Cabletron Systems GIGAswitch GSR-16, GIGAswitch GSR-8 User's Reference Manual

DIGITAL GIGAswitch/Router

User Reference Manual

Part Number: 9032684-03

December 1999 This manual describes how to use the DIGITAL GIGAswitch/Router

(GSR). Revision/Update Information: This is a revised document.

Changes

Cabletron Systems reserves the right to make changes in specifications and other information contained in this document without prior notice. The reader should in all cases consult Cabletron Systems to determine whether any such changes have been made.

The hardware, firmware, or software described in this manual is subject to change without notice.

Disclaimer

IN NO EVENT SHALL CABLETRON SYSTEMS BE LIABLE FOR ANY INCIDENTAL, INDIRECT, SPECIAL, OR CONSEQUENTIAL DAMAGES WHATSOEVER (INCLUDING BUT NOT LIMITED TO LOST PROFITS) ARISING OUT OF OR RELATED TO THIS MANUAL OR THE INFORMATION CONTAINED IN IT, EVEN IF CABLETRON SYSTEMS HAS BEEN ADVISED OF, KNOWN, OR SHOULD HAVE KNOWN, THE POSSIBILITY OF SUCH DAMAGES.

Trademarks

Apple, AppleTalk, and Macintosh are registered trademarks of Apple Computer, Inc. Cabletron Systems is registered trademark and Cabletron, clearVISN, and GIGAswitch are trademarks

of Cabletron Systems, Inc. EtherChannel is a registered trademark of Cicsco Systems, Inc. DIGITAL Equipment Corporation, DEC, and the DIGITAL Equipment Corporation logo are registered

trademarks and DECnet is a trademark of DIGITAL Equipment Corporation Equipment Corporation. Microsoft, Windows, and Windows NT are registered trademarks of Microsoft Corporation. Java is a trademark of Sun Microsytems, Inc. All other product names mentioned in this manual may be trademarks or registered trademarks of

their respective companies.

FCC Notice — Class A Computing Device

This equipment generates, uses, and may emit radio frequency energy. The equipment has been type tested and found to comply with the limits for a Class A digital device pursuant to Part 15 of FCC rules, which are designed to provide reasonable protection against such radio frequency interference. Operation of this equipment in a residential area may cause interference in which case the user at his own expense will be required to take whatever measures may be required to correct the interference. Any modifications to this device - unless expressly approved by the manufacturer - can void the user's authority to operate this equipment under part 15 of the FCC rules.

Industry Canada Notice

This digital apparatus does not exceed the Class A limits for radio noise emissions from digital apparatus set out in the Radio Interference Regulations of the Canadian Department of Communications.

Le présent appareil numérique n’émet pas de bruits radioélectriques dépassant les limites applicables aux appareils numériques de la class A prescrites dans le Règlement sur le brouillage radioélectrique édicté par le ministère des Communications du Canada.

NOTICE: The Industry Canada label identifies certified equipment. This certification means that the equipment meets telecommunications network protective, operational and safety requirements as prescribed in the appropriate Terminal Equipment Technical Requirements document(s). The department does not guarantee the equipment will operate to the user’s satisfaction.

Before installing this equipment, users should ensure that it is permissible to be connected to the facilities of the local telecommunications company. The equipment must also be installed using an acceptable method of connection. The customer should be aware that compliance with the above conditions may not prevent degradation of service in some situations.

Repairs to certified equipment should be coordinated by a representative designated by the supplier. Any repairs or alterations made by the user to this equipment, or equipment malfunctions, may give the telecommunications company cause to request the user to disconnect the equipment.

Users should ensure for their own protection that the electrical ground connections of the power utility, telephone lines and internal metallic water pipe system, if present, are connected together. This precaution may be particularly important in rural areas. Caution: Users should not attempt to make such connections themselves, but should contact the appropriate electric inspection authority, or electrician, as appropriate.

NOTICE: The Ringer Equivalence Number (REN) assigned to each terminal device provides an indication of the maximum number of terminals allowed to be connected to a telephone interface. The termination on an interface may consist of any combination of devices subject only to the requirement that the sum of the ringer equivalence Numbers of all the devices does not exceed 5.

iii

VCCI Notice — Class A Computing Device

This equipment is a Class A product (information equipment to be used in commercial and/or industrial areas) and conforms to the standards set by the Voluntary Control Council for Interference by Data Processing Equipment and Electronic Office Machines aimed at preventing radio interference in commercial and/or industrial areas. Consequently, when used in a residential area or in an adjacent area thereto, radio interference may be caused to radios and TV receivers. Read the instructions for correct handling.

Taiwanese Notice — Class A Computing Device

CE Notice — Class A Computing Device

Warning!

This is a Class A product. In a domestic environment, this product may cause radio interference, in which case the user may be required to take adequate measures.

Achtung!

Dieses ist ein Gerät der Funkstörgrenzwertklasse A. In Wohnbereichen können bei Betrieb dieses Gerätes Rundfunkstörungen auftreten, in welchen Fällen der Benutzer für entsprechende Gegenma verantwortlich ist.

Avertissement!

Cet appareil est un appareil de Classe A. Dans un environnement résidentiel cet appareil peut provoquer des brouillages radioélectriques. Dans ce cas, il peut être demandé à l'utilisateur de prendre les mesures appropriées.

nahmen

Cabletron Systems, Inc. Program License Agreement

IMPORTANT: Before utilizing this product, carefully read this License Agreement.

This document is an agreement between you, the end user, and Cabletron Systems, Inc. (“Cabletron”) that sets forth your rights and obligations with respect to the Cabletron software program (the “Program”) contained in this package. The Program may be contained in firmware, chips or other media. BY UTILIZING THE ENCLOSED PRODUCT, YOU ARE AGREEING TO BECOME BOUND BY THE TERMS OF THIS AGREEMENT, WHICH INCLUDES THE LICENSE AND THE LIMITATION OF WARRANTY AND DISCLAIMER OF LIABILITY. IF YOU DO NOT AGREE TO THE TERMS OF THIS AGREEMENT, PROMPTLY RETURN THE UNUSED PRODUCT TO THE PLACE OF PURCHASE FOR A FULL REFUND.

Cabletron Software Program License

1. LICENSE. You have the right to use only the one (1) copy of the Program provided in this package subject to the terms and conditions of this License Agreement.

You may not copy, reproduce or transmit any part of the Program except as permitted by the Copyright Act of the United States or as authorized in writing by Cabletron.

2. OTHER RESTRICTIONS

3. APPLICABLE LAW and in the state and federal courts of New Hampshire. You accept the personal jurisdiction and venue of the New Hampshire courts.

. You may not reverse engineer, decompile, or disassemble the Program.

. This License Agreement shall be interpreted and governed under the laws

Exclusion of Warranty and Disclaimer of Liability

1. EXCLUSION OF WARRANTY. Except as may be specifically provided by Cabletron in writing, Cabletron makes no warranty, expressed or implied, concerning the Program (including its documentation and media).

CABLETRON DISCLAIMS ALL WARRANTIES, OTHER THAN THOSE SUPPLIED TO YOU BY CABLETRON IN WRITING, EITHER EXPRESSED OR IMPLIED, INCLUDING BUT NOT LIMITED TO IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE, WITH RESPECT TO THE PROGRAM, THE ACCOMPANYING WRITTEN MATERIALS, AND ANY ACCOMPANYING HARDWARE.

2. NO LIABILITY FOR CONSEQUENTIAL DAMAGES ITS SUPPLIERS BE LIABLE FOR ANY DAMAGES WHATSOEVER (INCLUDING, WITHOUT LIMITATION, DAMAGES FOR LOSS OF BUSINESS, PROFITS, BUSINESS INTERRUPTION, LOSS OF BUSINESS INFORMATION, SPECIAL, INCIDENTAL, CONSEQUENTIAL, OR RELIANCE DAMAGES, OR OTHER LOSS) ARISING OUT OF THE USE OR INABILITY TO USE THIS CABLETRON PRODUCT, EVEN IF CABLETRON HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. BECAUSE SOME STATES DO NOT ALLOW THE EXCLUSION OR LIMITATION OF LIABILITY FOR CONSEQUENTIAL OR INCIDENTAL DAMAGES, OR ON THE DURATION OR LIMITATION OF IMPLIED WARRANTIES, IN SOME INSTANCES THE ABOVE LIMITATIONS AND EXCLUSIONS MAY NOT APPLY TO YOU.

. IN NO EVENT SHALL CABLETRON OR

SAFETY INFORMATION

United States Government Restricted Rights

The enclosed product (a) was developed solely at private expense; (b) contains “restricted computer software” submitted with restricted rights in accordance with Section 52227-19 (a) through (d) of the Commercial Computer Software - Restricted Rights Clause and its successors, and (c) in all respects is proprietary data belonging to Cabletron and/or its suppliers.

For Department of Defense units, the product is licensed with “Restricted Rights” as defined in the DoD Supplement to the Federal Acquisition Regulations, Section 52.227-7013 (c) (1) (ii) and its successors, and use, duplication, disclosure by the Government is subject to restrictions as set forth in subparagraph (c) (1) (ii) of the Rights in Technical Data and Computer Software clause at 252.227-7013. Cabletron Systems, Inc., 35 Industrial Way, Rochester, New Hampshire 03867-0505.

SAFETY INFORMATION

CLASS 1 LASER TRANSCEIVERS

The DGSRF-AA 100Base-FX Module, DGSRS-AA 1000Base-LX Module, and DGSRL-AA 1000BaseLX Module use Class 1 Laser transceivers. Read the following safety information before installing or operating these modules.

The Class 1 laser transceivers use an optical feedback loop to maintain Class 1 operation limits. This control loop eliminates the need for maintenance checks or adjustments. The output is factory set, and does not allow any user adjustment. Class 1 Laser transceivers comply with the following safety standards:

• 21 CFR 1040.10 and 1040.11 U.S. Department of Health and Human Services (FDA).

• IEC Publication 825 (International Electrotechnical Commission).

• CENELEC EN 60825 (European Committee for Electrotechnical Standardization).

When operating within their performance limitations, laser transceiver output meets the Class 1 accessible emission limit of all three standards. Class 1 levels of laser radiation are not considered hazardous.

Laser Radiation and Connectors

When the connector is in place, all laser radiation remains within the fiber. The maximum amount of radiant power exiting the fiber (under normal conditions) is -12.6 dBm or 55 x 10

Removing the optical connector from the transceiver allows laser radiation to emit directly from the optical port. The maximum radiance from the optical port (under worst case conditions) is

0.8 W cm

Do not use optical instruments to view the laser output. The use of optical instruments to view laser output increases eye hazard. When viewing the output optical port, power must be removed from the network adapter.

-2

or 8 x 103 W m2 sr-1.

-6

watts.

DECLARATION OF CONFORMITY

Application of Council Directive(s): 89/336/EEC

Manufacturer’s Name: Cabletron Systems, Inc.

Manufacturer’s Address: 35 Industrial Way

European Representative Name: Mr. J. Solari

European Representative Address: Cabletron Systems Limited

Conformance to Directive(s)/Product Standards:

SAFETY INFORMATION

73/23/EEC

PO Box 5005 Rochester, NH 03867

Nexus House, Newbury Business Park London Road, Newbury Berkshire RG13 2PZ, England

EC Directive 89/336/EEC EC Directive 73/23/EEC EN 55022 EN 50082-1 EN 60950

Equipment Type/Environment: Networking Equipment, for

use in a Commercial or Light Industrial Environment.

We the undersigned, hereby declare, under our sole responsibility, that the equipment packaged with this notice conforms to the above directives.

Manufacturer Legal Representative in Europe Mr. Ronald Fotino Mr. J. Solari

Full Name Full Name

Principal Compliance Engineer Managing Director - E.M.E.A. Tit le Tit le

Rochester, NH, USA Newbury, Berkshire, England Location Location

vii

Contents

Preface.................................................................................................... xxi

About This Manual.............................................................................................................. xxi

Who Should Read This Manual? ....................................................................................... xxi

How to Use This Manual ....................................................................................................xxi

Related Documentation.....................................................................................................xxiii

Correspondence................................................................................................................. .xxiii

Documentation Comments........................................................................................xxiii

Online Services............................................................................................................xxiii

Getting Help........................................................................................................................ xxiv

Chapter 1: DIGITAL GIGAswitch/Router Product Overview .................. 1

Supported Media (Encapsulation Type)...............................................................................3

Supported Routing Protocols.................................................................................................3

Configuring the DIGITAL GIGAswitch/Router.................................................................4

Understanding the Command Line Interface...............................................................4

Basic Line Editing Commands........................................................................................4

Access Modes ....................................................................................................................5

User Mode..........................................................................................................................6

Enable Mode......................................................................................................................7

Configure Mode ................................................................................................................9

Boot PROM Mode...........................................................................................................11

Disabling a Function or Feature....................................................................................11

Loading System Images and Configuration Files .............................................................11

Boot and System Image..................................................................................................11

Configuration Files .........................................................................................................12

Loading System Image Software..................................................................................12

Loading Boot PROM Software......................................................................................14

Activating the Configuration Commands in the Scratchpad...................................14

Copying the Configuration to the Startup Configuration File.................................15

Displaying Configuration Changes..............................................................................16

DIGITAL GIGAswitch/Router User Reference Manual ix

Contents

Managing the GSR ................................................................................................................17

Setting the GSR Name................................................................................................... 17

Setting GSR Date and Time .......................................................................................... 17

Configuring NTP............................................................................................................ 18

Configuring the GSR CLI.............................................................................................. 18

Configuring SNMP Services......................................................................................... 18

Configuring DNS ........................................................................................................... 19

Connecting Between the GSR and Other Systems .................................................... 19

Configuring Logging..................................................................................................... 20

Monitoring Configuration.................................................................................................... 20

Chapter 2: Hot Swapping Line Cards and Control Modules ................ 23

Hot Swapping Overview...................................................................................................... 23

Hot Swapping Line Cards.................................................................................................... 24

Deactivating the Line Card........................................................................................... 24

Removing the Line Card............................................................................................... 25

Installing a New Line Card ................................................................................... 25

Hot Swapping One Type of Line Card With Another.............................................. 25

Hot Swapping a Secondary Control Module.................................................................... 26

Deactivating the Control Module................................................................................ 26

Removing the Control Module .................................................................................... 27

Installing the Control Module...................................................................................... 27

Hot Swapping a Switching Fabric Module (GSR-16 only).............................................. 27

Chapter 3: Bridging Configuration Guide ............................................. 29

Bridging Overview................................................................................................................ 29

Spanning Tree (IEEE 802.1d)........................................................................................ 29

Bridging Modes (Flow-Based and Address-Based).................................................. 30

VLAN Overview.................................................................................................................... 30

Port-based VLANs.................................................................................................. 31

MAC-address-based VLANs................................................................................. 31

Protocol-based VLANs........................................................................................... 31

Subnet-based VLANs............................................................................................. 32

Multicast-based VLANs......................................................................................... 32

Policy-based VLANs .............................................................................................. 32

GSR VLAN Support....................................................................................................... 32

VLANs and the GSR............................................................................................... 32

Ports, VLANs, and L3 Interfaces .......................................................................... 33

Access Ports and Trunk Ports (802.1Q support)................................................. 34

Explicit and Implicit VLANs................................................................................. 34

x DIGITAL GIGAswitch/Router User Reference Manual

Contents

Configuring GSR Bridging Functions.................................................................................35

Configuring Address-based or Flow-based Bridging ...............................................35

Configuring Spanning Tree...........................................................................................36

Adjusting Spanning-Tree Parameters..........................................................................36

Setting the Bridge Priority......................................................................................37

Setting a Port Priority..............................................................................................37

Assigning Port Costs ...............................................................................................38

Adjusting Bridge Protocol Data Unit (BPDU) Intervals ....................................38

Adjusting the Interval between Hello Times................................................38

Defining the Forward Delay Interval ............................................................38

Defining the Maximum Age ...........................................................................39

Configuring a Port or Protocol based VLAN..............................................................39

Creating a Port or Protocol Based VLAN.............................................................39

Adding Ports to a VLAN........................................................................................39

Configuring VLAN Trunk Ports...................................................................................40

Configuring VLANs for Bridging.................................................................................40

Configuring Layer-2 Filters...........................................................................................40

Monitoring Bridging..............................................................................................................41

Configuration Examples .......................................................................................................42

Creating an IP or IPX VLAN.........................................................................................42

Creating a non-IP/non-IPX VLAN ..............................................................................42

Chapter 4: SmartTRUNK Configuration Guide...................................... 43

Overview.................................................................................................................................43

Configuring SmartTRUNKs .................................................................................................44

Creating a SmartTRUNK...............................................................................................44

Add Physical Ports to the SmartTRUNK ....................................................................45

Specify Traffic Distribution Policy (Optional)............................................................45

Monitoring SmartTRUNKs...................................................................................................46

Example Configurations .......................................................................................................47

Chapter 5: DHCP Configuration Guide.................................................. 49

DHCP Overview ....................................................................................................................49

Configuring DHCP ................................................................................................................50

Configuring an IP Address Pool...................................................................................50

Configuring Client Parameters.....................................................................................50

Configuring a Static IP Address ...................................................................................51

Grouping Scopes with a Common Interface...............................................................51

Configuring DHCP Server Parameters........................................................................52

Updating the Lease Database...............................................................................................52

Monitoring the DHCP Server...............................................................................................52

DHCP Configuration Examples...........................................................................................53

Configuring Secondary Subnets...................................................................................54

Secondary Subnets and Directly-Connected Clients.................................................55

Interacting with Relay Agents.......................................................................................56

DIGITAL GIGAswitch/Router User Reference Manual xi

Contents

Chapter 6: IP Routing Configuration Guide .......................................... 59

IP Routing Overview ............................................................................................................ 59

IP Routing Protocols...................................................................................................... 60

Unicast Routing Protocols ..................................................................................... 60

Multicast Routing Protocols.................................................................................. 60

Configuring IP Interfaces and Parameters ........................................................................ 61

Configuring IP Addresses to Ports.............................................................................. 61

Configuring IP Interfaces for a VLAN........................................................................ 61

Specifying Ethernet Encapsulation Method............................................................... 62

Configuring Address Resolution Protocol (ARP) ..................................................... 62

Configuring ARP Cache Entries ........................................................................... 62

Configuring Proxy ARP......................................................................................... 62

Configuring Reverse Address Resolution Protocol (RARP).................................... 63

Specifying IP Interfaces for RARP........................................................................ 63

Defining MAC-to-IP Address Mappings ............................................................ 63

Monitoring RARP ................................................................................................... 64

Configuring DNS Parameters ...................................................................................... 64

Configuring IP Services (ICMP)................................................................................... 65

Configuring IP Helper................................................................................................... 65

Configuring Direct Broadcast....................................................................................... 66

Configuring Denial of Service (DOS).......................................................................... 66

Monitoring IP Parameters............................................................................................. 66

Configuring Router Discovery............................................................................................ 67

Configuration Examples....................................................................................................... 68

Assigning IP/IPX Interfaces......................................................................................... 68

Chapter 7: VRRP Configuration Guide................................................... 69

VRRP Overview..................................................................................................................... 69

Configuring VRRP ................................................................................................................70

Basic VRRP Configuration............................................................................................ 70

Configuration of Router R1................................................................................... 71

Configuration for Router R2.................................................................................. 71

Symmetrical Configuration .......................................................................................... 71

Configuration of Router R1................................................................................... 73

Configuration of Router R2................................................................................... 73

Multi-Backup Configuration ........................................................................................ 74

Configuration of Router R1................................................................................... 75

Configuration of Router R2................................................................................... 76

Configuration of Router R3................................................................................... 77

Additional Configuration ............................................................................................. 78

Setting the Backup Priority.................................................................................... 78

Setting the Advertisement Interval...................................................................... 78

Setting Pre-empt Mode .......................................................................................... 79

Setting an Authentication Key.............................................................................. 79

Monitoring VRRP.................................................................................................................. 80

ip-redundancy trace....................................................................................................... 80

ip-redundancy show...................................................................................................... 80

VRRP Configuration Notes.................................................................................................. 81

xii DIGITAL GIGAswitch/Router User Reference Manual

Contents

Chapter 8: RIP Configuration Guide ...................................................... 83

RIP Overview..........................................................................................................................83

Configuring RIP .....................................................................................................................83

Enabling and Disabling RIP ..........................................................................................84

Configuring RIP Interfaces............................................................................................84

Configuring RIP Parameters .........................................................................................85

Configuring RIP Route Preference...............................................................................86

Configuring RIP Route Default-Metric........................................................................86

Monitoring RIP.......................................................................................................................87

Configuration Example.........................................................................................................88

Chapter 9: OSPF Configuration Guide................................................... 89

OSPF Overview ......................................................................................................................89

OSPF Multipath...............................................................................................................90

Configuring OSPF..................................................................................................................90

Enabling OSPF.................................................................................................................90

Configuring OSPF Interface Parameters .....................................................................91

Configuring an OSPF Area............................................................................................92

Configuring OSPF Area Parameters ............................................................................93

Creating Virtual Links....................................................................................................94

Configuring Autonomous System External (ASE) Link Advertisements..............94

Configuring OSPF over Non-Broadcast Multiple Access.........................................95

Monitoring OSPF....................................................................................................................95

OSPF Configuration Examples.............................................................................................97

Exporting All Interface & Static Routes to OSPF.........................................97

Exporting All RIP, Interface & Static Routes to OSPF.................................98

Chapter 10: BGP Configuration Guide................................................. 103

BGP Overview ......................................................................................................................103

The GSR BGP Implementation....................................................................................104

Basic BGP Tasks....................................................................................................................104

Setting the Autonomous System Number ................................................................105

Setting the Router ID....................................................................................................105

Configuring a BGP Peer Group ..................................................................................106

Adding and Removing a BGP Peer............................................................................107

Starting BGP...................................................................................................................107

Using AS-Path Regular Expressions ..........................................................................108

AS-Path Regular Expression Examples..............................................................109

Using the AS Path Prepend Feature...........................................................................110

Notes on Using the AS Path Prepend Feature...................................................110

BGP Configuration Examples ............................................................................................111

BGP Peering Session Example ....................................................................................111

IBGP Configuration Example......................................................................................113

IBGP Routing Group Example.............................................................................114

IBGP Internal Group Example.............................................................................117

EBGP Multihop Configuration Example...................................................................120

Community Attribute Example..................................................................................123

Notes on Using Communities..............................................................................130

DIGITAL GIGAswitch/Router User Reference Manual xiii

Contents

Local_Pref Attribute Example.................................................................................... 130

Notes on Using the Local_Pref Attribute .......................................................... 132

Multi-Exit Discriminator Attribute Example ........................................................... 132

EBGP Aggregation Example....................................................................................... 134

Route Reflection Example........................................................................................... 135

Notes on Using Route Reflection........................................................................ 138

Chapter 11: Routing Policy Configuration Guide................................ 139

Route Import and Export Policy Overview..................................................................... 139

Preference......................................................................................................................140

Import Policies.............................................................................................................. 141

Import-Source........................................................................................................ 141

Route-Filter ............................................................................................................ 142

Export Policies .............................................................................................................. 142

Export-Destination................................................................................................ 142

Export-Source ........................................................................................................ 143

Route-Filter ............................................................................................................ 143

Specifying a Route Filter ............................................................................................. 144

Aggregates and Generates.......................................................................................... 145

Aggregate-Destination ......................................................................................... 145

Aggregate-Source.................................................................................................. 145

Route-Filter ............................................................................................................ 146

Authentication.............................................................................................................. 146

Authentication Methods...................................................................................... 147

Authentication Keys and Key Management..................................................... 147

Configuring Simple Routing Policies............................................................................... 148

Redistributing Static Routes ....................................................................................... 148

Redistributing Directly Attached Networks ............................................................ 149

Redistributing RIP into RIP ........................................................................................ 149

Redistributing RIP into OSPF..................................................................................... 149

Redistributing OSPF to RIP ........................................................................................ 150

Redistributing Aggregate Routes .............................................................................. 150

Simple Route Redistribution Examples.................................................................... 150

Example 1: Redistribution into RIP.................................................................... 150

Exporting a Given Static Route to All RIP Interfaces............................... 151

Exporting All Static Routes to All RIP Interfaces...................................... 152

Exporting All Static Routes Except the Default Route to All RIP Interfaces

152

Example 2: Redistribution into OSPF................................................................. 152

Exporting All Interface & Static Routes to OSPF ...................................... 153

Exporting All RIP, Interface & Static Routes to OSPF.............................. 153

Configuring Advanced Routing Policies......................................................................... 154

Export Policies .............................................................................................................. 154

Creating an Export Destination.................................................................................. 156

Creating an Export Source.......................................................................................... 156

Import Policies.............................................................................................................. 156

Creating an Import Source.......................................................................................... 157

Creating a Route Filter ................................................................................................ 157

Creating an Aggregate Route..................................................................................... 158

Creating an Aggregate Destination........................................................................... 159

xiv DIGITAL GIGAswitch/Router User Reference Manual

Contents

Creating an Aggregate Source ....................................................................................159

Examples of Import Policies........................................................................................159

Example 1: Importing from RIP...........................................................................159

Importing a Selected Subset of Routes from One RIP Trusted Gateway.....

162

Importing a Selected Subset of Routes from All RIP Peers Accessible Over

a Certain Interface ...................................................................................162

Example 2: Importing from OSPF.......................................................................163

Importing a Selected Subset of OSPF-ASE Routes....................................165

Examples of Export Policies ........................................................................................166

Example 1: Exporting to RIP................................................................................166

Exporting a Given Static Route to All RIP Interfaces................................168

Exporting a Given Static Route to a Specific RIP Interface ......................168

Exporting All Static Routes Reachable Over a Given Interface to a Specific

RIP-Interface.............................................................................................169

Exporting Aggregate-Routes into RIP.........................................................170

Example 2: Exporting to OSPF.............................................................................171

Exporting All Interface & Static Routes to OSPF.......................................172

Exporting All RIP, Interface & Static Routes to OSPF...............................173

Chapter 12: Multicast Routing Configuration Guide ......................... 177

IP Multicast Overview.........................................................................................................177

IGMP Overview ............................................................................................................177

DVMRP Overview........................................................................................................178

Configuring IGMP ...............................................................................................................179

Configuring IGMP on an IP Interface........................................................................179

Configuring IGMP Query Interval.............................................................................179

Configuring IGMP Response Wait Time...................................................................180

Configuring Per-Interface Control of IGMP Membership......................................180

Configuring DVMRP...........................................................................................................180

Starting and Stopping DVMRP...................................................................................181

Configuring DVMRP on an Interface ........................................................................181

Configuring DVMRP Parameters...............................................................................181

Configuring the DVMRP Routing Metric .................................................................182

Configuring DVMRP TTL & Scope............................................................................182

Configuring a DVMRP Tunnel ...................................................................................183

Monitoring IGMP & DVMRP.............................................................................................184

Configuration Examples .....................................................................................................185

Chapter 13: IP Policy-Based Forwarding Configuration Guide.......... 187

Overview...............................................................................................................................187

Configuring IP Policies........................................................................................................188

Defining an ACL Profile ..............................................................................................188

Associating the Profile with an IP Policy ..................................................................189

Creating Multi-statement IP Policies ..................................................................189

Setting Load Distribution for Next-hop Gateways...........................................190

Setting the IP Policy Action..................................................................................190

Checking the Availability of Next-hop Gateways............................................191

DIGITAL GIGAswitch/Router User Reference Manual xv

Contents

Applying an IP Policy to an Interface ....................................................................... 192

Applying an IP Policy to Locally Generated Packets ...................................... 192

IP Policy Configuration Examples.................................................................................... 192

Routing Traffic to Different ISPs................................................................................ 192

Prioritizing Service to Customers.............................................................................. 194

Authenticating Users Through a Firewall................................................................ 195

Firewall Load Balancing.............................................................................................. 196

Monitoring IP Policies ........................................................................................................ 197

Chapter 14: Network Address Translation Configuration Guide ...... 201

Overview .............................................................................................................................. 201

Configuring NAT ................................................................................................................ 202

Setting Inside and Outside Interfaces ....................................................................... 202

Setting NAT Rules........................................................................................................ 203

Static........................................................................................................................ 203

Dynamic ................................................................................................................. 203

Managing Dynamic Bindings............................................................................................ 203

NAT and FTP....................................................................................................................... 204

Monitoring NAT..................................................................................................................204

Configuration Examples..................................................................................................... 204

Static Configuration..................................................................................................... 204

Using Static NAT .................................................................................................. 205

Dynamic Configuration............................................................................................... 206

Using Dynamic NAT............................................................................................ 206

Dynamic NAT with IP Overload (PAT) Configuration ......................................... 207

Using Dynamic NAT with IP Overload ............................................................ 208

Dynamic NAT with Outside Interface Redundancy .............................................. 208

Using Dynamic NAT with Matching Interface Redundancy......................... 209

Chapter 15: Web Hosting Configuration Guide.................................. 211

Overview .............................................................................................................................. 211

Load Balancing .................................................................................................................... 212

Configuring Load Balancing ...................................................................................... 212

Creating the Server Group................................................................................... 212

Specifying Load Balancing Policy (Optional)................................................... 213

Adding Servers to the Load Balancing Group.................................................. 213

Setting Server Status.................................................................................................... 213

Load Balancing and FTP ............................................................................................. 214

Allowing Access to Load Balancing Servers............................................................ 214

Setting Timeouts for Load Balancing Mappings..................................................... 215

Displaying Load Balancing Information .................................................................. 215

Configuration Examples ............................................................................................. 216

Web Hosting with One Virtual Group and Multiple Destination Servers... 216 Web Hosting with Multiple Virtual Groups and Multiple Destination Servers

217

Virtual IP Address Ranges .................................................................................. 218

xvi DIGITAL GIGAswitch/Router User Reference Manual

Contents

Web Caching.........................................................................................................................219

Configuring Web Caching...........................................................................................219

Creating the Cache Group....................................................................................219

Specifying the Client(s) for the Cache Group (Optional).................................220

Redirecting HTTP Traffic on an Interface..........................................................220

Configuration Example................................................................................................221

Other Configurations ...................................................................................................221

Bypassing Cache Servers ......................................................................................222

Proxy Server Redundancy....................................................................................222

Distributing Frequently-Accessed Sites Across Cache Servers.......................222

Monitoring Web-Caching............................................................................................223

Chapter 16: IPX Routing Configuration Guide.................................... 225

IPX Routing Overview ........................................................................................................225

RIP (Routing Information Protocol)...........................................................................226

SAP (Service Advertising Protocol) ...........................................................................226

Configuring IPX RIP & SAP ...............................................................................................227

IPX RIP............................................................................................................................227

IPX SAP ..........................................................................................................................227

Creating IPX Interfaces ................................................................................................227

IPX Addresses................................................................................................................228

Configuring IPX Interfaces and Parameters.....................................................................228

Configuring IPX Addresses to Ports..........................................................................228

Configuring IPX Interfaces for a VLAN....................................................................228

Specifying IPX Encapsulation Method......................................................................228

Configuring IPX Routing ....................................................................................................229

Enabling IPX RIP...........................................................................................................229

Enabling SAP.................................................................................................................229

Configuring Static Routes............................................................................................229

Configuring Static SAP Table Entries ........................................................................230

Controlling Access to IPX Networks..........................................................................230

Creating an IPX Access Control List...................................................................230

Creating an IPX Type 20 Access Control List....................................................231

Creating an IPX SAP Access Control List ..........................................................231

Creating an IPX GNS Access Control List..........................................................231

Creating an IPX RIP Access Control List............................................................232

Monitoring an IPX Network...............................................................................................232

Configuration Examples .....................................................................................................233

Chapter 17: Access Control List Configuration Guide........................ 235

ACL Basics ............................................................................................................................236

Defining Selection Criteria in ACL Rules..................................................................236

How ACL Rules are Evaluated...................................................................................238

Implicit Deny Rule........................................................................................................238

Allowing External Responses to Established TCP Connections ............................240

Creating and Modifying ACLs...........................................................................................240

Editing ACLs Offline....................................................................................................241

Maintaining ACLs Using the ACL Editor.................................................................242

Using ACLs...........................................................................................................................242

DIGITAL GIGAswitch/Router User Reference Manual xvii

Contents

Applying ACLs to Interfaces...................................................................................... 242

Applying ACLs to Services......................................................................................... 243

Using ACLs as Profiles................................................................................................ 244

Using Profile ACLs with the IP Policy Facility................................................. 245

Using Profile ACLs with the Traffic Rate Limiting Facility............................ 246

Using Profile ACLs with Dynamic NAT........................................................... 246

Using Profile ACLs with the Port Mirroring Facility ...................................... 247

Using Profile ACLs with the Web Caching Facility......................................... 248

Redirecting HTTP Traffic to Cache Servers............................................... 248

Preventing Web Objects From Being Cached............................................ 248

Enabling ACL Logging....................................................................................................... 249

Monitoring ACLs.................................................................................................................250

Chapter 18: Security Configuration Guide .......................................... 251

Security Overview...............................................................................................................251

Configuring GSR Access Security..................................................................................... 252

Configuring RADIUS .................................................................................................. 252

Monitoring RADIUS............................................................................................. 253

Configuring TACACS ................................................................................................. 253

Monitoring TACACS............................................................................................ 253

Configuring TACACS Plus......................................................................................... 254

Monitoring TACACS Plus................................................................................... 255

Configuring Passwords............................................................................................... 255

Layer-2 Security Filters....................................................................................................... 255

Configuring Layer-2 Address Filters ........................................................................ 256

Configuring Layer-2 Port-to-Address Lock Filters................................................. 256

Configuring Layer-2 Static Entry Filters................................................................... 257

Configuring Layer-2 Secure Port Filters................................................................... 257

Monitoring Layer-2 Security Filters .......................................................................... 258

Layer-2 Filter Examples............................................................................................... 259

Example 1: Address Filters.................................................................................. 259

Static Entries Example................................................................................... 259

Port-to-Address Lock Examples.................................................................. 260

Example 2: Secure Ports....................................................................................... 260

Layer-3 Access Control Lists (ACLs)................................................................................ 261

Chapter 19: QoS Configuration Guide................................................. 263

QoS & Layer-2/Layer-3/Layer-4 Flow Overview.......................................................... 263

Layer-2 and Layer-3 & Layer-4 Flow Specification................................................. 264

Precedence for Layer-3 Flows .................................................................................... 264

GSR Queuing Policies.................................................................................................. 265

Traffic Prioritization for Layer-2 Flows............................................................................ 265

Configuring Layer-2 QoS............................................................................................ 266

Traffic Prioritization for Layer-3 & Layer-4 Flows......................................................... 266

Configuring IP QoS Policies ....................................................................................... 266

Setting an IP QoS Policy....................................................................................... 267

Specifying Precedence for an IP QoS Policy..................................................... 267

xviii DIGITAL GIGAswitch/Router User Reference Manual

Contents

Configuring IPX QoS Policies .....................................................................................267

Setting an IPX QoS Policy.....................................................................................267

Specifying Precedence for an IPX QoS Policy ...................................................268

Configuring GSR Queueing Policy....................................................................................268

Allocating Bandwidth for a Weighted-Fair Queuing Policy..................................268

ToS Rewrite...........................................................................................................................268

Configuring ToS Rewrite for IP Packets....................................................................269

Monitoring QoS....................................................................................................................271

Limiting Traffic Rate............................................................................................................272

Example Configuration................................................................................................272

Displaying Rate Limit Information ............................................................................273

Chapter 20: Performance Monitoring Guide ...................................... 275

Performance Monitoring Overview ..................................................................................275

Configuring the GSR for Port Mirroring ..........................................................................277

Monitoring Broadcast Traffic .............................................................................................277

Chapter 21: RMON Configuration Guide ............................................ 279

RMON Overview .................................................................................................................279

Configuring and Enabling RMON ....................................................................................280

Example of RMON Configuration Commands........................................................280

RMON Groups ..............................................................................................................281

Lite RMON Groups ...............................................................................................282

Standard RMON Groups......................................................................................282

Professional RMON Groups ................................................................................282

Control Tables ...............................................................................................................283

Using RMON ........................................................................................................................284

Configuring RMON Groups...............................................................................................285

Configuration Examples ..............................................................................................287

Displaying RMON Information.........................................................................................289

RMON CLI Filters.........................................................................................................290

Creating RMON CLI Filters .................................................................................291

Using RMON CLI Filters ......................................................................................291

Troubleshooting RMON .....................................................................................................292

Allocating Memory to RMON............................................................................................293

Chapter 22: WAN Configuration Guide............................................... 295

WAN Overview....................................................................................................................295

High-Speed Serial Interface (HSSI) and Standard Serial Interfaces ......................295

Configuring WAN Interfaces......................................................................................296

Primary and Secondary Addresses ............................................................................296

Static, Mapped, and Dynamic Peer IP/IPX Addresses...........................................296

Static Addresses.....................................................................................................296

Mapped Addresses................................................................................................297

Dynamic Addresses...............................................................................................297

Forcing Bridged Encapsulation...................................................................................298

DIGITAL GIGAswitch/Router User Reference Manual xix

Contents

Packet Compression..................................................................................................... 298

Average Packet Size.............................................................................................. 299

Nature of the Data ................................................................................................ 299

Link Integrity......................................................................................................... 299

Latency Requirements.......................................................................................... 299

Example Configurations ...................................................................................... 300

Packet Encryption ........................................................................................................ 300

WAN Quality of Service.............................................................................................. 300

Source Filtering and ACLs................................................................................... 301

Weighted-Fair Queueing ..................................................................................... 301

Congestion Management..................................................................................... 301

Random Early Discard (RED)...................................................................... 302

Adaptive Shaping.......................................................................................... 302

Frame Relay Overview....................................................................................................... 302

Virtual Circuits ............................................................................................................. 303

Permanent Virtual Circuits (PVCs) .................................................................... 303

Configuring Frame Relay Interfaces for the GSR........................................................... 303

Defining the Type and Location of a Frame Relay and VC Interface................... 303

Setting up a Frame Relay Service Profile.................................................................. 304

Applying a Service Profile to an Active Frame Relay WAN Port......................... 304

Monitoring Frame Relay WAN Ports............................................................................... 305

Frame Relay Port Configuration....................................................................................... 305

Point-to-Point Protocol (PPP) Overview.......................................................................... 307

Use of LCP Magic Numbers....................................................................................... 307

Configuring PPP Interfaces................................................................................................ 308

Defining the Type and Location of a PPP Interface................................................ 308

Setting up a PPP Service Profile................................................................................. 308

Applying a Service Profile to an Active PPP Port................................................... 309

Configuring Multilink PPP Bundles.......................................................................... 310

Compression on MLP Bundles or Links............................................................ 310

Monitoring PPP WAN Ports.............................................................................................. 311

PPP Port Configuration...................................................................................................... 311

WAN Configuration Examples......................................................................................... 313

Simple Configuration File........................................................................................... 313

Multi-Router WAN Configuration............................................................................ 314

Router R1 Configuration File .............................................................................. 315

Router R2 Configuration File .............................................................................. 316

Router R3 Configuration File .............................................................................. 317

Router R4 Configuration File .............................................................................. 318

Router R5 Configuration File .............................................................................. 318

Router R6 Configuration File .............................................................................. 319

xx DIGITAL GIGAswitch/Router User Reference Manual

About This Manual

Preface

This manual provides detailed information and procedures for configuring the DIGITAL® GIGAswitch in the DIGITAL GIGAswitch/Router Getting Started Guide to install the chassis and perform basic setup tasks, then return to this manual for more detailed configuration information.

™

/Router software. If you have not yet installed the GSR, use the instructions

Who Should Read This Manual?

Read this manual if you are a network administrator responsible for configuring and monitoring the GSR.

How to Use This Manual

If You Want To See

Read overview information Chapter 1, ”DIGITAL GIGAswitch/Router

Product Overview”

Hot swap line cards and Control Modules

Chapter 2, ”Hot Swapping Line Cards and Control Modules”

Configure bridging Chapter 3, ”Bridging Configuration Guide” Configure SmartTRUNKs Chapter 4, ”SmartTRUNK Configuration Guide”

Configure Dynamic Host Configuration Protocol server

Configure IP interfaces and global routing parameters

Configure VRRP Chapter 7, ”VRRP Configuration Guide” Configure RIP routing Chapter 8, ”RIP Configuration Guide”

DIGITAL GIGAswitch/Router User Reference Manual xxi

Chapter 5, ”DHCP Configuration Guide”

Chapter 6, ”IP Routing Configuration Guide”

Preface

If You Want To See

Configure OSPF routing Chapter 9, ”OSPF Configuration Guide” Configure BGP routing Chapter 10, ”BGP Configuration Guide” Configure routing policies Chapter 11, ”Routing Policy Configuration

Guide”

Configure IP multicast routing Chapter 12, ”Multicast Routing Configuration

Guide”

Configure IP policy-based forwarding

Configure Network Address Translation

Chapter 13, ”IP Policy-Based Forwarding Configuration Guide”

Chapter 14, ”Network Address Translation Configuration Guide”

Configure web hosting Chapter 15, ”Web Hosting Configuration Guide” Configure IPX routing Chapter 16, ”IPX Routing Configuration Guide” Configure Access Control Lists Chapter 17, ”Access Control List Configuration

Guide”

Configure security Chapter 18, ”Security Configuration Guide”

Configure QoS (Quality of Service)

Chapter 19, ”QoS Configuration Guide”

parameters Monitor performance Chapter 20, ”Performance Monitoring Guide” Configure RMON Chapter 21, ”RMON Configuration Guide” Configure WAN Chapter 22, ”WAN Configuration Guide”

xxii DIGITAL GIGAswitch/Router User Reference Manual

Cabletron Systems GIGAswitch GSR-16, GIGAswitch GSR-8 User's Reference Manual

Specifications and Main Features

Frequently Asked Questions

User Manual