Sonic Impact Technologies NSA 2400MX manual

1 SonicOS 5.7: Advanced Switching Fe ature Guide and Screencas t Tutorial SonicOS 5.7: Advanced Switching Feature Guide and Screencast Tutorial This solutions document des cribes ho w to configure and m anage the Switching fea ture on a SonicW ALL NSA 2400MX r unning SonicOS 5.7. A screencast tu torial on P ort Mirroring is also provided. This docu[...]

Feature Overview 2 SonicOS 5.7: Advanced Switching Fe ature Guide and Screencast Tutoria l Feature Overview This section provides an introduction to the Swit ching feature . This section contains the following subsections: • “What is Switching on the SonicW ALL NSA 2400MX?” section on page 2 • “Benefits of Switching in SonicOS” section [...]

Feature Overview 3 SonicOS 5.7: Advanced Switching Fe ature Guide and Screencas t Tutorial Benefits of Switching in SonicOS The SonicW ALL NSA 2400MX pro vides a combined securi ty and switc hing solutio n with the objective of improv ed security for all tasks. Layer 2 switc hing feat ures enhance the de ployment and interoperability of SonicW all [...]

Feature Overview 4 SonicOS 5.7: Advanced Switching Fe ature Guide and Screencast Tutoria l How Does Switching Work on the SonicWALL NSA 2400MX? The switching features hav e their o wn men u g roup in the left navigation pane of the SonicOS manag ement interface. Figure 1 Switching in SonicOS – Navigation Pane Some switching features operate on P [...]

Configuring Switching 5 SonicOS 5.7: Advanced Switching Fe ature Guide and Screencas t Tutorial Configuring Switching This section contains the following sections: • “Configuring VLAN T r unk ing” section on pag e 5 • “Configuring Rapid Spanning T ree” section on pag e 13 • “Configuring Layer 2 Discov er y” section on page 1 8 •[...]

Configuring Switching 6 SonicOS 5.7: Advanced Switching Fe ature Guide and Screencast Tutoria l Figure 2 shows the Switching > VLAN T runking pag e. The page displays the rang e of reser ved VLANs in the R e s e rv e d V L AN I n fo rm at i o n se ction, details about cur rent VLANs in the VLAN T able , and the VLAN tr unks configured on the sys[...]

Configuring Switching 7 SonicOS 5.7: Advanced Switching Fe ature Guide and Screencas t Tutorial The values displa yed on the Switch ing > V LAN T r unking pag e are described in Ta b l e 1 . T able 1 VLAN Tr un ki ng Page Description Item Descriptio n Reserved VLAN Information Starting VLAN ID The lowest ID number in the VLAN range reser ved for[...]

Configuring Switching 8 SonicOS 5.7: Advanced Switching Fe ature Guide and Screencast Tutoria l Y ou can mark certain P or tShield g roups as “T r unked”. F or infor m ation about how to do this , see the “Editing VLANs” section on page 12 . Once the P or tShield g roup is dismantled, the associated VLAN is automatically disabled on the tr [...]

Configuring Switching 9 SonicOS 5.7: Advanced Switching Fe ature Guide and Screencas t Tutorial Y ou can c hang e the VLAN ID of PortShield grou ps on the SonicW ALL NSA 2400MX appliance . This allows easy integration with existing VLAN n umbering . Unlike traditional La yer 2 sw itches, th e SonicW ALL NSA 2400MX applian ce does not allow changing[...]

Configuring Switching 10 SonicOS 5.7: Advanced Switching Fe ature Guide and Screencast Tutoria l Figure 5 shows the user interface while enabling th e local VLAN 3787 on the trun k por t, X20. Figure 5 Enabling a Lo cal VLAN on a VLAN T runk In Figu re 6 , the VL AN T a b le on th e Switching > VLAN T r unkin g pag e displays the tr unk por t, X[...]

Configuring Switching 11 SonicOS 5.7: Advanced Switching Fe ature Guide and Screencas t Tutorial Figure 7 illustrates a VLAN tr unk with two trunk por ts, bridging the Sales , Engin eering, QA, and Finance VLANs through the SonicW ALL NSA 24 00MX. Each remote VLAN is initially enabled on VLAN tr unk port X20 , causing the creation of four virtual V[...]

Configuring Switching 12 SonicOS 5.7: Advanced Switching Fe ature Guide and Screencast Tutoria l Editing VLANs T o edit a VLAN, perform the following steps: Ste p 1 On the Switching > VLAN T runking page, click the Configur e icon in the VLAN T able row for the VLAN ID you w ant to edit. Ste p 2 In the Edit Vlan for Por tShield window , do one o[...]

Configuring Switching 13 SonicOS 5.7: Advanced Switching Fe ature Guide and Screencas t Tutorial Enabling a VLAN on a Specific Trunk Port Using this method rather than the method described in “Editing VLANs” on page 12 , you can specify a single tr unk por t to be used for a particular VLAN ID . T o enable a custom VLAN ID on a specific tr unk [...]

Configuring Switching 14 SonicOS 5.7: Advanced Switching Fe ature Guide and Screencast Tutoria l allows faster spanning tree con vergence after a topolog y change, typically within 3 times the He llo i nterval, a total of 6 seconds in the default configuration. Th e or iginal STP can take 30 to 50 seconds for con vergence after a topolog y change. [...]

Configuring Switching 15 SonicOS 5.7: Advanced Switching Fe ature Guide and Screencas t Tutorial The settings displayed in the Bridg e Infor mation secti on of the Switching > Rapid Spanning T ree page are described in Ta b l e 2 . T able 2 RSTP Co nfigu rable Objects Auto detection of non-edge por ts is not suppor ted. A no n-edge port is one t[...]

Configuring Switching 16 SonicOS 5.7: Advanced Switching Fe ature Guide and Screencast Tutoria l Figure 9 illustrates the possibl e loop that is logi cally blocked when por ts in the same VLAN exi st on multiple connected switches in a netw ork. Figure 9 RSTP on VLAN Trunk Ports Detect s and Blocks Loops Between Switches Y ou can view the port sett[...]

Configuring Switching 17 SonicOS 5.7: Advanced Switching Fe ature Guide and Screencas t Tutorial Configuring Bridge Settings T o configure the Bridg e Settings on the Switching > Rapid Spanning T ree page, perfor m the following steps: Ste p 1 T o s pecify the spanning tree protocol version to use, select one of the follo w ing from the Fo r c e[...]

Configuring Switching 18 SonicOS 5.7: Advanced Switching Fe ature Guide and Screencast Tutoria l Ste p 2 In the Edit RSTP Settings window , select the Enable RSTP checkbo x to enable Rapid Sp anning T ree Protocol for this interface. Clear the c h eckbox to disable RSTP on this interface . Ste p 3 T o allow the path cost for the por t to be auto ma[...]

Configuring Switching 19 SonicOS 5.7: Advanced Switching Fe ature Guide and Screencas t Tutorial On many switches and netw o rk devices, the LLDP information is stored as a manag ement infor mation database (MIB). Simple Netw ork Manag ement Protoc ol (SNMP) is used to query the MIB for device infor m ation, including syste m name, port nam e, VLAN[...]

Configuring Switching 20 SonicOS 5.7: Advanced Switching Fe ature Guide and Screencast Tutoria l Viewing Device Information in the Layer 2 Discovery Page T o view the LLDP/LL TD discov er y results for your network, perform the following steps: Ste p 1 Enable LLDP on any switches or other network devices in your netw ork, using a command such as ?[...]

Configuring Switching 21 SonicOS 5.7: Advanced Switching Fe ature Guide and Screencas t Tutorial Configuring Link Aggregation SonicOS 5.7 suppor ts the IEEE 802.1AX-2008 Link Ag g reg ation Control Protocol (LA CP). LA CP is used when multiple netw ork ports are conn ected in parallel between tw o sw itches or between a switch and a ser ver . Link [...]

Configuring Switching 22 SonicOS 5.7: Advanced Switching Fe ature Guide and Screencast Tutoria l Figure 14 illustrates the two types of link ag gre gatio n. Figure 14 T wo Types of Link Aggregation: NSA to Serv er an d NSA to Switch Similarly to PortShield config uration, you select an in terface that represents the ag greg ated g roup . This por t[...]

Configuring Switching 23 SonicOS 5.7: Advanced Switching Fe ature Guide and Screencas t Tutorial Creating a Logical Link T o create a Logical Link, perfor m the following steps: Ste p 1 On the Switching > Link Agg reg ation pag e, click the Add b utton. Ste p 2 In the Add LAG Port window , select the interface from the Por t drop-down list. Ste [...]

Configuring Switching 24 SonicOS 5.7: Advanced Switching Fe ature Guide and Screencast Tutoria l Ste p 8 In the Add LAG Port window , select the interface for the link partner from the Por t drop-down list. Ste p 9 If you specified a k ey for the first interface (the ag g regator), clear the Auto-Detect check b ox a n d ty p e th e same key into th[...]

Configuring Switching 25 SonicOS 5.7: Advanced Switching Fe ature Guide and Screencas t Tutorial Configuring Port Mirroring Y ou can configure P ort Mir roring on the SonicW ALL NS A 2400MX to send a copy of network pac kets seen on one or more switch ports (or on a VLAN) to another switch port called the mir ror por t. By connecting to the mirr or[...]

Configuring Switching 26 SonicOS 5.7: Advanced Switching Fe ature Guide and Screencast Tutoria l Ste p 2 In the Edit Mir ror Gr oup window , type a descriptive name for the g roup into the Interface Group Name field. Ste p 3 Fo r t h e Dir ection , select one of the following: • ingr ess – Select ing ress to monitor traffic ar riving on the mir[...]

Configuring Switching 27 SonicOS 5.7: Advanced Switching Fe ature Guide and Screencas t Tutorial Configuring Layer 2 Quality of Service Quality of ser vice (QoS) refers to a method of resource control that prov ides differen t prio rity to different types of applications, data, or users . QoS can also be used to guarantee a cer tain bit rate, dela [...]

Configuring Switching 28 SonicOS 5.7: Advanced Switching Fe ature Guide and Screencast Tutoria l In SonicOS , four queues with different priority levels (low , nor mal, high, highest) are suppor ted. These are mapped to the eight levels defined in IEEE 802.1p (CoS) and cannot be changed. Ta b l e 4 shows the mapping between the CoS priority lev els[...]

Configuring Switching 29 SonicOS 5.7: Advanced Switching Fe ature Guide and Screencas t Tutorial • Strict Priorit y Queue – When Strict Priority Queue is selected, pack ets containing an 802.1p tag or DSCP marking with a priority lev el matching the Highest queue priority are forward ed or received. P ackets matching High, Nor mal or Low priori[...]

Configuring Switching 30 SonicOS 5.7: Advanced Switching Fe ature Guide and Screencast Tutoria l Configuring QoS Settings The QoS Settings table on the Switching > Layer 2 Q o S pag e lists all interfaces on the SonicW ALL NSA 2400MX. Y ou can configure the QoS settings for eac h interf ace individually or for m u ltiple i nterfaces at the same [...]

Configuring Switching 31 SonicOS 5.7: Advanced Switching Fe ature Guide and Screencas t Tutorial Ste p 5 If both Tr u s t C o S and Tr u s t D S C P are selected, do one of the following: • Select the Prefer CoS checkbo x to give preference to the Co S 802.1p tag field settings when both the 802.1p tag field and the DSCP field are present in ingr[...]

Configuring Switching 32 SonicOS 5.7: Advanced Switching Fe ature Guide and Screencast Tutoria l Ste p 5 T o enable the use of the DSCP field settings for Quality of Service on these interfaces , select the Tr u s t DSCP check box. T h e Fixed Priority c heckbox must be cleare d before you can select this checkbo x. Ste p 6 If both Tr u s t C o S a[...]

Configuring Switching 33 SonicOS 5.7: Advanced Switching Fe ature Guide and Screencas t Tutorial The Switching > Rate Control pag e, shown in Figure 19 , provides information and configuration for per-inter f ace rate limiting and flow control. Both the rate limiting and flow control features are configured on a per port basis . Figure 19 Switch[...]

Configuring Switching 34 SonicOS 5.7: Advanced Switching Fe ature Guide and Screencast Tutoria l Flow Control In SonicOS, b ack-pressure flow control on half-d uplex por ts and pause frame-based flow c ontrol on full-duplex ports are p rovided to support zero pack et loss under temporar y traffic cong estion. • Full-dupl ex flow cont rol requires[...]

Configuring Switching 35 SonicOS 5.7: Advanced Switching Fe ature Guide and Screencas t Tutorial Ste p 4 T yp e the desired ingress rate limi t in kilobits per seco nd into the In gress R ate field. T o turn off the ing ress rate limit and allow un limited traffic , type 0 (zero). The value you type will be rounded to the nearest increment, dependi[...]

Configuring Switching 36 SonicOS 5.7: Advanced Switching Fe ature Guide and Screencast Tutoria l See the following procedures for infor mation about configurin g por t security: • “Creating a Secure P or t by Adding a MA C Address Object” on pag e 36 • “Editing MA C Address Objects in Port Security Settings” on page 37 • “Deleting M[...]

Configuring Switching 37 SonicOS 5.7: Advanced Switching Fe ature Guide and Screencas t Tutorial Ste p 6 Select the zone from the Zone Assignment drop-down list. This is the zone for the computer with this MA C address. Y ou can select any zone that exists on the SonicW ALL NSA 2400MX, including custom zones and the SonicOS default zones , which ar[...]

Troublesh ooting and Verificat ion 38 SonicOS 5.7: Advanced Switching Fe ature Guide and Screencast Tutoria l Troubleshooting and Verification This section provides methods you can use to verify and troubleshoot the beha v ior of your Switching configuration. See the following sections: • “Using P or t Mir roring with Wiresh ark” on pag e 38 [...]

Troubleshooting and Verification 39 SonicOS 5.7: Advanced Switching Fe ature Guide and Screencas t Tutorial Ste p 2 In the Edit Mir ror Group window , type a name for the Mir ror Group . Ste p 3 Fo r Dir ection , select both . T his allows mir roring of traffic ar riving on, and being transmitted from, the mirrored por ts . Ste p 4 In the All Inter[...]

Troublesh ooting and Verificat ion 40 SonicOS 5.7: Advanced Switching Fe ature Guide and Screencast Tutoria l The X20, X24, and X25 interfaces are shown below on the Netw ork > Interfaces pag e . Y ou can see that all three are gigabit Ether net por ts , that the Zone for X 20 is Unassigned and it is configured as a Mir ror P or t, and that X24 [...]

Troubleshooting and Verification 41 SonicOS 5.7: Advanced Switching Fe ature Guide and Screencas t Tutorial Ste p 6 Launch Wiresh ark . Ste p 7 Do one of the following: – Click the Start Captur e button in the upper left corner , and then, in the dialog box, select the Start chec kbox for the gigabit interface connected to the Mir ror P o rt. –[...]

Troublesh ooting and Verificat ion 42 SonicOS 5.7: Advanced Switching Fe ature Guide and Screencast Tutoria l Viewing Log Event Messages for Switching A new log event, lo gstrAdvSwitch , is introduced in SonicOS 5.7 to address SonicOS Switching acti vities . It falls under a new categor y , Adv anced Switching, which can only be seen on devices wit[...]

Troubleshooting and Verification 43 SonicOS 5.7: Advanced Switching Fe ature Guide and Screencas t Tutorial Filtering the Log for Switching Events T o display only the log events related to switching, perfor m the following steps: Ste p 1 Navigate to the Log > View page in the SonicOS management interface. Ste p 2 In the Log View Settings sectio[...]

Technical FAQ 44 SonicOS 5.7: Advanced Switching Fe ature Guide and Screencast Tutoria l Technical FAQ How do I view the CAM table on the SonicWALL NSA 2400MX? The SonicOS 5.7.0.0 user interface or CLI does not provide a w ay to display the CAM, or MA C Address , table directly , but provides the same infor mation in the ARP table and on the Switch[...]

Glossary 45 SonicOS 5.7: Advanced Switching Fe ature Guide and Screencas t Tutorial Glossary BPDU Bridge Protocol Data Unit – Used in RSTP , BPDUs are special data frames used to exc hang e infor m ation about bridge IDs and root path costs. BPDUs are ex chang ed every few seconds to all o w swi tc hes to k eep track of netw ork topolog y and sta[...]

Glossary 46 SonicOS 5.7: Advanced Switching Fe ature Guide and Screencast Tutoria l Solution Document Version History V ersion Number Date Notes 1 3/30/2010 This document was created by Susan W eig and 2 5/19/2010 Added conceptual information, more details about configuration, T roubleshootin g and T echnical F A Q sections . Embedded P or t Mir r [...]