Summary of Contents for Cabletron Systems SmartSwitch 8-slot
Page 1
SmartSwitch Router User Reference Manual 9032578...
Page 3
Notice Cabletron Systems reserves the right to make changes in specifications and other information contained in this document without prior notice. The reader should in all cases consult Cabletron Systems to determine whether any such changes have been made. The hardware, firmware, or software described in this manual is subject to change without notice.
Notice FCC Notice This device complies with Part 15 of the FCC rules. Operation is subject to the following two conditions: (1) this device may not cause harmful interference, and (2) this device must accept any interference received, including interference that may cause undesired operation. NOTE: This equipment has been tested and found to comply with the limits for a Class A digital device, pursuant to Part 15 of the FCC rules.
DECLARATION OF CONFORMITY ADDENDUM Application of Council Directive(s): 89/336/EEC 73/23/EEC Manufacturer’s Name: Cabletron Systems, Inc. Manufacturer’s Address: 35 Industrial Way PO Box 5005 Rochester, NH 03867 European Representative Name: Mr. J. Solari European Representative Address: Cabletron Systems Limited Nexus House, Newbury...
Preface About This Manual This manual provides detailed information and procedures for configuring the 8-slot SmartSwitch Router (SSR-8) software. If you have not yet installed the SSR, use the instructions in the SmartSwitch Router Getting Started Guide to install the chassis and perform basic setup tasks, then return to this manual for more detailed configuration information.
Configure QoS (Quality of Service) parameters Chapter 10 Monitor performance Chapter 11 Related Documentation The Cabletron Systems documentation set includes the following items. Refer to these other documents to learn more about your product. For Information About... See the... Installing and setting up the SSR...
Page 9
About This Manual For Information About... See the... System messages and SNMP traps SmartSwitch Router Error Message Ref- erence Manual SSR User Reference Manual...
Page 10
About This Manual SSR User Reference Manual...
Chapter 1 Chapter 1 SmartSwitch Router Product Overview The 8-slot SmartSwitch Router (SSR-8) provides non-blocking, wire-speed Layer-2 (switching), Layer-3 (routing) and Layer-4 (application) switching. The hardware provides wire-speed performance regardless of the performance monitoring, filtering, and Quality of Service (QoS) features enabled by the software. You do not need to accept performance compromises to run QoS or access control lists (ACLs).
Chapter 1: SmartSwitch Router Product Overview “IP Routing Configuration Guide” on page 3 - 1 describes these protocols in detail. The SSR supports the following Novell IPX routing protocols: • Routing Information Protocol (RIP) • Service Advertising Protocol (SAP) “IPX Routing Configuration Guide” on page 8 - 1 describes these protocols in detail. Configuring the Cabletron SmartSwitch Router The SSR provides a command line interface (CLI) that allows you to configure and manage the SSR.
Chapter 1: SmartSwitch Router Product Overview Key sequence Command Ctrl-E Move cursor to end of line Ctrl-F Move cursor forward one character Ctrl-N Scroll to next command in command history (use the cli show history command to display the history) Ctrl-P Scroll to previous command in com- mand history...
Chapter 1: SmartSwitch Router Product Overview The command prompt will show the name of the SmartSwitch Router in Note: front of the mode character(s). The default name is “ssr”. When you are in Configure or Enable mode, use the command or press Ctrl-z to exit exit to the previous access mode.
Chapter 1: SmartSwitch Router Product Overview l2-tables - Show L2 Tables information logout - Log off the system multicast - Configure Multicast related parameters ping - Ping utility statistics - Show or clear SSR statistics - Show STP status traceroute - Traceroute utility vlan - Show VLAN-related parameters...
Chapter 1: SmartSwitch Router Product Overview - Show IPX related parameters l2-tables - Show L2 Tables information logout - Log off the system mtrace - Multicast Traceroute utility multicast - Configure Multicast related parameters ospf - Show/Monitor Open Shortest Path First Protocol (OSPF).
SSR at the boot PROM to restart the system. If the system fails to reboot successfully, please call Cabletron Systems Technical Support to resolve the problem. To reboot the SSR from the ROM monitor mode, enter the following command.
Chapter 1: SmartSwitch Router Product Overview Disabling a Function or Feature The CLI provides for an implicit negate. This allows for the “disabling” of a feature or function which has been “enabled”. Use the command on a specific line of the negate active configuration to “disable”...
Software Information Software Version : 1.0 Copyright : Copyright (c) 1996-1998 Cabletron Systems, Inc. Image Information : Version 1.0, built on Fri Mar 20 19:28:49 1998 Image Boot Location: file:/pc-flash/boot/ssr8/ Note: In this example, the location “pc-flash” indicates that the SSR is set to use the factory-installed software on the flash card.
Software Information Software Information Software Version : 1.0 Copyright : Copyright (c) 1996-1998 Cabletron Systems, Inc. Image Information : Version 1.0.B.13, built on Wed Mar 25 22:49:07 1998 Image Boot Location: file:/pc-flash/boot/ssr8/ Boot Prom Version : prom-1.0 Note: In this example, the location “pc-flash”...
Chapter 1: SmartSwitch Router Product Overview server.) Enter the following command to copy the boot PROM upgrade onto the internal memory in the Control Module: system promimage upgrade <IPaddr-of-TFTP-host> <image-file- name> Here is an example: ctron-ssr-1# system promimage upgrade 10.50.11.12 prom2 Downloading image 'prom2' from host '10.50.11.12' to local image prom2 (takes about 3 minutes) kernel: 100%...
Chapter 1: SmartSwitch Router Product Overview Copy the Configuration to the Startup Configuration File After you save the configuration commands in the scratchpad, the Control Module executes the commands and makes the corresponding configuration changes to the SSR. However, if you power down or reboot the SSR, the new changes are lost. Use the following procedure to save the changes into the Startup configuration file so that the SSR reinstates the changes when you reboot the software.
Chapter 1: SmartSwitch Router Product Overview Set SSR Name The SSR name is set to ssr by default. You may customize the name for the SSR by performing the following in Configure mode:. Set the SSR name. <system-name> system set name Set SSR Date and Time The SSR system time keeps track of time as entered by the user.
Chapter 1: SmartSwitch Router Product Overview Configure DNS The SSR allows you to configure up to three Domain Name Service (DNS) servers. To configure the DNS, the following command in Configure mode. Configure DNS. system set dns server <IPaddr> [, <IPaddr> [, <IPaddr> ]] domain <name>...
Page 34
Chapter 1: SmartSwitch Router Product Overview Show chassis ID. snmp show chassis-id Show the SNMP community strings. snmp show community Show SNMP related statistics. snmp show statistics Show trap target related configuration. snmp show trap Show the active configuration of the system show active-config system.
Page 35
Chapter 1: SmartSwitch Router Product Overview Lists the last five Telnet connections to system show telnet-access the SSR. Show the default terminal settings system show terminal (number of rows, number of columns, and baud rate. Show SSR uptime. system show uptime Show the software version running on system show version the SSR.
Page 36
Chapter 1: SmartSwitch Router Product Overview 1 - 18 SSR User Reference Manual...
Chapter 2 Chapter 2 Bridging Configuration Guide Bridging Overview The SmartSwitch Router provides the following bridging functions: • Complies with the IEEE 802.1d standard • Complies with the IGMP multicast bridging standard • Provides wire-speed address-based bridging or flow-based bridging •...
Chapter 2: Bridging Configuration Guide fewer table entries while flow-based bridging provides tighter management and control over bridged traffic. VLAN Overview Virtual LANs (VLANs) are a means of dividing a physical network into several logical (virtual) LANs. The division can be done on the basis of various criteria, giving rise to different types of VLANs.
Chapter 2: Bridging Configuration Guide configured by the network administrator. When a frame is received at a port, its destination MAC address is looked up in the VLAN database, which returns the VLAN to which this frame belongs. This type of VLAN is powerful in the sense that network devices such as printers and workstations can be moved anywhere in the network without the need for network reconfiguration.
Chapter 2: Bridging Configuration Guide to remember the types of VLANs in order to configure the SSR, as seen in the section on configuring the SSR. VLANs and the SSR VLANs are an integral part of the SSR family of switching routers. The SSR switching routers can function as layer-2 (L2) switches as well as fully-functonal layer-3 (L3) routers.
Chapter 2: Bridging Configuration Guide Unlike traditional routers, the SSR has the concept of logical interfaces rather than physical interfaces. An L3 interface is a logical entity created by the administrator. It can contain more than one physical port. When an L3 interface contains exactly one physical port, it is equivalent to an interface on a traditional router.
Chapter 2: Bridging Configuration Guide Configuring SSR Bridging Functions Configure Address-based or Flow-based Bridging The SSR ports perform address-based bridging by default but can be configured to perform flow-based bridging instead of address-based bridging, on a per-port basis. A port cannot be configured to perform both types of bridging at the same time. The SSR performance is equivalent when performing flow-based bridging or address- based bridging.
Chapter 2: Bridging Configuration Guide To enable a port to flow-based bridging, enter the following command in Configure Mode. Configure a port for flow-based bridg- <port-list> port flow-bridging |all-ports ing. To change a port from flow-based bridging to address-based bridging, enter the following command in Configure mode: Change a port from flow-based bridg- <line-number of active config...
Chapter 2: Bridging Configuration Guide Set the Bridge Priority You can globally configure the priority of an individual bridge when two bridges tie for position as the root bridge, or you can configure the likelihood that a bridge will be selected as the root bridge.
Chapter 2: Bridging Configuration Guide Define the Forward Delay Interval The forward delay interval is the amount of time spent listening for topology change information after an interface has been activated for bridging and before forwarding actually begins. To change the default interval setting, enter the following command in Configure mode: Set the default of the forward delay <num>...
Chapter 2: Bridging Configuration Guide Configuring VLAN Trunk Ports The SSR supports standards-based VLAN trunking between multiple SSRs as defined by IEEE 802.1Q. 802.1Q adds a header to a standard Ethernet frame which includes a unique VLAN id per trunk between two SSRs. These VLAN ids extend the VLAN broadcast domain to more than one SSR.
Chapter 2: Bridging Configuration Guide Monitor Bridging The SSR provides display of bridging statistics and configurations contained in the SSR. To display bridging information, enter the following commands in Enable mode. Show IP routing table. ip show routes Show all MAC addresses currently in l2-tables show all-macs the l2 tables.
Page 48
Chapter 2: Bridging Configuration Guide ssr(config)# vlan add ports et.1.(1-8),gi.1.(1-2) to BLUE 2 - 12 SSR User Reference Manual...
Chapter 3 Chapter 3 IP Routing Configuration Guide This chapter describes how to configure IP interfaces and general non-protocol- specific routing parameters. IP Routing Overview Internet Protocol (IP) is a packet-based protocol used to exchange data over computer networks. IP handles addressing, routing, fragmentation, reassembly, and protocol demultiplexing.
Chapter 3: IP Routing Configuration Guide and broadcasts its own routing information on those same networks. The SSR supports the following Interior Gateway Protocols: • Routing Information Protocol (RIP) Version 1, 2 (RFC 1058, 1723) • Open Shortest Path First (OSPF) Version 2 (RFC 1583) Exterior Gateway Protocols are used to transfer information between different “autonomous systems”.
Chapter 3: IP Routing Configuration Guide Configure a secondary address to an interface add ip <InterfaceName> address-netmask <ipAddr-mask> existing IP interface. padd [broadcast <i r> ] Configure IP Interfaces for a VLAN You can configure one IP interface per VLAN. Once an IP interface has been assigned to a VLAN, you can add a secondary IP addresses to the VLAN.
Chapter 3: IP Routing Configuration Guide stored in an ARP cache for rapid retrieval. Then the IP datagram is encapsulated in a link-layer frame and sent over the network. Configure ARP Cache Entries You can add and delete entries in the ARP cache. To add or delete static ARP entries, enter one of the the following commands in Configure mode: Add a static ARP entry.
Chapter 3: IP Routing Configuration Guide Configure IP Services (ICMP) The SSR provides ICMP message capabilities including ping and traceroute. Ping allows you to determine the reachability of a certain IP host. Traceroute allows you to trace the IP gateways to an IP host. To access ping or traceroute on the SSR, enter the following commands in Enable mode: Specify ping.
Chapter 3: IP Routing Configuration Guide Configuration Examples Assigning IP/IPX Interfaces To enable routing on the SSR, you must assign an IP or IPX interface to a VLAN. To assign an IP or IPX interface named ‘RED’ to the ‘BLUE’ VLAN, perform the following: ssr(config)# interface create ip RED address-netmask 10.50.0.1/ 255.255.0.0 vlan BLUE...
Chapter 4 Chapter 4 RIP Configuration Guide RIP Overview This chapter describes how to configure Routing Information Protocol (RIP) in the SmartSwitch Router. RIP is a distance-vector routing protocol for use in small networks. RIP is described in RFC 1723. A router running RIP broadcasts updates at set intervals.
Chapter 4: RIP Configuration Guide To add RIP interfaces, enter the following commands in Configure mode. Add interfaces to the RIP process. rip add interface <interfacename-or-IPaddr> rip add trusted-gateway <interfacename-or- Add gateways from which the SSR will IPaddr> accept RIP updates. rip add source-gateway <interfacename-or- Define the list of routers to which RIP IPaddr>...
Chapter 4: RIP Configuration Guide To change RIP parameters, enter the following commands in Configure mode. rip set interface <interfacename-or- Set RIP Version on an interface to IPaddr> |all version 1 RIP V1 . rip set interface <interfacename-or- Set RIP Version on an interface to IPaddr>...
Chapter 4: RIP Configuration Guide routes from other protocols into RIP, you must explicitly specify a value for the default-metric parameter. The metric specified by the default-metric parameter may be overridden by a metric specified in the export command. To configure default-metric, enter the following command in Configure mode. rip set default-metric <num>...
Chapter 4: RIP Configuration Guide rip trace response receive Show detailed information of all response received by the router. rip trace response send Show detailed information of response packets sent by the router. rip trace send request Show detailed information of request packets sent by the router.
Page 60
Chapter 4: RIP Configuration Guide 4 - 6 SSR User Reference Manual...
Chapter 5 Chapter 5 OSPF Configuration Guide OSPF Overview Open Shortest Path First (OSPF) is a link-state routing protocol that supports IP subnetting and authentication. The SSR supports OSPF Version 2.0 as defined in RFC 1583. Each link-state message contains all the links connected to the router with a specified cost associated with the link.
Chapter 5: OSPF Configuration Guide The default cost of an OSPF interface is 1. The cost of the interface should be inversely proportional to the bandwidth of the interface; if the SSR has interfaces with differing bandwidths, the OSPF costs should be set accordingly.
Page 63
Chapter 5: OSPF Configuration Guide To configure OSPF interface parameters, enter one of the following commands in Configure mode: Enable OSPF state on interface. ospf set interface < name-or-IPaddr >|all state disable|enable Specify the cost of sending a packet ospf set interface < name-or-IPaddr >|all cost on an OSPF interface.
Chapter 5: OSPF Configuration Guide Configure an OSPF Area OSPF areas are a collection of subnets that are grouped in a logical fashion. These areas communicate with other areas via the backbone area. Once OSPF areas are created, you can add interfaces, stub hosts, and summary ranges to the area. In order to reduce the amount of routing information propagated between areas, you can configure summary-ranges on Area Border Routers (ABRs).
Chapter 5: OSPF Configuration Guide To configure OSPF area parameters, enter the following commands in the Configure mode. Specify an OSPF stub area. ospf set area <area-num> stub Specify the cost to be used to inject a ospf set area <area-num> stub-cost <num> default route into an area.
Chapter 5: OSPF Configuration Guide Configure Autonomous System External (ASE) Link Advertisements These parameters specify the defaults used when importing OSPF AS External (ASE) routes into the routing table and exporting routes from the routing table into OSPF ASEs. To specify AS external link advertisements parameters, enter the following commands in the Configure mode: Specify the interval which AS external ospf set export-interval <num>...
Page 67
Chapter 5: OSPF Configuration Guide To display OSPF information, enter the following commands in Enable mode. Show IP routing table. ip show table routing Monitor OSPF error conditions. ospf monitor errors destination <hostname- or-IPaddr> Show information on all interfaces con- ospf monitor interfaces destination figured for OSPF.
Chapter 5: OSPF Configuration Guide Shows routes redistributed into OSPF. ospf show exported-routes Show all OSPF global parameters. ospf show globals Show information about OSPF import ospf show import-policies policies. Show OSPF interfaces. ospf show interfaces Shows information about all valid next ospf show next-hop-list hops mostly derived from the SPF cal- culation.
Page 70
Chapter 5: OSPF Configuration Guide In the configuration shown in Figure 1 on page 5 - 12, suppose if we decide to run RIP Version 2 on network 120.190.0.0/16, connecting routers R1 and R2. We would like to redistribute these RIP routes as OSPF type-2 routes, and associate the tag 100 with them.
Page 71
Chapter 5: OSPF Configuration Guide ip-router policy create rip-export-destination ripExpDst 10. Create OSPF export source. ip-router policy create ospf-export-source ospfExpSrc type OSPF 11. Create OSPF-ASE export source. ip-router policy create ospf-export-source ospfAseExpSrc type OSPF-ASE 12. Create the Export-Policy for redistributing all interface, RIP, static, OSPF and OSPF-ASE routes into RIP.
Page 72
Figure 1: Exporting to OSPF 140.1.5/24 140.1.1.2/24 A r e a 140.1.0.0 140.1.4/24 A r e a B a c k b o n e 150.20.3.1/16 140.1.1.1/24 130.1.1.1/16 140.1.3.1/24 140.1.2.1/24 190.1.1.1/16 130.1.1.3/16 150.20.3.2/16 120.190.1.1/16 A r e a 150.20.0.0 120.190.1.2/16 202.1.2.2/16 160.1.5.2/24 160.1.5.2/24...
Chapter 6 Chapter 6 Routing Policy Configuration Guide Route Import and Export Policy Overview The SSR family of routers supports extremely flexible routing policies. The SSR allows the network administrator to control import and export of routing information based on criteria including: •...
Chapter 6: Routing Policy Configuration Guide A default preference is assigned to each source from which the SSR routing process receives routes. Preference values range from 0 to 255 with the lowest number indicating the most preferred route. The following table summarizes the default preference values for routes learned in various ways.
Page 75
Chapter 6: Routing Policy Configuration Guide Import-Source This component specifies the source of the imported routes. It can also specify the preference to be associated with the routes imported from this source. The routes to be imported can be identified by their associated attributes: •...
Chapter 6: Routing Policy Configuration Guide Route-Filter This component specifies the individual routes which are to be imported or restricted. The preference to be associated with these routes can also be explicitly specified using this component. The preference associated with the imported routes are inherited unless explicitly specified.
Chapter 6: Routing Policy Configuration Guide specifies IGP as the origin and no ASs in the AS path (the current AS is added when the route is exported). For BGP routes, the AS path is stored as learned from BGP. •...
Chapter 6: Routing Policy Configuration Guide The three forms of a route-filter are: • Network [ exact | refines | between number,number] • Network/mask [ exact | refines | between number,number] • Network/masklen [ exact | refines | between number,number] Matching usually requires both an address and a mask, although the mask is implied in the shorthand forms listed below.
Chapter 6: Routing Policy Configuration Guide to know about individual subnets which would increase the size of its routing table, the peer is only informed about an aggregate-route which contains all the subnets. Like export policies, aggregate-routes can have up to three components: •...
Chapter 6: Routing Policy Configuration Guide A route may only contribute to an aggregate route that is more general than itself; it must match the aggregate under its mask. Any given route may only contribute to one aggregate route, which will be the most specific configured, but an aggregate route may contribute to a more general aggregate.
Chapter 6: Routing Policy Configuration Guide secondary authentication key. In the router configuration mode, instead of specifying the key for each interface (which can be up to 16 characters long), a key-chain identifier is specified. Configure Simple Routing Policies Simple routing policies provide an efficient way for routing information to be exchanged between routing protocols.
Chapter 6: Routing Policy Configuration Guide To redistribute static routes, enter one of the following commands in Configure mode: To redistribute static routes into RIP. ip-router policy redistribute from- proto static to-proto rip network all To redistribute static routes into OSPF. ip-router policy redistribute from- proto static to-proto ospf network all Redistributing Directly Attached Networks...
Chapter 6: Routing Policy Configuration Guide Redistributing OSPF to RIP For the purposes of route redistribution and import-export policies, OSPF intra- and inter-area routes are referred to as ospf routes, and external routes redistributed into OSPF are referred to as ospf-ase routes. Examples of ospf-ase routes include static routes, rip routes, direct routes, bgp routes, or aggregate routes, which are redistributed into an OSPF domain.
Page 84
Chapter 6: Routing Policy Configuration Guide • Specify the static routes configured on the router • Determine its RIP configuration !++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ ! Create the various IP interfaces. !++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ interface create ip to-r2 address-netmask 120.190.1.1/16 port et.1.2 interface create ip to-r3 address-netmask 130.1.1.1/16 port et.1.3 interface create ip to-r41 address-netmask...
Chapter 6: Routing Policy Configuration Guide Exporting a given static route to all RIP interfaces Router R1 has several static routes of which one is the default route. We would export this default route over all RIP interfaces. ip-router policy redistribute from-proto static to-proto rip network default Exporting all static routes to all RIP interfaces Router R1 has several static routes.
Page 86
Chapter 6: Routing Policy Configuration Guide ospf create area 140.1.0.0 ospf create area backbone ospf set ase-defaults cost 4 !++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ ! OSPF Interface Configuration !++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ ospf add interface 140.1.1.1 to-area 140.1.0.0 ospf add interface 140.1.2.1 to-area 140.1.0.0 ospf add interface 140.1.3.1 to-area 140.1.0.0 ospf add interface 130.1.1.1 to-area backbone Exporting all interface and static routes to OSPF.
Chapter 6: Routing Policy Configuration Guide Configure Advanced Routing Policies Advanced Routing Policies are used for creating complex import/export policies that cannot be done using the redistribute command. Advanced export policies provide granular control over the targets where the routes are exported, the source of the exported routes, and the individual routes which are exported.
Chapter 6: Routing Policy Configuration Guide complex filter requirements, then use the second method. After you create one or more building blocks, they are tied together by the iprouter policy export command. To create route export policies, enter the following command in Configure mode: Create an export policy.
Chapter 6: Routing Policy Configuration Guide Creating an Export Source To create an export source, enter one of the following commands in Configure mode: Create a RIP export source. ip-router policy create rip-export- source < name> Create an OSPF export source. ip-router policy create ospf-export- source <...
Chapter 6: Routing Policy Configuration Guide is the identifier of the import-source that determines the source <imp-src-id> of the imported routes. If no routes from a particular source are to be imported, then no additional parameters are required. , if specified, is the identifer of the route-filter associated with this <filter-id>...
Page 91
Chapter 6: Routing Policy Configuration Guide with the contributing routes from this source. The routes contributing to an aggregate can be identified by their associated attributes, including protocol type, tag associated with a route, and so on. • Route Filter - This component provides the means to define a filter for the routes to be aggregated or summarized.
Chapter 6: Routing Policy Configuration Guide Creating an Aggregate Destination To create an aggregate destination, enter the following command in Configure mode: Create an aggregate destination. ip-router policy create aggr-gen-dest < name> network < ipAddr-mask > Creating an Aggregate Source To create an aggregate source, enter the following command in Configure mode: Create an aggregate source.
Page 94
Chapter 6: Routing Policy Configuration Guide The following configuration commands for router R1 • Determine the IP address for each interface. • Specify the static routes configured on the router. • Determine its RIP configuration. !++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ ! Create the various IP interfaces. !++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ interface create ip to-r2 address-netmask...
Chapter 6: Routing Policy Configuration Guide rip set interface to-r42 version 2 type multicast rip set interface to-r6 version 2 type multicast Importing a selected subset of routes from one of the RIP trusted gateways. Router R1 has several RIP peers. Router R41 has an interface on the network 10.51.0.0.
Page 96
Chapter 6: Routing Policy Configuration Guide It is only possible to restrict the importation of OSPF ASE routes when functioning as an AS border router. Like the other interior protocols, preference cannot be used to choose between OSPF ASE routes. That is done by the OSPF costs. Routes that are rejected by policy are stored in the table with a negative preference.
Page 97
Figure 3: Exporting to OSPF 140.1.5/24 140.1.1.2/24 A r e a 140.1.0.0 140.1.4/24 A r e a B a c k b o n e 150.20.3.1/16 140.1.1.1/24 130.1.1.1/16 140.1.3.1/24 140.1.2.1/24 190.1.1.1/16 130.1.1.3/16 150.20.3.2/16 120.190.1.1/16 A r e a 150.20.0.0 120.190.1.2/16 202.1.2.2/16 160.1.5.2/24 160.1.5.2/24...
Page 98
Chapter 6: Routing Policy Configuration Guide The following configuration commands for router R1: • Determine the IP address for each interface • Specify the static routes configured on the router • Determine its OSPF configuration !++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ ! Create the various IP interfaces. !++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ interface create ip to-r2 address-netmask 120.190.1.1/16 port et.1.2 interface create ip to-r3...
Chapter 6: Routing Policy Configuration Guide Examples of Export Policies Example 1: Exporting to RIP Exporting to RIP is controlled by any of protocol, interface or gateway. If more than one is specified, they are processed from most general (protocol) to most specific (gateway).
Chapter 6: Routing Policy Configuration Guide !+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ ! Configure default routes to the 135.3.0.0 subnets reachable through ! R3. !+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ ip add route 135.3.1.0/24 gateway 130.1.1.3 ip add route 135.3.2.0/24 gateway 130.1.1.3 ip add route 135.3.3.0/24 gateway 130.1.1.3 !+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ ! Configure default routes to the other subnets reachable through R2. !+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ ip add route 202.1.0.0/16 gateway 120.190.1.2 ip add route 160.1.5.0/24 gateway 120.190.1.2...
Page 101
Chapter 6: Routing Policy Configuration Guide Create a RIP export source since we would like to export RIP routes. ip-router policy create rip-export-source ripExpSrc Create a Direct export source since we would like to export direct/interface routes. ip-router policy create direct-export-source directExpSrc Create the export-policy redistributing the statically created default route, and all (RIP, Direct) routes into RIP.
Page 102
Chapter 6: Routing Policy Configuration Guide Create a RIP export destination for interface with address 140.1.1.1, since we in- tend to change the rip export policy for interface 140.1.1.1 ip-router policy create rip-export-destination ripExpDst141 interface 140.1.1.1 Create a Static export source since we would like to export static routes. ip-router policy create static-export-source statExpSrc130 interface 130.1.1.1 Create a RIP export source since we would like to export RIP routes.
Chapter 6: Routing Policy Configuration Guide ip-router aggr-gen destination aggrDst140 source allAggrSrc network 140.1.2.0/ Create a RIP export destination for interface with address 130.1.1.1, since we in- tend to change the rip export policy only for interface 130.1.1.1. ip-router policy create rip-export-destination ripExpDst130 interface 130.1.1.1 Create a Aggregate export source since we would to export/redistribute an aggre- gate/summarized route.
Page 104
Chapter 6: Routing Policy Configuration Guide For all examples in this section, refer to the configuration shown in Figure 3 on page 6 - 25. The following configuration commands for router R1: • Determine the IP address for each interface •...
Page 105
Chapter 6: Routing Policy Configuration Guide ip-router policy create ospf-export-destination ospfExpDstType1 type 1 metric Create a OSPF export destination for type-2 routes since we would like to redis- tribute certain routes into OSPF as type 2 OSPF-ASE routes. ip-router policy create ospf-export-destination ospfExpDstType2 type 2 metric Create a Static export source since we would like to export static routes.
Page 106
Chapter 6: Routing Policy Configuration Guide Create a OSPF export destination for type-2 routes with a tag of 100. ip-router policy create ospf-export-destination ospfExpDstType2t100 type 2 tag 100 metric 4 Create a RIP export source. ip-router policy export destination ripExpDst source ripExpSrc network all Create a Static export source.
Chapter 7 Chapter 7 Multicast Routing Configuration Guide IP Multicast Overview Multicast routing on the SSR is supported through DVMRP and IGMP. IGMP is used to determine host membership on directly attached subnets. DVMRP is used to determine forwarding of multicast traffic between SSRs. This chapter: •...
Chapter 7: Multicast Routing Configuration Guide • Pruning, which is an operation DVMRP routers perform to exclude interfaces not in the shortest path tree. DVMRP uses the Reverse Path Multicasting (RPM) algorithm to perform pruning.In RPM, a source network rather than a host is paired with a multicast group. RPM per- mits the SSR to maintain multiple multicast groups.
Chapter 7: Multicast Routing Configuration Guide To enable IGMP on an interface, enter the following command in Configure mode: Enable IGMP on an interface. <ipAddr> igmp enable interface Configure IGMP Query Interval You can configure the SSR with a different IGMP Host Membership Query time interval.
Chapter 7: Multicast Routing Configuration Guide Configure DVMRP You configure DVMRP routing on the SSR by performing the following DVMRP- configuration tasks. • Creating IP interfaces. • Setting global parameters that will be used for all the interfaces on which DVMRP is enabled.
Chapter 7: Multicast Routing Configuration Guide To configure neighbor timeout or prune time, enter one of the following commands in Configure mode: Configure the DVMRP neighbor time- dvmrp set interface <ip-addr> neighbor- timeout <number> out. Configure the DVMRP prune time. dvmrp set interface <ip-addr>...
Chapter 7: Multicast Routing Configuration Guide TTL thresholding is not always considered useful. There is another approach of a range of multicast addresses for “administrative” scoping. In other words, such addresses would be usable within a certain administrative scope, a corporate network, for instance, but would not be forwarded across the internet.
Chapter 7: Multicast Routing Configuration Guide Monitor IGMP and DVMRP You can monitor IGMP and DVMRP information on the SSR. To display IGMP and DVMRP information, enter the following commands in the Enable mode. Show all interfaces running DVMRP. dvmrp show interface Also shows the neighbors on each inter- face.
Page 114
Chapter 7: Multicast Routing Configuration Guide ! Create IP intefaces interface create ip mls15 address-netmask 172.1.1.10/24 port et.5.8 interface create ip company address-netmask 207.135.89.64/25 port et.5.1 interface create ip test address-netmask 10.135.89.10/25 port et.1.8 interface create ip rip address-netmask 190.1.0.1 port et.1.4 interface create ip mbone address-netmask 207.135.122.11/29 port et.1.1 interface create ip downstream address-netmask 10.40.1.10/24 vlan upstream...
Page 115
Chapter 7: Multicast Routing Configuration Guide SSR User Reference Manual 7 - 9...
Page 116
Chapter 7: Multicast Routing Configuration Guide 7 - 10 SSR User Reference Manual...
Chapter 8 Chapter 8 IPX Routing Configuration Guide IPX Routing Overview The Internetwork Packet Exchange (IPX) is a datagram connectionless protocol for the Novell NetWare environment. You can configure the SSR for IPX routing and SAP. Routers interconnect different network segments and by definitions are network layer devices.
Chapter 8: IPX Routing Configuration Guide • Routers perform broadcasting whenever they detect a change in the internetwork configurations. SSR's RIP implementation follows the guidelines given in Novell's IPX RIP and SAP Router Specification Version 1.30 document. SAP (Service Advertising Protocol) SAP provides routers with a means of exchanging internetwork service information.
Chapter 8: IPX Routing Configuration Guide IPX SAP On the SSR, SAP automatically runs on all the IPX interfaces. The SSR will keep multiple SAP’s having the lowest hop count. Static SAPs can be configured on the SSR using the CLI’s ipx add sap command. Through the use of SAP filters, the SSR can control the acceptance and advertisements of services per-interface.
Chapter 8: IPX Routing Configuration Guide To configure a VLAN with an IPX interface, enter the following command in Configure mode: Create an IPX interface for a VLAN. interface create ipx <InterfaceName> address-mask <ipxAddr-mask> vlan <name> Specify IPX Encapsulation Method The SmartSwitch Router supports two encapsulation types for IPX.
Chapter 8: IPX Routing Configuration Guide Enable SAP IPX SAP is enabled by default on the SSR. You must first create an IPX interface or assign an IPX interface to a VLAN before SAP will start learning services. Configure Static Routes In a Novell NetWare network, the SSR uses RIP to determine the best paths for routing IPX.
Chapter 8: IPX Routing Configuration Guide replies. • RIP access control list: Restricts advertisements or learning of networks. Create an IPX Access Control List IPX access control lists control which IPX traffic is received from or sent to an interface based on source address, destination address, source socket, destination socket, source network mask or destination network mask.
Chapter 8: IPX Routing Configuration Guide Create an IPX RIP Access Control List IPX RIP access control lists control which RIP updates are allowed. To create an IPX RIP access control list, perform the following task in the Configure mode: Create an IPX RIP access control list.
Page 124
Chapter 8: IPX Routing Configuration Guide • Adds a RIP access list • Adds a SAP access list ! Create interface ipx1 with ipx address AAAAAAAA interface create ipx ipx1 address AAAAAAAA port et.1.1 output- mac-encapsulation ethernet_802.2_IPX ! Create interface ipx2 with ipx address BBBBBBBB interface create ipx ipx2 address BBBBBBBB port et.1.2 output- mac-encapsulation ethernet_802.3 !Add static route to network 9...
Chapter 9 Chapter 9 Security Configuration Guide Security Overview The SSR provides security features that help control access to the SSR and filter traffic going through the SSR. Access to the SSR can be controlled by: • Enabling TACACS • Login authentication Traffic filtering on the SSR enables: •...
Chapter 9: Security Configuration Guide Determine TACACS action if no server tacacs set last-resort password|succeed responds. Enable TACACS. tacacs enable Monitor TACACS You can monitor TACACS configuration and statistics within the SSR. To monitor TACACS, enter the following commands in Enable mode: Show TACACS server statistics.
Chapter 9: Security Configuration Guide • Port-to-address lock filters These filters prohibit a user connected to a locked port or set of ports from using an- other port. • Static entry filters These filters allow or force traffic to go to a set of destination ports based on a frame's source MAC address, destination MAC address, or both source and destina- tion MAC addresses in flow bridging mode.
Chapter 9: Security Configuration Guide Configuring Layer-2 Port-to-Address Lock Filters Port address lock filters allow you to bind or “lock” specific source MAC addresses to a port or set of ports. Once a port is locked, only the specified source MAC address is allowed to connect to the locked port and the specified source MAC address is not allowed to connect to any other ports.
Chapter 9: Security Configuration Guide Configuring Layer-2 Secure Port Filters Secure port filters block access to a specified port. You can use a secure port filter by itself to secure unused ports. Secure port filters can be configured as source or destination port filters.
Page 130
Chapter 9: Security Configuration Guide To display security filter information, enter the following commands in Enable mode. Show address filters. filters show address-filter [all-source|all-destination|all-flow] [source-mac <MACaddr> dest-mac <MACaddr> ] [ports <port-list> ] [vlan <VLAN-num> ] Show port address lock filters. filters show port-address-lock ports [ports <port-list>...
Chapter 9: Security Configuration Guide Layer-2 Filter Examples et.1.1 et.1.2 et.1.3 Engineering Finance File Servers File Servers Engineers, Consultant Example 1: Address Filters Source filter: The consultant is not allowed to access any file servers. The consultant is only allowed to interact with the engineers on the same Ethernet segment – port et.1.1.
Chapter 9: Security Configuration Guide filters add secure-port name engineers direction dest vlan 1 in- port-list et.1.1 To allow all engineers access to the engineering servers, you must "punch" a hole through the secure-port wall. A "dest static-entry" overrides a "dest secure port". filters add static-entry name eng-server dest-mac 080060:abcdef vlan 1 in-port-list et.1.1 out-port-list et.1.2 restriction allow L3 Access Control Lists (ACLs)
Chapter 9: Security Configuration Guide For IPX ACLs, the following fields can be specified: • Source network address • Destination network address • Source IPX socket • Destination IPX socket When defining an ACL rule, each field in the rule is position sensitive. For example, for TCP, the source address must be followed by the destination address, followed by the source socket and the destination socket and so on.
Chapter 9: Security Configuration Guide When a TCP packet comes from subnet 10.2.0.0/16, it finds a match with the first rule. This causes the packet to be dropped. A TCP packet coming from other subnets will not match the first rule. Instead, it matches the second rule which allows the packet to go through.
Chapter 9: Security Configuration Guide Although the implicit deny rule seems obvious in the above example, this is not always the case. For example, consider the following ACL rule: acl 102 deny ip 10.1.20.0/24 any any any If a packet comes in from a network other than 10.1.20.0/24, one might expect the packet to go through because it doesn't match the first rule.
Chapter 9: Security Configuration Guide many rules in an ACL. You just have to put all of these rules into one ACL and apply it to an interface. When a packet comes into a router at an interface where an inbound ACL is applied, the router compares the packet with the rules specified by that ACL.
Chapter 9: Security Configuration Guide Before enabling ACL Logging, one should consider its impact on performance. With ACL Logging enabled, the router prints out a message at the console before the packet is actually forwarded or dropped. Even if the console is connected to the router at a high baud rate, the delay caused by the console message is still significant.
Chapter 9: Security Configuration Guide The first copy command downloads the file acl.changes from a TFTP server and puts the commands into the temporary configuration area, scratchpad. The administrator can re-examine the changes if necessary before committing the changes to the running system.
Chapter 9: Security Configuration Guide Defining an IP ACL To define an IP ACL, perform the following in the Configure mode: Define an IP ACL. <name> permit|deny ip|tcp|udp|icmp|igmp <srcaddr/mask> |any <dstaddr/mask> |any Note: Additional fields depend on the protocol type you select.
Page 141
Chapter 9: Security Configuration Guide To display ACL information, enter the following command in Enable mode. Show all ACLs. acl show all Show a specific ACL. acl show aclname <Name> | all Show an ACL on a specific interface. acl show interface <Name> Show ACLs on all IP interfaces.
Page 142
Chapter 9: Security Configuration Guide 9 - 18 SSR User Reference Manual...
Chapter 10 Chapter 10 QoS Configuration Guide QoS and L2/L3/L4 flow Overview The SSR allows network managers to identify traffic and set Quality of Service (QoS) policies without compromising wire speed performance. The SSR can guarantee bandwidth on an application by application basis, thus accommodating high-priority traffic even during peak periods of usage.
Chapter 10: QoS Configuration Guide Precedence for Layer-3 Flows A precedence from 1 - 7 is associated with each field in a flow. The SSR uses the precedence value associated with the fields to break ties if packets match more than one flow.
Chapter 10: QoS Configuration Guide If a port operates in flow-bridging mode, the user can be more specific and configure priorities for frames that match both a source AND a destination MAC address and a VLAN ID. You can also specify a list of ports to apply the policy. In flow mode, you can also ignore the source MAC address and configure Note: the priority based on the destination MAC address only.
Chapter 10: QoS Configuration Guide Specify the precedence for the fields within an IP flow. Set an IP QoS Policy To set a QoS policy on an IP traffic flow, enter the following command in Configure mode: Set an IP QoS policy. qos set ip <name>...
Chapter 10: QoS Configuration Guide Specify Precedence for an IPX QoS Policy To specify the precedence for an IPX QoS policy, enter the following command in Configure mode: Specify precedence for an IPX QoS qos precedence ipx [srcnet <num> ] [srcnode <num>...
Chapter 10: QoS Configuration Guide Monitor QoS The SSR provides display of QoS statistics and configurations contained in the SSR. To display QoS information, enter the following command in Enable mode: Show all IP QoS flows qos show ip Show all IPX QoS flows. qos show ipx Show all L2 QoS flows.
Chapter 11 Chapter 11 Performance Monitoring Guide Performance Monitoring Overview The SSR is a full wire-speed layer-2, 3 and 4 switching router. As packets enter the SSR, layer-2, 3, and 4 flow tables are populated on each line card. The flow tables contain information on performance statistics and traffic forwarding.
Page 150
Chapter 11: Performance Monitoring Guide Show info about multicasts registered l2-tables show igmp-mcast-registrations by IGMP. Show whether IGMP is on or off on a l2-tables show vlan-igmp-status VLAN. Show info about MACs registered by l2-tables show bridge-management the system. Show SNMP statistics. snmp show statistics Show ICMP statistics.
Need help?
Do you have a question about the SmartSwitch 8-slot and is the answer not in the manual?
Questions and answers