Cabletron Systems GIGAswitch GSR-16, GIGAswitch GSR-8 User's Reference Manual

  • Hello! I am an AI chatbot trained to assist you with the Cabletron Systems GIGAswitch GSR-16 User's Reference Manual. I’ve already reviewed the document and can help you find the information you need or explain it in simple terms. Just ask your questions, and providing more details will help me assist you more effectively!
DIGITAL GIGAswitch/Router
User Reference Manual
December 1999
This manual describes how to use the DIGITAL GIGAswitch/Router
(GSR).
Revision/Update Information: This is a revised document.
Part Number: 9032684-03
Changes
Cabletron Systems reserves the right to make changes in specifications and other information
contained in this document without prior notice. The reader should in all cases consult Cabletron
Systems to determine whether any such changes have been made.
The hardware, firmware, or software described in this manual is subject to change without notice.
Disclaimer
IN NO EVENT SHALL CABLETRON SYSTEMS BE LIABLE FOR ANY INCIDENTAL, INDIRECT,
SPECIAL, OR CONSEQUENTIAL DAMAGES WHATSOEVER (INCLUDING BUT NOT LIMITED
TO LOST PROFITS) ARISING OUT OF OR RELATED TO THIS MANUAL OR THE INFORMATION
CONTAINED IN IT, EVEN IF CABLETRON SYSTEMS HAS BEEN ADVISED OF, KNOWN, OR
SHOULD HAVE KNOWN, THE POSSIBILITY OF SUCH DAMAGES.
Copyright
© 1999 by Cabletron Systems, Inc. All rights reserved.
Printed in the United States of America
Trademarks
Apple, AppleTalk, and Macintosh are registered trademarks of Apple Computer, Inc.
Cabletron Systems is registered trademark and Cabletron, clearVISN, and GIGAswitch are trademarks
of Cabletron Systems, Inc.
EtherChannel is a registered trademark of Cicsco Systems, Inc.
DIGITAL Equipment Corporation, DEC, and the DIGITAL Equipment Corporation logo are registered
trademarks and DECnet is a trademark of DIGITAL Equipment Corporation Equipment Corporation.
Microsoft, Windows, and Windows NT are registered trademarks of Microsoft Corporation.
Java is a trademark of Sun Microsytems, Inc.
All other product names mentioned in this manual may be trademarks or registered trademarks of
their respective companies.
FCC Notice — Class A Computing Device
iii
FCC Notice — Class A Computing Device
This equipment generates, uses, and may emit radio frequency energy. The equipment has been type
tested and found to comply with the limits for a Class A digital device pursuant to Part 15 of FCC
rules, which are designed to provide reasonable protection against such radio frequency interference.
Operation of this equipment in a residential area may cause interference in which case the user at his
own expense will be required to take whatever measures may be required to correct the interference.
Any modifications to this device - unless expressly approved by the manufacturer - can void the user's
authority to operate this equipment under part 15 of the FCC rules.
Industry Canada Notice
This digital apparatus does not exceed the Class A limits for radio noise emissions from digital
apparatus set out in the Radio Interference Regulations of the Canadian Department of
Communications.
Le présent appareil numérique n’émet pas de bruits radioélectriques dépassant les limites applicables
aux appareils numériques de la class A prescrites dans le Règlement sur le brouillage radioélectrique
édicté par le ministère des Communications du Canada.
NOTICE: The Industry Canada label identifies certified equipment. This certification means that the
equipment meets telecommunications network protective, operational and safety requirements as
prescribed in the appropriate Terminal Equipment Technical Requirements document(s). The
department does not guarantee the equipment will operate to the user’s satisfaction.
Before installing this equipment, users should ensure that it is permissible to be connected to the
facilities of the local telecommunications company. The equipment must also be installed using an
acceptable method of connection. The customer should be aware that compliance with the above
conditions may not prevent degradation of service in some situations.
Repairs to certified equipment should be coordinated by a representative designated by the supplier.
Any repairs or alterations made by the user to this equipment, or equipment malfunctions, may give
the telecommunications company cause to request the user to disconnect the equipment.
Users should ensure for their own protection that the electrical ground connections of the power
utility, telephone lines and internal metallic water pipe system, if present, are connected together. This
precaution may be particularly important in rural areas. Caution: Users should not attempt to make
such connections themselves, but should contact the appropriate electric inspection authority, or
electrician, as appropriate.
NOTICE: The Ringer Equivalence Number (REN) assigned to each terminal device provides an
indication of the maximum number of terminals allowed to be connected to a telephone interface. The
termination on an interface may consist of any combination of devices subject only to the requirement
that the sum of the ringer equivalence Numbers of all the devices does not exceed 5.
VCCI Notice — Class A Computing Device
iv
VCCI Notice — Class A Computing Device
This equipment is a Class A product (information equipment to be used in commercial and/or
industrial areas) and conforms to the standards set by the Voluntary Control Council for Interference
by Data Processing Equipment and Electronic Office Machines aimed at preventing radio interference
in commercial and/or industrial areas. Consequently, when used in a residential area or in an adjacent
area thereto, radio interference may be caused to radios and TV receivers. Read the instructions for
correct handling.
Taiwanese Notice — Class A Computing Device
CE Notice — Class A Computing Device
Warning!
This is a Class A product. In a domestic environment, this product may cause radio interference, in
which case the user may be required to take adequate measures.
Achtung!
Dieses ist ein Gerät der Funkstörgrenzwertklasse A. In Wohnbereichen können bei Betrieb dieses Gerätes
Rundfunkstörungen auftreten, in welchen Fällen der Benutzer für entsprechende Gegenma
ß
nahmen
verantwortlich ist.
Avertissement!
Cet appareil est un appareil de Classe A. Dans un environnement résidentiel cet appareil peut provoquer
des brouillages radioélectriques. Dans ce cas, il peut être demandé à l'utilisateur de prendre les mesures
appropriées.
Cabletron Systems, Inc. Program License Agreement
v
Cabletron Systems, Inc. Program License Agreement
IMPORTANT: Before utilizing this product, carefully read this License Agreement.
This document is an agreement between you, the end user, and Cabletron Systems, Inc. (“Cabletron”)
that sets forth your rights and obligations with respect to the Cabletron software program (the
“Program”) contained in this package. The Program may be contained in firmware, chips or other
media. BY UTILIZING THE ENCLOSED PRODUCT, YOU ARE AGREEING TO BECOME BOUND
BY THE TERMS OF THIS AGREEMENT, WHICH INCLUDES THE LICENSE AND THE
LIMITATION OF WARRANTY AND DISCLAIMER OF LIABILITY. IF YOU DO NOT AGREE TO THE
TERMS OF THIS AGREEMENT, PROMPTLY RETURN THE UNUSED PRODUCT TO THE PLACE
OF PURCHASE FOR A FULL REFUND.
Cabletron Software Program License
1. LICENSE. You have the right to use only the one (1) copy of the Program provided in this package
subject to the terms and conditions of this License Agreement.
You may not copy, reproduce or transmit any part of the Program except as permitted by the
Copyright Act of the United States or as authorized in writing by Cabletron.
2. OTHER RESTRICTIONS
. You may not reverse engineer, decompile, or disassemble the Program.
3. APPLICABLE LAW
. This License Agreement shall be interpreted and governed under the laws
and in the state and federal courts of New Hampshire. You accept the personal jurisdiction and
venue of the New Hampshire courts.
Exclusion of Warranty and Disclaimer of Liability
1. EXCLUSION OF WARRANTY. Except as may be specifically provided by Cabletron in writing,
Cabletron makes no warranty, expressed or implied, concerning the Program (including its
documentation and media).
CABLETRON DISCLAIMS ALL WARRANTIES, OTHER THAN THOSE SUPPLIED TO YOU BY
CABLETRON IN WRITING, EITHER EXPRESSED OR IMPLIED, INCLUDING BUT NOT
LIMITED TO IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A
PARTICULAR PURPOSE, WITH RESPECT TO THE PROGRAM, THE ACCOMPANYING
WRITTEN MATERIALS, AND ANY ACCOMPANYING HARDWARE.
2. NO LIABILITY FOR CONSEQUENTIAL DAMAGES
. IN NO EVENT SHALL CABLETRON OR
ITS SUPPLIERS BE LIABLE FOR ANY DAMAGES WHATSOEVER (INCLUDING, WITHOUT
LIMITATION, DAMAGES FOR LOSS OF BUSINESS, PROFITS, BUSINESS INTERRUPTION,
LOSS OF BUSINESS INFORMATION, SPECIAL, INCIDENTAL, CONSEQUENTIAL, OR
RELIANCE DAMAGES, OR OTHER LOSS) ARISING OUT OF THE USE OR INABILITY TO USE
THIS CABLETRON PRODUCT, EVEN IF CABLETRON HAS BEEN ADVISED OF THE
POSSIBILITY OF SUCH DAMAGES. BECAUSE SOME STATES DO NOT ALLOW THE
EXCLUSION OR LIMITATION OF LIABILITY FOR CONSEQUENTIAL OR INCIDENTAL
DAMAGES, OR ON THE DURATION OR LIMITATION OF IMPLIED WARRANTIES, IN SOME
INSTANCES THE ABOVE LIMITATIONS AND EXCLUSIONS MAY NOT APPLY TO YOU.
SAFETY INFORMATION
vi
United States Government Restricted Rights
The enclosed product (a) was developed solely at private expense; (b) contains “restricted computer
software” submitted with restricted rights in accordance with Section 52227-19 (a) through (d) of the
Commercial Computer Software - Restricted Rights Clause and its successors, and (c) in all respects is
proprietary data belonging to Cabletron and/or its suppliers.
For Department of Defense units, the product is licensed with “Restricted Rights” as defined in the
DoD Supplement to the Federal Acquisition Regulations, Section 52.227-7013 (c) (1) (ii) and its
successors, and use, duplication, disclosure by the Government is subject to restrictions as set forth in
subparagraph (c) (1) (ii) of the Rights in Technical Data and Computer Software clause at 252.227-7013.
Cabletron Systems, Inc., 35 Industrial Way, Rochester, New Hampshire 03867-0505.
SAFETY INFORMATION
CLASS 1 LASER TRANSCEIVERS
The DGSRF-AA 100Base-FX Module, DGSRS-AA 1000Base-LX Module, and DGSRL-AA 1000Base-
LX Module use Class 1 Laser transceivers. Read the following safety information before installing
or operating these modules.
The Class 1 laser transceivers use an optical feedback loop to maintain Class 1 operation limits. This
control loop eliminates the need for maintenance checks or adjustments. The output is factory set, and
does not allow any user adjustment. Class 1 Laser transceivers comply with the following safety
standards:
21 CFR 1040.10 and 1040.11 U.S. Department of Health and Human Services (FDA).
IEC Publication 825 (International Electrotechnical Commission).
CENELEC EN 60825 (European Committee for Electrotechnical Standardization).
When operating within their performance limitations, laser transceiver output meets the Class 1
accessible emission limit of all three standards. Class 1 levels of laser radiation are not considered
hazardous.
Laser Radiation and Connectors
When the connector is in place, all laser radiation remains within the fiber. The maximum amount of
radiant power exiting the fiber (under normal conditions) is -12.6 dBm or 55 x 10
-6
watts.
Removing the optical connector from the transceiver allows laser radiation to emit directly from the
optical port. The maximum radiance from the optical port (under worst case conditions) is
0.8 W cm
-2
or 8 x 10
3
W m
2
sr-1.
Do not use optical instruments to view the laser output. The use of optical instruments to view
laser output increases eye hazard. When viewing the output optical port, power must be removed
from the network adapter.
SAFETY INFORMATION
vii
DECLARATION OF CONFORMITY
Application of Council Directive(s): 89/336/EEC
73/23/EEC
Manufacturer’s Name: Cabletron Systems, Inc.
Manufacturer’s Address: 35 Industrial Way
PO Box 5005
Rochester, NH 03867
European Representative Name: Mr. J. Solari
European Representative Address: Cabletron Systems Limited
Nexus House, Newbury
Business Park
London Road, Newbury
Berkshire RG13 2PZ, England
Conformance to Directive(s)/Product Standards:
EC Directive 89/336/EEC
EC Directive 73/23/EEC
EN 55022
EN 50082-1
EN 60950
Equipment Type/Environment: Networking Equipment, for
use in a Commercial or Light
Industrial Environment.
We the undersigned, hereby declare, under our sole responsibility, that the equipment packaged with
this notice conforms to the above directives.
Manufacturer Legal Representative in Europe
Mr. Ronald Fotino Mr. J. Solari
Full Name Full Name
Principal Compliance Engineer Managing Director - E.M.E.A.
Title Title
Rochester, NH, USA Newbury, Berkshire, England
Location Location
DIGITAL GIGAswitch/Router User Reference Manual ix
Contents
Preface.................................................................................................... xxi
About This Manual.............................................................................................................. xxi
Who Should Read This Manual? ....................................................................................... xxi
How to Use This Manual .................................................................................................... xxi
Related Documentation.....................................................................................................xxiii
Correspondence..................................................................................................................xxiii
Documentation Comments........................................................................................xxiii
Online Services............................................................................................................xxiii
Getting Help........................................................................................................................xxiv
Chapter 1: DIGITAL GIGAswitch/Router Product Overview .................. 1
Supported Media (Encapsulation Type)...............................................................................3
Supported Routing Protocols .................................................................................................3
Configuring the DIGITAL GIGAswitch/Router.................................................................4
Understanding the Command Line Interface...............................................................4
Basic Line Editing Commands........................................................................................4
Access Modes ....................................................................................................................5
User Mode..........................................................................................................................6
Enable Mode......................................................................................................................7
Configure Mode ................................................................................................................9
Boot PROM Mode...........................................................................................................11
Disabling a Function or Feature....................................................................................11
Loading System Images and Configuration Files .............................................................11
Boot and System Image..................................................................................................11
Configuration Files .........................................................................................................12
Loading System Image Software ..................................................................................12
Loading Boot PROM Software......................................................................................14
Activating the Configuration Commands in the Scratchpad...................................14
Copying the Configuration to the Startup Configuration File.................................15
Displaying Configuration Changes..............................................................................16
Contents
x DIGITAL GIGAswitch/Router User Reference Manual
Managing the GSR ................................................................................................................17
Setting the GSR Name ................................................................................................... 17
Setting GSR Date and Time .......................................................................................... 17
Configuring NTP............................................................................................................ 18
Configuring the GSR CLI.............................................................................................. 18
Configuring SNMP Services......................................................................................... 18
Configuring DNS ........................................................................................................... 19
Connecting Between the GSR and Other Systems .................................................... 19
Configuring Logging..................................................................................................... 20
Monitoring Configuration.................................................................................................... 20
Chapter 2: Hot Swapping Line Cards and Control Modules ................ 23
Hot Swapping Overview...................................................................................................... 23
Hot Swapping Line Cards.................................................................................................... 24
Deactivating the Line Card........................................................................................... 24
Removing the Line Card ............................................................................................... 25
Installing a New Line Card ................................................................................... 25
Hot Swapping One Type of Line Card With Another.............................................. 25
Hot Swapping a Secondary Control Module .................................................................... 26
Deactivating the Control Module................................................................................ 26
Removing the Control Module .................................................................................... 27
Installing the Control Module...................................................................................... 27
Hot Swapping a Switching Fabric Module (GSR-16 only).............................................. 27
Chapter 3: Bridging Configuration Guide ............................................. 29
Bridging Overview................................................................................................................ 29
Spanning Tree (IEEE 802.1d)........................................................................................ 29
Bridging Modes (Flow-Based and Address-Based) .................................................. 30
VLAN Overview.................................................................................................................... 30
Port-based VLANs.................................................................................................. 31
MAC-address-based VLANs................................................................................. 31
Protocol-based VLANs........................................................................................... 31
Subnet-based VLANs............................................................................................. 32
Multicast-based VLANs......................................................................................... 32
Policy-based VLANs .............................................................................................. 32
GSR VLAN Support....................................................................................................... 32
VLANs and the GSR............................................................................................... 32
Ports, VLANs, and L3 Interfaces .......................................................................... 33
Access Ports and Trunk Ports (802.1Q support)................................................. 34
Explicit and Implicit VLANs................................................................................. 34
DIGITAL GIGAswitch/Router User Reference Manual xi
Contents
Configuring GSR Bridging Functions.................................................................................35
Configuring Address-based or Flow-based Bridging ...............................................35
Configuring Spanning Tree...........................................................................................36
Adjusting Spanning-Tree Parameters..........................................................................36
Setting the Bridge Priority......................................................................................37
Setting a Port Priority..............................................................................................37
Assigning Port Costs...............................................................................................38
Adjusting Bridge Protocol Data Unit (BPDU) Intervals ....................................38
Adjusting the Interval between Hello Times................................................38
Defining the Forward Delay Interval ............................................................38
Defining the Maximum Age ...........................................................................39
Configuring a Port or Protocol based VLAN..............................................................39
Creating a Port or Protocol Based VLAN.............................................................39
Adding Ports to a VLAN ........................................................................................39
Configuring VLAN Trunk Ports...................................................................................40
Configuring VLANs for Bridging.................................................................................40
Configuring Layer-2 Filters...........................................................................................40
Monitoring Bridging..............................................................................................................41
Configuration Examples .......................................................................................................42
Creating an IP or IPX VLAN.........................................................................................42
Creating a non-IP/non-IPX VLAN ..............................................................................42
Chapter 4: SmartTRUNK Configuration Guide...................................... 43
Overview.................................................................................................................................43
Configuring SmartTRUNKs .................................................................................................44
Creating a SmartTRUNK ...............................................................................................44
Add Physical Ports to the SmartTRUNK ....................................................................45
Specify Traffic Distribution Policy (Optional)............................................................45
Monitoring SmartTRUNKs...................................................................................................46
Example Configurations .......................................................................................................47
Chapter 5: DHCP Configuration Guide.................................................. 49
DHCP Overview ....................................................................................................................49
Configuring DHCP ................................................................................................................50
Configuring an IP Address Pool...................................................................................50
Configuring Client Parameters.....................................................................................50
Configuring a Static IP Address ...................................................................................51
Grouping Scopes with a Common Interface...............................................................51
Configuring DHCP Server Parameters........................................................................52
Updating the Lease Database...............................................................................................52
Monitoring the DHCP Server...............................................................................................52
DHCP Configuration Examples...........................................................................................53
Configuring Secondary Subnets...................................................................................54
Secondary Subnets and Directly-Connected Clients .................................................55
Interacting with Relay Agents.......................................................................................56
Contents
xii DIGITAL GIGAswitch/Router User Reference Manual
Chapter 6: IP Routing Configuration Guide .......................................... 59
IP Routing Overview ............................................................................................................ 59
IP Routing Protocols ...................................................................................................... 60
Unicast Routing Protocols ..................................................................................... 60
Multicast Routing Protocols.................................................................................. 60
Configuring IP Interfaces and Parameters ........................................................................ 61
Configuring IP Addresses to Ports.............................................................................. 61
Configuring IP Interfaces for a VLAN........................................................................ 61
Specifying Ethernet Encapsulation Method............................................................... 62
Configuring Address Resolution Protocol (ARP) ..................................................... 62
Configuring ARP Cache Entries ........................................................................... 62
Configuring Proxy ARP......................................................................................... 62
Configuring Reverse Address Resolution Protocol (RARP).................................... 63
Specifying IP Interfaces for RARP........................................................................ 63
Defining MAC-to-IP Address Mappings ............................................................ 63
Monitoring RARP ................................................................................................... 64
Configuring DNS Parameters ...................................................................................... 64
Configuring IP Services (ICMP)................................................................................... 65
Configuring IP Helper................................................................................................... 65
Configuring Direct Broadcast....................................................................................... 66
Configuring Denial of Service (DOS).......................................................................... 66
Monitoring IP Parameters............................................................................................. 66
Configuring Router Discovery............................................................................................ 67
Configuration Examples....................................................................................................... 68
Assigning IP/IPX Interfaces......................................................................................... 68
Chapter 7: VRRP Configuration Guide................................................... 69
VRRP Overview..................................................................................................................... 69
Configuring VRRP ................................................................................................................70
Basic VRRP Configuration............................................................................................ 70
Configuration of Router R1 ................................................................................... 71
Configuration for Router R2.................................................................................. 71
Symmetrical Configuration .......................................................................................... 71
Configuration of Router R1 ................................................................................... 73
Configuration of Router R2 ................................................................................... 73
Multi-Backup Configuration ........................................................................................ 74
Configuration of Router R1 ................................................................................... 75
Configuration of Router R2 ................................................................................... 76
Configuration of Router R3 ................................................................................... 77
Additional Configuration ............................................................................................. 78
Setting the Backup Priority.................................................................................... 78
Setting the Advertisement Interval ...................................................................... 78
Setting Pre-empt Mode .......................................................................................... 79
Setting an Authentication Key .............................................................................. 79
Monitoring VRRP.................................................................................................................. 80
ip-redundancy trace....................................................................................................... 80
ip-redundancy show...................................................................................................... 80
VRRP Configuration Notes.................................................................................................. 81
DIGITAL GIGAswitch/Router User Reference Manual xiii
Contents
Chapter 8: RIP Configuration Guide ...................................................... 83
RIP Overview..........................................................................................................................83
Configuring RIP .....................................................................................................................83
Enabling and Disabling RIP ..........................................................................................84
Configuring RIP Interfaces............................................................................................84
Configuring RIP Parameters .........................................................................................85
Configuring RIP Route Preference...............................................................................86
Configuring RIP Route Default-Metric........................................................................86
Monitoring RIP.......................................................................................................................87
Configuration Example.........................................................................................................88
Chapter 9: OSPF Configuration Guide................................................... 89
OSPF Overview ......................................................................................................................89
OSPF Multipath...............................................................................................................90
Configuring OSPF..................................................................................................................90
Enabling OSPF.................................................................................................................90
Configuring OSPF Interface Parameters .....................................................................91
Configuring an OSPF Area............................................................................................92
Configuring OSPF Area Parameters ............................................................................93
Creating Virtual Links....................................................................................................94
Configuring Autonomous System External (ASE) Link Advertisements ..............94
Configuring OSPF over Non-Broadcast Multiple Access.........................................95
Monitoring OSPF....................................................................................................................95
OSPF Configuration Examples.............................................................................................97
Exporting All Interface & Static Routes to OSPF .........................................97
Exporting All RIP, Interface & Static Routes to OSPF.................................98
Chapter 10: BGP Configuration Guide................................................. 103
BGP Overview ......................................................................................................................103
The GSR BGP Implementation....................................................................................104
Basic BGP Tasks....................................................................................................................104
Setting the Autonomous System Number ................................................................105
Setting the Router ID....................................................................................................105
Configuring a BGP Peer Group ..................................................................................106
Adding and Removing a BGP Peer............................................................................107
Starting BGP...................................................................................................................107
Using AS-Path Regular Expressions ..........................................................................108
AS-Path Regular Expression Examples..............................................................109
Using the AS Path Prepend Feature...........................................................................110
Notes on Using the AS Path Prepend Feature...................................................110
BGP Configuration Examples ............................................................................................111
BGP Peering Session Example ....................................................................................111
IBGP Configuration Example......................................................................................113
IBGP Routing Group Example.............................................................................114
IBGP Internal Group Example.............................................................................117
EBGP Multihop Configuration Example...................................................................120
Community Attribute Example..................................................................................123
Notes on Using Communities..............................................................................130
Contents
xiv DIGITAL GIGAswitch/Router User Reference Manual
Local_Pref Attribute Example.................................................................................... 130
Notes on Using the Local_Pref Attribute .......................................................... 132
Multi-Exit Discriminator Attribute Example ........................................................... 132
EBGP Aggregation Example....................................................................................... 134
Route Reflection Example........................................................................................... 135
Notes on Using Route Reflection........................................................................ 138
Chapter 11: Routing Policy Configuration Guide................................ 139
Route Import and Export Policy Overview..................................................................... 139
Preference......................................................................................................................140
Import Policies.............................................................................................................. 141
Import-Source........................................................................................................ 141
Route-Filter ............................................................................................................ 142
Export Policies .............................................................................................................. 142
Export-Destination................................................................................................ 142
Export-Source ........................................................................................................ 143
Route-Filter ............................................................................................................ 143
Specifying a Route Filter ............................................................................................. 144
Aggregates and Generates.......................................................................................... 145
Aggregate-Destination ......................................................................................... 145
Aggregate-Source.................................................................................................. 145
Route-Filter ............................................................................................................ 146
Authentication.............................................................................................................. 146
Authentication Methods...................................................................................... 147
Authentication Keys and Key Management..................................................... 147
Configuring Simple Routing Policies............................................................................... 148
Redistributing Static Routes ....................................................................................... 148
Redistributing Directly Attached Networks ............................................................ 149
Redistributing RIP into RIP ........................................................................................ 149
Redistributing RIP into OSPF..................................................................................... 149
Redistributing OSPF to RIP ........................................................................................ 150
Redistributing Aggregate Routes .............................................................................. 150
Simple Route Redistribution Examples .................................................................... 150
Example 1: Redistribution into RIP.................................................................... 150
Exporting a Given Static Route to All RIP Interfaces ............................... 151
Exporting All Static Routes to All RIP Interfaces...................................... 152
Exporting All Static Routes Except the Default Route to All RIP Interfaces
152
Example 2: Redistribution into OSPF................................................................. 152
Exporting All Interface & Static Routes to OSPF ...................................... 153
Exporting All RIP, Interface & Static Routes to OSPF.............................. 153
Configuring Advanced Routing Policies......................................................................... 154
Export Policies .............................................................................................................. 154
Creating an Export Destination.................................................................................. 156
Creating an Export Source.......................................................................................... 156
Import Policies.............................................................................................................. 156
Creating an Import Source.......................................................................................... 157
Creating a Route Filter ................................................................................................ 157
Creating an Aggregate Route..................................................................................... 158
Creating an Aggregate Destination........................................................................... 159
DIGITAL GIGAswitch/Router User Reference Manual xv
Contents
Creating an Aggregate Source ....................................................................................159
Examples of Import Policies........................................................................................159
Example 1: Importing from RIP...........................................................................159
Importing a Selected Subset of Routes from One RIP Trusted Gateway.....
162
Importing a Selected Subset of Routes from All RIP Peers Accessible Over
a Certain Interface ...................................................................................162
Example 2: Importing from OSPF .......................................................................163
Importing a Selected Subset of OSPF-ASE Routes ....................................165
Examples of Export Policies ........................................................................................166
Example 1: Exporting to RIP................................................................................166
Exporting a Given Static Route to All RIP Interfaces................................168
Exporting a Given Static Route to a Specific RIP Interface ......................168
Exporting All Static Routes Reachable Over a Given Interface to a Specific
RIP-Interface.............................................................................................169
Exporting Aggregate-Routes into RIP.........................................................170
Example 2: Exporting to OSPF.............................................................................171
Exporting All Interface & Static Routes to OSPF .......................................172
Exporting All RIP, Interface & Static Routes to OSPF...............................173
Chapter 12: Multicast Routing Configuration Guide ......................... 177
IP Multicast Overview.........................................................................................................177
IGMP Overview ............................................................................................................177
DVMRP Overview........................................................................................................178
Configuring IGMP ...............................................................................................................179
Configuring IGMP on an IP Interface........................................................................179
Configuring IGMP Query Interval.............................................................................179
Configuring IGMP Response Wait Time...................................................................180
Configuring Per-Interface Control of IGMP Membership......................................180
Configuring DVMRP...........................................................................................................180
Starting and Stopping DVMRP...................................................................................181
Configuring DVMRP on an Interface ........................................................................181
Configuring DVMRP Parameters...............................................................................181
Configuring the DVMRP Routing Metric .................................................................182
Configuring DVMRP TTL & Scope............................................................................182
Configuring a DVMRP Tunnel ...................................................................................183
Monitoring IGMP & DVMRP.............................................................................................184
Configuration Examples .....................................................................................................185
Chapter 13: IP Policy-Based Forwarding Configuration Guide.......... 187
Overview...............................................................................................................................187
Configuring IP Policies........................................................................................................188
Defining an ACL Profile ..............................................................................................188
Associating the Profile with an IP Policy ..................................................................189
Creating Multi-statement IP Policies ..................................................................189
Setting Load Distribution for Next-hop Gateways...........................................190
Setting the IP Policy Action..................................................................................190
Checking the Availability of Next-hop Gateways............................................191
Contents
xvi DIGITAL GIGAswitch/Router User Reference Manual
Applying an IP Policy to an Interface ....................................................................... 192
Applying an IP Policy to Locally Generated Packets ...................................... 192
IP Policy Configuration Examples.................................................................................... 192
Routing Traffic to Different ISPs................................................................................ 192
Prioritizing Service to Customers.............................................................................. 194
Authenticating Users Through a Firewall................................................................ 195
Firewall Load Balancing.............................................................................................. 196
Monitoring IP Policies ........................................................................................................ 197
Chapter 14: Network Address Translation Configuration Guide ...... 201
Overview .............................................................................................................................. 201
Configuring NAT ................................................................................................................ 202
Setting Inside and Outside Interfaces ....................................................................... 202
Setting NAT Rules........................................................................................................ 203
Static........................................................................................................................ 203
Dynamic ................................................................................................................. 203
Managing Dynamic Bindings............................................................................................ 203
NAT and FTP....................................................................................................................... 204
Monitoring NAT..................................................................................................................204
Configuration Examples..................................................................................................... 204
Static Configuration..................................................................................................... 204
Using Static NAT .................................................................................................. 205
Dynamic Configuration............................................................................................... 206
Using Dynamic NAT............................................................................................ 206
Dynamic NAT with IP Overload (PAT) Configuration ......................................... 207
Using Dynamic NAT with IP Overload ............................................................ 208
Dynamic NAT with Outside Interface Redundancy .............................................. 208
Using Dynamic NAT with Matching Interface Redundancy......................... 209
Chapter 15: Web Hosting Configuration Guide.................................. 211
Overview .............................................................................................................................. 211
Load Balancing .................................................................................................................... 212
Configuring Load Balancing ...................................................................................... 212
Creating the Server Group................................................................................... 212
Specifying Load Balancing Policy (Optional)................................................... 213
Adding Servers to the Load Balancing Group.................................................. 213
Setting Server Status .................................................................................................... 213
Load Balancing and FTP ............................................................................................. 214
Allowing Access to Load Balancing Servers............................................................ 214
Setting Timeouts for Load Balancing Mappings..................................................... 215
Displaying Load Balancing Information .................................................................. 215
Configuration Examples ............................................................................................. 216
Web Hosting with One Virtual Group and Multiple Destination Servers... 216
Web Hosting with Multiple Virtual Groups and Multiple Destination Servers
217
Virtual IP Address Ranges .................................................................................. 218
DIGITAL GIGAswitch/Router User Reference Manual xvii
Contents
Web Caching.........................................................................................................................219
Configuring Web Caching...........................................................................................219
Creating the Cache Group....................................................................................219
Specifying the Client(s) for the Cache Group (Optional).................................220
Redirecting HTTP Traffic on an Interface ..........................................................220
Configuration Example................................................................................................221
Other Configurations ...................................................................................................221
Bypassing Cache Servers ......................................................................................222
Proxy Server Redundancy....................................................................................222
Distributing Frequently-Accessed Sites Across Cache Servers.......................222
Monitoring Web-Caching ............................................................................................223
Chapter 16: IPX Routing Configuration Guide.................................... 225
IPX Routing Overview ........................................................................................................225
RIP (Routing Information Protocol)...........................................................................226
SAP (Service Advertising Protocol) ...........................................................................226
Configuring IPX RIP & SAP ...............................................................................................227
IPX RIP............................................................................................................................227
IPX SAP ..........................................................................................................................227
Creating IPX Interfaces ................................................................................................227
IPX Addresses................................................................................................................228
Configuring IPX Interfaces and Parameters.....................................................................228
Configuring IPX Addresses to Ports..........................................................................228
Configuring IPX Interfaces for a VLAN ....................................................................228
Specifying IPX Encapsulation Method ......................................................................228
Configuring IPX Routing ....................................................................................................229
Enabling IPX RIP...........................................................................................................229
Enabling SAP.................................................................................................................229
Configuring Static Routes............................................................................................229
Configuring Static SAP Table Entries ........................................................................230
Controlling Access to IPX Networks..........................................................................230
Creating an IPX Access Control List...................................................................230
Creating an IPX Type 20 Access Control List....................................................231
Creating an IPX SAP Access Control List ..........................................................231
Creating an IPX GNS Access Control List..........................................................231
Creating an IPX RIP Access Control List............................................................232
Monitoring an IPX Network...............................................................................................232
Configuration Examples .....................................................................................................233
Chapter 17: Access Control List Configuration Guide ........................ 235
ACL Basics ............................................................................................................................236
Defining Selection Criteria in ACL Rules..................................................................236
How ACL Rules are Evaluated...................................................................................238
Implicit Deny Rule........................................................................................................238
Allowing External Responses to Established TCP Connections............................240
Creating and Modifying ACLs...........................................................................................240
Editing ACLs Offline....................................................................................................241
Maintaining ACLs Using the ACL Editor.................................................................242
Using ACLs...........................................................................................................................242
Contents
xviii DIGITAL GIGAswitch/Router User Reference Manual
Applying ACLs to Interfaces...................................................................................... 242
Applying ACLs to Services......................................................................................... 243
Using ACLs as Profiles................................................................................................ 244
Using Profile ACLs with the IP Policy Facility................................................. 245
Using Profile ACLs with the Traffic Rate Limiting Facility............................ 246
Using Profile ACLs with Dynamic NAT........................................................... 246
Using Profile ACLs with the Port Mirroring Facility ...................................... 247
Using Profile ACLs with the Web Caching Facility......................................... 248
Redirecting HTTP Traffic to Cache Servers............................................... 248
Preventing Web Objects From Being Cached............................................ 248
Enabling ACL Logging....................................................................................................... 249
Monitoring ACLs.................................................................................................................250
Chapter 18: Security Configuration Guide .......................................... 251
Security Overview...............................................................................................................251
Configuring GSR Access Security..................................................................................... 252
Configuring RADIUS .................................................................................................. 252
Monitoring RADIUS............................................................................................. 253
Configuring TACACS ................................................................................................. 253
Monitoring TACACS............................................................................................ 253
Configuring TACACS Plus......................................................................................... 254
Monitoring TACACS Plus ................................................................................... 255
Configuring Passwords............................................................................................... 255
Layer-2 Security Filters....................................................................................................... 255
Configuring Layer-2 Address Filters ........................................................................ 256
Configuring Layer-2 Port-to-Address Lock Filters ................................................. 256
Configuring Layer-2 Static Entry Filters................................................................... 257
Configuring Layer-2 Secure Port Filters ................................................................... 257
Monitoring Layer-2 Security Filters .......................................................................... 258
Layer-2 Filter Examples............................................................................................... 259
Example 1: Address Filters.................................................................................. 259
Static Entries Example................................................................................... 259
Port-to-Address Lock Examples.................................................................. 260
Example 2: Secure Ports....................................................................................... 260
Layer-3 Access Control Lists (ACLs)................................................................................ 261
Chapter 19: QoS Configuration Guide................................................. 263
QoS & Layer-2/Layer-3/Layer-4 Flow Overview.......................................................... 263
Layer-2 and Layer-3 & Layer-4 Flow Specification................................................. 264
Precedence for Layer-3 Flows .................................................................................... 264
GSR Queuing Policies.................................................................................................. 265
Traffic Prioritization for Layer-2 Flows............................................................................ 265
Configuring Layer-2 QoS............................................................................................ 266
Traffic Prioritization for Layer-3 & Layer-4 Flows......................................................... 266
Configuring IP QoS Policies ....................................................................................... 266
Setting an IP QoS Policy....................................................................................... 267
Specifying Precedence for an IP QoS Policy ..................................................... 267
DIGITAL GIGAswitch/Router User Reference Manual xix
Contents
Configuring IPX QoS Policies .....................................................................................267
Setting an IPX QoS Policy.....................................................................................267
Specifying Precedence for an IPX QoS Policy ...................................................268
Configuring GSR Queueing Policy....................................................................................268
Allocating Bandwidth for a Weighted-Fair Queuing Policy..................................268
ToS Rewrite...........................................................................................................................268
Configuring ToS Rewrite for IP Packets....................................................................269
Monitoring QoS....................................................................................................................271
Limiting Traffic Rate............................................................................................................272
Example Configuration................................................................................................272
Displaying Rate Limit Information ............................................................................273
Chapter 20: Performance Monitoring Guide ...................................... 275
Performance Monitoring Overview ..................................................................................275
Configuring the GSR for Port Mirroring ..........................................................................277
Monitoring Broadcast Traffic .............................................................................................277
Chapter 21: RMON Configuration Guide ............................................ 279
RMON Overview .................................................................................................................279
Configuring and Enabling RMON ....................................................................................280
Example of RMON Configuration Commands........................................................280
RMON Groups ..............................................................................................................281
Lite RMON Groups ...............................................................................................282
Standard RMON Groups......................................................................................282
Professional RMON Groups ................................................................................282
Control Tables ...............................................................................................................283
Using RMON ........................................................................................................................284
Configuring RMON Groups...............................................................................................285
Configuration Examples ..............................................................................................287
Displaying RMON Information.........................................................................................289
RMON CLI Filters.........................................................................................................290
Creating RMON CLI Filters .................................................................................291
Using RMON CLI Filters ......................................................................................291
Troubleshooting RMON .....................................................................................................292
Allocating Memory to RMON............................................................................................293
Chapter 22: WAN Configuration Guide............................................... 295
WAN Overview....................................................................................................................295
High-Speed Serial Interface (HSSI) and Standard Serial Interfaces ......................295
Configuring WAN Interfaces......................................................................................296
Primary and Secondary Addresses ............................................................................296
Static, Mapped, and Dynamic Peer IP/IPX Addresses...........................................296
Static Addresses.....................................................................................................296
Mapped Addresses................................................................................................297
Dynamic Addresses...............................................................................................297
Forcing Bridged Encapsulation...................................................................................298
Contents
xx DIGITAL GIGAswitch/Router User Reference Manual
Packet Compression..................................................................................................... 298
Average Packet Size.............................................................................................. 299
Nature of the Data ................................................................................................ 299
Link Integrity......................................................................................................... 299
Latency Requirements.......................................................................................... 299
Example Configurations ...................................................................................... 300
Packet Encryption ........................................................................................................ 300
WAN Quality of Service.............................................................................................. 300
Source Filtering and ACLs................................................................................... 301
Weighted-Fair Queueing ..................................................................................... 301
Congestion Management..................................................................................... 301
Random Early Discard (RED)...................................................................... 302
Adaptive Shaping.......................................................................................... 302
Frame Relay Overview....................................................................................................... 302
Virtual Circuits ............................................................................................................. 303
Permanent Virtual Circuits (PVCs) .................................................................... 303
Configuring Frame Relay Interfaces for the GSR ........................................................... 303
Defining the Type and Location of a Frame Relay and VC Interface................... 303
Setting up a Frame Relay Service Profile.................................................................. 304
Applying a Service Profile to an Active Frame Relay WAN Port......................... 304
Monitoring Frame Relay WAN Ports............................................................................... 305
Frame Relay Port Configuration ....................................................................................... 305
Point-to-Point Protocol (PPP) Overview.......................................................................... 307
Use of LCP Magic Numbers....................................................................................... 307
Configuring PPP Interfaces................................................................................................ 308
Defining the Type and Location of a PPP Interface ................................................ 308
Setting up a PPP Service Profile................................................................................. 308
Applying a Service Profile to an Active PPP Port ................................................... 309
Configuring Multilink PPP Bundles.......................................................................... 310
Compression on MLP Bundles or Links............................................................ 310
Monitoring PPP WAN Ports.............................................................................................. 311
PPP Port Configuration...................................................................................................... 311
WAN Configuration Examples ......................................................................................... 313
Simple Configuration File........................................................................................... 313
Multi-Router WAN Configuration............................................................................ 314
Router R1 Configuration File .............................................................................. 315
Router R2 Configuration File .............................................................................. 316
Router R3 Configuration File .............................................................................. 317
Router R4 Configuration File .............................................................................. 318
Router R5 Configuration File .............................................................................. 318
Router R6 Configuration File .............................................................................. 319
/