Page 2
Copyright 1999 Allied Telesyn International, Corp. 960 Sewart Drive Suite B, Sunnyvale CA 94086 USA All rights reserved. No part of this publication may be reproduced without prior written permission from Allied Telesyn International, Corp. CentreCom is a registered trademark of Allied Telesyn International, Corp. All other product names, company names, logos or other designations mentioned herein are trademarks or registered trademarks of their respective owners.
Preface This guide describes the use and configuration of the following Allied Telesyn Gigabit Ethernet switches running software version 4.x. Switch Model Description AT-8518SX 16 auto-negotiating 10Base-T/100Base-TX ports Two Gigabit Ethernet ports with short wavelength GBIC connectors AT-8518LX 16 auto-negotiating 10Base-T/100Base-TX ports Two Gigabit Ethernet ports with long wavelength GBIC connectors AT-9108SX 6 Gigabit Ethernet ports with SC connectors...
Audience Description Audience Description This guide provides the required information to configure the software running on the Gigabit Ethernet switches. This guide is intended for use by network administrators who are responsible for installing and setting up network equipment. It assumes a basic working knowledge of the following: Local area networks (LANs) Ethernet concepts...
AT-9108, AT-8518, AT-8525, and AT-8550 User’s Guide Conventions Document This guide uses the following conventions: Note A note provides additional information. Caution A caution indicates that performing or omitting a specific action may result in equipment damage or loss of data.
Organization Organization This guide is divided into xx chapters and xx appendices, as follows: Section Title Description Chapter 1, Overview A description of the Gigabit switch’s software features and software factory default settings Chapter 2, Accessing the Switch The basics of managing the Gigabit switches Chapter 3, Configuring Switch Ports The procedures to configure the switch ports Chapter 4, Virtual LANs (VLANs)
AT-9108, AT-8518, AT-8525, and AT-8550 User’s Guide Related Publications Allied Telesyn wants our customers to be well informed by providing the most up-to-date and most easily accessible way to find our guides and other technical information. Visit our website at: www.alliedtelesyn/techhome.htm.com and download the following guide: AT-9108, AT-8518, AT-8525, and AT-8550 User’s...
Chapter 1 Overview This chapter describes the following: Gigabit Ethernet switch software features How to use the Gigabit Ethernet switch in your network configuration Software factory default settings Summary of Features The software features include the following: Virtual local area networks (VLANs) including support for IEEE 802.1Q and IEEE 802.1p Spanning Tree Protocol (STP) (IEEE 802.1D) with multiple STP domains...
Summary of Features Distance Vector Multicast Routing Protocol (DVMRP) Protocol Independent Multicast-Dense Mode (PIM-DM) IPX, IPX/RIP, and IPX/SAP support Load sharing on multiple ports Console command-line interface (CLI) connection Telnet CLI connection Simple Network Management Protocol (SNMP) support Remote Monitoring (RMON) Traffic mirroring for all ports Note For more information on the Gigabit switch components, refer to the...
AT-9108, AT-8518, AT-8525, and AT-8550 User’s Guide Spanning Tree The switches support the IEEE 802.1D Spanning Tree Protocol (STP), Protocol which is a bridge-based mechanism for providing fault tolerance on networks. STP enables you to implement parallel paths for network...
Summary of Features IP Multicast The switches can use IP multicasting to allow a single IP host to Routing transmit a packet to a group of IP hosts. The switch softwre supports multicast routes that are learned by way of the Distance Vector Multicast Routing Protocol (DVMRP) or Protocol Independent Multicast-Dense Mode (PIM-DM).
AT-9108, AT-8518, AT-8525, and AT-8550 User’s Guide Memory Requirements Your Gigabit switch must have 32MB of DRAM in order to support the features in switch software version 4.0 and above. This is not an issue for the AT-8525 and the AT-8550 models, and all currently shipping switches contain 32MB.
Network Configuration Example Network Configuration Example Using Allied Telesyn’s Gigabit Ethernet switches, you can build a complete end-to-end LAN switching infrastructure that consistently delivers the same functionality, features, and management interface throughout. Functionality includes non-blocking switch fabric, wire- speed routing, and Policy-Based QoS. Features include IP routing with RIP, RIP v2, and OSPF, IP multicast routing support with IGMP, DVMRP, and PIM-DM, VLAN support by way of IEEE 802.1Q (including the Generic VLAN Registration Protocol, or GVRP), and standard...
Page 21
AT-8525 are used for enterprise desktop connectivity; a combination of the AT-8518 and AT-8525 is used for segment switching; and the AT-9108 is used for server switching. A unique feature of the Gigabit switches is that they provide full layer 3 switching or routing.
Software Factory Defaults Software Factory Defaults Table 1-1 shows factory defaults for global software features. Table 1-1 Gigabit Switches Global Factory Defaults Item Default Setting Serial or Telnet user account admin with no password and user with no password Web network management Enabled SNMP read community string public...
Page 23
AT-9108, AT-8518, AT-8525, and AT-8550 User’s Guide Table 1-1 Gigabit Switches Global Factory Defaults (Continued) Item Default Setting PIM-DM Disabled IPX routing Disabled Disabled Disabled Port mirroring Disabled Note For default settings of individual software features, refer to individual chapters in this guide.
Chapter 2 Accessing the Switch This chapter provides the following required information to begin managing the Gigabit switch: Understanding the command syntax Line-editing commands Command history substitution Configuring the switch for management Switch management methods Configuring SNMP Checking basic connectivity Using the Simple Network Time Protocol (SNTP) Note For configuration changes to be retained through a power cycle or...
AT-9108, AT-8518, AT-8525, and AT-8550 User’s Guide Understanding the Command Syntax This section describes the steps to take when entering a command. Refer to the sections that follow for detailed information on using the command-line interface. To use the command-line interface (CLI), follow these steps: 1.
AT-9108, AT-8518, AT-8525, and AT-8550 User’s Guide Abbreviated Abbreviated syntax is the shortest, most unambiguous, allowable Syntax abbreviation of a command or parameter. Typically, this is the first three letters of the command. Note When using abbreviated syntax, you must enter enough characters to make the command unambiguous and distinguishable to the switch.
Understanding the Command Syntax Symbols You may see a variety of symbols shown as part of the command syntax. These symbols explain how to enter the command, and you do not type them as part of the command itself. Table 2-1 summarizes command syntax symbols.
AT-9108, AT-8518, AT-8525, and AT-8550 User’s Guide Line-Editing Keys Table 2-2 describes the line-editing keys available using the CLI. Table 2-2 Line-Editing Ke y Key(s) Description Backspace Deletes character to the left of cursor and shifts the remainder of line to left.
Command History Command History The switch software “remembers” the last 49 commands you enter. You can display a list of these commands by using the following command: history...
AT-9108, AT-8518, AT-8525, and AT-8550 User’s Guide Common Commands Table 2-3 describes common commands used to manage the switch. Commands specific to a particular feature are described in the other chapters of this guide. Table 2-3 Common Commands Command Description create account [admin | user] Creates a user account.
Page 32
Common Commands Table 2-3 Common Commands (Continued) Command Description config timezone <gmt_offset> {autodst | Configures the time zone information to the noautodst} configured offset from GMT time. The format of gmt_offset is +/- minutes from GMT time. Specify: autodst — Enables automatic Daylight Savings Time change nosautodst —...
Page 33
AT-9108, AT-8518, AT-8525, and AT-8550 User’s Guide Table 2-3 Common Commands (Continued) Command Description unconfig switch {all} Resets all switch parameters (with the exception of defined user accounts, and date and time information) to the factory defaults. If you specify the keyword all, the user account information is reset as well.
Configuring Management Access Configuring Management Access The switch software supports the following two level levels of management: User Administrator A user-level account has viewing access to all manageable parameters, with the exception of the following: User account database SNMP community strings A user-level account can use the ping command to test device reachability, and change the password assigned to the account name.
AT-9108, AT-8518, AT-8525, and AT-8550 User’s Guide Default Accounts By default, the switch is configured with two accounts, as shown in Table 2-4. Table 2-4 Default Accounts Account Name Access Level admin This user can access and change all manageable parameters. The admin account cannot be deleted.
Configuring Management Access Note If you forget your password while logged out of the command-line interface, contact your local technical support representative, who will advise on your next course of action. Creating a The switch can have a total of 16 management accounts. You can use Management the default names (admin and user), or you can create new names and passwords for the accounts.
AT-9108, AT-8518, AT-8525, and AT-8550 User’s Guide Methods of Managing the Switch You can manage the switch using the following methods: Access the CLI by connecting a terminal (or workstation with terminal-emulation software) to the console port. Access the CLI over a TCP/IP network using a Telnet connection.
Using Telnet Using Telnet Any workstation with a Telnet facility should be able to communicate with the switch over a TCP/IP network. Up to eight active Telnet sessions can access the switch concurrently. If idle timeouts are enabled, the Telnet connection will time out after 20 minutes of inactivity.
Page 39
AT-9108, AT-8518, AT-8525, and AT-8550 User’s Guide You can enable BootP on a per-VLAN basis by using the following command: enable bootp vlan [<name> | all] By default, BootP is enabled on the default VLAN. If you configure the switch to use BootP, the switch IP address is not retained through a power cycle, even if the configuration has been saved.
Page 40
Using Telnet To configure the IP settings manually, perform the following steps: 1. Connect a terminal or workstation running terminal-emulation software to the console port. 2. At your terminal, press [Return] one or more times until you see the login prompt. 3.
AT-9108, AT-8518, AT-8525, and AT-8550 User’s Guide Note As a general rule, when configuring any IP addresses for the switch, you can express a subnet mask by using dotted decimal notation, or by using classless inter-domain routing notation (CIDR). CIDR uses a forward slash plus the number of bits in the subnet mask.
Using Telnet Disabling Telnet By default, Telnet services are enabled on the switch. You can choose Access to disable Telnet by entering disable telnet To re-enable Telnet on the switch, at the console port enter enable telnet You must be logged in as an administrator to enable or disable Telnet.
AT-9108, AT-8518, AT-8525, and AT-8550 User’s Guide IP Host Configuration Commands Table 2-5 describes the commands that are used to configure IP settings on the switch. Table 2-5 IP Host Configuration Commands Command Description config iparp add <ipaddress> Adds a permanent entry to the Address Resolution <mac_address>...
Domain Name Service Client Services Domain Name Service Client Services The Domain Name Service (DNS) client in ExtremeWare augments the following commands to allow them to accept either IP addresses or host names: telnet download [image | configuration | bootrom] upload configuration ping traceroute...
AT-9108, AT-8518, AT-8525, and AT-8550 User’s Guide Using the Simple Network Time Protocol The switch software supports the client portion of the Simple Network Time Protocol (SNTP) Version 3 based on RFC1769. SNTP can be used by the switch to update and synchronize its internal clock from a Network Time Protocol (NTP) server.
Page 46
Using the Simple Network Time Protocol Table 2-7 Greenwich Mean Time Offsets (Continued) Common Time Zone Offset in Offset in Cities References Hours Minutes -5:00 -300 EST - Eastern Standard Bogota, Columbia; Lima, Peru; New York, NY, Trevor City, MI USA -6:00 -360 CST - Central Standard...
Page 47
AT-9108, AT-8518, AT-8525, and AT-8550 User’s Guide Table 2-7 Greenwich Mean Time Offsets (Continued) Common Time Zone Offset in Offset in Cities References Hours Minutes +8:00 +480 CCT - China Coast, Russia Zone 7 +9:00 +540 JST - Japan Standard, Russia...
Page 48
Using the Simple Network Time Protocol NTP queries are first sent to the primary server. If the primary server does not respond within 1 second, or if it is not synchronized, the switch queries the secondary server (if one is configured). If the switch cannot obtain the time, it restarts the query process.
Using SNMP Using SNMP Any Network Manager running the Simple Network Management Protocol (SNMP) can manage the switch, provided the Management Information Base (MIB) is installed correctly on the management station. Each Network Manager provides its own user interface to the management facilities.
Page 51
AT-9108, AT-8518, AT-8525, and AT-8550 User’s Guide Community strings — The community strings allow a simple method of authentication between the switch and the remote Network Manager. There are two types of community strings on the switch. Read community strings provide read-only access to the switch.
Using SNMP Table 2-9 SNMP Configuration Commands (Continued) Command Description config snmp delete [<ipaddress> Deletes the IP address of a specified SNMP {<mask>} | all] management station or all SNMP management stations. If you delete all addresses, any machine can have SNMP management access to the switch. config snmp delete trapreceiver Deletes the IP address of a specified trap receiver or [<ip_address>...
AT-9108, AT-8518, AT-8525, and AT-8550 User’s Guide Resetting and To reset and disable SNMP settings, use the commands in Table 2-10. Disabling SNMP Table 2-10 SNMP Reset and Disable Commands Command Description disable snmp access Disables SNMP on the switch. Disabling SNMP access does not affect the SNMP configuration (for example, community strings).
Checking Basic Connectivity Checking Basic Connectivity The switch offers the following commands for checking basic connectivity: ping traceroute Ping The ping command enables you to send Internet Control Message Protocol (ICMP) echo messages to a remote IP device. The ping command is available for both the user and administrator privilege level.
Chapter 3 Configuring Switch Ports This chapter describes how to configure ports on the switch. . Ports on the switch can be configured in the following ways: Enabling and disabling individual ports Configuring the port speed (Fast Ethernet ports only) Configuring half- or full-duplex mode Creating load-sharing groups on multiple ports Changing the Quality or Service (QoS) setting for individual...
Enabling and Disabling Ports Enabling and Disabling Ports By default, all ports are enabled. To enable or disable one or more ports, use the following command: [enable | disable] port <portlist> For example, to disable ports 3, 5, and 12 through 15 , enter the following: disable port 3,5,12-15 Even though a port is disabled, the link remains enabled for...
AT-9108, AT-8518, AT-8525, and AT-8550 User’s Guide Configuring Port Speed and Duplex Setting By default, the switch is configured to use autonegotiation to determine the port speed and duplex setting for each port. You can select to manually configure the duplex setting and the speed of 10/100 Mbps ports, and you can manually configure the duplex setting on Gigabit Ethernet ports.
Port Commands Port Commands Table 3-1 describes the switch port commands. Table 3-1 Port Commands Command Description enable learning port <portlist> Enables MAC address learning on one or more ports. The default setting is enabled. enable port <portlist> Enables a port. enable sharing <master_port>...
Page 59
AT-9108, AT-8518, AT-8525, and AT-8550 User’s Guide Table 3-1 Port Commands (Continued) Command Description disable port <portlist> Disables a port. Even when disabled, the link is available for diagnostic purposes. disable sharing <master_port> Disables a load-sharing group of ports. disable smartredundancy Disables the smart redundancy feature.
Load Sharing on the Switch Load Sharing on the Switch Load sharing with switches allows you to increase bandwidth and resilience between switches by using a group of ports to carry traffic in parallel between switches. The sharing algorithm allows the switch to use multiple ports as a single logical port.
Page 61
3-2, Table 3-3, Table 3-4 Table 3-5 show the possible load- sharing port group combinations for the AT-9108, AT-8518, AT-8525, and AT-8550, respectively. Table 3-2 Port Combinations for the AT-9108 Load-Sharing Group 4-port groups 2-port groups Table 3-3 Port Combinations for the AT-8518...
Load Sharing on the Switch Table 3-5 Port Combinations for the AT-8550 Load-Sharing Group 1 2 3 4 5 6 7 8 9 4-port groups x x x x x x x x x x x x x x x x x x x x x x x x 2-port groups x x x x x x x x x x x x x x x x x x x x x x x x Load-Sharing Group 2...
AT-9108, AT-8518, AT-8525, and AT-8550 User’s Guide Note Do not disable a port that is part of a load-sharing group. Disabling the port prevents it from forwarding traffic, but still allows the link to initialize. As a result, a partner switch does receive a valid indication that the port is not in a forwarding state, and the partner switch will continue to forward packets.
Port Mirroring Port Mirroring Port-mirroring configures the switch to copy all traffic associated with one or more ports to a monitor port on the switch. The monitor port can be connected to a network analyzer or RMON probe for packet analysis. The switch uses a traffic filter that copies a group of traffic to the monitor port.
AT-9108, AT-8518, AT-8525, and AT-8550 User’s Guide Port Mirroring Port mirroring commands are described in Table 3-6. Commands Table 3-6 Port Mirroring Configuration Command Command Description enable mirroring to <port> Dedicates a port to be the mirror output port. config mirroring add [mac <mac_address> | Adds a single mirroring filter definition.
Chapter 4 Virtual LANs (VLANs) Setting up Virtual Local Area Networks (VLANs) on the switch eases many time-consuming tasks of network administration while increasing efficiency in network operations. This chapter describes the concept of VLANs and explains how to implement VLANs on the switch. Overview of Virtual LANs The term “VLAN”...
Page 68
Overview of Virtual LANs VLANs provide extra security. Devices within each VLAN can only communicate with member devices in the same VLAN. If a device in VLAN Marketing must communicate with devices in VLAN Sales, the traffic must cross a routing device.
AT-9108, AT-8518, AT-8525, and AT-8550 User’s Guide Types of VLANs The switch supports a maximum of 256 VLANs. VLANs can be created according to the following criteria: Physical port 802.1Q tag Ethernet, LLC SAP, or LLC/SNAP Ethernet protocol type A combination of these criteria...
Page 70
VLAN. Figure 4-2 illustrates a single VLAN that spans two AT-9108 switches. All ports on both switches belong to VLAN Sales. The two switches are connected using slot 8, port 4 on System 1, and slot 1, port 1 on System 2.
AT-9108, AT-8518, AT-8525, and AT-8550 User’s Guide To create multiple VLANs that span two switches in a port-based VLAN, a port on Switch 1 must be cabled to a port on Switch 2 for each VLAN you want to have span across the switches. At least one port on each switch must be a member of the corresponding VLANs, as well.
Page 72
Types of VLANs Uses of Tagged VLANs. Tagging is most commonly used to create VLANs that span switches. The switch-to-switch connections are typically called trunks. Using tags, multiple VLANs can span multiple switches using one or more trunks. In a port-based VLAN, each VLAN requires its own pair of trunk ports, as shown in Figure 4-3.
Page 73
AT-9108, AT-8518, AT-8525, and AT-8550 User’s Guide Centre COM Switch 1 = Marketing = Sales 802.1Q = Tagged port Tagged server Centre COM Switch 2 Figure 4-4 Physical Diagram of Tagged and Untagged Traffic Figure 4-5 shows a logical diagram of the same network.
Types of VLANs As data passes out of the switch, the switch determines if the destination port requires the frames to be tagged or untagged. All traffic coming from and going to the server is tagged. Traffic coming from and going to the trunk ports is tagged. The traffic that comes from and goes to the other stations on this network is not tagged.
Page 75
AT-9108, AT-8518, AT-8525, and AT-8550 User’s Guide Figure 4-6, Switch A is a member of VLAN Red. VLAN Red has the VLANid 10. Port 1 and port 2 on Switch A are added to the VLAN as untagged. The configuration for Switch A is as follows:...
Types of VLANs GVRP Commands. Table 4-1 describes GVRP commands. Table 4-1 GVRP Commands Command Description enable gvrp Enables the Generic VLAN Registration Protocol (GVRP). The default setting is disabled. config gvrp {listen | send | both | Configures the sending and receiving GVRP information none} {port <portlist>} one or all a ports.
Page 77
AT-9108, AT-8518, AT-8525, and AT-8550 User’s Guide 192.207.35.1 192.207.36.1 My Company 192.207.35.0 192.207.36.0 Finance Personnel = IP traffic = All other traffic Figure 4-7 Protocol-Based VLANs Predefined Protocol Filters. The following protocol filters are predefined on the switch: NetBIOS DECNet...
Page 78
Types of VLANs To define a protocol filter, do the following: 1. Create a protocol using the following command: create protocol <protocol_name> For example: create protocol fred The protocol name can have a maximum of 31 characters. 2. Configure the protocol using the following command: config protocol <protocol_name>...
AT-9108, AT-8518, AT-8525, and AT-8550 User’s Guide Note For more information on SNAP for Ethernet protocol types, see TR 11802-5:1997 (ISO/IEC) [ANSI/IEEE std. 802.1H, 1997 Edition]. Deleting a Protocol Filter. If a protocol filter is deleted from a VLAN, the VLAN is assigned a protocol filter of .
VLAN Names VLAN Names The switch supports up to 256 different VLANs. Each VLAN is given a name that can be up to 32 characters. VLAN names can use standard alphanumeric characters. The following characters are not permitted in a VLAN name: Space Comma Quotation mark...
AT-9108, AT-8518, AT-8525, and AT-8550 User’s Guide Configuring VLANs on the Switch This section describes the commands associated with setting up VLANs on the switch. To configuring a VLAN: 1. Create and name the VLAN. 2. Assign an IP address and mask (if applicable) to the VLAN, if needed.
Page 82
Configuring VLANs on the Switch Table 4-2 VLAN Configuration Commands (Continued) Command Description config protocol <protocol_name> Configures a protocol filter. Supported [add | delete] <protocol_type> <protocol_type> values include: <hex_value> {<protocol_type> etype <hex_value>} ... snap The variable <hex_value> is a hexadecimal number between 0 and FFFF that represents either the Ethernet protocol type (for EtherType), the DSAP/SSAP combination (for LLC), or the SNAP-encoded Ethernet...
AT-9108, AT-8518, AT-8525, and AT-8550 User’s Guide VLAN The following example creates a tag-based VLAN named video. It Configuration assigns the VLANid 1000. Ports 4 through 8 are added as tagged ports to the VLAN. Examples create vlan video config video tag 1000...
Displaying VLAN Settings Displaying VLAN Settings To display VLAN settings, use the following command: show vlan {<name> | all} command displays summary information about each show VLAN, and includes the following: Name VLANid How the VLAN was created (manually or by GVRP) IP address STPD information Protocol information...
AT-9108, AT-8518, AT-8525, and AT-8550 User’s Guide Deleting VLANs To delete a VLAN, or to return VLAN settings to their defaults, use the commands listed in Table 4-3. Table 4-3 VLAN Delete and Reset Commands Command Description disable ignore-stp vlan <name>...
Chapter 5 Forwarding Database (FDB) This chapter describes the contents of the forwarding database (FDB), how the FDB works, and how to configure the FDB. Overview of the FDB The switch maintains a database of all media access control (MAC) addresses received on all of its ports.
Overview of the FDB Non-aging entries — If the aging time is set to zero, all aging entries in the database are defined as static, non-aging entries. This means that they do not age, but they are still deleted if the switch is reset.
AT-9108, AT-8518, AT-8525, and AT-8550 User’s Guide Associating a QoS You can associate a QoS profile with a MAC address (and VLAN) of a Profile with an device that will be dynamically learned. The FDB treats the entry like a dynamic entry (it is learned, it can be aged out of the database, and FDB Entry so on).
AT-9108, AT-8518, AT-8525, and AT-8550 User’s Guide The following example adds a permanent entry to the FDB: Configuration create fdbentry 00:E0:2B:12:34:56 vlan Examples marketing port 4 The permanent entry has the following characteristics: MAC address is 00E02B123456. VLAN name is marketing.
Displaying FDB Entries Displaying FDB Entries To display FDB entries, use the command show fdb {<mac_address> | vlan <name> | <portlist> | permanent | qos} where the following is true: mac_address — Displays the entry for a particular MAC address. vlan <name>...
AT-9108, AT-8518, AT-8525, and AT-8550 User’s Guide Removing FDB Entries You can remove one or more specific entries from the FDB, or you can clear the entire FDB of all entries by using the commands listed Table 5-2. Table 5-2 Removing FDB Entry Commands...
Chapter 6 Spanning Tree Protocol (STP) Using the Spanning Tree Protocol (STP) functionality of the switch makes your network more fault tolerant. The following sections explain more about STP and the STP features supported by the switch software. Note STP is a part of the 802.1D bridge specification defined by the IEEE Computer Society.
Spanning Tree Protocol Domains Spanning Tree Protocol Domains The switch can be partitioned into multiple virtual bridges. Each virtual bridge can run an independent Spanning Tree instance. Each Spanning Tree instance is called a Spanning Tree Domain (STPD). Each STPD has its own Root Bridge and active path. Once the STPD is created, one or more VLANs can be assigned to it.
AT-9108, AT-8518, AT-8525, and AT-8550 User’s Guide STPD Status for If a port is added to a VLAN by GVRP, the newly added port reflects GVRP-Added the SPTD membership and status of the VLAN to which it is added. For example, if VLAN Red is a member of STPD s0, and s0 is enabled,...
STP Configurations STP Configurations When you assign VLANs to an STPD, pay careful attention to the STP configuration and its effect on the forwarding of VLAN traffic. Figure 6-1 illustrates a network that uses VLAN tagging for trunk connections. The following four VLANs have been defined: Sales is defined on Switch A, Switch B, and Switch M.
Page 99
AT-9108, AT-8518, AT-8525, and AT-8550 User’s Guide When the switches in this configuration start up, STP configures each STPD such that there are no active loops in the topology. STP could configure the topology in a number of ways to make it loop-free.
Page 100
STP Configurations STP may block traffic between Switch 1 and Switch 3 by disabling the trunk ports for that connection on each switch. Switch 2 has no ports assigned to VLAN marketing. Therefore, if the trunk for VLAN marketing on Switches 1 and 3 is blocked, the traffic for VLAN marketing will not be able to traverse the switches.
AT-9108, AT-8518, AT-8525, and AT-8550 User’s Guide Configuring STP on the Switch STP configuration involves the following actions: Create one or more STP domains using the following command: create stpd <stpd_name> Note STPD, VLAN, and QoS profile names must all be unique. For example, a name used to identify a VLAN cannot be used when you create an STPD or a QoS profile.
Page 102
Configuring STP on the Switch The following parameters can be configured on each port: Path cost Port priority Note The device supports the RFC 1493 Bridge MIB. Parameters of only the s0 default STPD are accessible through this MIB. Table 6-1 shows the commands used to configure STP.
Page 103
AT-9108, AT-8518, AT-8525, and AT-8550 User’s Guide Table 6-1 STP Configuration Commands (Continued) Command Description config stpd <stpd_name> maxage Specifies the maximum age of a BPDU in this STPD. <value> The range is 6 through 40. The default setting is 20 seconds.
Displaying STP Settings Displaying STP Settings To display STP settings, use the following command: show stpd {<stpd_name>} This command displays the following information: STPD name Bridge ID STPD configuration information To display the STP state of a port, use the following command: show stpd <stpd_name>...
AT-9108, AT-8518, AT-8525, and AT-8550 User’s Guide Disabling and Resetting STP To disable STP or return STP settings to their defaults, use the commands listed in Table 6-2. Table 6-2 STP Disable and Reset Commands Command Description delete stpd <stpd_name>...
Chapter 7 Quality of Service (QoS) This chapter describes the concept of Quality of Service (QoS) and explains how to configure QoS on the switch. Overview of Quality of Service QoS is a feature of Gigabit switch that allows you to specify different service levels for traffic traversing the switch.
Building Blocks Building Blocks The service that a particular type of traffic receives is determined by assigning a QoS profile to a traffic grouping or classification. The building blocks are defined as follows: QoS profile — Defines bandwidth and prioritization parameters.
AT-9108, AT-8518, AT-8525, and AT-8550 User’s Guide QoS Mode There are two modes of QoS: ingress and egress. The default mode is ingress mode. Ingress mode can use the widest variety of traffic groupings, but limits the number of QoS profiles that can be used to four.
QoS Profiles QoS Profiles Four default QoS profiles are provided that cannot be deleted. The default QoS profile names are as follows: The default QoS profiles exist in either ingress or egress mode. In ingress mode, only the default QoS profiles are used. In egress mode, up to 28 additional custom profiles may be defined, for a total of 32.
AT-9108, AT-8518, AT-8525, and AT-8550 User’s Guide Modifying a QoS You can modify the default profiles as desired. To modify the Profile parameters of an existing QoS profile, use the following command: config qosprofile <qosname> {minbw <percent>} {maxbw <percent>} {priority <level>}...
QoS Profiles and QoS Mode Details QoS Profiles and QoS Mode Details As indicated previously, changing the default QoS mode from ingress to egress is typically not necessary. In ingress mode, the QoS profiles qp1 through qp4 are mapped directly to the four hardware queues on every switch port.
AT-9108, AT-8518, AT-8525, and AT-8550 User’s Guide The Blackhole QoS Profile In the description of various options for configuring Policy-Based QoS, there is an option to specify blackhole in place of a named QoS profile. As its name implies, a traffic grouping assigned to the “blackhole”...
Traffic Groupings and Creating a QoS Policy Traffic Groupings and Creating a QoS Policy Once a QoS profile is modified to the desired settings for bandwidth and priority, you can assign the profile to a particular traffic grouping. A traffic grouping is a classification of traffic that has one or more attributes in common.
AT-9108, AT-8518, AT-8525, and AT-8550 User’s Guide Table 7-2 Traffic Groupings by QoS Mode (Continued) Packet priority groupings Packet priority groupings 802.1p prioritization bits PACE Physical/logical groupings Physical/logical groupings Source port VLAN VLAN IPQoS Traffic You can apply a set of destination IP addresses to an IPQoS traffic Groupings grouping by specifying a network address and subnet mask.
Page 116
Traffic Groupings and Creating a QoS Policy Table 7-3 describes the options for the long form syntax. Table 7-3 Config IPQoS Command Options Command Option Description [add | delete] Adds or deletes an IPQoS traffic grouping. [tcp | udp | other | all] The protocol selection for the traffic grouping.
AT-9108, AT-8518, AT-8525, and AT-8550 User’s Guide IPQoS When using the config ipqos command, the following rules Implementation apply: Rules The short form of the command only accepts a unicast <dest_ipaddr>. An IP addr of 0.0.0.0 /0 can be used as a wildcard unicast destination.
Traffic Groupings and Creating a QoS Policy IPQoS As previously mentioned, there are two types of IPQoS command Precedence formats, a short form and a long form (also called a flow). A long form multicast and unicast entry (flow) has higher precedence over a matching short form multicast and unicast entry (non-flow).
AT-9108, AT-8518, AT-8525, and AT-8550 User’s Guide IPQoS Examples This section contains several examples of IPQoS, and illustrates some of the many configuration options available for IPQoS. The section begins with an example that uses the short form of the config ipqos command.
Traffic Groupings and Creating a QoS Policy The following example illustrates basic precedence within IPQoS. It configures the following two IPQoS groupings: config ipqos add 10.1.2.3/32 qp4 config ipqos add 10.1.2.0/24 qp3 All traffic containing 10.1.2 as the first 24 bits of the destination IP address are assigned to the QoS profile qp3, except traffic that is destined for the station 10.1.2.3, which is assigned to the profile qp4.
AT-9108, AT-8518, AT-8525, and AT-8550 User’s Guide Verifying IPQoS settings. To verify settings made for IPQoS traffic groupings, use the command: show ipqos Intra-Subnet QoS ™ Intra-Subnet QoS (ISQ) allows the application of any IPQoS commands to be effective within a subnet (VLAN) instead of only applying the QoS when traversing a routed subnet.
Page 122
Traffic Groupings and Creating a QoS Policy Permanent MAC addresses. Permanent MAC addresses can be assigned a QoS profile whenever traffic is destined to the MAC address. This can be done when you create a permanent FDB entry. For example: create fdbentry 00:11:22:33:44:55 vlan default port 1 qosprofile qp2 Dynamic MAC Addresses.
AT-9108, AT-8518, AT-8525, and AT-8550 User’s Guide Verifying MAC-Based QoS Settings. To verify any of the MAC-based QoS settings, use either the command show fdb perm or the command show qosprofile <qosname> Packet Groupings This category of traffic groupings consists of the following: Prioritization bits used in IEEE 802.1p packets...
Traffic Groupings and Creating a QoS Policy Physical and Two traffic groupings exist in this category: Logical Source port Groupings VLAN Source Port. A source port traffic grouping implies that any traffic sourced from this physical port uses the indicated QoS profile when the traffic is transmitted out any other port.
AT-9108, AT-8518, AT-8525, and AT-8550 User’s Guide Verifying Configuration and Performance The following information is used to verify the QoS configuration and monitor the use of the QoS policies that are in place. Displaying QoS To display QoS information on the switch, use the following...
Verifying Configuration and Performance QoS Monitor The QOS monitor is a utility that monitors the hardware queues associated with any port(s). The QOS monitor keeps track of the number of frames and the frames per second that a specific queue is responsible for transmitting on a physical port.
AT-9108, AT-8518, AT-8525, and AT-8550 User’s Guide Modifying a QoS Policy If you make a change to the parameters of a QoS profile after a QoS policy has already been formed (by applying a QoS profile to a traffic grouping), the timing of the configuration change depends on the traffic grouping involved.
Configuring QoS Configuring QoS Table 7-6 describes the commands used to configure QoS. Table 7-6 QoS Configuration Commands Command Description enable pace Enables recognition of the PACE bit. Available only in ingress mode. enable isq vlan <name> Enables ISQ on a per-VLAN basis. If the FDB aging timer is shorter than 3,000 seconds, this command automatically changes the FDB aging timer to 3,000 seconds.
Chapter 8 IP Unicast Routing This chapter describes how to configure IP routing on the switch. It assumes that you are already familiar with IP unicast routing. If not, refer to the following publications for additional information: RFC 125 6 —ICMP Router Discovery Messages RFC 181 2 —Requirements for IP Version 4 Routers Note For more information on routing protocols, refer to...
Overview of IP Unicast Routing Router Interfaces The routing software and hardware routes IP traffic between router interfaces. A router interface is simply a VLAN that has an IP address assigned to it. As you create VLANs with IP addresses belonging to different IP subnets, you can also choose to route between the VLANs.
AT-9108, AT-8518, AT-8525, and AT-8550 User’s Guide Populating the The switch maintains an IP routing table for both network routes and Routing Table host routes. The table is populated from the following sources: Dynamically, by way of routing protocol packets or by ICMP...
Page 132
Overview of IP Unicast Routing A static route must be associated with a valid IP subnet. An IP subnet is associated with a single VLAN by its IP address and subnet mask. If the VLAN is subsequently deleted, the static route entries using that subnet must be deleted manually.
AT-9108, AT-8518, AT-8525, and AT-8550 User’s Guide Proxy ARP Proxy Address Resolution Protocol (ARP) was first invented so that ARP-capable devices could respond to ARP Request packets on behalf of ARP-incapable devices. Proxy ARP can also be used to achieve router redundancy and simplify IP client configuration. The switch supports proxy ARP for this type of network configuration.
Proxy ARP Proxy ARP In some networks, it is desirable to configure the IP host with a wider Between Subnets subnet than the actual subnet mask of the segment. Proxy ARP can be used so that the router answers ARP Requests for devices outside of the subnet.
AT-9108, AT-8518, AT-8525, and AT-8550 User’s Guide Relative Route Priorities Table 8-1 lists the relative priorities assigned to routes depending upon the learned source of the route. Note Although these priorities can be changed, do not attempt any manipulation unless you are expertly familiar with the possible consequences.
IP Multinetting IP Multinetting IP multinetting is used in many legacy IP networks when there is a need to overlap multiple subnets into one physical segment. On the switch, you can only assign a single IP address to a router interface (one IP address per VLAN).
AT-9108, AT-8518, AT-8525, and AT-8550 User’s Guide IP Multinetting To use IP multinetting: Operation 1. Select a port on which IP multinetting is to run. For example, select port 2. 2. Remove the default VLAN from the selected port, using the...
IP Multinetting 10. Enable IP multinetting, by using the following command: enable multinetting 11. If you are using RIP, disable RIP on the dummy VLANs, by using the following command: config rip delete net22 Note Multinetted VLAN groups must contain identical port assignments. IP Multinetting The following example configures the switch to have one Examples...
AT-9108, AT-8518, AT-8525, and AT-8550 User’s Guide Configuring IP Unicast Routing This section describes the commands associated with configuring IP unicast routing on the switch. To configure routing: 1. Create and configure two or more VLANs. Although it is possible to enable IP forwarding and an IP...
Configuring IP Unicast Routing Verifying the IP Use the command to display the current show iproute Unicast Routing configuration of IP unicast routing for the switch, and for each VLAN. command displays the currently configured show iproute Configuration routes, and includes how each route was learned. Additional verification commands include the following: show iparp —...
AT-9108, AT-8518, AT-8525, and AT-8550 User’s Guide Configuring DHCP/BootP Relay Once IP unicast routing is configured, you can configure the switch to forward Dynamic Host Configuration Protocol (DHCP) or BootP requests coming from clients on subnets being service by the switch and going to hosts on different subnets.
UDP-Forwarding UDP-Forwarding UDP-forwarding is a flexible and generalized routing utility for handling the directed forwarding of broadcast UDP packets. UDP- forwarding allows applications, such as multiple DHCP relay services from differing sets of VLANs, to be directed to different DHCP servers. The following rules apply to UDP broadcast packets handled by this feature: If the UDP profile includes BootP or DHCP, it is handled...
AT-9108, AT-8518, AT-8525, and AT-8550 User’s Guide UPD-Forwarding In this example, the VLAN Marketing and the VLAN Operations are Example pointed toward a specific backbone DHCP server (with IP address 10.1.1.1) and a backup server (with IP address 10.1.1.2). Additionally, the VLAN LabUser is configured to use any responding DHCP server on a separate VLAN called LabSvrs.
UDP-Forwarding UDP-Forwarding Table 8-2 describes the commands used to configure UDP- Commands forwarding. Table 8-2 UDP-Forwarding Commands Command Description create udp-profile <profile_name> Creates a UDP-forwarding profile. You must use a unique name for the UDP-forwarding profile. config udp-profile <profile_name> add Adds a forwarding entry to the specified UDP- <udp_port>...
AT-9108, AT-8518, AT-8525, and AT-8550 User’s Guide IP Commands Table 8-3 describes the commands used to configure basic IP settings. Table 8-3 Basic IP Commands Command Description enable bootp vlan [<name> | all] Enables the generation and processing of BootP packets on a VLAN to obtain an IP address for the VLAN from a BootP server.
Page 146
IP Commands Table 8-3 Basic IP Commands (Continued) Command Description config iparp add proxy <ipaddress> Configures proxy ARP entries. Up to 64 proxy ARP {<mask>} {<mac_address>} {always} entries can be configured. When is not mask specified, an address with the mask 255.255.255.255 is assumed.
Page 147
AT-9108, AT-8518, AT-8525, and AT-8550 User’s Guide Table 8-4 describes the commands used to configure the IP route table. Table 8-4 Route Table Configuration Commands Command Description enable iproute sharing Enables load sharing if multiple routes to the same destination are available. Only paths with the same lowest cost are shared.
Page 148
IP Commands Table 8-5 describes the commands used to configure the ICMP protocol. Table 8-5 ICMP Configuration Commands Command Description enable icmp redirects {vlan <name>} Enables generation of ICMP redirect messages on one or all VLANs. The default setting is enabled. enable icmp unreachables {vlan <name>} Enables the generation of ICMP unreachable messages on one or all VLANs.
Page 149
AT-9108, AT-8518, AT-8525, and AT-8550 User’s Guide Table 8-5 ICMP Configuration Commands (Continued) Command Description disable icmp unreachables {vlan <name>} Disables the generation of ICMP unreachable messages on one or all VLANs. disable icmp useredirects Disables the changing of routing table information when an ICMP redirect message is received.
Routing Configuration Example Routing Configuration Example Figure 8-2 illustrates a switch that has three VLANs defined as follows: Finance — Protocol-sensitive VLAN using the IP protocol — Ports 1 and 3 have been assigned — IP address 192.207.35.1 Personnel — Protocol-sensitive VLAN using the IP protocol —...
Page 151
AT-9108, AT-8518, AT-8525, and AT-8550 User’s Guide The stations connected to the switch generate a combination of IP traffic and NetBIOS traffic. The IP traffic is filtered by the protocol- sensitive VLANs. All other traffic is directed to the VLAN MyCompany.
Displaying Router Settings Displaying Router Settings To display settings for various IP routing components, use the commands listed in Table 8-6. Table 8-6 Router Show Command Command Description show iparp proxy {<ipaddress> {<mask>}} Displays the proxy ARP table. show ipconfig {vlan <name>} Displays configuration information for one or all VLANs.
AT-9108, AT-8518, AT-8525, and AT-8550 User’s Guide Resetting and Disabling Router Settings To return router settings to their defaults and disable routing functions, use the commands listed in Table 8-7. Table 8-7 Router Reset and Disable Command Command Description clear iparp {<ipaddress> | vlan <name>} Removes dynamic entries in the IP ARP table.
Chapter 9 RIP and OSPF This chapter describes the IP unicast routing protocols available on the switch. It assumes that you are already familiar with IP unicast routing. If not, refer to the following publications for additional information: RFC 105 8 —Routing Information Protocol (RIP) RFC 125 6 —ICMP Router Discovery Messages RFC 172 3 —RIP Version 2 RFC 217 8 —OSPF Version 2...
Overview RIP Versus OSPF The distinction between RIP and OSPF lies in the fundamental differences between distance-vector protocols and link-state protocols. Using a distance-vector protocol, each router creates a unique routing table from summarized information obtained from neighboring routers. Using a link-state protocol, every router maintains an identical routing table created from information obtained from all routers in the autonomous system.
AT-9108, AT-8518, AT-8525, and AT-8550 User’s Guide Overview of RIP RIP is an Interior Gateway Protocol (IGP) first used in computer routing in the Advanced Research Projects Agency Network (ARPAnet) as early as 1969. It is primarily intended for use in homogeneous networks of moderate size.
Overview of RIP Route VLANs that are configured with an IP address, but are configured to Advertisement of not route IP or are not configured to run RIP, do not have their subnets advertised by RIP. Only those VLANs that are configured VLANs with an IP address and are configured to route IP and run RIP have their subnets advertised.
AT-9108, AT-8518, AT-8525, and AT-8550 User’s Guide Overview of OSPF OSPF is a link-state protocol that distributes routing information between routers belonging to a single IP domain, also known as an autonomous system (AS). In a link-state routing protocol, each router maintains a database describing the topology of the autonomous system.
Overview of OSPF Areas OSPF allows parts of a networks to be grouped together into areas. The topology within an area is hidden from the rest of the autonomous system. Hiding this information enables a significant reduction in LSA traffic, and reduces the computations needed to maintain the LSDB.
Page 161
AT-9108, AT-8518, AT-8525, and AT-8550 User’s Guide Not-So-Stubby-Areas (NSSA). NSSAs are similar to the existing OSPF stub area configuration option, but have the following two additional capabilities: External routes originating from an ASBR connected to the NSSA can be advertised within the NSSA.
Page 162
Overview of OSPF Area 2 GIGABIT ETHERNET SWITCH 1000BASE-X NETWORK PORTS ACTIVITY POWER DIAG LINK LINK DISABLED Area 1 GIGABIT ETHERNET SWITCH 1000BASE-X NETWORK PORTS Area 0 ACTIVITY POWER DIAG LINK LINK DISABLED Virtual link Figure 9-1 Virtual Link for Stub Area Virtual links are also used to repair a discontiguous backbone area.
AT-9108, AT-8518, AT-8525, and AT-8550 User’s Guide Route Redistribution Both RIP and OSPF can be enabled simultaneously on the switch. Route re-distribution allows the switch to exchange routes, including static routes, between the two routing protocols. Figure 9-3 shows an example of route re-distribution between an OSPF autonomous system and a RIP autonomous system.
Route Redistribution Configuring Exporting routes from OSPF to RIP, and from RIP to OSPF, are discreet Route configuration functions. To run OSPF and RIP simultaneously, you must first configure both protocols and then verify the independent Redistribution operation of each. Then you can configure the routes to export from OSPF to RIP and the routes to export from RIP to OSPF.
AT-9108, AT-8518, AT-8525, and AT-8550 User’s Guide Redistributing Routes into RIP. Enable or disable the exporting of static and OSPF-learned routes into the RIP domain, using the following commands: enable rip export [static | ospf | ospf-intra | ospf-inter | ospf-extern1 | ospf-extern2] cost {<metric>} tag {<number>}...
Configuring RIP Configuring RIP Table 9-2 describes the commands used to configure RIP. Table 9-2 RIP Configuration Commands Command Description enable rip Enables RIP. The default setting is disabled. enable rip export static Enables the advertisement of static routes using RIP.
Page 167
AT-9108, AT-8518, AT-8525, and AT-8550 User’s Guide Table 9-2 RIP Configuration Commands (Continued) Command Description config rip add vlan [<name> | all] Configures RIP on an IP interface. If no VLAN is specified, then all is assumed. When an IP interface is created, per-interface RIP configuration is disabled by default.
RIP Configuration Example RIP Configuration Example Figure 9-4 illustrates a switch that has three VLANs defined as follows: Finance — Protocol-sensitive VLAN using the IP protocol — Ports 1 and 3 have been assigned — IP address 192.207.35.1 Personnel — Protocol-sensitive VLAN using the IP protocol —...
Page 169
AT-9108, AT-8518, AT-8525, and AT-8550 User’s Guide The stations connected to ports 1 through 4 generate a combination of IP traffic and NetBIOS traffic. The IP traffic is filtered by the protocol-sensitive VLANs. All other traffic is directed to the VLAN MyCompany.
Displaying RIP Settings Displaying RIP Settings To display settings for RIP, use the commands listed in Table 9-3. Table 9-3 RIP Show Commands Command Description show rip {vlan <name>} Displays RIP configuration and statistics for one or all VLANs. show rip stat {vlan <name>} Displays RIP-specific statistics for one or all VLANs.
AT-9108, AT-8518, AT-8525, and AT-8550 User’s Guide Resetting and Disabling RIP To return RIP settings to their defaults, or to disable RIP, use the commands listed in Table 9-4. Table 9-4 RIP Reset and Disable Commands Command Description config rip delete [vlan <name> | all] Disables RIP on an IP interface. When RIP is disabled on the interface, the parameters are not reset to their defaults.
Configuring OSPF Configuring OSPF Each switch that is configured to run OSPF must have a unique router ID. It is recommended that you manually set the router ID of the switches participating in OSPF, instead of having the switch automatically choose its router ID based on the highest interface IP address.
Page 173
AT-9108, AT-8518, AT-8525, and AT-8550 User’s Guide Table 9-5 OSPF Configuration Commands (Continued) Command Description config ospf [area <areaid> | vlan [<name> | Configures the priority used in the designated all]] priority <number> router-election algorithm for one or all IP interface(s) of for all the interfaces within the area.
Page 174
Configuring OSPF Table 9-5 OSPF Configuration Commands (Continued) Command Description config ospf [vlan <name> | area <areaid> | Configures the timers for one interface or all virtual-link <routerid>] timer interfaces in the same OSPF area. The following <retransmission_interval> default, minimum, and maximum values (in <transmission_delay>...
AT-9108, AT-8518, AT-8525, and AT-8550 User’s Guide OSPF Configuration Example Figure 9-5 shows an example of an autonomous system using OSPF routers. The details of this network follow. Area 0 IR 1 IR 2 10.0.1.2 10.0.1.1 GIGABIT ETHERNET SWITCH GIGABIT ETHERNET SWITCH...
OSPF Configuration Example Area 5 is connected to the backbone area by way of ABR1 and ABR2. It is located in Chicago and has the following characteristics: Network number 160.26.x.x 1 identified VLAN (Chi_160_26_26) 2 internal routers A virtual link from ABR1 to ABR2 that traverses both internal routers.
Displaying OSPF Settings Displaying OSPF Settings To display settings for OSPF, use the commands listed in Table 9-6. Table 9-6 OSPF Show Command Command Description show ospf Displays global OSPF information. show ospf area {<areaid>} Displays information about a particular OSPF area, or all OSPF areas.
AT-9108, AT-8518, AT-8525, and AT-8550 User’s Guide Resetting and Disabling OSPF Settings To return OSPF settings to their defaults, use the commands listed in Table 9-7. Table 9-7 OSPF Reset and Disable Commands Command Description unconfig ospf {vlan <name> | area Resets one or all OSPF interfaces to the default <areaid>}...
Chapter 10 IP Multicast Routing This chapter describes the components of IP multicast routing, and how to configure IP multicast routing on the switch. For more information on IP multicasting, refer to the following publications: RFC 1112 — Host Extension for IP Multicasting RFC 2236 —...
Overview Overview IP multicast routing is a function that allows a single IP host to send a packet to a group of IP hosts. This group of hosts can include devices that reside on the local network, within a private network, or outside of the local network.
AT-9108, AT-8518, AT-8525, and AT-8550 User’s Guide IGMP Overview IGMP is a protocol used by an IP host to register its IP multicast group membership with a router. Periodically, the router queries the multicast group to see if the group is still in use. If the group is still active, a single IP host responds to the query, and group registration is maintained.
Configuring IP Multicasting Routing Configuring IP Multicasting Routing To configure IP multicast routing: 1. Configure the system for IP unicast routing. Note For more information on configuring IP unicast routing, refer to Chapter 8 Chapter 2. Enable multicast routing on the interface, using the following command: enable ipmcforwarding {vlan <name>} 3.
Page 185
AT-9108, AT-8518, AT-8525, and AT-8550 User’s Guide Table 10-1 describes the commands used to configure IP multicast routing. Table 10-1 IP Multicast Routing Configuration Commands Command Description enable dvmrp Enables DVMRP on the system. The default setting is disabled. enable ipmcforwarding {<vlan <name} Enables IP multicast forwarding on an IP interface.
Page 186
Configuring IP Multicasting Routing Table 10-1 IP Multicast Routing Configuration Commands (Continued) Command Description config dvmrp timer Configures the global DVMRP timers. Specify the <route_report_interval> following: <route_replacement_time> route_report_interval — The amount of time the system waits between transmitting periodic route report packets. The range is 1 to 2,147,483,647 seconds (68 years).
Page 187
AT-9108, AT-8518, AT-8525, and AT-8550 User’s Guide Table 10-2 describes the commands used to configure the Internet Gateway Message Protocol (IGMP). Table 10-2 IGMP Configuration Commands Command Description enable igmp {vlan <name>} Enables IGMP on a router interface. If no VLAN is specified, IGMP is enabled on all router interfaces.
Configuration Example Configuration Example Figure 1 0-1 is used in Chapter 9 to describe the OSPF configuration on a switch. Refer to Chapter 9 for more information about configuring OSPF. In this example, the system labeled IR1 is configured for IP multicast routing. Area 0 IR 1 IR 2...
AT-9108, AT-8518, AT-8525, and AT-8550 User’s Guide Configuration for The following is the configuration for the router labeled IR1: config vlan HQ_10_0_1 ipaddress 10.0.1.2 255.255.255.0 config vlan HQ_10_0_2 ipaddress 10.0.2.2 255.255.255.0 config ospf add vlan all enable ipforwarding enable ospf...
Displaying IP Multicast Routing Settings Displaying IP Multicast Routing Settings To display settings for IP multicast routing components, use the commands listed in Table 10-3. Table 10-3 IP Multicast Routing Show Commands Command Description show dvmrp {vlan <name> | route}} Displays the DVMRP configuration and statistics, or {detail} the unicast route table.
AT-9108, AT-8518, AT-8525, and AT-8550 User’s Guide Deleting and Resetting IP Multicast Settings To return IP multicast routing settings to their defaults and disable IP multicast routing functions, use the commands listed in Table 10-4. Table 10-4 IP Multicast Routing Reset and Disable Commands...
Chapter 11 IPX Routing This chapter describes how to configure IPX, IPX/RIP, and IPX/SAP on the switch. It assumes that you are already familiar with IPX. If not, ™ refer to your Novell documentation. Note For more information on RIP, refer to Chapter Overview of IPX The switch provides support for the IPX, IPX/RIP, and IPX/SAP...
Overview of IPX Figure 11-1 shows the same switch discussed earlier in Figure9-1 . In Figure 11-1, IPX routing has been added to the switch, and two additional VLANs have been defined; Exec, and Support. Both VLANs have been configured as protocol-specific VLANs, using IPX. Figure 11-1 IPX VLAN Configuration Note For more information on protocol-specific VLANs, refer to...
AT-9108, AT-8518, AT-8525, and AT-8550 User’s Guide ™ Novell NetWare supports four types of frame encapsulation. The Encapsulation ExtremeWare term for each type is described in Table 11-1. Types Table 11-1 IPX Encapsulation Types Name Description ENET_II The frame uses the standard Ethernet 2 header.
IPX/RIP Routing IPX/RIP Routing The switch supports the use of IPX/RIP for unicast routing. IPX/RIP is different from IP/RIP. However, many of the concepts are the same. ExtremeWare supports the following IPX/RIP features: Split horizon Poison reverse Triggered Updates Note For more information on RIP concepts, refer to Chapter Route information is entered into the IPX route table in one of the...
AT-9108, AT-8518, AT-8525, and AT-8550 User’s Guide Routing SAP The switch contains an IPX Service Table, and propagates SAP Advertisements advertisements to other IPX routers on the network. Each SAP advertisement contains the following: Service type Server name Server NetID...
Configuring IPX Configuring IPX This section describes the commands associated with configuring IPX, IPX/RIP, and IPX/SAP on the switch. To configure IPX routing: 1. Create at least two VLANs. 2. If you are combining an IPX VLAN with another VLAN on the same port(s), you must use a protocol filter on one of the VLANs, or use 802.1Q tagging.
AT-9108, AT-8518, AT-8525, and AT-8550 User’s Guide show ipxsap — This command displays the enable status of IPX/SAP for the VLAN, and its operational and administrative status (including the GNS reply service). It also lists any identified IPX/SAP neighbors, SAP packet statistics, and several other timer settings.
IPX Commands IPX Commands Table 11-3 describes the commands used to configure basic IPX settings. Table 11-3 Basic IPX Commands Command Description enable type20 forwarding {vlan <name>} Enables the forwarding of IPX type 20 (NetBIOS inside IPX) packets from one or more ingress VLANs.
Page 201
AT-9108, AT-8518, AT-8525, and AT-8550 User’s Guide Table 11-3 Basic IPX Commands (Continued) Command Description config ipxservice add <service_type> Adds a static entry to the IPX service table. Specify: <service_name> <netid> <mac_address> service_type — The service type. <socket> <hops> service_name — The service name.
Page 202
IPX Commands Table 11-4 describes the commands used to configure the IPX route table. Table 11-4 IPX/RIP Configuration Commands Command Description enable ipxrip Enables IPX/RIP on the router. config ipxrip add vlan [<name> | all} Configures one or all IPX VLANs to run IPX/RIP. IPX/RIP is enabled by default when you configure the IPX VLAN.
Page 203
AT-9108, AT-8518, AT-8525, and AT-8550 User’s Guide Table 11-5 describes the commands used to configure IPX/SAP. Table 11-5 IPX/SAP Configuration Commands Command Description enable ipxsap Enables IPX/SAP on the router. enable ipxsap gns-reply {vlan <name>} Enables GNS reply on one or all IPX interfaces. If no VLAN is specified, GNS reply is enabled on all IPX interfaces.
IPX Configuration Example IPX Configuration Example Figure 11-2 builds on the example showing the IP/RIP configuration that was used in Figure 9 - 4 . Now, in addition to having IP VLANs configured, this example illustrates a switch that has the following IPX VLANs defined: Exec —...
Page 205
AT-9108, AT-8518, AT-8525, and AT-8550 User’s Guide The stations connected to the system generate a combination of IP traffic and IPX traffic. The IP traffic is filtered by the IP VLANs. IPX traffic is filtered by the IPX VLANs. In this configuration, all IP traffic from stations connected to ports 1 and 3 have access to the IP router by way of the VLAN Finance.
Displaying IPX Settings Displaying IPX Settings To display settings for various IPX components, use the commands listed in Table 11-6. Table 11-6 IPX Show Commands Command Description show ipxconfig {vlan <name>} Displays IPX configuration information for one or all VLANs. show ipxroute {vlan <name>...
AT-9108, AT-8518, AT-8525, and AT-8550 User’s Guide Resetting and Disabling IPX To return IPX settings to their defaults and disable IPX functions, use the commands listed in Table 11-7. Table 11-7 IPX Reset and Disable Commands Command Description disable type20 forwarding {vlan <name>} Disables the forwarding of IPX type 20 packets.
Chapter 12 Access Policies This chapter describes access policies, and how they are created and implemented on the switch. Overview of Access Policies Access policies are a generalized category of features that are applied to route forwarding decisions. Access policies are used primarily for security purposes, and, less often, for bandwidth management.
Using Access Policies Using Access Policies To use access policies: 1. Create an access profile. 2. Configure the access profile to be of type permit or deny. 3. Apply the access profile. Creating an The first thing to do when using access policies is create an access Access Profile profile.
AT-9108, AT-8518, AT-8525, and AT-8550 User’s Guide Access Policies If the RIP protocol is being used, the switch can be configured to use for RIP an access profile to determine any of the following: Trusted Neighbor — Use an access profile to determine trusted RIP router neighbors for the VLAN on the switch running RIP.
Page 212
Using Access Policies Internet Internet 10/100BASE-T ETHERNET SWITCH WITH GIGABIT ETHERNET 1000BASE-X 10/100BASE-TX MDI-X ACTIVITY LINK ON DISABLED POWER MGMT. 10.0.0.10/24 Backbone/RIP Sales 10.0.0.12/24 10.0.0.11/24 Engrsvrs Switch being 10/100BASE-T ETHERNET SWITCH 10/100BASE-T ETHERNET SWITCH WITH GIGABIT ETHERNET WITH GIGABIT ETHERNET 1000BASE-X 10/100BASE-TX MDI-X 1000BASE-X...
AT-9108, AT-8518, AT-8525, and AT-8550 User’s Guide This configuration results in the switch having no route back to the VLAN Sales. Access Policies Because OSPF is a link-state protocol, the access policies associated for OSPF with OSPF are different in nature than those associated with RIP.
Page 214
Using Access Policies Example. Figure 1 2-2 illustrates an OSPF network that is similar to the network used previously in the RIP example. In this example, access to the Internet is accomplished by the use the ASBR function on the switch labeled “Internet.” As a result, all routes to the Internet will be done through external routes.
AT-9108, AT-8518, AT-8525, and AT-8550 User’s Guide Access Policies The access policy capabilities for DVMRP are very similar to those for for DVMRP RIP. If the DVMRP protocol is used for routing IP multicast traffic, the switch can be configured to use an access profile to determine any of the following: Trusted Neighbor —...
Using Access Policies In addition, suppose the administrator wants to preclude users on the VLAN Engsvrs from seeing any multicast streams that are generated by the VLAN Sales across the backbone. The additional configuration of the switch labeled “Engsvrs” is as follows: create access-profile nosales ipaddress config access-profile nosales mode deny config access-profile nosales add 10.2.1.0/24...
AT-9108, AT-8518, AT-8525, and AT-8550 User’s Guide Making Changes to an Access Profile You can make a change to an access profile, after the change has been applied, to form an access policy. However, the propagation of the change depends on the protocol and policy involved.
Removing an Access Policy Removing an Access Policy To remove an access policy, you must remove the access profile from the protocol or VLAN. All the commands that apply an access profile to form an access policy also have the option of choosing none as the access profile.
Chapter 13 Status Monitoring and Statistics This chapter describes how to view the current operating status of the switch, how to display information in the log, and how to take advantage of available Remote Monitoring (RMON) capabilities. Viewing statistics on a regular basis allows you to see how well your network is performing.
Page 222
Status Monitoring Table 13-1 describes show commands that are used to monitor the status of the switch. Table 13-1 Status Monitoring Commands Command Description show diag Displays software diagnostics. show log {<priority>} Displays the current snapshot of the log. Options include: priority —...
AT-9108, AT-8518, AT-8525, and AT-8550 User’s Guide Port Statistics The switch software provides a facility for viewing port statistic information. The summary information lists values for the current counter against each port on each operational module in the system, and it is refreshed approximately every 2 seconds. Values are displayed to nine digits of accuracy.
Port Errors Port Errors The switch keeps track of errors for each port. To view port transmit errors: Use the following command: show ports <portlist> txerrors The following port transmit error information is collected by the system: Link Status — The current status of the link. Options are —...
Page 225
AT-9108, AT-8518, AT-8525, and AT-8550 User’s Guide To view port receive errors: Use the following command: show ports <portlist> rxerrors The following port receive error information is collected by the switch: Receive Bad CRC Frames (RX CRC) — The total number of frames received by the port that were of the correct length, but contained a bad FCS value.
Port Monitoring Display Keys Port Monitoring Display Keys Table 13-2 describes the keys used to control the displays that appear when you issue any of the show port commands. Table 13-2 Port Monitoring Display Keys Key(s) Description Displays the previous page of ports. Displays the next page of ports.
AT-9108, AT-8518, AT-8525, and AT-8550 User’s Guide Logging The switch log tracks all configuration and fault information pertaining to the device. Each entry in the log contains the following information: Timestamp — The timestamp records the month and day of the event, along with the time (hours, minutes, and seconds) in the form HH:MM:SS.
Logging Table 13-4 Fault Log Subsystems (Continued) Subsystem Description Brdg Bridge-related functionality. Examples include low table space and queue overflow. SNMP SNMP information. Examples include community string violations. Telnet Information related to Telnet login and configuration performed by way of a Telnet session.
AT-9108, AT-8518, AT-8525, and AT-8550 User’s Guide If you enable the log display on a terminal connected to the console port, your settings will remain in effect even after your console session is ended (unless you explicitly disable the log display).
Logging Logging The commands described in Table 13-5 allow you to configure Commands logging options, reset logging options, display the log, and clear the log. Table 13-5 Logging Command Command Description enable log display Enables the log display. enable syslog Enables logging to a remote syslog host.
AT-9108, AT-8518, AT-8525, and AT-8550 User’s Guide RMON Using the Remote Monitoring (RMON) capabilities of the switch allows network administrators to improve system efficiency and reduce the load on the network. The following sections explain more about the RMON concept and the RMON features supported by the switch.
RMON RMON Features The IETF defines nine groups of Ethernet RMON statistics. The switch of the Switch supports the following four of these groups: Statistics History Alarms Events This section describes these groups, and discusses how they can be used. Statistics.
AT-9108, AT-8518, AT-8525, and AT-8550 User’s Guide Effective use of the Events group saves you time. Rather than having to watch real-time graphs for important occurrences, you can depend on the Event group for notification. Through the SNMP traps, events can trigger other actions, providing a mechanism for an automated response to certain occurrences.
Chapter 14 Software Upgrade and Boot Options This chapter describes the procedure for upgrading the switch software image. This chapter also discusses how to save and load a primary and secondary image and configuration file on the switch. Downloading a New Image The image file contains the executable code that runs on the switch.
Downloading a New Image hostname — Is the hostname of the TFTP server. (You must enable DNS to use this option.) filename — Is the filename of the new image. primary — Indicates the primary image. secondary — Indicates the secondary image. The switch can store up to two images;...
AT-9108, AT-8518, AT-8525, and AT-8550 User’s Guide Saving Configuration Changes The configuration is the customized set of parameters that you have selected to run on the switch. As you make configuration changes, the new settings are stored in run-time memory. Settings that are stored in run-time memory are not retained by the switch when the switch is rebooted.
Using TFTP to Upload the Configuration Using TFTP to Upload the Configuration You can upload the current configuration to a TFTP server on your network. The uploaded ASCII file retains the command-line interface (CLI) format. This allows you to do the following: Modify the configuration using a text editor, and later download a copy of the file to the same switch, or to one or more different switches.
AT-9108, AT-8518, AT-8525, and AT-8550 User’s Guide Using TFTP to Download the Configuration You can download a previously saved configuration from a TFTP server. To download a configuration, use the following command: download configuration [<ipaddress> | <hostname>] <filename> After the ASCII configuration file is downloaded by way of TFTP, you are prompted to reboot the switch.
Upgrading and Accessing BootROM Upgrading and Accessing BootROM The BootROM of the switch initializes certain important switch variables during the boot process. If necessary, BootROM can be upgraded, after the switch has booted, using TFTP. In the event the switch does not boot properly, some boot option functions can be accessed through a special BootROM menu.
AT-9108, AT-8518, AT-8525, and AT-8550 User’s Guide To perform a serial download, you can optionally change the baud rate to 38.4K using the b command, and then pressing the s key to prepare the switch for an image to be sent from your terminal using the XMODEM protocol.
Page 242
Boot Option Commands Table 14-1 Boot Option Commands (Continued) Command Description save {configuration} {primary | Saves the current configuration to nonvolatile secondary} storage. You can specify the primary or secondary configuration area. If not specified, the configuration is saved to the primary configuration area.
Appendix A Supported Standards The following is a list of software standards supported by the Gigabit Ethernet switches from Allied Telesyn. SNMP Terminal Emulation MIB-II (RFC 1213) Telnet (RFC 854) IP Forwarding MIB (RFC 1354) HTTP 1.0 Bridge MIB (RFC 1493) Protocols Used for Evolution of Interfaces MIB (RFC 1573) Administration...
Appendix B Troubleshooting If you encounter problems when using the switch, this appendix may be helpful. If you have a problem not listed here or in the “Release Notes,” contact your local technical support representative. LEDs Power LED does not light: Check that the power cable is firmly connected to the device and to the supply outlet.
Page 246
LEDs Both sides if the Gigabit link must be enabled or disabled. It the two are different, typically the side with autonegotiation disabled will have the link LED list, and the side with autonegotiation enabled will not list. The default configuration for a Gigabit port is autonegotiation enabled.
AT-9108, AT-8518, AT-8525, and AT-8550 User’s Guide Using the Command-Line Interface The initial welcome prompt does not display: Check that your terminal or terminal emulator is correctly configured. For console port access, you may need to press [Return] several times before the welcome prompt appears.
Page 248
Using the Command-Line Interface The SNMP Network Manager or Telnet workstation can no longer access the device: Check that Telnet access or SNMP access is enabled. Check that the port through which you are trying to access the device has not been disabled. If it is enabled, check the connections and network cabling at the port.
AT-9108, AT-8518, AT-8525, and AT-8550 User’s Guide Port No link light on 10/100 Base port: Configuration If patching from a hub or switch to another hub or switch, ensure that you are using a CAT5 cross-over cable. This is a CAT5 cable that has pins 1&2 on one end connected to pins 3&6 on the other end.
Using the Command-Line Interface VLANs You cannot add a port to a VLAN: If you attempt to add a port to a VLAN and get an error message similar to localhost:7 # config vlan marketing add port 1:1,1:2 ERROR: Protocol conflict on port 1:5 you already have a VLAN using untagged traffic on a port.
AT-9108, AT-8518, AT-8525, and AT-8550 User’s Guide 802.1Q links do not work correctly: Remember that VLAN names are only locally significant through the command-line interface. For two switches to communicate across a 802.1Q link, the VLAN ID for the VLAN on one switch should have a corresponding VLAN ID for the VLAN on the other switch.
Debug Tracing Debug Tracing The switch software includes a debug-tracing facility for the switch. The show debug-tracing command can be applied to one or all VLANs, as follows: show debug-tracing {vlan <name>} commands should only be used under the guidance of debug Allied Telesyn technical personnel.
Need help?
Do you have a question about the AT-9108 and is the answer not in the manual?
Questions and answers