Blade Network Technologies RACKSWITCH G8124 Bedienungsanleitung
- Schauen Sie die Anleitung online durch oderladen Sie diese herunter
- 388 Seiten
- 0.91 mb
Zur Seite of
Ähnliche Gebrauchsanleitungen
-
Switch
Blade Network Technologies BLADEOS G8124
28 Seiten 0.91 mb -
Computer Accessories
Blade Network Technologies RACKSWITCH G8000
28 Seiten 0.91 mb -
Switch
Blade Network Technologies G8000
145 Seiten 0.91 mb -
Personal Computer
Blade Network Technologies RACKSWITCH G8124
388 Seiten 0.91 mb -
Switch
Blade Network Technologies BLADEOS BMD00178
33 Seiten 0.91 mb -
Switch
Blade Network Technologies BLADEOS BMD00098
27 Seiten 0.91 mb
Richtige Gebrauchsanleitung
Die Vorschriften verpflichten den Verkäufer zur Übertragung der Gebrauchsanleitung Blade Network Technologies RACKSWITCH G8124 an den Erwerber, zusammen mit der Ware. Eine fehlende Anleitung oder falsche Informationen, die dem Verbraucher übertragen werden, bilden eine Grundlage für eine Reklamation aufgrund Unstimmigkeit des Geräts mit dem Vertrag. Rechtsmäßig lässt man das Anfügen einer Gebrauchsanleitung in anderer Form als Papierform zu, was letztens sehr oft genutzt wird, indem man eine grafische oder elektronische Anleitung von Blade Network Technologies RACKSWITCH G8124, sowie Anleitungsvideos für Nutzer beifügt. Die Bedingung ist, dass ihre Form leserlich und verständlich ist.
Was ist eine Gebrauchsanleitung?
Das Wort kommt vom lateinischen „instructio”, d.h. ordnen. Demnach kann man in der Anleitung Blade Network Technologies RACKSWITCH G8124 die Beschreibung der Etappen der Vorgehensweisen finden. Das Ziel der Anleitung ist die Belehrung, Vereinfachung des Starts, der Nutzung des Geräts oder auch der Ausführung bestimmter Tätigkeiten. Die Anleitung ist eine Sammlung von Informationen über ein Gegenstand/eine Dienstleistung, ein Hinweis.
Leider widmen nicht viele Nutzer ihre Zeit der Gebrauchsanleitung Blade Network Technologies RACKSWITCH G8124. Eine gute Gebrauchsanleitung erlaubt nicht nur eine Reihe zusätzlicher Funktionen des gekauften Geräts kennenzulernen, sondern hilft dabei viele Fehler zu vermeiden.
Was sollte also eine ideale Gebrauchsanleitung beinhalten?
Die Gebrauchsanleitung Blade Network Technologies RACKSWITCH G8124 sollte vor allem folgendes enthalten:
- Informationen über technische Daten des Geräts Blade Network Technologies RACKSWITCH G8124
- Den Namen des Produzenten und das Produktionsjahr des Geräts Blade Network Technologies RACKSWITCH G8124
- Grundsätze der Bedienung, Regulierung und Wartung des Geräts Blade Network Technologies RACKSWITCH G8124
- Sicherheitszeichen und Zertifikate, die die Übereinstimmung mit entsprechenden Normen bestätigen
Warum lesen wir keine Gebrauchsanleitungen?
Der Grund dafür ist die fehlende Zeit und die Sicherheit, was die bestimmten Funktionen der gekauften Geräte angeht. Leider ist das Anschließen und Starten von Blade Network Technologies RACKSWITCH G8124 zu wenig. Eine Anleitung beinhaltet eine Reihe von Hinweisen bezüglich bestimmter Funktionen, Sicherheitsgrundsätze, Wartungsarten (sogar das, welche Mittel man benutzen sollte), eventueller Fehler von Blade Network Technologies RACKSWITCH G8124 und Lösungsarten für Probleme, die während der Nutzung auftreten könnten. Immerhin kann man in der Gebrauchsanleitung die Kontaktnummer zum Service Blade Network Technologies finden, wenn die vorgeschlagenen Lösungen nicht wirksam sind. Aktuell erfreuen sich Anleitungen in Form von interessanten Animationen oder Videoanleitungen an Popularität, die den Nutzer besser ansprechen als eine Broschüre. Diese Art von Anleitung gibt garantiert, dass der Nutzer sich das ganze Video anschaut, ohne die spezifizierten und komplizierten technischen Beschreibungen von Blade Network Technologies RACKSWITCH G8124 zu überspringen, wie es bei der Papierform passiert.
Warum sollte man Gebrauchsanleitungen lesen?
In der Gebrauchsanleitung finden wir vor allem die Antwort über den Bau sowie die Möglichkeiten des Geräts Blade Network Technologies RACKSWITCH G8124, über die Nutzung bestimmter Accessoires und eine Reihe von Informationen, die erlauben, jegliche Funktionen und Bequemlichkeiten zu nutzen.
Nach dem gelungenen Kauf des Geräts, sollte man einige Zeit für das Kennenlernen jedes Teils der Anleitung von Blade Network Technologies RACKSWITCH G8124 widmen. Aktuell sind sie genau vorbereitet oder übersetzt, damit sie nicht nur verständlich für die Nutzer sind, aber auch ihre grundliegende Hilfs-Informations-Funktion erfüllen.
Inhaltsverzeichnis der Gebrauchsanleitungen
-
Seite 1
2051 Mis sio n C ollege Blv d. Santa Clar a, CA 95 054 www .blade networ k.net BLAD EOS ™ 6.5 Application Guide RackSwitch ™ G812 4/G8124-E Part Num ber: BMD002 20, Octobe r 2010[...]
-
Seite 2
BLADEOS 6.5.2 Applicati on Guide 2 BMD002 20, October 2010 Copyri ght © 201 0 BLADE Net work T ech nologies , Inc. , 2051 M ission Col lege Bl vd., Sant a Clara , Californ ia, 95054, USA. All ri ghts reserved. P art Number: BMD00 220. This do cument is p rotec ted by co pyright a nd dist ributed under li censes r estrictin g its u se, copyin g, di[...]
-
Seite 3
BMD00 220, October 2010 3 Content s Preface 17 Who Should Use This Guide 17 What You’l l Find i n This Guide 17 Additiona l References 20 Typograph ic Conventions 21 How to Get Help 22 Part 1: Getting St arted 23 Chapter 1: Switch Administrat ion 25 Administr ation Interface s 25 Command Line I nterface 26 [...]
-
Seite 4
BLADEOS 6.5.2 Applicati on Guide 4 Conte nts BMD002 20, October 2010 Cha p te r 2: Ini tial S e tu p 41 Informati on Needed for Setup 41 Default Setup Opti ons 42 Stopping an d Restarting Setup Manually 42 Setup Pa rt 1: Basic System Configurat ion 43 Setup Part 2: Port Configur ation 44 Setup Pa rt 3: VLANs 46 Setup[...]
-
Seite 5
BLADEOS 6.5.2 Applicat ion Guide BMD00 220, October 2010 Contents 5 Chapter 4: Authenticati on & Authori zation Protocols 65 RADIUS Authenticat ion and Authorizati on 65 How RADIUS Authentication Works 66 Configuri ng RADIUS on the Swi tch 66 RADIUS Authenticat ion Features in BLADEOS 67 Switch User Accounts 68 RADIU[...]
-
Seite 6
BLADEOS 6.5.2 Applicati on Guide 6 Conte nts BMD002 20, October 2010 Part 3: Switch Basic s 85 Chapter 6: VLANs 87 VLANs Overview 88 VLANs and Port VLAN ID Numbers 88 VLAN Numbers 88 PVID Numbers 89 VLAN Tagging 90 VLAN Topologies and Design Consi dera tions 94 VLAN Configurati on Rules 94 Multiple VLANs with[...]
-
Seite 7
BLADEOS 6.5.2 Applicat ion Guide BMD00 220, October 2010 Contents 7 Per-VLAN Spanning Tree Groups 117 Using Mult ip le STGs to Eliminate Fals e Loops 117 STP/PVST+ Defaul ts and Guidel ines 118 Adding a VLAN to a Spanning Tree Group 118 Creating a VLAN 119 Rules for VLAN Tagged Ports 119 Adding and Removing Ports from ST[...]
-
Seite 8
BLADEOS 6.5.2 Applicati on Guide 8 Conte nts BMD002 20, October 2010 Part 4: Advanced Switc hing Features 145 Chapter 10: Deployment Profil es 147 Availabl e Profiles 147 Selec ti ng Prof ile s 149 Automatic Confi gur ation Changes 149 Chapter 11: Virtuali zat ion 151 Chapter 12: Virtual NICs 153 Defining Serv er Por[...]
-
Seite 9
BLADEOS 6.5.2 Applicat ion Guide BMD00 220, October 2010 Contents 9 VLAN Maps 176 VM Policy Bandwidth Control 178 VM Policy Bandwidth Control Commands 178 Bandwidth Polici es vs. Bandwidth Shaping 179 VMready Informat ion Displays 180 VMready Configura tion Example 184 Chapter 14: FCoE and CEE 187 Fibre Channe l over[...]
-
Seite 10
BLADEOS 6.5.2 Applicati on Guide 10 Content s BMD002 20, October 2010 Part 5: IP Routing 217 Chapter 15: Basic IP Routin g 219 IP Routi ng Benefits 219 Routing Between IP Subnets 219 Example of Subnet Routing 221 Using VLANs to Segregate Broadc ast Domains 222 Configurat ion Example 222 ECMP Static Routes 225 OSP[...]
-
Seite 11
BLADEOS 6.5.2 Applicat ion Guide BMD00 220, October 2010 Contents 11 Chapter 18: Internet Group Management Protocol 249 IGMP Snooping 250 IGMP Groups 251 FastLeave 251 IGMPv3 Snoopi ng 251 IGMP Snooping Configura ti on Example 253 Static Mult icast Router 254 IGM P Quer ier 255 IGMP Filt eri ng 256 Chapter 19[...]
-
Seite 12
BLADEOS 6.5.2 Applicati on Guide 12 Content s BMD002 20, October 2010 Interf ace Cost 281 Electing the Designated Router and Bac kup 281 Summarizing Routes 281 Default Routes 282 Virtual Links 283 Router ID 283 Authentic ation 28 4 Configuri ng Plain Text OSPF Passwords 285 Configuri ng MD5 Auth entication 28[...]
-
Seite 13
BLADEOS 6.5.2 Applicat ion Guide BMD00 220, October 2010 Co ntents 13 Part 6: High Availabili ty Fundamentals 315 Chapter 22: Basic Redundancy 31 7 Trunking for Link Redundanc y 317 Hot Links 318 Forward Delay 318 Preemption 318 FDB Update 318 Configurat ion Guideline s 319 Configuri ng Hot Lin ks 319 Active [...]
-
Seite 14
BLADEOS 6.5.2 Applicati on Guide 14 Content s BMD002 20, October 2010 Part 7: Network Management 343 Chapter 25: Link Layer Discovery Proto col 345 LLDP Overview 345 Enabling or Disa bling LLDP 346 Global LLDP Setting 346 Transmit and Recei ve Control 346 LLDP Transmit Featur es 347 Schedule d Interval 347 Minimu[...]
-
Seite 15
BLADEOS 6.5.2 Applicat ion Guide BMD00 220, October 2010 Co ntents 15 Part 8: Monitoring 367 Chapter 27: Remote Monitoring 369 RMON Overview 369 RMON Group 1—Stati stics 370 RMON Group 2—Histor y 371 History MIB Objec t ID 371 Configuri ng RMON History 372 RMON Group 3—Alarms 373 Alarm MIB objects 373 C[...]
-
Seite 16
BLADEOS 6.5.2 Applicati on Guide 16 Content s BMD002 20, October 2010[...]
-
Seite 17
BMD00 220, October 2010 17 Preface The BLADEOS 6.5.2 Application Guide describes how to configu re and use the BLADEOS 6.5 software on the Rack Switch G8124 /G8124-E ( collectivel y referred to as G8124 throu ghout thi s document). For documentation on inst alling the switch physically , see the Installation G uide for your G8124. Who Should Use Th[...]
-
Seite 18
BLADEOS 6.5.2 Applicati on Guide 18 Preface BMD 00220, Octo ber 2010 Part 2: Securing the Swit ch Chapter 3, “Securing Administration,” descr ibes method s for us ing Secure Shell for administratio n connections, and configuring end-us er access control. Chapter 4, “Authentication & Authorization Prot ocols,” describ es diff[...]
-
Seite 19
BLADEOS 6.5.2 Applicat ion Guide BMD00 220, October 2010 Pr efac e 19 Part 5: IP Routing Chapter 15, “Basi c IP R outing,” descr ibe s ho w to con fi gur e the G812 4 for IP rou tin g us in g IP subnets, BOOTP , and DHCP Relay . Chapter 16, “I nt ernet Protocol V ersio n 6,” descri bes how to con figur e the G8124 for IP v6 host[...]
-
Seite 20
BLADEOS 6.5.2 Applicati on Guide 20 Preface BMD 00220, Octo ber 2010 Part 8: Monitorin g Chapter 27, “Remote Mo nitoring,” describes how to configure t he RMON agent on the swi tch, so that the switch can ex change network mo nitoring data. Chapter 28, “sFLOW , described how to use t he embedded sF low agent for sampling ne twork [...]
-
Seite 21
BLADEOS 6.5.2 Applicat ion Guide BMD00 220, October 2010 Pr efac e 21 T ypogr aphic Co nventio ns The following table d escribes the typogr aphic styles used in this book. Ta b l e 1 T ypogr aphic Con ventions T ype face or Symbol Meaning E xampl e ABC123 This type is used for n ames of commands, files, and directories used within the text. V i[...]
-
Seite 22
BLADEOS 6.5.2 Applicati on Guide 22 Preface BMD 00220, Octo ber 2010 How to Get Hel p If you n eed help, service, or tech nical assistance, call BLADE Network T echnologies T echnical Suppor t: US toll free calls: 1- 800-414-5268 International calls: 1-408-834-7871 Y ou also can visit our web site at the fo llowing addres s: http://www.bladenet[...]
-
Seite 23
BMD00 220, October 2010 23 Part 1: Getting S t arted[...]
-
Seite 24
BLADEOS 6.5.2 Applicati on Guide 24 Part 1: Ge tting S tart ed BMD002 20, October 2010[...]
-
Seite 25
BMD00 220, October 2010 25 C HAPTER 1 Switch Ad ministration Y our Rack Switch G8124 (G8124) is read y to perfor m basic switching functions rig ht out of t he box. Some of the mor e advanced features , however , require some administrative co nfiguration before they can be us ed eff ectively . The extensive BLADEOS switching software included in t[...]
-
Seite 26
BLADEOS 6.5.2 Applicati on Guide 26 Chapter 1: Switch Administrati on BMD002 20, October 2010 Comma nd Line I nterf ace The BLADEOS Command Line Interface (CLI) prov ides a simple, direct method for switch administratio n. Using a basic terminal, y ou are presented with an or ganized hierarchy of menus, each with logically-related s ub-menus an[...]
-
Seite 27
BLADEOS 6.5.2 Applicat ion Guide BMD00 220, October 2010 Chap ter 1: Switch Admin istration 27 Est ablis hing a Con nection The f acto ry def ault se tting s permit initial switch administration through onl y the built-in serial port. All other forms of access require additional switch configuration before they can be used. Remote access us ing[...]
-
Seite 28
BLADEOS 6.5.2 Applicati on Guide 28 Chapter 1: Switch Administrati on BMD002 20, October 2010 3. Config ure a management I P address . The swit ch reserves fo ur management interfaces: Using I Pv4: IF 127 suppo rts IPv4 m anagement po rt A and us es IPv4 de fault gat eway 3. IF 128 suppo rts IPv4 m anagement po rt B and u ses IPv4 d[...]
-
Seite 29
BLADEOS 6.5.2 Applicat ion Guide BMD00 220, October 2010 Chap ter 1: Switch Admin istration 29 Using the Switch Dat a Port s Y ou also can configur e in-band m anage ment throug h an y of th e swi tch dat a por ts. T o allow in-ba nd management , use the followi ng procedur e: 1. Log on to the switch. 2. Enter IP interface mod e. Note – Inter[...]
-
Seite 30
BLADEOS 6.5.2 Applicati on Guide 30 Chapter 1: Switch Administrati on BMD002 20, October 2010 Note – IPv4 gateway 1 and 2, and IP v6 gateway 1, are used f or in-band data n etworks. I Pv4 and IPv6 gate w ays 3 a n d 4 are reser ved f o r out -of-b and m a nage m ent po rts ( see “Using th e Switch Mana g eme nt Por ts” on page 27 ). Once [...]
-
Seite 31
BLADEOS 6.5.2 Applicat ion Guide BMD00 220, October 2010 Chap ter 1: Switch Admin istration 31 Using Sec ure Shell Althou gh a remote networ k adminis trator can manag e the configu ration of a G8124 via T elnet, this method does not provide a secu re connection. The Secure Shell (SSH) pr otocol enables you to securely log into another device o[...]
-
Seite 32
BLADEOS 6.5.2 Applicati on Guide 32 Chapter 1: Switch Administrati on BMD002 20, October 2010 Using a Web Browser The switch pro vides a Browser -B ased I nterface (BBI) for accessing the com mon configura tion, managemen t and operat ion features of the G8124 th rough your W eb browser . By default, BBI access via HTTP is enabled on the s witc[...]
-
Seite 33
BLADEOS 6.5.2 Applicat ion Guide BMD00 220, October 2010 Chap ter 1: Switch Admin istration 33 3. Generate the HTTPS certificate. Accessing the BBI via HTTPS requires that you ge nerate a certificate to be us ed during the key exchange. A default certificate is created the first time HTTPS is enabled, but you can create a new certificate defini[...]
-
Seite 34
BLADEOS 6.5.2 Applicati on Guide 34 Chapter 1: Switch Administrati on BMD002 20, October 2010 BBI Su mmary The BBI is or ganized at a high level as f ollows: Context but t ons —These butt ons allow you to select the t ype of action y ou wish to perform. The Con figur ation button provides access to the configu ration elements for the entire s[...]
-
Seite 35
BLADEOS 6.5.2 Applicat ion Guide BMD00 220, October 2010 Chap ter 1: Switch Admin istration 35 Using Simple N etwork Management Protocol BLADEOS p rovides Simple Ne twork Managemen t Protoco l (SNMP) vers ion 1, v ersion 2, and version 3 support for access through any n etwork management sof tware, such as IBM Director or HP-OpenV iew . Note ?[...]
-
Seite 36
BLADEOS 6.5.2 Applicati on Guide 36 Chapter 1: Switch Administrati on BMD002 20, October 2010 BOOTP/DHCP Client IP Address Service s For remote switch administration, the client terminal d evice must have a valid IP ad dress on the same network as a switch interface. The IP add ress on the client device may be configured manually , or obtained [...]
-
Seite 37
BLADEOS 6.5.2 Applicat ion Guide BMD00 220, October 2010 Chap ter 1: Switch Admin istration 37 Global BOOT P Relay Agent Config uration T o enable the G8124 to be a BOOTP (or DHCP) fo rwarder , enable the BOOTP relay feature, configure u p to four global BOOTP serv er IPv4 addresses on the s witch, and enable BOOTP relay on the interface(s) o n[...]
-
Seite 38
BLADEOS 6.5.2 Applicati on Guide 38 Chapter 1: Switch Administrati on BMD002 20, October 2010 Switch Login Levels T o enable better switch man a gemen t and user accountabili ty , three levels or classes of user access have be en implemented on the G812 4. Levels of access to CL I, W eb management f unctions, and screens incr ease as needed to [...]
-
Seite 39
BLADEOS 6.5.2 Applicat ion Guide BMD00 220, October 2010 Chap ter 1: Switch Admin istration 39 Setup vs. the Command Li ne Once the admini strator password is v erified, you are g iven complete access to the switch. I f the switch is still set to it s factory default conf igur ation, the system will ask wheth er yo u wish to run Setup (see “I[...]
-
Seite 40
BLADEOS 6.5.2 Applicati on Guide 40 Chapter 1: Switch Administrati on BMD002 20, October 2010[...]
-
Seite 41
BMD00 220, October 2010 41 C HAPTER 2 Initial Setup T o help with the initial process of configuring you r sw itch , the BLADEOS software includes a Setup utility . The Setup utility prompts yo u st ep-by-st ep to enter all the necessary information for basic configuration of the switch. Whenever y ou log in a s the system a dministrat or under the[...]
-
Seite 42
BLADEOS 6.5.2 Applicati on Guide 42 Chapter 2: Initial Setup BMD002 20, October 2010 Default Setup Options The Setup prompt appears automatically whenever you login as the system administrator und er the factory defau lt set ti ngs . 1. Connect to the switch. After connecting, the login prompt will appear as shown below . 2. Enter admin as the [...]
-
Seite 43
BLADEOS 6.5.2 Applicat ion Guide BMD00 220, October 2010 Chapte r 2: Ini tial Setup 43 Setup Part 1: Basic System Co nfiguration When Setup is started, the sy stem prompts: 1. Enter y if you will be configuring VLANs. Otherwise enter n . If yo u decide not t o configure VLA Ns during t his sessi on, you can configure th em later usin g the conf[...]
-
Seite 44
BLADEOS 6.5.2 Applicati on Guide 44 Chapter 2: Initial Setup BMD002 20, October 2010 6. Enter the minute of the current time at the prompt: Enter the minute as a number from 0 0 to 59. T o keep the current minute, press <Enter>. 7. Enter the secon ds of the current time at the pro mpt: Enter the secon ds as a number from 00 to 59. T o kee[...]
-
Seite 45
BLADEOS 6.5.2 Applicat ion Guide BMD00 220, October 2010 Chapte r 2: Ini tial Setup 45 3. Config ure Gigabit Et hernet port fl ow parameters . The sy stem pro mpts: Enter rx to enable receive flow control, tx for transmit f low control, both to enable both , or none to turn flow contro l off for the port. T o keep the current setting, press <[...]
-
Seite 46
BLADEOS 6.5.2 Applicati on Guide 46 Chapter 2: Initial Setup BMD002 20, October 2010 Setup Part 3: VLANs If yo u chose to s kip VLANs con figuration b ack in Part 2, skip to “Setup P art 4: IP Co nfigurati on” on p a ge 47 . 1. Select the V LAN to config ure, or skip V LAN configuratio n at the prom pt: If you wish to change settings for in[...]
-
Seite 47
BLADEOS 6.5.2 Applicat ion Guide BMD00 220, October 2010 Chapte r 2: Ini tial Setup 47 Setup Part 4: IP Confi guratio n The syst em prompts for IPv4 parameters. Although the switch supp orts bo th IPv4 and IPv6 netw orks, the Setup utility permits only IPv4 configuration. For IPv6 configu ration, see “Internet Protoco l V ersion 6 ” on page[...]
-
Seite 48
BLADEOS 6.5.2 Applicati on Guide 48 Chapter 2: Initial Setup BMD002 20, October 2010 4. If configur ing VLANs, specify a VLAN for the interface. This prompt app ears if you selected to co nfigure VLANs back in Part 1 : Enter the number fo r t he VLAN to which the interface belongs , or press <Enter> without specifying a VLAN number to acc[...]
-
Seite 49
BLADEOS 6.5.2 Applicat ion Guide BMD00 220, October 2010 Chapte r 2: Ini tial Setup 49 Default Gate ways 1. At the prompt, select an IP default gateway for configuration, or skip default gateway configu ration: Enter the number for the IP default gateway to be configured. T o sk ip default gateway configu ration, press <Enter> with out ty[...]
-
Seite 50
BLADEOS 6.5.2 Applicati on Guide 50 Chapter 2: Initial Setup BMD002 20, October 2010 Setup Part 5: Final S tep s 1. When prompted, decide whether to res tart Setup or continue: Enter y to restar t the Setup uti lity from the beginning, or n to continue. 2. When prom pted, decide wh ether you wis h to review the configuratio n changes: Enter y t[...]
-
Seite 51
BLADEOS 6.5.2 Applicat ion Guide BMD00 220, October 2010 Chapte r 2: Ini tial Setup 51 Optional Setup for T elnet Support Note – This step is optiona l. Perform thi s procedure o nly if yo u are planning o n connectin g to the G8124 through a remote T elnet connection. 1. T elnet is enabled by default. T o change the setting, use the followin[...]
-
Seite 52
BLADEOS 6.5.2 Applicati on Guide 52 Chapter 2: Initial Setup BMD002 20, October 2010[...]
-
Seite 53
BMD00 220, October 2010 53 Part 2: Securing the Switch[...]
-
Seite 54
BLADEOS 6.5.2 Applicati on Guide 54 Part 2: Se curing the Sw itch BMD002 20, October 2010[...]
-
Seite 55
BMD00 220, October 2010 55 C HAPTER 3 Securing Administration Secure sw itch managem ent is needed for environ ments that per form signi ficant managem ent functions acr oss the Internet. Commo n functions for secur ed management are d escribed in the following sections: “Secure Sh ell and Secu re Copy” on page 55 “End User Access Con[...]
-
Seite 56
BLADEOS 6.5.2 Applicati on Guide 56 Chapter 3: Securing Adminis tration BMD002 20, October 2010 Although SSH an d SCP are disabled by def ault, enabling and using thes e features provides the following benefits: Identifying the administrator using Name/Pass word Authentication of r emote administrators Authorization of remote admini[...]
-
Seite 57
BLADEOS 6.5.2 Applicat ion Guide BMD00 220, October 2010 Chap ter 3: Secu ring Adminis tration 57 Configuring the SCP Administrator Password T o configure the SCP-onl y administr ator passw ord, enter t he following co mmand (the defau lt pas sw ord i s admin ): Using SSH and SCP Client Commands This section show s the format for using some cli[...]
-
Seite 58
BLADEOS 6.5.2 Applicati on Guide 58 Chapter 3: Securing Adminis tration BMD002 20, October 2010 T o Load a Switch Configurati on Fi le from the SCP Host Synt ax: Example: T o Apply and Save the Configurat ion When loading a co nfiguration file to the switch, the apply and save commands are still req uired, in orde r for the configuration comman[...]
-
Seite 59
BLADEOS 6.5.2 Applicat ion Guide BMD00 220, October 2010 Chap ter 3: Secu ring Adminis tration 59 T o Copy the Swi tch Image and Boot Files to the SCP Host Syntax : Example: T o Load Swi tch Configurat ion Files from th e SCP Host Synt ax: Example: SSH and SCP Encryption of Management Messages The following en cryption and authentication meth o[...]
-
Seite 60
BLADEOS 6.5.2 Applicati on Guide 60 Chapter 3: Securing Adminis tration BMD002 20, October 2010 Generat ing RSA Host and Server Keys for SSH Access T o support the SSH server feature, two sets of RSA key s (host and se rver keys) are req uired. The host key i s 1024 bits and is used to identi fy the G8124 . The server k ey is 768 bi ts and is u[...]
-
Seite 61
BLADEOS 6.5.2 Applicat ion Guide BMD00 220, October 2010 Chap ter 3: Secu ring Adminis tration 61 SSH/SCP Integration with T ACACS+ A uthentication SSH/SCP is integ rated with T AC ACS+ authentication. After the T ACACS+ serv er is enabled on the switch, all subsequent SSH authentication requests will be redirected to the specified T ACA CS+ se[...]
-
Seite 62
BLADEOS 6.5.2 Applicati on Guide 62 Chapter 3: Securing Adminis tration BMD002 20, October 2010 End User Acce ss Control BLADEOS allows an adminis trator to define end user accounts that permit end users to perfo rm operation tasks via the s witch C LI comman ds. On ce end u ser accou nts are configured an d e nabled, the switch requires userna[...]
-
Seite 63
BLADEOS 6.5.2 Applicat ion Guide BMD00 220, October 2010 Chap ter 3: Secu ring Adminis tration 63 The administrator can choose th e number of days allowed before each p assword expires. When a strong password expires, the user is allowed to log in one last time (last time) to change the password . A warning provides advance notice for users to [...]
-
Seite 64
BLADEOS 6.5.2 Applicati on Guide 64 Chapter 3: Securing Adminis tration BMD002 20, October 2010 Listing Current U sers The following co mmand displays define d user accounts and wh ether or not each user is cu rrently logged into the switch. Logging into an End User Account Once an end us er account is co nfigured and enabled , the user can log[...]
-
Seite 65
BMD00 220, October 2010 65 C HAPTER 4 Authentication & Authorization Protocols Secure sw itch managem ent is needed for environ ments that per form signi ficant managem ent functions acr oss the Internet. The following ar e s ome of the functions for secured IPv4 management and device acces s: “RADIUS A uthent ication and Author ization?[...]
-
Seite 66
BLADEOS 6.5.2 Applicati on Guide 66 Chapter 4: Authenti cation & Au thorizatio n Protocols BMD002 20, October 2010 How RADIUS Authentication Wo rks 1. Remote ad ministrator co nnects to the s witch and pro vides user n ame and password. 2. Using Authenticatio n/Authorization protocol, the switch sen ds request to authent icatio n se rver . [...]
-
Seite 67
BLADEOS 6.5.2 Applicat ion Guide BMD00 220, October 2010 Chapter 4: Authent ication & Authorizati on Protocols 67 RADIUS Authentication Features in BLADEOS BLADEOS supports the following RADIUS authentication features: Suppor ts RADIUS cli ent on th e switch, bas ed on the prot ocol def initions in R FC 2138 and RFC 28 66. Allows RA[...]
-
Seite 68
BLADEOS 6.5.2 Applicati on Guide 68 Chapter 4: Authenti cation & Au thorizatio n Protocols BMD002 20, October 2010 Switch User Account s The user acco unts listed in Ta b l e 3 can be defined i n the RADIUS serv er dictionary file. RADIUS Attributes for BLADEOS User Privileges When the user lo gs in, the switch authenticates his/h er level [...]
-
Seite 69
BLADEOS 6.5.2 Applicat ion Guide BMD00 220, October 2010 Chapter 4: Authent ication & Authorizati on Protocols 69 T ACACS+ Authentication BLADEOS s upports au thentication a nd authorizatio n with netwo rks using the Cisco S ystems T ACACS+ protocol. The G812 4 functions as the Network Access Server (NAS) by interacting with the remote clie[...]
-
Seite 70
BLADEOS 6.5.2 Applicati on Guide 70 Chapter 4: Authenti cation & Au thorizatio n Protocols BMD002 20, October 2010 T A CACS+ Authentication Features in BLADEOS Authentication is the action of determini ng the identity of a user , and is generally done when the user first attempts to log in to a device or g ain access to its services. BLADEO[...]
-
Seite 71
BLADEOS 6.5.2 Applicat ion Guide BMD00 220, October 2010 Chapter 4: Authent ication & Authorizati on Protocols 71 Accounti ng Accounting is the action of recording a user's activities on the device for the purposes of billing and/or secu rity . It follows the authen tication and authorization actions. If the authentication and authoriz[...]
-
Seite 72
BLADEOS 6.5.2 Applicati on Guide 72 Chapter 4: Authenti cation & Au thorizatio n Protocols BMD002 20, October 2010 Configuring T AC ACS+ Authentication on the Switch 1. Configure the IPv4 addresses of the Primary and Secondary T ACACS+ servers, and enab le T ACACS authentication. Specify the interface port (optional). 2. Configure the T ACA[...]
-
Seite 73
BLADEOS 6.5.2 Applicat ion Guide BMD00 220, October 2010 Chapter 4: Authent ication & Authorizati on Protocols 73 LDAP Authentication and Authorization BLADEOS supports the LDAP (Lightweight Directory Access Protoco l) method to authenticate and authorize remote ad ministrators to man age the switch. LDAP is based on a client/serv er model.[...]
-
Seite 74
BLADEOS 6.5.2 Applicati on Guide 74 Chapter 4: Authenti cation & Au thorizatio n Protocols BMD002 20, October 2010 Configuri ng LDAP Authenticat ion on the Swi tch 1. T urn LDAP authentication o n, then configure the IPv4 addresses of the Primary and Secondary LDAP servers. Specify the interface port (optional). 2. Config ure the domain n a[...]
-
Seite 75
BMD00 220, October 2010 75 C HAPTER 5 Access Control Lis t s Access Control Lis ts (ACLs) are filters that permit or deny tra ffic for security purposes. They can also be used with Qo S to classify and segm ent traffic in order to provide d ifferent levels of service to different traffic types. Each filter defines the conditions that must match for[...]
-
Seite 76
BLADEOS 6.5.2 Applicati on Guide 76 Chapter 5: Access Control Li sts BMD002 20, October 2010 Summary o f Packet C lassifiers ACLs allow you to clas sify packets according to a variety of content in the packet header (such as the so urce address, des tination address, sour ce port nu mber , destination por t number , and others). Once classified[...]
-
Seite 77
BLADEOS 6.5.2 Applicat ion Guide BMD00 220, October 2010 Chapter 5: Acces s Control L ists 77 TCP/UDP header options (f or all ACLs) TCP/UD P application source por t as sho wn in Ta b l e 8 TCP/UDP applicat ion dest ination po rt and mask as show n i n Ta b l e 8 TCP/UDP flag value as s hown in Ta b l e 9 Packet format (for[...]
-
Seite 78
BLADEOS 6.5.2 Applicati on Guide 78 Chapter 5: Access Control Li sts BMD002 20, October 2010 Summary of ACL Actions Once classified u sing ACLs, the identified packet f lows can be pro cessed diff erently . For each ACL, an action can be assigned. Th e action determines how the switch tr eats packets that match the classifiers assigned to the A[...]
-
Seite 79
BLADEOS 6.5.2 Applicat ion Guide BMD00 220, October 2010 Chapter 5: Acces s Control L ists 79 ACL Metering and Re-Marking Y ou can def ine a profile f or the aggregate t raffic f lowing th rough the G812 4 by configu ring a QoS met e r (if de sir e d) and assign ing ACLs to port s. Note – When you add ACLs to a por t, make sure th ey are orde[...]
-
Seite 80
BLADEOS 6.5.2 Applicati on Guide 80 Chapter 5: Access Control Li sts BMD002 20, October 2010 ACL Port Mirroring For regular ACLs an d VMaps, packets that match a n ACL on a specific po rt can be mirrored to another switch p ort for ne twork diagn osis and mo nitoring . The source port for the mirr ored packets cannot b e a portchannel, b ut may[...]
-
Seite 81
BLADEOS 6.5.2 Applicat ion Guide BMD00 220, October 2010 Chapter 5: Acces s Control L ists 81 ACL Con figuration Examples ACL Example 1 Use this configu ration to b lock traf fic to a specific hos t. All traf fic that ingr esses on po rt 1 is denied if it is destined for the host at IP addr ess 100.10.1. 1 1. Configure an Access Control List. 2[...]
-
Seite 82
BLADEOS 6.5.2 Applicati on Guide 82 Chapter 5: Access Control Li sts BMD002 20, October 2010 ACL Example 3 Use this configuration to block traff ic from a specific IPv6 source addr ess. All traf fic that ingresses in por t 2 with s ource IP from cl ass 200 1:0:0:5: 0:0:0:2/1 28 is deni ed. 1. Configure an Access Control List. 2. Add ACL 2 to po[...]
-
Seite 83
BLADEOS 6.5.2 Applicat ion Guide BMD00 220, October 2010 Chapter 5: Acces s Control L ists 83 VMAPs ar e configur ed using the f ollowing ISC LI config uration comm and path: Once a VMAP filter is created, it can be assig ned or removed using the following configuration commands: For a regular VLAN, u se config-vlan mod e : For a VM gr [...]
-
Seite 84
BLADEOS 6.5.2 Applicati on Guide 84 Chapter 5: Access Control Li sts BMD002 20, October 2010 Using S torm Control Filters The G8124 provides filters that can limit the number of the following packet types transmitted by switch ports : Broadcast packets Multicast packets Unknown unicast packets (dest ination lookup fai lure) Broadcas[...]
-
Seite 85
BMD00 220, October 2010 85 Part 3: Switch Basics This sect ion discu sses basic switching functions : VLANs Port T runking Spanning T ree Protocols (Spanning Tree Gr oups, Rapid Spanning T ree Protocol, and Multiple Spanning T ree Protocol) Quality of Service[...]
-
Seite 86
BLADEOS 6.5.2 Applicati on Guide 86 Part 3: Swi tch Basics BMD002 20, October 2010[...]
-
Seite 87
BMD00 220, October 2010 87 C HAPTER 6 VLANs This chapt er describ es network design and to pology cons iderations f or using V irtual L ocal Area Networks (VLANs). VLANs commonly are used to split up groups of network us ers into manageable broadcast domains, to create logical segmentation of workgroups, an d to enforce security policies amon g log[...]
-
Seite 88
BLADEOS 6.5.2 Applicati on Guide 88 Chapter 6: VLANs BMD002 20, October 2010 VLANs Ov erview Setting up virtual LANs (VLANs) is a way to segment networks to increase network flexibility without changing the physical network topo logy . W ith network segmentation, each switch port connects to a segment that is a single broad cast domain. When a [...]
-
Seite 89
BLADEOS 6.5.2 Applicat ion Guide BMD00 220, October 2010 Chapter 6: VLANs 89 PV I D N u m b e r s Each port in the swit ch has a conf igurable default VLA N number , known as i ts PVID . By defau lt, the PVID for all non-management ports is set to 1, which correlates to the default VLAN ID. The PVID for each por t can be configur ed to any VLAN[...]
-
Seite 90
BLADEOS 6.5.2 Applicati on Guide 90 Chapter 6: VLANs BMD002 20, October 2010 VLAN T agging BLADEOS soft ware supp orts 802.1Q VLAN ta gging, provid ing standar ds-based VLAN suppor t for Ethernet s ystems. T agging places the VLAN identif ier in the frame header o f a packet, allowing each port to belong to multiple VLANs. When you add a port t[...]
-
Seite 91
BLADEOS 6.5.2 Applicat ion Guide BMD00 220, October 2010 Chapter 6: VLANs 91 Figure 1 Default VLA N settings Note – The port numbers specifi ed in th ese illustrations may not directly correspond to the physical port co nfiguration of your s witch mode l. When a VLAN is con figured, ports are added as mem bers of the VLAN, and the ports are d[...]
-
Seite 92
BLADEOS 6.5.2 Applicati on Guide 92 Chapter 6: VLANs BMD002 20, October 2010 Figure 2 Port-bas ed VLAN assignm ent As s hown in Figure 3 , the untagg ed packet is marked (tagged) as it leaves the s witch through po rt 5, which is con figured as a tagged member of VLA N 2. The un tagged packet r emains unch anged as it leaves the switch th rough[...]
-
Seite 93
BLADEOS 6.5.2 Applicat ion Guide BMD00 220, October 2010 Chapter 6: VLANs 93 Figure 4 802.1Q tag assignme nt As sh own in Figure 5 , the tagged packet remains unchan ged as it leaves the switch thr ough port 5, which is configured as a tagged member o f VLAN 2. However , the tagged packet is stripped (untagged) as it leaves the switch throu gh [...]
-
Seite 94
BLADEOS 6.5.2 Applicati on Guide 94 Chapter 6: VLANs BMD002 20, October 2010 VLAN T opol ogies an d Design Conside rations By default, the G8124 software is configured so that tagging is d isab led on all ports. By default, the G8124 software is configu red so that all data ports are mem bers of VLAN 1. By defaul t, the BLADEOS soft[...]
-
Seite 95
BLADEOS 6.5.2 Applicat ion Guide BMD00 220, October 2010 Chapter 6: VLANs 95 Multiple VL ANs with T agging A dapters Figur e 6 illustrates a network topology described in Note – and th e configuration examp le on page page 97 . Figure 6 Multipl e VLANs with VLAN -T agged Gigabit Adapters Server 1 VLAN 1 Server 2 VLAN 1 Server 3 VLAN 2 Server [...]
-
Seite 96
BLADEOS 6.5.2 Applicati on Guide 96 Chapter 6: VLANs BMD002 20, October 2010 The features of this VLAN are described below: Note – VLAN tagg i ng i s required only o n ports that are con nected to other switches or on ports that connect to tag-cap able end-stations, such as s ervers with VLAN-tagging adapters. T abl e 6-1 M ultip le VLANs Exa[...]
-
Seite 97
BLADEOS 6.5.2 Applicat ion Guide BMD00 220, October 2010 Chapter 6: VLANs 97 VLAN Config uration Example Use the following procedure to configu re the example network sh own in Fig ure 6 . 1. Enable VLAN tagging on server ports that support multiple VLANs. 2. Enable tagging on uplink ports that su ppo rt multiple VLANs. 3. Configure the VLANs a[...]
-
Seite 98
BLADEOS 6.5.2 Applicati on Guide 98 Chapter 6: VLANs BMD002 20, October 2010 Privat e VLANs Private VLAN s provide Layer 2 isolat ion between the port s within the same broadcas t domain. Private VLANs can control traf fic within a VLAN domain, and provide port-b ased security for host serv ers. Use Private VLA Ns to partition a VLAN d omain in[...]
-
Seite 99
BLADEOS 6.5.2 Applicat ion Guide BMD00 220, October 2010 Chapter 6: VLANs 99 Configuration Gui delines The following gu idelines apply when con figuring Private VLANs: The def ault VLAN 1 canno t be a Privat e VLAN. The management VLAN 4095 can not be a P rivate VLAN. The management p ort cannot be a member of a Private VLAN. IGMP S[...]
-
Seite 100
BLADEOS 6.5.2 Applicati on Guide 100 C hapter 6: VLANs BMD002 20, October 2010[...]
-
Seite 101
BMD00 220, October 2010 101 C HAPTER 7 Port s and T runking T runk gro ups can provid e super-b andwidth, mu lti-link connecti ons between th e RackSwitch G8 124 (G8124 ) and other t runk-capable d evices. A trun k group i s a group of ports that a ct together , combining their bandwidth to create a single, larger virtual link. Thi s c hapt er prov[...]
-
Seite 102
BLADEOS 6.5.2 Applicati on Guide 102 C hapter 7: Ports an d Trunkin g BMD002 20, October 2010 T runkin g Overview When usi ng port t runk gro ups betw een two swi tches, as shown in Figure 7 , you can create a virtual link between the switches, operating with combined throug hpu t levels th at depends on how ma ny physical por ts are included. [...]
-
Seite 103
BLADEOS 6.5.2 Applicat ion Guide BMD00 220, October 2010 Chapter 7: Port s and T runking 10 3 Before Y ou Co nfigure St atic T runks When you create and enable a static trunk, the tru nk members (switch ports) take o n certain settings necessary for correct oper ation of the trunking f eature. Befor e you configu re your trunk , you must consid[...]
-
Seite 104
BLADEOS 6.5.2 Applicati on Guide 104 C hapter 7: Ports an d Trunkin g BMD002 20, October 2010 T runk Gr oup Configuratio n Rules The trunking feature operates accordin g to specific configuration ru les. When creating trunks, consider the following rules that determine h ow a trunk group reacts in any networ k topology: All trun ks must or [...]
-
Seite 105
BLADEOS 6.5.2 Applicat ion Guide BMD00 220, October 2010 Chapter 7: Port s and T runking 10 5 1. Follow these steps on the G8124: a. Defin e a trunk grou p. b. V erify the conf iguration. Exam in e th e re su ltin g in fo r ma tio n. I f an y setti ngs are in co r r ect , make app ro p r iat e ch an g es. 2. Repeat the process on the other sw i[...]
-
Seite 106
BLADEOS 6.5.2 Applicati on Guide 106 C hapter 7: Ports an d Trunkin g BMD002 20, October 2010 Configurable T runk Has h Algorithm T raff ic in a trunk group is statistically distributed among member ports using a hash process where various address and attribute bits from each transmitted frame are recombined to specify the partic ular trunk por[...]
-
Seite 107
BLADEOS 6.5.2 Applicat ion Guide BMD00 220, October 2010 Chapter 7: Port s and T runking 10 7 Link Agg regatio n Control Protocol Link Aggregation Control Protocol ( LACP) is an IEEE 8 02.3ad standar d for grouping several physi cal ports into one logical p ort (known as a dynamic tru nk group or Li nk Aggregation group) with any device that su[...]
-
Seite 108
BLADEOS 6.5.2 Applicati on Guide 108 C hapter 7: Ports an d Trunkin g BMD002 20, October 2010 Each port on the switch can have o ne of the following LACP modes . off (default) The user can configure t his port in t o a regular s tatic trunk gro up. active The port is capable o f forming an L ACP trunk. Thi s port sends L ACPDU packets t[...]
-
Seite 109
BMD00 220, October 2010 109 C HAPTER 8 S p anning T ree Protocols When multiple paths ex ist between two points on a network, Spanning T ree Protocol (STP), or one of its enhanced v ariants, can prevent broa dcast loops and ensure that th e RackSwitch G8124 (G8124 ) uses only the m ost eff icient network path . This chapter covers the following top[...]
-
Seite 110
BLADEOS 6.5.2 Applicati on Guide 110 C hapter 8: Spanni ng Tree Proto cols BMD002 20, October 2010 Rapid S panning T ree Protocol ( RSTP) IEEE 80 2.1D (2004) RSTP mode i s an enhanced version of STP . It pr ovides more r apid conver gence of the Span ning T ree network path s tates on STG 1. RSTP is the default Span ning T ree mode on the G[...]
-
Seite 111
BLADEOS 6.5.2 Applicat ion Guide BMD00 220, October 2010 Chapte r 8: S pann ing T ree Protocols 111 STP/P VST+ Mode Using ST P , network devices detect an d eliminate logi cal loops in a bridged or switched net work. When multiple paths exis t, Sp anning T ree configures th e network so that a switch uses only the most ef ficient path. If that [...]
-
Seite 112
BLADEOS 6.5.2 Applicati on Guide 112 C hapter 8: Spanni ng Tree Proto cols BMD002 20, October 2010 Bridge Protoc ol Dat a Unit s Bridge Pr oto c ol Dat a Unit s Overview T o create a S pannin g Tree, the switch generates a conf iguration Bridge Protocol Data Unit (BPDU), which it then forwards out of its ports. All switches in the Layer 2 netwo[...]
-
Seite 113
BLADEOS 6.5.2 Applicat ion Guide BMD00 220, October 2010 Chapte r 8: S pan ning T ree Protocols 11 3 Port Prior it y The port priority h elps determi ne which b ridge port becomes the roo t port or the designate d port. The case for the root port is when two switches are connected us ing a minimum of two link s with the same path-cost. The case[...]
-
Seite 114
BLADEOS 6.5.2 Applicati on Guide 114 C hapter 8: Spanni ng Tree Proto cols BMD002 20, October 2010 Fast Uplink Conf iguration Guid eli nes When you enable Fast Uplink Conver gence, BLADEOS automatically make s the following configuration chang es: The bridge priority is set to 65535 so that it does no t become the root switch. The cost [...]
-
Seite 115
BLADEOS 6.5.2 Applicat ion Guide BMD00 220, October 2010 Chapte r 8: S pan ning T ree Protocols 11 5 Simple STP Confi guration Figur e 9 depicts a simple topology using a swi tch-to-s witch link b etween two G81 24 1 and 2. Figure 9 S pannin g T r ee Block ing a Sw itch-to-S witch Lin k T o prevent a n etwork loop among the swi tches, STP must [...]
-
Seite 116
BLADEOS 6.5.2 Applicati on Guide 116 C hapter 8: Spanni ng Tree Proto cols BMD002 20, October 2010 Figure 1 0 S panning Tree Restori ng the Sw itch-to -Switch Link In this examp le, port 10 on each G8 124 is used for the s witch-to-switch link. T o ensure that the G8124 switch-to -switch li nk is bl ocked during normal oper ation, th e port pat[...]
-
Seite 117
BLADEOS 6.5.2 Applicat ion Guide BMD00 220, October 2010 Chapte r 8: S pan ning T ree Protocols 11 7 Per-VLAN Sp anning T ree G roup s STP/PVST+ mode supports a m aximum of 127 STGs, with each STG acting as an independen t, simultan eous inst ance of S TP . Multiple STGs provide multiple d a ta paths wh ich can be used for load-balancing and re[...]
-
Seite 118
BLADEOS 6.5.2 Applicati on Guide 118 C hapter 8: Spanni ng Tree Proto cols BMD002 20, October 2010 STP/PV ST+ Defaul ts an d Guide lines In STP/PVST+ configuration, u p to 128 STGs are available on the switch. STG 1 is the default STG . Alt hough port s can be added to or deleted from defaul t STG 1, the S TG itself cannot be deleted from the s[...]
-
Seite 119
BLADEOS 6.5.2 Applicat ion Guide BMD00 220, October 2010 Chapte r 8: S pan ning T ree Protocols 11 9 Crea ting a VLAN When you create a VLAN, th at VLAN automatically belongs to STG 1, the default STG . T o place the VLAN in a dif ferent STG , follow these steps: Create the VLAN. Add the VLAN to an existing STG . The VLAN is automat[...]
-
Seite 120
BLADEOS 6.5.2 Applicati on Guide 120 C hapter 8: Spanni ng Tree Proto cols BMD002 20, October 2010 Addi ng and Re mo ving P orts from S TGs When you add a port to a VLAN that belong s to an STG , the port is also added to that STG . However , if the port you are adding is an untagged port and is already a member of an other STG , that port [...]
-
Seite 121
BLADEOS 6.5.2 Applicat ion Guide BMD00 220, October 2010 Chapt er 8: S panning T ree Protoc ols 12 1 Switch-C entric Config ura tion STP/PVST+ is switch-centric: STGs are enforced only on the switch where th ey are configured . The STG ID is not tra nsmitted in the Spanning T ree BPDU. Each Spanning T ree decision is bas ed entirely on the conf[...]
-
Seite 122
BLADEOS 6.5.2 Applicati on Guide 122 C hapter 8: Spanni ng Tree Proto cols BMD002 20, October 2010 Configuring Multi ple STGs This configuration s hows how to configure the three instances of STGs on the switches A, B, C, and D illustrated in F igur e 12 on page 1 21 . By default Spanning T rees 2 to 127 are empty , and STG 1 contains all confi[...]
-
Seite 123
BLADEOS 6.5.2 Applicat ion Guide BMD00 220, October 2010 Chapt er 8: S panning T ree Protoc ols 12 3 3. Configure the following on application s witch C: Add po rt 8 to VLAN 3 and define S TG 2 for V LAN 3. VLAN 3 is automatically removed fro m STG 1. By default VLAN 1 remains in STG 1. 4. Switch D does not require any special configuration for[...]
-
Seite 124
BLADEOS 6.5.2 Applicati on Guide 124 C hapter 8: Spanni ng Tree Proto cols BMD002 20, October 2010 Rapid Sp anning T ree Proto col Note – Rapid Spannin g T ree Pr otocol (RSTP ) is enable d by defaul t on the G81 24. RSTP prov ides rapid conver gence of the Sp anning T ree and pro vides the fast re-configur ation critical for networks carryin[...]
-
Seite 125
BLADEOS 6.5.2 Applicat ion Guide BMD00 220, October 2010 Chapt er 8: S panning T ree Protoc ols 12 5 RSTP Configuration Guideli nes This sec tion provides important in formation about configurin g RSTP . When RSTP is turned on, t he following occurs : STP par ameters appl y only t o STG 1. Only STG 1 is available. All other STGs are tur[...]
-
Seite 126
BLADEOS 6.5.2 Applicati on Guide 126 C hapter 8: Spanni ng Tree Proto cols BMD002 20, October 2010 Per-VLAN Rapi d S p an ning T re e Group s PVRST is b ased on IEEE 802.1w R apid Spanning T ree Protocol (RS TP). Like RSTP , PVRST mode provides rapid Spann ing T ree conver gence. However , similar to the way standa rd STP is enhanced by PVST+ ([...]
-
Seite 127
BLADEOS 6.5.2 Applicat ion Guide BMD00 220, October 2010 Chapt er 8: S panning T ree Protoc ols 12 7 Multiple S p ann i ng T ree Protocol Multiple Sp anning T ree Protoco l (MSTP) ext ends Rapid Spanning T r ee Protoc ol (RSTP), allow ing multiple Spanning T ree Groups (STGs) which may each include multiple VLANs. MSTP was originally defined in[...]
-
Seite 128
BLADEOS 6.5.2 Applicati on Guide 128 C hapter 8: Spanni ng Tree Proto cols BMD002 20, October 2010 MSTP Configuration Guidelines This section provides important in form atio n about co nfig uring Multiple Spanning T ree Groups: When MSTP is turned on , the switch automatically moves all VLANs to the CIST . When MSTP is turned off, the switc[...]
-
Seite 129
BLADEOS 6.5.2 Applicat ion Guide BMD00 220, October 2010 Chapt er 8: S panning T ree Protoc ols 12 9 MSTP Configuration Example 2 This co nfiguration shows how to confi gure MSTP Gr oups on t he switch, as show n in Figure 12 . Figure 1 3 Implementi ng Mul tip le S panni ng T ree Gro ups This exampl e shows how mu ltiple Spanni ng T rees can pr[...]
-
Seite 130
BLADEOS 6.5.2 Applicati on Guide 130 C hapter 8: Spanni ng Tree Proto cols BMD002 20, October 2010 1. Config ure port member ship and define the STG s for VLAN 1. Enable tag ging on uplink port s that share VLANs. Por t 19 and port 20 co nnect to the Enterprise R outing switches. 2. Add se rver ports 1 and 2 to VL AN 1. Add up link ports 19 and[...]
-
Seite 131
BLADEOS 6.5.2 Applicat ion Guide BMD00 220, October 2010 Chapt er 8: S panning T ree Protoc ols 13 1 Port T ype and Link T y pe For us e in RSTP , MSTP , and PVR ST modes, BLADEOS Sp anning T ree confi guration incl udes parameters fo r edge port and link ty pe. Note – A lthough edge po rt and link t ype parameters are configured with gl obal[...]
-
Seite 132
BLADEOS 6.5.2 Applicati on Guide 132 C hapter 8: Spanni ng Tree Proto cols BMD002 20, October 2010[...]
-
Seite 133
BMD00 220, October 2010 133 C HAPTER 9 Quality of Service Quality of Service features allo w you to allocate network res ources to mission-critical app lications at the expense of applications that are less s ensitive to such factors as time delays or network congestion. Y ou can configure your network to prioritize specific types of traf fic, ensu[...]
-
Seite 134
BLADEOS 6.5.2 Applicati on Guide 134 C hapter 9: Qual ity of Serv ice BMD002 20, Octo ber 2010 Figur e 14 shows the basic QoS model u sed by the switch. Figure 1 4 QoS M odel The basic QoS model works as follows: Classify traf fic: Read DSCP value. Read 802.1p priority value. Match ACL filter parameters. Perform actio ns: ?[...]
-
Seite 135
BLADEOS 6.5.2 Applicat ion Guide BMD00 220, October 2010 Chapt er 9: Qual ity of Serv ice 13 5 Using ACL Filters Access Control List s (ACLs) are filters that allow you to classify and segmen t traffic, s o you can provide dif f erent levels of service to dif ferent traf fic types. Each filter defines the conditions that must match for in clusi[...]
-
Seite 136
BLADEOS 6.5.2 Applicati on Guide 136 C hapter 9: Qual ity of Serv ice BMD002 20, Octo ber 2010 ACL Metering and Re-Marking Y ou can def ine a profile f or the aggregate t raffic f lowing th rough the G812 4 by configu ring a QoS meter (if desired ) and assigning ACLs to ports. When y ou add ACLs to a port, m ake sure they ar e ordered cor rectl[...]
-
Seite 137
BLADEOS 6.5.2 Applicat ion Guide BMD00 220, October 2010 Chapt er 9: Qual ity of Serv ice 13 7 Using DSCP V alues to Provide QoS The switch uses th e Differentiated Services (Dif fServ) architecture to provide QoS function s. Dif fServ is described i n IETF RFCs 2474 and 2475. The six most significant bits in the T OS byte of the IP header are [...]
-
Seite 138
BLADEOS 6.5.2 Applicati on Guide 138 C hapter 9: Qual ity of Serv ice BMD002 20, Octo ber 2010 Per Hop Behavior The DSCP value determines the Per Hop Behavior (PHB) of each p acket. The PHB is the forwarding treatment given to packets at each hop. QoS policies are built by applying a set of rules to packets , based on the DSCP value, as they h [...]
-
Seite 139
BLADEOS 6.5.2 Applicat ion Guide BMD00 220, October 2010 Chapt er 9: Qual ity of Serv ice 13 9 QoS Leve ls Ta b l e 1 3 shows the default service levels p rovided by the switch, listed from highest to lowest importance: Ta b l e 1 3 D efault QoS S ervice Le vels Service Le vel Default PHB 802.1p Prio rity Critic al CS7 7 Netw ork Cont rol CS6 6[...]
-
Seite 140
BLADEOS 6.5.2 Applicati on Guide 140 C hapter 9: Qual ity of Serv ice BMD002 20, Octo ber 2010 DSCP Re-Marking and Mapping The switch can u se the DSCP value of ingress packets to re-mar k the DSCP to a n ew value, and to set an 802.1p priority value. Use the following command to vi ew the default settin gs. Use the f ollowing command to turn o[...]
-
Seite 141
BLADEOS 6.5.2 Applicat ion Guide BMD00 220, October 2010 Chapt er 9: Qual ity of Serv ice 14 1 DSCP Re-Marking Con figuration Example 1. T urn DSCP re-marki ng on global l y , and define t he DSC P-D SC P- 802 .1p mapping. Y ou can use the defa ult m appin g. 2. Enable DSCP re-markin g on a port. RS G8124(config)# qos dscp re-marking RS G8124(c[...]
-
Seite 142
BLADEOS 6.5.2 Applicati on Guide 142 C hapter 9: Qual ity of Serv ice BMD002 20, Octo ber 2010 Using 802.1p Prio rity to Pr ovide QoS The G8124 provides Quality of Service functions based on the priority bits in a packet’ s VLAN header . (The priorit y bits are defin ed by the 8 02.1p stand ard within the IEEE 802.1 Q VLAN header .) The 802.1[...]
-
Seite 143
BLADEOS 6.5.2 Applicat ion Guide BMD00 220, October 2010 Chapt er 9: Qual ity of Serv ice 14 3 Que uing and Sch eduling The G8124 can be configured to h ave either 2 or 8 o utput Class of Service (COS) queues per port, into which each pack et is placed. Each packet’ s 802.1p priority determin es its COS queue, except when an ACL action sets t[...]
-
Seite 144
BLADEOS 6.5.2 Applicati on Guide 144 C hapter 9: Qual ity of Serv ice BMD002 20, Octo ber 2010[...]
-
Seite 145
BMD00 220, October 2010 145 Part 4: Advanced Switching Features[...]
-
Seite 146
BLADEOS 6.5.2 Applicati on Guide 146 Pa rt 4: Advanc ed Switchi ng Features BMD002 20, October 2010[...]
-
Seite 147
BMD00 220, October 2010 147 C HAPTER 10 Deployment Profiles The BLADEOS software for the Rack Switch G8124 can be configu red to operate in dif ferent modes for di fferent depl oyment scenarios . Each deployment pro file sets dif ferent capacit y level s for basic switch resou rces, such as the number o f IP routes and ARP entries, in order to opti[...]
-
Seite 148
BLADEOS 6.5.2 Applicati on Guide 148 C hapter 10: Deploym ent Profiles BMD002 20, October 2010 The properties of each mode are com pared in the following table. Note – Throughout this guide, where feature capacities are listed, values reflect those of the Default profile only , unless otherwi se noted. Ta b l e 1 4 D eployment Mo de Compariso[...]
-
Seite 149
BLADEOS 6.5.2 Applicat ion Guide BMD00 220, October 2010 Chapter 10: Deployment Profiles 149 Selecting Profi les T o change the deploy ment profile, the new prof ile must first be s elected, and the switch must th en be rebo oted to use the n ew profile. Note – Before changing profiles, it is r ecommended that yo u save the act ive switch con[...]
-
Seite 150
BLADEOS 6.5.2 Applicati on Guide 150 C hapter 10: Deploym ent Profiles BMD002 20, October 2010[...]
-
Seite 151
BMD00 220, October 2010 151 C HAPTER 11 V irtualization V irtualization allows resources to be allocated in a fluid manner based on the logical needs of the data center , rather than on the strict, physical n ature of components. The following virtualization features are included in BLADEOS 6.5 on the RackSwi tch G8124 (G 8124): V irtu al Local[...]
-
Seite 152
BLADEOS 6.5.2 Applicati on Guide 152 C hapter 11: Virtual ization BMD002 20, October 2010[...]
-
Seite 153
BMD00 220, October 2010 153 C HAPTER 12 V i rtual NICs A Network Interface C ontroller (NIC) is a compon ent within a server that allows the ser ver to be connected to a n etwork. The NIC provid es the physical point of connection , as well as internal software for encoding and d ecoding netwo rk packets. V irtualizing the NIC helps to resolve issu[...]
-
Seite 154
BLADEOS 6.5.2 Applicati on Guide 154 C hapter 12: Virtual NICs BMD002 20, October 2010 Each vNIC can be independently allocated a s ymmetric percentage of the 10Gbps bandwidth on the link (from NIC to switch, and from switch to NIC). The G812 4 can be used as t he single point o f vNIC configu ration. The follo wing restrict ions apply [...]
-
Seite 155
BLADEOS 6.5.2 Applicat ion Guide BMD00 220, October 2010 Chapter 12: Virtu al NICs 155 vNIC IDs vNIC IDs on the Switch BLADEOS 6.5 suppor ts up to four vNICs attached to each server po rt. Each vNIC is pro vided its own ind ependent virt ual pipe o n the port. On the switch, each v NIC is identified by its port and vNIC number as follows: <p[...]
-
Seite 156
BLADEOS 6.5.2 Applicati on Guide 156 C hapter 12: Virtual NICs BMD002 20, October 2010 vNIC Bandwid th Metering BLADEOS 6 .5 support s bandwidth metering fo r vNIC traf fic. By de fault, each of the four vN ICs on any giv en port is allowed an equa l share (25%) of NIC capacity when enabled. Howev er , you may configure the percentage of availa[...]
-
Seite 157
BLADEOS 6.5.2 Applicat ion Guide BMD00 220, October 2010 Chapter 12: Virtu al NICs 157 vNIC Grou p s vNICs can be gr ouped to gether , along with u pli nk por ts an d trunks, as w el l as ot her po rt s th at we re defined as server po rts but not connected to vN ICs. Each vNIC gro up is essen tially a se parate virtual network within the switc[...]
-
Seite 158
BLADEOS 6.5.2 Applicati on Guide 158 C hapter 12: Virtual NICs BMD002 20, October 2010 Other vNIC group rules are as follows: vNIC grou ps may have o ne or more vNIC mem bers. However , any given vNIC can b e a memb er of only on e vN IC gro up. All vNIC s on a gi ven port mus t belong to dif ferent vNIC gro ups. All memb ers of a v[...]
-
Seite 159
BLADEOS 6.5.2 Applicat ion Guide BMD00 220, October 2010 Chapter 12: Virtu al NICs 159 vNIC T eaming Fa ilover For NIC failover in a non-virtualized en vironment, when a service group’ s uplink ports fail or are disconnected, the switch d i sables the af fected group’ s server p orts, cau sing the s erver to failove r to the backup NIC and [...]
-
Seite 160
BLADEOS 6.5.2 Applicati on Guide 160 C hapter 12: Virtual NICs BMD002 20, October 2010 Figure 2 0 vNIC Fa ilover S olution By default, vNI C T eaming Failover is disabled o n each vNIC g roup, but can b e enabled or disabled independently f or each vNIC grou p using the follow ing commands: Hypervisor NIC VNIC VNIC VNIC VNIC VNIC VNIC VNIC VNIC[...]
-
Seite 161
BLADEOS 6.5.2 Applicat ion Guide BMD00 220, October 2010 Chapter 12: Virtu al NICs 161 vNIC Con figuration Exampl e Consider the following ex ample configuration: Figure 2 1 Multip le vNI C Groups Figur e 21 has the follo win g vNIC network characteristics: vNIC gro up 1 has an o ut er tag f or VLAN 10 00. Th e g rou p i s co mpr ise d of v[...]
-
Seite 162
BLADEOS 6.5.2 Applicati on Guide 162 C hapter 12: Virtual NICs BMD002 20, October 2010 1. Define the server ports. 2. Config ure the exter nal trunk to be used with vN IC group 2. 3. Enable the vNIC feature on the switch. 4. Configure the virtual pipes fo r the vNICs attached to each server port: As a configuration shortcut, vNICs do not have t[...]
-
Seite 163
BLADEOS 6.5.2 Applicat ion Guide BMD00 220, October 2010 Chapter 12: Virtu al NICs 163 5. Add po rts, trun ks, and virt ual pipes t o their vNIC groups. Once VLAN 1000 and 1774 are configu red for vNIC groups, they will not b e available f or configu ration in the r egular VLAN menus ( /cfg/l2/vlan ). Note – vNICs are not sup ported s imultan[...]
-
Seite 164
BLADEOS 6.5.2 Applicati on Guide 164 C hapter 12: Virtual NICs BMD002 20, October 2010 vNICs for iSCSI on Em ulex Eraptor 2 The BLADEOS vNIC feature wor ks with standard network app lications like iSCSI as prev iously described. Howev er , the Emulex Eraptor 2 NIC exp ect s iSCSI traf fic to occur only on a single vNI C pipe. When using the Emu[...]
-
Seite 165
BMD00 220, October 2010 165 C HAPTER 13 VMready V irtualization is used to allocate server resou rces based on logical needs , rather than on str ict physi cal structure. W ith appr opriate hardwa re and so ftware support , servers can be virtua lized to host multiple instan ces of operating systems , known as v irtual machines (VMs). Each VM has i[...]
-
Seite 166
BLADEOS 6.5.2 Applicati on Guide 166 C hapter 13: VMready BMD002 20, October 2010 VE Cap acity When VMready is enabled, the s witch will automatically discover VEs that reside in hyperviso rs directly connected on the switch ports. BLAD EOS 6.5 su ppo rts up to 2 048 VEs. Once this lim it is reached, the switch will rej ect add itio nal VEs. No[...]
-
Seite 167
BLADEOS 6.5.2 Applicat ion Guide BMD00 220, October 2010 Chapter 13: VMre ady 167 Local VM Gro up s The configuration for local VM groups is maintained on the switch (locally ) and is not directly synchronized with h ypervisors. Local VM groups may includ e only local elements: local switch ports and trun ks, an d only th ose V Es conn ected to[...]
-
Seite 168
BLADEOS 6.5.2 Applicati on Guide 168 C hapter 13: VMready BMD002 20, October 2010 The follo wing rules ap ply to t he local VM grou p configurat ion commands: key : Add LACP trunks to the group. port : Add s witch server p orts or sw itch upli nk ports to the grou p. Note that V M groups and vNICs (see “V irtual NICs” on pa ge 153 )[...]
-
Seite 169
BLADEOS 6.5.2 Applicat ion Guide BMD00 220, October 2010 Chapter 13: VMre ady 169 Distribute d VM Group s Distrib uted VM groups allow configu ration pro files to be syn chronized be tween the G8124 and associated hyperv isors and VEs. This allows VE co nfiguration to be centralized, and provides fo r more re liable VE migration across hy pervi[...]
-
Seite 170
BLADEOS 6.5.2 Applicati on Guide 170 C hapter 13: VMready BMD002 20, October 2010 Note – The bandwidth shaping param eters in the VM prof ile are used by the hyp ervisor virtual switch so ftware. T o set bandwidt h policies for i ndividual VEs, see “VM Policy Bandwidth Control” on p a ge 178 . Once conf igured, the VM profile may be assig[...]
-
Seite 171
BLADEOS 6.5.2 Applicat ion Guide BMD00 220, October 2010 Chapter 13: VMre ady 171 Synchronizi ng the Configuratio n When th e configurat ion for a dist ributed VM g roup is mod ified, th e switch upd ates the ass igned virtualization man agement server . The management server then distributes changes to the appropriate hy pervisors. For VM memb[...]
-
Seite 172
BLADEOS 6.5.2 Applicati on Guide 172 C hapter 13: VMready BMD002 20, October 2010 V irtualization Management Se rvers The G8124 can connect with a virtualization managemen t server to collect configu ration informatio n about associated VEs. Th e switch can also automatically pus h VM group configuration profile s to the virtualizati on managem[...]
-
Seite 173
BLADEOS 6.5.2 Applicat ion Guide BMD00 220, October 2010 Chapter 13: VMre ady 173 vCenter Scans Once the vCenter is assigned, the switch will periodically scan the vCenter to collect b asic information abou t all the VEs in the datacenter , and more detailed infor mation abo ut the local VEs that th e switch has discovere d attached to it s own[...]
-
Seite 174
BLADEOS 6.5.2 Applicati on Guide 174 C hapter 13: VMready BMD002 20, October 2010 Expor ting Profil es VM profi les for discovere d VEs in di s tri but ed VM grou ps are au to mati cally sy nch ron ized w ith the virtual mana gement server and the ap propriate hypervisors. Howev er , VM profiles can also be manually ex ported to specific host s[...]
-
Seite 175
BLADEOS 6.5.2 Applicat ion Guide BMD00 220, October 2010 Chapter 13: VMre ady 175 Pre-Provisioning VEs VEs may be man ually added to VM groups in advance o f being detected on the switch ports. By pre-provisioning the MAC address of VEs th at are not yet active, the switch will b e able to later recognize the VE when it becomes active on a swit[...]
-
Seite 176
BLADEOS 6.5.2 Applicati on Guide 176 C hapter 13: VMready BMD002 20, October 2010 VLAN Map s A VLAN map (VMAP) is a type of Access Control List (ACL) that is applied to a VLAN or VM group rather than to a switch port as with regular ACLs (see “Access Control Lists” on pag e 75 ). I n a virtualized environment, VMAPs allow you to create traf[...]
-
Seite 177
BLADEOS 6.5.2 Applicat ion Guide BMD00 220, October 2010 Chapter 13: VMre ady 177 Once a VMAP filter is created, it can be assig ned or removed using the following comman ds: For regu lar VLANs, use config-v lan mode: For a VM gr oup, use the g lobal config uration mod e: Note – Each VMAP can be assigned to only one VLAN or VM group. [...]
-
Seite 178
BLADEOS 6.5.2 Applicati on Guide 178 C hapter 13: VMready BMD002 20, October 2010 VM Policy Bandwid th Control Note – V M policy ba ndwidth con trol is su pported onl y when th e switch is operating with the Default deplo yment prof ile (see “Deployment Prof iles” on page 147 ). If using the Routing profile, VM policy bandwidth control co[...]
-
Seite 179
BLADEOS 6.5.2 Applicat ion Guide BMD00 220, October 2010 Chapter 13: VMre ady 179 Bandwidth Po licies vs. Ba ndwidth Shapin g VM Pro file Bandwi dth Shaping d iff ers from VM P olicy Bandw idth Cont rol. VM Profi le Bandwidth S haping (see “VM P rof iles” o n pa ge 16 9 ) is configured per VM group and is enforced on the server by a virtual[...]
-
Seite 180
BLADEOS 6.5.2 Applicati on Guide 180 C hapter 13: VMready BMD002 20, October 2010 VMread y Informa tion Di splays The G8124 can be used to display a var iety of VMready information. Note – S ome displays depict information collected fro m scans of a VMware vCenter and may no t be available without a valid vCe nter . If a vCenter is as signed [...]
-
Seite 181
BLADEOS 6.5.2 Applicat ion Guide BMD00 220, October 2010 Chapter 13: VMre ady 181 If a vCenter is available, more ver bose information can b e obtained using the f ollowing ISCLI privil eged EXEC command option: T o view additional detail regardin g any specific VE, see “vCent er VE Details ” on page 183 ). RS G8124# show virt vm -v Index M[...]
-
Seite 182
BLADEOS 6.5.2 Applicati on Guide 182 C hapter 13: VMready BMD002 20, October 2010 vCenter Hype rvisor Hos ts If a vCenter is available, the f ollowing IS CLI privileged EXEC command displays the name and UUID of all VMware hosts, p roviding an essential overview of th e data center: Using the follo wing command, the administrato r can view more[...]
-
Seite 183
BLADEOS 6.5.2 Applicat ion Guide BMD00 220, October 2010 Chapter 13: VMre ady 183 vCenter VEs If a vCenter is available, the following ISCLI privileged EXEC command displays a list of all known V Es: vCenter VE Details If a vCenter is available, the f ollowing IS CLI privileged EXEC command displays detailed information abo ut a specific VE: RS[...]
-
Seite 184
BLADEOS 6.5.2 Applicati on Guide 184 C hapter 13: VMready BMD002 20, October 2010 VMready Confi guration Exa mple This example has the followin g characteristics: A VMware vCenter is fully installed and configured prior to VMready configuration and includes a “ bladevm ” adminis tration accoun t and a valid SSL certificate. The dis [...]
-
Seite 185
BLADEOS 6.5.2 Applicat ion Guide BMD00 220, October 2010 Chapter 13: VMre ady 185 5. Define the VM group. When VMs are added, the server po rts on which they app ear are automatically added to the VM group. I n this exampl e, there is no n eed to manually add ports 1 and 2. Note – VM groups and vN ICs (see “V i rtual NICs ” o n p age 153 [...]
-
Seite 186
BLADEOS 6.5.2 Applicati on Guide 186 C hapter 13: VMready BMD002 20, October 2010[...]
-
Seite 187
BMD00 220, October 2010 187 C HAPTER 14 FCoE and CEE T his cha pte r provides conceptual b ackground and co nfiguration examp les for using Conver ged Enhanced Ether net (CEE) features of the R ackSwitch G8124, with an emphasis o n Fibre Channel over Ethernet ( FCoE) solutions. The follo wing topics are addressed in this chapter: “Fibre Chann[...]
-
Seite 188
BLADEOS 6.5.2 Applicati on Guide 188 C hapter 14: FCoE an d CEE BMD002 20, October 2010 “Enhanced T ransmission Selection” on page 204 Enhanced T ransmis sion Select ion (ETS) pr ovides a met hod for all ocating link ban dwidth based on the 802.1p priority valu e in each packet’ s VLAN tag. Using ETS, d if ferent types of traf fic (su[...]
-
Seite 189
BLADEOS 6.5.2 Applicat ion Guide BMD00 220, October 2010 Chapter 14: FCo E and CEE 18 9 Fibre Ch annel ov er Ethernet Fibre Channel over Ethernet (FCoE) is an ef fo rt to co nv er ge two of the dif ferent physical networks in today’ s data centers. It al lows Fibre Channel traf fic (such as that commonly used in St orage Area Network s, or SA[...]
-
Seite 190
BLADEOS 6.5.2 Applicati on Guide 190 C hapter 14: FCoE an d CEE BMD002 20, October 2010 In Figure 22 on page 189 , the Fib re Channel network is connected to th e FCoE network through an FCoE Forwarder (FCF) . The FCF acts as a Fibre Channel g ateway to and from the FCoE network. For the FCoE portion o f the network, the FCF is con nected to th[...]
-
Seite 191
BLADEOS 6.5.2 Applicat ion Guide BMD00 220, October 2010 Chapter 14: FCo E and CEE 19 1 FCoE Requir ement s The following are required for imp lementing FCoE using the RackSwitch G8124 (G8124) with BLADEOS 6.5 so ftware: The G8124 m ust be co nnec ted to th e Fibre Chan nel networ k th rough an FCF such as a Cis co Nexus 5000 S eries Switch[...]
-
Seite 192
BLADEOS 6.5.2 Applicati on Guide 192 C hapter 14: FCoE an d CEE BMD002 20, October 2010 Conver ged Enhance d Ethernet Conver ged Enhanced Ether net (CEE) refers t o a set of IE EE standards designed to al low dif ferent physical networks with different data handling requirements to be converged together , simplifying mana gem ent, in cre asing [...]
-
Seite 193
BLADEOS 6.5.2 Applicat ion Guide BMD00 220, October 2010 Chapter 14: FCo E and CEE 19 3 Effect s o n 802.1p Quali ty of Service While CEE is off (the default), the G8124 all ows 802 .1p prio rity valu es to be used for Quality of Service (QoS) configu ration (see page 133 ). 802.1 p QoS default settings are shown in Ta b l e 1 6 , but can be ch[...]
-
Seite 194
BLADEOS 6.5.2 Applicati on Guide 194 C hapter 14: FCoE an d CEE BMD002 20, October 2010 If the p rior , non-CEE configu ration used 8 02.1p priori ty values fo r differ ent purposes , or does not expect bandwidth allocation as shown in T able 17 on p age 193 , when CEE is turned on, the administrator s hould reconfigure ETS settings as approp r[...]
-
Seite 195
BLADEOS 6.5.2 Applicat ion Guide BMD00 220, October 2010 Chapter 14: FCo E and CEE 19 5 FCoE I nitialization Proto col Snooping FCoE In itialization P rotocol (FI P) snoopi ng is an FC oE feature. In order to en force point- to-point links for FCoE traf fic outside the regular Fibre Channel topolog y , Ethernet ports used in FCoE can be automat[...]
-
Seite 196
BLADEOS 6.5.2 Applicati on Guide 196 C hapter 14: FCoE an d CEE BMD002 20, October 2010 Port FCF and ENode Detection When FIP snooping is enabled on a port, the p ort is placed in FCF auto-detect mode by d efault. In this mode, th e por t assume s connectio n to an ENod e un less FIP packets s how th e port is conn ected to an FCF . Ports can a[...]
-
Seite 197
BLADEOS 6.5.2 Applicat ion Guide BMD00 220, October 2010 Chapter 14: FCo E and CEE 19 7 FCoE ACL Ru les When FIP Snooping is enabled on a por t, the s witch automa tically installs the appropriate ACLs to enforce the following rules for FCoE traf fic: Ensure t hat FIP f rames fr om ENo des may only be address ed to FCFs. Flag important [...]
-
Seite 198
BLADEOS 6.5.2 Applicati on Guide 198 C hapter 14: FCoE an d CEE BMD002 20, October 2010 V iewi ng FIP Snoopin g Information ACLs automat ical l y gener ated under FI P sn oop ing are independent of regu lar , manually configur e ACLs, and are not listed with regular ACLs in swit ch information and statistics output. Instead, FCoE ACLs are shown[...]
-
Seite 199
BLADEOS 6.5.2 Applicat ion Guide BMD00 220, October 2010 Chapter 14: FCo E and CEE 19 9 FIP Snooping Co nfiguration In this examp le, as shown in Figur e 2 2 on pa g e 189 , FCoE d evices are connected to p ort 2 for the FCF device, and po rt 3 for an ENo de. FIP snooping can be con figured on these p orts using the following ISCLI co mmands: 1[...]
-
Seite 200
BLADEOS 6.5.2 Applicati on Guide 200 C hapter 14: FCoE an d CEE BMD002 20, October 2010 Priori ty-Based Flow Cont rol Priority-bas ed Flow Control (PF C) i s defined in IEEE 802.1Qbb. P FC extends the IEEE 802.3 x standar d flow contr ol mechanism. Under standard flow control, when a port beco mes busy , the switch manages cong estion by paus i[...]
-
Seite 201
BLADEOS 6.5.2 Applicat ion Guide BMD00 220, October 2010 Chapter 14: FCo E and CEE 20 1 Global Configur ation PFC requires CEE to be turned on ( “T urn ing CE E On or O ff” on pag e 192 ). Whe n CEE is turned on, stan dard flow contro l is disabl ed on all ports, and PFC is enable d on all ports for 802.1p p riority value 3. While CEE is tu[...]
-
Seite 202
BLADEOS 6.5.2 Applicati on Guide 202 C hapter 14: FCoE an d CEE BMD002 20, October 2010 PFC Configuration Example Note – D CBX may be conf igured to p ermit sharing or learnin g PFC configur ation with or from external devices. This example assumes that PFC configuration is being performed manually . See “Data Center Bridging Capability Exc[...]
-
Seite 203
BLADEOS 6.5.2 Applicat ion Guide BMD00 220, October 2010 Chapter 14: FCo E and CEE 20 3 2. Enable PFC for the FCoE traffic. Note – PFC is enabled o n priority 3 by defaul t. If using t he defaults, t he manual conf iguration commands sho wn in this step ar e not necessary . 3. Enable PFC for the business-critical LAN application: 4. Save th e[...]
-
Seite 204
BLADEOS 6.5.2 Applicati on Guide 204 C hapter 14: FCoE an d CEE BMD002 20, October 2010 Enhanc ed T ransm ission Sele ction Enhanced T ransmissio n Selection (ETS) is defined in IEEE 802.1 Qaz. ETS provid es a method fo r allocating port bandw idth based on 802.1p pr iority va lues in the VLAN tag. Usin g ETS, dif ferent amounts of link bandwid[...]
-
Seite 205
BLADEOS 6.5.2 Applicat ion Guide BMD00 220, October 2010 Chapter 14: FCo E and CEE 20 5 802 . 1p pri o rity valu e s may b e assi gned by the a dmi ni str a tor for a var i ety o f purp oses. How e ver , when CEE is turned on, the G8124 sets th e ini tial default v a lues for ETS configuratio n as follows: Figure 2 3 Default ETS Priority Groups[...]
-
Seite 206
BLADEOS 6.5.2 Applicati on Guide 206 C hapter 14: FCoE an d CEE BMD002 20, October 2010 Priori ty Group s For ETS use, each 801.2p p riority v alue is assig ned to a pr iority gr oup which can then be allocated a specific portion of avai lable link ban dwidth. T o configure a priority group, t he following is required: CEE must b e turned o[...]
-
Seite 207
BLADEOS 6.5.2 Applicat ion Guide BMD00 220, October 2010 Chapter 14: FCo E and CEE 20 7 Assigning Pr iority V alues to a Prior ity Group Each priority group may b e configured fr om its corresponding ETS Prior ity Group, ava ilable using the following command: where pr i ori ty li st is one o r more 802.1p p riority values (with each s eparated[...]
-
Seite 208
BLADEOS 6.5.2 Applicati on Guide 208 C hapter 14: FCoE an d CEE BMD002 20, October 2010 Allocating Bandwidth Allocate d Bandwid th for PGID 0 Through 7 The administ rator may allocat e a portion of the switc h’ s available bandwidt h to PGIDs 0 throu gh 7. A vailable band wid th i s defined as the amount of l ink b andw idth that remains afte[...]
-
Seite 209
BLADEOS 6.5.2 Applicat ion Guide BMD00 220, October 2010 Chapter 14: FCo E and CEE 20 9 If PGID 15 has low traffic levels, most of the switch’ s bandwidth will b e available to serve priority groups 0 throug h 7. However , if PGID 15 consumes a la rger part of the switch’ s total ban dwidth, the amount available to the other groups is reduc[...]
-
Seite 210
BLADEOS 6.5.2 Applicati on Guide 210 C hapter 14: FCoE an d CEE BMD002 20, October 2010 This example can be co nfigured using th e following commands: 1. T urn CEE on. Note – Turn ing CEE on wi ll automaticall y change some 80 2.1p QoS an d 802.3x standar d flow control settings and menus (see “T urning CEE On or Off” on page 192 ). 2. Co[...]
-
Seite 211
BLADEOS 6.5.2 Applicat ion Guide BMD00 220, October 2010 Chapte r 14: FCoE and CEE 21 1 Dat a Center Brid ging Cap ability Exchange Data Center Bridging Capability Exchange (DCBX) protocol is a vital element of CEE. DCBX allows peer CEE devices to exchange information about their advanced capabilities. Using DCBX, neighbo ring networ k devices [...]
-
Seite 212
BLADEOS 6.5.2 Applicati on Guide 212 C hapter 14: FCoE an d CEE BMD002 20, October 2010 Enabling and Disabling DCBX When CEE is turn ed on, DCBX can be enabled and d isabled on a per -port basis , using the following commands: Note – D CBX and vNICs (see “V irtual NICs” on page 153 ) are not supported simultaneously on the same G8124. Whe[...]
-
Seite 213
BLADEOS 6.5.2 Applicat ion Guide BMD00 220, October 2010 Chapter 14: FCo E and CEE 21 3 These flags are available for the following C EE features: Appl ication P rotocol DCBX exch anges information regarding FCoE and FIP snoopi ng, including th e 802.1p prio rity value used f or FCoE traf fic. The advertise flag is set or reset using the fo[...]
-
Seite 214
BLADEOS 6.5.2 Applicati on Guide 214 C hapter 14: FCoE an d CEE BMD002 20, October 2010 Configuring DCBX Consider an exam ple con sistent Fi g ure 22 on page 189 and used with the prev ious FCoE examp les in this chapter: FCoE i s used o n port s 2 and 3. CEE features are als o used with LANs on ports 1 and 4. All other ports are di[...]
-
Seite 215
BLADEOS 6.5.2 Applicat ion Guide BMD00 220, October 2010 Chapter 14: FCo E and CEE 21 5 4. Disable DCBX for each non-CEE por t as appropriate: 5. Save th e configuration. RS G8124(config)# no c ee port 5-24 dcbx enable[...]
-
Seite 216
BLADEOS 6.5.2 Applicati on Guide 216 C hapter 14: FCoE an d CEE BMD002 20, October 2010[...]
-
Seite 217
BMD00 220, October 2010 217 Part 5: IP Routing This se ct io n discusses Layer 3 s witching functions . In addition to switchi ng traffic at n ear l ine rates, the application switch can perform multi-p rotocol routing. This section discusses basic rout ing and advanced ro uting prot ocols: Basic Ro uting IPv6 H ost Ma n agem e nt Routi[...]
-
Seite 218
BLADEOS 6.5.2 Applicati on Guide 218 Pa rt 5: IP Rou ting BMD002 20, October 2010[...]
-
Seite 219
BMD00 220, October 2010 219 C HAPTER 15 Basic IP Routing T his ch a pte r provi des configur ation backgr ound and exampl es for usi ng the G8124 t o perform IP routing functions. The following topics are addressed in this chapter: “IP Rou ting Benefits” on page 219 “Routing Between IP Subn ets” on page 21 9 “Example o f Subne[...]
-
Seite 220
BLADEOS 6.5.2 Applicati on Guide 220 C hapter 15: Basic IP Routing BMD002 20, October 2010 For examp le, consider the following topology migration: Figure 2 4 The Router L egacy Net work In this examp le, a corporate campus has migrated from a r outer-cen tric topology to a faster , more powerful, switch-based topology . As is often the case, t[...]
-
Seite 221
BLADEOS 6.5.2 Applicat ion Guide BMD00 220, October 2010 Chapter 15: Basic IP Rou ting 22 1 Example of Subnet Routing Consider the role of the G812 4 in the following config uration example: Figure 2 5 Switch- Based Routin g T opolog y The swit ch connects t he Gigabit Ethernet and F ast Ethernet trunks fr om various s witched sub nets througho[...]
-
Seite 222
BLADEOS 6.5.2 Applicati on Guide 222 C hapter 15: Basic IP Routing BMD002 20, October 2010 Using VLANs to Segregate Broadcast Domains If you w ant to contr ol the broadcasts on your n etwork, use VLA Ns to create dist inct broadcast domains. Create on e VLAN for each server s ubnet, and one fo r the router . Configuration Examp le This sect ion[...]
-
Seite 223
BLADEOS 6.5.2 Applicat ion Guide BMD00 220, October 2010 Chapter 15: Basic IP Rou ting 22 3 3. Determine which switch po rts and IP interfaces b elong to which VLANs. The following table ad ds port and VLAN infor mation: Note – T o perform t his configur ation, you must be connected to the swi tch Command Lin e Interface (CLI ) as the adminis[...]
-
Seite 224
BLADEOS 6.5.2 Applicati on Guide 224 C hapter 15: Basic IP Routing BMD002 20, October 2010 5. Assign a VLAN to eac h IP interface. Now that the ports are separated into VLANs, the VLANs are as signed to the appr opriate IP interface for each subnet. From T abl e 2 2 on pa ge 22 3 , the settings are made as follows: 6. Config ure the defaul t ga[...]
-
Seite 225
BLADEOS 6.5.2 Applicat ion Guide BMD00 220, October 2010 Chapter 15: Basic IP Rou ting 22 5 ECMP S t atic R outes Equal-Cost Multi-Path (ECMP) is a forwarding mechanism that routes packets alo ng multiple paths of equal cos t. ECMP provides equally- distributed link load sh aring across the paths. The hashing algorithm used is based on the sour[...]
-
Seite 226
BLADEOS 6.5.2 Applicati on Guide 226 C hapter 15: Basic IP Routing BMD002 20, October 2010 Configuring ECMP St atic Routes T o configure ECMP stat ic rou tes, add the same route multiple times, each with the same destin ation IP address, bu t with a dif ferent gateway IP address . These routes become EC MP routes. 1. Add a static route (IP addr[...]
-
Seite 227
BLADEOS 6.5.2 Applicat ion Guide BMD00 220, October 2010 Chapter 15: Basic IP Rou ting 22 7 Dynami c Host Configuration Protoc ol Dynamic H o st Configuratio n Protocol ( DHCP) is a tr ansport prot ocol that provi des a framework for automatically assignin g IP addresses and configuratio n information to other IP hosts or clients in a lar ge TC[...]
-
Seite 228
BLADEOS 6.5.2 Applicati on Guide 228 C hapter 15: Basic IP Routing BMD002 20, October 2010 When a switch receives a UDP broadcast on por t 67 from a DHCP client r equesting an IP addres s, the switch acts as a proxy for the client, replacing the client source IP (SIP) and destination IP (DIP) addresses. T he request is then forwarded as a UDP U[...]
-
Seite 229
BMD00 220, October 2010 229 C HAPTER 16 Internet Protocol V ersion 6 Internet Protocol v ersion 6 (IP v6) is a netw ork layer pro tocol in tended to expand the network address sp ace. IPv6 is a robust and ex pandable protocol that meets the need for increas ed physical address sp ace. The switch suppor ts the following RFCs for I Pv6-related featur[...]
-
Seite 230
BLADEOS 6.5.2 Applicati on Guide 230 C hapter 16: Internet Pro tocol Vers ion 6 BMD002 20, October 2010 IPv6 Limi t ations The following IPv6 features are not suppo rted in this release. Dynami c Host Contro l Pr otoco l for IPv6 (DHCPv6 ) Border G ateway P rot ocol f or IPv 6 (BGP ) Routing In formation P rotocol f or IPv 6 (RIPng [...]
-
Seite 231
BLADEOS 6.5.2 Applicat ion Guide BMD00 220, October 2010 Chapter 16: Inte rnet Protoco l V ersion 6 231 IPv6 Addr ess Form at The IPv6 address is 128 bits (16 bytes) long and is rep resented as a s equence of eigh t 16-bit hex val ues, s epar ated by col o ns. Each IPv6 address has t wo parts: Subnet prefix r epresenting the network to whic[...]
-
Seite 232
BLADEOS 6.5.2 Applicati on Guide 232 C hapter 16: Internet Pro tocol Vers ion 6 BMD002 20, October 2010 IPv6 Addr ess T ypes IPv6 s upports three types of add resses: unicas t (one-to- one), multi cast (one-to-m any), and any cast (one-to-near est). Multicast addresses replace the u se of broadcast addresses. Unicast Address Unicast is a commun[...]
-
Seite 233
BLADEOS 6.5.2 Applicat ion Guide BMD00 220, October 2010 Chapter 16: Inte rnet Protoco l V ersion 6 233 Anycast Packets sent to an anycast address or list of addresses are delivered to the nearest interface identified by that address . Anycast is a communication between a single sender and a list of addresses. Anycast address es are allocated f[...]
-
Seite 234
BLADEOS 6.5.2 Applicati on Guide 234 C hapter 16: Internet Pro tocol Vers ion 6 BMD002 20, October 2010 IPv6 Interf aces Each IPv6 interface supports multiple IPv6 addresses. Y ou can manually configure up to two IPv6 addresses fo r each interface, or you can allow the switch to use s tateless autoconfiguration . Y ou can manually con figure tw[...]
-
Seite 235
BLADEOS 6.5.2 Applicat ion Guide BMD00 220, October 2010 Chapter 16: Inte rnet Protoco l V ersion 6 235 Neighb or D iscover y Neighbor Di scovery Over view The swit ch uses Nei ghbor Disco very prot ocol (ND) to g ather informati on about o ther router an d host nod es, including the IPv6 ad dresses. Host nodes use ND to configure their interfa[...]
-
Seite 236
BLADEOS 6.5.2 Applicati on Guide 236 C hapter 16: Internet Pro tocol Vers ion 6 BMD002 20, October 2010 Host vs. Router Each IPv6 interface can be configure d as a router n ode or a host no de, as follows: A router node’ s IP addres s is config ured manually . Route r nodes can send Router Advertisements. A host nod e’ s IP address [...]
-
Seite 237
BLADEOS 6.5.2 Applicat ion Guide BMD00 220, October 2010 Chapter 16: Inte rnet Protoco l V ersion 6 237 Support ed Applications The following ap plications have been enhanced to pro vide IPv6 support. Ping The ping command support s IPv6 addr esses. Use t he followin g format to ping an IPv 6 address: ping <hos t nam e > | <IPv6 ad[...]
-
Seite 238
BLADEOS 6.5.2 Applicati on Guide 238 C hapter 16: Internet Pro tocol Vers ion 6 BMD002 20, October 2010 SSH Secure Sh ell (SSH) connections over IPv6 are s upported. Th e following s yntax is required from the client: ssh -u <IPv 6 addr ess> Example: ssh -u 2001:2:3:4:0:0:0:142 TFTP The TFTP comman ds support both I Pv4 and IPv6 a[...]
-
Seite 239
BLADEOS 6.5.2 Applicat ion Guide BMD00 220, October 2010 Chapter 16: Inte rnet Protoco l V ersion 6 239 Configurati on Guidelines When you conf igure an interface fo r IPv6, consider the following guidelines: IPv6 on ly supports static rout es. Support for subnet router anycast addresses is not available. A single inte rface can acc[...]
-
Seite 240
BLADEOS 6.5.2 Applicati on Guide 240 C hapter 16: Internet Pro tocol Vers ion 6 BMD002 20, October 2010 IPv6 Configur ation Exam ples This sect ion provi des steps to configur e IPv6 on th e switch. IPv6 Example 1 The following exam ple us es IPv6 h os t mode to autoconfigure an IPv6 addr ess fo r the inter face. By default, the interface is as[...]
-
Seite 241
BLADEOS 6.5.2 Applicat ion Guide BMD00 220, October 2010 Chapter 16: Inte rnet Protoco l V ersion 6 241 2. Config ure the IPv6 def ault gatewa y . 3. Configure Neighbor Discover y advertisements for the interf ace (optional) 4. V erify the conf iguration. RS G8124(config)# ip gat eway6 1 address 2001:BA98:7654:BA98:FE DC:1234:ABCD:5412 RS G8124[...]
-
Seite 242
BLADEOS 6.5.2 Applicati on Guide 242 C hapter 16: Internet Pro tocol Vers ion 6 BMD002 20, October 2010[...]
-
Seite 243
BMD00 220, October 2010 243 C HAPTER 17 Routing Information Protocol In a routed environment, ro uters communicate with one another to keep track of av ailable routes. Routers can lear n about available routes dynamically using th e R outing In formation Protocol (RIP). BLADEOS s oftwar e supports RIP versi on 1 (RI Pv1) and RIP version 2 (RIPv2) f[...]
-
Seite 244
BLADEOS 6.5.2 Applicati on Guide 244 C hapter 17: Routin g Information Protocol BMD002 20, October 2010 Routing Up dates RIP sends ro uting-update messages at r egular intervals and when the network top ology changes. Each rout er “advertises” r outing info rmation by sen ding a rout ing informat ion update every 30 seconds. If a router do [...]
-
Seite 245
BLADEOS 6.5.2 Applicat ion Guide BMD00 220, October 2010 Chapter 17: Routin g Informat ion Protoco l 245 RIPv2 in RIPv1 Comp atibility Mod e BLADEOS allows you to configure RIPv 2 in RIPv1compatibility mode, for using both RIPv2 and RIPv1 r outers wit hin a networ k. In this mod e, the regu lar routing u pdates use b roadcast UDP data packet to[...]
-
Seite 246
BLADEOS 6.5.2 Applicati on Guide 246 C hapter 17: Routin g Information Protocol BMD002 20, October 2010 Default The RI P router can l isten and su pply a defa ult route, u sually represen ted as IPv4 0.0.0.0 i n the routing table. When a router does not have an explicit route to a destinat ion net work in it s rou tin g table, it uses the defau[...]
-
Seite 247
BLADEOS 6.5.2 Applicat ion Guide BMD00 220, October 2010 Chapter 17: Routin g Informat ion Protoco l 247 RIP Configurat ion Example Note – A n interf ace RIP disabled uses all the default values of the RIP , no matter how the RIP parameters are co nfigured for that interf ace. RIP sends out RIP regular u pdates to include a n UP interface, bu[...]
-
Seite 248
BLADEOS 6.5.2 Applicati on Guide 248 C hapter 17: Routin g Information Protocol BMD002 20, October 2010 Use the following command to check the cur rent valid routes in the ro uting table of the switch: For those RIP routes learned within the garb age collection period, that are r outes ph asing out of the routing table with metric 16, use the f[...]
-
Seite 249
BMD00 220, October 2010 249 C HAPTER 18 Internet Group Management Protocol Internet G roup Manageme nt Protocol (IG MP) is used by IPv4 Multicas t routers to learn about the existence of h ost group member s on their directly attached s ubnet (see RFC 223 6). The IPv4 Multicast routers g et this information by b roadcasting IGMP Membership Queries [...]
-
Seite 250
BLADEOS 6.5.2 Applicati on Guide 250 C hapter 18: Intern et Group Man agement Pro tocol BMD002 20, October 2010 IGMP Snoo ping IGMP Snooping allows the swi tch to forward multicas t traff ic only to those ports th at request it. IGMP Snooping pr events mu lticast traf fic from being flood ed to all po rts. The switc h learns wh ich server ho st[...]
-
Seite 251
BLADEOS 6.5.2 Applicat ion Guide BMD00 220, October 2010 Chap ter 18: Inte rnet Group Managem ent Protocol 251 IGMP Groups The G812 4 supports a maximum of 100 0 IGMP entr ies, on a maximum of 102 4 VLANs. One IGMP entry is allocated for each uniqu e join request, b ased on the VLAN and IGMP gro up address. If multiple ports join the same IGMP [...]
-
Seite 252
BLADEOS 6.5.2 Applicati on Guide 252 C hapter 18: Intern et Group Man agement Pro tocol BMD002 20, October 2010 The switch supports the following IGMPv3 filter modes: INCLUDE mode: The host requests membership to a multicast group and provides a list of IPv4 addresses fr om which it wants to receive traf fic. EXCLUDE mode: The host requ[...]
-
Seite 253
BLADEOS 6.5.2 Applicat ion Guide BMD00 220, October 2010 Chap ter 18: Inte rnet Group Managem ent Protocol 253 IGMP Snooping Configuration Exam ple This sect ion prov ides steps t o configur e IGMP Snoo ping on th e switch. 1. Config ure port and VLAN membership on the switch . 2. Add VLANs to IGMP Snooping. 3. Enable IG MPv3 Snoo ping (op tion[...]
-
Seite 254
BLADEOS 6.5.2 Applicati on Guide 254 C hapter 18: Intern et Group Man agement Pro tocol BMD002 20, October 2010 St atic Multicast Router A static multicast router (Mrou t er) can be co nfig ured for a par ticular po rt on a par t icular VLAN. A static Mrouter does not have to be learned through IGMP Snooping . Any data port can accept a static [...]
-
Seite 255
BLADEOS 6.5.2 Applicat ion Guide BMD00 220, October 2010 Chap ter 18: Inte rnet Group Managem ent Protocol 255 IGMP Queri er IGMP Querier allows the switch to perform th e multicast router (Mr outer) role and provide Mrouter discov ery when the net work or virt ual LAN (VLAN) does not hav e a router . When IGMP Querier is enabled on a VLAN, the[...]
-
Seite 256
BLADEOS 6.5.2 Applicati on Guide 256 C hapter 18: Intern et Group Man agement Pro tocol BMD002 20, October 2010 IGMP Filte ring W ith IGMP Fil tering, you can allow o r deny a port to send and receive mu lticast traffic to c ertain multicast group s. Unauthorized users are res tricted from streaming mu lticast traffic acro ss the net work. If a[...]
-
Seite 257
BLADEOS 6.5.2 Applicat ion Guide BMD00 220, October 2010 Chap ter 18: Inte rnet Group Managem ent Protocol 257 Configure IGMP Filter i ng 1. Enable IGMP Filtering on the switch. 2. Define an IGMP filter with IPv4 information. 3. Assign the IGMP filter to a port. > ># ip igmp filtering > ># ip igmp profile 1 range 224.0.0.0 226.0.0.0[...]
-
Seite 258
BLADEOS 6.5.2 Applicati on Guide 258 C hapter 18: Intern et Group Man agement Pro tocol BMD002 20, October 2010[...]
-
Seite 259
BMD00 220, October 2010 259 C HAPTER 19 Border Ga teway Protoc ol Border Ga teway Protoc ol (BGP) is a n Internet p rotocol that enab les routers on an IPv4 network to share and advertise routing information with each othe r about the segments of the IPv4 address space they can access within their network and with rou ters on external networks. B G[...]
-
Seite 260
BLADEOS 6.5.2 Applicati on Guide 260 C hapter 19: Border Ga teway Protoc ol BMD002 20, October 2010 Intern al Routing V ersus Exte rnal Routing T o ensure effectiv e processing of network traf fic, every router on your network needs to know how to send a packet (directly or indirectly) to any other location/destination in your network. This is [...]
-
Seite 261
BLADEOS 6.5.2 Applicat ion Guide BMD00 220, October 2010 Cha pter 19: Bord er Gateway Proto col 26 1 Formin g BGP Peer Route rs T wo BGP routers becom e peers or neighbo rs once you estab lish a TCP connection between them. For each new r oute, if a peer is interested in that route (for ex ample, if a peer would like to receive your static ro u[...]
-
Seite 262
BLADEOS 6.5.2 Applicati on Guide 262 C hapter 19: Border Ga teway Protoc ol BMD002 20, October 2010 Figure 2 7 Distrib uting Network Filters in Access Lists and Route Maps Incoming and Outgoing Ro ute Map s Y ou can hav e two types o f route maps: in coming and outgoing. A BG P peer rout er can be configu red to support up to eight rou te maps [...]
-
Seite 263
BLADEOS 6.5.2 Applicat ion Guide BMD00 220, October 2010 Cha pter 19: Bord er Gateway Proto col 26 3 Precedence Y ou can set a priority to a route map by specifying a precedence value with the following command (Route Map mode): The smaller the valu e the higher the precedence. I f two route maps have the same precedence value, the smaller numb[...]
-
Seite 264
BLADEOS 6.5.2 Applicati on Guide 264 C hapter 19: Border Ga teway Protoc ol BMD002 20, October 2010 4. Set up the BGP attributes. If you want to overwrite the attributes that the peer ro uter is sending, then define the following BGP attributes: Specify the AS number s that you want to prepe nd to a matched route and the local prefer ence f[...]
-
Seite 265
BLADEOS 6.5.2 Applicat ion Guide BMD00 220, October 2010 Cha pter 19: Bord er Gateway Proto col 26 5 Aggregati ng Routes Aggregation is the pr ocess of combinin g several diff erent routes in such a way that a single route can be advertis ed, which minimizes the size of the routing table. Y ou can configure aggregate r outes in BGP either by re[...]
-
Seite 266
BLADEOS 6.5.2 Applicati on Guide 266 C hapter 19: Border Ga teway Protoc ol BMD002 20, October 2010 BGP Attributes The following two BG P attributes are discussed in th is section: Local preference and metric (Multi-Exit Discriminator). Local Prefer ence Attribute When there are multiple paths to the same destin atio n, the local preference att[...]
-
Seite 267
BLADEOS 6.5.2 Applicat ion Guide BMD00 220, October 2010 Cha pter 19: Bord er Gateway Proto col 26 7 Selecting Rou te Paths in BGP BGP sel ects only one path as the best path . It does no t rely on m etric attribut es to dete rmine the best path. When the sam e network is learned via mo re than one BGP peer , BGP uses its policy for selecting t[...]
-
Seite 268
BLADEOS 6.5.2 Applicati on Guide 268 C hapter 19: Border Ga teway Protoc ol BMD002 20, October 2010 BGP Failover Configurati on Use the following example to create redun dant default gateways for a G8124 at a W eb Host/ISP site, eliminating the po ssibility , sh ould one gateway go down, that requests w ill be forwarded to an upstream ro uter u[...]
-
Seite 269
BLADEOS 6.5.2 Applicat ion Guide BMD00 220, October 2010 Cha pter 19: Bord er Gateway Proto col 26 9 1. Define the VLANs. For simplicity , both default gateways are con figured in the same VLAN in th is example. The gateways could be in the same VLAN or dif f eren t VLANs . 2. Define the IP interfaces with IPv4 addresses. The switch will need a[...]
-
Seite 270
BLADEOS 6.5.2 Applicati on Guide 270 C hapter 19: Border Ga teway Protoc ol BMD002 20, October 2010 Default Re distributi on and Route Aggreg ation Example This example shows you how to configure the switch to redistribute information from one routing protocol to an other and create an aggr egate route entry in the BGP routing table to minimize[...]
-
Seite 271
BLADEOS 6.5.2 Applicat ion Guide BMD00 220, October 2010 Cha pter 19: Bord er Gateway Proto col 27 1 3. Configure internal peer router 1 and external peer router 2 with IPv4 addres ses. 4. Config ure redistri bution for P eer 1. 5. Config ure aggr egat i on poli cy cont ro l . Config ure the IPv4 ro utes that you want aggreg ated. > ># ro[...]
-
Seite 272
BLADEOS 6.5.2 Applicati on Guide 272 C hapter 19: Border Ga teway Protoc ol BMD002 20, October 2010[...]
-
Seite 273
BMD00 220, October 2010 273 C HAPTER 20 OSPF BLADEOS s upports the Open Short est Path First (OSP F) routing p rotocol. The BLADEOS implementation conform s to the OS PF v ersion 2 specifications detailed in Internet RFC 158 3, and OSPF v ersion 3 sp ecifications in RFC 2740 . The follow ing section s discuss O SPF sup port for th e RackSwitch G812[...]
-
Seite 274
BLADEOS 6.5.2 Applicati on Guide 274 C hapter 20: OSPF BMD002 20, October 2010 T ypes o f OSPF Area s An AS can be b roken into l ogical units known as ar eas . In any AS with multiple areas, one area must be des ignated as area 0 , kno wn as the ba ckbone . The backbone acts as the central OSPF area. All other areas in th e AS must be connecte[...]
-
Seite 275
BLADEOS 6.5.2 Applicat ion Guide BMD00 220, October 2010 Chapte r 20: OSPF 275 T ypes o f OSPF Routing Devices As sh own in Figure 3 1 , OSPF uses the fo llowing t ypes of r outing dev ices: Internal Router (IR )—a router that has all of its interfaces within the same area. IRs maintain LSDBs identical to those of other routing devices wi[...]
-
Seite 276
BLADEOS 6.5.2 Applicati on Guide 276 C hapter 20: OSPF BMD002 20, October 2010 Neighbors and Adjacencies In areas with two or more routing devices, n eighbors an d adjacencies are for med. Neighb ors are rou ting devices that maintain information about each o thers’ health. T o establish neighbor r elationships, ro uting devices periodically [...]
-
Seite 277
BLADEOS 6.5.2 Applicat ion Guide BMD00 220, October 2010 Chapte r 20: OSPF 277 The Shortest Path First T ree The routing devices use a link- state algorithm (Dijkstra’ s algorithm) to calculate the shortest path to all know n destinatio ns, based on t he cumulativ e cost required to reach the destination. The cost of an individu al interface [...]
-
Seite 278
BLADEOS 6.5.2 Applicati on Guide 278 C hapter 20: OSPF BMD002 20, October 2010 OSPFv2 Implement ation in BLADEOS BLA DEOS supp orts a single i nstance of OS PF and up to 4K routes on the network. Th e followin g sections describe O SPF implementati on in B LADE OS: “Config urable P arameters” o n pa ge 278 “Defining Areas” on p [...]
-
Seite 279
BLADEOS 6.5.2 Applicat ion Guide BMD00 220, October 2010 Chapte r 20: OSPF 279 Defining Areas If you are configuring multiple areas in your OSP F domain, one of the areas must be designated as area 0, k nown as the backbo ne . The backbone is the central OSPF area and is usually phys ically connected to all oth er areas. The areas inject ro uti[...]
-
Seite 280
BLADEOS 6.5.2 Applicati on Guide 280 C hapter 20: OSPF BMD002 20, October 2010 Using the A rea ID to A ssign the OSPF Ar ea Number The OSPF area number is defin ed in the areaid <IP addr ess> o ption. The octet format is used in order to be co mpatible with two d if ferent sy stems of no tation used by oth er OSPF network vendors. There a[...]
-
Seite 281
BLADEOS 6.5.2 Applicat ion Guide BMD00 220, October 2010 Chapte r 20: OSPF 281 Interface Cost The OSPF link-state algorithm (Dijkstra’ s algorithm) places each routing dev ice at the root of a tree and determines the cum ulative cost required to reach each des tination. Usually , the cost is inversely proportion al to the bandwidth of the int[...]
-
Seite 282
BLADEOS 6.5.2 Applicati on Guide 282 C hapter 20: OSPF BMD002 20, October 2010 Default Routes When an OSPF routing device encounters traf fic for a destination add ress it does not recognize, it forwards that traffic along the d efault r oute . T ypically , the default route leads upstream towar d the backbone u ntil it reaches the intended are[...]
-
Seite 283
BLADEOS 6.5.2 Applicat ion Guide BMD00 220, October 2010 Chapte r 20: OSPF 283 V irtual Links Usually , all areas in an OSPF AS are physically con nected to the backbone. In some c ases where this is not possib le, yo u can use a virtual link . V irtual links are created to co nnect one area to the backbone t hrough anot her non-back bone area [...]
-
Seite 284
BLADEOS 6.5.2 Applicati on Guide 284 C hapter 20: OSPF BMD002 20, October 2010 Authentication OSPF protocol exchanges can b e authenticated so that only trusted ro uting devices can participate. This ensures less pr ocessing on rout ing devices that are not listening to OSPF packets. OSPF allows packet authentication and uses IP multicast when [...]
-
Seite 285
BLADEOS 6.5.2 Applicat ion Guide BMD00 220, October 2010 Chapte r 20: OSPF 285 Confi guring P lain T ext OSPF P asswords T o con figu re simple plain text OSPF passwords o n the switches shown in Figu re 33 use the following commands: 1. Enable OSPF authentication f or Area 0 on switches 1, 2 , and 3. 2. Configure a simple text password up to e[...]
-
Seite 286
BLADEOS 6.5.2 Applicati on Guide 286 C hapter 20: OSPF BMD002 20, October 2010 Confi gurin g MD5 Aut henticat ion Use the following commands to configure MD5 authentication on the switches sh own in Figure 3 3 : 1. Enable OSPF MD5 authentication for Area 0 on switches 1, 2, and 3 . 2. Config ure MD5 key ID fo r Area 0 on switches 1 , 2, and 3. [...]
-
Seite 287
BLADEOS 6.5.2 Applicat ion Guide BMD00 220, October 2010 Chapte r 20: OSPF 287 Host Routes for Load Balancing BLADEOS imp lementation of OSPF in cludes host r outes. Host routes are u sed for adver tising network device IP ad dresses to external networks, accomplishing the f ollowing goals: ABR Load Sharing As a fo rm of load balancing, hos[...]
-
Seite 288
BLADEOS 6.5.2 Applicati on Guide 288 C hapter 20: OSPF BMD002 20, October 2010 OSPFv2 Co nfiguration Examples A summary of the basic steps for configuring OS PF o n the G8124 is listed here. Detailed instructions for each of the steps is covered in the following sections: 1. Configure IP interfaces. One IP interface is required for each desired[...]
-
Seite 289
BLADEOS 6.5.2 Applicat ion Guide BMD00 220, October 2010 Chapte r 20: OSPF 289 Exam ple 1: Si mple OSPF Dom ain In this examp le, two OSPF areas are defin ed—one area is the backbone and the other is a stub ar ea. A stub area does not allow advertisements of external routes, thus reducing the size of the database. Instead, a d efault summary [...]
-
Seite 290
BLADEOS 6.5.2 Applicati on Guide 290 C hapter 20: OSPF BMD002 20, October 2010 3. Define t he backbone. The backbon e is always configured as a trans it area using areaid 0.0.0.0 . 4. Define the stub a rea. 5. Attach the network interf ace to the backbone. 6. Attach the network interf ace to the stub area. RS G8124(config-router -ospf)# area 0 [...]
-
Seite 291
BLADEOS 6.5.2 Applicat ion Guide BMD00 220, October 2010 Chapte r 20: OSPF 291 Example 2: V irtual Links In the ex ample sh own in Figure 3 5 , area 2 is not physically connected to the backbone as is usually required. In stead, area 2 will be con nected to the backbone v ia a virtual link throug h area 1. The virtual link m ust be configured a[...]
-
Seite 292
BLADEOS 6.5.2 Applicati on Guide 292 C hapter 20: OSPF BMD002 20, October 2010 3. Enable OSPF . 4. Define t he backbone. 5. Define the transit area. The area that contains the virtual link must be configured as a transit area. 6. Attach the network interf ace to the backbone. 7. Attach the network interf ace to the transit area. 8. Config ure t[...]
-
Seite 293
BLADEOS 6.5.2 Applicat ion Guide BMD00 220, October 2010 Chapte r 20: OSPF 293 Configuri ng OSPF fo r a V irtual Li nk on Switc h #2 1. Configure IP interfaces on each network that will be attached to OSPF areas. In this examp le, two IP interfaces are needed: Interface 1 fo r the transit area network on 10. 10.12.0 /24 Interface 2 fo r[...]
-
Seite 294
BLADEOS 6.5.2 Applicati on Guide 294 C hapter 20: OSPF BMD002 20, October 2010 6. Define the stub a rea. 7. Attach the network interf ace to the backbone. 8. Attach the network interf ace to the transit area. 9. Config ure the vir tual link. The nbr rout er ID con figured in th is step must b e the s ame as the ro uter ID th at was configu red [...]
-
Seite 295
BLADEOS 6.5.2 Applicat ion Guide BMD00 220, October 2010 Chapte r 20: OSPF 295 Example 3: Summarizi ng Routes By default, ABRs adv ertise all the network add resses from one area in to another area. Route summarization can be used for conso lidating advertised addres ses and reducing the p erceived complexity of the network. If network I P addr[...]
-
Seite 296
BLADEOS 6.5.2 Applicati on Guide 296 C hapter 20: OSPF BMD002 20, October 2010 2. Enable OSPF . 3. Define t he backbone. 4. Define the stub a rea. 5. Attach the network interf ace to the backbone. 6. Attach the network interf ace to the stub area. 7. Configure route summarization by specifying the s tarting address and mask of the range of addr[...]
-
Seite 297
BLADEOS 6.5.2 Applicat ion Guide BMD00 220, October 2010 Chapte r 20: OSPF 297 8. Use the hide com mand to prevent a range of addresse s from advertising to th e backbone. V erifying OSPF Configu ration Use the following comm ands to verify the OSPF configuration on your switch: show ip ospf show ip ospf neighbor show ip ospf databa[...]
-
Seite 298
BLADEOS 6.5.2 Applicati on Guide 298 C hapter 20: OSPF BMD002 20, October 2010 OSPFv3 Implement ation in BLADEOS OSPF v ersion 3 i s based on OSPF version 2, but ha s been modifi ed to sup port IPv6 ad dressing. In most o ther ways, OSPFv3 is sim ilar to OSPF v2: They bo th have the sa me packet type s and interfaces, and both use the same m ec[...]
-
Seite 299
BLADEOS 6.5.2 Applicat ion Guide BMD00 220, October 2010 Chapte r 20: OSPF 299 OSPFv3 U ses Indepe ndent C ommand Paths Though OSPFv3 and OSPFv2 are very s imilar , they are configured independently . They each have their ow n separate menu s in the C LI, and their own command p aths in the I SCLI. OSPFv3 b ase menus and comm and paths are lo c[...]
-
Seite 300
BLADEOS 6.5.2 Applicati on Guide 300 C hapter 20: OSPF BMD002 20, October 2010 OSPFv3 Limit ations BLADEOS 6 .5 does no t currently s upport the fol lowing OS PFv3 featur es: Multipl e instance s of OSPF v3 on one IPv6 lin k. Authentication via IPv6 Security (IPsec) OSPFv3 Configuratio n Exampl e The followi ng example dep icts the OSPF[...]
-
Seite 301
BLADEOS 6.5.2 Applicat ion Guide BMD00 220, October 2010 Chapte r 20: OSPF 301 2. Enable OSPFv3. This is equivalent to the OSPFv 2 enable option in the router ospf co mma nd path . 3. Define t he backbone. This is identical to OSPFv 2 configuration. 4. Define the stub a rea. This is identical to OSPFv 2 configuration. 5. Attach the network inte[...]
-
Seite 302
BLADEOS 6.5.2 Applicati on Guide 302 C hapter 20: OSPF BMD002 20, October 2010 7. Configure route summarization by specifying the starting address and p refix length of the range of addresses to be summarized. This dif fers from OSPFv2 only in that the OSPFv3 command p ath is used, and the address and prefix are s pecified in IPv6 format. 8. Us[...]
-
Seite 303
BMD00 220, October 2010 303 C HAPTER 21 Protocol Independent Multic ast BLADEOS sup ports Proto col Independen t Multicast (PIM) in Sparse Mo de (PIM-SM) and Dense Mode (PIM- DM). Note – BLADEOS 6.5 does not support IPv6 for P IM. The following s ections discuss PIM suppo rt for the RackSwitch G8124: “PIM Overview” on page 303 “Supp[...]
-
Seite 304
BLADEOS 6.5.2 Applicati on Guide 304 C hapter 21: Protoc ol Indepen dent Multic ast BMD002 20, October 2010 PIM-SM is a reverse-path routing mechanism. Client receiver statio ns advertise their willingness to join a multicast gro up. The local routing an d switching devices collect multicast routing information and forward the request toward th[...]
-
Seite 305
BLADEOS 6.5.2 Applicat ion Guide BMD00 220, October 2010 Chapter 21: Pro tocol Ind ependent Multicast 305 The following PIM mo des and features are no t currently supported in BLAD EOS 6.5: Hybrid Sparse-Dens e Mode (PIM -SM/DM). Sparse Mode and Dense Mode m ay be config ured on separate IP interfaces on the switch, but are not cur rently s[...]
-
Seite 306
BLADEOS 6.5.2 Applicati on Guide 306 C hapter 21: Protoc ol Indepen dent Multic ast BMD002 20, October 2010 Defining a PIM Network Component The G8124 can be attached to a maximu m of two independent PIM n etwork components . Each component rep rese nts a dif fer ent PIM network , and can be defin e d for eith er PIM-SM or PIM-DM operation. Bas[...]
-
Seite 307
BLADEOS 6.5.2 Applicat ion Guide BMD00 220, October 2010 Chapter 21: Pro tocol Ind ependent Multicast 307 PIM Neighbor F ilters The G8124 accep ts connection to up to 72 PIM interfaces. By default, th e switch accepts all PIM neighbors attached to the PIM-enabled interfaces, up to the maximum number . Once the maximum is reached, the switch wil[...]
-
Seite 308
BLADEOS 6.5.2 Applicati on Guide 308 C hapter 21: Protoc ol Indepen dent Multic ast BMD002 20, October 2010 Additi onal Sp arse Mode Settings Spec ifying the Rendezvous Point Using PIM-SM, at least one PIM-capable router must be a candidate for use as a Rendezvo us Point (RP) for any given multicast group . If desired, the G812 4 can act as an [...]
-
Seite 309
BLADEOS 6.5.2 Applicat ion Guide BMD00 220, October 2010 Chapter 21: Pro tocol Ind ependent Multicast 309 Influencing the Designat ed Router Sele ction Using PIM-SM, All PIM-enabled I P interfaces are co nsidered as p otential Designate Routers (DR) for their dom ain. By default, the interface with the highest IP address on the domain is select[...]
-
Seite 310
BLADEOS 6.5.2 Applicati on Guide 310 C hapter 21: Protoc ol Indepen dent Multic ast BMD002 20, October 2010 Using PIM w ith Other Featur es PIM with ACLs or VMAPs If usi ng ACLs or VMAP s, be sure t o permit traf fic for local host s and routers . PIM with IGMP If using IGMP (see “Internet Grou p Management Pro tocol” o n page 249 ): IG[...]
-
Seite 311
BLADEOS 6.5.2 Applicat ion Guide BMD00 220, October 2010 Chapt er 21: Protoc ol Indepe ndent Mul ticast 31 1 PIM Con figuration Examples Example 1: PIM-SM with Dynamic RP This example configu res PIM Sparse Mode fo r one IP interface, with the switch acting as a candidate for d ynamic Rendezvous Po int (RP) selection. 1. Globally enable the PIM[...]
-
Seite 312
BLADEOS 6.5.2 Applicati on Guide 312 C hapter 21: Protoc ol Indepen dent Multic ast BMD002 20, October 2010 Example 2: PIM-SM with S tatic RP The following command s can be used to mod ify the prio r examp le con figu ration to use a static RP: Where 225.1 .0.0 255 .255.0. 0 is the mu lticast gro up base add ress and mask, and 1 0.10.1. 1 is th[...]
-
Seite 313
BLADEOS 6.5.2 Applicat ion Guide BMD00 220, October 2010 Chapter 21: Pro tocol Ind ependent Multicast 313 1. Configure the PIM-SM component as shown in the prior examples, or if using PIM-DM independently , enable the PIM feature. 2. Configure a PIM component and set the PIM mode: 3. Define an IP interface f or use with PIM: 4. Enable PIM on th[...]
-
Seite 314
BLADEOS 6.5.2 Applicati on Guide 314 C hapter 21: Protoc ol Indepen dent Multic ast BMD002 20, October 2010[...]
-
Seite 315
BMD00 220, October 2010 315 Part 6: High A vailability Fundament als Internet tr af f ic con sists of m yriad services and appl ications which us e the Internet Protocol (I P) for data delivery . However , IP is not optimized for all the various applications. High A vailabi lity goes beyon d IP and makes intellig ent switchin g decisions t o provid[...]
-
Seite 316
BLADEOS 6.5.2 Applicati on Guide 316 : High Ava ilability Fundame ntals BMD002 20, October 2010[...]
-
Seite 317
BMD00 220, October 2010 317 C HAPTER 22 Basic Redundancy BLADEOS 6 .5 includes var ious features f or providing basic link o r device redund ancy: “T runking for Li nk Redundancy ” on page 317 “Hot Lin ks” on page 318 “Active MultiPath Protocol” on page 320 T runkin g for Link Redu ndancy Multiple s witch p orts can be comb [...]
-
Seite 318
BLADEOS 6.5.2 Applicati on Guide 318 C hapter 22: Basic R edundancy BMD002 20, October 2010 Hot Links For net work topol ogies that r equire Spanni ng T ree to be turned of f, Hot Link s provides basic link redundancy with fas t recovery . Hot Links consists o f up to 25 triggers. A trigg er consists of a pair of layer 2 interfaces, each contai[...]
-
Seite 319
BLADEOS 6.5.2 Applicat ion Guide BMD00 220, October 2010 Chapter 22: Basi c Redu ndancy 319 Configuration Gui delines The follo wing configu ration guidel ines apply t o Hot links : Ports that are con figured as Hot Link interfaces must have STP disabled. When Hot Links is turned on, MSTP , RSTP , and PVRST mus t be turned of f. Whe[...]
-
Seite 320
BLADEOS 6.5.2 Applicati on Guide 320 C hapter 22: Basic R edundancy BMD002 20, October 2010 Active Mult iPath Protocol Active MultiPath Protocol (AMP) allows y ou to connect three switches in a loop topology , an d load-balance traf fic across all uplinks (no blocking) . When an AMP link fails, up stream communication co ntinues over the remain[...]
-
Seite 321
BLADEOS 6.5.2 Applicat ion Guide BMD00 220, October 2010 Chapter 22: Basi c Redu ndancy 321 When th e AMP l o op i s br oken , t he ST P po rt s tates are set to f orw ard ing or blocki ng , dep end in g o n the switch priority and por t/trunk precedence, as follows: An aggregator's port/trunk has higher precedence over an access switc[...]
-
Seite 322
BLADEOS 6.5.2 Applicati on Guide 322 C hapter 22: Basic R edundancy BMD002 20, October 2010 AMP po rts canno t be u sed as mo nitori ng po rts in a port-m irror ing c onfig uration . Do not c onfig ure AMP p orts as Layer 2 Failov er cont rol port s. For IGMP , IP-based multicast entries su pport only Layer 2 (MAC) based multicast f[...]
-
Seite 323
BLADEOS 6.5.2 Applicat ion Guide BMD00 220, October 2010 Chapter 22: Basi c Redu ndancy 323 Configuri ng an Access Swit ch Perform the follo wing steps to configure AMP on an access switch: 1. T urn off Spann ing T ree. 2. T urn AMP on. 3. Defi ne the A MP grou p link s, and e nable t he AMP g roup. V erifying AMP Operation Display AMP group in[...]
-
Seite 324
BLADEOS 6.5.2 Applicati on Guide 324 C hapter 22: Basic R edundancy BMD002 20, October 2010[...]
-
Seite 325
BMD00 220, October 2010 325 C HAPTER 23 Layer 2 Failover The primary application for Layer 2 Failover is to support Network Adapter T eaming. With Network Adapter T eaming, all the NICs on each s erver share the same IP address, and are configured into a team. One NIC is th e primary link, and the o ther is a stand by link. For more details, refer [...]
-
Seite 326
BLADEOS 6.5.2 Applicati on Guide 326 C hapter 23: Laye r 2 Failov er BMD002 20, October 2010 Figur e 41 is a simple example of Layer 2 Failo ver . One G8124 is the primary , and the other is us ed as a backup. In this example, all ports on the primary switch belong to a single trunk group, with Layer 2 Failover enabled, and Failover Limit set t[...]
-
Seite 327
BLADEOS 6.5.2 Applicat ion Guide BMD00 220, October 2010 Cha pter 23: Layer 2 F ailover 327 Manual ly Monitoring Port Links The Manual Monitor allows you to configure a set of ports and/or trunks to moni tor for link failures (a monitor list), an d another set of ports and/or tr unks to di sable when the tr igger limit is reached (a control lis[...]
-
Seite 328
BLADEOS 6.5.2 Applicati on Guide 328 C hapter 23: Laye r 2 Failov er BMD002 20, October 2010 L2 F ailover with O ther F eatures L2 Fai lover works to gethe r with L ink Ag grega tion C on trol P ro tocol (LACP) and wit h Spann ing T ree Protocol (STP), as des cribed below . LACP Link Agg regation Cont rol Protocol allows the switch to form dyna[...]
-
Seite 329
BLADEOS 6.5.2 Applicat ion Guide BMD00 220, October 2010 Cha pter 23: Layer 2 F ailover 329 Configu ring Layer 2 Failo ver Use the following procedure to configu re a Layer 2 Failover Manual Mon itor . 1. Specify the links to monitor . 2. Specify the links to dis able when the failover limit is reached . 3. Config ure general Fai lover paramet [...]
-
Seite 330
BLADEOS 6.5.2 Applicati on Guide 330 C hapter 23: Laye r 2 Failov er BMD002 20, October 2010[...]
-
Seite 331
BMD00 220, October 2010 331 C HAPTER 24 V irtual Router Redundancy Protocol The BNT RackSwitch G8124 (G8124) suppor ts IPv4 high-availability ne twork topologies through an enha nced implementat ion of the V irtual Rout er Redundan cy Protocol ( VRRP). Note – BLADEOS 6.5 does not supp ort IPv6 fo r VRRP . The following topics are discussed in thi[...]
-
Seite 332
BLADEOS 6.5.2 Applicati on Guide 332 C hapter 24: Virtual Router Re dundancy Pro tocol BMD002 20, October 2010 VRRP Overvi ew In a high-av ailability network topology , no device can create a s ingle point-of-f ailure for the network o r force a sing le point- of-failure to any other part of the network . This means t hat your network will rema[...]
-
Seite 333
BLADEOS 6.5.2 Applicat ion Guide BMD00 220, October 2010 Chapter 24: V irtual Router R edundan cy Protocol 333 Master and Backup V irtual Router W ithin each virtual router , one VRRP router is selected to be the virtual router mas ter . See “Selecting t he Master V RRP Router” on page 334 for an explanation of the selection process. Note ?[...]
-
Seite 334
BLADEOS 6.5.2 Applicati on Guide 334 C hapter 24: Virtual Router Re dundancy Pro tocol BMD002 20, October 2010 Select ing the M aster VRR P Router Each VRRP router is configured with a priority b etween 1–254. A bidding process determines which VRRP router is or becomes th e m aster—th e VRR P router with the highest priority . The master p[...]
-
Seite 335
BLADEOS 6.5.2 Applicat ion Guide BMD00 220, October 2010 Chapter 24: V irtual Router R edundan cy Protocol 335 Active-Active Redundancy In an active-active co nfiguration, shown in Fi gure 42 , two switches provide red undancy for each other , with both active at the same time. Each switch processes traffic on a dif ferent subnet. When a failur[...]
-
Seite 336
BLADEOS 6.5.2 Applicati on Guide 336 C hapter 24: Virtual Router Re dundancy Pro tocol BMD002 20, October 2010 BLADEOS Extensions to VRRP This section desc ribes VRRP enhancements that are imp lemented in BLADEOS. BLADEOS supports a tr acking function that dynamically mod ifies the priority o f a VRRP router , based on its current state. The ob[...]
-
Seite 337
BLADEOS 6.5.2 Applicat ion Guide BMD00 220, October 2010 Chapter 24: V irtual Router R edundan cy Protocol 337 V irtual Router Deployment Considera tions Assigning VRRP V irtual Route r ID During the software upgrade process, VRRP virtual router IDs will be automatically ass ig ned if failover i s enabled on the switch. W hen configuri ng virtu[...]
-
Seite 338
BLADEOS 6.5.2 Applicati on Guide 338 C hapter 24: Virtual Router Re dundancy Pro tocol BMD002 20, October 2010 High A va ilabi lity Confi gurati ons Figur e 43 shows an example configu ration where two G812 4s are used as VRRP routers in an active-active configur ation. In this configuration, both switches respond to packets. Figure 4 3 Active-[...]
-
Seite 339
BLADEOS 6.5.2 Applicat ion Guide BMD00 220, October 2010 Chapter 24: V irtual Router R edundan cy Protocol 339 T ask 1: Configure G81 24 1 1. Configure client and server interfaces. 2. Config ure the defaul t gateways. Each default gate way points to a Layer 3 ro uter . 3. T urn on VR RP and configure two V irtual Interface Routers. RS G8124(co[...]
-
Seite 340
BLADEOS 6.5.2 Applicati on Guide 340 C hapter 24: Virtual Router Re dundancy Pro tocol BMD002 20, October 2010 4. Enable tracking on ports. Set the priority of V irtual Router 1 to 101, so that it becomes the Master . 5. Config ure por ts . 6. T urn of f Spanning T ree Protocol globally. RS G8124(config-vrrp)# v irtual-router 1 track ports RS G[...]
-
Seite 341
BLADEOS 6.5.2 Applicat ion Guide BMD00 220, October 2010 Chapter 24: V irtual Router R edundan cy Protocol 341 T ask 2: Configure G81 24 2 1. Configure client and server interfaces. 2. Config ure the defaul t gateways. Each default gate way points to a Layer 3 ro uter . 3. T urn on VR RP and configure two V irtual Interface Routers. RS G8124(co[...]
-
Seite 342
BLADEOS 6.5.2 Applicati on Guide 342 C hapter 24: Virtual Router Re dundancy Pro tocol BMD002 20, October 2010 4. Enable tracking on ports. Set the priority of V irtual Router 2 to 101, so that it becomes the Master . 5. Config ure por ts . 6. T urn of f Spanning T ree Protocol globally. RS G8124(config-vrrp)# v irtual-router 1 track ports RS G[...]
-
Seite 343
BMD00 220, October 2010 343 Part 7: Network Management[...]
-
Seite 344
BLADEOS 6.5.2 Applicati on Guide 344 Pa rt 7: Netwo rk Manage ment BMD002 20, October 2010[...]
-
Seite 345
BMD00 220, October 2010 345 C HAPTER 25 Link Layer Discovery Protocol The BLADEO S software sup port Link Layer Discov ery Protocol ( LLDP). This chapter dis cusses the us e and configurat ion of LLDP on the switch : “LLDP Overvi ew” on page 345 “Enabli ng or Dis abl ing LLDP” on page 346 “LLDP T ransm it Features” on page 3[...]
-
Seite 346
BLADEOS 6.5.2 Applicati on Guide 346 C hapter 25: Link La yer Disco very Protocol BMD002 20, October 2010 The LLDP inf ormation to be di stributed by th e G8124 ports, and t hat which has been col lected from other LLDP stations, is stored in the switch’ s Man agemen t Information Base (MIB). Network Management Systems (NMS) can use Simple Ne[...]
-
Seite 347
BLADEOS 6.5.2 Applicat ion Guide BMD00 220, October 2010 Chapter 25: Link Lay er Discov ery Protocol 347 LLD P T ransmit Featur es Numerous L LDP transmit options are available, including scheduled an d minimum transmit interval, expiration on remote system s, SN MP trap notification, and the types of information permitted to be shared. Sched u[...]
-
Seite 348
BLADEOS 6.5.2 Applicati on Guide 348 C hapter 25: Link La yer Disco very Protocol BMD002 20, October 2010 T ime-to-Live for T ransmitted Information The transmitted LLDP information is held by remote sy stems for a limited time. A time-to-live parameter allows the switch to determin e how long the transm itted dat a should be held before it exp[...]
-
Seite 349
BLADEOS 6.5.2 Applicat ion Guide BMD00 220, October 2010 Chapter 25: Link Lay er Discov ery Protocol 349 If SNMP trap notificatio n is enabled, the notification messages can also appear in the system lo g. This is enabled by default. T o change whether the SNMP trap notifications for LLDP events appear in the sys tem log, use the following c om[...]
-
Seite 350
BLADEOS 6.5.2 Applicati on Guide 350 C hapter 25: Link La yer Disco very Protocol BMD002 20, October 2010 LLDP transmissions can also b e configured to enable o r disable inclusion of op tional information, using the f ollowing command (Interf ace Port mode): where type is an LLDP information option from Ta b l e 2 4 : By default, all optional [...]
-
Seite 351
BLADEOS 6.5.2 Applicat ion Guide BMD00 220, October 2010 Chapter 25: Link Lay er Discov ery Protocol 351 LLDP Receive Features T ypes o f Inform ation Received When the LLDP receive option is enabled on a port (see “Ena bling or Dis abling LLDP” on page 34 6 ), the port may receive the following inform ation from LLDP-capable r emote system[...]
-
Seite 352
BLADEOS 6.5.2 Applicati on Guide 352 C hapter 25: Link La yer Disco very Protocol BMD002 20, October 2010 T o view detailed information f or a remote device, specify the Index number as fo und in the summary . Fo r examp le, in keeping with the samp le su m mary , to list details for the first remote device (with an Index v alue of 1), use the [...]
-
Seite 353
BLADEOS 6.5.2 Applicat ion Guide BMD00 220, October 2010 Chapter 25: Link Lay er Discov ery Protocol 353 LLDP Exam ple Config uration 1. T urn LLDP on glob ally . 2. Set the global LLDP timer features. 3. Set LLDP options for each p ort. 4. Enab le syslog repo rt ing. 5. V erify the configuration sett ings: 6. V iew remote device information as[...]
-
Seite 354
BLADEOS 6.5.2 Applicati on Guide 354 C hapter 25: Link La yer Disco very Protocol BMD002 20, October 2010[...]
-
Seite 355
BMD00 220, October 2010 355 C HAPTER 26 Simple Network Management Protocol BLADEOS p rovides Simple Ne twork Managemen t Protoco l (SNMP) vers ion 1, v ersion 2, and version 3 support for access through any n etwork management sof tware, such as IBM Director or HP-OpenV iew . Note – SNMP read and write functions are enabled by default. For best s[...]
-
Seite 356
BLADEOS 6.5.2 Applicati on Guide 356 C hapter 26: Simple Ne twork Mana gement Prot ocol BMD002 20, October 2010 SNMP V ersion 3 SNMP vers ion 3 ( SNMPv3) is an en hanced versio n of the Simp le Network Management P rotocol, approved by the Internet Engineering Steering Group in March, 2002. SNMP v3 contains additional security and authenticatio[...]
-
Seite 357
BLADEOS 6.5.2 Applicat ion Guide BMD00 220, October 2010 Chapte r 26: Simpl e Network Management Protocol 357 User Confi guration Example 1. T o configure a us er with name “admin,” au thentication type MD5, and authen tication password of “admin,” privacy o ption DES with privacy passwor d of “admin,” use the followin g CLI command[...]
-
Seite 358
BLADEOS 6.5.2 Applicati on Guide 358 C hapter 26: Simple Ne twork Mana gement Prot ocol BMD002 20, October 2010 Configuring SNMP T rap Host s SNMPv1 T rap Host 1. Configure a user with no authentication an d password. 2. Configure an access group and group table entries for the user . Use the following menu to specify which traps can be receive[...]
-
Seite 359
BLADEOS 6.5.2 Applicat ion Guide BMD00 220, October 2010 Chapte r 26: Simpl e Network Management Protocol 359 5. Use the commun ity table to specify which comm unity string is us ed in the trap. SNMPv2 T rap Host Configurat ion The SNMPv2 trap hos t configuration is s imilar to the SNMPv1 trap h ost configuration. W herever you specif y the mod[...]
-
Seite 360
BLADEOS 6.5.2 Applicati on Guide 360 C hapter 26: Simple Ne twork Mana gement Prot ocol BMD002 20, October 2010 SNMPv3 T rap Host Configurat ion T o configure a user for SN MPv3 traps, you can choose to send th e traps with b oth privacy and authentication, with authenticatio n only , or without privacy or aut henticatio n . This is configur ed[...]
-
Seite 361
BLADEOS 6.5.2 Applicat ion Guide BMD00 220, October 2010 Chapte r 26: Simpl e Network Management Protocol 361 SNMP MIBs The BLADEO S SNMP agent s upports S NMP version 3 . Security is provided th rough SNMP communi ty strings. The defau lt community string s are “ public ” for SNMP GET operation and “ private ” for SNMP SET operation. T[...]
-
Seite 362
BLADEOS 6.5.2 Applicati on Guide 362 C hapter 26: Simple Ne twork Mana gement Prot ocol BMD002 20, October 2010 The BLADEO S SNMP agent s upports t he following generic traps as defined in RFC 1215: ColdStart Wa r m S t a r t LinkDown LinkUp AuthenticationFailure The SNMP ag ent also supp orts two S panning T ree traps as d [...]
-
Seite 363
BLADEOS 6.5.2 Applicat ion Guide BMD00 220, October 2010 Chapte r 26: Simpl e Network Management Protocol 363 altSwStgTopologyChanged Signifies that th ere was a STG topology chan ge. altSwStgBlockingState An altSwStgBlockingState trap is sent when port state is changed in blocking state. altSwCistNewRoot Signifies that th e bridge has become t[...]
-
Seite 364
BLADEOS 6.5.2 Applicati on Guide 364 C hapter 26: Simple Ne twork Mana gement Prot ocol BMD002 20, October 2010 Switch I mages a nd Config uration Fi les This sect ion desc ribes how to us e MIB calls to work with swi tch images and configura tion files . Y ou can use a st andard SNMP tool to perform th e actions, using the MI Bs listed in Ta b[...]
-
Seite 365
BLADEOS 6.5.2 Applicat ion Guide BMD00 220, October 2010 Chapte r 26: Simpl e Network Management Protocol 365 Loading a New Switch I mage T o load a new switch image with th e name “ MyNewImage-1.img ” into image2 , follow the steps bel ow . This example s hows an FT P/TFTP ser ver at IPv4 addr ess 192.1 68.1 0.10, th oug h IPv 6 is a lso s[...]
-
Seite 366
BLADEOS 6.5.2 Applicati on Guide 366 C hapter 26: Simple Ne twork Mana gement Prot ocol BMD002 20, October 2010 Saving the Switch Config uration T o save the switch configuration to a FTP/TFTP server follow the steps below . This example shows a FTP/TF TP server at I Pv4 address 1 92.168.10 .10, though IPv6 is al so supported . 1. Set the FTP/T[...]
-
Seite 367
BMD00 220, October 2010 367 Part 8: Monitoring The ability to monitor traffic passing through the G8124 can be invaluab le for troubleshooting some type s of ne twor king prob lems. This secti ons c over the fol lowi ng m on ito r ing f eatur es: Remote Monitoring (RMO N) sFLO W Port M irro ring[...]
-
Seite 368
BLADEOS 6.5.2 Applicati on Guide 368 Pa rt 8: Mo nitoring BMD002 20, Octo ber 2010[...]
-
Seite 369
BMD00 220, October 2010 369 C HAPTER 27 Remote Monitoring Remote Mo nitoring (R MON) allows network devices to exchange network m onitoring d ata. RMON allows the switch to perform the following functions: T rack even ts and trigger alarms when a threshold is reached. Notify administrators by issuing a syslog message or SNMP trap. RMON Over[...]
-
Seite 370
BLADEOS 6.5.2 Applicati on Guide 370 C hapter 27: Remot e Monitoring BMD002 20, October 2010 RMON Group 1—S t atistics The switch supports collection of Ethernet st atistics as outlined in the RMON stati stics MIB, in reference to etherStatsT able. Y ou can configure RMON statistics on a per-p ort basis. RMON st atistics are s ampled every se[...]
-
Seite 371
BLADEOS 6.5.2 Applicat ion Guide BMD00 220, October 2010 Chapter 27: Remote Monit oring 371 RMON Group 2—History The RMON History Group allows you to sample an d archive Ethernet statistics for a specific interface during a specific time interval. History samp ling is done per po rt. Note – RMON port statistics must be enabled for the port [...]
-
Seite 372
BLADEOS 6.5.2 Applicati on Guide 372 C hapter 27: Remot e Monitoring BMD002 20, October 2010 Configuring RMON History Perform the following steps to configure RM ON History on a port. 1. Enable RMON on a port. 2. Config ure the RMON His tory parame ters for a por t. where <x> is the number of the port to monitor . For example, the full OI[...]
-
Seite 373
BLADEOS 6.5.2 Applicat ion Guide BMD00 220, October 2010 Chapter 27: Remote Monit oring 373 RMON Group 3—Alarms The RMON Al arm Group all ows you to d efine a set of thresholds used to dete rmine network performance. When a configured th reshold is crossed, an alarm is g enerated. Fo r ex ample, y ou can configure th e switch to issue an alar[...]
-
Seite 374
BLADEOS 6.5.2 Applicati on Guide 374 C hapter 27: Remot e Monitoring BMD002 20, October 2010 RMON Group 9—Event s The RMON Event Group allows you to define ev ents that are triggered by alarms. An event can be a log message, an SNMP trap, or both. When an alarm is generated, it trigger s a corresponding event no tification. Use the following [...]
-
Seite 375
BMD00 220, October 2010 375 C HAPTER 28 sFLOW The G812 4 suppor ts sFlo w techno logy for monit oring t raf fic in data n etworks . The swit ch incl udes an embedded sFlow agent which can be configured t o provide cont inuous mon itoring i nformation of IPv4 traf fic to a central sFlow analyzer . The switch is res ponsible only for fo rwarding sFlo[...]
-
Seite 376
BLADEOS 6.5.2 Applicati on Guide 376 C hapter 28: sFLOW BMD002 20, October 2010 sFlow sampling has the following restrictio ns : Sample Rate—The fastes t sFlow sampl e rate is 1 out of every 256 packets. ACLs—s Flow samplin g is perform ed before ACLs are processed . For por ts configured both with sFlow sampli ng and one or more AC[...]
-
Seite 377
BMD00 220, October 2010 377 C HAPTER 29 Port Mirroring The BLADEOS p ort mi rro ring feat ure all ows you to m ir ror ( copy ) t he pack ets of a tar get port, and forward them to a monitoring port. P ort mirroring f unctions for all layer 2 and layer 3 traf fic on a port. This feature can be used as a t roubleshooti ng tool or to enhance the secur[...]
-
Seite 378
BLADEOS 6.5.2 Applicati on Guide 378 C hapter 29: Port Mirrori ng BMD002 20, October 2010 The G8124 s upports three mon itor ports. Each moni tor port can receive mirror ed traffic f rom any number of targ et ports. BLADEOS does not support “one to man y” or “many to many ” mirroring models wher e traffic from a specific port traf fic i[...]
-
Seite 379
BMD00 220, October 2010 379 Part 9: Appendices[...]
-
Seite 380
BLADEOS 6.5.2 Applicati on Guide 380 Pa rt 9: Append ices BMD002 20, October 2010[...]
-
Seite 381
BMD00 220, October 2010 381 A PPENDIX A Glossary CNA Conver ged Netw ork Adapter . A device us ed for I/O cons olidation such as that in Conver ged En hanced Ether net (CEE) environ ments implementing Fibre Chan nel over Ethernet (FCoE). The CNA performs the duties of both a Netw ork Interface Card (NIC) for Local Area Networks (LANs) and a Host Bu[...]
-
Seite 382
BLADEOS 6.5.2 Applicati on Guide 382 G lossary BMD002 20, October 2010 T r ackin g In VRRP , a method to increase the priority of a virtual rou ter and thus master design ation (with preemption enabl ed). T racking can be very valuable in an active/active configuration . Y ou can track the fo llowing: Active IP interfaces on the W eb switch[...]
-
Seite 383
BMD00 220, October 2010 383 Index Symbols [ ] ........... ........... ................. ................. ............... 2 1 Numerics 802.1p QoS ................... ................. ................. .. 193 802.1Q VL AN t agging ............... ................. . 9 0, 204 802.1Qa z ETS ..................... ................. ........... .. 204 8[...]
-
Seite 384
BLADEOS 6.5.2 Applicati on Guide 384 In dex BMD002 20, October 2010 conf igurati on ru les CEE ...................... ................. ................. .. 192 FCoE ......... ................. ................. ............. 19 1 Trunking ........... ................. ................. ....... 104 conf iguring BGP failover .......... .........[...]
-
Seite 385
BLADEOS 6.5.2 Applicat ion Guide BMD00 220, October 2010 Index 385 I IBM Director ........... ........... ................. ............. 35 5 IBM DirectorSNMP , IBM Director ........ ............... 3 5 ICMP ................ ................. ........... ................. .... 76 IEEE standards 802.1D . ................. ................. ....[...]
-
Seite 386
BLADEOS 6.5.2 Applicati on Guide 386 In dex BMD002 20, October 2010 P packet size .................... ............ ................. ......... 88 password adminis trator a ccount ............... ............ ... 38, 68 defa ult .............. ........... ................. ......... 38, 68 user accoun t ................. ................. .....[...]
-
Seite 387
BLADEOS 6.5.2 Applicat ion Guide BMD00 220, October 2010 Index 387 S SAN .................. ........... ................. ........... 189, 192 SecurID ................... ................. ........... ............... 61 security LDAP authentication ........... ................. ......... 73 port mirroring ............... ................. .....[...]
-
Seite 388
BLADEOS 6.5.2 Applicati on Guide 388 In dex BMD002 20, October 2010 VLANs ........ ................. ................. ................. .... 47 broa dca st dom ains .............. ................. ......... 87 defa ult PVI D .......... ................. ............ ......... 89 example showing multiple VLANs ............. .... 95 FCoE ......[...]