Foundry Networks Switch and Router Installation And Configuration Manual page 950

Foundry Switch and Router Installation and Configuration Guide
USING THE CLI
Configuring NetIron-A
Enter the following commands to configure NetIron-A. The following commands enable OSPF or RIP routing and
IPX routing.
NetIron> en
No password has been assigned yet...
NetIron# configure terminal
NetIron(config)# hostname NetIron-A
NetIron-A(config)# router ospf
NetIron-A(config-ospf-router)# area 0.0.0.0 normal
NetIron-A(config-ospf-router)# router ipx
ipx routing enabled for next power cycle.
Please save configuration to flash and reboot.
NetIron-A(config-ospf-router)#
The following commands create the port-based VLAN 2. In the previous example, an external NetIron defined the
router interfaces for VLAN 2. With ISR, routing for VLAN 2 is done locally within each NetIron. Therefore, there
are two ways you can solve this problem. One way is to create a unique IP sub-net and IPX network VLAN, each
with its own virtual interface and unique IP or IPX address within VLAN 2 on each NetIron. In this example, this is
the configuration used for VLAN 3. The second way is to split VLAN 2 into two separate port-based VLANs and
create a virtual router interface within each port-based VLAN. Later in this example, this second option is used to
create a port-based VLAN 8 to show that there are multiple ways to accomplish the same task with ISR.
You also need to create the Other-Protocol VLAN within port-based VLAN 2 and 8 to prevent unwanted protocols
from being Layer 2 switched within port-based VLAN 2 or 8. Note that the only port-based VLAN that requires
STP in this example is VLAN 4. You will need to configure the rest of the network to prevent the need to run STP.
NetIron-A(config-ospf-router)# vlan 2 name IP-Subnet_1.1.2.0/24
NetIron-A(config-vlan-2)# untag e1 to 4
NetIron-A(config-vlan-2)# no spanning-tree
NetIron-A(config-vlan-2)# router-interface ve1
NetIron-A(config-vlan-2)# other-proto name block_other_protocols
NetIron-A(config-vlan-other-proto)# no dynamic
NetIron-A(config-vlan-other-proto)# exclude e1 to 4
Once you have defined the port-based VLAN and created the virtual interface, you need to configure the virtual
interface just as you would configure a physical interface.
NetIron-A(config-vlan-other-proto)# interface ve1
NetIron-A(config-vif-1)# ip address 1.1.2.1/24
NetIron-A(config-vif-1)# ip ospf area 0.0.0.0
Do the same thing for VLAN 8.
NetIron-A(config-vif-1)# vlan 8 name IPX_Network2
NetIron-A(config-vlan-8)# untag ethernet 5 to 8
NetIron-A(config-vlan-8)# no spanning-tree
NetIron-A(config-vlan-8)# router-interface ve 2
NetIron-A(config-vlan-8)# other-proto name block-other-protocols
NetIron-A(config-vlan-other-proto)# no dynamic
NetIron-A(config-vlan-other-proto)# exclude ethernet 5 to 8
NetIron-A(config-vlan-other-proto)# int ve2
NetIron-A(config-vif-2)# ipx network 2 ethernet_802.3
NetIron-A(config-vif-2)#
The next thing you need to do is create VLAN 3. This is very similar to the previous example with the addition of
virtual interfaces to the IP sub-net and IPX network VLANs. Also there is no need to exclude ports from the
IP sub-net and IPX network VLANs on the router.
NetIron-A(config-vif-2)# vlan 3 name IP_Sub_&_IPX_Net_VLAN
NetIron-A(config-vlan-3)# untag e9 to 16
25 - 30 December 2000