Table of Contents

Advertisement

Quick Links

SmartSwitch Router
User Reference Manual
9032578

Advertisement

Table of Contents
loading
Need help?

Need help?

Do you have a question about the SmartSwitch 8-slot and is the answer not in the manual?

Questions and answers

Summary of Contents for Cabletron Systems SmartSwitch 8-slot

  • Page 1 SmartSwitch Router User Reference Manual 9032578...
  • Page 3 Notice Cabletron Systems reserves the right to make changes in specifications and other information contained in this document without prior notice. The reader should in all cases consult Cabletron Systems to determine whether any such changes have been made. The hardware, firmware, or software described in this manual is subject to change without notice.
  • Page 4: Fcc Notice

    Notice FCC Notice This device complies with Part 15 of the FCC rules. Operation is subject to the following two conditions: (1) this device may not cause harmful interference, and (2) this device must accept any interference received, including interference that may cause undesired operation. NOTE: This equipment has been tested and found to comply with the limits for a Class A digital device, pursuant to Part 15 of the FCC rules.
  • Page 5: Declaration Of Conformity

    DECLARATION OF CONFORMITY ADDENDUM Application of Council Directive(s): 89/336/EEC 73/23/EEC Manufacturer’s Name: Cabletron Systems, Inc. Manufacturer’s Address: 35 Industrial Way PO Box 5005 Rochester, NH 03867 European Representative Name: Mr. J. Solari European Representative Address: Cabletron Systems Limited Nexus House, Newbury...
  • Page 6 Notice...
  • Page 7: About This Manual

    Preface About This Manual This manual provides detailed information and procedures for configuring the 8-slot SmartSwitch Router (SSR-8) software. If you have not yet installed the SSR, use the instructions in the SmartSwitch Router Getting Started Guide to install the chassis and perform basic setup tasks, then return to this manual for more detailed configuration information.
  • Page 8: How To Use This Manual

    Configure QoS (Quality of Service) parameters Chapter 10 Monitor performance Chapter 11 Related Documentation The Cabletron Systems documentation set includes the following items. Refer to these other documents to learn more about your product. For Information About... See the... Installing and setting up the SSR...
  • Page 9 About This Manual For Information About... See the... System messages and SNMP traps SmartSwitch Router Error Message Ref- erence Manual SSR User Reference Manual...
  • Page 10 About This Manual SSR User Reference Manual...
  • Page 11: Table Of Contents

    Contents Chapter 1 SmartSwitch Router Product Overview Supported Media (Encapsulation Type) ....1-2 Supported Routing Protocols ......1-2 Configuring the Cabletron SmartSwitch Router .
  • Page 12 Contents Spanning Tree (IEEE 802.1d) ..... . . 2-1 Bridging Modes (Flow-Based and Address-Based) ..2-1 VLAN Overview .
  • Page 13 Contents Configuring IP Interfaces and Parameters ....3-2 Configure IP Addresses to Ports ..... 3-2 Configure IP Interfaces for a VLAN .
  • Page 14 Contents Configure OSPF Area Parameters ....5-4 Create Virtual Links ....... 5-5 Configure Autonomous System External (ASE) Link Advertisements.
  • Page 15 Contents Redistributing OSPF to RIP ......6-11 Redistributing Aggregate Routes ....6-11 Simple Route Redistribution Examples .
  • Page 16 Contents Configure DVMRP ........7-4 Starting and Stopping DVMRP ..... . . 7-4 Configure DVMRP on an Interface .
  • Page 17 Contents Create an IPX RIP Access Control List ... . . 8-7 Monitor an IPX Network ....... 8-7 Configuration Examples .
  • Page 18 Contents Defining an IPX ACL......9-16 Applying an ACL to an Interface....9-16 Applying an ACL to a Service.
  • Page 19: Smartswitch Router Product Overview

    Chapter 1 Chapter 1 SmartSwitch Router Product Overview The 8-slot SmartSwitch Router (SSR-8) provides non-blocking, wire-speed Layer-2 (switching), Layer-3 (routing) and Layer-4 (application) switching. The hardware provides wire-speed performance regardless of the performance monitoring, filtering, and Quality of Service (QoS) features enabled by the software. You do not need to accept performance compromises to run QoS or access control lists (ACLs).
  • Page 20: Supported Media (Encapsulation Type)

    Chapter 1: SmartSwitch Router Product Overview Feature Specification Quality of Service • Layer-2 prioritization (802.1p) (QoS) • Layer-3 source-destination flows • Layer-4 source-destination flows • Layer-4 application flows RMON • RMONv1/v2 for each port Management • SNMP • CoreWatch Element Manager (GUI) •...
  • Page 21: Configuring The Cabletron Smartswitch Router

    Chapter 1: SmartSwitch Router Product Overview “IP Routing Configuration Guide” on page 3 - 1 describes these protocols in detail. The SSR supports the following Novell IPX routing protocols: • Routing Information Protocol (RIP) • Service Advertising Protocol (SAP) “IPX Routing Configuration Guide” on page 8 - 1 describes these protocols in detail. Configuring the Cabletron SmartSwitch Router The SSR provides a command line interface (CLI) that allows you to configure and manage the SSR.
  • Page 22: Access Modes

    Chapter 1: SmartSwitch Router Product Overview Key sequence Command Ctrl-E Move cursor to end of line Ctrl-F Move cursor forward one character Ctrl-N Scroll to next command in command history (use the cli show history command to display the history) Ctrl-P Scroll to previous command in com- mand history...
  • Page 23: User Mode

    Chapter 1: SmartSwitch Router Product Overview The command prompt will show the name of the SmartSwitch Router in Note: front of the mode character(s). The default name is “ssr”. When you are in Configure or Enable mode, use the command or press Ctrl-z to exit exit to the previous access mode.
  • Page 24: Enable Mode

    Chapter 1: SmartSwitch Router Product Overview l2-tables - Show L2 Tables information logout - Log off the system multicast - Configure Multicast related parameters ping - Ping utility statistics - Show or clear SSR statistics - Show STP status traceroute - Traceroute utility vlan - Show VLAN-related parameters...
  • Page 25: Configure Mode

    Chapter 1: SmartSwitch Router Product Overview - Show IPX related parameters l2-tables - Show L2 Tables information logout - Log off the system mtrace - Multicast Traceroute utility multicast - Configure Multicast related parameters ospf - Show/Monitor Open Shortest Path First Protocol (OSPF).
  • Page 26: Boot Prom Mode

    SSR at the boot PROM to restart the system. If the system fails to reboot successfully, please call Cabletron Systems Technical Support to resolve the problem. To reboot the SSR from the ROM monitor mode, enter the following command.
  • Page 27: Disabling A Function Or Feature

    Chapter 1: SmartSwitch Router Product Overview Disabling a Function or Feature The CLI provides for an implicit negate. This allows for the “disabling” of a feature or function which has been “enabled”. Use the command on a specific line of the negate active configuration to “disable”...
  • Page 28: Loading System Image Software

    Software Information Software Version : 1.0 Copyright : Copyright (c) 1996-1998 Cabletron Systems, Inc. Image Information : Version 1.0, built on Fri Mar 20 19:28:49 1998 Image Boot Location: file:/pc-flash/boot/ssr8/ Note: In this example, the location “pc-flash” indicates that the SSR is set to use the factory-installed software on the flash card.
  • Page 29: Loading Boot Prom Software

    Software Information Software Information Software Version : 1.0 Copyright : Copyright (c) 1996-1998 Cabletron Systems, Inc. Image Information : Version 1.0.B.13, built on Wed Mar 25 22:49:07 1998 Image Boot Location: file:/pc-flash/boot/ssr8/ Boot Prom Version : prom-1.0 Note: In this example, the location “pc-flash”...
  • Page 30: Activate The Configuration Commands In The Scratchpad

    Chapter 1: SmartSwitch Router Product Overview server.) Enter the following command to copy the boot PROM upgrade onto the internal memory in the Control Module: system promimage upgrade <IPaddr-of-TFTP-host> <image-file- name> Here is an example: ctron-ssr-1# system promimage upgrade 10.50.11.12 prom2 Downloading image 'prom2' from host '10.50.11.12' to local image prom2 (takes about 3 minutes) kernel: 100%...
  • Page 31: Copy The Configuration To The Startup Configuration File

    Chapter 1: SmartSwitch Router Product Overview Copy the Configuration to the Startup Configuration File After you save the configuration commands in the scratchpad, the Control Module executes the commands and makes the corresponding configuration changes to the SSR. However, if you power down or reboot the SSR, the new changes are lost. Use the following procedure to save the changes into the Startup configuration file so that the SSR reinstates the changes when you reboot the software.
  • Page 32: Set Ssr Name

    Chapter 1: SmartSwitch Router Product Overview Set SSR Name The SSR name is set to ssr by default. You may customize the name for the SSR by performing the following in Configure mode:. Set the SSR name. <system-name> system set name Set SSR Date and Time The SSR system time keeps track of time as entered by the user.
  • Page 33: Configure Dns

    Chapter 1: SmartSwitch Router Product Overview Configure DNS The SSR allows you to configure up to three Domain Name Service (DNS) servers. To configure the DNS, the following command in Configure mode. Configure DNS. system set dns server <IPaddr> [, <IPaddr> [, <IPaddr> ]] domain <name>...
  • Page 34 Chapter 1: SmartSwitch Router Product Overview Show chassis ID. snmp show chassis-id Show the SNMP community strings. snmp show community Show SNMP related statistics. snmp show statistics Show trap target related configuration. snmp show trap Show the active configuration of the system show active-config system.
  • Page 35 Chapter 1: SmartSwitch Router Product Overview Lists the last five Telnet connections to system show telnet-access the SSR. Show the default terminal settings system show terminal (number of rows, number of columns, and baud rate. Show SSR uptime. system show uptime Show the software version running on system show version the SSR.
  • Page 36 Chapter 1: SmartSwitch Router Product Overview 1 - 18 SSR User Reference Manual...
  • Page 37: Bridging Configuration Guide

    Chapter 2 Chapter 2 Bridging Configuration Guide Bridging Overview The SmartSwitch Router provides the following bridging functions: • Complies with the IEEE 802.1d standard • Complies with the IGMP multicast bridging standard • Provides wire-speed address-based bridging or flow-based bridging •...
  • Page 38: Vlan Overview

    Chapter 2: Bridging Configuration Guide fewer table entries while flow-based bridging provides tighter management and control over bridged traffic. VLAN Overview Virtual LANs (VLANs) are a means of dividing a physical network into several logical (virtual) LANs. The division can be done on the basis of various criteria, giving rise to different types of VLANs.
  • Page 39: Ssr Vlan Support

    Chapter 2: Bridging Configuration Guide configured by the network administrator. When a frame is received at a port, its destination MAC address is looked up in the VLAN database, which returns the VLAN to which this frame belongs. This type of VLAN is powerful in the sense that network devices such as printers and workstations can be moved anywhere in the network without the need for network reconfiguration.
  • Page 40: Vlans And The Ssr

    Chapter 2: Bridging Configuration Guide to remember the types of VLANs in order to configure the SSR, as seen in the section on configuring the SSR. VLANs and the SSR VLANs are an integral part of the SSR family of switching routers. The SSR switching routers can function as layer-2 (L2) switches as well as fully-functonal layer-3 (L3) routers.
  • Page 41: Access Ports And Trunk Ports (802.1Q Support)

    Chapter 2: Bridging Configuration Guide Unlike traditional routers, the SSR has the concept of logical interfaces rather than physical interfaces. An L3 interface is a logical entity created by the administrator. It can contain more than one physical port. When an L3 interface contains exactly one physical port, it is equivalent to an interface on a traditional router.
  • Page 42: Configuring Ssr Bridging Functions

    Chapter 2: Bridging Configuration Guide Configuring SSR Bridging Functions Configure Address-based or Flow-based Bridging The SSR ports perform address-based bridging by default but can be configured to perform flow-based bridging instead of address-based bridging, on a per-port basis. A port cannot be configured to perform both types of bridging at the same time. The SSR performance is equivalent when performing flow-based bridging or address- based bridging.
  • Page 43: Configuring Spanning Tree

    Chapter 2: Bridging Configuration Guide To enable a port to flow-based bridging, enter the following command in Configure Mode. Configure a port for flow-based bridg- <port-list> port flow-bridging |all-ports ing. To change a port from flow-based bridging to address-based bridging, enter the following command in Configure mode: Change a port from flow-based bridg- <line-number of active config...
  • Page 44: Set The Bridge Priority

    Chapter 2: Bridging Configuration Guide Set the Bridge Priority You can globally configure the priority of an individual bridge when two bridges tie for position as the root bridge, or you can configure the likelihood that a bridge will be selected as the root bridge.
  • Page 45: Configuring A Port Or Protocol Based Vlan

    Chapter 2: Bridging Configuration Guide Define the Forward Delay Interval The forward delay interval is the amount of time spent listening for topology change information after an interface has been activated for bridging and before forwarding actually begins. To change the default interval setting, enter the following command in Configure mode: Set the default of the forward delay <num>...
  • Page 46: Configuring Vlan Trunk Ports

    Chapter 2: Bridging Configuration Guide Configuring VLAN Trunk Ports The SSR supports standards-based VLAN trunking between multiple SSRs as defined by IEEE 802.1Q. 802.1Q adds a header to a standard Ethernet frame which includes a unique VLAN id per trunk between two SSRs. These VLAN ids extend the VLAN broadcast domain to more than one SSR.
  • Page 47: Monitor Bridging

    Chapter 2: Bridging Configuration Guide Monitor Bridging The SSR provides display of bridging statistics and configurations contained in the SSR. To display bridging information, enter the following commands in Enable mode. Show IP routing table. ip show routes Show all MAC addresses currently in l2-tables show all-macs the l2 tables.
  • Page 48 Chapter 2: Bridging Configuration Guide ssr(config)# vlan add ports et.1.(1-8),gi.1.(1-2) to BLUE 2 - 12 SSR User Reference Manual...
  • Page 49: Chapter 3 Ip Routing Configuration Guide

    Chapter 3 Chapter 3 IP Routing Configuration Guide This chapter describes how to configure IP interfaces and general non-protocol- specific routing parameters. IP Routing Overview Internet Protocol (IP) is a packet-based protocol used to exchange data over computer networks. IP handles addressing, routing, fragmentation, reassembly, and protocol demultiplexing.
  • Page 50: Multicast Routing Protocols

    Chapter 3: IP Routing Configuration Guide and broadcasts its own routing information on those same networks. The SSR supports the following Interior Gateway Protocols: • Routing Information Protocol (RIP) Version 1, 2 (RFC 1058, 1723) • Open Shortest Path First (OSPF) Version 2 (RFC 1583) Exterior Gateway Protocols are used to transfer information between different “autonomous systems”.
  • Page 51: Configure Ip Interfaces For A Vlan

    Chapter 3: IP Routing Configuration Guide Configure a secondary address to an interface add ip <InterfaceName> address-netmask <ipAddr-mask> existing IP interface. padd [broadcast <i r> ] Configure IP Interfaces for a VLAN You can configure one IP interface per VLAN. Once an IP interface has been assigned to a VLAN, you can add a secondary IP addresses to the VLAN.
  • Page 52: Configure Arp Cache Entries

    Chapter 3: IP Routing Configuration Guide stored in an ARP cache for rapid retrieval. Then the IP datagram is encapsulated in a link-layer frame and sent over the network. Configure ARP Cache Entries You can add and delete entries in the ARP cache. To add or delete static ARP entries, enter one of the the following commands in Configure mode: Add a static ARP entry.
  • Page 53: Configure Ip Services (Icmp)

    Chapter 3: IP Routing Configuration Guide Configure IP Services (ICMP) The SSR provides ICMP message capabilities including ping and traceroute. Ping allows you to determine the reachability of a certain IP host. Traceroute allows you to trace the IP gateways to an IP host. To access ping or traceroute on the SSR, enter the following commands in Enable mode: Specify ping.
  • Page 54: Configuration Examples

    Chapter 3: IP Routing Configuration Guide Configuration Examples Assigning IP/IPX Interfaces To enable routing on the SSR, you must assign an IP or IPX interface to a VLAN. To assign an IP or IPX interface named ‘RED’ to the ‘BLUE’ VLAN, perform the following: ssr(config)# interface create ip RED address-netmask 10.50.0.1/ 255.255.0.0 vlan BLUE...
  • Page 55: Chapter 4 Rip Configuration Guide

    Chapter 4 Chapter 4 RIP Configuration Guide RIP Overview This chapter describes how to configure Routing Information Protocol (RIP) in the SmartSwitch Router. RIP is a distance-vector routing protocol for use in small networks. RIP is described in RFC 1723. A router running RIP broadcasts updates at set intervals.
  • Page 56: Configure Rip Parameters

    Chapter 4: RIP Configuration Guide To add RIP interfaces, enter the following commands in Configure mode. Add interfaces to the RIP process. rip add interface <interfacename-or-IPaddr> rip add trusted-gateway <interfacename-or- Add gateways from which the SSR will IPaddr> accept RIP updates. rip add source-gateway <interfacename-or- Define the list of routers to which RIP IPaddr>...
  • Page 57: Configure Rip Route Preference

    Chapter 4: RIP Configuration Guide To change RIP parameters, enter the following commands in Configure mode. rip set interface <interfacename-or- Set RIP Version on an interface to IPaddr> |all version 1 RIP V1 . rip set interface <interfacename-or- Set RIP Version on an interface to IPaddr>...
  • Page 58: Monitoring Rip

    Chapter 4: RIP Configuration Guide routes from other protocols into RIP, you must explicitly specify a value for the default-metric parameter. The metric specified by the default-metric parameter may be overridden by a metric specified in the export command. To configure default-metric, enter the following command in Configure mode. rip set default-metric <num>...
  • Page 59: Configuration Example

    Chapter 4: RIP Configuration Guide rip trace response receive Show detailed information of all response received by the router. rip trace response send Show detailed information of response packets sent by the router. rip trace send request Show detailed information of request packets sent by the router.
  • Page 60 Chapter 4: RIP Configuration Guide 4 - 6 SSR User Reference Manual...
  • Page 61: Chapter 5 Ospf Configuration Guide

    Chapter 5 Chapter 5 OSPF Configuration Guide OSPF Overview Open Shortest Path First (OSPF) is a link-state routing protocol that supports IP subnetting and authentication. The SSR supports OSPF Version 2.0 as defined in RFC 1583. Each link-state message contains all the links connected to the router with a specified cost associated with the link.
  • Page 62: Enable Ospf

    Chapter 5: OSPF Configuration Guide The default cost of an OSPF interface is 1. The cost of the interface should be inversely proportional to the bandwidth of the interface; if the SSR has interfaces with differing bandwidths, the OSPF costs should be set accordingly.
  • Page 63 Chapter 5: OSPF Configuration Guide To configure OSPF interface parameters, enter one of the following commands in Configure mode: Enable OSPF state on interface. ospf set interface < name-or-IPaddr >|all state disable|enable Specify the cost of sending a packet ospf set interface < name-or-IPaddr >|all cost on an OSPF interface.
  • Page 64: Configure An Ospf Area

    Chapter 5: OSPF Configuration Guide Configure an OSPF Area OSPF areas are a collection of subnets that are grouped in a logical fashion. These areas communicate with other areas via the backbone area. Once OSPF areas are created, you can add interfaces, stub hosts, and summary ranges to the area. In order to reduce the amount of routing information propagated between areas, you can configure summary-ranges on Area Border Routers (ABRs).
  • Page 65: Create Virtual Links

    Chapter 5: OSPF Configuration Guide To configure OSPF area parameters, enter the following commands in the Configure mode. Specify an OSPF stub area. ospf set area <area-num> stub Specify the cost to be used to inject a ospf set area <area-num> stub-cost <num> default route into an area.
  • Page 66: Configure Autonomous System External (Ase) Link

    Chapter 5: OSPF Configuration Guide Configure Autonomous System External (ASE) Link Advertisements These parameters specify the defaults used when importing OSPF AS External (ASE) routes into the routing table and exporting routes from the routing table into OSPF ASEs. To specify AS external link advertisements parameters, enter the following commands in the Configure mode: Specify the interval which AS external ospf set export-interval <num>...
  • Page 67 Chapter 5: OSPF Configuration Guide To display OSPF information, enter the following commands in Enable mode. Show IP routing table. ip show table routing Monitor OSPF error conditions. ospf monitor errors destination <hostname- or-IPaddr> Show information on all interfaces con- ospf monitor interfaces destination figured for OSPF.
  • Page 68: Ospf Configuration Examples

    Chapter 5: OSPF Configuration Guide Shows routes redistributed into OSPF. ospf show exported-routes Show all OSPF global parameters. ospf show globals Show information about OSPF import ospf show import-policies policies. Show OSPF interfaces. ospf show interfaces Shows information about all valid next ospf show next-hop-list hops mostly derived from the SPF cal- culation.
  • Page 69 Chapter 5: OSPF Configuration Guide ip add route 160.1.5.0/24 gateway 120.1.1.2 !++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ ! OSPF Box Level Configuration !++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ ospf start ospf create area 140.1.0.0 ospf create area backbone ospf set ase-defaults cost 4 !++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ ! OSPF Interface Configuration !++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ ospf add interface 140.1.1.1 to-area 140.1.0.0 ospf add interface 140.1.2.1 to-area 140.1.0.0 ospf add interface 140.1.3.1 to-area 140.1.0.0 ospf add interface 130.1.1.1 to-area backbone...
  • Page 70 Chapter 5: OSPF Configuration Guide In the configuration shown in Figure 1 on page 5 - 12, suppose if we decide to run RIP Version 2 on network 120.190.0.0/16, connecting routers R1 and R2. We would like to redistribute these RIP routes as OSPF type-2 routes, and associate the tag 100 with them.
  • Page 71 Chapter 5: OSPF Configuration Guide ip-router policy create rip-export-destination ripExpDst 10. Create OSPF export source. ip-router policy create ospf-export-source ospfExpSrc type OSPF 11. Create OSPF-ASE export source. ip-router policy create ospf-export-source ospfAseExpSrc type OSPF-ASE 12. Create the Export-Policy for redistributing all interface, RIP, static, OSPF and OSPF-ASE routes into RIP.
  • Page 72 Figure 1: Exporting to OSPF 140.1.5/24 140.1.1.2/24 A r e a 140.1.0.0 140.1.4/24 A r e a B a c k b o n e 150.20.3.1/16 140.1.1.1/24 130.1.1.1/16 140.1.3.1/24 140.1.2.1/24 190.1.1.1/16 130.1.1.3/16 150.20.3.2/16 120.190.1.1/16 A r e a 150.20.0.0 120.190.1.2/16 202.1.2.2/16 160.1.5.2/24 160.1.5.2/24...
  • Page 73: Routing Policy Configuration Guide

    Chapter 6 Chapter 6 Routing Policy Configuration Guide Route Import and Export Policy Overview The SSR family of routers supports extremely flexible routing policies. The SSR allows the network administrator to control import and export of routing information based on criteria including: •...
  • Page 74: Import Policies

    Chapter 6: Routing Policy Configuration Guide A default preference is assigned to each source from which the SSR routing process receives routes. Preference values range from 0 to 255 with the lowest number indicating the most preferred route. The following table summarizes the default preference values for routes learned in various ways.
  • Page 75 Chapter 6: Routing Policy Configuration Guide Import-Source This component specifies the source of the imported routes. It can also specify the preference to be associated with the routes imported from this source. The routes to be imported can be identified by their associated attributes: •...
  • Page 76: Export Policies

    Chapter 6: Routing Policy Configuration Guide Route-Filter This component specifies the individual routes which are to be imported or restricted. The preference to be associated with these routes can also be explicitly specified using this component. The preference associated with the imported routes are inherited unless explicitly specified.
  • Page 77: Specifying A Route Filter

    Chapter 6: Routing Policy Configuration Guide specifies IGP as the origin and no ASs in the AS path (the current AS is added when the route is exported). For BGP routes, the AS path is stored as learned from BGP. •...
  • Page 78: Aggregates And Generates

    Chapter 6: Routing Policy Configuration Guide The three forms of a route-filter are: • Network [ exact | refines | between number,number] • Network/mask [ exact | refines | between number,number] • Network/masklen [ exact | refines | between number,number] Matching usually requires both an address and a mask, although the mask is implied in the shorthand forms listed below.
  • Page 79: Aggregate-Destination

    Chapter 6: Routing Policy Configuration Guide to know about individual subnets which would increase the size of its routing table, the peer is only informed about an aggregate-route which contains all the subnets. Like export policies, aggregate-routes can have up to three components: •...
  • Page 80: Authentication

    Chapter 6: Routing Policy Configuration Guide A route may only contribute to an aggregate route that is more general than itself; it must match the aggregate under its mask. Any given route may only contribute to one aggregate route, which will be the most specific configured, but an aggregate route may contribute to a more general aggregate.
  • Page 81: Configure Simple Routing Policies

    Chapter 6: Routing Policy Configuration Guide secondary authentication key. In the router configuration mode, instead of specifying the key for each interface (which can be up to 16 characters long), a key-chain identifier is specified. Configure Simple Routing Policies Simple routing policies provide an efficient way for routing information to be exchanged between routing protocols.
  • Page 82: Redistributing Directly Attached Networks

    Chapter 6: Routing Policy Configuration Guide To redistribute static routes, enter one of the following commands in Configure mode: To redistribute static routes into RIP. ip-router policy redistribute from- proto static to-proto rip network all To redistribute static routes into OSPF. ip-router policy redistribute from- proto static to-proto ospf network all Redistributing Directly Attached Networks...
  • Page 83: Redistributing Ospf To Rip

    Chapter 6: Routing Policy Configuration Guide Redistributing OSPF to RIP For the purposes of route redistribution and import-export policies, OSPF intra- and inter-area routes are referred to as ospf routes, and external routes redistributed into OSPF are referred to as ospf-ase routes. Examples of ospf-ase routes include static routes, rip routes, direct routes, bgp routes, or aggregate routes, which are redistributed into an OSPF domain.
  • Page 84 Chapter 6: Routing Policy Configuration Guide • Specify the static routes configured on the router • Determine its RIP configuration !++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ ! Create the various IP interfaces. !++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ interface create ip to-r2 address-netmask 120.190.1.1/16 port et.1.2 interface create ip to-r3 address-netmask 130.1.1.1/16 port et.1.3 interface create ip to-r41 address-netmask...
  • Page 85: Example 2: Redistribution Into Ospf

    Chapter 6: Routing Policy Configuration Guide Exporting a given static route to all RIP interfaces Router R1 has several static routes of which one is the default route. We would export this default route over all RIP interfaces. ip-router policy redistribute from-proto static to-proto rip network default Exporting all static routes to all RIP interfaces Router R1 has several static routes.
  • Page 86 Chapter 6: Routing Policy Configuration Guide ospf create area 140.1.0.0 ospf create area backbone ospf set ase-defaults cost 4 !++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ ! OSPF Interface Configuration !++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ ospf add interface 140.1.1.1 to-area 140.1.0.0 ospf add interface 140.1.2.1 to-area 140.1.0.0 ospf add interface 140.1.3.1 to-area 140.1.0.0 ospf add interface 130.1.1.1 to-area backbone Exporting all interface and static routes to OSPF.
  • Page 87: Configure Advanced Routing Policies

    Chapter 6: Routing Policy Configuration Guide Configure Advanced Routing Policies Advanced Routing Policies are used for creating complex import/export policies that cannot be done using the redistribute command. Advanced export policies provide granular control over the targets where the routes are exported, the source of the exported routes, and the individual routes which are exported.
  • Page 88: Creating An Export Destination

    Chapter 6: Routing Policy Configuration Guide complex filter requirements, then use the second method. After you create one or more building blocks, they are tied together by the iprouter policy export command. To create route export policies, enter the following command in Configure mode: Create an export policy.
  • Page 89: Creating An Export Source

    Chapter 6: Routing Policy Configuration Guide Creating an Export Source To create an export source, enter one of the following commands in Configure mode: Create a RIP export source. ip-router policy create rip-export- source < name> Create an OSPF export source. ip-router policy create ospf-export- source <...
  • Page 90: Creating An Import Source

    Chapter 6: Routing Policy Configuration Guide is the identifier of the import-source that determines the source <imp-src-id> of the imported routes. If no routes from a particular source are to be imported, then no additional parameters are required. , if specified, is the identifer of the route-filter associated with this <filter-id>...
  • Page 91 Chapter 6: Routing Policy Configuration Guide with the contributing routes from this source. The routes contributing to an aggregate can be identified by their associated attributes, including protocol type, tag associated with a route, and so on. • Route Filter - This component provides the means to define a filter for the routes to be aggregated or summarized.
  • Page 92: Creating An Aggregate Destination

    Chapter 6: Routing Policy Configuration Guide Creating an Aggregate Destination To create an aggregate destination, enter the following command in Configure mode: Create an aggregate destination. ip-router policy create aggr-gen-dest < name> network < ipAddr-mask > Creating an Aggregate Source To create an aggregate source, enter the following command in Configure mode: Create an aggregate source.
  • Page 93 Figure 2: Exporting to RIP 10.51.0.0/16 140.1.1.4/24 135.3.1.1/24 140.1.1.1/24 160.1.1.1/16 RIP v2 (RIP V1) 135.3.2.1/24 130.1.1.1/16 140.1.2.1/24 130.1.1.3/16 170.1.1.1/16 120.190.1.1/16 135.3.3.1/24 120.190.1.2/16 202.1.0.0/10 160.1.5.0/24 170.1.1.7/16 Internet...
  • Page 94 Chapter 6: Routing Policy Configuration Guide The following configuration commands for router R1 • Determine the IP address for each interface. • Specify the static routes configured on the router. • Determine its RIP configuration. !++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ ! Create the various IP interfaces. !++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ interface create ip to-r2 address-netmask...
  • Page 95: Example 2: Importing From Ospf

    Chapter 6: Routing Policy Configuration Guide rip set interface to-r42 version 2 type multicast rip set interface to-r6 version 2 type multicast Importing a selected subset of routes from one of the RIP trusted gateways. Router R1 has several RIP peers. Router R41 has an interface on the network 10.51.0.0.
  • Page 96 Chapter 6: Routing Policy Configuration Guide It is only possible to restrict the importation of OSPF ASE routes when functioning as an AS border router. Like the other interior protocols, preference cannot be used to choose between OSPF ASE routes. That is done by the OSPF costs. Routes that are rejected by policy are stored in the table with a negative preference.
  • Page 97 Figure 3: Exporting to OSPF 140.1.5/24 140.1.1.2/24 A r e a 140.1.0.0 140.1.4/24 A r e a B a c k b o n e 150.20.3.1/16 140.1.1.1/24 130.1.1.1/16 140.1.3.1/24 140.1.2.1/24 190.1.1.1/16 130.1.1.3/16 150.20.3.2/16 120.190.1.1/16 A r e a 150.20.0.0 120.190.1.2/16 202.1.2.2/16 160.1.5.2/24 160.1.5.2/24...
  • Page 98 Chapter 6: Routing Policy Configuration Guide The following configuration commands for router R1: • Determine the IP address for each interface • Specify the static routes configured on the router • Determine its OSPF configuration !++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ ! Create the various IP interfaces. !++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ interface create ip to-r2 address-netmask 120.190.1.1/16 port et.1.2 interface create ip to-r3...
  • Page 99: Examples Of Export Policies

    Chapter 6: Routing Policy Configuration Guide Examples of Export Policies Example 1: Exporting to RIP Exporting to RIP is controlled by any of protocol, interface or gateway. If more than one is specified, they are processed from most general (protocol) to most specific (gateway).
  • Page 100: Exporting A Given Static Route To All Rip Interfaces

    Chapter 6: Routing Policy Configuration Guide !+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ ! Configure default routes to the 135.3.0.0 subnets reachable through ! R3. !+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ ip add route 135.3.1.0/24 gateway 130.1.1.3 ip add route 135.3.2.0/24 gateway 130.1.1.3 ip add route 135.3.3.0/24 gateway 130.1.1.3 !+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ ! Configure default routes to the other subnets reachable through R2. !+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ ip add route 202.1.0.0/16 gateway 120.190.1.2 ip add route 160.1.5.0/24 gateway 120.190.1.2...
  • Page 101 Chapter 6: Routing Policy Configuration Guide Create a RIP export source since we would like to export RIP routes. ip-router policy create rip-export-source ripExpSrc Create a Direct export source since we would like to export direct/interface routes. ip-router policy create direct-export-source directExpSrc Create the export-policy redistributing the statically created default route, and all (RIP, Direct) routes into RIP.
  • Page 102 Chapter 6: Routing Policy Configuration Guide Create a RIP export destination for interface with address 140.1.1.1, since we in- tend to change the rip export policy for interface 140.1.1.1 ip-router policy create rip-export-destination ripExpDst141 interface 140.1.1.1 Create a Static export source since we would like to export static routes. ip-router policy create static-export-source statExpSrc130 interface 130.1.1.1 Create a RIP export source since we would like to export RIP routes.
  • Page 103: Example 2: Exporting To Ospf

    Chapter 6: Routing Policy Configuration Guide ip-router aggr-gen destination aggrDst140 source allAggrSrc network 140.1.2.0/ Create a RIP export destination for interface with address 130.1.1.1, since we in- tend to change the rip export policy only for interface 130.1.1.1. ip-router policy create rip-export-destination ripExpDst130 interface 130.1.1.1 Create a Aggregate export source since we would to export/redistribute an aggre- gate/summarized route.
  • Page 104 Chapter 6: Routing Policy Configuration Guide For all examples in this section, refer to the configuration shown in Figure 3 on page 6 - 25. The following configuration commands for router R1: • Determine the IP address for each interface •...
  • Page 105 Chapter 6: Routing Policy Configuration Guide ip-router policy create ospf-export-destination ospfExpDstType1 type 1 metric Create a OSPF export destination for type-2 routes since we would like to redis- tribute certain routes into OSPF as type 2 OSPF-ASE routes. ip-router policy create ospf-export-destination ospfExpDstType2 type 2 metric Create a Static export source since we would like to export static routes.
  • Page 106 Chapter 6: Routing Policy Configuration Guide Create a OSPF export destination for type-2 routes with a tag of 100. ip-router policy create ospf-export-destination ospfExpDstType2t100 type 2 tag 100 metric 4 Create a RIP export source. ip-router policy export destination ripExpDst source ripExpSrc network all Create a Static export source.
  • Page 107: Multicast Routing Configuration Guide

    Chapter 7 Chapter 7 Multicast Routing Configuration Guide IP Multicast Overview Multicast routing on the SSR is supported through DVMRP and IGMP. IGMP is used to determine host membership on directly attached subnets. DVMRP is used to determine forwarding of multicast traffic between SSRs. This chapter: •...
  • Page 108: Configure Igmp

    Chapter 7: Multicast Routing Configuration Guide • Pruning, which is an operation DVMRP routers perform to exclude interfaces not in the shortest path tree. DVMRP uses the Reverse Path Multicasting (RPM) algorithm to perform pruning.In RPM, a source network rather than a host is paired with a multicast group. RPM per- mits the SSR to maintain multiple multicast groups.
  • Page 109: Configure Igmp Query Interval

    Chapter 7: Multicast Routing Configuration Guide To enable IGMP on an interface, enter the following command in Configure mode: Enable IGMP on an interface. <ipAddr> igmp enable interface Configure IGMP Query Interval You can configure the SSR with a different IGMP Host Membership Query time interval.
  • Page 110: Configure Dvmrp

    Chapter 7: Multicast Routing Configuration Guide Configure DVMRP You configure DVMRP routing on the SSR by performing the following DVMRP- configuration tasks. • Creating IP interfaces. • Setting global parameters that will be used for all the interfaces on which DVMRP is enabled.
  • Page 111: Configure The Dvmrp Routing Metric

    Chapter 7: Multicast Routing Configuration Guide To configure neighbor timeout or prune time, enter one of the following commands in Configure mode: Configure the DVMRP neighbor time- dvmrp set interface <ip-addr> neighbor- timeout <number> out. Configure the DVMRP prune time. dvmrp set interface <ip-addr>...
  • Page 112: Configure A Dvmrp Tunnel

    Chapter 7: Multicast Routing Configuration Guide TTL thresholding is not always considered useful. There is another approach of a range of multicast addresses for “administrative” scoping. In other words, such addresses would be usable within a certain administrative scope, a corporate network, for instance, but would not be forwarded across the internet.
  • Page 113: Monitor Igmp And Dvmrp

    Chapter 7: Multicast Routing Configuration Guide Monitor IGMP and DVMRP You can monitor IGMP and DVMRP information on the SSR. To display IGMP and DVMRP information, enter the following commands in the Enable mode. Show all interfaces running DVMRP. dvmrp show interface Also shows the neighbors on each inter- face.
  • Page 114 Chapter 7: Multicast Routing Configuration Guide ! Create IP intefaces interface create ip mls15 address-netmask 172.1.1.10/24 port et.5.8 interface create ip company address-netmask 207.135.89.64/25 port et.5.1 interface create ip test address-netmask 10.135.89.10/25 port et.1.8 interface create ip rip address-netmask 190.1.0.1 port et.1.4 interface create ip mbone address-netmask 207.135.122.11/29 port et.1.1 interface create ip downstream address-netmask 10.40.1.10/24 vlan upstream...
  • Page 115 Chapter 7: Multicast Routing Configuration Guide SSR User Reference Manual 7 - 9...
  • Page 116 Chapter 7: Multicast Routing Configuration Guide 7 - 10 SSR User Reference Manual...
  • Page 117: Ipx Routing Configuration Guide

    Chapter 8 Chapter 8 IPX Routing Configuration Guide IPX Routing Overview The Internetwork Packet Exchange (IPX) is a datagram connectionless protocol for the Novell NetWare environment. You can configure the SSR for IPX routing and SAP. Routers interconnect different network segments and by definitions are network layer devices.
  • Page 118: Sap (Service Advertising Protocol)

    Chapter 8: IPX Routing Configuration Guide • Routers perform broadcasting whenever they detect a change in the internetwork configurations. SSR's RIP implementation follows the guidelines given in Novell's IPX RIP and SAP Router Specification Version 1.30 document. SAP (Service Advertising Protocol) SAP provides routers with a means of exchanging internetwork service information.
  • Page 119: Ipx Sap

    Chapter 8: IPX Routing Configuration Guide IPX SAP On the SSR, SAP automatically runs on all the IPX interfaces. The SSR will keep multiple SAP’s having the lowest hop count. Static SAPs can be configured on the SSR using the CLI’s ipx add sap command. Through the use of SAP filters, the SSR can control the acceptance and advertisements of services per-interface.
  • Page 120: Specify Ipx Encapsulation Method

    Chapter 8: IPX Routing Configuration Guide To configure a VLAN with an IPX interface, enter the following command in Configure mode: Create an IPX interface for a VLAN. interface create ipx <InterfaceName> address-mask <ipxAddr-mask> vlan <name> Specify IPX Encapsulation Method The SmartSwitch Router supports two encapsulation types for IPX.
  • Page 121: Enable Sap

    Chapter 8: IPX Routing Configuration Guide Enable SAP IPX SAP is enabled by default on the SSR. You must first create an IPX interface or assign an IPX interface to a VLAN before SAP will start learning services. Configure Static Routes In a Novell NetWare network, the SSR uses RIP to determine the best paths for routing IPX.
  • Page 122: Create An Ipx Access Control List

    Chapter 8: IPX Routing Configuration Guide replies. • RIP access control list: Restricts advertisements or learning of networks. Create an IPX Access Control List IPX access control lists control which IPX traffic is received from or sent to an interface based on source address, destination address, source socket, destination socket, source network mask or destination network mask.
  • Page 123: Create An Ipx Rip Access Control List

    Chapter 8: IPX Routing Configuration Guide Create an IPX RIP Access Control List IPX RIP access control lists control which RIP updates are allowed. To create an IPX RIP access control list, perform the following task in the Configure mode: Create an IPX RIP access control list.
  • Page 124 Chapter 8: IPX Routing Configuration Guide • Adds a RIP access list • Adds a SAP access list ! Create interface ipx1 with ipx address AAAAAAAA interface create ipx ipx1 address AAAAAAAA port et.1.1 output- mac-encapsulation ethernet_802.2_IPX ! Create interface ipx2 with ipx address BBBBBBBB interface create ipx ipx2 address BBBBBBBB port et.1.2 output- mac-encapsulation ethernet_802.3 !Add static route to network 9...
  • Page 125: Security Configuration Guide

    Chapter 9 Chapter 9 Security Configuration Guide Security Overview The SSR provides security features that help control access to the SSR and filter traffic going through the SSR. Access to the SSR can be controlled by: • Enabling TACACS • Login authentication Traffic filtering on the SSR enables: •...
  • Page 126: Monitor Tacacs

    Chapter 9: Security Configuration Guide Determine TACACS action if no server tacacs set last-resort password|succeed responds. Enable TACACS. tacacs enable Monitor TACACS You can monitor TACACS configuration and statistics within the SSR. To monitor TACACS, enter the following commands in Enable mode: Show TACACS server statistics.
  • Page 127: Configuring Layer-2 Address Filters

    Chapter 9: Security Configuration Guide • Port-to-address lock filters These filters prohibit a user connected to a locked port or set of ports from using an- other port. • Static entry filters These filters allow or force traffic to go to a set of destination ports based on a frame's source MAC address, destination MAC address, or both source and destina- tion MAC addresses in flow bridging mode.
  • Page 128: Configuring Layer-2 Port-To-Address Lock Filters

    Chapter 9: Security Configuration Guide Configuring Layer-2 Port-to-Address Lock Filters Port address lock filters allow you to bind or “lock” specific source MAC addresses to a port or set of ports. Once a port is locked, only the specified source MAC address is allowed to connect to the locked port and the specified source MAC address is not allowed to connect to any other ports.
  • Page 129: Configuring Layer-2 Secure Port Filters

    Chapter 9: Security Configuration Guide Configuring Layer-2 Secure Port Filters Secure port filters block access to a specified port. You can use a secure port filter by itself to secure unused ports. Secure port filters can be configured as source or destination port filters.
  • Page 130 Chapter 9: Security Configuration Guide To display security filter information, enter the following commands in Enable mode. Show address filters. filters show address-filter [all-source|all-destination|all-flow] [source-mac <MACaddr> dest-mac <MACaddr> ] [ports <port-list> ] [vlan <VLAN-num> ] Show port address lock filters. filters show port-address-lock ports [ports <port-list>...
  • Page 131: Layer-2 Filter Examples

    Chapter 9: Security Configuration Guide Layer-2 Filter Examples et.1.1 et.1.2 et.1.3 Engineering Finance File Servers File Servers Engineers, Consultant Example 1: Address Filters Source filter: The consultant is not allowed to access any file servers. The consultant is only allowed to interact with the engineers on the same Ethernet segment – port et.1.1.
  • Page 132: Example 2 : Secure Ports

    Chapter 9: Security Configuration Guide Destination static entry: Restrict "login multicasts" originating from the engineering segment (port et.1.1) from reaching the finance servers. filters add static-entry name login-mcasts dest-mac 010000:334455 vlan 1 in-port-list et.1.1 out-port-list et.1.3 restriction disallow filters add static-entry name login-mcasts dest-mac 010000:334455 vlan 1 in-port-list et.1.1 out-port-list et.1.2 restriction allow Flow static entry: Restrict "login multicasts"...
  • Page 133: L3 Access Control Lists (Acls)

    Chapter 9: Security Configuration Guide filters add secure-port name engineers direction dest vlan 1 in- port-list et.1.1 To allow all engineers access to the engineering servers, you must "punch" a hole through the secure-port wall. A "dest static-entry" overrides a "dest secure port". filters add static-entry name eng-server dest-mac 080060:abcdef vlan 1 in-port-list et.1.1 out-port-list et.1.2 restriction allow L3 Access Control Lists (ACLs)
  • Page 134: The Ordering Of Acl Rules

    Chapter 9: Security Configuration Guide For IPX ACLs, the following fields can be specified: • Source network address • Destination network address • Source IPX socket • Destination IPX socket When defining an ACL rule, each field in the rule is position sensitive. For example, for TCP, the source address must be followed by the destination address, followed by the source socket and the destination socket and so on.
  • Page 135: Implicit Deny Rule

    Chapter 9: Security Configuration Guide When a TCP packet comes from subnet 10.2.0.0/16, it finds a match with the first rule. This causes the packet to be dropped. A TCP packet coming from other subnets will not match the first rule. Instead, it matches the second rule which allows the packet to go through.
  • Page 136: Applying Acls To Interfaces

    Chapter 9: Security Configuration Guide Although the implicit deny rule seems obvious in the above example, this is not always the case. For example, consider the following ACL rule: acl 102 deny ip 10.1.20.0/24 any any any If a packet comes in from a network other than 10.1.20.0/24, one might expect the packet to go through because it doesn't match the first rule.
  • Page 137: Applying Acls To Services

    Chapter 9: Security Configuration Guide many rules in an ACL. You just have to put all of these rules into one ACL and apply it to an interface. When a packet comes into a router at an interface where an inbound ACL is applied, the router compares the packet with the rules specified by that ACL.
  • Page 138: Maintaining Acls Offline Using Tftp Or Rcp

    Chapter 9: Security Configuration Guide Before enabling ACL Logging, one should consider its impact on performance. With ACL Logging enabled, the router prints out a message at the console before the packet is actually forwarded or dropped. Even if the console is connected to the router at a high baud rate, the delay caused by the console message is still significant.
  • Page 139: Maintaining Acls Using The Acl Editor

    Chapter 9: Security Configuration Guide The first copy command downloads the file acl.changes from a TFTP server and puts the commands into the temporary configuration area, scratchpad. The administrator can re-examine the changes if necessary before committing the changes to the running system.
  • Page 140: Defining An Ip Acl

    Chapter 9: Security Configuration Guide Defining an IP ACL To define an IP ACL, perform the following in the Configure mode: Define an IP ACL. <name> permit|deny ip|tcp|udp|icmp|igmp <srcaddr/mask> |any <dstaddr/mask> |any Note: Additional fields depend on the protocol type you select.
  • Page 141 Chapter 9: Security Configuration Guide To display ACL information, enter the following command in Enable mode. Show all ACLs. acl show all Show a specific ACL. acl show aclname <Name> | all Show an ACL on a specific interface. acl show interface <Name> Show ACLs on all IP interfaces.
  • Page 142 Chapter 9: Security Configuration Guide 9 - 18 SSR User Reference Manual...
  • Page 143: Chapter 10 Qos Configuration Guide

    Chapter 10 Chapter 10 QoS Configuration Guide QoS and L2/L3/L4 flow Overview The SSR allows network managers to identify traffic and set Quality of Service (QoS) policies without compromising wire speed performance. The SSR can guarantee bandwidth on an application by application basis, thus accommodating high-priority traffic even during peak periods of usage.
  • Page 144: Precedence For Layer-3 Flows

    Chapter 10: QoS Configuration Guide Precedence for Layer-3 Flows A precedence from 1 - 7 is associated with each field in a flow. The SSR uses the precedence value associated with the fields to break ties if packets match more than one flow.
  • Page 145: Configure Layer-3 And 4 Qos

    Chapter 10: QoS Configuration Guide If a port operates in flow-bridging mode, the user can be more specific and configure priorities for frames that match both a source AND a destination MAC address and a VLAN ID. You can also specify a list of ports to apply the policy. In flow mode, you can also ignore the source MAC address and configure Note: the priority based on the destination MAC address only.
  • Page 146: Set An Ip Qos Policy

    Chapter 10: QoS Configuration Guide Specify the precedence for the fields within an IP flow. Set an IP QoS Policy To set a QoS policy on an IP traffic flow, enter the following command in Configure mode: Set an IP QoS policy. qos set ip <name>...
  • Page 147: Specify Precedence For An Ipx Qos Policy

    Chapter 10: QoS Configuration Guide Specify Precedence for an IPX QoS Policy To specify the precedence for an IPX QoS policy, enter the following command in Configure mode: Specify precedence for an IPX QoS qos precedence ipx [srcnet <num> ] [srcnode <num>...
  • Page 148: Monitor Qos

    Chapter 10: QoS Configuration Guide Monitor QoS The SSR provides display of QoS statistics and configurations contained in the SSR. To display QoS information, enter the following command in Enable mode: Show all IP QoS flows qos show ip Show all IPX QoS flows. qos show ipx Show all L2 QoS flows.
  • Page 149: Chapter 11 Performance Monitoring Guide

    Chapter 11 Chapter 11 Performance Monitoring Guide Performance Monitoring Overview The SSR is a full wire-speed layer-2, 3 and 4 switching router. As packets enter the SSR, layer-2, 3, and 4 flow tables are populated on each line card. The flow tables contain information on performance statistics and traffic forwarding.
  • Page 150 Chapter 11: Performance Monitoring Guide Show info about multicasts registered l2-tables show igmp-mcast-registrations by IGMP. Show whether IGMP is on or off on a l2-tables show vlan-igmp-status VLAN. Show info about MACs registered by l2-tables show bridge-management the system. Show SNMP statistics. snmp show statistics Show ICMP statistics.

This manual is also suitable for:

Ssr-8

Table of Contents