Cabletron Systems SWITCH ROUTER 9032578-05 User Manual

SmartSwitch Router
User Reference Manual
9032578-05
Copyright
© 2000 by Cabletron Systems, Inc. All rights reserved. Cabletron Systems, Inc.
35 Industrial Way Rochester, NH 03867-5005
Changes
Cabletron Systems, Inc., reserves the right to make changes in specifications and other information contained in this document without prior notice. The reader should in all cases consult Cabletron Systems, Inc., to determine whether any such changes have been made.
The hardware, firmware, or software described in this manual is subject to change without notice.
Disclaimer
IN NO EVENT SHALL CABLETRON SYSTEMS BE LIABLE FOR ANY INCIDENTAL, INDIRECT, SPECIAL, OR CONSEQUENTIAL DAMAGES WHATSOEVER (INCLUDING BUT NOT LIMITED TO LOST PROFITS) ARISING OUT OF OR RELATED TO THIS MANUAL OR THE INFORMATION CONTAINED IN IT, EVEN IF CABLETRON SYSTEMS HAS BEEN ADVISED OF, KNOWN, OR SHOULD HAVE KNOWN, THE POSSIBILITY OF SUCH DAMAGES.
Trademarks
Cabletron Systems is a registered trademark and Cabletron and Smar tSwitch are trademarks of Cabletron Systems, Inc.
All other product names mentioned in this manual may be trademarks or registered trademarks of their respective companies.
Regulatory Compliance Information
This product complies with the following:
Safety
UL 1950; CSA C22.2, No. 950; 73/23/EEC; EN 60950; IEC 950
Electromagnetic
FCC Part 15; CSA C108.8; 89/336/EEC; EN 55022; EN 61000-3-2
Compatibility (EMC)
EN 61000-3-3; EN 50082-1, AS/NZS 3548; VCCI V-3
Regulatory Compliance Statements
Regulatory Compliance Information
FCC Compliance Statement
This device complies with Part 15 of the FCC rules. Operation is subject to the following two conditions: (1) this device may not cause harmful interference, and (2) this device must accept any interference received, including interference that may cause undesired operation.
NOTE: This equipment has been tested and found to comply with the limits for a Class A digital device, pursuant to Part 15 of the FCC rules. These limits are designed to provide reasonable protection against harmful interfer ence when the equipment is operated in a commercial en vironment. This equipment uses, generates, and can radiate radio frequency energy and if not installed in accordance with the operator’s manual, may cause harmful interference to radio communications. Operation of this equipment in a residential area is likely to cause interference in which case the user will be required to correct the interference at his own expense.
WARNING: Changes o r mo di fications made to this device that are not expressly approved by the party responsible for compliance could void the user’s authority to operate the equipment.
SmartSwitch Router User Reference Manual iii
Regulatory Compliance Statement s
Industry Canada Compliance Statement
This digital apparatus does not exceed the Class A limits for radio noise emiss ions from digital apparatus set out in the Radio Interference Regulations of the Canadian Department of Communications.
Le présent appareil numérique n’émet pas de bruits radioélectriques dépassant les limites applicables aux appareils numériques de la class A prescrites dans le Règlement sur le brouillage radioélectrique édicté par le ministère des Communications du Canada.
NOTICE: The Industry Canada label identifies certified equipment. This certification means that the equipment meets telecommunications network protective, operational, and safety requirements as prescribed in the appropriate Terminal Equipment Technical Requirements document(s). The department does not guarantee the equipment will operate to the user’s satisfaction.
Before installing this equipment, users should ensure that it is permissible to be con nected to the facilities of the local telecommunications company. The equipment must also be installed using an acceptable method of connection. The customer should be aware that compliance with the above conditions may not prevent degradation of service in some situations.
Repairs to certified equipment should be coordinated by a representative designated by the supplier. Any repairs or alterations made by the user to this equipment, or equipment malfunctions, may give the telecommunications company cause to request the user to disconnect the equipment.
Users should ensure for their own protection that the electrical ground connections of the power utility, telephone lines, and internal metallic water pipe system, if present, are connected together. This precaution may be particularly important in rural areas. CAUTION: Users should not attempt to make such connections themselves, but should contact the appr opriate electric inspection authority, or electrician, as appropriate.
NOTICE: The Ringer Equivalence Number (REN) assigned to each terminal device provides an indication of the maximum number of terminals allowed to be c onnected to a telephone interface. The termination on an interface may consist of any combination of devices subject only to the requirement that the sum of the Ringer Equivalence Numbers of all the devices does not exceed 5.
VCCI Compliance Statement
This is a Class A product based on the standard of the Voluntary Control Council for Interference by Information Technology Equipment (VCCI). If this equipment is used in a domestic environment, radio disturbance may arise. When such trouble occurs, the user may be required to take corrective actions.
iv SmartSwitch Ro uter User Reference Manual
Safety Information: Class 1 Laser Transceivers
Safety Information: Class 1 Laser Transceivers
This product may use Class 1 laser transceivers. Read the following safety information before installing or operating this product.
The Class 1 laser transceivers use an optical feedback loop to maintain Class 1 operation limits. This control loop eliminates the need for maintenance checks or adjustments. The output is factory set and does not allow any user adjustment. Class 1 laser transceivers comply with the following safety standards:
21 CFR 1040.10 and 1040.11, U.S. Department of Health and Human Services (FDA)
IEC Publication 825 (International Electrotechnical Commission)
CENELEC EN 60825 (European Committee for Electrotechnical Standardization)
When operating within their performance limitations, laser transceiver output meets the Class 1 accessible emission limit of all three standards. Class 1 levels of laser radiation are not considered hazardous.
Laser Radiation and Connectors
When the connector is in place, all laser radiation remains within the fiber. The maximum amount of radiant power exiting the fiber (under normal conditions) is –12.6 dBm or 55 x 10
Removing the optical connector from the transceiver allows laser radiation to emit directly from the optical port. The maximum radiance from the optical port (under worst case conditions) is 0.8 W cm or 8 x 10
Do not use optical instruments to view the laser output. The use of optical instruments to view laser output increases eye hazard. When viewing the output optical port, power must be removed from the network adapter.
3
W m2 sr–1.
-6
watts.
-2
SmartSwitch Router User Reference Manual v
Cabletron Systems, Inc. Program License Agreement
Cabletron Systems, Inc.
Program License Agreement
IMPORTANT: THIS LICENSE APPLIES FOR USE OF PRODUCT IN THE FOLLOWING GEOGRAPHICAL REGIONS:
CANADA MEXICO CENTRAL AMERICA SOUTH AMERICA
BEFORE OPENING OR UTILIZING THE ENCLOSED PRODUCT, CAREFULLY READ THIS LICENSE AGREEMENT.
This document is an agreement (“Agreement”) between You, the end user, and Cabletron Systems, Inc. (“Cabletron”) that sets forth your rights and obligations with respect to the Cabletron software program (“Program”) in the package. The Program may be contained in firmware, chips or other media. UTILIZING THE ENCLOSED PRODUCT, YOU ARE AGREEING TO BECOME BOUND BY THE TERMS OF THIS AGREEMENT, WHICH INCLUDES THE LICENSE AND THE LIMITATION OF WARRANTY AND DISCLAIMER OF LIABILITY. IF YOU DO NOT AGREE TO THE TERMS OF THIS AGREEMENT, RETURN THE UNOPENED PRODUCT TO CABLETRON OR YOUR DEALER, IF ANY, WITHIN TEN (10) DAYS FOLLOWING THE DATE OF RECEIPT FOR A FULL REFUND.
IF YOU HAVE ANY QUESTIONS ABOUT THIS AGREEMENT, CONTACT CABLETRON SYSTEMS (603) 332-9400. Attn: Legal Department.
1. LICENSE. You have the right to use only the one (1) copy of the Program provided in this
package subject to the terms and conditions of this License Agreement. You may not copy, reproduce or transmit any part of the Program except as permitted by the
Copyright Act of the United States or as authorized in writing by Cabletron.
2. OTHER RESTRICTIONS. You may not reverse engineer, decompile, or disassemble the
Program.
3. APPLICABLE LAW. This License Agreement shall be interpreted and governed under the laws
and in the state and federal courts of New Hampshire. You accept the personal jurisdiction and venue of the New Hampshire courts.
4. EXPORT REQUIREMENTS. You understand that Cabletron and its Affiliates are subject to
regulation by agencies of the U.S. Government, including the U.S. Department of Commerce, which prohibit export or diversion of certain technical products to certain countries, unless a license to export the product is obtained fr om the U.S. Government or an exception fr om obtaining such license may be relied upon by the exporting party.
If the Program is exported from the United State s pursuant to the License Exception CIV under the U.S. Export Administration Regulations, You agree that You are a civil end user of the Program and agree that You will use the Program for civil end uses only and not for military purposes.
vi SmartSwitch Router User Reference Manual
Cabletron Systems, Inc. Program License Agreement
If the Program is exported from the United States pursuant to the License Exception TSR under the U.S. Export Administration Regulations, in addition to the restriction on transfer set forth in Sections 1 or 2 of this Agreement, You agree not to (i) reexport or release the Program, the source code for the Program or technology to a national of a country in Country Groups D:1 or E:2 (Albania, Armenia, Azerbaijan, Belarus, Bulgaria, Cambodia, Cuba, Estonia, Georgia, Iraq, Kazakhstan, Kyrgyzstan, Laos, Latvia, Libya, Lithuania, Moldova, North Korea, the People’s Republic of China, Romania, Russia, Rwanda, Tajikistan , T urkmenistan, Ukraine, Uzbekistan, Vietnam, or such other countries as may be designated by the United States Government), (ii) export to Country Groups D:1 or E:2 (as defined herein) the direct product of the Program or the technology, if such foreign produced direct product is subject to national security controls as identified on the U.S. Commerce Control List, or (iii) if the direct product of the technology is a complete plant o r any major component of a plan t, export to Country G roups D:1 or E: 2 the direct product of the plant or a major component thereof, if such foreign produced direct product is subject to national security controls as identified on the U.S. Commerce Co ntrol List or is subject to State Department controls under the U.S. Munitions List.
5. UNITED STATES GOVERNMENT RESTRICTED RIGHTS. The enclosed Product (i) was
developed solely at private expense; (ii) contains “restricted computer software” submitted with restricted rights in accordance with section 52. 227 -19 (a) th rough (d) of the Commercial Computer Software-Restricted Rights Clause and its successors, and (iii) in all respects is proprietary data belonging to Cabletron and/or its suppliers. For Department of D efense units, the Product is considered commercial computer software in accordance with DFARS section 227.7202-3 and its successors, and use, duplication, or disclosure by the Government is subject to restrictions set forth herein.
6. EXCLUSION OF WARRANTY. Except as may be specifically provided by Cabletron in writing,
Cabletron makes no warranty, expressed or implied, concerning the Program (including its documentation and media).
CABLETRON DISCLAIMS ALL WARRANTIES, OTHER THAN THOSE SUPPLIED TO YOU BY CABLETRON IN WRITING, EITHER EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE, WITH RESPECT TO THE PROGRAM, THE ACCOMPANYING WRITTEN MATERIALS, AND ANY ACCOMPANYING HARDWARE.
7. NO LIABILITY FOR CONSEQUENTIAL DAMAGES. IN NO EVENT SHALL CABLETRON OR
ITS SUPPLIERS BE LIABLE FOR ANY DAMAGES WHATSOEVER (INCLUDING, WITHOUT LIMITATION, DAMAGES FOR LOSS OF BUSINESS, PROFITS, BUSINESS INTERRUPTION, LOSS OF BUSINESS INFORMATION, SPECIAL, INCIDENTAL, CONSEQUENTIAL, OR RELIANCE DAMAGES, OR OTHER LOSS) ARISING OUT OF THE USE OR INABILITY TO USE THIS CABLETRON PRODUCT, EVEN IF CABLETRON HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. BECAUSE SOME STATES DO NOT ALLOW THE EXCLUSION OR LIMITATION OF LIABILITY FOR CONSEQUENTIAL OR INCIDENTAL DAMAGES, OR IN THE DURATION OR LIMITATION OF IMPLIED WA RRANTIES IN SOME INSTANCES, THE ABOVE LIMITATION AND EXCLUSIONS MAY NOT APPLY TO YOU.
SmartSwitch Router User Reference Manual vii
Cabletron Systems Sales and Service, Inc. Program License Agreement
Cabletron Systems Sales and Service, Inc.
Program License Agreement
IMPORTANT: THIS LICENSE APPLIES FOR USE OF PRODUCT IN THE UNITED STATES OF AMERICA AND BY UNITED STATES OF AMERICA GOVERNMENT END USERS.
BEFORE OPENING OR UTILIZING THE ENCLOSED PRODUCT, CAREFULLY READ THIS LICENSE AGREEMENT.
This document is an agreement (“Agreement”) between You, the end user, and Cabletron Systems Sales and Service, Inc. (“Cabletron”) that sets forth your rights and obligations with respect to the Cabletron software program (“Program”) in the package. The Program may be contained in firmwar e, chips or other media. UTILIZING THE ENCLOSED PRODUCT, YOU ARE AGREEING TO BECOME BOUND BY THE TERMS OF THIS AGREEMENT, WHICH INCLUDES THE LICENSE AND THE LIMIT ATION OF WARRANTY AND DISCLAIMER OF LIABILITY. IF YOU DO NOT AGREE TO THE TERMS OF THIS AGREEMENT , RETURN THE UNOPENED PRODUCT TO CABLETRON OR YOUR DEALER, IF ANY, WITHIN TEN (10) DAYS FOLLOWING THE DATE OF RECEIPT FOR A FULL REFUND.
IF YOU HAVE ANY QUESTIONS ABOUT THIS AGREEMENT, CONTACT CABLETRON SYSTEMS (603) 332-9400. Attn: Legal Department.
1. LICENSE. You have the right to use only the one (1) copy of the Program provided in this
package subject to the terms and conditions of this License Agreement. You may not copy, reproduce or transmit any part of the Program except as permitted by the
Copyright Act of the United States or as authorized in writing by Cabletron.
2. OTHER RESTRICTIONS. You may not reverse engineer, decompile, or disassemble the
Program.
3. APPLICABLE LAW. This License Agreement shall be interpreted and governed under the laws
and in the state and federal courts of New Hampshire. You accept the personal jurisdiction and venue of the New Hampshire courts.
4. EXPORT REQUIREMENTS. You understand that Cabletron and its Affiliates are subject to
regulation by agencies of the U.S. Government, including the U.S. Department of Commerce, which prohibit export or diversion of certain technical products to certain countries, unless a license to export the product is obtained fr om the U.S. Government or an exception fr om obtaining such license may be relied upon by the exporting party.
If the Program is exported from the United State s pursuant to the License Exception CIV under the U.S. Export Administration Regulations, You agree that You are a civil end user of the Program and agree that You will use the Program for civil end uses only and not for military purposes.
viii SmartSwitch Ro uter User Reference Manual
Cabletr o n Sy s t e ms Sa le s and Service, Inc. Program Licens e Ag reement
If the Program is exported from the United States pursuant to the License Exception TSR under the U.S. Export Administration Regulations, in addition to the restriction on transfer set forth in Sections 1 or 2 of this Agreement, You agree not to (i) reexport or release the Program, the source code for the Program or technology to a national of a country in Country Groups D:1 or E:2 (Albania, Armenia, Azerbaijan, Belarus, Bulgaria, Cambodia, Cuba, Estonia, Georgia, Iraq, Kazakhstan, Kyrgyzstan, Laos, Latvia, Libya, Lithuania, Moldova, North Korea, the People’s Republic of China, Romania, Russia, Rwanda, Tajikistan , T urkmenistan, Ukraine, Uzbekistan, Vietnam, or such other countries as may be designated by the United States Government), (ii) export to Country Groups D:1 or E:2 (as defined herein) the direct product of the Program or the technology, if such foreign produced direct product is subject to national security controls as identified on the U.S. Commerce Control List, or (iii) if the direct product of the technology is a complete plant o r any major component of a plan t, export to Country G roups D:1 or E: 2 the direct product of the plant or a major component thereof, if such foreign produced direct product is subject to national security controls as identified on the U.S. Commerce Co ntrol List or is subject to State Department controls under the U.S. Munitions List.
5. UNITED STATES GOVERNMENT RESTRICTED RIGHTS. The enclosed Product (i) was
developed solely at private expense; (ii) contains “restricted computer software” submitted with restricted rights in accordance with section 52. 227 -19 (a) th rough (d) of the Commercial Computer Software-Restricted Rights Clause and its successors, and (iii) in all respects is proprietary data belonging to Cabletron and/or its suppliers. For Department of D efense units, the Product is considered commercial computer software in accordance with DFARS section 227.7202-3 and its successors, and use, duplication, or disclosure by the Government is subject to restrictions set forth herein.
6. EXCLUSION OF WARRANTY. Except as may be specifically provided by Cabletron in writing,
Cabletron makes no warranty, expressed or implied, concerning the Program (including its documentation and media).
CABLETRON DISCLAIMS ALL WARRANTIES, OTHER THAN THOSE SUPPLIED TO YOU BY CABLETRON IN WRITING, EITHER EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE, WITH RESPECT TO THE PROGRAM, THE ACCOMPANYING WRITTEN MATERIALS, AND ANY ACCOMPANYING HARDWARE.
7. NO LIABILITY FOR CONSEQUENTIAL DAMA GES. IN NO EVENT SHALL CABLETRON
OR ITS SUPPLIERS BE LIABLE FOR ANY DAMAGES WHATSOEVER (INCLUDING, WITHOUT LIMITATION, DAMAGES FOR LOSS OF BUSINESS, PROFITS, BUSINESS INTERRUPTION, LOSS OF BUSINESS INFORMATION, SPECIAL, INCIDENTAL, CONSEQUENTIAL, OR RELIANCE DAMAGES, OR OTHER LOSS) ARISING OUT OF THE USE OR INABILITY TO USE THIS CABLETRON PRODUCT, EVEN IF CABLETRON HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. BECAUSE SOME STATES DO NOT ALLOW THE EXCLUSION OR LIMITATION OF LIABILITY FOR CONSEQUENTIAL OR INCIDENTAL DAMAGES, OR IN THE DURATION OR LIMITATION OF IMPLIED WARRANTIES IN SOME INSTANCES, THE ABOVE LIMITATION AND EXCLUSIONS MAY NOT APPLY TO YOU.
SmartSwitch Router User Reference Manual ix
Cabletron Systems Limited Program License Agreement
Cabletron Systems Limited
Program License Agreement
IMPORTANT: THIS LICENSE APPLIES FOR THE USE OF THE PRODUCT IN THE FOLLOWING GEOGRAPHICAL REGIONS:
EUROPE MIDDLE EAST AFRICA ASIA AUSTRALIA PACIFIC RIM
BEFORE OPENING OR UTILIZING THE ENCLOSED PRODUCT, CAREFULLY READ THIS LICENSE AGREEMENT.
This document is an agreement (“Agreement”) between You, the end user, and Cabletron Systems Limited (“Cabletron”) that sets forth your rights and obligations with respect to the Cabletron software program (“Program”) in the package. The Program may be contained in firmware, chips or other media. UTILIZING THE ENCLOSED PRODUCT, YOU ARE AGREEING TO BECOME BOUND BY THE TERMS OF THIS AGREEMENT, WHICH INCLUDES THE LICENSE AND THE LIMIT ATION OF WARRANTY AND DISCLAIMER OF LIABILITY. IF YOU DO NOT AGREE TO THE TERMS OF THIS AGREEMENT , RETURN THE UNOPENED PRODUCT TO CABLETRON OR YOUR DEALER, IF ANY, WITHIN TEN (10) DAYS FOLLOWING THE DATE OF RECEIPT FOR A FULL REFUND.
IF YOU HAVE ANY QUESTIONS ABOUT THIS AGREEMENT, CONTACT CABLETRON SYSTEMS (603) 332-9400. Attn: Legal Department.
1. LICENSE. You have the right to use only the one (1) copy of the Program provided in this
package subject to the terms and conditions of this License Agreement. You may not copy, reproduce or transmit any part of the Program except as permitted by the
Copyright Act of the United States or as authorized in writing by Cabletron.
2. OTHER RESTRICTIONS. You may not reverse engineer, decompile, or disassemble the
Program.
3. APPLICABLE LAW. This License Agreement shall be governed in accordance with English law.
The English courts shall have exclusive jurisdiction in the event of any disputes.
4. EXPORT REQUIREMENTS. You understand that Cabletron and its Affiliates are subject to
regulation by agencies of the U.S. Government, including the U.S. Department of Commerce, which prohibit export or diversion of certain technical products to certain countries, unless a license to export the product is obtained fr om the U.S. Government or an exception fr om obtaining such license may be relied upon by the exporting party.
If the Program is exported from the United State s pursuant to the License Exception CIV under the U.S. Export Administration Regulations, You agree that You are a civil end user of the Program and agree that You will use the Program for civil end uses only and not for military purposes.
x SmartS w itch Router User Reference Manual
Cabletron Systems Limited Program License Agreement
If the Program is exported from the United States pursuant to the License Exception TSR under the U.S. Export Administration Regulations, in addition to the restriction on transfer set forth in Sections 1 or 2 of this Agreement, You agree not to (i) reexport or release the Program, the source code for the Program or technology to a national of a country in Country Groups D:1 or E:2 (Albania, Armenia, Azerbaijan, Belarus, Bulgaria, Cambodia, Cuba, Estonia, Georgia, Iraq, Kazakhstan, Kyrgyzstan, Laos, Latvia, Libya, Lithuania, Moldova, North Korea, the People’s Republic of China, Romania, Russia, Rwanda, Tajikistan , T urkmenistan, Ukraine, Uzbekistan, Vietnam, or such other countries as may be designated by the United States Government), (ii) export to Country Groups D:1 or E:2 (as defined herein) the direct product of the Program or the technology, if such foreign produced direct product is subject to national security controls as identified on the U.S. Commerce Control List, or (iii) if the direct product of the technology is a complete plant o r any major component of a plan t, export to Country G roups D:1 or E: 2 the direct product of the plant or a major component thereof, if such foreign produced direct product is subject to national security controls as identified on the U.S. Commerce Co ntrol List or is subject to State Department controls under the U.S. Munitions List.
5. UNITED STATES GOVERNMENT RESTRICTED RIGHTS. The enclosed Product (i) was
developed solely at private expense; (ii) contains “restricted computer software” submitted with restricted rights in accordance with section 52. 227 -19 (a) th rough (d) of the Commercial Computer Software-Restricted Rights Clause and its successors, and (iii) in all respects is proprietary data belonging to Cabletron and/or its suppliers. For Department of D efense units, the Product is considered commercial computer software in accordance with DFARS section 227.7202-3 and its successors, and use, duplication, or disclosure by the Government is subject to restrictions set forth herein.
6. EXCLUSION OF WARRANTY. Except as may be specifically provided by Cabletron in writing,
Cabletron makes no warranty, expressed or implied, concerning the Program (including its documentation and media).
CABLETRON DISCLAIMS ALL WARRANTIES, OTHER THAN THOSE SUPPLIED TO YOU BY CABLETRON IN WRITING, EITHER EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE, WITH RESPECT TO THE PROGRAM, THE ACCOMPANYING WRITTEN MATERIALS, AND ANY ACCOMPANYING HARDWARE.
7. NO LIABILITY FOR CONSEQUENTIAL DAMAGES. IN NO EVENT SHALL CABLETRON OR ITS SUPPLIERS BE LIABLE FOR ANY DAMAGES WHATSOEVER (INCLUDING, WITHOUT LIMITATION, DAMAGES FOR LOSS OF BUSINESS, PROFITS, BUSINESS INTERRUPTION, LOSS OF BUSINESS INFORMATION, SPECIAL, INCIDENTAL, CONSEQUENTIAL, OR RELIANCE DAMAGES, OR OTHER LOSS) ARISING OUT OF THE USE OR INABILITY TO USE THIS CABLETRON PRODUCT, EVEN IF CABLETRON HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. BECAUSE SOME STATES DO NOT ALLOW THE EXCLUSION OR LIMITATION OF LIABILITY FOR CONSEQUENTIAL OR INCIDENTAL DAMAGES, OR IN THE DURATION OR LIMITATION OF IMPLIED WA RRANTIES IN SOME INSTANCES, THE ABOVE LIMITATION AND EXCLUSIONS MAY NOT APPLY TO YOU.
SmartSwitch Router User Reference Manual xi
Declaration of Conf orm ity Addendum
Declaration of Conformity
Addendum
Application of Council Directive(s) 89/336/EEC
73/23/EEC
Manufacturer’s Name Cabletron Systems, Inc. Manufacturer’s Address 35 Industrial Way
PO Box 5005 Rochester, NH 03867
European Representative’s Name Mr. J. Solari European Representative’s Address Cabletron Systems Limited
Nexus House, Newbury Business Park London Road, Newbury Berkshire RG13 2PZ, England
Conformance to Directive(s)/Product Standards
Equipment Type/Environment Networking equipment for use in a commercial
We the undersigned, hereby declare, under our sole responsibility, that the equipment packaged with this notice conforms to the above directives.
Manufacturer Legal Representative in Europe
Mr. Ronald Fotino Full Name
Principal Compliance Engineer Title
Rochester, NH, USA Location
EC Directive 89/336/EEC EC Directive 73/23/EEC EN 55022 EN 50082-1 EN 60950
or light-industrial environment
Mr. J. Solari Full Name
Managing Director, E.M.E.A. Title
Newbury, Berkshire, England Location
xii SmartSwitch Router User Reference Manual

Contents

About This Manual ................................................................................... 1
Related Documentation...........................................................................................................1
Document Conventions...........................................................................................................1
Chapter 1: Introduction............................................................................ 3
Configuration Files ..................................................................................................................3
Using the Command Line Interface ......................................................................................4
Command Modes..............................................................................................................4
User Mode...................................................................................................................4
Enable Mode...............................................................................................................4
Configure Mode.........................................................................................................5
Boot PROM Mode......................................................................................................5
Getting Help with CLI Commands................................................................................5
Line Editing Commands..................................................................................................7
Displaying and Changing Configuration Information.......................................................9
Port Names......................................................... ....................................... ...... ...... ..... .............11
Chapter 2: Hot Swapping Line Cards and Control Modules................ 13
Hot Swapping Overview ......................................................................................................13
Hot Swapping Line Cards ....................................................................................................14
Deactivating the Line Card............................................................................................14
Removing the Line Card................................................................................................15
Installing a New Line Card ...........................................................................................15
Hot Swapping One Type of Line Card With Another...............................................15
Hot Swapping a Secondary Control Module.....................................................................16
Deactivating the Control Module.................................................................................16
Removing the Control Module.....................................................................................17
Installing a Control Module..........................................................................................17
Hot Swapping a Switching Fabric Module (SSR 8600 only)............................................18
Removing the Switching Fabric Module.....................................................................19
Installing a Switching Fabric Module..........................................................................19
Chapter 3: Bridging Configuration Guide............................................. 21
Bridging Overview.................................................................................................................21
Spanning Tree (IEEE 802.1d).........................................................................................21
Bridging Modes (Flow-Based and Address-Based)...................................................22
VLAN Overview ....................................................................................................................22
Port-based VLANs...................................................................................................23
SmartSwitch Router User Reference Manual xiii
Contents
MAC-address-based VLANs................................................................. ...... ..... .....23
Protocol-based VLANs........................................................................................... 23
Subnet-based VLANs............................................................................................. 23
Multicast-based VLANs......................................................................................... 24
Policy-based VLANs ..............................................................................................24
SSR VLAN Support........................................................................................................ 24
VLANs and the SSR................................................................................................24
Ports, VLANs, and L3 Interfaces .......................................................................... 25
Access Ports and Trunk Ports (802.1Q support).................................................25
Explicit and Implicit VLANs................................................................................. 26
Configuring SSR Bridging Functions................................................................................. 26
Configuring Address-based or Flow-based Bridging...............................................26
Configuring Spanning Tree.......................................................................................... 28
Adjusting Spanning-Tree Parameters.........................................................................28
Setting the Bridge Priority..................................................................................... 29
Setting a Port Priority............................................................................................. 29
Assigning Port Costs ..............................................................................................29
Adjusting Bridge Protocol Data Unit (BPDU) Intervals.................................... 30
Adjusting the Interval between Hello Times............................................... 30
Defining the Forward Delay Interval............................................................ 30
Defining the Maximum Age .......................................................................... 30
Configuring a Port- or Protocol-Based VLAN...........................................................31
Creating a Port or Protocol Based VLAN............................................................ 31
Adding Ports to a VLAN....................................................................................... 31
Configuring VLAN Trunk Ports.................................................................................. 31
Configuring VLANs for Bridging................................................................................ 32
Configuring Layer-2 Filters ..........................................................................................32
Monitoring Bridging.............................................................................................................33
Configuration Examples.......................................................................................................33
Creating an IP or IPX VLAN........................................................................................ 33
Creating a non-IP/non-IPX VLAN.............................................................................. 34
Chapter 4: SmartTRUNK Configuration Guide......................................35
Overview ................................................................................................................................ 35
Configuring SmartTRUNKs ................................................................................................36
Creating a SmartTRUNK .............................................................................................. 36
Add Physical Ports to the SmartTRUNK.................................................................... 36
Specify Traffic Distribution Policy (Optional)........................................................... 37
Monitoring SmartTRUNKs.................................................................................................. 37
Example Configurations....................................................................................................... 38
Chapter 5: ATM Configuration Guide.................................................... 41
ATM Overview......................................................................................................................41
Virtual Channels.................................................................................................................... 41
Creating a Virtual Channel........................................................................................... 42
Service Class Definition........................................................................................................42
Creating a Service Class Definition............................................................................. 43
Applying a Service Class Definition............................................................................ 44
Cell Scrambling......................................................................................................................45
xiv SmartSwitch Router User Reference Manual
Contents
Enabling Cell Scrambling ..............................................................................................45
Cell Mapping ..........................................................................................................................46
Selecting the Cell Mapping Format..............................................................................46
Creating a Non-Zero VPI......................................................................................................47
Setting the Bit Allocation for VPI..................................................................................47
Displaying ATM Port Information......................................................................................48
ATM Sample Configuration 1..............................................................................................52
Configuring an Interface on an Ethernet Port............................................................53
Creating a Virtual Channel............................................................................................53
Defining an ATM Service Class................................ ...... ..... ........................................ .53
Applying an ATM Service Class...................................................................................54
Configuring an Interface on an ATM Port..................................................................54
Configuring an IP Route................................................................................................54
Chapter 6: Packet-over-SONET Configuration Guide ........................... 57
Overview.................................................................................................................................57
Configuring IP Interfaces for PoS Links......................................................................58
Configuring Packet-over-SONET Links .............................................................................58
Configuring Automatic Protection Switching...................................................................59
Configuring Working and Protecting Ports................................................................60
Specifying Bit Error Rate Thresholds..................................................................................61
Monitoring PoS Ports.............................................................................................................62
Example Configurations .......................................................................................................63
APS PoS Links Between SSRs........................................................................................63
PoS Link Between the SSR and a Cisco Router...........................................................64
Bridging and Routing Traffic Over a PoS Link ..........................................................65
Chapter 7: DHCP Configuration Guide.................................................. 67
DHCP Overview ....................................................................................................................67
Configuring DHCP................................................................................................................68
Configuring an IP Address Pool...................................................................................68
Configuring Client Parameters.....................................................................................68
Configuring a Static IP Address ...................................................................................69
Grouping Scopes with a Common Interface...............................................................69
Configuring DHCP Server Parameters........................................................................70
Updating the Lease Database...............................................................................................70
Monitoring the DHCP Server...............................................................................................70
DHCP Configuration Examples...........................................................................................71
Configuring Secondary Subnets...................................................................................72
Secondary Subnets and Directly-Connected Clients.................................................73
Interacting with Relay Agents.......................................................................................74
Chapter 8: IP Routing Configuration Guide.......................................... 77
IP Routing Protocols..............................................................................................................77
Unicast Routing Protocols.............................................................................................77
Multicast Routing Protocols................................ ........................................ ..... .............78
Configuring IP Interfaces and Parameters.........................................................................78
Configuring IP Interfaces to Ports................................................................................79
Configuring IP Interfaces for a VLAN.........................................................................79
SmartSwitch Router User Reference Manual xv
Contents
Specifying Ethernet Encapsulation Method............................................................... 79
Configuring Jumbo Frames .......................................................................................... 80
Configuring Address Resolution Protocol (ARP)..................................................... 81
Configuring ARP Cache Entries........................................................................... 81
Unresolved MAC Addresses for ARP Entries.................................................... 81
Configuring Proxy ARP.........................................................................................82
Configuring Reverse Address Resolution Protocol (RARP).................................... 82
Specifying IP Interfaces for RARP........................................................................ 83
Defining MAC-to-IP Address Mappings .......... ...... ...... ......................................83
Monitoring RARP ................................................................................................... 84
Configuring DNS Parameters ...................................................................................... 84
Configuring IP Services (ICMP)...................................................................................84
Configuring IP Helper...................................................................................................84
Configuring Direct Broadcast....................................................................................... 85
Configuring Denial of Service (DOS)..........................................................................86
Monitoring IP Parameters............................................................................................. 86
Configuring Router Discovery............................................................................................ 87
Configuration Examples.......................................................................................................90
Assigning IP/IPX Interfaces......................................................................................... 90
Chapter 9: VRRP Configuration Guide................................................... 91
VRRP Overview.................................................. ........................................ ..... ...................... 91
Configuring VRRP ................................................................................................................91
Basic VRRP Configuration............................................................................................ 92
Configuration of Router R1................................................................................... 92
Configuration for Router R2.................................................................................. 93
Symmetrical Configuration ..........................................................................................93
Configuration of Router R1................................................................................... 94
Configuration of Router R2................................................................................... 95
Multi-Backup Configuration........................................................................................ 95
Configuration of Router R1................................................................................... 97
Configuration of Router R2................................................................................... 98
Configuration of Router R3................................................................................... 99
Additional Configuration............................................................................................. 99
Setting the Backup Priority..................................................................................100
Setting the Advertisement Interval.................................................................... 100
Setting Pre-empt Mode ........................................................................................100
Setting an Authentication Key............................................................................ 101
Monitoring VRRP................................................................................................................101
ip-redundancy trace..................................................... ...... ....................................... ...101
ip-redundancy show.......................................................... ...... ....................................102
VRRP Configuration Notes............................................................ ..... ...... ......................... 103
Chapter 10: RIP Configuration Guide................................................... 105
RIP Overview....................................................................................................................... 105
Configuring RIP................................................................................................................... 105
Enabling and Disabling RIP........................................................................................ 106
Configuring RIP Interfaces......................................................................................... 106
Configuring RIP Parameters....................................................................................... 106
xvi SmartSwitch Router User Reference Manual
Contents
Configuring RIP Route Preference.............................................................................108
Configuring RIP Route Default-Metric......................................................................108
Monitoring RIP.....................................................................................................................108
Configuration Example.......................................................................................................109
Chapter 11: OSPF Configuration Guide............................................... 111
OSPF Overview................................................................................... ..... ............................111
OSPF Multipath........................................................... ...... ....................................... .....112
Configuring OSPF................................................................................................................112
Enabling OSPF...............................................................................................................113
Configuring OSPF Interface Parameters ...................................................................113
Default Cost of an OSPF Interface..............................................................................114
Configuring an OSPF Area..........................................................................................115
Configuring OSPF Area Parameters..........................................................................116
Creating Virtual Links..................................................................................................116
Configuring Autonomous System External (ASE) Link Advertisements............117
Configuring OSPF for Different Types of Interfaces...............................................117
Monitoring OSPF..................................................................................................................118
OSPF Configuration Examples................................... ...... ....................................... ...... .....120
Exporting All Interface & Static Routes to OSPF.......................................121
Exporting All RIP, Interface & Static Routes to OSPF...............................121
Chapter 12: BGP Configuration Guide................................................. 125
BGP Overview............................................. ...... ...... ....................................... ...... ................125
The SSR BGP Implementation.....................................................................................126
Basic BGP Tasks....................................................................................................................126
Setting the Autonomous System Number ................................................................127
Setting the Router ID....................................................................................................127
Configuring a BGP Peer Group..................................................................................127
Adding and Removing a BGP Peer............................................................................129
Starting BGP...................................................................................................................129
Using AS-Path Regular Expressions..........................................................................129
AS-Path Regular Expression Examples..............................................................131
Using the AS Path Prepend Feature...........................................................................131
Notes on Using the AS Path Prepend Feature...................................................132
BGP Configuration Examples ................... ...... ...... ....................................... ...... ..... ...........132
BGP Peering Session Example .............................................................. ...... ................133
IBGP Configuration Example......................................................................................135
IBGP Routing Group Example.............................................................................136
IBGP Internal Group Example.............................................................................139
EBGP Multihop Configuration Example...................................................................142
Community Attribute Example..................................................................................145
Notes on Using Communities.................................. ..... .......................................152
Local Preference Examples..........................................................................................152
Using the local-pref Option..................................................................................154
Using the set-pref Option.....................................................................................154
Multi-Exit Discriminator Attribute Example............................................................155
EBGP Aggregation Example .......................................................................................156
Route Reflection Example............................................................................................157
SmartSwitch Router User Reference Manual xvii
Contents
Notes on Using Route Reflection.................................... ..... ...... ..... ...... .............. 160
Chapter 13: Routing Policy Configuration Guide................................ 161
Route Import and Export Policy Overview..................................................................... 161
Preference......................................................................................................................162
Import Policies..............................................................................................................163
Import-Source ........................................................................................................ 163
Route-Filter ............................................................................................................ 164
Export Policies..............................................................................................................164
Export-Destination................................................................................................ 164
Export-Source........................................................................................................164
Route-Filter ............................................................................................................ 165
Specifying a Route Filter............................................................................................. 165
Aggregates and Generates.......................................................................................... 166
Aggregate-Destination......................................................................................... 167
Aggregate-Source.................................................................................................. 167
Route-Filter ............................................................................................................ 168
Authentication.............................................................................................................. 168
Authentication Methods...................................................................................... 168
Authentication Keys and Key Management..................................................... 169
Configuring Simple Routing Policies............................................................................... 169
Redistributing Static Routes ........................................................ ...... .........................170
Redistributing Directly Attached Networks................................... ..... .................... 170
Redistributing RIP into RIP .................................................... ....................................171
Redistributing RIP into OSPF..................................... ...... ...... ....................................171
Redistributing OSPF to RIP ...... ...... ........................................ ..... ............................... 171
Redistributing Aggregate Routes ............. ...... ....................................... ...... .............. 171
Simple Route Redistribution Examples.................................................................... 172
Example 1: Redistribution into RIP.................................................................... 172
Exporting a Given Static Route to All RIP Interfaces............................... 173
Exporting All Static Routes to All RIP Interfaces...................................... 173
Exporting All Static Routes Except the Default Route to All RIP Interfaces
173
Example 2: Redistribution into OSPF.................................................................173
Exporting All Interface & Static Routes to OSPF......................................174
Exporting All RIP, Interface & Static Routes to OSPF.............................. 174
Configuring Advanced Routing Policies......................................................................... 175
Export Policies..............................................................................................................175
Creating an Export Destination..................................................................................177
Creating an Export Source.......................................................................................... 177
Import Policies..............................................................................................................177
Creating an Import Source.......................................................................................... 178
Creating a Route Filter ................................................................................................ 178
Creating an Aggregate Route..................................................................................... 179
Creating an Aggregate Destination...........................................................................180
Creating an Aggregate Source....................................................................................180
Examples of Import Policies.......................................................................................180
Example 1: Importing from RIP.......................................................................... 180
Importing a Selected Subset of Routes from One RIP Trusted Gateway....
183
xviii SmartSwitch Router User Reference Manual
Contents
Importing a Selected Subset of Routes from All RIP Peers Accessible Over
a Certain Interface...................................................................................183
Example 2: Importing from OSPF.......................................................................184
Importing a Selected Subset of OSPF-ASE Routes....................................186
Examples of Export Policies........................................................................................187
Example 1: Exporting to RIP................................................................................187
Exporting a Given Static Route to All RIP Interfaces................................188
Exporting a Given Static Route to a Specific RIP Interface ......................189
Exporting All Static Routes Reachable Over a Given Interface to a Specific
RIP-Interface..................................... ............ ................ ................. ...........190
Exporting Aggregate-Routes into RIP.........................................................191
Example 2: Exporting to OSPF.............................................................................192
Exporting All Interface & Static Routes to OSPF.......................................193
Exporting All RIP, Interface & Static Routes to OSPF...............................194
Chapter 14: Multicast Routing Configuration Guide ......................... 197
IP Multicast Overview.........................................................................................................197
IGMP Overview .................................................... ...... ...... ....................................... .....197
DVMRP Overview........................................................................................................198
Configuring IGMP ...............................................................................................................199
Configuring IGMP on an IP Interface........................................................................199
Configuring IGMP Query Interval.............................................................................199
Configuring IGMP Response Wait Time...................................................................199
Configuring Per-Interface Control of IGMP Membership......................................200
Configuring Static IGMP Groups...............................................................................200
Configuring DVMRP...........................................................................................................200
Starting and Stopping DVMRP...................................................................................201
Configuring DVMRP on an Interface ........................................................................201
Configuring DVMRP Parameters...............................................................................201
Configuring the DVMRP Routing Metric .................................................................202
Configuring DVMRP TTL & Scope............................................................................202
Configuring a DVMRP Tunnel...................................................................................203
Monitoring IGMP & DVMRP.............................................................................................203
Configuration Examples .....................................................................................................204
Chapter 15: IP Policy-Based Forwarding Configuration Guide.......... 207
Overview.......................... ........................................ .............................................................207
Configuring IP Policies........................................................................................................208
Defining an ACL Profile ................ ....................................... ...... .................................208
Associating the Profile with an IP Policy..................................................................208
Creating Multi-Statement IP Policies..................................................................209
Setting the IP Policy Action..................................................................................209
Setting Load Distribution for Next-Hop Gateways..........................................210
Applying an IP Policy to an Interface........................................................................210
Applying an IP Policy to Locally Generated Packets.......................................210
IP Policy Configuration Examples.....................................................................................211
Routing Traffic to Different ISPs.................................................................................211
Prioritizing Service to Customers ...............................................................................212
Authenticating Users through a Firewall..................................................................213
SmartSwitch Router User Reference Manual xix
Contents
Firewall Load Balancing.............................................................................................. 214
Monitoring IP Policies ........................................................................................................ 215
Chapter 16: Network Address Translation Configuration Guide ......219
Overview .............................................................................................................................. 219
Configuring NAT................................................................................................................220
Setting Inside and Outside Interfaces ....................................................................... 220
Setting NAT Rules........................................................................................................221
Static........................................................................................................................ 221
Dynamic ................................................................................................................. 221
Forcing Flows through NAT..............................................................................................221
Managing Dynamic Bindings............................................................................................222
NAT and DNS......................................................................................................................222
NAT and ICMP Packets ..................................................................................................... 223
NAT and FTP....................................................................................................................... 223
Monitoring NAT..................................................................................................................224
Configuration Examples.....................................................................................................224
Static Configuration..................................................................................................... 224
Using Static NAT .................................................................................................. 225
Dynamic Configuration............................................................................................... 225
Using Dynamic NAT............................................................................................ 226
Dynamic NAT with IP Overload (PAT) Configuration......................................... 227
Using Dynamic NAT with IP Overload ............................................................ 227
Dynamic NAT with DNS............................................................................................ 228
Using Dynamic NAT with DNS.........................................................................229
Dynamic NAT with Outside Interface Redundancy.............................................. 229
Using Dynamic NAT with Matching Interface Redundancy......................... 230
Chapter 17: Web Hosting Configuration Guide.................................. 231
Overview .............................................................................................................................. 231
Load Balancing .................................................................................................................... 232
Configuring Load Balancing ......................................................................................232
Creating the Server Group................................................................................... 232
Adding Servers to the Load Balancing Group.................................................. 232
Session Persistence.......................................................................................................233
Optional Group or Server Operating Parameters...................................................235
Specifying Load Balancing Policy...................................................................... 235
Specifying a Connection Threshold................................................................... 235
Verifying Servers and Applications................................................................... 236
Verifying Extended Content................................................................................ 237
Setting Server Status.................................................................................................... 237
Load Balancing and FTP............................................................................................. 238
Allowing Access to Load Balancing Servers............................................................238
Setting Timeouts for Load Balancing Mappings..................................................... 238
Displaying Load Balancing Information .................................................................. 239
Configuration Examples .............................................................................................239
Web Hosting with One Virtual Group and Multiple Destination Servers... 240 Web Hosting with Multiple Virtual Groups an d Multiple Destination Servers
241
xx SmartSwitch Router User Reference Manual
Contents
Virtual IP Address Ranges...................................................................................242
Session and Netmask Persistence........................................................................243
Web Caching.........................................................................................................................244
Configuring Web Caching...........................................................................................244
Creating the Cache Group....................................................................................244
Specifying the Client(s) for the Cache Group (Optional).................................245
Redirecting HTTP Traffic on an Interface..........................................................245
Configuration Example................................................................................................246
Other Configurations ...................................................................................................246
Bypassing Cache Servers......................................................................................246
Proxy Server Redundancy....................................................................................247
Distributing Frequently-Accessed Sites Across Cache Servers.......................247
Monitoring Web-Caching............................................................................................247
Chapter 18: IPX Routing Configuration Guide.................................... 249
IPX Routing Overview ........................................................................................................249
RIP (Routing Information Protocol)...........................................................................249
SAP (Service Advertising Protocol) ...........................................................................250
Configuring IPX RIP & SAP ...............................................................................................251
IPX RIP............................................................................................................................251
IPX SAP ..........................................................................................................................251
Creating IPX Interfaces ................................................................................................251
IPX Addresses................................................................................................................251
Configuring IPX Interfaces and Parameters.....................................................................252
Configuring IPX Addresses to Ports..........................................................................252
Configuring Secondary Addresses on an IPX Interface..........................................252
Configuring IPX Interfaces for a VLAN....................................................................252
Specifying IPX Encapsulation Method......................................................................253
Configuring IPX Routing....................................................................................................253
Enabling IPX RIP...........................................................................................................253
Enabling SAP.................................................................................................................253
Configuring Static Routes............................................................................................254
Configuring Static SAP Table Entries........................................................................254
Controlling Access to IPX Networks..........................................................................254
Creating an IPX Access Control List...................................................................254
Creating an IPX Type 20 Access Control List....................................................255
Creating an IPX SAP Access Control List..........................................................255
Creating an IPX GNS Access Control List..........................................................256
Creating an IPX RIP Access Control List............................................................256
Monitoring an IPX Network...............................................................................................257
Configuration Examples .....................................................................................................257
Chapter 19: Access Control List Configuration Guide........................ 259
ACL Basics ............................................................... ..... ........................................ ..... .... .. .....260
Defining Selection Criteria in ACL Rules..................................................................260
How ACL Rules are Evaluated...................................................................................262
Implicit Deny Rule........................................................................................................262
Allowing External Responses to Established TCP Connections............................263
Creating and Modifying ACLs...........................................................................................264
SmartSwitch Router User Reference Manual xxi
Contents
Editing ACLs Offline...................................................................................................264
Maintaining ACLs Using the ACL Editor................................................................265
Using ACLs .......................................................................................................................... 266
Applying ACLs to Interfaces...................................................................................... 266
Applying ACLs to Services......................................................................................... 267
Applying ACLs to Layer-4 Bridging Ports............................................................... 267
Using ACLs as Profiles................................................................................................ 268
Using Profile ACLs with the IP Policy Facility.................................................269
Using Profile ACLs with the Traffic Rate Limiting Facility............................269
Using Profile ACLs with Dynamic NAT........................................................... 270
Using Profile ACLs with the Port Mirroring Facility ................................... ...271
Using Profile ACLs with the Web Caching Facility......................................... 271
Redirecting HTTP Traffic to Cache Servers...............................................272
Preventing Web Objects From Being Cached............................................272
Enabling ACL Logging....................................................................................................... 273
Monitoring ACLs.................................................................................................................274
Chapter 20: Security Configuration Guide .......................................... 275
Security Overview...............................................................................................................275
Configuring SSR Access Security......................................................................................276
Configuring RADIUS ..................................................................................................276
Monitoring RADIUS............................................................................................. 277
Configuring TACACS ................................................................................................. 277
Monitoring TACACS............................................................................................ 277
Configuring TACACS Plus.........................................................................................278
Monitoring TACACS Plus...................................................................................279
Configuring Passwords............................................................................................... 279
Layer-2 Security Filters.......................................................................................................279
Configuring Layer-2 Address Filters ........................................................................ 280
Configuring Layer-2 Port-to-Address Lock Filters................................................. 281
Configuring Layer-2 Static Entry Filters................................................................... 281
Configuring Layer-2 Secure Port Filters................................................................... 282
Monitoring Layer-2 Security Filters .......................................................................... 283
Layer-2 Filter Examples............................................................................................... 283
Example 1: Address Filters..................................................................................283
Static Entries Example................................................................................... 284
Port-to-Address Lock Examples..................................................................284
Example 2 : Secure Ports......................................................................................285
Layer-3 Access Control Lists (ACLs)................................................................................285
Layer-4 Bridging and Filtering.......................................................................................... 286
Creating a Port-Based VLAN for Layer-4 Bridging................................................ 287
Placing the Ports on the Same VLAN ....................................................................... 287
Enabling Layer-4 Bridging on the VLAN.................................................................287
Creating ACLs to Specify Selection Criteria for Layer-4 Bridging....................... 287
Applying a Layer-4 Bridging ACL to a Port............................................................288
Notes.............................................................................................................................. 288
Chapter 21: QoS Configuration Guide................................................. 291
QoS & Layer-2/Layer-3/Layer-4 Flow Overview.......................................................... 291
xxii SmartSwitch Router User Reference Manual
Contents
Layer-2 and Layer-3 & Layer-4 Flow Specification..................................................292
Precedence for Layer-3 Flows.....................................................................................293
SSR Queuing Policies....................................................................................................293
Traffic Prioritization for Layer-2 Flows............................................................................293
Configuring Layer-2 QoS.............................................................................................294
802.1p Priority Mapping..............................................................................................294
Creating and Applying a New Priority Map.....................................................295
Removing or Disabling Per-Port Priority Map..................................................295
Displaying Priority Map Information.................................................................296
Traffic Prioritization for Layer-3 & Layer-4 Flows..........................................................296
Configuring IP QoS Policies........................................................................................296
Setting an IP QoS Policy .......................................................................................297
Specifying Precedence for an IP QoS Policy......................................................297
Configuring IPX QoS Policies .....................................................................................297
Setting an IPX QoS Policy.....................................................................................297
Specifying Precedence for an IPX QoS Policy ...................................................298
Configuring SSR Queueing Policy.....................................................................................298
Allocating Bandwidth for a Weighted-Fair Queuing Policy..................................298
Weighted Random Early Detection (WRED)...................................................................299
ToS Rewrite...........................................................................................................................299
Configuring ToS Rewrite for IP Packets....................................................................300
Monitoring QoS....................................................................................................................302
Limiting Traffic Rate............................................................................................................303
Rate Limiting Modes....................................................................................................303
Per-Flow Rate Limiting................................................................................................304
Port Rate Limiting................................ ........................................ ..... ...... ......................304
Aggregate Rate Limiting..............................................................................................305
Example Configurations..............................................................................................306
Per-Flow Rate Limiting.........................................................................................306
Aggregate Rate Limiting.......................................................................................307
Displaying Rate Limit Information............................................................................308
Chapter 22: Performance Monitoring Guide ...................................... 309
Performance Monitoring Overview..................................................................................309
Configuring the SSR for Port Mirroring...........................................................................311
Monitoring Broadcast Traffic.............................................................................................311
Chapter 23: RMON Configuration Guide ............................................ 313
RMON Overview.................................................................................................................313
Configuring and Enabling RMON ....................................................................................314
Example of RMON Configuration Commands........................................................314
RMON Groups..............................................................................................................315
Lite RMON Groups...............................................................................................315
Standard RMON Groups......................................................................................316
Professional RMON Groups ................................................................................316
Control Tables ................ ..... ........................................ ...... ....................................... .....317
Using RMON........................................................................................................................318
Configuring RMON Groups...............................................................................................319
SmartSwitch Router User Reference Manual xxiii
Contents
Configuration Examples .............................................................................................321
Displaying RMON Information........................................................................................ 322
RMON CLI Filters........................................................................................................323
Creating RMON CLI Filters................................................................................. 325
Using RMON CLI Filters ..................................................................................... 325
Troubleshooting RMON............................................................................ ..... ...... .............. 325
Allocating Memory to RMON...........................................................................................327
Chapter 24: LFAP Configuration Guide................................................329
Overview .............................................................................................................................. 329
Cabletron’s Traffic Accounting Services.......................................................................... 330
Configuring the LFAP Agent on the SSR......................................................................... 330
Monitoring the LFAP Agent on the SSR..........................................................................332
Chapter 25: WAN Configuration Guide ............................................... 333
WAN Overview................................................................................................................... 333
High-Speed Serial Interface (HSSI) and Standard Serial Interfaces ..................... 333
Configuring WAN Interfaces..................................................................................... 334
Primary and Secondary Addresses ........................................................................... 334
Static, Mapped, and Dynamic Peer IP/IPX Addresses ..........................................334
Static Addresses .................................................................................................... 334
Mapped Addresses............................................................................................... 335
Dynamic Addresses.............................................................................................. 335
Forcing Bridged Encapsulation..................................................................................336
Packet Compression.....................................................................................................336
Average Packet Size.............................................................................................. 337
Nature of the Data ................................................................................................ 337
Link Integrity......................................................................................................... 337
Latency Requirements..........................................................................................337
Example Configurations...................................................................................... 337
Packet Encryption ........................................................................................................ 338
WAN Quality of Service.............................................................................................. 338
Source Filtering and ACLs................................................................................... 339
Weighted-Fair Queueing .....................................................................................339
Congestion Management..................................................................................... 339
Random Early Discard (RED)...................................................................... 339
Adaptive Shaping..........................................................................................340
Frame Relay Overview....................................................................................................... 340
Virtual Circuits............................................................................................................. 340
Permanent Virtual Circuits (PVCs)....................................................................341
Configuring Frame Relay Interfaces for the SSR............................................................ 341
Defining the Type and Location of a Frame Relay and VC Interface................... 341
Setting up a Frame Relay Service Profile.................................................................. 342
Applying a Service Profile to an Active Frame Relay WAN Port......................... 342
Monitoring Frame Relay WAN Ports...............................................................................343
Frame Relay Port Configuration.......................................................................................343
Point-to-Point Protocol (PPP) Overview.......................................................................... 345
Use of LCP Magic Numbers....................................................................................... 345
Configuring PPP Interfaces................................................................................................ 345
xxiv SmartSwitch Router User Reference Manual
Contents
Defining the Type and Location of a PPP Interface.................................................346
Setting up a PPP Service Profile..................................................................................346
Applying a Service Profile to an Active PPP Port....................................................347
Configuring Multilink PPP Bundles ..........................................................................347
Compression on MLP Bundles or Links.............................................................347
Monitoring PPP WAN Ports...............................................................................................348
PPP Port Configuration.......................................................................................................348
WAN Configuration Examples..........................................................................................350
Simple Configuration File.......................................... ...... ..... .......................................350
Multi-Router WAN Configuration.............................................................................351
Router R1 Configuration File...............................................................................352
Router R2 Configuration File...............................................................................352
Router R3 Configuration File...............................................................................353
Router R4 Configuration File...............................................................................353
Router R5 Configuration File...............................................................................354
Router R6 Configuration File...............................................................................354
Appendix A: New Features Supported on Line Cards........................ 357
Introduction ..........................................................................................................................357
SSR 8000/8600 Line Cards..................................................................................................357
Line Cards Available Prior to the 3.0 Firmware Release ........................................357
Line Cards Introduced at the 3.0 Firmware Release (-AA Revision)....................358
Line Cards Introduced at the 3.1 Firmware Release (T-Series)..............................359
SSR 2000 Line Cards ............................................................................................................361
New Features that Require Specific Line Cards..............................................................362
Network Address Translation.....................................................................................362
Load Balancing (LSNAT).............................................................................................364
Layer 4 Bridging............................................................................................................365
Per-Protocol VLAN............................................... ........................................ ..... ...... .....366
QoS Rate Limiting.........................................................................................................367
Per-Flow Rate Limiting.........................................................................................367
Aggregate Rate Limiting.......................................................................................367
Port Rate Limiting.......................................... ...... ....................................... ...... .....367
ToS Rewrite....................................................................................................................368
Established Bit ACL......................................................................................................368
Multiple IPX Encapsulation....................................... ....................................... ...... .....368
Weighted Random Early Detection (WRED)............................................................369
Jumbo Frames................................................................................................................369
Summary ...............................................................................................................................369
Identifying a Line Card.......................................................................................................370
Example 1:...............................................................................................................370
Example 2:...............................................................................................................371
Example 3:...............................................................................................................371
SmartSwitch Router User Reference Manual xxv
Contents
xxvi SmartSwitch Router User Reference Manual

About This Manual

This manual provides information and procedures for configuring the SmartSwitch Router (SSR) software. If you have not yet installed the SSR, use the instructions in the SmartSwitch Router Getting Started Guide to install the chassis an d perform basic setup tasks, then return to this manual for more detailed configuration information.

Related Documentation

The SmartSwitch Router documentation set includes the following items. Refer to these other documents to learn more about your product.
For Information Ab out See
Installing and setting up the SSR SmartSwitch Router Getting Started Guide Managing the SSR using Cabletron’s
element management application Syntax for CLI commands SmartSwitch Router Command Line

Document Conventions

Commands shown in this manual use the following conventions:
Convention Description
boldface Indicates commands and keywords that you enter as shown.
<italics> Indicates arguments for which you supply values.
CoreWatch User’s Manual and the
CoreWatch online help
Interface Reference Manual
SmartSwitch Router User Reference Manual 1
Preface
Convention Description
[x] or [<italics>] or
Keywords and arguments within a set of square brackets are optional.
[x <italics>] x|y|z|<italics> or
[x|y|z|<italics>]
Keywords or arguments separated by vertical bars indicate a choice. Select one keyword or argument.
{x|y|z|<italics>} Braces group required choices. Select one keyword or
argument.
2 SmartSwitch Router User Reference Manual
This chapter provides information that you need to know before configuring the SmartSwitch Router (SSR). If you have not yet installed the SSR, use the instructions in the SmartSwitch Router Getting Started Guide to install the chassis an d perform basic setup tasks, then return to this manual for more detailed configuration information.

Configuration Files

The SmartSwitch Router Getting Started Guide introduced the following configuration files used by the SSR:
Startup – The configuration file that the SSR uses to configure itself when the system
is powered on. The Startup configuration remains even when the system is rebooted.
Chapter 1

Introduction

Active – The commands from the Startup configuration file and any configuration
commands that you have made active from the scratchpad. The active configuration remains in effect until you power down or reboot the system.
Scratchpad – The configuration commands you have entered during a CLI session.
These commands are temporary and do not become active until you explicitly make them part of the active configuration.
Note:
Entering commands and saving configuration files are discussed in more detail in the following section.
SmartSwitch Router User Reference Manual 3
Because some commands depend on other commands for successful execution, the SSR scratchpad simplifies system configuration by allowing you to enter configuration commands in any order, even when dependencies exist. When you activate the commands in the scratchpad, the SSR sorts out the dependencies and executes the command in the proper sequence.
Chapter 1: Introduction

Using the Command Line Interface

Note:
The CLI allows you to enter and execute commands from the SSR Console or from Telnet sessions. Up to four simultaneous Telnet sessions are allowed. CLI commands are grouped by subsystems. For example, the set of commands that let you configure and display IP routing table information all start with ip. Within the set of ip commands are commands such as set, show, start, stop, configure, etc. The complete set of commands for each subsystem is described in the SmartSwitch Router Command Line Interface Reference Manual.
The SSR provides both a graphical user interface (CoreWatch) and a command line interface (CLI) to configure and manage the SSR. In this manual, example configurations show how to use the CLI comman d s to configure the SSR. Using CoreWatch is described in the CoreWatch User’s Manual.

Command Modes

The CLI provides access to four different command modes. Each command mode provides a group of related commands. This section describes how to access and list the commands available in each command mode and explains the primary uses for each command mode.
User Mode
Enable Mode
After you log in to the SSR, you are automatically in User mode. The User commands available are a subset of those available in Enable mode. In general, the User commands allow you to display basic inform ation and use basic utilities such as ping.
The User mode command prompt consists of the SSR name followed by the angle bracket (>), as shown below:
ssr>
The default name is SSR unless it has been changed during initial configuration. Refer to the SmartSwitch Router Getting Started Guide for the procedures for changing the system name.
Enable mode provides more facilities than User mode. You can display critical features within Enable mode including router configuration, access control lists, and SNMP statistics. To enter Enable mode from the User mode, enter the command enable (or en), then supply the password when prompted.
4 SmartSwitch Router User Reference Manual
The Enable mode command prompt consists of the SSR name followed by the pound sign(#):
ssr#
To exit Enable mode and return to User mode, either type exit and press Return, or press Ctrl+Z.
Configure Mode
Configure mode provides the capabilities to configure all features and functions on the SSR. These include router configuration, access control lists and spanning tree. To enter Configure mode, enter the command config from Enable mode.
Chapter 1: Introduction
Note:
The Configure mode command prompt consists of the SSR name followed by (config) and a pound sign (#):
ssr(config)#
To exit Configure mode and return to Enable mode, either type exit and press Return, or press Ctrl+Z.
Boot PROM Mode
If your SSR does not find a valid system image on the external PCMCIA flash, the system might enter programmable read-on ly memory (PROM) mode. You should then reboot the SSR (enter the command reboot at the boot PROM prompt) to restart the system. If the system fails to reboot successfully, plea se call Cabletron Systems Technical Support to resolve the problem.
For information on how to upgrade the boot PROM software and boot using the upgraded image, see the SmartSwitch Router Getting Started Guide.
As mentioned previously, up to four Telnet sessions can be run simultaneously on the SSR. All four sessions can be in Configure mode at the same time, so you should consider limiting access to the SSR to authorized users.

Getting Help with CLI Commands

Interactive help is available from CLI by entering the question mark (?) character at any time. The help is context-sensitive; the help provided is based on where in the command
SmartSwitch Router User Reference Manual 5
Chapter 1: Introduction
you are. For example, if you are at the User mode prompt, enter a question mark (?) as shown in the following example to list the commands available in User mode:
ssr> ? aging - Show L2 and L3 Aging information cli - Modify the command line interface behavior dvmrp - Show DVMRP related parameters enable - Enable privileged user mode exit - Exit current mode file - File manipulation commands help - Describe online help facility igmp - Show IGMP related parameters ip-redundancy - Show IP Redundancy information (VRRP) ipx - Show IPX related parameters l2-tables - Show L2 Tables information logout - Log off the system multicast - Configure Multicast related parameters ping - Ping utility pvst - Show Per Vlan Spanning Tree Protocol (PVST) parameters sfs - Show SecureFast Switching (SFS) parameters statistics - Show or clear SSR statistics stp - Show STP status telnet - Telnet utility traceroute - Traceroute utility vlan - Show VLAN-related parameters
You can also type the ? character while entering in a command line to see a description of the parameters or options that you can enter. Once the help information is displayed, the command line is redisplayed as before but without the ? character. The following is an example of invoking help while entering a command:
ssr(config)# load-balance create ? group-name - Name of this Load Balanced group of servers vip-range-name - Name of this Virtual IP range ssr(config)# load-balance create
If you enter enough characters of a command keyword to uniquely identify it and press the space bar, the CLI attempts to complete the command. If you do not enter enough characters or you enter the wrong characters, CLI cannot complete the command. For example, if you enter the following in Enable mode and press the spacebar as indicated:
ssr# system show e[space]
CLI completes the command as follows:
ssr# system show environmental
If you are entering several commands for the same subsystem, you can enter the subsystem name from CLI. Then, execute individual commands for the subsystem
6 SmartSwitch Router User Reference Manual
Chapter 1: Introduction
without typing the subsystem name in each time. For example, if you are configuring several entries for the IP routing table, you can simply enter ip at the CLI Configure prompt. The prompt changes to indicate that the context for the commands to be entered has changed to that of the IP subsystem. If you type a ?, only those commands that are valid for the IP subsystem are displayed. The following is an example:
ssr(config)# ip ssr(config)(ip)# ? add - Add a static route dos - Configure specific denial of service features disable - Disable certain IP function enable - Enable certain IP function helper-address - Specify IP helper address for an interface l3-hash - Change IP hash variant for channel set - Set ip stack properties Ctrl-z - Exits to previous level top - Exits to the top level ssr(config)(ip)# [Ctrl-Z] ssr(config)#

Line Editing Commands

The SSR provides line editing capabilities that are similar to Emacs, a Unix text editor. For example, you can use certain line editing keystrokes to move forward or backward on a line, delete or transpose characters, and delete portions of a line. To use the line editing commands, you need to have a VT-100 terminal or terminal emulator. The line editing commands that you can use with CLI are detailed in Table 1.
Table 1. CLI Line Editing Commands
Command Resulting Action
Ctrl-a
Ctrl-b
Ctrl-c
Ctrl-d
Ctrl-e
Ctrl-f
Ctrl-g
Ctrl-h
Move to beginning of line Move back one character Abort current line Delete character under cursor Move to end of line Move forward one character Abort current line Delete character just priority to the cursor
Ctrl-i
Ctrl-j
SmartSwitch Router User Reference Manual 7
Insert one space (tab substitution) Carriage return (executes command)
Chapter 1: Introduction
Table 1. CLI Line Editing Commands
Command Resulting Action
Ctrl-k
Ctrl-l
Ctrl-m
Ctrl-n
Ctrl-o
Ctrl-p
Ctrl-q
Ctrl-r
Ctrl-s
Ctrl-t
Ctrl-u
Ctrl-v
Ctrl-w
Ctrl-x
Kill line from cursor to end of line Refresh current line Carriage return (executes command) Next command from history buffer None Previous command from history buffer None Refresh current line None Transpose character under cursor with the character just prior to the
cursor Delete line from the beginning of line to cursor None None Move forward one word
Ctrl-y
Ctrl-z
ESC-b
ESC-d
ESC-f
ESC­BackSpace
SPACE
!*
!#
Paste back what was deleted by the previous Ctrl-k or Ctrl-w command. Text is pasted back at the cursor location
If inside a subsystem, it exits back to the top level. If in Enable mode, it exits back to User mode. If in Configure mode, it exits back to Enable mode.
Move backward one word Kill word from cursor’s current location until the first white space. Move forward one word Delete backwards from cursor to the previous space (essentially a delete-
word-backward command) Attempts to complete command keyword. If word is not expected to be a
keyword, the space character is inserted. Show all commands currently stored in the history buffer. Recall a specific history command. ‘#’ is the number of the history
command to be recalled as shown via the ‘!*’ command.
8 SmartSwitch Router User Reference Manual
Table 1. CLI Line Editing Commands
Command Resulting Action
Chapter 1: Introduction
“<string>”
Opaque strings may be specified using double quotes. This prevents interpretation of otherwise special CLI characters.

Displaying and Changing Configuration Information

The SSR provides many commands for displaying and changing configuration information. For example, the CLI allows for the “disabling” of a command in the active configuration. Use the negate command on a specific line of the active configuration to “disable” a feature or function which has been enabled. For example, Spanning Tree Protocol is disabled by default. If, after enabling the Spanning Tree Protocol on the SmartSwitch Router, you want to disable STP, you must specify the negate command with the line number in the active configuration that contains the stp enable command.
The table below shows some commands that are useful when configuring the SSR.
Table 2. Commands to Display and Change Configuration Information
Task Command
Enable Mode:
Show active configuration of the system. system show active Show the non-activated configuration changes in the
scratchpad. Show the startup configuration for the next reboot. system show startup Copy between scratchpad, active configuration,
startup configuration, TFTP server, RCP server, or URL.
Configure Mode:
Show active configuration of the system. show active Show the non-activated configuration changes in the
scratchpad. Show the startup configuration for the next reboot. show startup Show the running system configuration, followed by
the non-activated changes in the scratchpad. Compare activated commands with the startup
configuration file.
SmartSwitch Router User Reference Manual 9
system show scratchpad
copy <source> to
<destination>
show scratchpad
show
diff <filename> | startup
Chapter 1: Introduction
Table 2. Commands to Display and Change Configuration Information
Erase commands in scratchpad. erase scratchpad Erase startup configuration. erase startup Negate one or more commands by line numbers. negate <line number>
Task Command
Negate commands that match a specified command
no <string>
string. Save scratchpad to active configuration. save active Save active configuration to startup. save startup
The following figure illustrates the configuration files and the commands you can use to save your configuration:
Scratchpad
temporary location; contents lost
in effect until reboot
StartupActive
remains through reboot
at reboot
(config)# save active
(config)# save startup
Figure 1. Commands to Save Configurations
10 SmartSwitch Router User Reference Manual

Port Names

The term port refers to a physical connector on a line card installed in the SSR. The figure below shows eight 10 Base-T/100 Base-TX ports on a line card.
Offline
Online
10 BASE-T/100 BASE-TX ports 10 BASE-T/100 BASE-TX ports
Each port in the SSR is referred to in the following manner:
<type>.<slot-number>.<port-number>
where:
<type> is the type of line card and can be one of the following:
Chapter 1: Introduction
10/100BASE-TXSSR-HTX12-08
87654321
Hot
Swap
at ATM line card
et 10 Base-X/100 Base-X Ethernet line card
gi 1000 Base-X Gigabit Ethernet line card
hs Dual HSSI WAN line card
se Serial WAN line card
so Packet-over-SONET line card
at ATM line card
<slot-number> is determined by the SSR model and the physical slot in which the line card is installed. On the SSR 2000, the slot number is printed on the side of each slot. On the SSR 8000 and SSR 8600, a lege nd printed on t he fan tr ay shows t he slot n umber of each slot.
<port-number> is the number assigned to the connector on the line card. The range and assignment of port numbers varies by the type of line card. The assignment of port numbers by line card is shown in the table below:
Table 3. Port Numbers for Line Cards
Line Card
10/100 Base TX 100 Base FX
1 2 3 4 5 6 7 8 3 4 7 8
Port Number Arrangement
(Left to Right)
1 2 5 6
1000 Base SX/LX
SmartSwitch Router User Reference Manual 11
1 2
Chapter 1: Introduction
Table 3. Port Numbers for Line Cards
Line Card
1000 Base LLX Quad Serial WAN HSSI WAN SONET (OC-3c) SONET (OC-12c) ATM (OC-3) 16-slot 100 Base TX
1 1,2 3,4 1 2 1 2 3 4 1 2 1 2 5 6 7 8 13 14 15 16
Port Number Arrangement
(Left to Right)
1 2 3 4 9 10 11 12
For example, the port name et.2.8 refers to the port on the Ethernet line card located in slo t 2, connector 8, while the port name gi.3.2 refers to the port on the Gigabit Ethernet line card located in slot 3, connector 2.
There are a few shortcut notations you can use to reference a range of port numbers. For example:
et.(1-3).(1-8) references all the following ports: et.1.1 through et.1.8, et.2.1 through et.2.8, and et.3.1 through et.3.8.
et.(1,3).(1-8) references the following ports: et.1.1 through et.1.8, and et.3.1 through et.3.8
et.(1-3).(1,8) references the following ports: et.1.1, et.1.8, et.2.1, et.2.8, et.3.1, et.3.8
12 SmartSwitch Router User Reference Manual
Control Modules

Hot Swapping Overview

This chapter describes the hot swapping functionality of the SSR. Hot swapping is the ability to replace a line card or Control Module while the SSR is operating. Ho t swapping allows you to remove or install line cards without switching off or rebooting the SSR. Swapped-in line cards ar e recognized by the SSR and begin functioning immediately after they are installed.
Chapter 2
Hot Swapping
Line Cards and
On the SSR 8000 and SSR 8600, you can hot swap line cards and secondary control modules. On the SSR 8600, you can also hot swap the secondary switching fabric module.
This chapter provides instructions for the following tasks:
Hot swapping line cards
Hot swapping secondary Control Modules
Hot swapping the secondary Swit ching Fabric Module (SSR 8600 only)
SmartSwitch Router User Reference Manual 13
Chapter 2: Hot Swapping Line Cards and Control Modules

Hot Swapping Line Cards

The procedure for hot swapping a line card consists of deactivating the line card, removing it from its slot in the SSR chassis, and installing a new line card in the slot.

Deactivating the Line Card

To deactivate the line card, do one of the following:
Press the Hot Swap button on the line card. The Hot Swap button is recessed in the line card's front panel. Use a pen or similar object to reach it.
When you press the Hot Swap button, the Offline LED lights. Figure 2 shows the location of the Offline LED and Hot Swap button on a 1000Base-SX line card.
Tx Link
AN
Rx
Offline LED
Offline
Online
Tx Link
AN
Rx
1000BASE-SXSSR-GSX11-02
21
Hot
Swap
Hot Swap Button
Figure 2. Location of Offline LED and Hot Swap Button on a 1000Base-SX Line Card
•Use the system hotswap out command in the CLI. For example, to deactivate the line card in slot 7, enter the following command in Enable mode:
ssr# system hotswap out slot 7
After you enter this command, the Offline LED on the line card lights, and messages appear on the console indicating the ports on the line card are inoperative.
Note:
If you have deactivated a line card and want to activate it again, simply pull it from its slot and push it back in again. (Make sure the Offline LED is lit before you pull out the line card.) The line card is activated automatically.
Alternately, if you have not removed a line card you deactivated with the system hotswap out command, you can reactivate it with the system hotswap in command. For example, to reactivate a line card in slot 7, enter the following command in Enable mode:
ssr# system hotswap in slot 7
14 SmartSwitch Router User Reference Manual

Removing the Line Card

To remove a line card from the SSR:
1. Make sure the Offline LED on the line card is lit.
Do not remove the line card unless the Offline LED is lit. Doing so can cause the
Warning
SSR to crash.
2. Loosen the captive screws on each side of the line card.
3. Carefully remove the line card from its slot in the SSR chassis.
:

Installing a New Line Card

To in stall a new line card:
1. Slide the line card all the way into the slot, firmly but gently pressing the line card
fully in place to ensure that the pins on th e back of th e line card are completely seated in the backplane.
Chapter 2: Hot Swapping Line Cards and Control Modules
Note:
2. Tighten the captive screws on each side of the line card to secure it to the chassis.
Once the line card is installed, the SSR recognizes and activates it. The Online LED button lights.
Make sure the circuit card (and not the metal plate) is between the card guides. Check both the upper and lower tracks.

Hot Swapping One Type of Line Card With Another

You can hot swap one type of line card with another type. For example, you can replace a 10/100Base-TX line card with a 1000Base-SX line card. The SSR can be configured to accommodate whichever line card is installed in the slot. When one line card is installed, configuration statements for that line card are used; when you remove the line card from the slot and replace it with a different type, configuration statements for the n ew line ca rd take effect.
To set this up, you must include configuration statements for both line cards in the SSR configuration file. The SSR determines which line card is installed in the slot and uses the appropriate configuration statements.
For example, you may have an SSR with a 10/100Base-TX line card in slot 7 and want to hot swap it with a 1000Base-SX line card. If you include statements for both line cards in the SSR configuration file, the statements for the 1000Base-SX take effect immediately after you install it in slot 7.
SmartSwitch Router User Reference Manual 15
Chapter 2: Hot Swapping Line Cards and Control Modules

Hot Swapping a Secondary Control Module

If you have a secondary Control Module installed on the SSR, you can hot swap it with another Control Module or line card.
You can only hot swap an inactive Control Module. You should never remove the
Warning
active Control Module from the SSR. Doing so will crash the system.
The procedure for hot swapping a Control Module is similar to the procedure for hot swapping a line card. You must deactivate the Control Module, remove it from the SSR, and insert another Control Module or line card in the slot.

Deactivating the Control Module

To deactivate the Control Module:
1. Determine which is the secondary Control Module.
:
Control Modules can reside in slot CM or slot CM/1 on the SSR. Usually slot CM contains the primary Control Module, and slot CM/1 contains the secondary Control Module. On the primary Control Module, the Online LED is lit, and on the secondary Control Module, the Offline LED is lit.
Note:
The Offline LED on the Control Module has a different function from the Offline LED on a line card. On a line car d, it m eans tha t the line card has been deactivated. On a Control Module, a lit Offline LED means that it is standing by to take over as the primary Control Module if necessary; it does not mean that the Control Module has been deactivated.
2. Press the Hot Swap button on the secondary Control Module. When you press the Hot Swap button, all the LEDs on the Control Module (including
the Offline LED) are deactivated. Figure 3 shows the location of the Offline LED and Hot Swap button on a Control Module.
SSR-CM2 CONTROL MODULE
Console
10/100 Mgmt
RST
OK
SYS
ERR DIAG
HBT
Hot Swap Button
Online Offline
Hot
Swap
Offline LED
Figure 3. Location of Offline LED and Hot Swap Button on a Control Module
16 SmartSwitch Router User Reference Manual
You can also use the system hotswap out command in the CLI to deactivate the Control Module. For example, to deactivate the secondary Contr ol M odule in slot CM/1, ente r the following command in Enable mode:
ssr# system hotswap out slot 1
After you enter this command, the Offline LED on the Control Module lights, and messages appear on the console indicating the Control Module is inoperative.

Removing the Control Module

To remove a Control Module from the SSR:
1. Make sure that none of the LEDs on the Control Module are lit.
2. Loosen the captive screws on each side of the Control Module.
3. Carefully remove the Control Module from its slot in the SSR chassis.
Chapter 2: Hot Swapping Line Cards and Control Modules

Installing a Control Module

To in stall a new Control Module or line card into the slot:
Note:
1. Slide the Control Module or line card all the way into the slot, firmly but gently
2. Tighten the captive screws on each side of the Control Module or line card to secure it
You can install either a line card or a Control Module in slot CM/1, but you can install only a Control Module in slot CM.
pressing it in place to ensure that the pins on the back of the card are completely seated in the backplane.
Note:
to the chassis. On a line card, the Online LED lights, indicating it is now active. On a secondary Control Module, the Offline LED lights, indicating it is standing by to
take over as the primary Control Module if necessary.
Make sure the circuit card (and not the metal plate) is between the card guides. Check both the upper and lower tracks.
SmartSwitch Router User Reference Manual 17
Chapter 2: Hot Swapping Line Cards and Control Modules

Hot Swapping a Switching Fabric Module (SSR 8600 only)

The SSR 8600 has slots for two Switching Fabric Modules. While the SSR 8600 is operating, you can install a second Switching Fabric Module. If two Switching Fabric Modules are installed, you can hot swap one of them.
When you remove one of the Switching Fabric Modules, the other goes online and st ays online until it is removed or the SSR 8600 is powered off. When the SSR 8600 is powered on again, the Switching Fabric Module in slot “Fabric 1,” if one is installed there, becomes the active Switching Fabric Module.
You can only hot swap a Switching Fabric Module if two are installed on the SSR
Warning
8600. If only one Switching Fabric Module is installed, and you remove it, the SSR 8600
will crash.
The procedure for h ot swapping a S witching Fabric Module is similar to the pr ocedur e fo r hot swapping a line card or Contr ol Module. You deactivate the Switching Fabric Module, remove it from the SSR, and insert another Switching Fabric Module in the slot.
:
Offline LED
SSR-SF-16
Note:
You cannot deactivate the Switching Fabric Module with the system hotswap command.
To deactivate the Switching Fabric Module:
1. Press the Hot Swap button on the Switching Fabric Module you want to deactivate. The Online LED goes out and the Offline LED lights. Figure 4 shows the location of the
Offline LED and Hot Swap button on a Switching Fabric Module.
Offline Online
Active
Hot
Swap
Hot Swap Button
Switching Fabric
Figure 4. Location of Offline LED and Hot Swap Button on a Switching Fabric
Module
18 SmartSwitch Router User Reference Manual
Chapter 2: Hot Swapping Line Cards and Control Modules

Removing the Switching Fabric Module

To remove the Switching Fabric Module:
1. Loosen the captive screws on each side of the Switching Fabric Module.
2. Pull the metal tabs on the Switching Fabric Module to free it from the connectors
holding it in place in the chassis.
3. Carefully remove the Switching Fabric Module from its slot.

Installing a Switching Fabric Module

To in stall a Switching Fabric Module:
1. Slide the Switching Fabric Module all the way into the slot, firmly but gently pressing
to ensure that the pins on the back of the module are completely seated in the backplane.
Note:
2. Tighten the captive screws on each side of the Switching Fabric Module to secure it to
the chassis.
Make sure the circuit card (and not the metal plate) is between the card guides. Check both the upper and lower tracks.
SmartSwitch Router User Reference Manual 19
Chapter 2: Hot Swapping Line Cards and Control Modules
20 SmartSwitch Router User Reference Manual

Bridging Overview

The SmartSwitch Router provides the following bridging functions:
Compliance with the IEEE 802.1d standard
Chapter 3
Bridging
Configuration
Guide
Compliance with the IGMP multi c ast bridging standard
Wire-speed address-based bridging or flow-based bridging
Ability to logically segment a tr ansparently bridged network into virtual local-area
networks (VLANs), based on physical ports or protocol (IP or IPX or bridged protocols like Appletalk)
Frame filtering based on MAC address for bridged and multicast traffic
Integrated routing and bridging, which supports bridging of intra-VLAN traffic and
routing of inter-VLAN traffic

Spanning Tree (IEEE 802.1d)

Spanning tree (IEEE 802.1d) allows bridges to dynamically discover a subset of the topology that is loop-free. In addition, the loop-free tree that is discovered contains paths to every LAN segment.
SmartSwitch Router User Reference Manual 21
Chapter 3: Bridging Configuration Guide

Bridging Modes (Flow-Based and Address-Based)

The SSR provides the following types of wire-speed bridging:
Address-based bridging - The SSR performs this type of bridging by looking up the destination address in an L2 lookup table on the line card that receives the bridge packet from the network. The L2 lookup table indicates the exit port(s) for the bridged packet. If the packet is addressed to the SSR's own MAC address, the packet is routed rather than bridged.
Flow-based bridging - The SSR performs this type of bridgin g by looking up an entry in the L2 lookup table containing both the source and destination addresses of the received packet in order to determine how the packet is to be handled.
The SSR ports perform address-based bridging by default but can be configured to perform flow-based bridging instead, on a per-port basis. A port cannot be configured to perform both types of bridging at the same time.
The SSR performance is equivalent when performing flow-based bridging or address­based bridging. However, address-based bridging is more efficient because it requires fewer table entries while flow-based bridging provides tighter management and control over bridged traffic.

VLAN Overview

Virtual LANs (VLANs) are a means of dividin g a physical network into several logica l (virtual) LANs. The division can be done on the basis of various criteria, giving rise to different types of VLANs. For example, the simplest type of VLAN is the port-based VLAN. Port-based VLANs divide a network int o a number of VLANs by assigning a VLAN to each port of a switching device. Then, any traffic received on a given port of a switch belongs to the VLAN associated with that port.
VLANs are primarily used for broadcast containment. A layer-2 (L2) broadcast frame is normally transmitted all over a bridged network. By dividing the network into VLANs, the range of a broadcast is limited, i.e., the broadcast frame is transmitted only to the VLAN to which it belongs. This reduces the broadcast traffic on a network by an appreciable factor.
The type of VLAN depends upon one criterion: how a received frame is classified as belonging to a particular VLAN. VLANs can be categorized into the following types:
Port based
MAC address based
Protocol based
Subnet based
22 SmartSwitch Router User Reference Manual
Multicast based
Policy based
Detailed information about these types of VLANs is beyond the scope of this manual. Each type of VLAN is briefly explained in the following subsections.

Port-based VLANs

Ports of L2 devices (switches, bridges) are assigned to VLANs. Any traffic received by a port is classified as belonging to the VLAN to which the port belongs. For example, if ports 1, 2, and 3 belong to the VLAN named “Marketing” , then a bro adcast frame r eceived by port 1 is transmitted on ports 2 and 3. It is not transmitted on any other port.

MAC-address-based VLANs

In this type of VLAN, each switch (or a central VLAN information server) keeps track of all MAC addresses in a network and maps them to VLANs based on information configured by the network administrator. When a frame is received at a port, its destination MAC address is looked up i n the VLAN dat abase. The VLAN database returns the name of the VLAN to which this frame belongs.
Chapter 3: Bridging Configuration Guide
This type of VLAN is powerful in the sense that network devices such as printers and workstations can be moved anywhere in the network without the need for network reconfiguration. However, the administration is intensive because all M AC addresses on the network need to be known and configured.

Protocol-based VLANs

Protocol-based VLANs divide the physical network into logical VLANs based on protocol. When a frame is received at a port, its VLAN is determined by the protocol of the packet. For example, there could be separate VLANs for IP, IPX and Appletalk. An IP broadcast frame will only be sent to all ports in the IP VLAN.

Subnet-based VLANs

Subnet-based VLANs are a subset of pr otocol based VLANs and determine the VLAN of a frame based on the subnet to which the frame belongs. To do this, the switch must look into the network layer header of the incoming frame. This type of VLAN behaves similar to a router by segregating different subnets into different broadcast domains.
SmartSwitch Router User Reference Manual 23
Chapter 3: Bridging Configuration Guide

Multicast-based VLANs

Multicast-based VLANs are created dynamically for multicast groups. Typically, each multicast group corresponds to a different VLAN. This ensures that multicast frames are received only by those ports that are connected to members of the appropriate multicast group.

Policy-based VLANs

Policy-based VLANs are the most general definition of VLANs. Each incoming (untagged) frame is looked up in a policy databa se, which determines th e VLAN to which the frame belongs. For example, you could set up a policy which creates a special VLAN for all E-mail traffic between the m anagement officers of a company, so that this traf fic will not be seen anywhere else.

SSR VLAN Support

The SSR supports:
Port-based VLANs
Protocol-based VLANs
Subnet-based VLANs
When using the SSR as an L2 bridge/switch, use the port-based and protocol-based VLAN types. When using the SSR as a combined switch and router, use the subnet-based VLANs in addition to port-based and protocol-based VLANs. It is not necessary to remember the types of VLANs in order to configure the SSR, as seen in the section on configuring the SSR.
VLANs and the SSR
VLANs are an integral part of the SSR family of switching routers. The SSR switching routers can function as layer-2 (L2) switches as well as fully-functional layer-3 (L3) routers. Hence they can be viewed as a switch and a router in one box. To provide maximum performance and functionality, the L2 and L3 aspects of the SSR switching routers are tightly coupled.
The SSR can be used purely as an L2 switch. Frames arriving at any port are bridged and not routed. In this case, setting up VLANs and associating ports with VLANs is all that is required. You can set up the SSR switching router to use port-based VLANs, protocol­based VLANs, or a mixture of the two types.
The SSR can also be used purely as a router, i.e., each physical port of the SSR is a separate routing interface. Packets received at any interface are routed and not bridged. In this case, no VLAN configuration is required. Note that VLANs are still created implicitly by
24 SmartSwitch Router User Reference Manual
Chapter 3: Bridging Configuration Guide
the SSR as a result of creating L3 interfaces for IP and/or IPX. However, these implicit VLANs do not need to be created or configured manually. The implicit VLANs created by the SSR are subnet-based VLANs.
Most commonly, an SSR is used as a combined switch and router. For example, it may be connected to two subnets S1 and S2. Ports 1-8 belong to S1 and ports 9-16 belong to S2. The required behavior of the SSR is that intra-subnet frames be bridged and inter-subnet packets be routed. In other words, traffic between two workstations that belong to the same subnet should be bridged, and traffic between two workstations that belong to different subnets should be routed.
The SSR switching routers use VLANs to achieve this behavior. This means that a L3 subnet (i.e., an IP or IPX subnet) is mapped to a VLAN. A given subnet maps to exactly one and only one VLAN. With this definition, the terms VLAN and subnet are almost interchangeable.
To configure an SSR as a combined switch and router, the administrator must create VLANs whenever multiple ports of the SSR are to belong to a particular VLAN/subnet. Then the VLAN must be bound to an L3 (IP/IPX) interface so that the SSR knows which VLAN maps to which IP/IPX subnet.
Ports, VLANs, and L3 Interfaces
The term port refers to a physical connector on the SSR, such as an ethernet port. Each port must belong to at least one VLAN. When the SSR is unco nf igured, each port belongs to a VLAN called the “default VLAN”. By creating VLANs and adding ports to the created VLANs, the ports are moved fro m the default VLAN to the newly cr eated VLANs.
Unlike traditional routers, the SSR has the concept of logical interfaces rather than physical interfaces. An L3 interface is a logical entity created by the administrator. It can contain more than one physical port. When an L3 interface contains exactly one physical port, it is equivalent to an interface on a traditional router. When an L3 interface contains several ports, it is equivalent to an interface of a traditional router which is connected to a layer-2 device such as a switch or bridge.
Access Ports and Trunk Ports (802.1Q support)
The ports of an SSR can be classified into two types, based on VLAN functionality: access ports and trunk ports. By default, a port is an access port. An access po rt can belong to at
most one VLAN of the following types: IP, IPX or bridged protocols. The SSR can automatically determine whether a received frame is an IP frame, an IPX frame or neither. Based on this, it selects a VLAN for the frame. Frames transmitted out of an access port are untagged, meaning that they contain no special information about the VLAN to which they belong. Untagged frames are classified as belonging to a particular VLAN based on the protocol of the frame and the VLAN configured on the r eceiving port for that protocol.
SmartSwitch Router User Reference Manual 25
Chapter 3: Bridging Configuration Guide
For example, if port 1 belongs to VLAN IPX_VLAN for IPX, VLAN IP_VLAN for IP and VLAN OTHER_VLAN for any other protocol, then an IP frame received by port 1 is classified as belonging to VLAN IP_VLAN.
Trunk ports (802.1Q) are usually used to connect one VLAN-aware switch to another. They carry traffic belonging to several VLANs. For example, suppose that SSR A and B are both configured with VLANs V1 and V2.
Then a frame arriving at a port on SSR A must be sent to SSR B, if the frame belongs to VLAN V1 or to VLAN V2. Thus the ports on SSR A and B which connect the two SSRs together must belong to both VLAN V1 and VLAN V2. Also, when these ports receive a frame, they must be able to determine whether the frame belongs to V1 or to V2. This is accomplished by “tagging” the frames, i.e., by prepending information to the frame in order to identify the VLAN to which the frame belongs. In the SSR switching routers, trunk ports always transmit and receive tagged frames only. The format of the tag is specified by the IEEE 802.1Q standard. The only exception to this is Spanning Tree Protocol frames, which are transmitted as untagged frames.
Explicit and Implicit VLANs
As mentioned earlier, VLANs can either be created explicitly by the administrator (explicit VLANs) or are created implicitly by the SSR when L3 interfaces are created (implicit VLANs).

Configuring SSR Bridging Functions

Configuring Address-based or Flow-based Bridging

The SSR ports perform address-based bridging by default but can be configured to perform flow-based bridging instead of address-based bridging, on a per-port basis. A port cannot be configured to perform both types of bridging at the same time.
The SSR performance is equivalent when performing flow-based bridging or address­based bridging. However, address-based bridging is more efficient because it requires fewer table entries while flow-based bridging provides tighter management and control over bridged traffic.
For example, the following illustration shows an SSR with traffic being sent from port A to port B, port B to port A, port B to port C, and port A to port C.
26 SmartSwitch Router User Reference Manual
Chapter 3: Bridging Configuration Guide
SSR
ABC
The corresponding bridge tables for address-based and flow-based bridging are shown below. As shown, the bridge table contains more information on the traffic patterns when flow-based bridging is enabled compared to address-based bridging.
Address-Based Bridge Table Flow-Based Bridge Table
A (source) A B (source) B A C (destination) B
With the SSR configured in flow-based bridging mode, the network manager has “per flow” control of layer-2 traffic. The network manager can then apply Quality of Service (QoS) policies or security filters based on layer-2 traffic flows.
To enable flow-based bridging on a port, enter the following command in Configure mode.
Configure a port for flow-based bridging.
To change a port from flow-based bridging to address-based bridging, enter the following command in Configure mode:
Change a port from flow­based bridging to address­based bridging.
negate <line-number of active config containing command>:
port flow-bridging <port-list>|all-ports
port flow-bridging
A
B
C
C
<port-list>|all-ports
SmartSwitch Router User Reference Manual 27
Chapter 3: Bridging Configuration Guide

Configuring Spanning Tree

Note:
The SSR supports per VLAN spanning tree. By default, all the VLANs defined belong to the default spanning tree. You can create a separate instance of spanning tree using the following command:
By default, spanning tree is disabled on the SSR. To enable spanning tree on the SSR, you perform the following tasks on the ports where you want spanning tree enabled..
Enable spanning tree on one or more ports for default spanning tree.
Enable spanning tree on one or more ports for a particular VLAN.
Some commands in this facility require updated SSR hardware. Please refer to
Appendix A for details.
Create spanning tree for a VLAN.
pvst create spanningtree vlan-name
stp enable port <port-list>
pvst enable port <port-list> spanning-tree
<string>

Adjusting Spanning-Tree Parameters

<string>
You may need to adjust certain spanning-tree parameters if the default values are not suitable for your bridge configuration. Parameters affecting the entire spanning tree are configured with variations of the bridge global configuration command. Interf ace-specific parameters are configured with variations of the bridge-group interface configuration command.
You can adjust spanning-tree parameters by performing any of the tasks in the following sections:
Set the Bridge Priority
Set an Interface Priority
Note:
Only network administrators with a good understanding of how bridges and the Spanning-Tree Protocol work should make adjustments to spanning-tree parameters. Poorly chosen adjustments to these parameters can have a negative impact on performance. A good source on bridging is the IEEE 802.1d specification.
28 SmartSwitch Router User Reference Manual
Setting the Bridge Priority
You can globally configure the priority of an individual bridge when two bridges tie for position as the root bridge, or you can configure the likelihood that a bridge will be selected as the root bridge. The lower the bridge's priority, the more likely the bridge will be selected as the root bridge. This priority is determined by default; however, you can change it.
To set the bridge priority, enter the following command in Configure mode:
Chapter 3: Bridging Configuration Guide
Set the bridge priority for default spanning tree.
Set the bridge priority for a particular instance of spanning tree.
Setting a Port Priority
You can set a priority for an interface. When two bridges tie for position as the root bridge, you configure an interface priority to break the tie. The bridge with the lowest interface value is elected.
To set an interface priority, enter the following command in Configure mode:
Establish a priority for a specified interface for default spanning tree.
Establish a priority for a specified interface for a particular instance of spanning tree.
Assigning Port Costs
stp set bridging priority <num>
pvst set bridging spanning-tree <string> priority <num>
stp set port <port-list> priority <num>
pvst set port <port-list> spanning-tree
<string> priority <num>
Each interface has a port cost associated with it. By convention, the port cost is 1000/data rate of the attached LAN, in Mbps. You can set different port costs.
To assign port costs, enter the following command in Configure mode:
Set a different port cost other than
stp set port <port-list> port-cost <num>
the defaults for default spanning tree.
Set a different port cost other than the defaults for a particular instance
pvst set port <port-list> spanning-tree
<string> port-cost <num>
of spanning tree.
SmartSwitch Router User Reference Manual 29
Chapter 3: Bridging Configuration Guide
Adjusting Bridge Protocol Data Unit (BPDU) Intervals
You can adjust BPDU intervals as described in the following sections:
Adjust the Interval between Hello BPDUs
Define the Forward Delay Interval
Define the Maximum Idle Interval
Adjusting the Interval between Hello Times
You can specify the interval between hello time.
To adjust this interval, enter the following command in Configure mode:
Specify the interval between hello
stp set bridging hello-time <num>
time for default spanning tree. Specify the interval between hello
time for a particular instance of
pvst set bridging spanning-tree <string> hello-time <num>
spanning tree.
Defining the Forward Delay Interval
The forward delay interval is the amount of time spent listening for topology change information after an interface has been activated for bridging and before forwarding actually begins.
To change the default interval setting, enter the following command in Configure mode:
Set the default of the forward delay
stp set bridging forward-delay <num>
interval for default spanning tree. Set the default of the forward delay
interval for a particular instance of
pvst set bridging spanning-tree <string> forward-delay <num>
spanning tree.
Defining the Maximum Age
If a bridge does not hear BPDUs from the root bridge within a specified interval, it assumes that the network has changed and recomputes the spanning-tree topology.
30 SmartSwitch Router User Reference Manual
Chapter 3: Bridging Configuration Guide
To change the default interval setting, enter the following command in Configure mode:
Change the amount of time a bridge will wait to hear BPDUs from the root bridge for default spanning tree.
Change the amount of time a bridge will wait to hear BPDUs from the root bridge for a particular instance of spanning tree.
stp set bridging max-age <num>
pvst set bridging spanning-tree
<string> max-age <num>

Configuring a Port- or Protocol-Based VLAN

To create a port or protocol based VLAN, perform the following steps in the Configure mode.
1. Create a port or protocol based VLAN.
2. Add physical ports to a VLAN.
Creating a Port or Protocol Based VLAN
To create a VLAN, enter the following command in Configure mode.
Create a VLAN. vlan create <vlan-name> <type> id <num>
Adding Ports to a VLAN
To add ports to a VLAN, enter the following command in Configure mode.
Add ports to a VLAN. vlan add ports <port-list> to <vlan-name>

Configuring VLAN Trunk Ports

The SSR supports standards-based VLAN trunking between multiple SSRs as defined by IEEE 802.1Q. 802.1Q adds a header to a standard Ethernet frame which includes a unique VLAN id per trunk between two SSRs. These VLAN IDs extend the VLAN broadcast domain to more than one SSR.
To configure a VLAN trunk, enter the following command in the Configure mode.
Configure 802.1Q VLAN trunks. vlan make <port-type> <port-list>
SmartSwitch Router User Reference Manual 31
Chapter 3: Bridging Configuration Guide

Configuring VLANs for Bridging

The SSR allows you to create VLANs for AppleTalk, DECnet, SNA, and IPv6 traffic as well as for IP and IPX traffic. You can create a VLAN for handling traffic for a single protocol, such as a DECnet VLAN. Or, you can create a VLAN that supports several specific protocols, such as SNA and IP traffic.
Note:
Some commands in this facility require updated SSR hardware. Please refer to
Appendix A for details.

Configuring Layer-2 Filters

Layer-2 security filters on the SSR allow you to configure ports to filter specific MAC addresses. When defining a Layer-2 security filter, you specify to which ports you want the filter to apply. Refer to the “Security Configuration Chapter” for details on configuring Layer-2 filters. You can specify the following security filters:
Address filters These filters block traffic based on the frame's source MAC address, destination MAC
address, or both source and destination MAC addresses in flow bridging mode. Address filters are always configured and applied to the input port.
Port-to-address lock filters These filters prohibit a user connected to a locked port or set of ports from using
another port.
Static entry filters These filters allow or force traffic to go to a set of destination ports based on a frame's
source MAC address, destination MAC address, or both source and destination MAC addresses in flow bridging mode. Static entries are always configured and applied at the input port.
Secure port filters A secure filter shuts down access to the SSR based on MAC addresses. All packets
received by a port are dropped. When combined with static entries, however, these filters can be used to drop all received traffic but allow some frames to go through.
32 SmartSwitch Router User Reference Manual

Monitoring Bridging

The SSR provides display of bridging statistics and configurations conta ined in the SSR.
To display bridging information, enter the following commands in Enable mode.
Chapter 3: Bridging Configuration Guide
Show IP routing table. Show all MAC addresses currently
in the l2 tables. Show l2 table information on a
specific port. Show information the master MAC
table. Show informa t ion on a specific
MAC address. Show information on MACs
registered. Show all VLANs.

Configuration Examples

VLANs are used to associate physical ports on the SSR with connected hosts that may be physically separated but need to participate in the same broadcast domain. To associate ports to a VLAN, you must first create a VLAN and then assign ports to the VLAN. This section shows examples of creating an IP or IPX VLAN and a DECnet, SNA, and AppleTalk VLAN.
ip show routes
l2-tables show all-macs
l2-tables show port-macs
l2-tables show mac-table-stats
l2-tables show mac
l2-table show bridge-management
vlan show

Creating an IP or IPX VLAN

In this example, servers connected to port gi.1.(1-2) on the SSR need to communicate with clients connected to et.4.(1-8). You can associate all the ports containing the clients and servers to an IP VLAN called ‘BLUE’.
First, create an IP VLAN named ‘BLUE’
ssr(config)# vlan create BLUE ip
Next, assign ports to the ‘BLUE’ VLAN.
ssr(config)# vlan add ports et.4.(1-8),gi.1.(1-2) to BLUE
SmartSwitch Router User Reference Manual 33
Chapter 3: Bridging Configuration Guide

Creating a non-IP/non-IPX VLAN

In this example, SNA, DECnet, and AppleTalk hosts are connected to et.1.1 and et.2.(1-4). You can associate all the ports containing these hosts to a VLAN called ‘RED’ with the VLAN ID 5.
First, create a VLAN named ‘RED’
ssr(config)# vlan create RED sna dec appletalk id 5
Next, assign ports to the ‘RED’ VLAN.
ssr(config)# vlan add ports et.1.1, et.2.(1-4) to RED
34 SmartSwitch Router User Reference Manual

Overview

This chapter explains how to configure and monitor SmartTRUNKs on the SSR. A SmartTRUNK is Cabletron Systems’ technology for load balancing and load sharing. For a description of the SmartTRUNK commands, see the “smarttrunk commands” section of the SmartSwitch Router Com man d Line Interface Reference Manual.
Chapter 4
SmartTRUNK
Configuration
Guide
On the SSR, aSmartTRUNK is a group of two or more ports that have been logically combined into a single port. Multiple physical connections between devices are aggregated into a single logical, high-speed path that acts as a single link. Traffic is balanced across all interfaces in the combined link, increasing overall availab le system bandwidth.
SmartTRUNKs allow administrators the ability to increase bandwidth at congestion points in the network, thus eliminating potential traffic bottlenecks. SmartTRUNKs also provide improved data link resiliency. If one port in a SmartTRUNK should fail, its load is distributed evenly among the remaining ports and the entire SmartTRUNK link remains operational.
SmartTRUNK is Cabletron’s standard for building high-performance links between Cabletron’s switching platforms. SmartTRUNKs can interoperate with switches, routers, and servers from other vendors as well as Cabletron platforms.
SmartTRUNKs are compatible with all SS R features, including VLANs, STP, VRRP, etc. SmartTRUNK operation is supported over different media types and a variety of technologies including 10/100/1000 Mbps Ethernet.
SmartSwitch Router User Reference Manual 35
Chapter 4: SmartTRUNK Configuration Guide

Configuring SmartTRUNKs

To create a SmartTRUNK:
1. Create a SmartTRUNK and specify a control protocol for it.
2. Add physical ports to the SmartTRUNK.
3. Specify the policy for distributing traffic across SmartTRUNK ports. This step is optional; by default, the SSR distributes traffic to ports in a round-robin (sequential) manner.

Creating a SmartTRUNK

When you create a SmartTRUNK, you specify if the DEC Hunt Group control protocol is to be used or no control protocol is to be used:
If you are connecting the SmartTRUNK to another SSR, other Cabletr on devices (such as the SmartSwitch 6000 or SmartSwitch 9000), or Digital GIGAswitch/Router, specify the DEC Hunt Gr ou p contr ol p r otocol . The Hunt Gr oup pr ot ocol is useful in dete cting errors like transmit/receive failures, misconfiguration, etc.
If you are connecting the SmartTRUNK to a device that does not support the DEC Hunt Group control protocol, such as those devices that support Cisco’s EtherChannel technology, specify no control protocol. Only link failures are detected in this mode.
To create a SmartTRUNK, enter the following command in Configure mode:
Create a SmartTRUNK that will be connected to a device that supports the DEC Hunt Group c ontrol protocol.
Create a SmartTRUNK that will be connected to a device that does not support the DEC Hunt Group control protocol.

Add Physical Ports to the SmartTRUNK

You can add any number of ports to a SmartTRUNK. The limit is the number of ports on the SSR. Any port on a ny module can be part of a SmartTRUNK. If one m odule should go down, the remaining ports on other modules will remain operational.
Ports added to a SmartTRUNK must:
Be set to full duplex.
Be in the same VLAN.
smarttrunk create <smarttrunk>
protocol huntgroup
smarttrunk create <smarttrunk>
protocol no-protocol
Have the same properties (L2 aging, STP state, and so on).
36 SmartSwitch Router User Reference Manual
Chapter 4: SmartTRUNK Configuration Guide
To add ports to a SmartTRUNK, enter the following command in Configure mode::
Create a SmartTRUNK that will be connected
smarttrunk add ports <port list>
to a device that supports the DEC Hunt Group control protocol.

Specify Traffic Distribution Policy (Optional)

The default policy for distributing traffic across the ports in a SmartTRUNK is “round­robin,” where the SSR selects the port on a rotating basis. The other policy that can be chosen is “link-utilization,” where packets are sent to the least-used port in a SmartTRUNK. You can choose to specify the link-utilization policy for a particular SmartTRUNK, a list of SmartTRUNKs, or for all SmartTRUNKs on the SSR.
Specify traffic distribution policy.
smarttrunk set load-policy on <smarttrunk
list>
|all-smarttrunks round-robin|link-
utilization

Monitoring SmartTRUNKs

Statistics are gathered f o r data flow ing through a SmartTRUNK and each port in the SmartTRUNK.
to <smarttrunk>
To display SmartTRUNK statistics, enter one of the following commands in Enable mode:.
Display information about all
smarttrunk show trunks
SmartTRUNKS and the control protocol used.
Display statistics on traffic distribution on SmartTRUNK
Display information about the control protocol on a
smarttrunk show distribution <smarttrunk
|all-smarttrunks
list>
smarttrunk show protocol-state <smarttrunk
list>
|all-smarttrunks
SmartTRUNK. Display information about the
SmartTRUNK connection (DEC
smarttrunk show connections <smarttrunk
list>
|all-smarttrunks
Hunt Group control protocol connections only).
To clear statistics for SmartTRUNK ports, enter the following command in Enable mode:.
Clear load distribution statistics for SmartTRUNK ports.
smarttrunk clear load-distribution
<smarttrunk list>|all-smarttrunk
SmartSwitch Router User Reference Manual 37
Chapter 4: SmartTRUNK Configuration Guide

Example Configurations

The following shows a network design based on SmartTRUNKs. R1 is an SSR operating as a router, while S1 and S2 are SSRs operating as switches.
Cisco 7500 Router
10.1.1.1/24
st.1 st.2 st.4
Router
R1
10.1.1.2/24 to-cisco
12.1.1.2/24 to-s2
11.1.1.2/24 to-s1
st.3
Switch
S2
st.5
Cisco Catalyst 5K Switch
The following is the configuration for the Cisco 7500 router:
interface port-channel 1 ip address 10.1.1.1 255.255.255.0 ip route-cache distributed interface fasteth 0/0 no ip address channel-group 1
Switch
S1
Server
The following is the configuratio n f or the Cisco Catalyst 5K switch:
set port channel 3/1-2 on
38 SmartSwitch Router User Reference Manual
Chapter 4: SmartTRUNK Configuration Guide
The following is the SmartTRUNK configuration for the SSR labeled ‘R1’ in the diagram:
smarttrunk create st.1 protocol no-protocol smarttrunk create st.2 protocol huntgroup smarttrunk create st.3 protocol huntgroup smarttrunk add ports et.1(1-2) to st.1 smarttrunk add ports et.2(1-2) to st.2 smarttrunk add ports et.3(1-2) to st.3
interface create ip to-cisco address-netmask 10.1.1.2/24 port st.1 interface create ip to-s1 address-netmask 11.1.1.2/24 port st.2 interface create ip to-s2 address-netmask 12.1.1.2/24 port st.3
The following is the SmartTRUNK configuration for the SSR labeled ‘S1’ in the diagram:
smarttrunk create st.2 protocol huntgroup smarttrunk create st.4 protocol no-protocol smarttrunk add ports et.1(1-2) to st.2 smarttrunk add ports et.2(1-2) to st.4
The following is the SmartTRUNK configuration for the SSR labeled ‘S2’ in the diagram:
smarttrunk create st.3 protocol huntgroup smarttrunk create st.5 protocol no-protocol smarttrunk add ports et.1(1-2) to st.3 smarttrunk add ports et.2(1-2) to st.5
SmartSwitch Router User Reference Manual 39
Chapter 4: SmartTRUNK Configuration Guide
40 SmartSwitch Router User Reference Manual

ATM Overview

This chapter provides an overview of the Asynchronous Transfer Mode (ATM) features available for the SmartSwitch Router. A TM is a cell switching technology used to establish multiple connections over a physical link, and configure each of these connections with its own traffic parameters. This provides more control over specific connections within a network.
The ATM line card pr ovides an ATM interface, allowing integration of ATM with Ethernet and other interfaces within a network topology supported by the SmartSwitch Router. This chapter discusses the following ta sks:
Chapter 5
ATM Configuration
Guide
Creating a Virtual Channel
Creating a Service Class Defi ni t i on
Applying a Service Class Definition
Enabling Cell Scrambling
Selecting the Cell Mapping Format
Setting the Bit Allocation for VPI
Displaying ATM Statistics

Virtual Channels

A virtual channel is a point-to-point connection that exists within a ph ysical connection. You can create multiple virtual channels within one physical connection, with each virtual
SmartSwitch Router User Reference Manual 41

Service Class Definition

channel having its own traffic parameters. The name “virtual” implies that the connection is located in silicon instead of a physical wire. Refer to “Creating a Service Class
Definition” on page 43 for information about defining a set of traffic parameters for a
virtual channel.

Creating a Virtual Channel

To create a virtual channel, enter the following command in Configure mode:
Creates a virtual channel. atm create vcl port <port li s t >
The following is a description of the parameter used to create a virtual channel:
port <port list> This parameter identifies the ATM port as well as the virtual channel
identifier (vci) and virtual path identifier (vpi). Specify this parameter in the format: media.slot.port.vpi.vci
media Specifies the media type. This is at for ATM ports.
slot Specifies the slot number where the module is installed.
port Specifies the port on where you want to create a virtual channel.
vpi Specifies the Virtual Path Identifier. This number identifies a particular
virtual path.
vci Specifies the Virtual Channel Identifier. This number identifies a
particular virtual channel.
The combination of VPI and VCI is known as the VPI/VCI pair, and identifies the virtual channel.
Note:
Do not specify a VPI of 0 with VCI numbers 0 through 31. These VPI/VCI pairs are reserved by the ATM forum for signaling and setup connections.
Service Class Definition
ATM provides the ability to specify traffic parameters for each virtual channel. These parameters define the bandwidth characteristics and delay guarantees. You can apply a different set of traffic paramet ers for each virtual channel. This prov i des network administrators more control of their network resources and more options in connections to accommodate different user needs.
42 SmartSwitch Router User Reference Manual

Creating a Service Class Definition

To create a service class definition, enter the following command in Configure mode:
Creates a service class definition. atm define service <string> [srv-cat cbr| ubr| rt-
The following is a description of the parameters used to create a service class definition:
service <string>Specifies a name for the service class definition. The maximum length is
32 characters.
srv-cat Defines the service category for the service class definition:
cbr Constant Bit Rate provides a guaranteed constant bandwidth
specified by the Peak Cell Rate (PCR). This service category requires only the PCR value. The Sustainable Cell Rate (SCR) and Maximum Burst Size (MBS) values are ignor ed. This service category is intended for applications that require constant cell rate guarantees such as uncompressed voice or video transmission.
Service Class Definition
vbr| nrt-vbr] [pcr] [pcr-kbits] [scr] [scr-kbits] [mbs] [encap routed-llc| routed-vcmux] [oam on| off]
ubr Unspecified Bit Rate is strictly best effort and runs at the available
bandwidth. Users may limit the bandwidth by specifying a PCR value. The SCR and MBS are ignored. This service class is intended for applications that do not require specific traffic guarantees. UBR is the default.
rt-vbr Real-Time Variable Bit Rate provides a guaranteed constant
bandwidth (specified by the SCR), but also provides for peak bandwidth requirements (specified by the PCR). This service category requires the PCR, SCR, and MBS options and is intended for applications that can accommodate bursty real-time traffic such as compressed voice or video.
nrt-vbr Non Real-Time Variable Bit Rate provides a guaranteed constant
bandwidth (specified by the SCR), but also provides for peak bandwidth requirements (specified by the PCR). This service category requires the PCR, SCR, and MBS options and is intended for applications that can accommodate bursty traffic with no need for real-time guarantees.
pcr Specifie s the Peak Cell Rate, which defines the maximum cell transmission
rate. The default is 176603 cells/sec. This parameter is valid for CBR, rtVBR, and nrtVBR service categories. This parameter is optional for UBR.
pcr-kbits Specifies the Peak Cell Rate, which defines the maximum cell trans mission
rate, expressed in kbits/sec. The default is 149759 kbits/sec (176603
SmartSwitch Router User Reference Manual 43
Service Class Definition
scr Specifies the Sustainable Cell Rate which defines the average cell rate. The
scr-kbits Specifies the Sustainable Cell Rate which defines the average cell rate. The
mbs Specifies the Maximum Burst Size in cells. MBS specifies how many cells can
cells/sec). This is the same as PCR, but is expressed in kbits/sec, and therefore may be a more convenient form. However, since the natural unit for ATM is cells/sec, there may be a difference in the actual rate because the kbit/sec value may not be an integral number of cells. This parameter is valid for CBR, rtVBR, and nrtVBR service categories. This parameter is o ptional for UBR.
default is 0 cells/sec. This parameter is valid only for rtVBR and nrtVBR service categories.
default is 0 kbits/sec. This is the same as SCR, but is expressed in kbits/sec, and therefore may be a more convenient form. However, since the natural unit for ATM is cells/sec, there may be a difference in the actual rate because the kbit/sec value may not be an integral number of cells. This parameter is valid only for rtVBR and nrtVBR service categories.
be transmitted at the Peak Cell Rate. The default is 0 cells. This parameter is valid only for rtVBR and nrtVBR service categories.
encap Specifies the encapsulation scheme to transport multi protocol data over the
AAL5 layer:
routed-llc Logical link control. This is the default.
routed-vcmux VC-based multiplexing.
oam OAM (Operation, Administration, and Management) loopback cells are used
to provide loopback capabilities and confirm whether a VC connection is up. Only F5 OAM segments are supported, which provides loopback capabilities on a VC connection level. This parameter turns OAM ON or OFF on the PVC. The default is OFF. OAM OFF means that the SSR responds to F5 OAM requests, but will not generate F5 OAM responses.

Applying a Service Class Definition

To apply a service class definition to a virtual channel, virtual path, or an ATM port, enter the following command in Configure mode:
Applies a service class definition. atm apply service <string> port <port list>
The following is a description of the parameters used to apply a service class definition:
service <string>Specifies the name of the service class definition which you want to apply.
The maximum length is 32 characters.
44 SmartSwitch Router User Reference Manual

Cell Scrambling

port <port list> Specifies the port, in the format: media.slot.port.vpi.vci
media Specifies the media type. This is at for ATM ports.
slot Specifies the slot number where the module is installed.
port Specifies the port number.
vpi Specifies the Virtual Path Identifier. This parameter identifies the virtual
path. This parameter is optional.
vci Specifies the Virtual Channel Identifier. This parameter identifies the
virtual channel. This parameter is opti onal.
An important concept when applying service class definitions is the concept of inheritance. Since a service class definition can be applied to a virtual cha nnel, virtual path, or an ATM port, the actual connection can inherit the service class definition from any one of the three. The virtual channel will inherit the service cla ss definition that is dire ctly applied on it. If no service class was applied to the virtual channel, the connection will inherit the service class applied to the virtual path. If no service class definition was applied to the virtual path, then the connection will inherit the service class applied to the ATM port. If no service class was applied to the port, then the default service class UBR is applied.
Cell Scrambling
Cell scrambling is useful for optimizing the transmission density of the data stream. Since all transmissions use the same source clock for timing, scrambling the cell using a random number generator converts the data stream to a more random sequence. This ensures optimal transmission density of the data stream.

Enabling Cell Scrambling

This command allows you to enable cel l scrambling for the PDH (plesiochronous digit al hierarchy) physical (PHY) interfaces available on the ATM line card, such as T1, T3, E1, and E3 PHYs.
Note:
To enable cell scrambling on an ATM port, enter the following command in Configure mode:
For cell scrambling on the SONET PHY interfaces, refer to the SONET commands.
Enables cell scrambling on an ATM port.
atm set port <port list> pdh-cell-scramble on| off
SmartSwitch Router User Reference Manual 45

Cell Mapping

The following is a description of the parameters used to enable cell scrambling:
port <port list> Specifies the port, in the format: media.slot.port. Specify all-ports to
media Specifies the media type. This is at for ATM ports.
slot Specifies the slot number where the module is installed.
port Specifies the port number.
pdh-cell-scramble on|off
Cell Mapping
The ATM cells are mapped into a PDH (E3, T3, E1) frame using two different mapping formats. The two mapping formats available are direct ATM cell m appin g a nd physical layer convergence protocol (PLCP ) mapping.
enable cell scrambling on all ports.
Specify on to enable cell scrambling. Specify off to disable cell scrambling.

Selecting the Cell Mapping Format

To select a cell mapping format on an ATM port, enter the following command in Configure mode:
Selects a cell mapping format on an ATM port.
The following is a description of the parameters used to select the cell mapping format:
port <port list> Specifies the port, in the format: media.slot.port. Specify all-ports to
select the cell mapping format for all ports.
media Specifies the media type. This is at for ATM ports.
slot Specifies the slot number where the module is installed.
port Specifies the port number.
cell-mapping direct|plcp
Specify direct to select direct ATM cell mapping. Specify plcp to select PLCP mapping.
atm set port <port list> cell-mapping direct| plcp
46 SmartSwitch Router User Reference Manual

Creating a Non-Zero VPI

The Virtual Path Identifier defines a virtual path, a grouping of virtual channels transmitting across the same physical connection. The actual number of virtual paths and virtual channels available on an ATM port depends upon how many bits are allocated for the VPI and VCI, respectively. By default, there are 0 bits allocated for VPI and 12 bits allocated for VCI. You can specify a different allocation of bits for VPI and VCI for a port.
There are 12 bits available for each VPI/VCI pair per port. The number of bits allocated define the amount of VPI and VCI values available. The following equations define the number of virtual paths and virtual channels:
# of virtual paths = 2 # of virtual channels = 2
The bit allocation command allows you to set the number of bits allocated for VPI; the remaining number of bits are allocated for VCI. Since there are only 12 bits available for each VPI/VCI pair on an ATM port, the more bits you allocate for VPI, the fewer bits remain for VCI.
n
; where n is the number of bits allocated for VPI
(12-n)
Creating a Non-Zero VPI
; where (12-n) is the number of bits allocated for VCI

Setting the Bit Allocation for VPI

To set the bit allocation for VPI on an ATM port, enter the following command in Configure mode:
Sets the number of bits allocated for VPI on a port.
The following is a description of the parameter used to set the num ber of bits allocated for VPI on an ATM port:
port <port list> This parameter identifies the ATM port. Specify this parameter in the
format: media.slot.port. Specify all-ports to set bit allocation on all ports.
media Specifies the media type. This is at for ATM ports.
slot Specifies the slot number where the module is installed.
port Specifies the port number.
vpi-bits <num> This parameter sets the number of bits for VPI. Specify any number
between 1 and 11. The default is 1.
atm set port <port list> vpi-bits <num>
SmartSwitch Router User Reference Manual 47

Displaying ATM Port Information

Displaying ATM Port Information
There are a variety of ATM statistics that can be accessed through the command line interface. The atm show commands can only be used in Enable mode.
To display information about the VPL configurations on an ATM port:
Displays the VPL configurations
atm show vpl port <port list> | all-ports
on an ATM port.
The following is an example of the information that is displayed with the command listed above:
ssr(atm-show)# vpl port at.9.1
VPL Table Contents for Slot 9, Port 1: Virtual Path Identifier: 1 Administrative Status: Up Operational Status: Up Last State Change: 1581 Service Definition: ubr-default Service Class: UBR Peak Bit Rate: Best Effort Sustained Bit Rate: 0 Kbits/sec (0 cps) Maximum Burst Size: 0 cells Encapsulation Type: Routed LLC F5-OAM: Requests & Responses
The following is a description of the display fields:
Virtual Path Identifier Identifies a particular VP.
Administrative Status Shows whether the VP is a via ble network
element.
Up indicates a viable network element. Down indicates a non-viable network element.
Operational Status Shows whether the VP is passing traffic.
Up indicates traffic. Down indicates no traffic.
Last State Change Shows the last time the VP went up or down.
Time is in seconds relative to system bootup.
Service Definition Shows the name of the defined service and its
traffic parameters
48 SmartSwitch Router User Reference Manual
Displaying ATM Port Information
To display information about the service definition on an ATM port:
Displays the service definition on
atm show service| all
an ATM port.
The following is an example of the information that is displayed with the command listed above:
ssr# atm show service all
ubr-default Service Class: UBR Peak Bit Rate: Best Effort Sustained Bit Rate: 0 Kbits/sec (0 cps) Maximum Burst Size: 0 cells Encapsulation Type: Routed LLC F5-OAM: Responses Only
The following is a description of the display fields:
Service Class Shows the type of service class.
UBR indicates Unspecified Bit Rate CBR indicates Constant Bit Rate RT-VBR indicates Real-time Variable Bit Rate NRT-VBR indicates Non Real-time Variable Bit
Rate
Peak Bit Rate Shows the maximum bit transmission rate.
Sustained Bit Rate Shows the average bit transmission rate (in
Kilobits per second).
Maximum Burst Size Shows how many cells can be transmitted at th e
Peak Bit Rate.
Encapsulation Type Shows the encapsulation scheme to transport
multi protocol data over the AAL5 layer. Routed-LLC indicates logical link control encapsulation (default). Routed-VCMUX indicates VC-based multiplexing encapsulation.
F5-OAM Shows how OAM (Operation, Administration,
and Management) loopback cells provide loopback capabilities and confirm whether a VC connection is up. Only F5 OAM segments are supported, which provides loopback capabilities on a VC connection level. Responses Only indicates that the port will respond but doesn’t generate OAM cells. Requests & Responses indicates that the port will respond and generate OAM cells.
SmartSwitch Router User Reference Manual 49
Displaying ATM Port Information
To display information about the port settings on an ATM port:
Displays the port setting
atm show port-settings <port list>| all-ports
configurations on an ATM port.
The following is an example of the information that is displayed with the command listed above (for a PDH PHY interface):
ssr(atm-show)# port-settings at.9.1 Port information for Slot 9, Port 1: Port Type: T3 ATM coaxial cable Xmt Clock Source: Local Scramble Mode: Payload Line Coding: B3ZS Cell Mapping: Direct Framing Cbit-Parity VC Mode: 1 bit of VPI, 11 bits of VCI Service Definition: ubr-default Service Class: UBR Peak Bit Rate: Best Effort Sustained Bit Rate: 0 Kbits/sec (0 cps) Maximum Burst Size: 0 cells Encapsulation Type: Routed LLC F5-OAM: Requests & Responses
Port Type Shows the type of PHY interface for the port.
Xmt Clock Source Shows the timing source for the port.
Local indicates the onboard clock oscillator as the timing source. Loop indicates the receiver input as the timing source.
Scramble Mode Shows the scramble/descramble mode for the
port.
None indicates no scram b ling. Payload indicates scrambling of the payload
only.
Frame indicates scramblin g of the stream only. Both indicates scrambling of payload and stream.
Line Coding Shows the particular DS1/T1 and DS3/T3 coding
convention.
Cell Mapping Shows the format used to map ATM cells.
Direct indicates direct cell mapping. Plcp indicates physical layer convergence
protocol mapping.
Framing Shows the type of framing scheme.
cbit-parity is used for T3 framing. m23 is used for T3 framing.
50 SmartSwitch Router User Reference Manual
Displaying ATM Port Information
esf indicates extended super frame and is used for T1 framing.
g832 is used for E3 framing. g751 is used for E3 framing.
VC Mode Shows the bit allocation for vpi and vci.
Service Definition Shows the name of the defined service on the port
and its traffic parameters.
The following is an example of the information that is displayed with the command listed above (for a SONET PHY interface):
ssr(atm-show)# port-settings at.8.1 Port information for Slot 8, Port 1: Port Type: SONET STS-3c MMF Xmt Clock Source: Local VC Mode: 1 bit of VPI, 11 bits of VCI Service Definition: ubr-default Service Class: UBR Peak Bit Rate: Best Effort Encapsulation Type: Routed LLC F5-OAM: Requests & Responses
Port Type Shows the type of PHY interface for the port.
Xmt Clock Source Shows the timing source for the port.
Local indicates the onboard clock oscillator as the timing source. Loop indicates the receiver input as the timing source.
VC Mode Shows the bit allocation for vpi and vci.
Service Definition Shows the name of the defined service on the port
and its traffic parameters.
SmartSwitch Router User Reference Manual 51

ATM Sample Configuration 1

ATM Sample Configuration 1
Consider the following network configuration:
VLAN B
Subnet 11.1.2.0
11.1.2.1/24
SSR 1
11.1.100.1/24
at.1.1 at.2.1
et.2.1
11.1.2.1/24
et.1.1
SSR 2
11.1.1.1/24
VLAN A
Subnet 11.1.1.0
The network shown consists of two SmartSwitch Routers, VLAN A, and VLAN B. Both SSRs have an ATM module with two ATM ports. Also both SSRs contain a 10/100 TX Ethernet module. SSR1 is connected to VLAN A through Ethernet port et.2.1, while SSR2 is connected to VLAN B through Ethernet port et.1.1.
This example shows how to configure this network so that we are able to pass traffic from VLAN B to VLAN A. The following steps will lead you through the configuration process.
52 SmartSwitch Router User Reference Manual

Configuring an Interface on an Ethernet Port

There are two separate VLANs in this network, VLAN A and VLAN B. VLAN A is connected to Ethernet port et.2.1 on SSR1, and VLAN B i s connected to Ethernet po rt et.1.1 on SSRSSR2.
Apply an interface on both Ethernet ports. Creating an interface on an Ethernet port assigns a network IP address and submask on that port.

Creating a Virtual Channel

Create a VC to connect ATM port at.1.1 on SSR1 to ATM port at.2.1 on SSR2. Use the following command to create a virtual channel on SSR1 with vpi=0 and vci=100:
ssr1(config)# atm create vcl port at.1.1.0.100
You must now configure a corresponding vpi/vci pair on ATM port at.2.1. Use the following command to create a virtual channel on SSR2 with vpi=0 and vci=100:
ATM Sample Configuration 1
ssr2(config)# atm create vcl port at.2.1.0.100
Note that you are using the same vpi and vci on both SSRs. This establishes a common VC from one ATM port to another ATM port.

Defining an ATM Service Class

After creating a VC connection from ATM port at.1.1 to at.2.1, the next step is to define an ATM service class for this connection.
The following command lines defines a service class named ‘cbr1m’ on both SSR1 and SSR2 where CBR is the service category and peak cell rate is set to 10000 kcells/second:
ssr1(config)# atm define service cbr1m srv-cat cbr pcr-kbits 10000
ssr2(config)# atm define service cbr1m srv-cat cbr pcr-kbits 10000
SmartSwitch Router User Reference Manual 53
ATM Sample Configuration 1

Applying an ATM Service Class

After defining a service class on SSR1 and SSR2, apply them to the VC connection we created earlier.
The following command line applies the service class ‘cbr1m’ to the VC (vpi=0, vci=100) on ATM port at.1.1 of SSR1:
ssr1(config)# atm apply service cbr1m port at.1.1.0.100
The following command line applies the service class ‘cbr1m’ to the VC (vpi=0, vci=100) on ATM port at.2.1 of SSR2:
ssr2(config)# atm apply service cbr1m port at.2.1.0.100

Configuring an Interface on an ATM Port

The next step is to configure an interface for each ATM port. Creating an interface on an ATM port assigns a network IP address and submask on that port, and assigns it to a specified VC (VPI/VCI pair). Since a VC is a connection in the ATM Layer only, creating an interface for an ATM port is necessary to establish a connection in the IP network layer.
You can assign a peer-address to an ATM port interface. This peer-address specifies the IP address for the other end of the VC connection.
Set the IP interface name as ‘atm 1’ and IP address as 11.1.100.1/24 on ATM port at.1.1.0.100. The following command line configures the interface on SSR1
1(config)# interface create ip atm1 address-netmask 11.1.100.1/24 peer­address 11.1.100.2/24 port at.1.1.0.100 up
Set the IP interface name as ‘atm 2’ and IP address as 11.1.100.2/24 on ATM port at.2.1.0.100. The following command line configures the interface on SSR2
ssr2(config)# interface create ip atm2 address-netmask 11.1.100.2/24 peer-address 11.1.100.1/24 port at.2.1.0.100 up

Configuring an IP Route

The next step is to add an IP route which will specify a gateway address to reach a certain subnet. You already configured IP interfaces for both Ethernet ports. VLAN B (connected to IP interface 1 1.1.2.1/2 4) belongs to the subnet 11.1.2.0. Similarly, VLAN A (connected to IP interface 11.1.1.1/24) belongs to the subnet 11.1.1.0.
:
:
54 SmartSwitch Router User Reference Manual
ATM Sample Configuration 1
Creating an IP route allows the interfaces on the ATM ports to act as gateways to any subnet. Traffic from VLAN A reaches the Ethernet port on SSR1 and is automatically directed to the gateway address (interface on the ATM port for SSR2). Then the traffic travels through the VC and arrives at the Ethernet port connected to VLAN B.
Add the IP route for the subnet 11.1.2.0. The following command line configures the route on SSR1
Add the IP route for the subnet 11.1.1.0. The following command line configures the route on SSR2
Note that the gateways specified are actually the interface for the ATM port on the other end of the VC connection.
:
ssr1(config)# ip add route 11.1.2.0/24 gateway 11.1.100.2
:
ssr2(config)# ip add route 11.1.1.0/24 gateway 11.1.100.1
SmartSwitch Router User Reference Manual 55
ATM Sample Configuration 1
56 SmartSwitch Router User Reference Manual

Overview

This chapter explains how to configure and monitor packet-over-SONET (PoS) on the SSR. See the sonet commands section of the SmartSwitch Router Com mand Line Interface Reference Manual for a description of each command.
Chapter 6
Packet-over-SONET
Configuration
Guide
PoS requires installation of the OC-3c or OC-12c PoS line cards in an SSR 8000 or an SSR
8600. The OC-3c line card has four PoS ports, while the OC-12c line card has two PoS ports. You must use the “so.” prefix for PoS interface ports. For example, you would specify a PoS port located at router slot 13, port 1 as “so.13.1.”
By default, PoS ports are set for point-to-point protocol (PPP) encapsulation. You cannot change this encapsulation type for PoS ports.
Note:
By default, PoS ports are configured to receive a maximum transmission unit (MTU) size of 1500 octets. The actual MTU size used for transmissions over a PoS link is a result of PPP negotiation. For transmission of “jumbo frames” (MTUs up to 65535 octets), you can increase the MTU size of the PoS port. The MTU must be set at the port level.
SmartSwitch Router User Reference Manual 57
While PoS ports use PPP encapsulation, other PPP characteristics such as service profiles, encryption, compression, and MLP bundles are not supported for PoS ports.
Chapter 6: Packet-over-SONET Configuration Guide

Configuring IP Interfaces for PoS Links

Configuring IP interfaces for PoS links is generally the same as for WANs and for LANs. You assign an IP address to each interface and define routing mechanisms such as OSPF or RIP as with any IP network. You can configure the IP interface on the physical port or you can configure the interface as part of a VLAN for PoS links. You can also configure multiple IP addresses for each interface, as described in “Configuring IP Interfaces and
Parameters” on page 78.
When creating the IP interface for a PoS link, you can either specify the peer addr ess if it is known (static address), or allow the peer address to be automatically discovered via IPCP negotiation (dynamic address). If the peer address is specified, any address supplied by the peer during IPCP negotiation is ignored.
IP interfaces for PoS links can have primary and secondary IP addresses. The primary addresses may be either dynamic or static, but the secondary address must be static. This is because only the primary addresses of both the local and peer devices are exchanged during IP Control Protocol (IPCP) negotiation.
Source filtering and ACLs can be applied to an IP interface for a PoS link. Unlike WAN ports, the applied filter or ACL presents no limitation. Different filters can be configured on different PoS ports.

Configuring Packet-over-SONET Links

To con f igure a pack et -o ver-SONET lin k:
1. On the SSR, assign an interface to th e P oS port to which you will connect via fiber cable in a point-to-point link. Assign an IP address and netmask to the interface. If possible, determine the peer address of the interface at the other end of the point-to­point link. In the following example, the port so.13.1 on the SSR will be associated with the interface pos11:
Router A Router B
so.13.1
pos11
20.11.11.20/24
20.11.11.21/24
pos21
58 SmartSwitch Router User Reference Manual
Chapter 6: Packet-over-SONET Configuration Guide
2. Create a point-to-po int interface w ith the interface create command, specifying the IP
address and netmask for the interface on the SSR and the peer address of the other end of the connection:
interface create ip pos11 address-netmask 20.11.11.20/24 peer-address
20.11.11.21 port so.13.1
When you create the point-to-point interface as shown above, the SSR creates an implicit VLAN called “SYS_L3_<interface-name>.” In the above example, the SSR creates the VLAN ‘SYS_L3_pos11.’
3. If you want to increase the MTU size on a port, specify the parameter mtu with the
port set’ command and define a value up to 65535 (octets). See “C onfiguring Jumbo
Frames” on page 80 for more information.
4. Specify the bit error rate thresholds, if necessary. See “Specifying Bit Error Rate
Thresholds” for more information.
5. Modify any other PoS operating parameters, as needed. The following table lists the
operating parameters that you can modify and the configuration commands that you use.
Table 4: PoS Optional Operating Parameters
Parameter Default Value Configuration Command
Framing SONET sonet set <port> framing sdh|sonet Loopback Disabled sonet set <port> loopback Path tracing (none) sonet set <port> pathtrace Circuit identifier (none) sonet set <port> circuit-id Frame Check Sequence 32-bit sonet set <port> fcs-16-bit Scrambling Enabled sonet set <port> no-scramble

Configuring Automatic Protection Switching

Automatic protection switching (APS) provides a mechanism to support redundant transmission circuits between SONET devices. The SSR supports the following APS features:
Linear network topology. Ring topologies are not supported.
1+1 switching. Each working line is protected by one protecting line and the same
signal is transmitted on both the working and protecting lines. The two transmission copies that arrive at the receiving end are co mpared, and the best copy is used. If there is a line failure or line degradation, the end node switches the connection over to the protecting line.
SmartSwitch Router User Reference Manual 59
Chapter 6: Packet-over-SONET Configuration Guide
Note:
In APS terminology, bridge means to transmit identical traffic on both the working and protecting lines, while switch means to select traffic from either the protecting line or the working line.
Unidirectional switching, where one set of line terminating equipment (LTE) can switch the line independent of the other LTE. Bidirectional switching (where both sets of LTEs perform a coordinated switch) is not supported.
Revertive switching. You can enable automatic switchover from the protecting line to the working line after the working line becomes available.
If the working circuit is disrupted or the bit error rates on the working circuit exceed the configured thresholds, traffic is automatically switched over to the protecting circuit. Any physical or logical characteristics configured for the working port are applied to the protecting port. This in cludes the IP address a n d netmask c o nfigured for the interface, spanning tree protocol (STP), per-VLAN spanning tree (PVST), etc.

Configuring Working and Protecting Ports

APS on the SSR requires configuration of a working port and a corresponding protecting port. You can configure any number of PoS ports. The limit is the number of PoS ports on the SSR. Any port on any module can be configured for APS. If one module should go down, the remaining ports on other modules will remain operational.
Note:
The working and protecting ports must reside on the same SSR. You cannot configure APS operation for working and protecting ports on two different SSRs.
The working port must:
Be associated with a point-to-point IP interface that is configured with an IP address and netmask. See “Configuring Packet-over-SONET Links” for the details on configuring the interface.
The protecting port must:
Be in the default VLAN. This means that the protecting port must not be configured for an interface.
Not have any explicitly configured parameters. The protecting port inherits the configuration of the working port.
To configure a working and a protecting PoS port, enter the following command in Configure mode:
Configure working and protecting PoS ports.
sonet set <working-port>
protection 1+1 protected-by <protecting-port>
60 SmartSwitch Router User Reference Manual
Chapter 6: Packet-over-SONET Configuration Guide
To manage the working and protecting PoS interfaces, enter the following commands in Configure mode:
Prevent a working interface from switching to a protecting port. This command can only be applied to a port configured as a protecting port.
Force a switch to the specified port. This command can be applied to either the working or protecting port.
Manually switch the line to the specified port. This command can be applied to either the working or protecting port.
Note:
You can only specify one option, lockoutprot, forced or manual, for a port. Also, an option can be applied to either the working port or the protecting port, but not both working and protecting ports at the same time.
To return the circuit to the working interface after the working interface becomes available, enter the following commands in Configure mode:
Enable automatic switchover from the protecting interface to the working interface after the working interface becomes available. This command can only be applied to a protecting port.
Sets the number of minutes after the working interface becomes available that automatic switchover from the protecting interface to the working interface takes place. The default value is 5 minutes.
sonet set <port> protection-switch
lockoutprot
sonet set <port> protection-switch
forced
sonet set <port> protection-switch
manual
sonet set <port> reverting
revertive|nonrevertive
sonet set <port> WTR-timer <minutes>

Specifying Bit Error Rate Thresholds

If the bit error rate (BER) on the working line exceeds one of the co nfigured thr esholds, the receiver automatically switches over to the protecting line.
BER is calculated with the following:
BER = errored bits received/total bits received
The default BER thresholds are:
Signal degrade BER threshold of 10
Signal degrade is associated with a “soft” failure. Signal degrade is determined when the BER exceeds the configured rate.
SmartSwitch Router User Reference Manual 61
-6
(1 out of 1,000,000 bits transmitted is in error).
Chapter 6: Packet-over-SONET Configuration Guide
Signal failure BER threshold of 10 failure is associated with a “hard” failure. Signal fail is determined when any of the following conditions are detected: loss of signal (LOS), loss of frame (LOF), line alarm indication bridge and selector signal (AIS-L), or the BER threshold exceeds the configured rate.
To specify different BER thresholds, enter the following commands in Enable mode:
Specify signal degrade BER threshold.
Specify signal failure BER threshold.

Monitoring PoS Ports

To display PoS port configuration information, enter one of the following commands in Enable mode:
Show framing status, line type, and circuit ID of the optical link.
-3
(1 out of 1,000 bits transmitted is in error). Signal
sonet set <port> sd-ber <number>
sonet set <port> sf-ber <number>
sonet show medium <port list>
Show working or protecting line, direction,
sonet show aps <port list>
and switch status. Show received path trace. Show loopback status.
sonet show pathtrace <port list > sonet show loopback <port list>
The following table describes additional monitoring commands for IP interfaces for PoS links, designed to be used in Enable mode:
Display bridge NCP statistics for specified PoS port.
Display IP NCP statistics for
ppp show stats port <port name> bridge-
ncp
ppp show stats port <port name> ip-ncp
specified PoS port. Display link-status statistics for
specified PoS port. Display summary informati on for
ppp show stats port <port name> link-
status
ppp show stats port <port name> summary
specified PoS port.
62 SmartSwitch Router User Reference Manual

Example Configurations

This section shows example configura tions for PoS links.

APS PoS Links Between SSRs

The following example shows APS PoS links between two SSRs, router A and router B.
Chapter 6: Packet-over-SONET Configuration Guide
Router A
so.7.1 so.7.2
The following is the configuration for router A:
interface create ip pos21 address-netmask 20.11.11.21/24 peer-address 20.11.11.20 type point-to-point port so.7.1 sonet set so.7.1 protection 1+1 protected-by so.7.2
The following is the configuration for router B:
interface create ip pos11 address-netmask 20.11.11.20/24 peer-address 20.11.11.21 type point-to-point port so.13.1 sonet set so.13.1 protection 1+1 protected-by so.13.2
pos21
20.11.11.21/24
(working)
(protecting)
pos11
20.11.11.20/24
Router B
so.13.1 so.13.2
SmartSwitch Router User Reference Manual 63
Chapter 6: Packet-over-SONET Configuration Guide

PoS Link Between the SSR and a Cisco Router

The following example shows a PoS link between an SSR, router A, and a Cisco 12000 series Gigabit Switch Router, router B. The MTU on both routers is configured for same size of 9216 octets.
Router A
so.6.1
so-1
40.1.1.1/16
The following is the configuration for router A:
port set so.6.1 mtu 9216 interface create ip so-1 address-netmask 40.1.1.1/16 port so.6.1
The following is the configuration for router B:
interface POS1/0 mtu 9216 ip address 40.1.1.2 255.255.0.0 no ip directed-broadcast encapsulation ppp crc 32 pos scramble-atm pos flag c2 22
Router B
POS1/0
64 SmartSwitch Router User Reference Manual
Chapter 6: Packet-over-SONET Configuration Guide

Bridging and Routing Traffic Over a PoS Link

The following example shows how to configure a VLAN ‘v1’ that includes the PoS ports on two connected SSRs, router A and router B. Bridged or routed traffic is transmitted over the PoS link.
Router A
so.7.1
int1
1.1.1.1/8
2.1.1.1/8 peer 2.1.1.2
2.1.1.2/8 peer 2.1.1.1
int1
1.1.1.2/8
so.6.1
The following is the configuration for router A:
port set so.7.1 mtu 65535 stp enable port so.7.1 vlan create v1 port-based id 10 vlan add ports so.7.1 to v1 interface create ip int1 address-netmask 1.1.1.1/8 vlan v1 interface add ip int1 address-netmask 2.1.1.1/8 peer-address 2.1.1.2
The following is the configuration for router B:
port set so.6.1 mtu 65535 stp enable port so.6.1 vlan create v1 port-based id 10 vlan add ports so.6.1 to v1 interface create ip int1 address-netmask 1.1.1.2/8 vlan v1 interface add ip int1 address-netmask 2.1.1.2/8 peer-address 2.1.1.1
Router B
SmartSwitch Router User Reference Manual 65
Chapter 6: Packet-over-SONET Configuration Guide
66 SmartSwitch Router User Reference Manual

DHCP Overview

The Dynamic Host Configuration Protocol (DHCP) server on the SSR provides dynamic address assignment and configuration to DHCP capable end-user systems, such as Windows 95/98/NT and Apple Macintosh systems. You can configure the server to provide a dynamic IP address from a pre-allocated pool of IP addresses or a static IP address. You can also configure parameters for use by the clients, such a s default gatew ay and network masks, and system-specific parameters, such as NetBIOS Name Server and NetBIOS node type of the client.
Chapter 7
DHCP
Configuration
Guide
The amount of time that a particular IP address is valid for a system is called a lease. The SSR maintains a lease database which contains information about each assigned IP address, the MAC address to which it is assigned, the lease expiration, and whether the address assignment is dynamic or static. The DHCP lease database is stored in flash memory and can be backed up on a remote TFTP or RCP server. You can configure the intervals at which updates to the lease database (and backup) ar e done. Upon system reboot, the le ase database will be loaded either from flash memory or from the TFTP or RCP server.
Note:
SmartSwitch Router User Reference Manual 67
The SSR DHCP server is not designed to work as the primary DHCP server in an enterprise environment with hundreds or thousands of clients that are constantly seeking IP address assignment or reassignment. A standalone DHCP server with a redundant backup server may be more suitable for this enterprise environment.
Chapter 7: DHCP Configuration Guide

Configuring DHCP

By default, the DHCP server is not enabled on the SSR. You can selectively enable DHCP service on particular interfaces and not others. To enable DHCP service on an interface, you must first define a DHCP scope. A scope consists of a pool of IP addresses and a set of parameters for a DHCP client. The parameters are used by the client to configure its network environment, for example, the default gateway and DNS domain name.
To configure DHCP on the SSR, you must configure an IP address pool, client parameters, and optional static IP address for a specified scope. Where several subnets are accessed through a single port, you can also define multiple scopes on the same interface and group the scopes together into a “superscope.”

Configuring an IP Address Pool

To define a pool of IP addresses that th e DHCP server can assign to a client, enter the following command in Configure mode:
Define pool of IP addresses to be used by clients.

Configuring Client Parameters

You can configure the client parameters shown in the table below.
Table 5. Client Parameters
Parameter Value
address-mask Address/netmask of the scope’s subnet (This parameter is
required and must be defined before any other client parameters are specified.)
broadcast Broadcast address bootfile Client boot file name dns-domain DNS domain name dns-server IP address of DNS server gateway IP address of default gateway
dhcp <scope> define pool <ip-range>
lease-time Amount of time the assigned IP address is valid for the
system
68 SmartSwitch Router User Reference Manual
Chapter 7: DHCP Configuration Guide
Table 5. Client Parameters
Parameter Value
netbios-name-server IP address of NetBIOS Name Server (WINS serv er) netbios-node-type NetBIOS node type of the client netbios-scope NetBIOS scope of the client
To define the parameters that the DHCP server gives the clients, enter the following command in Configure mode:
Define client parameters.
dhcp <scope> define parameters <parameter>
<value>...

Configuring a Static IP Address

To define a stat ic IP address that the DHCP server can assign to a client with a specific MAC address, enter the following command in Configure mode:
Define static IP address for a particular MAC address.
dhcp <scope> define static-ip <ipaddr> mac-address <macaddr> [<parameter>
<value>...]

Grouping Scopes with a Common Interface

You can apply several scopes to the same physical interface. For example, scopes can define address pools on different subnets that all are accessed through the same SSR port. In this case, scopes that use the same interface must be grouped together into a “superscope.”
To attach a scope to a superscope, enter the following command in Configure mode:
Attach a scope to a superscope.
SmartSwitch Router User Reference Manual 69
dhcp <scope> attach superscope <name>
Chapter 7: DHCP Configuration Guide

Configuring DHCP Server Parameters

You can configure several “global” parameters that aff ect the behavior of the DHCP server itself.
To configure global DHCP server parameters, enter the following commands in Configure mode:
Specify a remote location to back up the lease database.
Specify the intervals at which the lease database is updated.
dhcp global set lease-database <url>
dhcp global set commit-interval <hours>

Updating the Lease Database

After each client transaction, the DHCP server does not immediately update the information in the lease database. Lease update inform ation is stor ed in flash memory and flushed to the database at certain intervals. You can use the dhcp global set commit- interval command to specify this interval; the default is one hour.
To force the DHCP server to immediately update its lease database, enter the following command in Enable mode:
Force the server to update its lease database.
dhcp flush

Monitoring the DHCP Server

To display information from the lease database:
Show lease database informatio n.
To display the number of allocated bindings for the DHCP server and the maximum number allowed::
Show the number of allocated bindings for the DHCP server.
70 SmartSwitch Router User Reference Manual
dhcp show binding [active|expired|static]
dhcp show num-clients

DHCP Configuration Examples

The following configuration describes DHCP configuration for a simple network with just one interface on which DHCP service is enabled to provide both dynamic and static IP addresses.
1. Create an IP VLAN called ‘client_vlan’.
vlan create client_vlan ip
2. Add all Fast Ethernet ports in the SSR to the VLAN ‘client_vlan’.
vlan add port et.*.* to client_vlan
3. Create an IP interface called ‘clients’ with the address 10.1.1.1 for the VLAN
‘client_vlan’.
interface create ip clients address-netmask 10.1.1.1./16 vlan
client_vlan
Chapter 7: DHCP Configuration Guide
4. Define DHCP network parameters for the scope ‘scope1’.
dhcp scope1 define parameters address-netmask 10.1.0.0/16 gateway
10.1.1.1 lease-time 24 dns-domain acme.com dns-server 10.2.45.67 netbios-name-server 10.1.55.60
5. Define an IP address pool for addresses 10.1.1.10 through 10.1.1.20.
dhcp scope1 define pool 10.1.1.10-10.1.1.20
6. Define another IP address pool for addresses 10.1.1.40 through 10.1.1.50.
dhcp scope1 define pool 10.1.1.40-10.1.1.50
7. Define a static IP address for 10.1.7.5.
dhcp scope1 define static-ip 10.1.7.5 mac-address 08:00:20:11:22:33
8. Define another static IP address for 10.1.7.7. and give it a specific gateway address of
10.1.1.2.
dhcp scope1 define static-ip 10.1.7.7 mac-address
08:00:20:aa:bb:cc:dd gateway 10.1.1.2
SmartSwitch Router User Reference Manual 71
Chapter 7: DHCP Configuration Guide
9. Specify a remote lease database on the TFTP server 10.1.89.88.
dhcp global set lease-database tftp://10.1.89.88/lease.db
10. Specify a database update interval of every 15 minutes.
dhcp global set commit-interval 15

Configuring Secondary Subnets

In some network environments, multiple logical subnets can be imposed on a single physical segment. These logical subnets are sometimes referr ed to as “secondary subnets” or “secondary networks.” For these environments, the DHCP server may need to give out addresses on different subnets. The DNS server, DNS domain, and WINS server may be the same for clients on different secondary subnets, however, the default gateway will most likely be different since it must be a router on the client’s local subnet.
The following example shows a simple conf iguration to support secondary subnets
10.1.x.x and 10.2.x.x.
1. Define the network parameters for ‘scope1’ with the default gateway 10.1.1.1.
dhcp scope1 define parameters address-netmask 10.1.0.0/16 gateway
10.1.1.1 dns-domain acme.com dns-server 10.1.44.55
2. Define the address pool for ‘scope1’.
dhcp scope1 define pool 10.1.1.10-10.1.1.20
3. Define the network parameters for ‘scope2’ with the default gateway 10.2.1.1.
dhcp scope2 define parameters address-netmask 10.2.0.0/16 gateway
10.2.1.1 dns-domain acme.com dns-server 10.1.77.88
4. Define the address pool for ‘scope2’.
dhcp scope2 define pool 10.2.1.40-10.2.1.50
5. Create a superscope ‘super1’ that includes ‘scope1’.
dhcp scope1 attach superscope super1
72 SmartSwitch Router User Reference Manual
Chapter 7: DHCP Configuration Guide
6. Include ‘scope2’ in the superscope ‘super1’.
dhcp scope2 attach superscope super1
Since there are multiple pools of IP addresses, the pool associated with ‘scope1’ i s used first since ‘scope1’ is applied to the interface before ‘scope2’. Clients that are given an address from ‘scope1’ will also be given parameters from ‘scope1,’ which includes the default gateway 10.1.1.1 that resides on the 10.1.x.x subnet. When all the addresses for ‘scope1’ are assigned, the server will start giving out addresses from ‘scope2’ which will include the default gateway parameter 10.2.1.1 on subnet 10.2.x.x.

Secondary Subnets and Directly-Connected Clients

A directly-connected client is a system that resides on the same physical network as the DHCP server and does not have to go through a router or relay agent to communicate with the server . If you configur e the DHCP server on the SSR to service directly-connected clients on a secondary subnet, you must configure the secondary subnet using the interface add ip command. The interface add ip command configures a secondary address for an interface that was previously created with the interface create ip command.
The following example shows a simple configuration to support directly-connected clients on a secondary subnet.
1. Create an interface ‘clients’ with the primary address 10.1.1.1.
interface create ip clients address-mask 10.1.1.1/16 port et.1.1
2. Assign a secondary address 10.2.1.1 to the interface ‘clients’.
interface add ip clients address-mask 10.2.1.1/16
3. Define the network parameters for ‘scope1’ with the default gateway 10.1.1.1.
dhcp scope1 define parameters address-netmask 10.1.0.0/16 gateway
10.1.1.1 dns-domain acme.com dns-server 10.1.44.55
4. Define the address pool for ‘scope1’.
dhcp scope1 define pool 10.1.1.10-10.1.1.20
5. Define the network parameters for ‘scope2’ with the default gateway 10.2.1.1.
dhcp scope2 define parameters address-netmask 10.2.0.0/16 gateway
10.2.1.1 dns-domain acme.com dns-server 10.1.77.88
SmartSwitch Router User Reference Manual 73
Chapter 7: DHCP Configuration Guide
6. Define the address pool for ‘scope2’.
dhcp scope2 define pool 10.2.1.40-10.2.1.50
7. Create a superscope ‘super1’ that includes ‘scope1’.
dhcp scope1 attach superscope super1
8. Include ‘scope2’ in the superscope ‘super1’.
dhcp scope2 attach superscope super1
For clients on the secondary subnet, the default gateway is 10.2.1.1, which is also the secondary address for the interface ‘clients’.

Interacting with Relay Agents

For clients that are not directly connected to the DHCP server, a relay agent (typically a router) is needed to communicate between the client and the server. The relay agent is usually only needed during the initial leasing of an IP address. Once the client obtains an IP address and can connect to the network, the renewal of the lease is performed between the client and server without the help of the relay agent.
The default gateway for the client must be capable of reaching the SSR’s DHCP server. The SSR must also be capable of reaching the client’s network. The route must be configured (with static routes, for example) or learned (with RIP or OSPF, for example) so that the DHCP server can reach the client.
The following example shows a sim ple configuration to support clients across a relay agent.
1. Create an interface ‘clients’ with the primary address 10.1.1.1.
interface create ip clients address-mask 10.1.1.1/16 port et.3.3
2. Define a static route to the 10.5.x.x. subnet using the gateway 10.1.7.10 which tells the DHCP server how to send packets to the client on the 10.5.x.x subnet.
ip add route 10.5.0.0/16 gateway 10.1.7.10
3. Define the network parameters for ‘scope1’ with the default gateway 10.5.1.1 (the relay agent for the client).
dhcp scope1 define parameters address-netmask 10.5.0.0/16 gateway
10.5.1.1 dns-domain acme.com
74 SmartSwitch Router User Reference Manual
Loading...