

Configuring the AV-Client Utility ................................................................22-18

Logging Into the Network Through an AV-Client ........................................22-21

Logging Off the AV-Client ...........................................................................22-22

Configuring the AV-Client for DHCP .................................................................22-23

Configuring Authenticated VLANs ............................................................................22-26

Removing a User From an Authenticated Network .............................................22-26

Configuring Authentication IP Addresses ............................................................22-27

Setting Up the Default VLAN for Authentication Clients ...................................22-27

Port Binding and Authenticated VLANs .............................................................22-28

Configuring Authenticated Ports .................................................................................22-28

Setting Up a DNS Path ................................................................................................22-29

Setting Up the DHCP Server .......................................................................................22-29

Enabling DHCP Relay for Authentication Clients ...............................................22-30

Configuring a DHCP Gateway for the Relay .......................................................22-31

Configuring the Server Authority Mode .....................................................................22-32

Configuring Single Mode .....................................................................................22-32

Configuring Multiple Mode .................................................................................22-34

Specifying Accounting Servers ...................................................................................22-35

Verifying the AVLAN Configuration .........................................................................22-36

Chapter 23 Configuring 802.1X ..................................................................................................23-1

In This Chapter ..............................................................................................................23-1

802.1X Specifications ...................................................................................................23-2

802.1X Defaults ............................................................................................................23-2

Quick Steps for Configuring 802.1X ............................................................................23-4

page -xviii OmniSwitch 6800/6850/9000 Network Configuration Guide June 2006

802.1X Overview ..........................................................................................................23-6

Supplicant Classification ........................................................................................23-6

802.1X Ports and DHCP ..................................................................................23-7

Re-authentication .............................................................................................23-7

802.1X Accounting ................................................................................................23-8

Compared to Authenticated VLANs ......................................................................23-8

Using Access Guardian Policies ...................................................................................23-9

Policy Types ...........................................................................................................23-9

Setting Up Port-Based Network Access Control ........................................................23-11

Setting 802.1X Switch Parameters .......................................................................23-11

Enabling MAC Authentication on the OmniSwitch 6800 and 6850 .............23-11

Enabling 802.1X on Ports ....................................................................................23-11

Configuring 802.1X Port Parameters ...................................................................23-12

Configuring the Port Control Direction .........................................................23-12

Configuring the Port Authorization ...............................................................23-12

Configuring 802.1X Port Timeouts ...............................................................23-12

Configuring the Maximum Number of Requests ..........................................23-13

Re-authenticating an 802.1X Port .................................................................23-13

Initializing an 802.1X Port ............................................................................23-13

Configuring Accounting for 802.1X ....................................................................23-14

Configuring Access Guardian Policies .......................................................................23-14

Verifying the 802.1X Port Configuration ...................................................................23-19

Chapter 24 Managing Policy Servers .......................................................................................24-1

In This Chapter ..............................................................................................................24-1

Policy Server Specifications .........................................................................................24-2

Policy Server Defaults ...................................................................................................24-2

Policy Server Overview ................................................................................................24-3

Installing the LDAP Policy Server ................................................................................24-3

Modifying Policy Servers .............................................................................................24-4

Modifying LDAP Policy Server Parameters ..........................................................24-4

Disabling the Policy Server From Downloading Policies ......................................24-4

Modifying the Port Number ...................................................................................24-5

Modifying the Policy Server Username and Password ..........................................24-5

Modifying the Searchbase ......................................................................................24-5

Configuring a Secure Socket Layer for a Policy Server ........................................24-6

Loading Policies From an LDAP Server ................................................................24-6

Removing LDAP Policies From the Switch ..........................................................24-6

Interaction With CLI Policies ................................................................................24-7

Verifying the Policy Server Configuration ...................................................................24-7

Chapter 25 Using ACL Manager .................................................................................................25-1

In This Chapter ..............................................................................................................25-1

ACLMAN Defaults .......................................................................................................25-2

Quick Steps for Creating ACLs ....................................................................................25-3

OmniSwitch 6800/6850/9000 Network Configuration Guide June 2006 page -xix

Quick Steps for Importing ACL Text Files .................................................................. 25-4

ACLMAN Overview .................................................................................................... 25-5

ACLMAN Configuration File ............................................................................... 25-5

ACL Text Files ...................................................................................................... 25-6

ACL Precedence .................................................................................................... 25-6

Interaction With the Alcatel CLI ........................................................................... 25-6

Using the ACLMAN Shell ........................................................................................... 25-7

ACLMAN Modes and Commands ............................................................................... 25-8

Privileged Exec Mode Commands ........................................................................ 25-8

Global Configuration Mode Commands ............................................................... 25-9

Interface Configuration Mode Commands .......................................................... 25-11

Access List Configuration Mode Commands ..................................................... 25-12

Time Range Configuration Mode Commands .................................................... 25-14

ACLMAN User Privileges .................................................................................. 25-14

Supported Protocols and Services .............................................................................. 25-15

Configuring ACLs ...................................................................................................... 25-16

ACL Configuration Methods and Guidelines ..................................................... 25-16

Configuring Numbered Standard and Extended ACLs ....................................... 25-17

Configuring Named Standard and Extended ACLs ............................................ 25-19

Applying an ACL to an Interface ........................................................................ 25-20

Saving the ACL Configuration ........................................................................... 25-20

Editing the ACLMAN Configuration File .......................................................... 25-20

Importing ACL Text Files ................................................................................... 25-21

Verifying the ACLMAN Configuration ..................................................................... 25-22

Using Alcatel CLI to Display ACLMAN Policies .............................................. 25-22

Chapter 26 Configuring QoS ...................................................................................................... 26-1

In This Chapter ............................................................................................................. 26-1

QoS Specifications ....................................................................................................... 26-2

QoS General Overview ................................................................................................ 26-3

QoS Policy Overview ................................................................................................... 26-4

How Policies Are Used ......................................................................................... 26-4

Valid Policies ........................................................................................................ 26-4

Interaction With Other Features ................................................................................... 26-5

Condition Combinations .............................................................................................. 26-6

Action Combinations ................................................................................................... 26-8

QoS Defaults ................................................................................................................ 26-9

Global QoS Defaults ............................................................................................. 26-9

QoS Port Defaults ................................................................................................ 26-10

Policy Rule Defaults ............................................................................................ 26-10

Policy Action Defaults ........................................................................................ 26-11

Default (Built-in) Policies ................................................................................... 26-11

QoS Configuration Overview .................................................................................... 26-12

page -xx OmniSwitch 6800/6850/9000 Network Configuration Guide June 2006

Configuring Global QoS Parameters ......................................................................... 26-13

Enabling/Disabling QoS ...................................................................................... 26-13

Setting the Global Default Dispositions ...............................................................26-13

Setting the Global Default Servicing Mode .........................................................26-14

Using the QoS Log ...............................................................................................26-14

What Kind of Information Is Logged ............................................................26-14

Number of Lines in the QoS Log ..................................................................26-15

Log Detail Level ............................................................................................26-15

Forwarding Log Events .................................................................................26-15

Forwarding Log Events to the Console .........................................................26-16

Displaying the QoS Log ................................................................................26-16

Clearing the QoS Log ....................................................................................26-17

Classifying Bridged Traffic as Layer 3 ................................................................26-17

Setting the Statistics Interval ................................................................................26-17

Returning the Global Configuration to Defaults ..................................................26-17

Verifying Global Settings .....................................................................................26-18

QoS Ports and Queues .................................................................................................26-19

Shared Queues ......................................................................................................26-19

Prioritizing and Queue Mapping ..........................................................................26-19

Configuring Queuing Schemes ............................................................................26-20

Configuring the Servicing Mode for a Port ...................................................26-21

Configuring the Egress Queue Minimum/Maximum Bandwidth ........................26-22

Trusted and Untrusted Ports .................................................................................26-22

Configuring Trusted Ports .............................................................................26-23

Using Trusted Ports With Policies ................................................................26-23

Verifying the QoS Port and Queue Configuration ...............................................26-24

Creating Policies .........................................................................................................26-25

Quick Steps for Creating Policies ........................................................................26-25

ASCII-File-Only Syntax ......................................................................................26-26

Creating Policy Conditions ..................................................................................26-27

Removing Condition Parameters ...................................................................26-28

Deleting Policy Conditions ...........................................................................26-28

Creating Policy Actions .......................................................................................26-28

Removing Action Parameters ........................................................................26-29

Deleting a Policy Action ...............................................................................26-29

Creating Policy Rules ...........................................................................................26-29

Configuring a Rule Validity Period ...............................................................26-30

Disabling Rules .............................................................................................26-30

Rule Precedence ............................................................................................26-31

Saving Rules ..................................................................................................26-31

Logging Rules ...............................................................................................26-32

Deleting Rules ...............................................................................................26-32

Verifying Policy Configuration ............................................................................26-32

Testing Conditions ...............................................................................................26-33

Using Condition Groups in Policies ............................................................................26-35

ACLs ....................................................................................................................26-35

Sample Group Configuration ...............................................................................26-35

Creating Network Groups ....................................................................................26-36

Creating Services ..................................................................................................26-37

Creating Service Groups ......................................................................................26-38

Alcatel 9000 User guide

Related papers

Other documents