Nortel Networks 42C4911 Manual de usuario

2350 Mission College Blvd.Suite 600Santa Clara, CA 95054www.bladenetwork.netAlteon OSApplication GuideNortel 10Gb Ethernet Switch Module for IBM Blade

Alteon OS Application Guide10 42C4911, January 2007

Alteon OS Application Guide100  Chapter 4: Ports and Trunking 42C4911, January 2007Configurable Trunk Hash AlgorithmThis feature allows you to con

Alteon OS Application GuideChapter 4: Ports and Trunking  10142C4911, January 2007Link Aggregation Control ProtocolLink Aggregation Control Proto

Alteon OS Application Guide102  Chapter 4: Ports and Trunking 42C4911, January 2007LACP automatically determines which member links can be aggrega

Alteon OS Application GuideChapter 4: Ports and Trunking  10342C4911, January 2007Configuring LACPUse the following procedure to configure LACP f

Alteon OS Application Guide104  Chapter 4: Ports and Trunking 42C4911, January 2007

42C4911, January 2007 105CHAPTER 5Spanning Tree GroupWhen multiple paths exist on a network, Spanning Tree Group (STG) configures the network so that

Alteon OS Application Guide106  Chapter 5: Spanning Tree Group 42C4911, January 2007OverviewSpanning Tree Group (STG) detects and eliminates logic

Alteon OS Application GuideChapter 5: Spanning Tree Group  10742C4911, January 2007Bridge Protocol Data Units (BPDUs)To create a Spanning Tree, t

Alteon OS Application Guide108  Chapter 5: Spanning Tree Group 42C4911, January 2007Port Path CostThe port path cost assigns lower values to high-

Alteon OS Application GuideChapter 5: Spanning Tree Group  10942C4911, January 2007 If ports are tagged, all trunked ports can belong to multipl

42C4911, January 2007 11FiguresFigure 1-1:Switch management on the BladeCenter management module 26Figure 1-2:BOOTP Relay Agent Configuration 30Figure

Alteon OS Application Guide110  Chapter 5: Spanning Tree Group 42C4911, January 2007Multiple Spanning TreesEach GbE Switch Module supports a maxim

Alteon OS Application GuideChapter 5: Spanning Tree Group  11142C4911, January 2007Why Do We Need Multiple Spanning Trees?Figure 5-1 shows a simp

Alteon OS Application Guide112  Chapter 5: Spanning Tree Group 42C4911, January 2007Figure 5-2 Implementing Multiple Spanning Tree GroupsVLAN Par

Alteon OS Application GuideChapter 5: Spanning Tree Group  11342C4911, January 2007 VLAN 3 ParticipationFor VLAN 3 you can have GbE Switch Modul

Alteon OS Application Guide114  Chapter 5: Spanning Tree Group 42C4911, January 2007NOTE – Each instance of Spanning Tree Group is enabled by defa

Alteon OS Application GuideChapter 5: Spanning Tree Group  11542C4911, January 2007Port Fast ForwardingPort Fast Forwarding permits a port that p

Alteon OS Application Guide116  Chapter 5: Spanning Tree Group 42C4911, January 2007Fast Uplink ConvergenceFast Uplink Convergence enables the GbE

42C4911, January 2007 117CHAPTER 6Rapid Spanning Tree Protocol/Multiple Spanning Tree ProtocolIEEE 802.1w Rapid Spanning Tree Protocol enhances the Sp

Alteon OS Application Guide118  Chapter 6: Rapid Spanning Tree Protocol/Multiple Spanning Tree Protocol 42C4911, January 2007Rapid Spanning Tree P

Alteon OS Application GuideChapter 6: Rapid Spanning Tree Protocol/Multiple Spanning Tree Protocol  11942C4911, January 2007Port Type and Link Ty

Alteon OS Application Guide12 42C4911, January 2007Figure 13-3:Two trunks, one Failover Trigger 222Figure 13-4:A Non-VRRP, Hot-Standby Configuration 2

Alteon OS Application Guide120  Chapter 6: Rapid Spanning Tree Protocol/Multiple Spanning Tree Protocol 42C4911, January 2007RSTP Configuration Ex

Alteon OS Application GuideChapter 6: Rapid Spanning Tree Protocol/Multiple Spanning Tree Protocol  12142C4911, January 2007Multiple Spanning Tre

Alteon OS Application Guide122  Chapter 6: Rapid Spanning Tree Protocol/Multiple Spanning Tree Protocol 42C4911, January 2007MSTP Configuration Gu

42C4911, January 2007 123CHAPTER 7Quality of ServiceQuality of Service features allow you to allocate network resources to mission-critical applica-ti

Alteon OS Application Guide124  Chapter 7: Quality of Service 42C4911, January 2007Overview QoS helps you allocate guaranteed bandwidth to the cri

Alteon OS Application GuideChapter 7: Quality of Service  12542C4911, January 2007The basic GbESM QoS model works as follows:  Classify traffic:

Alteon OS Application Guide126  Chapter 7: Quality of Service 42C4911, January 2007Using ACL FiltersAccess Control Lists are filters that allow yo

Alteon OS Application GuideChapter 7: Quality of Service  12742C4911, January 2007  Packet Format Ethernet format (eth2, SNAP, LLC) Ether

Alteon OS Application Guide128  Chapter 7: Quality of Service 42C4911, January 2007Summary of ACL ActionsActions determine how the traffic is trea

Alteon OS Application GuideChapter 7: Quality of Service  12942C4911, January 2007Using ACL GroupsAccess Control Lists (ACLs) allow you to classi

42C4911, January 2007 13TablesTable 1-1: GbESM IP addresses, based on switch-module bay numbers 24Table 1-2: User Access Levels 47Table 1-3: Alteon OS

Alteon OS Application Guide130  Chapter 7: Quality of Service 42C4911, January 2007 Access Control GroupsAn Access Control Group (ACL Group) is a

Alteon OS Application GuideChapter 7: Quality of Service  13142C4911, January 2007MeteringQoS metering provides different levels of service to da

Alteon OS Application Guide132  Chapter 7: Quality of Service 42C4911, January 2007ACL Configuration ExamplesExample 1Use this configuration to bl

Alteon OS Application GuideChapter 7: Quality of Service  13342C4911, January 20073. Apply and save the configuration. Example 3Use this config

Alteon OS Application Guide134  Chapter 7: Quality of Service 42C4911, January 2007Using DSCP Values to Provide QoSThe six most significant bits i

Alteon OS Application GuideChapter 7: Quality of Service  13542C4911, January 2007The GbESM default settings are based on the following standard

Alteon OS Application Guide136  Chapter 7: Quality of Service 42C4911, January 2007QoS LevelsTable 7-5 shows the default service levels provided b

Alteon OS Application GuideChapter 7: Quality of Service  13742C4911, January 2007DSCP Re-marking and MappingThe GbESM can re-mark the DSCP value

Alteon OS Application Guide138  Chapter 7: Quality of Service 42C4911, January 2007DSCP Re-marking Configuration Example1. Turn DSCP re-marking on

Alteon OS Application GuideChapter 7: Quality of Service  13942C4911, January 2007Using 802.1p Priorities to Provide QoSAlteon OS provides Qualit

Alteon OS Application Guide14 42C4911, January 2007

Alteon OS Application Guide140  Chapter 7: Quality of Service 42C4911, January 2007802.1p Configuration Example1. Configure a port’s default 802.1

42C4911, January 2007Part 2: IP RoutingThis section discusses Layer 3 switching functions. In addition to switching traffic at near line rates, the ap

Alteon OS Application Guide142 42C4911, January 2007

42C4911, January 2007 143CHAPTER 8Basic IP RoutingThis chapter provides configuration background and examples for using the GbE Switch Mod-ule to perf

Alteon OS Application Guide144  Chapter 8: Basic IP Routing 42C4911, January 2007IP Routing BenefitsThe GbE Switch Module uses a combination of co

Alteon OS Application GuideChapter 8: Basic IP Routing  14542C4911, January 2007Routing Between IP SubnetsThe physical layout of most corporate n

Alteon OS Application Guide146  Chapter 8: Basic IP Routing 42C4911, January 2007 Routers can be slower than switches. The cross-subnet side trip

Alteon OS Application GuideChapter 8: Basic IP Routing  14742C4911, January 2007Without Layer 3 IP routing on the switch, cross-subnet communicat

Alteon OS Application Guide148  Chapter 8: Basic IP Routing 42C4911, January 2007Example of Subnet RoutingPrior to configuring, you must be connec

Alteon OS Application GuideChapter 8: Basic IP Routing  14942C4911, January 2007IP interfaces are configured using the following commands at the

42C4911, January 2007 15PrefaceThe Alteon OS Application Guide describes how to configure and use the Alteon OS software on the 10Gb Ethernet Switch M

Alteon OS Application Guide150  Chapter 8: Basic IP Routing 42C4911, January 2007Using VLANs to Segregate Broadcast DomainsIn the previous example

Alteon OS Application GuideChapter 8: Basic IP Routing  15142C4911, January 2007Each time you add a port to a VLAN, you may get the following pro

Alteon OS Application Guide152  Chapter 8: Basic IP Routing 42C4911, January 2007Dynamic Host Configuration ProtocolDynamic Host Configuration Pro

Alteon OS Application GuideChapter 8: Basic IP Routing  15342C4911, January 2007DHCP Relay AgentDHCP is described in RFC 2131, and the DHCP relay

Alteon OS Application Guide154  Chapter 8: Basic IP Routing 42C4911, January 2007DHCP Relay Agent ConfigurationTo enable the GbE Switch Module to

42C4911, January 2007 155CHAPTER 9Routing Information ProtocolIn a routed environment, routers communicate with one another to keep track of available

Alteon OS Application Guide156  Chapter 9: Routing Information Protocol 42C4911, January 2007Routing UpdatesRIP sends routing-update messages at r

Alteon OS Application GuideChapter 9: Routing Information Protocol  15742C4911, January 2007RIPv2 in RIPv1 compatibility modeAlteon OS allows you

Alteon OS Application Guide158  Chapter 9: Routing Information Protocol 42C4911, January 2007DefaultThe RIP router can listen and supply a default

Alteon OS Application GuideChapter 9: Routing Information Protocol  15942C4911, January 20071. Add VLANs for routing interfaces. 2. Add IP inter

Alteon OS Application Guide16  Preface 42C4911, January 2007What You’ll Find in This GuideThis guide will help you plan, implement, and administer

Alteon OS Application Guide160  Chapter 9: Routing Information Protocol 42C4911, January 2007

42C4911, January 2007 161CHAPTER 10IGMPInternet Group Management Protocol (IGMP) is used by IP Multicast routers to learn about the existence of host

Alteon OS Application Guide162  Chapter 10: IGMP 42C4911, January 2007IGMP SnoopingIGMP Snooping allows the switch to forward multicast traffic on

Alteon OS Application GuideChapter 10: IGMP  16342C4911, January 2007IGMP Snooping Configuration ExampleThis section provides steps to configure

Alteon OS Application Guide164  Chapter 10: IGMP 42C4911, January 2007These commands display information about IGMP Groups and Mrouters learned th

Alteon OS Application GuideChapter 10: IGMP  16542C4911, January 2007IGMP RelayThe GbESM can act as an IGMP Relay (or IGMP Proxy) device that rel

Alteon OS Application Guide166  Chapter 10: IGMP 42C4911, January 2007Configure IGMP RelayUse the following procedure to configure IGMP Relay. 1.

Alteon OS Application GuideChapter 10: IGMP  16742C4911, January 20075. Apply and save the configuration. >> Multicast router 2# apply (Ap

Alteon OS Application Guide168  Chapter 10: IGMP 42C4911, January 2007Additional IGMP FeaturesThe following topics are discussed in this section:

Alteon OS Application GuideChapter 10: IGMP  16942C4911, January 2007Each IGMP Filter allows you to set a start and end point that defines the ra

Alteon OS Application GuidePreface  1742C4911, January 2007 Chapter 11, “Border Gateway Protocol,” describes BGP concepts and BGP features sup-po

Alteon OS Application Guide170  Chapter 10: IGMP 42C4911, January 20073. Assign the IGMP filter to a port. >> /cfg/l3/igmp/igmpflt (Select I

42C4911, January 2007 171CHAPTER 11Border Gateway Protocol Border Gateway Protocol (BGP) is an Internet protocol that enables routers on a network to

Alteon OS Application Guide172  Chapter 11: Border Gateway Protocol 42C4911, January 2007Internal Routing Versus External RoutingTo ensure effecti

Alteon OS Application GuideChapter 11: Border Gateway Protocol  17342C4911, January 2007Typically, an AS has one or more border routers—peer rout

Alteon OS Application Guide174  Chapter 11: Border Gateway Protocol 42C4911, January 2007What is a Route Map?A route map is used to control and mo

Alteon OS Application GuideChapter 11: Border Gateway Protocol  17542C4911, January 2007 Figure 11-2 Distributing Network Filters in Access List

Alteon OS Application Guide176  Chapter 11: Border Gateway Protocol 42C4911, January 2007Precedence You can set a priority to a route map by speci

Alteon OS Application GuideChapter 11: Border Gateway Protocol  17742C4911, January 20073. (Optional) Configure the attributes in the AS filter m

Alteon OS Application Guide178  Chapter 11: Border Gateway Protocol 42C4911, January 2007Aggregating RoutesAggregation is the process of combining

Alteon OS Application GuideChapter 11: Border Gateway Protocol  17942C4911, January 2007Redistributing RoutesIn addition to running multiple rout

Alteon OS Application Guide18  Preface 42C4911, January 2007Typographic ConventionsThe following table describes the typographic styles used in th

Alteon OS Application Guide180  Chapter 11: Border Gateway Protocol 42C4911, January 2007BGP AttributesThe following two BGP attributes are discus

Alteon OS Application GuideChapter 11: Border Gateway Protocol  18142C4911, January 2007Selecting Route Paths in BGPBGP selects only one path as

Alteon OS Application Guide182  Chapter 11: Border Gateway Protocol 42C4911, January 2007BGP Failover ConfigurationUse the following example to cr

Alteon OS Application GuideChapter 11: Border Gateway Protocol  18342C4911, January 20071. Define the VLANs.For simplicity, both default gateways

Alteon OS Application Guide184  Chapter 11: Border Gateway Protocol 42C4911, January 20074. Configure BGP peer router 1 and 2.Peer 1 is the primar

Alteon OS Application GuideChapter 11: Border Gateway Protocol  18542C4911, January 2007Default Redistribution and Route Aggregation ExampleThis

Alteon OS Application Guide186  Chapter 11: Border Gateway Protocol 42C4911, January 20073. Configure internal peer router 1 and external peer rou

42C4911, January 2007 187CHAPTER 12OSPFAlteon OS supports the Open Shortest Path First (OSPF) routing protocol. The Alteon OS implementation conforms

Alteon OS Application Guide188  Chapter 12: OSPF 42C4911, January 2007OSPF OverviewOSPF is designed for routing traffic within a single IP domain

Alteon OS Application GuideChapter 12: OSPF  18942C4911, January 2007 Transit Area—an area that allows area summary information to be exchanged

Alteon OS Application GuidePreface  1942C4911, January 2007How to Get HelpIf you need help, service, or technical assistance, see the "Gettin

Alteon OS Application Guide190  Chapter 12: OSPF 42C4911, January 2007Types of OSPF Routing DevicesAs shown in Figure 12-2, OSPF uses the followin

Alteon OS Application GuideChapter 12: OSPF  19142C4911, January 2007Neighbors and AdjacenciesIn areas with two or more routing devices, neighbor

Alteon OS Application Guide192  Chapter 12: OSPF 42C4911, January 2007The Shortest Path First TreeThe routing devices use a link-state algorithm (

Alteon OS Application GuideChapter 12: OSPF  19342C4911, January 2007OSPF Implementation in Alteon OSAlteon OS supports a single instance of OSPF

Alteon OS Application Guide194  Chapter 12: OSPF 42C4911, January 2007Defining AreasIf you are configuring multiple areas in your OSPF domain, one

Alteon OS Application GuideChapter 12: OSPF  19542C4911, January 2007Using the Area ID to Assign the OSPF Area NumberThe OSPF area number is defi

Alteon OS Application Guide196  Chapter 12: OSPF 42C4911, January 2007Interface CostThe OSPF link-state algorithm (Dijkstra’s algorithm) places ea

Alteon OS Application GuideChapter 12: OSPF  19742C4911, January 2007Default RoutesWhen an OSPF routing device encounters traffic for a destinati

Alteon OS Application Guide198  Chapter 12: OSPF 42C4911, January 2007The OSPF default route configuration can be removed with the command: Virtua

Alteon OS Application GuideChapter 12: OSPF  19942C4911, January 2007Router IDRouting devices in OSPF areas are identified by a router ID. The ro

Alteon OS Application Guide2 42C4911, January 2007Copyright © 2007 Blade Network Technologies, Inc., 2350 Mission College Blvd., Suite 600, Santa Cla

Alteon OS Application Guide20  Preface 42C4911, January 2007

Alteon OS Application Guide200  Chapter 12: OSPF 42C4911, January 2007Figure 12-4 shows authentication configured for area 0 with the password tes

Alteon OS Application GuideChapter 12: OSPF  20142C4911, January 20073. Enable OSPF authentication for Area 2 on switch 4.4. Configure a simple t

Alteon OS Application Guide202  Chapter 12: OSPF 42C4911, January 20076. Assign MD5 key ID to OSPF virtual link on switches 2 and 4.Host Routes fo

Alteon OS Application GuideChapter 12: OSPF  20342C4911, January 2007OSPF Features Not Supported in This ReleaseThe following OSPF features are n

Alteon OS Application Guide204  Chapter 12: OSPF 42C4911, January 2007OSPF Configuration ExamplesA summary of the basic steps for configuring OSPF

Alteon OS Application GuideChapter 12: OSPF  20542C4911, January 2007Example 1: Simple OSPF DomainIn this example, two OSPF areas are defined—one

Alteon OS Application Guide206  Chapter 12: OSPF 42C4911, January 20073. Define the backbone.The backbone is always configured as a transit area u

Alteon OS Application GuideChapter 12: OSPF  20742C4911, January 2007Example 2: Virtual LinksIn the example shown in Figure 12-6, area 2 is not p

Alteon OS Application Guide208  Chapter 12: OSPF 42C4911, January 20074. Define the backbone.5. Define the transit area.The area that contains the

Alteon OS Application GuideChapter 12: OSPF  20942C4911, January 2007Configuring OSPF for a Virtual Link on Switch #21. Configure IP interfaces o

42C4911, January 2007Part 1: Basic SwitchingThis section discusses basic switching functions. This includes how to access and manage the switch: Acce

Alteon OS Application Guide210  Chapter 12: OSPF 42C4911, January 20076. Define the stub area.7. Attach the network interface to the backbone.8. A

Alteon OS Application GuideChapter 12: OSPF  21142C4911, January 2007Example 3: Summarizing RoutesBy default, ABRs advertise all the network addr

Alteon OS Application Guide212  Chapter 12: OSPF 42C4911, January 2007Follow this procedure to configure OSPF support as shown in Figure 12-7:1. C

Alteon OS Application GuideChapter 12: OSPF  21342C4911, January 20077. Configure route summarization by specifying the starting address and mask

Alteon OS Application Guide214  Chapter 12: OSPF 42C4911, January 2007

42C4911, January 2007Part 3: High Availability FundamentalsInternet traffic consists of myriad services and applications which use the Internet Protoc

Alteon OS Application Guide216 42C4911, January 2007

42C4911, January 2007 217CHAPTER 13High AvailabilityGbE Switch Modules support high-availability network topologies through an enhanced implementation

Alteon OS Application Guide218  Chapter 13: High Availability 42C4911, January 2007Layer 2 FailoverThe primary application for Layer 2 Failover is

Alteon OS Application GuideChapter 13: High Availability  21942C4911, January 2007Setting the Failover LimitThe failover limit lets you specify t

Alteon OS Application Guide22 42C4911, January 2007

Alteon OS Application Guide220  Chapter 13: High Availability 42C4911, January 2007Configuration GuidelinesThis section provides important informa

Alteon OS Application GuideChapter 13: High Availability  22142C4911, January 2007Figure 13-2 shows a configuration with two trunks, each in a di

Alteon OS Application Guide222  Chapter 13: High Availability 42C4911, January 2007Figure 13-3 shows a configuration with two trunks. VLAN Monitor

Alteon OS Application GuideChapter 13: High Availability  22342C4911, January 2007Configuring Trunk FailoverThe following procedure pertains to e

Alteon OS Application Guide224  Chapter 13: High Availability 42C4911, January 2007VRRP OverviewIn a high-availability network topology, no device

Alteon OS Application GuideChapter 13: High Availability  22542C4911, January 2007There is no requirement for any VRRP router to be the IP addres

Alteon OS Application Guide226  Chapter 13: High Availability 42C4911, January 2007VRRP OperationOnly the virtual router master responds to ARP re

Alteon OS Application GuideChapter 13: High Availability  22742C4911, January 2007Failover MethodsWith service availability becoming a major conc

Alteon OS Application Guide228  Chapter 13: High Availability 42C4911, January 2007Active-Active RedundancyIn an active-active configuration, show

Alteon OS Application GuideChapter 13: High Availability  22942C4911, January 2007Hot-Standby RedundancyThe primary application for VRRP-based ho

42C4911, January 2007 23CHAPTER 1Accessing the SwitchThe Alteon OS software provides means for accessing, configuring, and viewing information and sta

Alteon OS Application Guide230  Chapter 13: High Availability 42C4911, January 2007Alteon OS extensions to VRRPThis section describes the followin

Alteon OS Application GuideChapter 13: High Availability  23142C4911, January 2007Virtual Router Deployment ConsiderationsReview the following is

Alteon OS Application Guide232  Chapter 13: High Availability 42C4911, January 2007The user can implement this behavior by configuring the switch

Alteon OS Application GuideChapter 13: High Availability  23342C4911, January 2007High Availability ConfigurationsGbE Switch Modules offer flexib

Alteon OS Application Guide234  Chapter 13: High Availability 42C4911, January 2007Task 1: Configure GbESM 11. Configure client and server interfa

Alteon OS Application GuideChapter 13: High Availability  23542C4911, January 20073. Turn on VRRP and configure two Virtual Interface Routers. 4

Alteon OS Application Guide236  Chapter 13: High Availability 42C4911, January 2007Task 2: Configure GbESM 21. Configure client and server interfa

Alteon OS Application GuideChapter 13: High Availability  23742C4911, January 20073. Turn on VRRP and configure two Virtual Interface Routers. 4

Alteon OS Application Guide238  Chapter 13: High Availability 42C4911, January 2007Hot-Standby ConfigurationThe primary application for VRRP-based

Alteon OS Application GuideChapter 13: High Availability  23942C4911, January 2007Figure 13-8 illustrates a common hot-standby implementation on

Alteon OS Application Guide24  Chapter 1: Accessing the Switch 42C4911, January 2007Management module setupThe BladeCenter GbE Switch Module is an

Alteon OS Application Guide240  Chapter 13: High Availability 42C4911, January 20072. Configure Virtual Interface Routers. 3. Enable VRRP Hot Sta

Alteon OS Application GuideChapter 13: High Availability  24142C4911, January 2007Task 2: Configure GbESM 21. On GbESM 1, configure the interface

Alteon OS Application Guide242  Chapter 13: High Availability 42C4911, January 20075. Turn off Spanning Tree Protocol globally. Apply and save cha

42C4911, January 2007Part 4: AppendicesThis section describes the following topics: Troubleshooting RADIUS Server Configuration Notes Glossary

Alteon OS Application Guide244 42C4911, January 2007

42C4911, January 2007 245APPENDIX ATroubleshootingThis section discusses some tools to help you troubleshoot common problems on the GbE Switch Module:

Alteon OS Application Guide246  Appendix A: Troubleshooting 42C4911, January 2007Monitoring PortsThe port mirroring feature in the Alteon OS allow

Alteon OS Application GuideAppendix A: Troubleshooting  24742C4911, January 2007NOTE – Traffic on VLAN 4095 is not mirrored to the external ports

Alteon OS Application Guide248  Appendix A: Troubleshooting 42C4911, January 2007Layer 3 Port Mirroring (Monitoring Port and Egress Port in the sa

Alteon OS Application GuideAppendix A: Troubleshooting  24942C4911, January 2007Layer 3 Port Mirroring (Both Ports in Different GEAs)In this scen

Alteon OS Application GuideChapter 1: Accessing the Switch  2542C4911, January 2007NOTE – Before you install the GbESM in Bay 8 or Bay 10, confir

Alteon OS Application Guide250  Appendix A: Troubleshooting 42C4911, January 2007Layer 3 Port Mirroring (MP Packets, Both Ports in the Same GEA)MP

Alteon OS Application GuideAppendix A: Troubleshooting  25142C4911, January 2007Configuring Port MirroringTo configure port mirroring for the exa

Alteon OS Application Guide252  Appendix A: Troubleshooting 42C4911, January 20075. View the current configuration.>> PortMirroring# cur (Di

42C4911, January 2007 253APPENDIX BRADIUS Server Configuration NotesUse the following information to modify your RADIUS configuration files for the No

Alteon OS Application Guide254  Appendix B: RADIUS Server Configuration Notes 42C4911, January 20072. Open the dictiona.dcm file, and add the foll

42C4911, January 2007 255GlossaryDIP (Destination IP Address)The destination IP address of a frame.Dport (Destination Port)The destination port (appli

Alteon OS Application Guide256  Glossary 42C4911, January 2007Virtual Router A shared address between two devices utilizing VRRP, as defined in RF

42C4911, January 2007 257IndexSymbols... 161[ ]...

Alteon OS Application Guide258  Index 42C4911, January 2007FFailover...218failoverovervi

Alteon OS Application GuideIndex  25942C4911, January 2007OOSPFarea types... 188authentication...

Alteon OS Application Guide26  Chapter 1: Accessing the Switch 42C4911, January 2007Figure 1-1 Switch management on the BladeCenter management mo

Alteon OS Application Guide260  Index 42C4911, January 2007segments. See IP subnets.service ports...

Alteon OS Application GuideChapter 1: Accessing the Switch  2742C4911, January 2007The default value is Disabled for both features. If these feat

Alteon OS Application Guide28  Chapter 1: Accessing the Switch 42C4911, January 2007External management port setupIn addition to the internal mana

Alteon OS Application GuideChapter 1: Accessing the Switch  2942C4911, January 2007Using TelnetUse the management module to access the GbE Switch

42C4911, January 2007 3ContentsPreface 15Who Should Use This Guide 15What You’ll Find in This Guide 16Typographic Conventions 18How to Get Help 19Part

Alteon OS Application Guide30  Chapter 1: Accessing the Switch 42C4911, January 2007Figure 1-2 shows a basic BOOTP network example. Figure 1-2 B

Alteon OS Application GuideChapter 1: Accessing the Switch  3142C4911, January 2007DHCP Relay AgentDHCP is described in RFC 2131, and the DHCP re

Alteon OS Application Guide32  Chapter 1: Accessing the Switch 42C4911, January 2007In GbESM implementation, there is no need for primary or secon

Alteon OS Application GuideChapter 1: Accessing the Switch  3342C4911, January 2007Using the Browser-Based InterfaceUse the management module to

Alteon OS Application Guide34  Chapter 1: Accessing the Switch 42C4911, January 2007Accessing the BBI via HTTPS requires that you generate a certi

Alteon OS Application GuideChapter 1: Accessing the Switch  3542C4911, January 2007 Switch Ports – configure each of the physical ports on the s

Alteon OS Application Guide36  Chapter 1: Accessing the Switch 42C4911, January 2007Using SNMPAlteon OS provides SNMP v1.0 and SNMP v3.0 support f

Alteon OS Application GuideChapter 1: Accessing the Switch  3742C4911, January 2007For more information on SNMP MIBs and the commands used to con

Alteon OS Application Guide38  Chapter 1: Accessing the Switch 42C4911, January 20073. Assign the user to the user group. Use the group table to l

Alteon OS Application GuideChapter 1: Accessing the Switch  3942C4911, January 2007CLI oper equivalent Configuring SNMP Trap HostsSNMPv1 trap hos

Alteon OS Application Guide4 42C4911, January 2007LDAP Authentication and Authorization 53Secure Shell and Secure Copy 55End User Access Control 61Cha

Alteon OS Application Guide40  Chapter 1: Accessing the Switch 42C4911, January 2007In the example below the user will receive the traps sent by t

Alteon OS Application GuideChapter 1: Accessing the Switch  4142C4911, January 2007SNMPv2 trap host configurationThe SNMPv2 trap host configurati

Alteon OS Application Guide42  Chapter 1: Accessing the Switch 42C4911, January 2007The following example shows how to configure a SNMPv3 user v3t

Alteon OS Application GuideChapter 1: Accessing the Switch  4342C4911, January 2007Securing Access to the SwitchSecure switch management is neede

Alteon OS Application Guide44  Chapter 1: Accessing the Switch 42C4911, January 2007RADIUS Authentication and AuthorizationAlteon OS supports the

Alteon OS Application GuideChapter 1: Accessing the Switch  4542C4911, January 20071. Turn RADIUS authentication on, then configure the Primary a

Alteon OS Application Guide46  Chapter 1: Accessing the Switch 42C4911, January 2007RADIUS Authentication Features in Alteon OSAlteon OS supports

Alteon OS Application GuideChapter 1: Accessing the Switch  4742C4911, January 2007Switch User AccountsThe user accounts listed in Table 1-2 can

Alteon OS Application Guide48  Chapter 1: Accessing the Switch 42C4911, January 2007TACACS+ AuthenticationAlteon OS supports authentication and au

Alteon OS Application GuideChapter 1: Accessing the Switch  4942C4911, January 2007AuthorizationAuthorization is the action of determining a user

Alteon OS Application Guide542C4911, January 2007Chapter 5: Spanning Tree Group 105Overview 106Bridge Protocol Data Units (BPDUs) 107Determining the

Alteon OS Application Guide50  Chapter 1: Accessing the Switch 42C4911, January 2007AccountingAccounting is the action of recording a user's

Alteon OS Application GuideChapter 1: Accessing the Switch  5142C4911, January 2007The following rules apply to TACACS+ command authorization and

Alteon OS Application Guide52  Chapter 1: Accessing the Switch 42C4911, January 2007Configuring TACACS+ Authentication on the Switch 1. Turn TACAC

Alteon OS Application GuideChapter 1: Accessing the Switch  5342C4911, January 2007LDAP Authentication and AuthorizationAlteon OS supports the LD

Alteon OS Application Guide54  Chapter 1: Accessing the Switch 42C4911, January 2007Configuring LDAP Authentication on the Switch 1. Turn LDAP aut

Alteon OS Application GuideChapter 1: Accessing the Switch  5542C4911, January 2007Secure Shell and Secure Copy Secure Shell (SSH) and Secure Cop

Alteon OS Application Guide56  Chapter 1: Accessing the Switch 42C4911, January 2007Configuring SSH/SCP features on the switchBefore you can use S

Alteon OS Application GuideChapter 1: Accessing the Switch  5742C4911, January 2007Configuring the SCP Administrator PasswordTo configure the scp

Alteon OS Application Guide58  Chapter 1: Accessing the Switch 42C4911, January 2007To upload the configuration to the switch:Syntax:Example:To ap

Alteon OS Application GuideChapter 1: Accessing the Switch  5942C4911, January 2007Generating RSA Host and Server Keys for SSH AccessTo support t

Alteon OS Application Guide6 42C4911, January 2007Viewing ACL Statistics 131ACL Configuration Examples 132Using DSCP Values to Provide QoS 134Differen

Alteon OS Application Guide60  Chapter 1: Accessing the Switch 42C4911, January 2007SSH/SCP Integration with Radius AuthenticationSSH/SCP is integ

Alteon OS Application GuideChapter 1: Accessing the Switch  6142C4911, January 2007An SCP-only administrator’s password is typically used when Se

Alteon OS Application Guide62  Chapter 1: Accessing the Switch 42C4911, January 2007Strong PasswordsThe administrator can require use of Strong Pa

Alteon OS Application GuideChapter 1: Accessing the Switch  6342C4911, January 2007Defining User Names and Passwords Use the User ID menu to defi

Alteon OS Application Guide64  Chapter 1: Accessing the Switch 42C4911, January 2007Listing Current UsersThe cur command displays defined user acc

Alteon OS Application GuideChapter 1: Accessing the Switch  6542C4911, January 2007

Alteon OS Application Guide66  Chapter 1: Accessing the Switch 42C4911, January 2007

42C4911, January 2007 67CHAPTER 2Port-based Network Access ControlPort-Based Network Access control provides a means of authenticating and authorizing

Alteon OS Application Guide68  Chapter 2: Port-based Network Access Control 42C4911, January 2007Extensible Authentication Protocol over LANAlteon

Alteon OS Application GuideChapter 2: Port-based Network Access Control  6942C4911, January 2007802.1x Authentication ProcessThe clients and auth

Alteon OS Application Guide742C4911, January 2007Chapter 11: Border Gateway Protocol 171Internal Routing Versus External Routing 172Forming BGP Peer

Alteon OS Application Guide70  Chapter 2: Port-based Network Access Control 42C4911, January 2007EAPoL Message ExchangeDuring authentication, EAPO

Alteon OS Application GuideChapter 2: Port-based Network Access Control  7142C4911, January 2007802.1x Port StatesThe state of the port determine

Alteon OS Application Guide72  Chapter 2: Port-based Network Access Control 42C4911, January 2007Supported RADIUS AttributesThe Alteon 802.1x Auth

Alteon OS Application GuideChapter 2: Port-based Network Access Control  7342C4911, January 2007Configuration GuidelinesWhen configuring EAPoL, c

Alteon OS Application Guide74  Chapter 2: Port-based Network Access Control 42C4911, January 2007

42C4911, January 2007 75CHAPTER 3VLANsThis chapter describes network design and topology considerations for using Virtual Local Area Networks (VLANs).

Alteon OS Application Guide76  Chapter 3: VLANs 42C4911, January 2007OverviewSetting up virtual LANs (VLANs) is a way to segment networks to incre

Alteon OS Application GuideChapter 3: VLANs  7742C4911, January 2007VLANs and Port VLAN ID NumbersVLAN NumbersAlteon OS supports up to 1024 VLANs

Alteon OS Application Guide78  Chapter 3: VLANs 42C4911, January 2007Viewing and Configuring PVIDsUse the following CLI commands to view PVIDs: 

Alteon OS Application GuideChapter 3: VLANs  7942C4911, January 2007Each port on the switch can belong to one or more VLANs, and each VLAN can ha

Alteon OS Application Guide8 42C4911, January 2007OSPF Configuration Examples 204Example 1: Simple OSPF Domain 205Example 2: Virtual Links 207Example

Alteon OS Application Guide80  Chapter 3: VLANs 42C4911, January 2007VLAN TaggingAlteon OS software supports 802.1Q VLAN tagging, providing standa

Alteon OS Application GuideChapter 3: VLANs  8142C4911, January 2007Figure 3-1 Default VLAN settingsNOTE – The port numbers specified in these i

Alteon OS Application Guide82  Chapter 3: VLANs 42C4911, January 2007NOTE – The port assignments in the following figures are not meant to match t

Alteon OS Application GuideChapter 3: VLANs  8342C4911, January 2007In Figure 3-4, tagged incoming packets are assigned directly to VLAN 2 becaus

Alteon OS Application Guide84  Chapter 3: VLANs 42C4911, January 2007VLAN Topologies and Design Considerations By default, the Alteon OS software

Alteon OS Application GuideChapter 3: VLANs  8542C4911, January 2007Example 1: Multiple VLANs with Tagging AdaptersFigure 3-6 Example 1: Multipl

Alteon OS Application Guide86  Chapter 3: VLANs 42C4911, January 2007NOTE – VLAN tagging is required only on ports that are connected to other GbE

Alteon OS Application GuideChapter 3: VLANs  8742C4911, January 2007Protocol-based VLANsProtocol-based VLANs (PVLANs) allow you to segment networ

Alteon OS Application Guide88  Chapter 3: VLANs 42C4911, January 2007Port-based vs. Protocol-based VLANsEach VLAN supports both port-based and pro

Alteon OS Application GuideChapter 3: VLANs  8942C4911, January 2007PVLAN Configuration GuidelinesConsider the following guidelines when you conf

Alteon OS Application Guide942C4911, January 2007Part 4: Appendices 243Appendix A: Troubleshooting 245Monitoring Ports 246Port Mirroring behavior 247

Alteon OS Application Guide90  Chapter 3: VLANs 42C4911, January 20073. Add member ports for this PVLAN. 4. Configure VLAN tagging for ports.

Alteon OS Application GuideChapter 3: VLANs  9142C4911, January 20076. Verify PVLAN operation. >> /info/l2/vlan (View VLAN

Alteon OS Application Guide92  Chapter 3: VLANs 42C4911, January 2007

42C4911, January 2007 93CHAPTER 4Ports and TrunkingTrunk groups can provide super-bandwidth, multi-link connections between GbE Switch Mod-ules or oth

Alteon OS Application Guide94  Chapter 4: Ports and Trunking 42C4911, January 2007OverviewWhen using port trunk groups between two switches, as sh

Alteon OS Application GuideChapter 4: Ports and Trunking  9542C4911, January 2007Statistical Load DistributionNetwork traffic is statistically di

Alteon OS Application Guide96  Chapter 4: Ports and Trunking 42C4911, January 2007Trunk group configuration rules The trunking feature operates ac

Alteon OS Application GuideChapter 4: Ports and Trunking  9742C4911, January 2007Port Trunking ExampleIn the example below, three ports are trunk

Alteon OS Application Guide98  Chapter 4: Ports and Trunking 42C4911, January 20071. Connect the switch ports that will be members in the trunk gr

Alteon OS Application GuideChapter 4: Ports and Trunking  9942C4911, January 20074. Examine the trunking information on each switch.Information a