Avaya P333R-LB manuale d’uso

Avaya Installation and Co nfiguration Guide A VAYA P333R-LB S TACKABLE S WITCH S OFTWARE V ERSION 4.0 April 2003[...]

[...]

Avaya User’s Guide i Table of Contents Table of Contents .............. ....................... ......................... ....................... ........... i Safety Information ...... .......................... ...................... ....................... ............... ix FCC Notice ................. ...................... .................[...]

Table of Contents ii Avaya User’s Guide Other ............... ...................... ....................... ......................... ......... 9 Interfaces .......... ....................... ...................... .......................... ................. 9 Basic MTBF ............ ...................... ....................... ..............[...]

Table of Contents Avaya User’s Guide iii Avaya P333R-LB Front Panel .............. ......................... .......................... ........ 31 BUPS Input Connector ............. ......................... ....................... ............ 34 Chapter 7 Establishing Switch Access ..................... ...................... .................[...]

Table of Contents iv Avaya User’s Guide Gigabit Ethernet ........................ ...................... .......................... . 58 Configuring Ethernet Parameters .............. .......................... ............... 58 Auto-negotiation ........... ....................... ......................... ............. 58 Full-Duplex/Half-Duple[...]

Table of Contents Avaya User’s Guide v Overview ............. ....................... ...................... .......................... ............ 83 IP Multicast CLI Commands ................. ...................... ....................... . 84 IP Multicast Implementation in th e Avaya P333R-LB .................... 84 Stack Health ............[...]

Table of Contents vi Avaya User’s Guide NetBIOS Re-broadcast Configuration ........ ........ ....................... .................. 107 NetBIOS Overview ............. ...................... .......................... ................ 107 NetBIOS Re-broadcast Configuration CLI Commands ................. 107 ............. ......................[...]

Table of Contents Avaya User’s Guide vii Non-Transparent Routing Firewall Load Balancing ....................... 16 Implementation ............. ...................... .......................... ............ 16 NAT Configuration Example ............... ....................... ............ 17 Static NAT Configuration Example ......................[...]

Table of Contents viii Avaya User’s Guide Round Robin ...... ....................... ...................... .......................... . 52 Hash .......... ...................... ....................... ....................... ............... 52 MinMiss Hash ............. ...................... ....................... .................. 53 Weight[...]

Avaya P333R-LB User’s Guide ix Before you Install the P333R-LB Safety Information Caution: The Avaya P330 switch an d modules contain components sensit ive to electrostatic discharge. Do not touch the ci rcuit boards unless instructed to do so. Caution: Do not leave any slots open. Cover em pty s lots using the blanking plates supplied. Warning: [...]

x Avaya P333R-LB User’s Guide • Information displayed on sc reen is displayed in computer font. • Variables that you supp ly are in pointed brackets <>. • Optional keywords are in square brackets []. • Alternative but mandatory keyword s are grouped in braces {} and separated by a vertical bar |. • Lists of parameters from which y[...]

Avaya A VAYA P333R-LB S ECTION 1: O VERVIEW OF THE P330[...]

[...]

Avaya P333R-LB User’s Guide 1 Chapter 1 Avaya P333R-LB Overview Introduction The Avaya P330 family of stackable Ethern et workgroup switches includes a range of modules with 10/100/1000 Mbps port s, a Layer 3 capability, and ATM and WAN expansion modules. The Avaya switch has 24x10/100 Mbps ports and an Expansion Module slot. The optional e xpans[...]

Chapter 1 Avaya P333R-LB Overview 2 Avaya P333R-LB User’s Guide • Connection through Telnet from the front panel ports of any switch, with: — multiple levels of password pr otection — login and inactivity timeouts Avaya P330 Network Management Comprehensive network manageme nt is a key component of today’s networks. Therefore we have prov[...]

Chapter 1 Avaya P333R-LB Overview Avaya P333R-LB User’s Guide 3 SMON The P330 supports Avaya’s ground-brea king SMON Switched Network Monitoring, which the IETF has now ad opted as a standard (RFC2613). SMON provides unprecedented top-down monitori ng of switched netw ork traffic at the following levels: • Enterprise Monitoring • Device Mon[...]

Chapter 1 Avaya P333R-LB Overview 4 Avaya P333R-LB User’s Guide[...]

Avaya P333R-LB User’s Guide 5 Chapter 2 Standards and Compatibility Avaya P330 Standards Supported The Avaya P330 complies with the following standards. IEEE • 802.3x Flow Control on all ports • 802.1Q VLAN Tagging supp ort on all ports • 802.1p Priority Tagging compatible on all ports • 802.1D Bridges and STA • 802.1w Rapid Spanning Tr[...]

Chapter 2 Standards and Compatibility 6 Avaya P333R-LB User’s Guide • Internet Standard Subnetting Procedure - RFC 950 • Bootstrap Protocol - RCF 951 • Using ARP to implement transparent subnet gateways - RFC 1027 • Routing Information Protocol - RCF 1058 • Hosts Extensions for IP Multicasting - RFC 1112 • Requirements for Internet Ho[...]

Avaya P333R-LB User’s Guide 7 Chapter 3 Specifications Avaya P333R-LB Switch Physical Power Requirements – AC Power Requirements – DC Environmental Height 2U (88 mm, 3.5”) Width 482.6 mm (19”) Depth 450 mm (17.7”) Weight 7.5 kg (16.5 lb) Input voltage 100 to 240 VAC, 50/60 Hz Power dissipation 150 W max Input current 5.3 A Input voltage[...]

Chapter 3 8 Avaya P333R-LB User’s Guide Safety • UL for US approved according to UL195O Std. • C-UL(UL for Canada) approved according to C22.2 No.950 Std. • CE for Europe approved according to EN 60950 Std. • Laser components are Laser Class I approved: — EN-60825/IEC-82 5 for Europe — FDA CFR 1040 for USA Safety - AC Version • Over[...]

Chapter 3 Avaya P333R-LB User’s Guide 9 Other Approved according to: • CLEI Code: According to Tecordia (Bellcore) KS-22022 Standard • NEBS Level 3 (optional mounting br ackets) Interfaces •. • RS-232 for terminal setup via RJ45 connector on front panel. Basic MTBF • hrs minimum Stacking Module Table A.1 Stacking Module Expansion Module[...]

Chapter 3 10 Avaya P333R-LB User’s Guide single mode trans ceivers are Class 1 laser products. They comply with IEC 825-1 and Food and Drug Administration (FDA) 21 CFR 1040.10 a nd 1040.11. The transceivers must be operated und er recommended operating conditions. Laser Classification Note: Class 1 lasers are inherently safe under reasonably fore[...]

Chapter 3 Avaya P333R-LB User’s Guide 11 Transmit power (62.5 µ m and 50 µ m MMF): Min. -11.5 dbm, Max. -3 dbm Receive power (9 µ m SMF, 62.5 µ m and 50 µ m MMF): Min. -20 dbm, Max. -3 dbm Fast Ethernet Fiber Expansion Module Ethernet/Fast Ethernet Ex pansion Module Table A.3 Fiber Fas t Et hernet Expansion Module Name Number of Ports Interf[...]

Chapter 3 12 Avaya P333R-LB User’s Guide GBIC Expansion Module The Avaya X330G 2 Expansion Module is th e GBIC (1.25 Gbit/s Gigab it Ethernet) Expansion Module for the Avaya P 330 family of stackable switches. Note: In order to use this module the Av aya P330 switch must must have Embedded S/W Version 2.2 or hig her. The X330G2 can be used either[...]

Chapter 3 Avaya P333R-LB User’s Guide 13 Avaya Approved GBIC Transceivers Caution: All Avaya approved GBICs are 5 V. Do not insert a 3.3V GBIC. Avaya supplies the following t wo GBIC transceivers for the A vaya P330 X330G2 Expansion Modules. You can order the se directly from your local Avaya representative using th e PEC or COM Codes: In additio[...]

Chapter 3 14 Avaya P333R-LB User’s Guide Agency Approva l The transce ivers comply with : • EMC Emission: US – FCC Part 15, Subpart B, Class A; Europe – EN55022 class A • Immunity: EN50082-1 • Safety: UL for US UL 1950 Std., C-UL (UL for Canada) C22.2 No.950 Std., Food and Drug Administ ration (FDA) 21 CFR 1040.10 and 1040.11, and CE fo[...]

Chapter 3 Avaya P333R-LB User’s Guide 15 Laser product. They comply with EN 6082 5-1 and Food and Dru g Administration (FDA) 21 CFR 1040.10 and 1040.11. The Modules must be operate d under recommended operating conditions. Safety Inform ation Single-mode Module Laser Classification Note: Class 1 lasers ar e inherently safe unde r reasonably fores[...]

Chapter 3 16 Avaya P333R-LB User’s Guide 100Base-T Fast Ethernet port, and a Console port. • The X330W-2USP contains 2 USP (U nive rsal Serial Ports) , one 10/100Base-T Fast Ethernet port and one Console por t. An Avaya P330 stack can have X330WAN access router modules inserted in each of the switches in the stack with an expans ion slot. A max[...]

Avaya A VAYA P333R-LB S ECTION 2: I NSTALLING THE P330[...]

[...]

Avaya P333R-LB User’s Guide 19 Chapter 4 Installation This chapter describes the basic hardware Installation procedures for the Avaya P330. Required Tools Make sure you have the following tools at hand before undertaking the Install a tion procedures: • Philips ( cross-blade ) screwdrive r Site Preparation Avaya P330 c an be mounted alone or in[...]

Chapter 4 I nstallation 20 Avaya P333R-LB User’s Guide Table 4.3 Power Requirements – DC Power dissipation 150 W max Input current 5.3 A Input voltage -36 to -72 VDC Power dissipation 150 W max Input current 5.1 A max[...]

Chapter 4 Installation Avaya P333R-LB User’s Guide 21 Rack Mounting (Optional) The Avaya P330 case fits in most standard 19-inch racks. Avaya P330 is 2U (88mm, 3.5”) high. Place the Avaya P330 in the rack as follows: 1 Snap open the hinged ends of the front panel to reveal the fixing holes. 2 Insert the unit into the rack. Ensure that the four [...]

Chapter 4 I nstallation 22 Avaya P333R-LB User’s Guide Stacking Switches (Optional) Avaya P330 is a stackable switching system . Stacking involves the mounting and connecting of stacking sub-modules in the P 330 switch. Installing the X330STK Stacking Sub-module in the P330 Caution: The stacking sub-modules contain comp onents sensitive to electr[...]

Chapter 4 Installation Avaya P333R-LB User’s Guide 23 These are the same cables that are used with all P330 family modules. To connect stacked switches: Note: When adding a module to an existing stack, first connect the stacking cables and then power up the module. 1 Plug the light grey connector of the Shor t Octaplane cable into the port marked[...]

Chapter 4 I nstallation 24 Avaya P333R-LB User’s Guide Figur e 4.3 Avaya P330 Stack Connections Cable to Upper Unit Cable t o Lower Unit Cable to Upper Unit Cable t o Lower Unit Cable to Upper Unit Cable t o Lower Unit Cable to Upper Unit Cable t o Lower Unit Cable to Upper Unit Cable t o Lower Unit Power S upply Connecto r BUPS Connector Power S[...]

Chapter 4 Installation Avaya P333R-LB User’s Guide 25 Installing Expansion Sub-modules Caution: The expansion sub-modules contain comp onents sensitive to e lectrostatic discharge. Do not touch the circuit board unless instructed to do so. Installing the Expansion Sub-module in to the Avaya P330 1 Remove the blanking plate or ot her sub-modu le ([...]

Chapter 4 I nstallation 26 Avaya P333R-LB User’s Guide Making Connections to Network Equipment This section describes the physical connections that you can make between the Avaya P330 switch and other network equipment. Prerequisites Make sure you have the following before attempting to connect network equipment to the P330 switch: • a list of [...]

Chapter 4 Installation Avaya P333R-LB User’s Guide 27 Table 4.4 Gigabit Ethernet Cabling Gigabit Interface Fiber Type Diameter ( µ m) Modal Bandwidth (MhzKm) Maximum Distance (m) Minimum Distance (m) Wavelength (nm) 1000BASE-SX MM 62.5 160 220 2 850 1000BASE-SX MM 62.5 200 275 2 850 1000BASE-SX MM 50 400 500 2 850 1000BASE-SX MM 50 500 550 2 850[...]

Chapter 4 I nstallation 28 Avaya P333R-LB User’s Guide[...]

Avaya P333R-LB User’s Guide 29 Chapter 5 Powering Up the Avaya P330 This section describe s the procedures for powering up the Avaya P330 unit. Powering On – Avay a P330 Module AC For the AC input version of the Avaya P330, insert the AC power cord into the power inlet in the back of the unit. The unit powers up. If you are using a BUPS , inser[...]

Chapter 5 P owering Up the Avaya P330 30 Avaya P333R-LB User’s Guide Post-Installation The following indicate that you have performed the installation proc edure correctly: If you do not receive the appropriate indication, please refer to "Troubleshooting the Installation". Table 5.1 Post-In stallation Indications Procedure Indicat ion [...]

Avaya P333R-LB User’s Guide 31 Chapter 6 Avaya P333R-LB Front and Back Panels Avaya P333R-LB Front Panel The Avaya front panel contains LEDs, controls, conne ctors and an expansion Module slot, as well as a console connec t or. The status LEDs and control buttons provide at-a-glance informati on. The front panel LEDs consist of Port LEDs and Func[...]

Chapter 6 Avaya P333R-LB Front and Back Panels 32 Avaya P333R-LB User’s Guide Note: All LEDs are lit during a reset. Table 6.1 Avaya LED Descriptions LED Name Description LED Status PWR Power status OFF – power is off ON – power is on Blink – using BUP S only OPR CPU operation OFF – Module is booting ON – Normal operation SYS System Sta[...]

Chapter 6 Avaya P333R-LB Front and Back Panels Avaya P333R-LB User’s Guide 33 Note: The Port LEDs of the are numbered from . Expansion Module ports are numbered from 51. Port LED numbers 49-50 are reserved. FC Flow Cont rol OFF – No Flow Control ON – Symmet ric/Asymmetric Flow C ontrol mode is enabled and port is in full duplex mode. Hspd Hig[...]

Chapter 6 Avaya P333R-LB Front and Back Panels 34 Avaya P333R-LB User’s Guide BUPS Input Connector The BUPS input connector is a 5 VDC conne ctor for use with the Avaya P330 BUPS unit only. A BUPS Input sticker appear s directly to the right the BUPS input connector. Figur e 6.3 BUPS Input Connector Sticker[...]

Avaya P333R-LB User’s Guide 35 Chapter 7 Establishing Switch Access This chapter de scribes vario us method s for accessing the Avaya P330 CLI, including: • a terminal to the serial port on the switch • P330 Sessions • a workstation running a Telnet session connected via the network • a remote terminal/workstation at tached via a modem (P[...]

Chapter 7 E stablishing Switch Acces s 36 Avaya P333R-LB User’s Guide P330 Sessions You can use sess ions to switch betwee n the CLI of P330 modules / other stack entities (for example, an X330 ATM or WAN entity plugged into a specific P330 switch or with the G700 Media Gateway Pr ecessor) or to switch between Layer 2 and Layer 3 commands in the [...]

Chapter 7 Establishing Switch Access Avaya P333R-LB User’s Guide 37 4 At the prompt, type: set interface inband <vlan> <ip_address> <netmask> Replace <vlan> , <ip_address> and <netmask> with the VLAN, IP address and net mask of the stack. 5 Press Enter to save the IP address and net mask. 6 At the prompt, type [...]

Chapter 7 E stablishing Switch Acces s 38 Avaya P333R-LB User’s Guide Establishing a Modem (PPP) Connection with the P330 Overview Point-to-Point Protocol (PPP) provides a Layer 2 method for transporting multi- protocol datagrams over modem links. Connecting a Modem to the Consol e Port A PPP connection with a modem can be esta blished only after[...]

Avaya P333R-LB User’s Guide 39 Chapter 8 User Authentication Introduction A secure system provides safeguards to in sure that only auth orized personnel can perform configuration procedures. In Avaya P330, these safeguards form part of the CLI architecture and conventions. CLI Architecture The P330 stack supports both Layer 2 switching and Layer [...]

Chapter 8 User Authentication 40 Avaya P333R-LB User’s Guide user account are established using the username command. Switching between the entities, d oes not effect the security level since security levels are established specifically for each user . For example, if the operator with a privileged security level in the Switch en ti ty switches t[...]

Chapter 8 User Authentication Avaya P333R-LB User’s Guide 41 Exiting th e Supervisor Level To exit the Supervisor level, type the command exit . Entering the CLI To enter the CLI, e nter your username and password. Your access level is indicated in the prompt as follows: The User level prompt is shown below: Cajun_P330-N> The Privileged level [...]

Chapter 8 User Authentication 42 Avaya P333R-LB User’s Guide Authenticati on Request to the RADIUS server in an attempt to authenticate the user remotely. If the user name and password ar e authenticated, then the RADIUS server responds to the switch with an A uthen tication Acknowledgement that includes information on the user' s privileges[...]

Chapter 8 User Authentication Avaya P333R-LB User’s Guide 43 Figure 8.1 illustrates the RADIUS authen tication procedure: Figure 8.1 RADIUS Auth entication Pr ocedure Radius Commands User attempts login Local User account authenticated in switch? Perform log-in according to user's privilieg e level to switch Yes Authentication request sent t[...]

Chapter 8 User Authentication 44 Avaya P333R-LB User’s Guide The following radius commands are accessible from Supervisor l evel. For a complete description of the RADIUS CLI commands, including syntax and output examples, refer to Avaya P330: Refer ence Guide . In order to... Use the following command... Enable or disable authentication for the [...]

Chapter 8 User Authentication Avaya P333R-LB User’s Guide 45 Allowed Managers With the Allowed Managers feature, th e network manager can determine who may or may not gain management access to the switch. The feature can be enabled or disabled (default is disabled). Whe n enable d, only those users that are configured in the Allowed Managers tabl[...]

Chapter 8 User Authentication 46 Avaya P333R-LB User’s Guide[...]

Avaya A VAYA P333R-LB S ECTION 3: C ONFIGURATION OF THE P330[...]

[...]

Avaya P333R-LB User’s Guide 49 Chapter 9 Basic Switch Configuration Introduction This chapter describes the parameters you can define for the chassis, such as its name and location, time parameters, and so on. Use the CLI commands briefly described below for configuring the display on you r terminal or workstation. In order to... Use the foll owi[...]

Chapter 9 B asic Switch Configuration 50 Avaya P333R-LB User’s Guide System Parameter Configuration Identifying the system In order to make a P330 switch easier to identify, you can define a name for the switch, contact information for the switch te chnician and the location of the switch in the organization. Operating parameters You can use the [...]

Chapter 9 Basic Switch Configuration Avaya P333R-LB User’s Guide 51 Network Time Acquiring Protoc ols Parameter Configurat ion The P330 can acquire the time form a Network Time Server. P330 supports the SNTP Protocol (RFC 958) over UDP port 123 or TIME protocol over UDP port 37. Use the CLI commands briefly described below for configuri ng and di[...]

Chapter 9 B asic Switch Configuration 52 Avaya P333R-LB User’s Guide[...]

Avaya P333R-LB User’s Guide 53 Chapter 10 Default Settings of the P330 This section describe s the procedures for the first-time configura t ion of the A vaya P330. The factory defaults are set out in detail in the tables included in this chapter. Configuring the Switch The Avaya P330 may be configured using the text-based Command Line Interface [...]

Chapter 10 Default Settings of the P330 54 Avaya P333R-LB User’s Guide Timezone offset 0 hours SNMP communities: Read-only Read-write Trap SNMP Public Public Public SNMP retries number 3 SNMP timeout 2000 Seconds SNMP authentica tion trap Disabled CLI timeout 15 Minutes User Name/Password root/root Table 10.2 Default Port Settings Function Defaul[...]

Chapter 10 Default Settings of the P330 Avaya P333R-LB User’s Guide 55 Note: Functions operate in their default settings unless configured otherwi se. Port priority 0 0 0 Spanning Tree cost 20 20 4 Spanning Tree port priority 128 128 128 1 Ensure that the other side is al so set to Autonegotiati on Enabled Table 10.2 Default Port Settings Functio[...]

Chapter 10 Default Settings of the P330 56 Avaya P333R-LB User’s Guide[...]

Avaya P333R-LB User’s Guide 57 Chapter 11 Avaya P330 Layer 2 Features This section describes the Avaya P330 Layer 2 features. It provides the basic procedures for configuring the P330 for Layer 2 operation. Overview The P330 family supports a range of Layer 2 features. Ea ch feature has CLI commands associated with it. These command s are used to[...]

Chapter 11 Avaya P330 Layer 2 Features 58 Avaya P333R-LB User’s Guide Fast Ethernet Fast Ethernet is a newer ver sion of Ethern et, supporting data transfer rates of 100 Mbps. Fast Ethernet is su fficiently similar to Ethernet to support the use of most existing Ethernet applications and network management to ols. Fast Ethernet is also known as 1[...]

Chapter 11 Avaya P330 Layer 2 Features Avaya P333R-LB User’s Guide 59 Flow Control The process of adjusting the flow of data from one de v ice to another to ensure that the receiving device can handle all of th e incoming data. This is particularl y important where the sending device is capabl e of sending data much faster than the receiving devi[...]

Chapter 11 Avaya P330 Layer 2 Features 60 Avaya P333R-LB User’s Guide • MM-MM-MM-SS -SS-SS The first half of a MAC address contains th e ID number of the device manufacturer. These IDs are regulated by an In ternet st andards body. The second half of a MAC address represents the serial number assign ed to the device by the manufacturer. CAM Tab[...]

Chapter 11 Avaya P330 Layer 2 Features Avaya P333R-LB User’s Guide 61 Ethernet Implementa tion in the Avaya P333R-LB This section describes the implementation of the Ethernet feature in the Avaya P333R-LB : • Speed — 10/100 and 1 G ports • Priority queuing — 2 queues • CAM size — 4K addresses Set the priority level of a port set port [...]

Chapter 11 Avaya P330 Layer 2 Features 62 Avaya P333R-LB User’s Guide VLAN Configuration VLAN Overvi ew A VLAN is made up of a group of devices on one or more LANs that are configured so that they operate as if they form an independent LAN, when in fact they may be located on a number of different LAN segments. VLANs can be used to group together[...]

Chapter 11 Avaya P330 Layer 2 Features Avaya P333R-LB User’s Guide 63 Marketing (Mktg). Each VLAN has several ph ysical ports assigned to i t with PC’s connected to those ports. When traffic flows from a PC on the Sales VLAN for example, that traffic is only forwarded out the other ports assigned to that VLAN. Thus, the Engineeri ng and Mk tg V[...]

Chapter 11 Avaya P330 Layer 2 Features 64 Avaya P333R-LB User’s Guide three available Port Mult i-VLAN binding modes are: • Bind to All - the port is programmed to support the entire 3K VLANs range. Traffic from any VLAN i s forwarded through a port defined as “Bind to All”. This is intended mainly for easy backbone link configurati on • [...]

Chapter 11 Avaya P330 Layer 2 Features Avaya P333R-LB User’s Guide 65 The following table contains a list of the CLI commands for the VLAN feature. The rules of syntax and output examples are all set out in detail in the Reference Guide . Table 11.2 VLAN CLI Commands In order to... Use the foll owing command... Assign the Port VLAN ID (PVID) set [...]

Chapter 11 Avaya P330 Layer 2 Features 66 Avaya P333R-LB User’s Guide VLAN Impleme ntation in the A vaya P333R-LB This section describes the implementati on of the VLAN feature in the Avaya P333R- LB : • No. of VLANs — 1024 tagged VLANs ranging from 1 to 3071[...]

Chapter 11 Avaya P330 Layer 2 Features Avaya P333R-LB User’s Guide 67 Port Based Network Access Control (PBNAC) Port Based Network Access Control (IE EE 802.1X) is a method for performing authentication to obtain access to IEEE 802 LANs. The protocol defines an interaction between 3 entitites: • Supplicant — an entity at one end of a point-to[...]

Chapter 11 Avaya P330 Layer 2 Features 68 Avaya P333R-LB User’s Guide Note: I f e i t h e r P B N A C o r S T P / R S T P a r e i n a b l o c king state, the final state of the port will be blocked. • When PBNAC is a ctivated, the application immedia tely places all ports in a blocking state unless they were declared "Force Authenticate &q[...]

Chapter 11 Avaya P330 Layer 2 Features Avaya P333R-LB User’s Guide 69 PBNAC CLI Commands In order to... Use the foll owing command... Configure dot1x on a syst em set dot1x Disable dot1x on all ports and return to default values clear dot1x config Display the system dot1x capabilities, protocol version, and timer values show dot1x Display all the[...]

Chapter 11 Avaya P330 Layer 2 Features 70 Avaya P333R-LB User’s Guide Globally enable/disable 802.1x set dot1x system-auth-control enable/disable Set dot1x control parameter pe r port set port dot1x port-control Initialize port dot1x set port dot1x initialize Set the port to re-au thenticate set port dot1x re-authenticate Set dot1x re-authenticat[...]

Chapter 11 Avaya P330 Layer 2 Features Avaya P333R-LB User’s Guide 71 Spanning Tree Protocol Overview Avaya P330 devices support both common S p anning Tree protocol (802.1d) and the enhanced Rapid Spanning Tree protocol ( 802.1w). The 802.1w is a faster and more sophisticated version of the 802.1d (STP) st andard. Spanning Tree makes it possible[...]

Chapter 11 Avaya P330 Layer 2 Features 72 Avaya P333R-LB User’s Guide Rapid Spanning Tree Protocol (RSTP) About the 802.1w Standard The enhanced feature set of the 802.1w standard includes: • Bridge Protocol Data Unit (BPDU) type 2 • New port roles: Alternate port, Backup port • Direct handshaking be tween adjacent bridges regarding a desir[...]

Chapter 11 Avaya P330 Layer 2 Features Avaya P333R-LB User’s Guide 73 Note: You must manual ly configure uplink and backbone ports (including LAG logical ports) to be "non-edge" ports, using the CLI command set port edge admin state. • Point-to-point Link ports — This port type applies only to ports interconnecting RSTP compliant sw[...]

Chapter 11 Avaya P330 Layer 2 Features 74 Avaya P333R-LB User’s Guide • The 802.1w standard defines differently the default path cost for a port compared to STP (802.1d). In order to avoid network topology change when migrating to RSTP, the STP path co st is preserved when changing the spanning tree version to RSTP. You can use the defa ult RST[...]

Chapter 11 Avaya P330 Layer 2 Features Avaya P333R-LB User’s Guide 75 S e t t h e p o r t a s a n R S T P p o r t ( a n d n o t as a common STA port) set port spantree force-protocol- migration Display a port’s edge adm in and operational RSTP state show port edge state Set the port as an RSTP edge port or non-edge port set port edge admin stat[...]

Chapter 11 Avaya P330 Layer 2 Features 76 Avaya P333R-LB User’s Guide MAC Security The MAC security function is intended to fi lter incoming frames (from the line) with an unauthorized source MAC address (SA). MAC Security I mplementation in P330 When a frame is received on a secured port, its SA is ch ecked against the MAC Address Table. If eith[...]

Chapter 11 Avaya P330 Layer 2 Features Avaya P333R-LB User’s Guide 77 Enable or disable MAC security on a port set port security Add a unicast MAC ad dress into the CAM table of a secured port (session command) set secure mac Remove a unicast MAC address from CAM table of a secured port (session command) clear secure mac Display the status of the[...]

Chapter 11 Avaya P330 Layer 2 Features 78 Avaya P333R-LB User’s Guide LAG LAG Overview A LAG uses multiple ports to create a high bandwidth connection with another device. For example: Assi gning four 100B ASE-T ports t o a LAG on an Avaya P330 allows the switch to communicate at an effective rate of 400 Mbps with anot her switch. LAGs provide a [...]

Chapter 11 Avaya P330 Layer 2 Features Avaya P333R-LB User’s Guide 79 LAG Implementation in the Avaya P330 Family of Produc ts This section describes the implementation of the LAG feature in the P330 Family of products. The P333R-LB su pports up to 5 LAGs: • Up to three LAGs from three groups of 8 10/100 Mbps p orts: — Logical port 101 — po[...]

Chapter 11 Avaya P330 Layer 2 Features 80 Avaya P333R-LB User’s Guide Port Redundancy Port redundancy involves the duplication of devices, services, or connections, so that, in the event of a failure, the redundant device, service, or connection can take over for the one that failed. In addition to Link Aggr egation Groups—which compri se the b[...]

Chapter 11 Avaya P330 Layer 2 Features Avaya P333R-LB User’s Guide 81 — “switchback-interval” — the minimum time (in se conds) that the primary port link has to be up (following failur e) before the system switches back to the primary port. The “non e” parameter , if configured, pr events switching back to the primary . Intermodule Po[...]

Chapter 11 Avaya P330 Layer 2 Features 82 Avaya P333R-LB User’s Guide Disable the defined port redundancy schemes set port redundancy disable Define the timers that cont rol the port redundancy operation set port redundancy-interval Display information on port redundancy schemes. show port redundancy Define the switch’s unique intermodule redun[...]

Chapter 11 Avaya P330 Layer 2 Features Avaya P333R-LB User’s Guide 83 IP Multicast Filtering Overview IP Multicast is a method of sending a single copy of an IP packet to multip le destinations. It can be used by different applications including vide o streaming and video conferencing. The Multicast packet is forwarded from the sender to the r ec[...]

Chapter 11 Avaya P330 Layer 2 Features 84 Avaya P333R-LB User’s Guide IP Multicast CLI Comma nds The following table contains a list of the CLI commands for the IP Multicast feature. The rules of syntax and output exampl es are a ll set out in detail in the Reference Guide . Table 11.7 I P Multicast CLI Commands IP Multicast Implementation in the[...]

Chapter 11 Avaya P330 Layer 2 Features Avaya P333R-LB User’s Guide 85 Stack Health The P330 software provides a Stack Helath feature for verifying the int egrity of the P330 stack cascading module and cables. Overview The Stack Health feature will identify de fective modules and cables that may be installed in the P330 stack. The Stack Health alg[...]

Chapter 11 Avaya P330 Layer 2 Features 86 Avaya P333R-LB User’s Guide Port Classification Overview With the P330 , you can classi fy any port as regular or valuable. S etting a port to valuable means that, in case of Ethernet link failu re of that port, a link fault trap can be sent even when the port is disabled and a fast aging operatio n on th[...]

Chapter 11 Avaya P330 Layer 2 Features Avaya P333R-LB User’s Guide 87 Stack Redundancy In the unlikely event that a P 330 switch or Octaplane link should fail, stack int egrity is maintained if the redundant cabl e is connected to the stack. The broken link is bypassed and data transm ission continue s uninterrupted. The single management IP addr[...]

Chapter 11 Avaya P330 Layer 2 Features 88 Avaya P333R-LB User’s Guide[...]

Avaya P333R-LB User’s Guide 89 Chapter 12 Avaya P330 Layer 3 Features Introduction This section describes the Avaya P330 Layer 3 features. It provides the basic procedures for configuring the P330 for Layer 3 operation. What is Routin g? Routing enables transfer of a data packet from source to destination using a device called a router. Routing i[...]

Chapter 12 Avaya P330 Layer 3 Features 90 Avaya P333R-LB User’s Guide Figur e 12.1 Rout ing The relation between the d estination host ’s protocol address and its physical address is obtained by the routers using the ARP re quest/reply mechanism, and the information is stored within the ARP tabl e in the router (see “The ARP Table“ on page [...]

Chapter 12 Avaya P330 Layer 3 Features Avaya P333R-LB User’s Guide 91 Routing Configuration Forwarding The P330 forwards IP packets between IP ne tworks. When it receives an IP pack et through one of its interfaces, it forwards the packet through one of its interfaces. The P330 supports multinetting, enabling it to forw ard packets between IP su [...]

Chapter 12 Avaya P330 Layer 3 Features 92 Avaya P333R-LB User’s Guide IP Configuration IP Configuration CLI Comman ds In order to... Use the following command... Enable IP routing ip routing Set ICMP error messages ip icmp-errors Specify the format of netmasks in the show command output ip netmask-format Create and/or enter the Inter face Configu[...]

Chapter 12 Avaya P330 Layer 3 Features Avaya P333R-LB User’s Guide 93 Assigning Initial Router Parameters To configure the init ial router parame te rs perform the f ollowing via th e CLI: 1E n t e r set device-mode router and press Enter. You will be prompted to reset the module. 2T y p e y . Wait for the module to restart an d for the CLI promp[...]

Chapter 12 Avaya P330 Layer 3 Features 94 Avaya P333R-LB User’s Guide Note: If the IP interface is on VL AN #1, continue with step 7. 6 Create the management/routing VLAN. Use the command set vlan <Vlan-id> name <Vlan-name> replacing <Vlan-id> by the VLAN number, and <Vlan-name> by the VLAN name. Press Enter. 7 Create an I[...]

Chapter 12 Avaya P330 Layer 3 Features Avaya P333R-LB User’s Guide 95 RIP (Routing Interchange Protocol) Configuration RIP Overview RIP is a “distance vector p rotocol”— that is , the rout er decides which path to use on distance (the number of intermediate hops ). In order for this protocol to work correctly, all of the routers (and possib[...]

Chapter 12 Avaya P330 Layer 3 Features 96 Avaya P333R-LB User’s Guide RIP2 RIP2 overcomes some of the shortcomings of RIP. The table below sum marizes the differences between RIP and RIP2. RIP CLI Commands Table 12.1 DIfferences Between RIP and RIP2 RIP2 RI P Multicast addressing Broadcast Addr essing Event-driven Timer-based (update every 30 sec[...]

Chapter 12 Avaya P330 Layer 3 Features Avaya P333R-LB User’s Guide 97 Specify the t ype of authentication used in RIP Version 2 packets ip rip authentication mode Set the authen tication string used on the interface ip rip authentication key Specify the RIP timers values timers basic In order to... Use the foll owing command...[...]

Chapter 12 Avaya P330 Layer 3 Features 98 Avaya P333R-LB User’s Guide OSPF (Open Shortest Path First) Config uration OSPF Overview OSPF is a routing protocol developed for IP networks based on the shortest path first or link-state algorithm. It was introdu ced to overcome the limitations of RIP in increasingly complex network designs. OSPF is bas[...]

Chapter 12 Avaya P330 Layer 3 Features Avaya P333R-LB User’s Guide 99 OSPF CLI Commands In order to... Use the foll owing command... Enable OSPF protocol router ospf Configure th e area ID of the ro uter area Configure r outer iden tity ip ospf ro uter-id Configure a passive ospf interface passive-interf ace Redistribute routing information from [...]

Chapter 12 Avaya P330 Layer 3 Features 100 Avaya P333R-LB User’s Guide Static Routing Configuration Static Routing Overvie w When dynamic routing protocols (RIP or OSPF) are not appropriate, you can manually configure static routes to ind icate the next hop on the path to the final packet destination. A static route becomes inactive if the interf[...]

Chapter 12 Avaya P330 Layer 3 Features Avaya P333R-LB User’s Guide 101 Route Preferences The routing table may contain routes from different sources. Routes to a certain destination may be learned independently from RIP and from OSPF, and at the same time, a static route can also be configured to the same dest ination. While metrics are used to c[...]

Chapter 12 Avaya P330 Layer 3 Features 102 Avaya P333R-LB User’s Guide Route Redistribution Route redistribu tion is the interaction of mult iple routing protocols. OSPF and RIP can be operated concurrently in the P330. In this case, the P330 can be configured to redistribute routes learned from one protoc ol into the domain of the other routing [...]

Chapter 12 Avaya P330 Layer 3 Features Avaya P333R-LB User’s Guide 103 ARP (Address Resolu tion Protocol) Table Configuration ARP Overview IP logical network addresses are inde pendent of physical addresses. Since the physical address must be used to convey data in the form of a frame from one device to another , a mechanism is required to acquir[...]

Chapter 12 Avaya P330 Layer 3 Features 104 Avaya P333R-LB User’s Guide The ARP Table The ARP table is used to store recently us ed pairs of IP/MAC addresses. This saves time and communication costs, since the host looks in the ARP cache first when transmitting a packet. If the informatio n is not there, then the hos t sends an ARP Request (see Fi[...]

Chapter 12 Avaya P330 Layer 3 Features Avaya P333R-LB User’s Guide 105 BOOTP/DHCP (Dynamic Host Co nfiguration Protocol) Relay Configuration BOOTP/DHCP Overview BOOTP Short for Bootstrap Protocol, BootP is an In ternet protocol that enables a diskless workstation to discove r its own IP address, the IP address of a BOOTP server on the network, an[...]

Chapter 12 Avaya P330 Layer 3 Features 106 Avaya P333R-LB User’s Guide The DHCP/BOOTP server uses the relayed networ k information to decide from which subnet the address should be alloca ted. Therefore, the DHCP/BOOTP server must be configured to allocate addresses from the relayed networ ks configured on the P330. DHCP/BOOTP Relay in P330 is co[...]

Chapter 12 Avaya P330 Layer 3 Features Avaya P333R-LB User’s Guide 107 NetBIOS Re-broadcast Configuration NetBIOS Overview Short for Network Basic Input Output System, an application programming interface (API) that augments the DOS BIOS by adding special functions for local- area networks (LANs). Almost all LANs for PCs are based on the NetBIOS.[...]

Chapter 12 Avaya P330 Layer 3 Features 108 Avaya P333R-LB User’s Guide Policy Configuration Policy Configuratio n Overview The P330 supports QoS (Quality of Serv ice) by using multiple priority levels and IEEE 802.1p priority tagging to ensure that data and voice receive the necessary levels of service. The Avaya P330 can enforce QoS policy on ro[...]

Chapter 12 Avaya P330 Layer 3 Features Avaya P333R-LB User’s Guide 109 Enforcement P333R-LB can enforce policy rules on traffic addressed to its interfaces. This feature enables you to block any configuration (e.g., SNMP, TELNET, and HTTP) of the router/load balancer. Default List Behavior P333R-LB has a default list which is always active. The d[...]

Chapter 12 Avaya P330 Layer 3 Features 110 Avaya P333R-LB User’s Guide Create a specific policy rule ip access-list Delete a specific pol icy rule no ip access-list Check the policy for a simulated packet ip simulate Set the list cookie for a specific policy list ip access-list-cooki e Copy a configured source policy list to a destination policy [...]

Chapter 12 Avaya P330 Layer 3 Features Avaya P333R-LB User’s Guide 111 Policy Configuration Examp le Figure 12.3 A vaya P330 Policy Policy Configuration Examp le The following shows configuration of Access List 100: 1 Assigning priority 6 to all TCP t raffic originating in network 149.49.0.0 – rule 1: 2 Assigning priority 3 to all TCP traffic g[...]

Chapter 12 Avaya P330 Layer 3 Features 112 Avaya P333R-LB User’s Guide IP Fragmentation and Reassembly IP Fragmentation and Reassem bly Overview The P330 supports IP Fragmentation and Reassembly. This feature allows the router to send and receive larg e IP packets wh ere the underlying data link protocol constrains MTU (maximum transport unit). I[...]

Chapter 12 Avaya P330 Layer 3 Features Avaya P333R-LB User’s Guide 113 Layer 3 Configuration File The Configuration File feature allows the user to read th e routing configuration parameters and save them to a file on the station. The routing configuration commands in the file are in CLI format. The user can edit the file (if required) and re-con[...]

Chapter 12 Avaya P330 Layer 3 Features 114 Avaya P333R-LB User’s Guide[...]

Avaya P333R-LB User’s Guide 115 Chapter 13 Layer 3 Redundancy This chapter discusses the red undancy schemes of VRRP, SRRP, and additional redundancy schemes (Real Server Group Backup and Real Server Backup). VRRP VRRP is an IETF protocol designed to su pport redundancy of routers on the LAN, as well as lo ad balancing of t raffic. VRRP is transp[...]

Chapter 13 Layer 3 Redundancy 116 Avaya P333R-LB User’s Guide master of all the virtual routers , using the priority command if necessary. For SLB, a modificati on to VRRP is ne cessar y. In this case, you need to backup the VIP (in addition to a routing interface of the router). An interface on the VIP’s subnet still has to be configured. The [...]

Chapter 13 Layer 3 Redundancy Avaya P333R-LB User’s Guide 117 Set the primary address used as the source address of VRRP packets for the virtual router ID ip vrrp primary Accept packets addr essed to the IP address(es) associated with the virtual router ip vrrp override addr owner In order to... Use the following command...[...]

Chapter 13 Layer 3 Redundancy 118 Avaya P333R-LB User’s Guide Configuration Exa mple The following figure illu strates a VRRP configuration according to SLB . Figur e 13.2 SLB - VRRP Configuration Example The following configur ation file is a result of the above configuration: -------------- P333R-LB1 -------------- hostname "MASTER" ![...]

Chapter 13 Layer 3 Redundancy Avaya P333R-LB User’s Guide 119 ip default-gateway 193.170.1.4 1 low ! real-slb-server 10.1.1.1 ! real-slb-server 10.1.1.2 ! real-slb-server 10.1.1.3 ! rsg "server-group" type-id slb 1 real-slb-server 10.1.1.1 real-slb-server 10.1.1.2 real-slb-server 10.1.1.3 ! virtual-server "web-farm" id 1 vip 1[...]

Chapter 13 Layer 3 Redundancy 120 Avaya P333R-LB User’s Guide ip address 10.1.1.11 255.255.255.0 enable vlan commands ip vrrp 1 ip vrrp 1 address 10.1.1.10 ip vrrp 1 address 193.170.1.1 ip vrrp 2 ip vrrp 2 address 193.170.1.3 ! ip default-gateway 193.170.1.4 1 low ! real-slb-server 10.1.1.1 ! real-slb-server 10.1.1.2 ! real-slb-server 10.1.1.3 ! [...]

Chapter 13 Layer 3 Redundancy Avaya P333R-LB User’s Guide 121 SRRP P333R-LB SRRP redundancy capabilities prov ide automatic backup Layer 3 switching for IP stations. P333R -LB units can be configured to back each other up so that if one fails the other will take over its forwarding functions. The backup P333R- LB is not idle. As long as both P333[...]

Chapter 13 Layer 3 Redundancy 122 Avaya P333R-LB User’s Guide Additional Redundancy Schemes Besides VRRP and SRRP, the P333R- LB implements two additional redundancy schemes: •R e a l S e r v e r G r o u p B a c k u p . •R e a l S e r v e r B a c k u p . Real Server Group Backup You can configure a Real Server Group (RSG) to s erve as a backu[...]

Chapter 13 Layer 3 Redundancy Avaya P333R-LB User’s Guide 123 The following configuration file is a result of configuring your network as shown in Figure 13.4: ------------- P333R-LB ------------- hostname "P333R-LB" ! interface "2" ip vlan name "Default" ip address 10.1.1.10 255.255.255.0 ! interface "3" i[...]

Chapter 13 Layer 3 Redundancy 124 Avaya P333R-LB User’s Guide real-slb-server 10.5.1.3 real-slb-server 10.5.1.4 real-slb-server 10.5.1.5 ! rsg "server-group" type-id slb 2 real-slb-server 10.1.1.1 real-slb-server 10.1.1.2 real-slb-server 10.1.1.3 ! rsg "server-group" backup 1 ! virtual-server "web-farm" id 1 vip 193.[...]

Chapter 13 Layer 3 Redundancy Avaya P333R-LB User’s Guide 125 Real Server Backup You can configure a Real Server to serve as a backup for one or more primary Real Servers in a Real Server Group. As wi th R SG , a Re a l S er ve r c a n b ac ku p a primary Real Server but not a backup Real Server. In addition, you cannot have two Real Servers back[...]

Chapter 13 Layer 3 Redundancy 126 Avaya P333R-LB User’s Guide The following configuration file is a result of configuring your netwo rk as shown in Figure 13.5: ---------------- P333R-LB ---------------- hostname "P333R-LB“ interface "2" ip vlan name "Default" ip address 10.1.1.10 255.255.255.0 ! interface "3"[...]

Chapter 13 Layer 3 Redundancy Avaya P333R-LB User’s Guide 127 real-slb-server 10.1.1.3 ! virtual-server "web-farm" id 1 vip 193.170.1.3 ! virtual-slb-service "www-service" id 1 application tcp 80 rsg "server-group"[...]

Chapter 13 Layer 3 Redundancy 128 Avaya P333R-LB User’s Guide[...]

Avaya P333R-LB User’s Guide 1 Chapter 14 Load Balancing in the P333R-LB This chapter provides information on Load Balancing in the Avaya P333R-LB. Both Firewall Load Balancing and Server Load Balancing are treated in detail. Firewall Load Balancing This section provides information on Firewa ll Lo ad Balancing (FWL B) in general, as well as on sp[...]

Chapter 14 Load Balanc ing in the P333R-LB 2 Avaya P333R-LB User’s Guide of failure. P333R-LB sup ports both bridging a nd two types of routing f irewalls: transpare nt and non-trans parent. Transparent Routing Firewall Load Balancing This section explains how the P333R -LB supports Transparent Routing FWLB, and includes configuration examples. I[...]

Chapter 14 Load Balancing in the P333R-LB Avaya P333R-LB User’s Guide 3 Configuring Firewall Load Ba lancing in the P333R-LB The following figure illustrates a simpl e transparent routing FWLB configuration. Figure 14.1 T ransp arent Routing FWLB Sample Configuration Note: 1. When configuring routing fi rewalls as Real Servers, you must give an I[...]

Chapter 14 Load Balanc ing in the P333R-LB 4 Avaya P333R-LB User’s Guide In order to configure P333R -LB1 according to Figure 14.1, perform the following commands: P330-1(configure)# session router Router-1(configure)# hostname "P333R-LB 1" P333R-LB 1-1(configure)# interface 1 Done! P333R-LB 1-1(config-if:1)# ip address 10.4.1.3 255.255[...]

Chapter 14 Load Balancing in the P333R-LB Avaya P333R-LB User’s Guide 5 P333R-LB 1-1(config-v-fw-srvc:external)# id 1 Done! P333R-LB 1-1(config-v-fw-srvc:external)# hc-ip 10.1.1.3 10.2.1.3 Done! P333R-LB 1-1(config-v-fw-srvc:external)# ip route 0.0.0.0 0.0.0.0 Done! P333R-LB 1-1(config-v-fw-srvc:external)# rsg fw-group Done! P333R-LB 1-1(config-v[...]

Chapter 14 Load Balanc ing in the P333R-LB 6 Avaya P333R-LB User’s Guide Done! P333R-LB 2-1(config-rsrvr:10.2.1.2)# id 2 Done! P333R-LB 2-1(config-rsrvr:10.2.1.2)# exit P333R-LB 2-1(configure)# rsg fw-group Done! P333R-LB 2-1(config-rsg:fw-group)# type-id routing-fw 1 Done! P333R-LB 2-1(config-rsg:fw-group)# real-routing-fw 10.2.1.1 Done! P333R-L[...]

Chapter 14 Load Balancing in the P333R-LB Avaya P333R-LB User’s Guide 7 The following configurat ion file is a resu lt of the above confi guration: --------------- P333R-LB 1 ---------------- hostname "P333R-LB 1" ! interface "2" ip vlan name "Default" ip address 10.1.1.3 255.255.255.0 ! interface "1" ip vl[...]

Chapter 14 Load Balanc ing in the P333R-LB 8 Avaya P333R-LB User’s Guide ---------------- P333R-LB 2 ---------------- hostname "P333R-LB 2" ! interface "2" ip vlan name "Default" ip address 10.2.1.3 255.255.255.0 ! interface "1" ip vlan name "Default" ip address 193.170.1.1 255.255.255.0 ! ip defa[...]

Chapter 14 Load Balancing in the P333R-LB Avaya P333R-LB User’s Guide 9 Demilitarized Zone (DMZ) Configuration Example The following figure ill ustrates Transparent FWLB with DMZ configuration. Figure 14.2 T ransp arent Routing FWLB Sample DMZ Configuration Note: 1. When configuring routing fi rewalls as Real Servers, you must give an ID to e ach[...]

Chapter 14 Load Balanc ing in the P333R-LB 10 Avaya P333R-LB User’s Guide The following configuration file is a result of configuring your netwo rk as shown in Figure 14.2: ------------------- P333R-LB 1 ------------------- hostname "P333R-LB 1" ! interface "2" ip vlan name "Default" ip address 10.1.1.3 255.255.255.0[...]

Chapter 14 Load Balancing in the P333R-LB Avaya P333R-LB User’s Guide 11 rsg "fw-group" ------------------- P333R-LB 2 ------------------- hostname "P333R-LB 2" ! interface "1" ip vlan name "Default" ip address 10.2.1.3 255.255.255.0 ! interface "2" ip vlan name "Default" ip address 193.[...]

Chapter 14 Load Balanc ing in the P333R-LB 12 Avaya P333R-LB User’s Guide hc-ip 10.2.1.3 10.3.1.3 ip route 193.170.2.0 255.255.255.0 rsg "fw-group" ------------------- P333R-LB 3 ------------------- hostname "P333R-LB 3" ! interface "1" ip vlan name "Default" ip address 10.3.1.3 255.255.255.0 ! interface &q[...]

Chapter 14 Load Balancing in the P333R-LB Avaya P333R-LB User’s Guide 13 id 2 hc-ip 10.3.1.3 10.2.1.3 ip route 0.0.0.0 0.0.0.0 rsg "fw-group" Load Balancing Metrics fo r Transparent Routing FWLB There are different methods, or metrics, that the P333R-LB can use to distribute traffic among multiple firewall s. These metrics tell the P333[...]

Chapter 14 Load Balanc ing in the P333R-LB 14 Avaya P333R-LB User’s Guide Figure 14.3 Hash Metric - Loss of Persistency When Firewall 2 is removed from the group, the list of available f irewalls is readjusted, causing a lack of persiste ncy. However, if Firewall 2 becomes operational again, the list of available firewa lls is restored to its ori[...]

Chapter 14 Load Balancing in the P333R-LB Avaya P333R-LB User’s Guide 15 restored to its original configuration. As a re sult, persistency is only partially recovered, making MinMiss Ha sh a non-predictable me tric. Selectin g a Load Balancing Me tric The different metrics available allow you to select the metric that best matches your network to[...]

Chapter 14 Load Balanc ing in the P333R-LB 16 Avaya P333R-LB User’s Guide configuration example. Persistency Firewalls perform a Stateful Inspection on every session pas sing through them and drop a session if not all of its traffic pa sses through the same fir ewall. Therefore, when load-balancing b etween different firewalls, it is impera tive [...]

Chapter 14 Load Balancing in the P333R-LB Avaya P333R-LB User’s Guide 17 this scenario, the firewalls are configured to perform NAT for some hosts, and not for other hosts. Alternatively, the firewalls may be configured to assign a specific NAT address to a specific host. In this case, two load balancers are required, one on each side of the fire[...]

Chapter 14 Load Balanc ing in the P333R-LB 18 Avaya P333R-LB User’s Guide interface "2" ip vlan name "Default" ip address 10.1.1.3 255.255.255.0 ! interface "1" ip vlan name "Default" ip address 10.4.1.3 255.255.255.0 ! real-routing-fw 10.1.1.1 id 1 ! real-routing-fw 10.1.1.2 id 2 ! rsg "fw-group"[...]

Chapter 14 Load Balancing in the P333R-LB Avaya P333R-LB User’s Guide 19 Figure 14.6 Non-T ransparent Routing FWLB Sam ple Static NA T Configuration Note: The P333R-LB performs load balancing on traffic that arrives to its routing interfaces. Therefore, IP routes in the network must be configured to pass through the P333R-LB. To configure your ne[...]

Chapter 14 Load Balanc ing in the P333R-LB 20 Avaya P333R-LB User’s Guide 15. Health Check In order for the P333R-LB to perform a he alth check, an IP address beyond the firewall should be conf igured as a health check address. The health check s ession returns through the same fir ewall according to the NAT address it was gi ven. For information[...]

Chapter 14 Load Balancing in the P333R-LB Avaya P333R-LB User’s Guide 21 Configuration Example The following figure illustrates Bridgi ng FWLB. Figure 14.7 Bridging FWLB Configuration Exam ple Note: The P333R-LB per forms load balancing on traffi c that arrives to its rout ing interfaces. Therefore, IP routes in the network must be configured to [...]

Chapter 14 Load Balanc ing in the P333R-LB 22 Avaya P333R-LB User’s Guide To configure your network as in Figure 14.7, the following should be done: • The LAN routers (or hosts) should be co nfigured with 10.4.1. 3 as the next hop toward the WAN (the default gateway in many cas es). • The access router should be configured wit h 193.170.1.3 a[...]

Chapter 14 Load Balancing in the P333R-LB Avaya P333R-LB User’s Guide 23 real-bridging-fw 10.1.1.2 ! real-bridging-fw 10.2.1.2 ! rsg "fw-group" type-id bridging-fw 1 real-bridging-fw 10.1.1.2 real-bridging-fw 10.2.1.2 ! virtual-fw-service "bridging-external" id 1 bridging-fw ip route 0.0.0.0 0.0.0.0 rsg "fw-group" --[...]

Chapter 14 Load Balanc ing in the P333R-LB 24 Avaya P333R-LB User’s Guide ! real-bridging-fw 10.1.1.1 ! real-bridging-fw 10.2.1.1 ! rsg "fw-group" type-id bridging-fw 1 real-bridging-fw 10.1.1.1 real-bridging-fw 10.2.1.1 ! virtual-fw-service "bridging-internal" id 1 bridging-fw ip route 10.4.1.0 255.255.255.0 rsg "fw-grou[...]

Chapter 14 Load Balancing in the P333R-LB Avaya P333R-LB User’s Guide 25 Firewall Load Balancing Management Security In some scenarios, the P333 R-LB may be pl aced outside of the protection of the firewalls and be exposed to intrusion attempts through its L2 and L3 management interfaces. This is especi ally true for Transparent and Bridging Load[...]

Chapter 14 Load Balanc ing in the P333R-LB 26 Avaya P333R-LB User’s Guide Server Load Balancing This section provides inf ormation on Server Load Balancing (SLB) implementation of the P333R-LB, and includes configuration examples. SLB replaces a single physical server with a group of servers that appear to the clients as a single Virtual Server. [...]

Chapter 14 Load Balancing in the P333R-LB Avaya P333R-LB User’s Guide 27 with the Virtua l Server IP before forwarding them to the clients. Note: In complex routing topologies where alternative paths between the Real Servers and clients might exist, the return ing packets could reach the client via a path external to the P333R-LB. These packet s [...]

Chapter 14 Load Balanc ing in the P333R-LB 28 Avaya P333R-LB User’s Guide Configuring Server Load Balancing in the P333R-LB Half NAT Based Configuration Note: The following example uses sample IP address es for illustration only . Figure 14.8 illustrates a Half NAT based SLB configuration. Figur e 14.8 Half NA T Based SLB Configuration Example No[...]

Chapter 14 Load Balancing in the P333R-LB Avaya P333R-LB User’s Guide 29 In order to configure the load balancer according to Fi gure 14.8, perform the following commands: P330-1(configure)# session router Router-1(configure)# hostname "P333R-LB" P333R-LB-1(configure)# interface 1 Done! P333R-LB-1(config-if:1)# ip address 193.170.1.1 25[...]

Chapter 14 Load Balanc ing in the P333R-LB 30 Avaya P333R-LB User’s Guide 10.1.1.3 Done! P333R-LB-1(config-rsg:service-group)# exit P333R-LB-1(configure)# virtual-server web-farm Done! P333R-LB-1(config-vs:web-farm)# id 1 Done! P333R-LB-1(config-vs:web-farm)# vip 193.170.1.3 Done! P333R-LB-1(config-vs:web-farm)# virtual-slb-service www- service D[...]

Chapter 14 Load Balancing in the P333R-LB Avaya P333R-LB User’s Guide 31 • Single Virtual S e rvice for mult iple VIPs - PIP enables mapping several VIPs to a single application. The Vi rtual Services, configured for each VIP, point to the s a m e R e a l S e r v e r G r o u p a s w e l l a s t o t h e s a m e R e a l p o r t . T h i s e n a b [...]

Chapter 14 Load Balanc ing in the P333R-LB 32 Avaya P333R-LB User’s Guide Full NAT Based Configur ation Note: The following example uses sample IP address es for illustration only . Figure 14.9 illustrates a Full NAT based SLB configuration. Figur e 14.9 Full NA T Based SLB Conf iguration Example Figure 14.9 illustrates a sample configurat ion wh[...]

Chapter 14 Load Balancing in the P333R-LB Avaya P333R-LB User’s Guide 33 255.255.255.0 Done! P333R-LB-1(super-if:client)# exit P333R-LB-1(super)# ip default-gateway 193.170.3.2 Done! P333R-LB-1(super)# real-slb-server 10.1.1.1 Done! P333R-LB-1(super-r-slb-srvr:10.1.1.1)# exit P333R-LB-1(super)# real-slb-server 10.1.1.2 Done! P333R-LB-1(super-r-sl[...]

Chapter 14 Load Balanc ing in the P333R-LB 34 Avaya P333R-LB User’s Guide P333R-LB-1(super-v-srvr:slb)# virtual-slb-service http Done! P333R-LB-1(super-v-slb-srvc:slb:http)# id 1 Done! P333R-LB-1(super-v-slb-srvc:slb:http)# application tcp 80 Done! P333R-LB-1(super-v-slb-srvc:slb:http)# pip-bank 1 Done! P333R-LB-1(super-v-slb-srvc:slb:http)# rsg [...]

Chapter 14 Load Balancing in the P333R-LB Avaya P333R-LB User’s Guide 35 DSR (Triangul ation) Configur ation Example Note: The following example uses sample IP addresses for illustration only. Figure 14.10 illustra tes an SLB Triangulation configurat ion. Figure 14.10 SLB T riangulation Configu ration Example Note: 1. The VIP should be configured[...]

Chapter 14 Load Balanc ing in the P333R-LB 36 Avaya P333R-LB User’s Guide ! real-slb-server 10.1.1.1 direct-server-return ! real-slb-server 10.1.1.2 direct-server-return ! real-slb-server 10.1.1.3 direct-server-return ! rsg "server-group" type-id slb 1 real-slb-server 10.1.1.1 real-slb-server 10.1.1.2 real-slb-server 10.1.1.3 ! virtual-[...]

Chapter 14 Load Balancing in the P333R-LB Avaya P333R-LB User’s Guide 37 DNS Configuration Note: The following example uses sample IP addresses for illustration only. Figure 14.11 illustra tes a DNS configurat ion, where DNS traffic to prima ry and secondary DNS servers is balanced. Figure 14.1 1 DNS Configuration In Figure 14.11, DNS queries fro[...]

Chapter 14 Load Balanc ing in the P333R-LB 38 Avaya P333R-LB User’s Guide with a Real IP address. The se metrics tell the router which server should r eceive each session. SLB uses the following metrics: • Round Robin. •H a s h . • MinMiss Hash. The default metric for SLB i s Round Robin. Each load balancing metric can be performed on one o[...]

Chapter 14 Load Balancing in the P333R-LB Avaya P333R-LB User’s Guide 39 Figure 14.12 Hash Metri c - Loss of Persistency When Server 2 is removed from the group, th e list of available servers is readjusted, causing a lack of pers istency. However, if Server 2 be comes operational again, the list of avai lable servers is restored to its original [...]

Chapter 14 Load Balanc ing in the P333R-LB 40 Avaya P333R-LB User’s Guide Weighted Real Servers You can assign weights to Real Servers to enable faster servers to receive a larger share of sessions. This minimizes ov erloading and maximizes functionality If you assign a weight to a Real Server, th e sessions are distributed to the servers in the [...]

Chapter 14 Load Balancing in the P333R-LB Avaya P333R-LB User’s Guide 41 — Domain Name (for HTTP 1.1 only) Note: If you selected HTTP 1.1, you can specify a Domain Name to be used in the Health Check query. If you don’t specif y a Domain Name, the Real S erver’s IP address and the Real port is used. — URL to access - up to 255 characters [...]

Chapter 14 Load Balanc ing in the P333R-LB 42 Avaya P333R-LB User’s Guide Client persistency is achieved either by using naturally persistent load balancing schemes (such as Hash or MinMiss Hash), or by forcing persistent load balancing decisions on non-persistent load balancing schemes (such as Round Robin). Decision forcing is performed by stor[...]

Chapter 14 Load Balancing in the P333R-LB Avaya P333R-LB User’s Guide 43 Note: 1. I n th e P 33 3 R -L B , a R e a l S e r ve r c an b e lo n g to m u lt i p le s e rv e r gr o u ps a s lo n g as t h e groups are not running the same Virtual Serv ice. If the groups are running the same service (e.g., HTTP), port r e-mapping should be used. 2. Por[...]

Chapter 14 Load Balanc ing in the P333R-LB 44 Avaya P333R-LB User’s Guide Application Redirection This section provides informati on on Application Redirection (AR), and incl udes a configuration example. With the importance of the Internet as an organi zation's source of information, normal operation of the LAN can be nega tively impacted b[...]

Chapter 14 Load Balancing in the P333R-LB Avaya P333R-LB User’s Guide 45 Web server. 3 The cache checks if it has the requested in formation. If it does, it replies to the client. If the cache d oes not have the information, it retrieves the information from the real Web server, and then replies to the client. P333R-LB supports transparent caches[...]

Chapter 14 Load Balanc ing in the P333R-LB 46 Avaya P333R-LB User’s Guide Configuration Exa mples This section provides th e following configuration examples: • Application Redirection • Combining Two Cache Applications on the Same Real Caches Application Redir ection Figure 14.14 illustrates an AR configuration. Figur e 14.14 Cache Redirect [...]

Chapter 14 Load Balancing in the P333R-LB Avaya P333R-LB User’s Guide 47 P333R-LB-1(config-if:1)# exit P333R-LB-1(configure)# interface 2 Done! P333R-LB-1(config-if:2)# ip address 10.2.2.3 255.255.255.0 Done! P333R-LB-1(config-if:2)# exit P333R-LB-1(configure)# interface 3 Done! P333R-LB-1(config-if:3)# ip address 10.1.1.3 255.255.255.0 Done! P33[...]

Chapter 14 Load Balanc ing in the P333R-LB 48 Avaya P333R-LB User’s Guide The following configur ation file is a result of the above configuration: ---------------- P333R-LB ---------------- set vlan 2 name "v2" !# !# Set the hostname of the device !# hostname "P333R-LB" ! interface "3" ip vlan name "v2" ip[...]

Chapter 14 Load Balancing in the P333R-LB Avaya P333R-LB User’s Guide 49 ! set vlan-area 2 servers Combining Two Cache Applications on the Same Real Caches Based on the fact that P333R- LB allows fo r the same Real Servers to belong to different Load Balanci ng applications (i.e., Application Redirection and Server Load Balancing), it is possible[...]

Chapter 14 Load Balanc ing in the P333R-LB 50 Avaya P333R-LB User’s Guide interface "1" ip vlan name "Default" ip address 10.4.1.3 255.255.255. 0 ! ip default-gateway 10.2.2.5 1 low ! real-slb-server 10.1.1.1 ! real-slb-server 10.1.1.2 ! real-ar-server 10.1.1.1 ! real-ar-server 10.1.1.2 ! rsg "none-transparent-proxy-group[...]

Chapter 14 Load Balancing in the P333R-LB Avaya P333R-LB User’s Guide 51 In Figure 14.15, the same two Cache Servers are configured as Real Servers for Server Load Balancing and for Appl ication Redirection. Also, two Virtual Services are configured: one is a SLB s ervice for the non-transparent proxy cache implementation, and the second is an AR[...]

Chapter 14 Load Balanc ing in the P333R-LB 52 Avaya P333R-LB User’s Guide Load Balancing Metr ics There are different methods, or metrics, that a P3 33R-LB can use to distribute traffic among multiple cache servers. These metrics tell the router which cache server should receive the next session. AR uses the following metrics: • Round Robin. ?[...]

Chapter 14 Load Balancing in the P333R-LB Avaya P333R-LB User’s Guide 53 Figure 14.16 Hash Metri c - Loss of Persistency When Cache Server 2 in Figure 14.16 is remo ved from the group, the list of available cache servers is readjusted, causing a lack of persistency. However, if Cache Server 2 becomes operational again, the list of av ailable cach[...]

Chapter 14 Load Balanc ing in the P333R-LB 54 Avaya P333R-LB User’s Guide affected. However, the list of cache servers is not restored to its original configuration. As a resul t, persistency is only partially recovere d. Weighted Real Servers You can assign weig hts to Real Servers (caches) to enable fa ster servers to receive a larger share of [...]

Chapter 14 Load Balancing in the P333R-LB Avaya P333R-LB User’s Guide 55 Y ou can configure the following parameters: — The port to access - if you do not configure a port, the default is in the following or der: the V irtual Servi ce Real port, V irtual port, or port 80. — HTTP Request type - GET or HEAD (default HE AD). — HTTP version 1.0[...]

Chapter 14 Load Balanc ing in the P333R-LB 56 Avaya P333R-LB User’s Guide Y ou need to verify that the configured re quest results in the configur ed expected response. P333R-L B searches for the exp ected string o nly in the fir st packet sent by the server as a r esponse to the script query . A successfu l Script Health Che ck is defined a s on[...]

Chapter 14 Load Balancing in the P333R-LB Avaya P333R-LB User’s Guide 57 Policy-Based Routing (Source-Based Routing) Using AR rules, you can configure your device to support P olicy-Based Rout ing according to the client IP. In this case, yo u can select your next Hop according to the source IP configured on your device. Selecting a Load Balancin[...]

Chapter 14 Load Balanc ing in the P333R-LB 58 Avaya P333R-LB User’s Guide[...]

Avaya P333R-LB User’s Guide 59 Chapter 15 Embedded Web Manager This chapter describes the installati on procedures for the Embedde d Web Manager of the Avay a P330. Overview The Embedded Web Manager provides the following: • Managing and monitoring Power over Ethernet. • Device Configuration - Viewing an d modi fying the different device conf[...]

Chapter 15 Embedded Web Manager 60 Avaya P333R-LB User’s Guide • Microsoft® Internet Explorer® or Netscape Navigator/Communicator® (see table) Note for users of Netscape Navigator: The Java plug-in requires certain services from Windows 95 which are not present if Internet Explorer is not installed. In order to add these services to the oper[...]

Chapter 15 Embedded Web Manager Avaya P333R-LB User’s Guide 61 The welcome page is displayed: Figure 15.1 The Welcome Page[...]

Chapter 15 Embedded Web Manager 62 Avaya P333R-LB User’s Guide — If you have the Java plug -in installed, the W eb-based manager should open in a new window (see Figure 15.2). Figur e 15.2 Web-based Manager —I f y o u d o not have the Java plug-in installed, foll ow the instructions on the W elcome page that offers a variety of options to ins[...]

Chapter 15 Embedded Web Manager Avaya P333R-LB User’s Guide 63 Installing the Java Plug-in If the network manager has configured the system, the plug-in should be installed automatically. Note: E n s ur e t h a t J a v a o r J a v a S c r i p t i s e n ab l e d o n y o u r W e b b r o w s e r . P l e a s e r e fe r t o your browser on-line help o[...]

Chapter 15 Embedded Web Manager 64 Avaya P333R-LB User’s Guide Installing the On-Line Help and Java Plug-In on your Web Site Note: This procedure is optional. Copying the help fi les and Java plug-in to a local Web server allows users to access the on-line help for the Embedded Manager and enables automatic installation of the Java plug-in the fi[...]

Avaya A VAYA P333R-LB S ECTION 2: T ROUBLESHOOTING AND M AINTAINING THE P330[...]

[...]

Avaya P333R-LB User’s Guide 67 Chapter 16 Troubleshooting the Installation Troubleshooting the Installation This section will al low you to perform basi c troubleshooting of the installation. If you are unable to solve the problem after fo llowing the procedures in this chapter, please contact Avaya Technical Support. Re fer to “How to Contact [...]

Chapter 16 Troubleshooti ng the Installation 68 Avaya P333R-LB User’s Guide •E x p a n s i o n m o d u l e n o t inserted correctly • Check that module are installed corr ectly Table 16.1 Troubleshooting Problem/Cause Sug gested Solution[...]

Avaya P333R-LB User’s Guide 69 Chapter 17 Maintenance Introduction This section provides basic maintenance inform ation for the Avaya P330 switch and its components. For issues that are not covered in this chapter or in "Troubleshooting the Installation, " plea se cont act your Av aya representative. Caution: Please refer to "Befor[...]

Chapter 17 Maintenance 70 Avaya P333R-LB User’s Guide Saving Configuration Definitions 1 Turn off the power supply. 2 Remov e an expansio n sub-modu le. 3 Insert another expansion sub-module. 4 Turn on the power supply. Without Saving Configurat ion Definitions 1 Loosen the screws by turning the knobs. 2 Take hold of the two knobs (one near ea ch[...]

Avaya P333R-LB User’s Guide 71 Chapter 18 Updating the Software This section provides the basic procedure for downloading an d updating the P330 system softw are. Caution: Please refer to "Before You Install the P330" before undertaking any of the procedures detailed in this section. Software Download You can perform software download u[...]

Chapter 18 Updating the Software 72 Avaya P333R-LB User’s Guide Note: Please download both the ne w Avaya firmware and the new Embedded Web Manager versions. Whichever version of the fi rmware yo u decide to run, always be sure to match the correct firmware and Embedded Web Manager versions. Download New Version withou t Overwriting Existing Vers[...]

Avaya P333R-LB User’s Guide 73 Appendix A How to Contact Us To contact Avaya’s technical support, please call: In the United St ates Dial 1-800-237-0016, press 0, then press 73300.In the EMEA (Europe, Middle East and Africa) Region Country Local Dial-In Number Country Local Dial-In Number Albania +31 70 414 80 01 Finland +358 981 710 0 81 Austr[...]

74 Avaya P333R-LB User’s Guide E-mail: csctechnical@avaya.com In the AP (Asia Pacific) Regi on Lebanon +31 70 414 8053 Slovakia +31 70 414 8066 Lithuania +370 2 75 6 800 Slovenia +31 70 414 8040 Luxemburg +352 29 6969 5624 South Africa +0800 995 059 Macedonia +31 70 414 8041 Spain +34 91 375 3023 Malta +31 70 414 8022 Sweden +4 6 851 992 080 Maur[...]

Avaya P333R-LB User’s Guide 75 E-mail: sgcoe@avaya.com In the CALA (Caribbean and Latin Ameri ca) Region E-mail: caladatasupp@av aya.com Hot Line:+1 720 4449 998 Fax:+1 720 444 9103 For updated information, visit www.avaya.com/support and click “Global Support Organization (GSO)”. Indonesia +800 1 255 227 Philippines +1800 1888 7798 Japan +0 [...]

76 Avaya P333R-LB User’s Guide © 2003 Avaya Inc. All rights reserved. All trademarks identified by the ® or TM are register ed trademarks or trad emarks, respectively , of Avaya Inc. All other trademarks are the pr operty of their respective owners.[...]