Avaya 4500 Configuration Manual

Avaya 4500 Configuration Manual

Ethernet routing switch, private vlan edge technical
Hide thumbs Also See for 4500:

Advertisement

Ethernet Routing Switch
4500, 5500, 5600
Engineering
Private VLAN Edge Technical
Configuration Guide
Avaya Data Solutions
Document Date: July 2010
Document Number: NN48500-592
Document Version: 1.1

Advertisement

Table of Contents
loading
Need help?

Need help?

Do you have a question about the 4500 and is the answer not in the manual?

Questions and answers

Subscribe to Our Youtube Channel

Summary of Contents for Avaya 4500

  • Page 1 Ethernet Routing Switch 4500, 5500, 5600 Engineering Private VLAN Edge Technical Configuration Guide Avaya Data Solutions Document Date: July 2010 Document Number: NN48500-592 Document Version: 1.1...
  • Page 2 Avaya Support Web site: http://www.avaya.com/support Please note that if you acquired the product from an authorized reseller, the warranty is provided to you by said reseller and not by Avaya. Licenses THE SOFTWARE LICENSE TERMS AVAILABLE ON THE AVAYA WEBSITE, HTTP://SUPPORT.AVAYA.COM/LICENSEINFO/...
  • Page 3 Abstract This Technical Configuration Guide illustrates the configurations necessary for the Private VLAN Edge functionality on the Ethernet Routing Switches. The use of the Secure Router is also included for a specific scenario. Private VLAN Edge Technical Configuration Guide...
  • Page 4: Table Of Contents

    Conventions ..............................5 Private VLAN Edge ..........................6 Configuration Example ........................7 Private VLAN Example for Internet Access using an Avaya Ethernet Routing Switch 4500 Series 7 Private VLAN Example using VLAN Tagging for Server Backup an Avaya Ethernet Routing Switch 5520-24T-PWR ..........................
  • Page 5: Document Updates

    Italic text in a Courier New font indicates text the user must enter or select in a menu item, button or command: ERS5520-48T# show running-config Output examples from Avaya devices are displayed in a Lucinda Console font: ERS5520-48T# show running-config ! Embedded ASCII Configuration Generator Script ! Model = Ethernet Routing Switch 5520-24T-PWR ! Software version = v5.0.0.011...
  • Page 6: Private Vlan Edge

    The private VLAN edge is a feature available on the Ethernet Routing Switch 5000 and Ethernet Routing Switch 4500 series of switches and can be enabled by configuring a policy. Please note the policy that is used for Private VLAN Edge can only force all traffic to one egress port.
  • Page 7: Configuration Example

    21 through 26 will be forwarded only to port 27 where the Secure Router is connected. The Secure Router will provide DHCP, firewall, and NAT/PAT services. Note that any ERS 4500 or 5000 series Ethernet Routing Switch can be used in this scenario. For this example: ...
  • Page 8 2.1.1 Configuration – 4550T-1 2.1.1.1 Go to configuration mode 4550T-1 Step 1 - Enter configuration mode 4550T-PWR> enable 4550T-PWR# cmd cli 4550T-PWR# configure terminal 4550T-PWR(config)# banner disable 4550T-PWR(config)# snmp-server name 4550-1 2.1.1.2 Create the VLAN 4550T-1 Step 1 – Change the VLAN configuration control mode from default setting of strict to automatic;...
  • Page 9 4550T-1 Step 3 – Configure a Layer-2 classifier and classifier element to select all ingress traffic 4550T-1(config)# qos l2-element 1 4550T-1(config)# qos classifier 1 set-id 1 name all_traffic element-type l2 element-id 4550T-1 Step 4 – Add a policy and apply the QoS action to the interface group configured above...
  • Page 10 Configuration - Secure Router interface ethernet 0 address 192.168.96.1 255.255.255.0 mtu 1500 exit qos crypto trusted exit ethernet interface ethernet 1 address 47.133.58.50 255.255.255.0 mtu 1500 exit qos crypto untrusted exit ethernet telnet_server system display-boot-config no reverse_telnet set_baud_rate 56000 exit reverse_telnet pname_server 47.129.29.80...
  • Page 11 2048 exit firewall firewall internet interface ethernet1 exit firewall firewall corp interface ethernet0 policy 1020 out permit nat-ip ethernet1...
  • Page 12 2.1.2 Verify Operations 2.1.2.1 Verify policy configuration Step 1 – Verify Action Extension: 4550T-1# show qos if-action-extension Result: Id: 1 Name: fwd_port_27 Egress Ucast Ifc: Egress NUcast Ifc: Session Id: 0 Storage Type: NonVolatile Step 2 – Verify Action:...
  • Page 13 Name: fwd_27 Drop: No Update DSCP: Ignore 802.1p Priority: Ignore Set Drop Precedence: Low Drop Extension: fwd_port_27 Session Id: 0 Storage Type: NonVolatile Step 1 – Verify QoS Policy: 4550T-1# show qos policy Result: Id: 1 Policy Name: fwd_port_27...
  • Page 14: Private Vlan Example Using Vlan Tagging For Server Backup An Avaya Ethernet Routing Switch 5520-24T-Pwr

    VMware Server 1 and VMware Server 2 will be forwarded only to the VMware backup server. Note that any ERS 4500 or 5000 series Ethernet Routing Switch can be used in this scenario. For this example: ...
  • Page 15 Add data VLAN 1100 with port members 2, 3, and 6 for Client 2’s traffic to both VMware Server 1 and VMware Server 2 Add data VLAN 1200 with port members 2, 3, and 4 to allow traffic between the VMware...
  • Page 16 2.2.1.3 Add Policy to forward all VMware backup traffic to port 4 ERS5520-1 Step 1 – Create a new interface group with a class of unrestricted and add only the VMware Server ports ERS5520-1(config)# qos if-group name VMware-Servers class unrestricted ERS5520-1(config)# qos if-assign port 2-3 name VMware-Servers ERS5520-1 Step 2 –...
  • Page 17: Customer Service

    3. Customer service Visit the Avaya Web site to access the complete range of services and support that Avaya provides. Go www.avaya.com or go to one of the pages listed in the following sections. 3.1 Getting technical documentation To download and print selected technical publications and release notes directly from the Internet, go to www.avaya.com/support.

This manual is also suitable for:

55005600

Table of Contents