Chima STCS6010 Configuration Manual

10G Core Routing Switch User Manual

陈泽科技有限公司 www.stephen-tele.com

STCS6010

10GE Core Routing Switch Configuration Manual

VER:1.0.0

STEPHEN TECHNOLOGIES CO.,LIMITED
ALL RIGHTS RESERVED

10G Core Routing Switch User Manual

陈泽科技有限公司 www.stephen-tele.com

About This Manual

Release Notes

This manual applies to STCS6010 10GE Core Routing Switches.

Related Manuals

The related manuals are listed in the following table.

 《STCS6010 10GE Core Routing Switch Installation Guide Manu》
 《STCS6010 10GE Core Routing Switch Configuration Guide Manu》

Intended Audience

The manual is intended for the following readers:

 Network engineers
 Network administrators
 Customers who are familiar with network fundamentals

Conventions

The manual uses the following conventions:
I. General conventions

Convention

Description

Arial Normal paragraphs are in Cailbri
Arial Narrow Warnings, Cautions, Notes and Tips are in Calibri Narrow.

Boldface

Headings are in

Boldface

.

Courier New Terminal Display is in Courier New.

II. Command conventions

Conventio

Descriptio

n

Boldface

The keywords of a command line are in

Boldface

.

italic Command arguments are in italic.

[ ] Items (keywords or arguments)

in square brackets [ ] are optional.

{ x | y | ... } Alternative items are grouped in braces and separated by vertical bars. One is selected.

[ x | y | ... ] Optional alternative items are grouped in square brackets and separated by vertical bars.

One

or none is selected.

III. GUI conventions

Convention Description

< > Button names are inside angle brackets. For example, click the <OK> button.

10G Core Routing Switch User Manual

陈泽科技有限公司 www.stephen-tele.com

[ ]

Window names, menu items, data table and field names are inside square
brackets. For example, pop up the [New User] window.

/

Multi-level menus are separated by forward slashes. For example,
[File/Create/Folder].

IV. Keyboard operation

Format Description

<Key>

Press the key with the key name inside angle brackets. For example, <Enter>,
<Tab>, <Backspace>, or <A>.

<Key1+Key2>

Press the keys concurrently. For example, <Ctrl+Alt+A>
means the three keys should be pressed concurrently.

<Key1, Key2>

Press the keys in turn. For example, <Alt, A> means the two
keys should be pressed in turn.

V. Mouse operation

Action Description

Click Press the left button or right button quickly (left button bydefault).

Double Click Press the left button twice continuously and quickly.

Drag Press and hold the left button and drag it to a certain position.

VI. Symbols

Eye-catching symbols are also used in the manual to highlight the points worthy of

special attention during the operation. They are defined as follows:

֠֠֠֠Caution: Means reader be extremely careful during the operation.

Note: Means a complementary description.

10G Core Routing Switch User Manual

陈泽科技有限公司 www.stephen-tele.com

CONTENT

1 Product Overview

.............................................................................. - 1 -

1.1.

Product Overview ............................................................................... - 1 -

1.2.

Function Features ............................................................................... - 1 -

2 Logging in Switch

............................................................................... - 3 -

2.1

Setting up Configuration Environment via the Console Port ............. - 3 -

2.1

Setting up Configuration Environment through Telnet ..................... - 5 -

2.3.1

Connecting a PC to the Switch through Telnet .................................. - 5 -

2.3.2

Telneting a Switch through another Switch ....................................... - 6 -

3 Command Line Interface

................................................................... - 6 -

3.1

Command Line Interface .................................................................... - 6 -

3.1

Command Line configure mode ......................................................... - 7 -

3.1

Features and Functions of Command Line ......................................... - 8 -

3.4.1

Online Help of Command Line ........................................................... - 8 -

3.4.2

Displaying Characteristics of Command Line ..................................... - 9 -

3.4.3

History Command of Command Line ............................................... - 10 -

3.4.4

Common Command Line Error Messages ........................................ - 10 -

3.4.5

Editing Characteristics of Command Line ........................................ - 10 -

4 Chapter 4 Basic Configuration

......................................................... - 12 -

4.1

Console Connection ......................................................................... - 12 -

4.1

Creating user and setting password ................................................. - 12 -

4.1

Saving configuration file ................................................................... - 13 -

4.1

Restore system to default configuration ......................................... - 13 -

4.1

Reboot system .................................................................................. - 13 -

4.1

Configuring a System Name ............................................................. - 13 -

4.1

System service configuration ........................................................... - 14 -

5 Port Configuration

........................................................................... - 15 -

5.1

Ethernet Port Overview.................................................................... - 15 -

5.1

Ethernet Port Configuration ............................................................. - 15 -

5.3.1

Entering interface configuration mode ............................................ - 16 -

5.3.2

Enabling/Disabling an Ethernet Port ................................................ - 17 -

5.3.3

Setting the Duplex Attribute and speed of the Ethernet Port ......... - 17 -

5.3.4

Adding a Description for an Interface .............................................. - 19 -

5.3.5

Enabling/Disabling Flow Control for the Ethernet Port ................... - 19 -

5.3.6

Setting the Ethernet Port Broadcast Suppression ........................... - 20 -

5.3.7

Setting the Ethernet Port multicast Suppression ............................. - 20 -

5.3.8

Setting the Ethernet Port dlf Suppression ....................................... - 21 -

5.3.9

Setting Port Mirroring ...................................................................... - 21 -

6 VLAN Configuration

......................................................................... - 23 -

6.1

VLAN Overview ................................................................................. - 23 -

6.1

Configuring VLAN ............................................................................. - 23 -

6.3.1

Creating/Deleting a VLAN ................................................................ - 23 -

6.3.2

Assigning Static-Access Ports to a VLAN .......................................... - 24 -

6.3.3

Configuring VLAN Trunks.................................................................. - 24 -

10G Core Routing Switch User Manual

陈泽科技有限公司 www.stephen-tele.com

6.1

Assigning IP Address for a VLAN....................................................... - 25 -

6.4.1

IP Address Overview ......................................................................... - 25 -

6.4.2

Assigning IP Address for a VLAN....................................................... - 27 -

6.1

Troubleshooting IP Address Configuration ...................................... - 28 -

7 Configuring IP Routing

..................................................................... - 28 -

7.1

Introduction to IP Route and Routing Table .................................... - 28 -

7.2.1

IP Route and Route Segment ........................................................... - 28 -

7.2.2

Route Selection through the Routing Table ..................................... - 29 -

7.1

Routing Management Policy ............................................................ - 30 -

7.3.1

Routing protocols and the preferences of the corresponding routes- 30 -

7.3.2

Supporting Load Sharing and Route Backup .................................... - 31 -

7.3.3

Routes Shared between Routing Protocols ..................................... - 31 -

7.1

Static Route Configuration ............................................................... - 32 -

7.4.1

Introduction to Static Route ............................................................. - 32 -

7.4.2

Static Route Configuration ............................................................... - 32 -

7.4.3

Typical Static Route Configuration Example .................................... - 33 -

7.4.4

Static Route Fault Diagnosis and Troubleshooting .......................... - 35 -

7.1

RIP Configuration ............................................................................. - 35 -

7.5.1

Brief Introduction to RIP .................................................................. - 35 -

7.5.2

RIP Configuration ............................................................................. - 36 -

7.5.3

Typical RIP Configuration Example ................................................... - 39 -

7.1

OSPF Configuration .......................................................................... - 40 -

7.6.1

OSPF Overview ................................................................................. - 40 -

7.6.2

OSPF Configuration .......................................................................... - 42 -

7.6.3

Displaying and Debugging OSPF ....................................................... - 52 -

7.6.4

Typical OSPF Configuration Example ............................................... - 53 -

7.6.5

OSPF Fault Diagnosis and Troubleshooting...................................... - 53 -

8 IP Multicast Protocol

....................................................................... - 54 -

8.1

IP Multicast Overview ...................................................................... - 54 -

8.2.1

Problems with Unicast/Broadcast .................................................... - 54 -

8.2.2

Advantages of Multicast ................................................................... - 56 -

8.2.3

Application of Multicast ................................................................... - 56 -

8.1

Implementation of IP Multicast ....................................................... - 57 -

8.3.1

Multicast Addresses ......................................................................... - 57 -

8.3.2

IP Multicast Protocols ...................................................................... - 59 -

8.1

IP Multicast Packet Forwarding........................................................ - 60 -

8.1

IGMP Snooping Configuration .......................................................... - 60 -

8.5.1

IGMP Snooping Overview ................................................................ - 60 -

8.5.2

IGMP Snooping Configuration .......................................................... - 63 -

8.5.3

IGMP Snooping Configuration Example ........................................... - 66 -

8.5.4

Troubleshoot IGMP Snooping .......................................................... - 66 -

8.1

IGMP Configuration .......................................................................... - 67 -

8.6.1

IGMP Overview ................................................................................. - 67 -

8.6.2

IGMP Configuration .......................................................................... - 68 -

8.1

PIM-SM Configuration ...................................................................... - 73 -

8.7.1

PIM-SM Overview ............................................................................. - 73 -

8.7.2

PIM-SM Configuration ...................................................................... - 75 -

10G Core Routing Switch User Manual

陈泽科技有限公司 www.stephen-tele.com

9 ACL Configuration

............................................................................ - 78 -

9.1

ACL Overview ................................................................................... - 78 -

9.1

configuring ACL................................................................................. - 78 -

9.3.1

Defining ACL ..................................................................................... - 78 -

9.3.2

Applying an ACL to an Interface ....................................................... - 81 -

10 SNMP Configuration

........................................................................ - 82 -

10.1

SNMP Overview ................................................................................ - 82 -

10.1

SNMP Versions and Supported MIB ................................................. - 82 -

10.1

Configure SNMP ............................................................................... - 84 -

10.4.1

Setting Community Name ................................................................ - 84 -

10.4.2

Setting the Destination Address of Trap and Trap Parameters ....... - 84 -

10.1

SNMP Configuration Example .......................................................... - 85 -

11 File System Management

................................................................ - 85 -

11.1

Update the software image of MCU board ...................................... - 85 -

11.1

Update the software image of LPU board ....................................... - 86 -

10G Core Routing Switch User Manual

陈泽科技有限公司

- - 1 - -

www.stephen-tele.com

1. Product Overview

1.1. Product Overview

STCS6010 10GE Core Routing Switch is a type of large capacity, modularized L2/L3 switches. It is mainly designed for
broadband MAN, backbone, switching core and convergence center of large-sized enterprise network and campus
network. They provide diverse services and can be used in constructing stable and high-performance IP network.

STCS6010 10GE Core Routing Switch uses integrated chassis, which can be subdivided into power supply area, board
area, backplane and fan area.
In the board area, there are ten slots: the middle two ( slot5, slot6) accommodate CPU boards, which are in 1+1
redundancy; the remaining eight accommodate LPU boards, which can be hybrid.

STCS6010 10GE Core Routing Switch supports the following services:

 Internet broadband access
 MAN, enterprise/campus networking
 Providing multicast service and multicast routing and supporting multicast audio and video services.

1.2. Function Features

Specification STCS6010

Protocol

IEEE 802.1D, IEEE 802.3, IEEE 802.3u, IEEE 802.3x, IEEE 802.3z, IEEE

802.1Q, *IEEE 802.1p, *GMRP, *GVRP, PIM-SM, IGMP, *IEEE

802.1D/1w/1s, OSPF, RIP1/2 *Jumbo Frame(9Kbytes)，*QinQ*ICMPV6、
*OSPFV3（for IPV6）、*RIPng、*MLDV1/V2、*ISATAP、*6 TO 4 Tunnels、
*configured Tunnels

Backplane Bandwidth ≥768Gbps

Switching Capacity ≥512Gbps

Packet Forwarding Rate ≥285.7Mpps

Module slots

10（Two are used for managed engine module）

LPU slots 8

MAC Table 128K

VLAN Table 4K

*Port Aggregation Support 802.3ad ,6 trunks, 8 ports in each trunk

*STP/RSTP Support IEEE 802.3D/802.1w/802.1s

10G Core Routing Switch User Manual

陈泽科技有限公司

- - 2 - -

www.stephen-tele.com

Mirror Support

*SUPER VLAN Support

*DHCP Support DHCP Relay

Support DHCP Server

*802.1x Support

*Web Portal Support

*VRRP Support

Defeat DoS Attack Support

*Management protocol

SNMPv1/v2c/v3、Web(JAVA)、CLI(Telnet /Console)、RMON(1,2,3,9)、
cluster management、SSH、SNTP、Syslog

Working Environment

Operation temperature -20~50˚C

Storage temperature -40~70˚C

Humidity 10% - 90% RH

Power supply

AC:

100V~240V, 47~63Hz

DC：-60V~-48V

Dimension(mm)（L× W×H）

436×438×906

Weight（Kg）

<40Kg

Power <240W

10G Core Routing Switch User Manual

陈泽科技有限公司

- - 3 - -

www.stephen-tele.com

2. Logging in Switch

2.1. Setting up Configuration Environment via the Console Port

Step 1: As shown in the figure below, to set up the local configuration environment, connect the serial port of a PC (or
a terminal) to the Console port of the switch with the Console cable.

Figure 2-1 Setting up the local configuration environment via the Console port

Step 2: Run terminal emulator (such as Terminal on Windows 3X or the Hyper Terminal on Windows 9X) on the
Computer. Set the terminal communication parameters as follows: Set the baud rate to 19200, databit to 8, parity
check to none, stopbit to 1, flow control to none and select the terminal type as VT100.

Figure 2-2 Setting up new connection

10G Core Routing Switch User Manual

陈泽科技有限公司

- - 4 - -

www.stephen-tele.com

Figure 2-3 Configuring the port for connection

Figure 2-4 Setting communication parameters

10G Core Routing Switch User Manual

陈泽科技有限公司

- - 5 - -

www.stephen-tele.com

Step 3: The switch is powered on. Display self-test information of the switch and prompt you to press Enter to show
the command line prompt such as switch>.

Step 4: Input a command to configure the switch or view the operation state. Input a “?” for an immediate help. For
details of specific commands, refer to the following chapters.

2.2. Setting up Configuration Environment through Telnet

2.2.1. Connecting a PC to the Switch through Telnet

After you have correctly configured IP address of a VLAN interface for an switch via Console port, and added the port
to this VLAN (using port command in VLAN view), you can telnet this switch and configure it.

Step 1: Authenticate the Telnet user via the Console port before the user logs in by Telnet.
Step 2: To set up the configuration environment, connect the Ethernet port of the PC to that of the switch via the LAN.

Figure 2-5 Setting up configuration environment through telnet

Step 3: Run Telnet on the PC and input the IP address of the VLAN connected to the PC port.

Figure 2-6 Running Telnet

Step 4: The terminal displays “Login:” and prompts the user to input the logon user name and password. After you
input the correct user name and password, it displays the command line prompt (such as switch#).

10G Core Routing Switch User Manual

陈泽科技有限公司

- - 6 - -

www.stephen-tele.com

Step 5: Use the corresponding commands to configure the switch or to monitor the running state. Enter “?” to get the
immediate help. For details of specific commands, refer to the following chapters.

2.2.2. Telnet a Switch through another Switch

After a user has logged into a switch, he or she can configure another switch through the switch via Telnet. The local
switch serves as Telnet client and the peer switch serves as Telnet server. If the ports connecting these two switches
are in a same local network, their IP addresses must be configured in the same network segment. Otherwise, the two
switches must establish a route that can reach each other. As shown in the figure below, after you telnet to a switch,
you can run telnet command to log in and configure another switch.

Figure 2-7 Providing Telnet Client service

Step 1: Authenticate the Telnet user via the Console port on the Telnet Server (switch) before login.
Step 2: The user logs in the Telnet Client (switch). For the login process, refer to the section describing “Connecting a
PC to the Switch through Telnet”.
Step 3: Perform the following operations on the Telnet Client:
Step 4: Enter the preset login password and you will see the prompt such switch#.
Step 5: Use the corresponding commands to configure the switch or view it running state. Enter “?” to get the
immediate help. For details of specific commands, refer to the following chapters.

3. Command Line Interface

3.1. Command Line Interface

These series switches provide a series of configuration commands and command line interfaces for configuring and
managing the switch. The command line interface has the following characteristics:

 Local configuration via the Console port and AUX port.
 Local or remote configuration via Telnet.
 Hierarchy command protection to avoid the unauthorized users accessing switch.Enter a “?” to get immediate

online help.

 Provide network testing commands, such as Ping, to fast troubleshoot the network.
 Log in and manage other switch directly, using the Telnet command.
 Provide FTP service for the users to upload and download files.
 Provide the function similar to Doskey to execute a history command.
 The command line interpreter searches for target not fully matching the keywords.

It is ok for you to key in the whole keyword or part of it, as long as it is unique and not ambiguous.

10G Core Routing Switch User Manual

陈泽科技有限公司

- - 7 - -

www.stephen-tele.com

3.2. Command Line configure mode

The command line provides the following configure mode:

 Normal EXEC mode
 privileged EXEC mode
 Global configuration mode
 VLAN interface configuration mode
 OSPF configuration mode

The following table describes the function features of different views and the ways to enter or quit.

Table 3-1 Function feature of command configure mode.

Command mode Function Prompt Command to

enter

Command to exit

Normal EXEC
mode

Show the basic
information
about operation

and statistics

Switch>

Enter right user
name and
password

exit

privileged EXEC
mode

Show the basic
information
about operation

and statistics

Switch# Enter <enable>

and right
password

Exit returns to
normal EXEC
mode

Global
configuration
mode

Configure
system
parameters

Switch(config)# Key in

config in
user user

configure mode

Exit returns to
user configure
mode

interface
configure mode

Configure
interface
parameters

Switch(config-if)# Key in

Interface
interface_type
interface_id in

system configure

mode

Exit returns to
system configure
mode

OSPF
configuration
mode

Configure OSPF
parameters

Switch(config-ospf)# Key in

Router ospf in
system configure

mode

Exit returns to
system configure
mode

RIP configuration
mode

Configure RIP
parameters

Switch(config-rip)# Key in

Router rip in
system configure

mode

Exit returns to
system configure
mode

10G Core Routing Switch User Manual

陈泽科技有限公司

- - 8 - -

www.stephen-tele.com

3.3. Features and Functions of Command Line

3.3.1. Online Help of Command Line

The command line interface provides the following online help modes.

 Full help
 Partial help

You can get the help information through these online help commands, which are described as follows.
Input “?” in any configure mode to get all the commands in it and corresponding descriptions.

switch#?

clear Clear the screen.
config Config system's setting.
debug Debugging functions
download Download file for software upgrade or load user config.
exit Exit current mode and shift to previous mode.
help Description of the interactive help system.
history Config history command.
kill Kill some unexpected things.
logout Disconnect from switch and quit.
no Negate a command or set its defaults.
ping Ping command to test if the net is correct.
quit Disconnect from switch and quit.
reboot Reboot the switch.
remove Remove system configuration.
sendmsg Send message to online user.
show Show running system information.
telnet Telnet to other host or switch.
terminal Set terminal line parameters.
upload Upload file for software upgrade or upload user config.
who Display who is connected to the switch.

write Save current running configuration to flash.

1) Input a command with a “?” separated by a space. If this position is for keywords, all the keywords and the

corresponding brief descriptions will be listed.

switch(config)# port ?

speed Set port speed.
state Set port state.
type Set port type.

3) Input a command with a “?” separated by a space. If this position is for parameters, all the parameters and their
brief descriptions will be listed.

switch(config)# router ?

10G Core Routing Switch User Manual

陈泽科技有限公司

- - 9 - -

www.stephen-tele.com

hw-sync Dynamic route synchronize with hardware route table
ospf OSPF specific commands
rip Set Rip config parameters.

switch(config)# router ospf ?

<cr> Just Press <Enter> to Execute command!
<cr> indicates no parameter in this position. The next command line repeats the command, you can press <Enter> to
execute it directly.

4) Input a character string with a “?”, then all the commands with this character string as their initials will be listed.

switch(config)# a?
access-list Set access-list parameters.

arp Config system's setting.
authentication Config information of authentication.

5) Input a command with a character string and “?”, then all the key words with this character string as their initials in
the command will be listed.
switch# show ve?
version Display SPROS version.

6) Input the first letters of a keyword of a command and press <Tab> key. If no other keywords are headed by this
letters, then this unique keyword will be displayed automatically.

3.3.2. Displaying Characteristics of Command Line

Command line interface provides the following display characteristics:

 For users’ convenience, the instruction and help information can be displayed in both English and Chinese.
 For the information to be displayed exceeding one screen, pausing function is provided. In this case, users can

have three choices, as shown in the table below.

Table 3-2 Functions of displaying

Key or Command

Function

Press <Q> when the display pauses

Stop displaying and executing command.

Press any key when the display pauses

Continue to display the next screen of

information.
Press <Enter> when the display
pauses

Continue to display the next line of information.

10G Core Routing Switch User Manual

陈泽科技有限公司

- - 10 - -

www.stephen-tele.com

3.3.3. History Command of Command Line

Command line interface provides the function similar to that of DosKey. The commands entered by users can be
automatically saved by the command line interface and you can invoke and execute them at any time later. History
command buffer is defaulted as 10. That is, the command line interface can store 10 history commands for each
user.The operations are shown in the table below.

Table 3-3 Retrieving history command

Operation Key Result

Display history
command

history Display history command by

user inputting

Retrieve the previous
history command

Up cursor key <↑> or
<Ctrl+P>

command, if there is any.

Retrieve the next
history command
Down

Down cursor key <↓>
or <Ctrl+N>

Retrieve the next history
command, if there is any.

3.3.4. Common Command Line Error Messages

All the input commands by users can be correctly executed, if they have passed the grammar check. Otherwise, error
messages will be reported to users. The common error messages are listed in the following table.

Table 3-4 Common command line error messages

Error messages Causes

Unrecognized command

Cann

ot find the command.

Cannot find the keyword.

Wrong parameter type.

The value of the parameter exceeds the range.

Incomplete command The input command is incomplete.

Too many parameters Enter too many parameters.

Ambiguous command

The parameters e

ntered are not specific.

3.3.5. Editing Characteristics of Command Line

Command line interface provides the basic command editing function and supports to edit multiple lines. A command
cannot longer than 256 characters. See the table below.

Table 3-5 Editing functions

10G Core Routing Switch User Manual

陈泽科技有限公司

- - 11 - -

www.stephen-tele.com

Key Function

Common keys

Insert from the cursor position and the cursor moves to the right, if
the edition buffer still has free space.

Backspace Move the cursor a character backward

Leftwards cursor key
<←> or <Ctrl+B>

Move the cursor a character backward

Rightwards cursor key

<→> or <Ctrl+F>

Move the cursor a character forward

Up cursor key <↑> or <Ctrl+P>
Down cursor key <↓> or <Ctrl+N>

Retrieve the history command.

<Tab>

Press <Tab> after typing the incomplete key word and the system
will execute the partial help: If the key word matching the typed
one is unique, the system will replace the typed one with the
complete key word and display it in a new line; if there is not a
matched key word or the matched key word is not unique, the
system will do no modification but display the originally typed word
in a new line.

10G Core Routing Switch User Manual

陈泽科技有限公司

- - 12 - -

www.stephen-tele.com

4. Basic Configuration

4.1. Console Connection

The CLI program provides two different command levels — normal access level (Normal Exec) and privileged access
level (Privileged Exec).

The commands available at the Normal Exec level are a limited subset of those available at the Privileged Exec level
and allow you to only display information and use basic utilities. To fully configure the switch parameters, you must
access the CLI at the Privileged Exec level. Access to both CLI levels are controlled by user names and passwords.
The switch has a default user name and password for each level. To log into the CLI at the Privileged Exec level using
the default user name and password, perform these steps:

1. To initiate your console connection, press <Enter>. The “User Access Verification” procedure starts.

2. At the <Login:> prompt, enter “admin.”

3. At the Password prompt, direct press “enter” (The default password not set.)

4. The session is opened and the CLI displays the “switch>” prompt indicating you have access at the Normal Exec level.

5. At the “switch>” prompt ,enter “enable” .
6 . At the Password prompt, direct press “enter” (The default password not set.)

7. The session is opened and the CLI displays the “switch#” prompt indicating you have access at the Privileged Exec
level.

4.2. Creating user and setting password

When you create new user ,the default user is deleted automatically.
Beginning in privileged EXEC mode, follow these steps to create user and set password.

Command

Purpose

Step 1 config terminal Enter global configuration mode.
Step 2 user add user-name

login-password login-password

Create user and set login password.
User-name is less than 4 chars.

Login

-

password is less than 6 chars.

Step 3 user login-password user-name

<CR>

Input new login password for
user abc please.
New Password:
Confirm Password:

(optional) Change login password.

Step 4 user enable-password

user-name <CR>

Input new enable password for
user abc please.
New Password:

Confirm Password:

(optional) Set or change enable password.

10G Core Routing Switch User Manual

陈泽科技有限公司

- - 13 - -

www.stephen-tele.com

Step 5 user role user-name {NORMA |

ADMIN enable-password
enable-password}

(optional) Change user access level.

Step 6

exit Return to privileged EXEC mode.

Step 7 user list Verify your entries.

Step 8 Copy running-config

startup-config

(Optional) Save your entries in the configuration file.

4.3. Saving configuration file

Use the Copy running-configuration startup-configuration command to save the current-configuration in the Flash
Memory, and the configurations will become the startup-configuration when the system is powered on for the next
time.

Beginning in privileged EXEC mode, follow these steps to save configuration to the FLASH Memory.

Command Purpose

Step 1 Copy running-configuration

startup

-

configuration

Save your entries in the configuration file.

4.4. Restore system to default configuration

You can use earse command to resume the startup-configuration to default configuration, after that you must reboot
the system. Beginning in privileged EXEC mode, follow these steps to restore system to default configuration.

Command Purpose

Step 1 Erase startup-config Save your entries in the configuration file.

Step 2

reboot

Reboot the system.

4.5. Reboot system

Beginning in privileged EXEC mode, follow these steps to restart the system.

Command Purpose

Step 1

reboot

Reboot the system.

4.6. Configuring a System Name

You configure the system name on the switch to identify it. By default, the system name is Switch.
The default switch system name and prompt is Switch.
Beginning in privileged EXEC mode, follow these steps to manually configure a system name:

10G Core Routing Switch User Manual

陈泽科技有限公司

- - 14 - -

www.stephen-tele.com

Command Purpose

Step 1 config terminal Enter global configuration mode.

Step 2 hostname <hostname> Manually configure a system name.

The default setting is switch.
The name must follow the rules for ARPANET host names.

They must start with a letter, end with a letter

or digit, and have as interior characters only letters, digits,

and hyphens. Names can be up to 63 characters.

Step 3

exit Return to privileged EXEC mode.

Step 4 show running-config Verify your entries.

Step 5 Copy running-config

startup-config

(Optional) Save your entries in the configuration file.

4.7. System service configuration

Beginning in privileged EXEC mode, follow these steps to enable/disable snmp and telnet system service:

Command

Purpose

Step 1 config terminal Enter global configuration mode.
Step 2 service telnet {enable|disable} Enabling/disabling telnet service.

Step 3 show services Verify your entries.

Step 4 Copy running-config

startup

-

config

(Optional) Save your entries in the configuration file.

4.8. Setting system Clock manually

If you have an outside source on the network that provides time services, such as an NTP server, you do not need to
manually set the system clock. Beginning in privileged EXEC mode, follow these steps to set system clock:

Command

Purpose

Step 1 config terminal Enter global configuration mode.

Step 2 clock set year month day

<HH:MM:SS>

Manually set the system clock using one of these
formats.

• For hh:mm:ss, specify the time in hours (24-hour
format), minutes,and seconds. The time specified is
relative to the configured time zone.

• For day, specify the day by date in the month.

• For month, specify the month .

• For year, specify the year (no abbreviation).

Step 3 show time Verify your entries.

Step 4 Copy running-config

startup

-

config

(Optional) Save your entries in the configuration file.

10G Core Routing Switch User Manual

陈泽科技有限公司

- - 15 - -

www.stephen-tele.com

This example shows how to set system clock:
switch(config)# clock set 2006 8 11 09:42:34
New time is:
Fri Aug 11 09:42:34 CST 2006

4.9. Setting the screen length

If a command displays more than one screen of information, you can use the following command to set how many
lines to be displayed in a screen, so that the information can be separated in different screens and you can view it
more conveniently. Beginning in privileged EXEC mode, follow these steps to set the screen length:

Command Purpose

Step 1 config terminal Enter global configuration mode.

Step 2 terminal length value By default, the terminal screen length is 24 lines.

Terminal length 0 indicates to disable screen display
separation function.

Value range is 0 to 512.

Step 3 Copy running-config

startup

-

config

(Optional) Save your entries in the configuration file.

5. Port Configuration

5.1. Ethernet Port Overview

STCS6010 Series Core Routing Switches support these LPU boards:

 24GTX
 24GFX
 2XP

The Ethernet ports of STCS6010series switches have the following features:

 2XP provides two 10GE optical ports and works in 10Gbps full duplex mode, which need not configuring.
 24GTX provides 24 10/100/1000Mbpselectrical ports. The electrical ports support MDI/MDI-X auto-sensing and

may work in 1000Mbps full duplex, 100Mbps half/full duplex, or 10Mbps half/full duplex mode.

 24GFX provides 24 Gigabit SFP optical ports. The optical ports in Gigabit full duplex mode, which need not

configuring.

5.2. Ethernet Port Configuration

Ethernet port configuration includes:

 Entering interface configuration mode
 Enabling/disabling an Ethernet port

10G Core Routing Switch User Manual

陈泽科技有限公司

- - 16 - -

www.stephen-tele.com

 Setting the duplex attribute for the Ethernet port
 Setting speed for the Ethernet port
 Setting the type of combo port
 Setting the Ethernet port broadcast suppression ratio
 Setting the Ethernet port multicast suppression ratio
 Setting the Ethernet port dlf suppression ratio
 Setting port mirror
 Setting rate Limits

5.2.1. Entering interface configuration mode

The switch supports these interface types:

 Physical ports—switch ports
 VLANs—switch virtual interfaces
 Port-channels—EtherChannel of interfaces

To configure a physical interface (port), enter interface configuration mode, and specify the interface type, module
number, and switch port number.

 Type—Gigabit Ethernet(gigabitethernet or gi) for 10/100/1000 Mbps Ethernet ports, or 10-Gigabit Ethernet

(tengigabitethernet or te) for 10,000 Mbps

 Module number—The module or slot number on the switch.
 Port number—The interface number on the switch. The port numbers always begin at 1, starting at the left when

facing the front of the switch, for example, gigaethernet 1/1.

Procedures for Configuring Interfaces

These general instructions apply to all interface configuration processes.

Step 1 Enter the configure terminal command at the privileged EXEC prompt:

Switch# configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

Switch(config)#

Step 2 Enter the interface global configuration command. Identify the interface type, the module number, and the
number of the connector. In this example, Gigabit Ethernet port 1 on module 1 is selected:

Switch(config)# interface gigabitethernet 1/1
Switch(config-if)#

Step 3 Follow each interface command with the interface configuration commands that the interface requires. The
commands that you enter define the protocols and applications that will run on the interface. The commands are
collected and applied to the interface when you enter another interface command or enter end to return to privileged
EXEC mode.

Step 4 After you configure an interface, verify its status by using the show privileged EXEC commands.
Enter the show interfaces privileged EXEC command to see a list of all interfaces on or configured for the switch. A
report is provided for each interface that the device supports or for the specified interface.

10G Core Routing Switch User Manual

陈泽科技有限公司

- - 17 - -

www.stephen-tele.com

5.2.2. Enabling/Disabling an Ethernet Port

The following command can be used for disabling or enabling the port.
Beginning in privileged EXEC mode, follow these steps to enable an Ethernet port.

Command

Purpose

Step 1 config terminal Enter global configuration mode.

Step 2 Interface interface_id Enter interface configuration mode for the physical

interface to be configured.

Step 3

shutdown

Disabling an Ethernet interface.

Step 4

exit Return to global configuration mode.

Step 5 exit Return to privileged EXEC mode.

Step 6

show

Interface

interface_id

Verify your entries.

Step 7 Copy running-config

startup-config

(Optional) Save your entries in the configuration file.

By default, the port is enabled.
To enabling an Ethernet interface ,use the interface configuration command no shutdown.

5.2.3. Setting the Duplex Attribute and speed of the Ethernet Port

Ethernet interfaces on the switch operate at 10, 100, or 1000 Mbps, or 10,000 Mbps and in either full or half-duplex
mode. In full-duplex mode, two stations can send and receive traffic at the same time. Normally, 10-Mbps ports
operate in half-duplex mode, which means that stations can either receive or send traffic. Switch models include
combinations of Gigabit Ethernet (10/100/1000-Mbps) ports, 10-Gigabit module ports, and small form-factor
pluggable (SFP) module slots supporting Gigabit SFP modules.

 You cannot configure speed or duplex mode on 10-Gigabit module ports; these ports operate only at 10,000 Mbps

and in full duplex mode.

 You can configure interface speed on Gigabit Ethernet (10/100/1000-Mbps) ports. You can configure Gigabit

Ethernet ports to full-duplex mode or to autonegotiate; you cannot configure half-duplex mode on Gigabit
Ethernet ports.

 You cannot configure speed on SFP module ports, but you can configure speed to not negotiate (nonegotiate) if

connected to a device that does not support autonegotiation. However, when a 1000BASE-T SFP module is in the
SFP module port, you can configure speed as 10, 100, or 1000 Mbps, or auto.

 You cannot configure duplex mode on SFP module ports unless a 1000BASE-T SFP module is in the port. All other

SFP modules operate only in full-duplex mode.

– When a 1000BASE-T SFP module is in the SFP module port, you can configure duplex mode to auto or full.

To configure a port to send and receive data packets at the same time, set it to full-duplex. To configure a port to
either send or receive data packets at a time, set it to half-duplex. If the port has been set to auto-negotiation mode,
the local and peer ports will automatically negotiate about the duplex mode. You can use the following command to
set the speed on the Ethernet port. If the speed is set to auto-negotiation mode, the local and peer ports will
automatically negotiate about the port speed.

Beginning in privileged EXEC mode, follow these steps to setting the duplex attribute and speed of the Ethernet port.

10G Core Routing Switch User Manual

陈泽科技有限公司

- - 18 - -

www.stephen-tele.com

Command

Purpose

Step 1 config terminal Enter global configuration mode.
Step 2 Interface interface_id Enter interface configuration mode for the physical

interface to be configured.

Step 3 speed { 10 | 100 | 1000 | auto } Enter the appropriate speed parameter for the

interface:

 Enter 10, 100, or 1000 to set a specific speed for

the interface.

 The 1000 keyword is available only for

10/100/1000 Mbps ports

 Enter auto to enable the interface to autonegotiate

speed with the device connected to the interface.

 This command is not available on a 10-Gigabit

Ethernet interface.

Step 4 duplex { auto | full | half } Enter the duplex parameter for the interface.

Enable half-duplex mode (for interfaces operating only
at 10 or 100 Mbps). You cannot configure half-duplex
mode for interfaces operating at 1000 Mbps.

This command is not available on a 10-Gigabit Ethernet

interface.
This command is not available on SFP module ports
with these exceptions:

 If a 1000BASE-T SFP module is inserted, you can

configure duplex to auto or full.

Step 5 exit Return to global configuration mode.

Step 6

exit Return to privileged EXEC mode.

Step 7

show

Inte

rface

interface_id

Verify your entries.

Step 8 Copy running-config

startup

-

config

(Optional) Save your entries in the configuration file.

Use the no speed and no duplex interface configuration commands to return the interface to the default speed and
duplex settings (autonegotiate). To return all interface settings to the defaults, use the default interface interface-id
interface configuration command.

This example shows how to set the interface speed to 1000 Mbps and the duplex mode to full on a 10/100/1000 Mbps
port:

Switch# configure terminal
Switch(config)# interface gigabitethernet1/1
Switch(config-if)# speed 1000
Switch(config-if)# duplex full

Note that, The Gigabit electrical Ethernet port can operate in full duplex or auto-negotiation mode. When the port
operates at 1000Mbps, the duplex mode can be set to full (full duplex) or auto (auto-negotiation).
The port defaults the auto (auto-negotiation) mode.
By default, the speed of the port is in auto mode.

10G Core Routing Switch User Manual

陈泽科技有限公司

- - 19 - -

www.stephen-tele.com

5.2.4. Adding a Description for an Interface

You can add a description about an interface to help you remember its function. The description appears in the output
of these privileged EXEC commands: show running-config, and show interfaces.
Beginning in privileged EXEC mode, follow these steps to add a description for an interface:

Command Purpose

Step 1 config terminal Enter global configuration mode.
Step 2 Interface interface_id Enter interface configuration mode for the physical

interface to be configured.

Step 3 description string Add a description (up to 240 characters) for an

interface.

Step 4

exit Return to global configuration mode.

Step 5

exit Return to privileged EXEC mode.

Step 6 show Interface interface_id Verify your entries.

Step 7 Copy running-config

startup

-

config

(Optional) Save your entries in the configuration file.

Use the no description interface configuration command to delete the description.
This example shows how to add a description on a port and how to verify the description:

Switch# config terminal
Switch(config)# interface gigabitethernet1/1
Switch(config-if)# description Connects to Marketing

5.2.5. Enabling/Disabling Flow Control for the Ethernet Port

Flow control enables connected Ethernet ports to control traffic rates during congestion by allowing congested nodes
to pause link operation at the other end. If one port experiences congestion and cannot receive any more traffic, it
notifies the other port to stop sending until the condition clears by sending a pause frame. Upon receipt of a pause
frame, the sending device stops sending any data packets, which prevents any loss of data packets during the
congestion period. Beginning in privileged EXEC mode, follow these steps to enable flow control for the Ethernet port.

Command

Purpose

Step 1 config terminal Enter global configuration mode.
Step 2 Interface interface_id Enter interface configuration mode for the physical

interface to be configured.

Step 3

flowcontrol on

Enable flow control for an interface.

Step 4 exit Return to global configuration mode.

Step 5

exit

Return to privileged EXEC mode.

Step 6 show Interface interface_id Verify your entries.

Step 7 Copy running-config

startup-config

(Optional) Save your entries in the configuration file.

10G Core Routing Switch User Manual

陈泽科技有限公司

- - 20 - -

www.stephen-tele.com

To disable flow control, use the flowcontrol off interface configuration command.

This example shows how to turn on flow control on a port:

Switch# configure terminal
Switch(config)# interface gigabitethernet1/1
Switch(config-if)# flowcontrol on

5.2.6. Setting the Ethernet Port Broadcast Suppression

You can use the following commands to restrict the broadcast traffic. Once the broadcast traffic exceeds the value set
by the user, the system will maintain an appropriate broadcast packet number by discarding the overflow traffic, so as
to suppress broadcast storm, avoid suggestion and ensure the normal service. The parameter is taken the maximum
wire speed ratio of the broadcast traffic allowed on the port. The smaller the packet number is, the smaller the
broadcast traffic is allowed. Beginning in privileged EXEC mode, follow these steps to Set the Ethernet Port Broadcast
Suppression

Command

Purpose

Step 1 config terminal Enter global configuration mode.
Step 2 Interface interface_id Enter interface configuration mode for the physical

interface to be configured.

Step 3 storm-control broadcast value

value

Enable broadcast Suppression

Packets indicate packet number per second.

Step 4 exit Return to global configuration mode.

Step 5

exit Return to privileged EXEC mode.

Step 6 show Interface interface_id Verify your entries.

Step 7 Copy running-config

startup

-

config

(Optional) Save your entries in the configuration file.

To disable the Ethernet Port Broadcast Suppression, use the no storm-control broadcast interface configuration
command.

5.2.7. Setting the Ethernet Port multicast Suppression

You can use the following commands to restrict the multicast traffic. Once the multicast traffic exceeds the value set
by the user, the system will maintain an appropriate multicast packet number by discarding the overflow traffic, so as
to suppress multicast storm, avoid suggestion and ensure the normal service. The parameter is taken the maximum
wire speed ratio of the multicast traffic allowed on the port. The smaller the packet number is, the smaller the
multicast traffic is allowed.

Beginning in privileged EXEC mode, follow these steps to Set the Ethernet Port multicast Suppression

Command Purpose
Step 1 config terminal Enter global configuration mode.

10G Core Routing Switch User Manual

陈泽科技有限公司

- - 21 - -

www.stephen-tele.com

Step 2 Interface interface_id Enter interface configuration mode for the physical

interface to be configured.

Step 3 storm-control multicast value

value

Enable multicast Suppression

Packets indicate packet number per second.

Step 4 exit Return to global configuration mode.

Step 5

exit Return to privileged EXEC mode.

Step 6 show Interface interface_id Verify your entries.

Step 7 Copy running-config

startup

-

config

(Optional) Save your entries in the configuration file.

To disable the Ethernet Port Broadcast Suppression, use the no storm-control multicast interface configuration
command.

5.2.8. Setting the Ethernet Port dlf Suppression

You can use the following commands to restrict the dlf traffic. Once the dlf traffic exceeds the value set by the user,
the system will maintain an appropriate dlf packet number by discarding the overflow traffic, so as to suppress dlf
storm, avoid suggestion and ensure the normal service. The parameter is taken the maximum wire speed ratio of the
dlf traffic allowed on the port. The smaller the packet number is, the smaller the dlf traffic is allowed.
Beginning in privileged EXEC mode, follow these steps to Set the Ethernet Port dlf Suppression

Command

Purpose

Step 1 config terminal Enter global configuration mode.

Step 2 Interface interface_id Enter interface configuration mode for the physical

interface to be configured.

Step 3 storm-control dlf multicast

value

value

Enable multicast Suppression

Packets indicate packet number per second.

Step 4

exit Return to global configuration mode.

Step 5

exit Return to privileged EXEC mode.

Step 6 show Interface interface_id Verify your entries.

Step 7 Copy running-config

startup-config

(Optional) Save your entries in the configuration file.

To disable the Ethernet Port Broadcast Suppression, use the no storm-control multicast interface configuration
command.

5.2.9. Setting Port Mirroring

Port mirroring duplicates data on the monitored port to the designated monitoring port, for purpose of data analysis
and supervision. The switch supports multiple-to-one mirroring, that is, you can duplicate packets from multiple ports
to a monitoring port.
Beginning in privileged EXEC mode, follow these steps to set port mirroring.

Command Purpose
Step 1 config terminal Enter global configuration mode.

10G Core Routing Switch User Manual

陈泽科技有限公司

- - 22 - -

www.stephen-tele.com

Step 2 monitor session session_number

source interface

start_interface_id [ -
end_interface_id] {both|rx|tx}

Specify the MIRROR session and the source port
(monitored port).
For session_number, the range is from 1 to 4.
For interface-id, specify the source port to monitor.
(Optional) [, | -] Specify a series or range of
interfaces. Enter a space before and after the comma;
enter a space before and after the
hyphen.
(Optional) Specify the direction of traffic to monitor. If
you do not specify a traffic direction, the MIRROR
monitors both sent and received
traffic.

 both—Monitor both received and sent traffic. This

is the default.

 rx—Monitor received traffic.
 tx—Monitor sent traffic.

Note You can use the monitor session session_number

source command multiple times

to configure multiple source ports.
Step 3 monitor session session_number

destination interface
interface_id

Specify the SPAN session and the destination port
(monitoring port).
For session_number, specify the session number

entered in step 2.

Step 5

exit Return to privileged EXEC mode.

Step 6 show mirror all Verify your entries.

Step 7 Copy running-config

startup

-

config

(Optional) Save your entries in the configuration file.

To delete a MIRROR SPAN session, use the no monitor session session_number global configuration command.

To remove a source or destination port from the MIRROR session, use the no monitor session session_number source

{interface interface-id } global configuration command or the no monitor session session_number destination
interface interface-id global configuration command.

This example shows how to set up MIRROR session 1 for monitoring source port traffic to a destination port. First, any
existing MIRROR configuration for session 1 is deleted, and then bidirectional traffic is mirrored from source Gigabit
Ethernet port 1/1 to destination Gigabit Ethernet port 1/2.

Switch(config)# monitor session 1 source interface gigabitethernet 1/1
Switch(config)# monitor session 1 destination interface gigabitethernet 1/2

֠Caution:

Monitor port speed should match or exceed source port speed, otherwise traffic may be
dropped from the monitor port. When mirroring port traffic, the target port must be
included in the same VLAN as the source port.

10G Core Routing Switch User Manual

陈泽科技有限公司

- - 23 - -

www.stephen-tele.com

6. VLAN Configuration

6.1. VLAN Overview

Virtual Local Area Network (VLAN) groups the devices of a LAN logically but not physically into segments to implement
the virtual workgroups. IEEE issued the IEEE 802.1Q in 1999, which was intended to standardize VLAN implementation
solutions.Through VLAN technology, network managers can logically divide the physical LAN into different broadcast
domains. Every VLAN contains a group of workstations with the same demands. The workstations of a VLAN do not
have to belong to the same physical LAN segment. With VLAN technology, the broadcast and unicast traffic within a
VLAN will not be forwarded to other VLANs, therefore, it is very helpful in controlling network traffic,saving device
investment, simplifying network management and improving security.

VLAN Port Membership Modes

You configure a port to belong to a VLAN by assigning a membership mode that specifies the kind of traffic the port
carries and the number of VLANs to which it can belong.

 Static-access: A static-access port can belong to one VLAN and is manually assigned to that VLAN.
 Trunk (IEEE 802.1Q): A trunk port is a member of all VLANs by default, but membership can be limited by

configuring the allowed-VLAN list.

6.2. Configuring VLAN

VLAN configuration includes:

 Creating/deleting a VLAN
 Specifying/removing a VLAN port

To configure a VLAN, first create a VLAN according to the requirements.

6.2.1. Creating/Deleting a VLAN

You can use the following command to create/delete a VLAN.
Beginning in privileged EXEC mode, follow these steps to create a VLAN.

Command

Purpose

Step 1 config terminal Enter global configuration mode.

Step 2 interface vlan vlan_id Create a VLAN.

Vlan_id:2~4094

Step 3

exit Return to privileged EXEC mode.

Step 4 show interface vlan vlan_id Verify your entries.

Step 5 Copy running-config

startup

-

config

(Optional) Save your entries in the configuration file.

To delete a Vlan, use no interface vlan vlan_id global command.

10G Core Routing Switch User Manual

陈泽科技有限公司

- - 24 - -

www.stephen-tele.com

6.2.2. Assigning Static-Access Ports to a VLAN

You can assign a static-access port to a VLAN.
Beginning in privileged EXEC mode, follow these steps to assign a port to a VLAN

Command

Purpose

Step 1 config terminal Enter global configuration mode.

Step 2 Interface interface_id Enter interface configuration mode for the physical

interface to be configured.

Step 3 switchport mode access Define the VLAN membership mode for the port (Layer

2 acces

s port).

Step 4 switchport access vlan vlan_id Assign the port to a VLAN. Valid VLAN IDs are 1 to

4094.

Step 5

end Return to privileged EXEC mode.

Step 6 show Interface vlan vlan_id Verify your entries.

Step 7 Copy running-config

startup

-

config

(Optional) Save your entries in the configuration file.

This example shows how to configure a port as an access port in VLAN 2:

Switch# configure terminal
Switch(config)# interface vlan 2
Switch(config)# interface gigabitethernet 1/1
Switch(config-if)# switchport mode access
Switch(config-if)# switchport access vlan 2

6.2.3. Configuring VLAN Trunks

These sections describe how VLAN trunks function on the switch:

Trunking Overview

A trunk is a point-to-point link between one or more Ethernet switch interfaces and another networking device such as
a router or a switch. Ethernet trunks carry the traffic of multiple VLANs over a single link, and you can extend the
VLANs across an entire network.
The trunking encapsulation 802.1Q is available on all Ethernet interfaces:

Configuring an Ethernet Interface as a Trunk Port

Because trunk ports send and receive VTP advertisements, to use VTP you must ensure that at least one trunk port is
configured on the switch and that this trunk port is connected to the trunk port of a second switch. Otherwise, the
switch cannot receive any VTP advertisements.
This section includes these procedures for configuring an Ethernet interface as a trunk port on the switch:

Beginning in privileged EXEC mode, follow these steps to configure a port as a 802.1Q trunk port:

Command Purpose

Step 1 config terminal Enter global configuration mode.
Step 2 Interface interface_id Enter interface configuration mode for the physical

interface to be configured.

10G Core Routing Switch User Manual

陈泽科技有限公司

- - 25 - -

www.stephen-tele.com

Step 3 switchport mode trunk Configure the interface as a Layer 2 trunk (required

only if the interface

is a Layer 2 access port to specify the trunking mode).

Step 4 switchport trunk vlan vlan_id Specify the VLAN for 802.1Q trunks.

Valid VLAN IDs are 1 to 4094.

Step 5

end Return to privileged EXEC mo

de.

Step 6 show Interface vlan vlan_id Verify your entries.

Step 7 Copy running-config

startup

-

config

(Optional) Save your entries in the configuration file.

To reset all trunking characteristics of a trunking interface to the defaults, use the no switchport trunk interface
configuration command. To disable trunking, use the switchport
mode access interface configuration command to configure the port as a static-access port.

This example shows how to configure a port as an 802.1Q trunk. The example assumes that the neighbor interface is
configured to support 802.1Q trunking.

Switch# configure terminal

Switch(config)# interface gigabitethernet 1/2
Switch(config-if)# switchport mode trunk
Switch(config-if)# switchport trunk vlan 2

6.3. Assigning IP Address for a VLAN

6.3.1. IP Address Overview

IP Address Classification and Indications

IP address is a 32-bit address allocated to the devices which access into the Internet. It consists of two fields: net-id
field and host-id field. There are five types of IP address. See the following figure.

Figure Five classes of IP address

10G Core Routing Switch User Manual

陈泽科技有限公司

- - 26 - -

www.stephen-tele.com

Where, Class A, Class B and Class C are unicast addresses, while Class D addresses are multicast ones and class E addresses are reserved
for special applications in future. The first three types are commonly used.
The IP address is in dotted decimal format. Each IP address contains 4 integers in dotted decimal notation. Each integer corresponds to
one byte, e.g.10.110.50.101.
When using IP addresses, it should also be noted that some of them are reserved for special uses, and are seldom used. The IP
addresses you can use are listed in the following table.

Table IP address classes and ranges

Network
class

Address
range

IP network
range

Note

A

0.0.0.0 to

127.255.255.255

1.0.0.0 to

126.0.0.0

Host ID with all the digits being 0 indicates that the IP
address is the network address, and is used for
network routing.
Host ID with all the digits being 1 indicates the
broadcast address, i.e.broadcast to all hosts on the
network.
IP address 0.0.0.0 is used for the host that is not put
into use after starting up.
The IP address with network number as 0 indicates
the current network and its network can be cited by
the router without knowing its network number.
Network ID with the format of 127.X.Y.Z is reserved
for self-loop test and the packets sent to this address
will not be output to the line. The
packets are processed internally and regarded as

input packets.

B

128.0.0.0 to

191.255.255.255

128.0.0.0 to

191.254.0.0

Host ID with all the digits being 0 indicates that the IP
address is the network address, and is used for
network routing.
Host ID with all the digits being 1 indicates the
broadcast address, i.e.broadcast to all hosts on the

network.

C

192.0.0.0 to

223.255.255.255

192.0.0.0 to

223.255.254.0

Host ID with all the digits being 0 indicates that the IP
address is the network address, and is used for
network routing.
Host ID with all the digits being 1 indicates the
broadcast address, i.e.broadcast to all hosts on the
network.

D

224.0.0.0 to

239.255.255.255

None

Addresses of class D are multicast addresses.

E

240.0.0.0 to

255.255.255.254

None

The addresses are reserved for futureuse.

Other
addresses

255.255.255.255

255.255.255.255

255.255.255.255 is used as LAN broadcast address.

10G Core Routing Switch User Manual

陈泽科技有限公司

- - 27 - -

www.stephen-tele.com

Subnet and Mask

Nowadays, with rapid development of the Internet, IP addresses are depleting very fast.The traditional IP address
allocation method wastes IP addresses greatly. In order to make full use of the available IP addresses, the concept of
mask and subnet is proposed. A mask is a 32-bit number corresponding to an IP address. The number consists of 1s
and 0s. Principally, these 1s and 0s can be combined randomly. However, the first consecutive bits are set to 1s when
designing the mask. The mask divides the IP address into two parts: subnet address and host address. The bits 1s in the
address and the mask indicate the subnet address and the other bits indicate the host address.If there is no sub-net
division, then its sub-net mask is the default value and the length of "1" indicates the net-id length. Therefore, for IP
addresses of classes A, B and C, the default values of corresponding sub-net mask are 255.0.0.0, 255.255.0.0 and

255.255.255.0 respectively. The mask can be used to divide a Class A network containing more than 16,000,000 hosts
or a Class B network containing more than 60,000 hosts into multiple small networks. Each small network is called a
subnet. For example, for the Class B network address 138.38.0.0, the mask 255.255.224.0 can be used to divide the
network into 8 subnets: 138.38.0.0, 138.38.32.0, 138.38.64.0, 138.38.96.0, 138.38.128.0, 138.38.160.0, 138.38.192.0
and 138.38.224.0 (Refer to the following figure). Each subnet can contain more than 8000 hosts.

Figure Subnet division of IP address

6.3.2. Assigning IP Address for a VLAN

Beginning in privileged EXEC mode, follow these steps to configure the IP address of the VLAN interface.

Command

Purpose

Step 1 config terminal Enter global configuration mode.
Step 2 Interface vlan vlan_id Enter interface configuration mode, and enter the

interface to be configured as a Layer 3 interface.

Step 3 ipaddress ip-address net-mask Configure the IP address and IP subnet.
Step 4 end Return to privileged EXEC mode.

Step 5

show

Interface vla

n

vlan_id

Verify your entries.

Step 6 Copy running-config

startup

-

config

(Optional) Save your entries in the configuration file.

10G Core Routing Switch User Manual

陈泽科技有限公司

- - 28 - -

www.stephen-tele.com

To remove an IP address from an interface, use the no ipaddress interface configuration command.
This example shows how to configure a port as a routed port and to assign it an IP address:

Switch# configure terminal
Switch(config)# interface vlan 2
Switch(config-if)# ipaddress 192.168.135.21 255.255.255.0

6.4. Troubleshooting IP Address Configuration

Fault 1: The switch cannot ping through a certain host in the LAN.
Troubleshooting can be performed as follows:

Check the configuration of the switch. Use show arp command to view the ARP entry table that the Switch maintains.

 Troubleshooting: First check which VLAN includes the port of the switch used to connect to the host.
 Check whether the VLAN has been configured with the VLAN interface. Then check whether the IP address of the

VLAN interface and the host is on the same network segment.

7. Configuring IP Routing

This chapter describes how to configure IP routing on the switch. A switch operates and appears as a single router to
the rest of the routers in the network. Basic routing functions, including static routing,the Routing Information
Protocol (RIP) and Open Shortest Path First protocol (OSPF).

7.1. Introduction to IP Route and Routing Table

7.1.1. IP Route and Route Segment

Routers are implemented for route selection in the Internet.
A router works in the following way: It selects an appropriate path (through a network) according to the destination
address of its received packet and forwards the packet to the next router. It works in this way hop by hop and the last
router in the path is responsible for submitting the packet to the destination host to complete the IP packet forwarding
and the routing across network segments.

In a network, the router regards a path for sending a packet as a logical route unit, and calls it a Hop. For example, in
the figure below, a packet sent from Host A to Host C, a packet should go through 2 routers and the packet is
transmitted through two hops and router segments. Therefore, when a node is connected to another node through a
network, there is a hop between these two nodes and these two nodes are deemed as adjacent in the Internet. In the
same principle, the adjacent routers refer to two routers connected to the same network. The number of route
segments between a router and hosts in the same network counted as zero. In the following figure, the bold arrows
represent the hops.

A router can be connected to any physical link that constitutes a route segment for routing packets via the network.

10G Core Routing Switch User Manual

陈泽科技有限公司

- - 29 - -

www.stephen-tele.com

Figure About hops

As the networks may have different sizes, the segment lengths connected between two different pairs of routers are
also different. The number of route segments multiplies a weighted coefficient can serve as a weighted measurement
for the actual length of the signal transmission path.
If a router in a network is regarded as a node and a route segment in the Internet is regarded as a link, message
routing in the Internet works in a similar way as the message routing in a conventional network. Message routed
through the shortest route may not always be the optimal way route. For example, routing through 3 LAN route
segments may be much faster than that through 2 WAN route segments.

7.1.2. Route Selection through the Routing Table

The key for a router to forward packets is the routing table. Each router saves a routing table in its memory, and each
entry of this table specifies the physical port of the router through which the packet is sent to a subnet or a host.
Therefore, it can reach the next router in via a particular path or reach a destination host via directly connected
network.
A routing table has the following key entries:

 Destination address: It is used to identify the destination IP address or thedestination network of IP packet, which

is 32 bits in length.

 Network mask: It is made up of several consecutive "1"s, which can be expressed either in the dotted decimal

format or by the number of the consecutive "1" s in the mask. Combining with the destination address, it is used
to identify the network address of the destination host or router. If the destination address is ANDed with the
network mask, you will get the address of the network segment where the destination host or router is located.
For example, if the destination address is 129.102.8.10, the address of the network where the host or the router
with the mask 255.255.0.0 is located will be 129.102.0.0.

 Output interface: It indicates an interface through which an IP packet should be forwarded.
 Next hop address: Indicates the next router that an IP packet will pass through.
 Priority added to the IP routing table for a route: There may be different next hops to the same destination. These

routes may be discovered by different routing protocols, or they can just be the static routes configured manually.
The one with the highest priority (the smallest numerical value) will be selected as the current optimal route.

According to different destinations, the routes can be divided into the following:

 Subnet route: The destination is a subnet.

10G Core Routing Switch User Manual

陈泽科技有限公司

- - 30 - -

www.stephen-tele.com

 Host route: The destination is a host In addition, according to whether the network of the destination host is

directly connected to the router, there are the following types of routes:

 Direct route: The router is directly connected to the network where the destination locates.
 Indirect route: The router is not directly connected to the network where the destination locates.

In order to limit the size oft the routing table, an option is available to set a default route.All the packets that fail to
find the suitable entry will be forwarded through this default route.

In a complicated Internet as shown in the following figure, the number in each network is the network address. The
router R8 is connected with three networks, so it has three IP addresses and three physical ports, and its routing table
is shown in the diagram below:

Figure 12-2 The routing table

7.2. Routing Management Policy

This Series Routing Switches support the configuration of a series of dynamic routing protocols such as RIP, OSPF , as
well as the static routes. The static routes configured by the user are managed together with the dynamic routes as
detected by the routing protocol. The static routes and the routes learned or configured by different routing protocols
can also be shared with each other.

7.2.1. Routing protocols and the preferences of the corresponding routes

Different routing protocols (as well as the static configuration) may generate different routes to the same destination,
but not all these routes are optimal. In fact, at a certain moment, only one routing protocol can determine a current
route to a specific destination. Thus, each of these routing protocols (including the static configuration) is set a
preference, and when there are multiple routing information sources, the route discovered by the routing protocol
with the highest preference will become the current route. Routing protocols and the default preferences (the smaller
the value, the higher the preference is) of the routes learned by them are shown in the following table.

Table 12-1 Routing protocols and the default preferences for the routes learned by them

10G Core Routing Switch User Manual

陈泽科技有限公司

- - 31 - -

www.stephen-tele.com

Routing protocol or route type

The preference of the corresponding route

DIRECT

0

OSPF

10

STATIC

60

RIP

100

UNKNOWN

255

In the table, 0 indicates a direct route. 255 Indicates any route from unreliable source. Except for direct routing, the
preferences of various dynamic routing protocols can be manually configured to meet the user requirements. In
addition, the preferences for individual static routes can be different.

7.2.2. Supporting Load Sharing and Route Backup

I. Load sharing

Load sharing: Support multi-route mode, permitting to configure multiple routes that reach the same destination and
use the same precedence. The same destination can be reached via multiple different paths, whose precedences are
equal. When there is no route that can reach the same destination with a higher precedence, the multiple routes will
be adopted by IP, which will forward the packets to the destination via these paths so as to implement load sharing.
For the same destination, a specified routing protocol may find multiple different routes.If the routing protocol has the
highest precedence among all active routing protocols,these multiple routes will be regarded as currently valid routes.
Thus, load sharing of IP traffic is ensured in terms of routing protocols.

II. Route backup

Route backup: Support route backup. When main route is in failure, the system will automatically switch to a backup
route to improve the network reliability.In order to achieve route backup, the user can configure multiple routes to the
same destination according to actual situation. One of the routes has the highest precedence and is called as main
route. The other routes have descending precedences and are called as backup routes. Normally, the router sends data
via main route. When the line is in failure, the main route will hide itself and the router will choose one from the left
routes as a backup route whose precedence is higher than others’ to send data. In this way, the switchover from the
main route to the backup route is realized. When the main route recovers, the router will restore it and re-select route.
As the main route has the highest precedence, the router will choose the main route to send data. This process is the
automatic switchover from the backup route to the main route.

7.2.3. Routes Shared between Routing Protocols

As the algorithms of various routing protocols are different, different protocols may generate different routes, thus
bringing about the problem of how to resolve the differences when different routes are generated by different routing
protocols. The SPEED series switches can import the information of another routing protocol.Each protocol has its own
route redistribution mechanism.

10G Core Routing Switch User Manual

陈泽科技有限公司

- - 32 - -

www.stephen-tele.com

7.3. Static Route Configuration

7.3.1. Introduction to Static Route

Attributes and Functions of Static Route

A static route is a special route. You can set up an interconnecting network with the static route configuration. The
problem for such configuration is when a fault occurs to the network, the static route cannot change automatically to
steer away from the node causing the fault, if without the help of an administrator. In a relatively simple network, you
only need to configure the static routes to make the router work normally. The proper configuration and usage of the
static route can improve the network performance and ensure the bandwidth of the important applications.

Default Route

A default route is a static route, too. A default route is a route used only when no suitable routing table entry is
matched and when no proper route is found, the default route is used. In a routing table, the default route is in the
form of the route to the network 0.0.0.0 (with the mask 0.0.0.0). You can see whether it has been set via the output of
the command display ip routing-table. If the destination address of a packet fails in matching any entry of the routing
table, the router will select the default route to forward this packet. If there is no default route and the destination
address of the packet fails in matching any entry in the routing table, this packet will be discarded, and an Internet
Control Message Protocol (ICMP) packet will be sent to the originating host to inform that the destination host or
network is unreachable. Default route is very useful in the networks. Suppose that there is a typical network, which
consists of hundreds of routers. In that network, far from less bandwidth would be consumed if you put all kinds of
dynamic routing protocols into use without configuring a default route. Using the default route could provide an
appropriate bandwidth, even not achieving a high bandwidth, for communications between large numbers of users.

Static Route Configuration

Static Route Configuration includes:

 Configuring a static route
 Configuring a default route

Configuring a static route

Perform the following configurations in global configuration mode.
Beginning in privileged EXEC mode, follow these steps to configure a static route.

Command

Purpose

Step 1 config terminal Enter global configuration mode.
Step 2 ip route ipaddress netmask

nexthopaddr

[metric

]

Configuring a static route.

Step 3

exit Return to privileged EX

EC mode.

Step 4 show ip route Verify your entries.

Step 5 Copy running-config

startup

-

config

(Optional) Save your entries in the configuration file.

10G Core Routing Switch User Manual

陈泽科技有限公司

- - 33 - -

www.stephen-tele.com

To delete a static route use no ip route ipaddress netmask nexthopaddr [metric] global configuration command.
The parameters are explained as follows:

 ipaddress and netmask

The ipaddress and netmask are in a dotted decimal format. As "1"s in the 32-bit mask is required to be consecutive,
the dotted decimal mask can also be replaced by the mask-length (which refers to the digits of the consecutive "1"s in
the mask).

 Nexthopaddr

When configuring a static route, you can specify the gateway-address to decide the next hop address, depending on
the actual conditions.

In fact, for all the routing items, the next hop address must be specified. When IP layer transmits a packet, it will first
search the matching route in the routing table according to the destination address of the packet. Only when the next
hop address of the route is specified can the link layer find the corresponding link layer address, and then forward the
packet according to this address.

Configuring a default route

Perform the following configurations in global configuration mode.
Beginning in privileged EXEC mode, follow these steps to configure a default route.

Command

Purpose

Step 1 config terminal Enter global configuration mode.

Step 2 ip route 0.0.0.0 0.0.0.0

nexthopaddr [metric]

Configuring default route.

Step 3

exit Return to privileged EXEC mode.

Step 4 show ip route Verify your entries.

Step 5 Copy running-config

startup-config

(Optional) Save your entries in the configuration file.

To delete a static route use no ip route 0.0.0.0 0.0.0.0 nexthopaddr [metric] global configuration command.
The meanings of parameters in the command are the same as those of the static route.

Typical Static Route Configuration Example

I. Networking requirements

As shown in the figure below, the masks of all the IP addresses in the figure are 255.255.255.0. It is required that all
the hosts or Routing Switches can be interconnected in pairs by configuring static routes.

II. Networking diagram

10G Core Routing Switch User Manual

陈泽科技有限公司

- - 34 - -

www.stephen-tele.com

Figure 12-3 Networking diagram of the static route configuration example

III. Configuration procedure

# Setting switch A VLAN and specifying IP address for VLAN

switchA(config)#interface vlan 2
switchA(config-if)#ipaddress 1.1.1.2 255.255.255.0
switchA(config)#exit
switchA(config)#interface vlan 3
switchA(config-if)# ipaddress 1.1.2.1 255.255.255.0

# Setting default route for switch A

switchA(config)#ip route 0.0.0.0 0.0.0.0 1.1.2.2

# Setting switch B VLAN and specifying IP address for VLAN

switchB(config)#interface vlan 2
switchB(config-if)#ipaddress 1.1.3.2 255.255.255.0
switchB(config)#exit
switchB(config)#interface vlan 3
switchB(config-if)# ipaddress 1.1.4.1 255.255.255.0

# Setting default route for switch B

switchB(config)#ip route 0.0.0.0 0.0.0.0 1.1.3.1

# Setting switch C VLAN and specifying IP address for VLAN

switchC(config)# interface vlan 2
switchC(config-if)# ipaddress 1.1.2.2 255.255.255.0
switchC(config-if)#exit
switchC(config)# interface vlan 3
switchC(config-if)# ipaddress 1.1.3.1 255.255.255.0
switchC(config-if)#exit
switchC(config)# interface vlan 4
switchC(config-if)# ipaddress 1.1.5.2 255.255.255.0

10G Core Routing Switch User Manual

陈泽科技有限公司

- - 35 - -

www.stephen-tele.com

switchC(config-if)#exit

# Setting static route for switch C

switchC(config)#ip route 1.1.1.0 255.255.255.0 1.1.2.1
switchC(config)#ip route 1.1.4.0 255.255.255.0 1.1.3.2

Static Route Fault Diagnosis and Troubleshooting

By default the Switch is not configured with the dynamic routing protocol and both the physical status and the link
layer protocol status of the interface is UP, but the IP packets cannot be forwarded normally.
Troubleshooting:

 Use the show ip route command to view whether the corresponding static route is correctly configured.
 Use the show ip route command to view whether the corresponding route is valid.

RIP Configuration

Brief Introduction to RIP

Routing Information Protocol (RIP) is a relatively simple dynamic routing protocol, but it has a wide application. RIP is a
kind of Distance-Vector (D-V) algorithm-based protocol and exchanges routing information via UDP packets. It employs
Hop Count to measure the distance to the destination host, which is called Routing Cost. In RIP, the hop count from a
router to its directly connected network is 0, and that to a network which can be reached through another router is 1,
and so on. To restrict the time to converge, RIP prescribes that the cost value is an integer ranging 0 and 15. The hop
count equal to or exceeding 16 is defined as infinite, that is to say, the destination network or the host is unreachable.
RIP sends routing refreshing message every 30 seconds. If no routing refreshing message is received from one network
neighbor in 180 seconds, RIP will tag all routes of the network neighbor to be unreachable. If no routing refreshing
message is received from one network neighbor in 300 seconds, RIP will finally remove the routes of the network
neighbor from the routing table. To improve the performances and avoid route loop, RIP supports Split Horizon, Poison
Reverse and allows importing the routes discovered by other routing protocols Each router running RIP manages a
route database, which contains routing entries to all the reachable destinations in the network. These routing entries
contain the following information:

 Destination address: IP address of a host or network.
 Next hop address: The address of the next router that an IP packet will pass through for reaching the destination.
 Output interface: The interface through which the IP packet should be forwarded.
 Cost: The cost for the router to reach the destination, which should be an integer in the range of 0 to 16.
 Timer: Duration from the last time that the routing entry is modified till now. The timer is reset to 0 whenever a

routing entry is modified.

 Route tag: Discriminate whether the route is generated by an interior routing protocol or by an exterior routing

protocol.

The whole process of RIP startup and running can be described as follows:

1) If RIP is enabled on a router for the first time, the router will broadcast or multicast the request packet to the
adjacent routers. Upon receiving the request packet, the adjacent routers (on which, RIP should have been
enabled) respond to the request by returning the response packets containing information of their local routing
tables.

2) After receiving the response packets, the router, which has sent the request, will modify its own routing table.

3) At the same time, RIP broadcasts its routing table to the adjacent routers every 30 seconds. The adjacent routers
will maintain their own routing table after receiving the packets and will select an optimal route, and then

10G Core Routing Switch User Manual

陈泽科技有限公司

- - 36 - -

www.stephen-tele.com

advertise the modification information to their respective adjacent network so as to make the updated route
globally known. Furthermore, RIP uses the timeout mechanism to handle the out-timed routes so as to ensure the
real-timeliness and validity of the routes. With these mechanisms, RIP, an interior routing protocol, enables the
router to learn the routing information of the whole network.

RIP has become one of the actual standards of transmitting router and host routes by far. It can be used in most of the
campus networks and the regional networks that are simple yet extensive. For larger and more complicated networks,
RIP is not recommended.

RIP Configuration

The RIP configuration includes:

 Configuring basic rip parameters
 Specifying RIP Version of the Interface

 Setting RIP Packet Authentication
 Setting Additional Routing Cost

Configuring Basic RIP Parameters

To configure RIP, you enable RIP routing for a network and optionally configure other parameters.
Beginning in privileged EXEC mode, follow these steps to enable and configure RIP:

Command

Purpose

Step 1 config terminal Enter global configuration mode.
Step 2 router rip Enable a RIP routing process, and enter router

configuration mode.

Step 3 network <A.B.C.D/M> Associate a network with a RIP routing process. You

can specify multiple network commands. RIP routing
updates are sent and received through interfaces only

on these networks.

Step 4 neighbor ip-addrss (Optional) Define a neighboring router with which to

exchange routing information. This step allows routing
updates from RIP (normally a broadcast protocol) to

reach no

nbroadcast networks.

Step 5 timers basic update invalid

holddown

(Optional) Adjust routing protocol timers. Valid ranges
for all timers are 0 to 4294967295 seconds.

• update—The time between sending routing updates.
The default is 30 seconds.

• invalid—The timer after which a route is declared
invalid. The default is 180 seconds.

• holddown—The time before a route is removed from
the routing table. The default is 180 seconds.

10G Core Routing Switch User Manual

陈泽科技有限公司

- - 37 - -

www.stephen-tele.com

Step 6 version {1|2} (Optional) Configure the switch to receive and send

only RIP Version 1 or RIP version 2 packets. By default,
the switch receives Version 1 and 2 but sends only
Version 1.
You can also use the interface commands ip rip {send |
receive} version 1 | 2 | 1 2} to control what versions

are used for sending and receivin

g on interfaces.

Step 7

exit Return to global configuration mode.

Step 8

exit Return to privileged EXEC mode.

Step 9 show ip rip Verify your entries.

Step 10 Copy running-config

startup

-

config

(Optional) Save your entries in the configuration file.

To disable rip on the specified network, use router rip no network network-address/mask global configuration
commanc.

Specifying RIP Version of the Interface

RIP has two versions, RIP-1 and RIP-2. You can specify the version of the RIP packet processed by the interface.
RIP-1 broadcasts the packets. RIP-2 can transmit packets by both broadcast and multicast. By default, multicast is
adopted for transmitting packets. In RIP-2, the multicast address is 224.0.0.9. The advantage of transmitting packets in
the multicast mode is that the hosts not operating RIP in the same network can avoid receiving RIP broadcast packets.
In addition, this mode can also make the hosts running RIP-1 avoid incorrectly receiving and processing the routes with
subnet mask in RIP-2. When an interface is running RIP-2 broadcast, the RIP-1 packets can also be received.

Beginning in privileged EXEC mode, follow these steps to specify RIP version of the interface.

Command Purpose

Step 1 config terminal Enter global configuration mode.
Step 2 Interface vlan vlanid

ip rip receive version [1 | 2]

Specified receive message type of the interface.

Step 3 Interface vlan vlanid

ip rip send version [1 | 2]

Specified send message type of the interface.

Step 4 exit Return to privileged EXEC mode.
Step 4 show ip rip protocol-version Verify your entries.

Step 6 Copy running-configuration

startup

-

configuration

(Optional) Save your entries in the configuration file.

Setting RIP-2 Packet Authentication

RIP-1 does not support packet authentication. But when the interface operates RIP-2, the packet authentication can be
configured.

10G Core Routing Switch User Manual

陈泽科技有限公司

- - 38 - -

www.stephen-tele.com

RIP-2 supports two authentication modes: Simple authentication and MD5 authentication. MD5 authentication uses
two packet formats: One follows RFC2453 and another one follows the RFC2082.
The simple authentication does not ensure security. The authentication key not encrypted is sent together with the
packet, so the simple authentication cannot be applied to the case with high security requirements.

Beginning in privileged EXEC mode, follow these steps to set rip-2 packet authentication.

Command Purpose

Step 1 config terminal Enter global configuration mode.
Step 2 Interface vlan ifname Enter interface configuration mode, and specify the

interface to configure.

ip rip authentication string

sting

Enable RIP authentication.

ip rip authentication mode

{md5|text}

Configure the interface to use plain text
authentication (the default) or MD5 digest

authentication.

Step 3 exit Return to global configuration mode.
Step 4 exit Return to privileged EXEC mode.
Step 4 show running-config Verify your entries.

Step 6 Copy running-config

startup

-

config

(Optional) Save your entries in the configuration file.

To restore clear text authentication, use the no ip rip authentication mode interface configuration command. To
prevent authentication, use the no ip rip authentication string interface configuration command.

Setting Additional Routing Metric

Additional routing metric is the input or output routing metric added to an RIP route. It does not change the metric
value of the route in the routing table, but adds a specified metric value when the interface receives or sends a route.

Beginning in privileged EXEC mode, follow these steps to set additional routing metric.

Comm

and Purpose

Step 1 config terminal Enter global configuration mode.
Step 2 Router rip Enable a RIP routing process, and enter router

configuration mode.

Step 3

default

-

metric

vlaue

Setting additional routing metric 1to 16.

Step 4 exit Return to global configuration mode.

Step 5 exit Return to privileged EXEC mode.

Step 6 show running-config Verify your entries.

Step 7 Copy running-config

startup

-

config

(Optional) Save your entries in the configuration file.

By default, the additional routing metric added to the route when RIP sends the packet is 1. The additional routing
metric when RIP receives the packet is 0 by default.

10G Core Routing Switch User Manual

陈泽科技有限公司

- - 39 - -

www.stephen-tele.com

Typical RIP Configuration Example

Networking requirements

As shown in the following figure, the Routing Switches C connects to the subnet 117.102.0.0 through the Ethernet port.
The Ethernet ports of Routing Switches A and Switch B are respectively connected to the network 155.10.1.0 and

196.38.165.0. Switch C, Switch A and Switch B are connected via Ethernet 110.11.2.0. Correctly configure RIP to ensure

that Switch C, Switch A and Switch B can interconnect.

Networking diagram

Figure 12-4 RIP configuration networking

Configuration procedure

Note:
The following configuration only shows the operations related to RIP. Before performing

the following configuration, please make sure the Ethernet link layer can work normally.

# Configure Switch A

switchA(config)#router rip
switchA(config-router)#network 110.11.2.0
switchA(config-router)#network 155.10.1.0

# Configure Switch B

switchB(config)#router rip

10G Core Routing Switch User Manual

陈泽科技有限公司

- - 40 - -

www.stephen-tele.com

switchB(config-router)#network 110.11.2.0
switchB(config-router)#network 196.38.165.0

# Configure Switch C

switchC(config)#router rip
switchC(config-router)#network 110.11.2.0
switchC(config-router)#network 117.102.0.0

OSPF Configuration

OSPF Overview

Introduction to OSPF

Open Shortest Path First (OSPF) is an Interior Gateway Protocol based on the link state developed by IETF. At present,
OSPF version 2 (RFC2328) is used, which is available with the following features:

 Applicable scope: It can support networks in various sizes and can support several hundred routers at maximum.
 Fast convergence: It can transmit the update packets instantly after the network topology changes so that the

change is synchronized in the AS.

 Loop-free: Since the OSPF calculates routes with the shortest path tree algorithm according to the collected link

states, it is guaranteed that no loop routes will be generated from the algorithm itself.

 Area partition: It allows the network of AS to be divided into different areas for the convenience of management

so that the routing information transmitted between the areas is abstracted further, hence to reduce the network
bandwidth consumption.

 Equal-cost multi-route: Support multiple equal-cost routes to a destination.
 Routing hierarchy: OSPF has a four-level routing hierarchy. It prioritizes the routes to be intra-area, inter-area,

external type-1, and external type-2 routes.

 Authentication: It supports the interface-based packet authentication so as to guarantee the security of the route

calculation.

 Multicast transmission: Support multicast address to receive and send packets.

Process of OSPF Route Calculation

The routing calculation process of the OSPF protocol is as follows:

 Each OSPF-capable router maintains a Link State Database (LSDB), which describes the topology of the whole AS.

According to the network topology around itself, each router generates a Link State Advertisement (LSA). The
routers on the network transmit the LSAs among them by transmitting the protocol packets to each others. Thus,
each router receives the LSAs of other routers and all these LSAs compose its LSDB.

 LSA describes the network topology around a router, so the LSDB describes the network topology of the whole

network. Routers can easily transform the LSDB to a weighted directed graph, which actually reflects the topology
architecture of the whole network. Obviously, all the routers get a graph exactly the same.

 A router uses the SPF algorithm to calculate the shortest path tree with itself as the root, which shows the routes

to the nodes in the autonomous system. The external routing information is leave node. A router, which advertises
the routes, also tags them and records the additional information of the autonomous system. Obviously, the
Routing tables obtained by different routers are different.

10G Core Routing Switch User Manual

陈泽科技有限公司

- - 41 - -

www.stephen-tele.com

Furthermore, suppose that the routers are directly connected without other in-between routing devices in a broadcast
network. To enable the individual routers to broadcast the information of their local statuses to the whole AS, any two
routers in the environment should establish adjacency between them. In this case, however, the changes that any
router takes will result in multiple transmissions, which are not only unnecessary but also waste the precious
bandwidth resources. To solve this problem,“Designated Router” (DR) is defined in the OSPF. Thus, all the routers only
send information to the DR for broadcasting the network link states in the network. Thereby,the number of router
adjacent relations on the multi-access network is reduced.OSPF supports interface-based packet authentication to
guarantee the security of route calculation. Also, it transmits and receives packets by IP multicast.

OSPF Packets

OSPF uses five types of packets:

 Hello Packet:

It is the commonest packet, which is periodically sent by a router to its neighbor. It contains the values of some timers,
DR, BDR and the known neighbor.

 Database Description (DD) Packet:

When two routers synchronize their databases, they use the DD packets to describe their own LSDBs, including the
digest of each LSA. The digest refers to the HEAD of an LSA, which can be used to uniquely identify the LSA. Such
reduces the traffic size transmitted between the routers, since the HEAD of a LSA only occupies a small portion of the
overall LSA traffic. With the HEAD, the peer router can judge whether it already has had the LSA.

 Link State Request (LSR) Packet:

After exchanging the DD packets, the two routers know which LSAs of the peer routers are lacked in the local LSDBs. In
this case, they will send LSR packets requesting for the needed LSAs to the peers. The packets contain the digests of
the needed LSAs.

 Link State Update (LSU) Packet:

The packet is used to transmit the needed LSAs to the peer router. It contains a collection of multiple LSAs (complete
contents).

 Link State Acknowledgment (LSAck) Packet

The packet is used for acknowledging the received LSU packets. It contains the HEAD(s) of LSA(s) requiring
acknowledgement.

Basic Concepts Related to OSPF

I. Router ID

To run OSPF, a router must have a router ID. If no ID is configured, the system will automatically select an IP address
from the IP addresses of the current interface as the Router ID. Way to choose a router ID: if the LoopBack interface
address exists, the system chooses the LoopBack address with the greatest IP address value as the router ID; if no
LoopBack interface configured, then the address of the physical interface with the greatest IP address value will be the
router ID.

II. DR and BDR

 Designated Router (DR)

In multi-access networks, if any two routers are neighbors, the same LSA will be transmitted repeatedly, wasting

10G Core Routing Switch User Manual

陈泽科技有限公司

- - 42 - -

www.stephen-tele.com

bandwidth resources. To solve this problem, the OSPF protocol regulates that a DR must be elected in a multi-access
network and only the DR (and the BDR in the following content) can be the neighbor of other routers in this network.
Two non-DR routers or BDR routers cannot be neighbors and exchange routing information. Which router can be the
DR in its segment is not manually specified. Instead, DR is elected by all the

routers in the segment.

 Backup Designated Router (BDR)

If the DR fails for some faults, a new DR must be elected and synchronized with the other routers on the segment. This
process will take a relatively long time, during which, the route calculation is incorrect. To shorten the process, BDR is
brought forth in OSPF.In fact, BDR is a backup for DR. DR and BDR are elected in the meantime. The adjacencies are
also established between the BDR and all the routers on the segment, and routing information is also exchanged
between them. After the existing DR fails, the BDR will become a DR immediately.

III. Area

The network size grows increasingly larger. If all the routers on a huge network are running OSPF, the large number of
routers will result in an enormous LSDB, which will consume an enormous storage space, complicate the SPF algorithm,
and add the CPU load as well. Furthermore, as a network grows larger, the topology becomes more likely to take
changes. Hence, the network will always in “turbulence”, and a great deal of OSPF packets will be generated and
transmitted in the network. This will lower the network bandwidth utility. In addition, each change will cause all the
routes on the network to recompute the route.

OSPF solves the above problem by partition an AS into different areas. Areas logically group the routers. The borders of
areas are formed by routers. Thus, some routers may belong to different areas. A router connects the backbone area
and a non-backbone area is called Area Border Router (ABR). An ABR can connect to the backbone area physically or
logically.

IV. Backbone area and virtual link

 Backbone Area

After the area division of OSPF, not all the areas are equal. In which, an area is different from all the other areas. Its
area-id is 0 and it is usually called the backbone area.

 Virtual link

Since all the areas should be connected to the backbone area, virtual link is adopted so that the physically separated
areas can still maintain the logic connectivity to the backbone area.

V. Route summary

AS is divided into different areas that are interconnected via OSPF ABRs. The routing information between areas can be
reduced through route summary. Thus, the size of routing table can be reduced and the calculation speed of the router
can be improved.After calculating an intra-area route of an area, the ABR summarizes multiple OSPF routes into an LSA
and sends it outside the area according to the configuration of summary.

OSPF Configuration

In various configurations, you must first enable OSPF, specify the interface and area ID before configuring other
functions. But the configuration of the functions related to the interface is not restricted by whether the OSPF is
enabled or not. It should be noted that after OSPF is disabled, the OSPF-related interface parameters also become
invalid.

10G Core Routing Switch User Manual

陈泽科技有限公司

- - 43 - -

www.stephen-tele.com

OSPF configuration includes:

 Entering the OSPF configuration mode
 Enabling OSPF Process
 Specifying Interface
 Configuring the Cost for Sending Packets on an Interface
 Setting the Interface Priority for DR Election
 Setting the Interval of Hello Packet Transmission
 Setting a dead timer for the neighboring routers
 Configuring an Interval required for sending LSU packets
 Setting an Interval for LSA Retransmission between Neighboring Routers
 Setting a Shortest Path First (SPF) Calculation Interval for OSPF
 Configuring STUB Area of OSPF
 Configuring the Route Summarization of OSPF Area
 Configuring OSPF Virtual Link
 Configuring OSPF Packet Authentication
 Disabling the Interface to Send OSPF Packets

Enter OSPF Configuration Mode

Beginning in privileged EXEC mode, follow these steps to enter OSPF configuration mode.

Command

Purpose

Step 1 config terminal Enter global configuration mode.
Step 2 router ospf Enable OSPF routing, and enter router configuration

mode.

To terminate an OSPF routing process, use the no router ospf global configuration command.

Specifying interface

OSPF further divides the AS into different areas. An area logically groups the routers.Some routers belong to different
areas (such routers are called ABRs), but one segment can only belong to an area. In other words, you must specify
each OSPF interface to belong to a particular area identified by area ID. The areas transfer routing information
between them via the ABRs.

In addition, parameters of all the routers in the same area should be identical. Therefore, when configuring the routers
in the same area, please note that most configurations should be based upon the area. Wrong configuration may
disable the neighboring routers to transmit information between them, and even lead to congestion or self-loop of the
routing information.

Beginning in OSPF configuration mode, follow these steps to specify interface.

Com

mand

Purpose

Step 1 network ip-address

wildcard

-

mask

area

area

-id

Define an interface on which OSPF runs and the area

ID for that interface. You can use the

wildcard

-

mask

10G Core Routing Switch User Manual

陈泽科技有限公司

- - 44 - -

www.stephen-tele.com

to use a single command to define one or more
multiple interfaces to be associated with a specific

OSPF area.

Step 2 exit Return to global configuration mode.
Step 3 exit Return to privileged EXEC mode.

Step 4 show running-config Verify your entries.

Step 5 Copy running-config

startup-config

(Optional) Save your entries in the configuration file.

To delete specified network, use no network ip-address wildcard-mask net-mask area area-id OSPF configuration
command.

You must specify the segment to which the OSPF will be applied after enabling the OSPF.

This example shows how to configure an OSPF routing process:

Switch(config)# router ospf
Switch(config-router)# network 192.108.0.0 0.0.0.255 area 0

Configuring the Cost for Sending Packets on an Interface

The user can control the network traffic by configuring different message sending costs for different interfaces.
Otherwise, OSPF will automatically calculate the cost according to the baud rate on the current interface.

Beginning in privileged EXEC mode, follow these steps to configure the cost for sending packets on an interface.

Command Purpose

Step 1

config terminal

Enter global configuration mode.

Step 2

Interface

ifName

Enter interface configuration mode.

Step3 ip ospf cost value Configure the cost for sending packets on Interface
Step 4 exit Return to global configuration mode.
Step 5 exit Return to privileged EXEC mode.
Step 6 show ip ospf interface [vlan-id] Verify your entries.

Step 7 Copy running-config

startup-config

(Optional) Save your entries in the configuration file.

To restore the default cost for packet transmission on the Interface, use no ip ospf cost OSPF configuration command.
By default, the interface automatically calculates the costs for running OSPF protocol according to the current Baud
rate. The calculation formula is: 100 Mbps/ Interface current baud rate.

Setting the Interface Priority for DR Election

The priority of the router interface determines the qualification of the interface in DR election, and the router of higher
priority will be considered first if there is a collision in the election.

10G Core Routing Switch User Manual

陈泽科技有限公司

- - 45 - -

www.stephen-tele.com

DR is not designated manually; instead, it is elected by all the routers on the segment. Routers with the priorities > 0 in
the network are eligible “candidates”. Among all the routers self-declared to be the DR, the one with the highest
priority will be elected. If two routers have the same priority, the one with the highest router ID will be elected as the
DR. Votes are the hello packets. Each router writes the expected DR in the packet and sends it to all the other routers
on the segment. If two routers attached to the same segment concurrently declare themselves to be the DR, choose
the one with higher priority. If the priorities are the same, choose the one with greater router ID. If the priority of a
router is 0, it will not be elected as DR or BDR.If DR fails due to some faults, the routers on the network must elect a
new DR and synchronize with the new DR. The process will take a relatively long time, during which, the route
calculation is incorrect. In order to speed up this process, OSPF puts forward the concept of BDR. In fact, BDR is a
backup for DR. DR and BDR are elected in the meantime. The adjacencies are also established between the BDR and all
the routers on the segment, and routing information is also exchanged between them. When the DR fails, the BDR will
become the DR instantly. Since no re-election is needed and the adjacencies have already been established, the
process is very short. But in this case,a new BDR should be elected. Although it will also take a quite long period of time,
it will not exert any influence upon the route calculation.

But please note:

 The DR on the network is not necessarily the router with the highest priority. Likewise, the BDR is not necessarily

the router with the second highest priority. If a new router is added after DR and BDR election, it is impossible for
the router to become the DR even if it has the highest priority.

 DR is based on the router interface in a certain segment. Maybe a router is a DR on one interface, but can be a

BDR or DR Other on the other interface.

Beginning in privileged EXEC mode, follow these steps to set the Interface Priority for DR Election.

Command

Purpose

Step 1 config terminal Enter global configuration mode.
Step 2 Interface ifName Enter interface configuration mode.

Step 3 ip ospf priority priority_num Configure the interface with a priority for DR election.

By default, the priority of the Interface is 1 in the DR
election. The value can be taken from 0 to 255.

Step 4 exit Return to global configuration mode.

Step 5 exit Return to privileged EXEC mode.
Step 6 show ip ospf interface [vlan-id] Verify your entries.

Step 7 Copy running-config

startup-config

(Optional) Save your entries in the configuration file.

To restore the default interface priority, use no ip ospf priority interface configuration command.

Setting the Interval of Hello Packet Transmission

Hello packets are a kind of most frequently used packets, which are periodically sent to the adjacent router for
discovering and maintaining the adjacency, and for electing DR and BDR. The user can set the hello timer.
According to RFC2328, the consistency of hello intervals between network neighbors should be kept. The hello interval
value is in inverse proportion to the route convergence rate and network load.

10G Core Routing Switch User Manual

陈泽科技有限公司

- - 46 - -

www.stephen-tele.com

Beginning in privileged EXEC mode, follow these steps to set the interval of hello packet transmission.

Command

Purpose

Step 1 config terminal Enter global configuration mode.
Step 2 Interface ifName Enter interface configuration mode.

Step 3 ip ospf hello-interval seconds Set the hello interval of the interface

By default, send Hello packets every 10 seconds.

Step 4 exit Return to global configuration mode.

Step 5

exit Return to privileged EXEC mode.

Step 6 show ip ospf interface [vlan-id] Verify your entries.

Step 7 Copy running-config

startup-config

(Optional) Save your entries in the configuration file.

To restore the default hello of the interface, use no ip ospf hello-interval interface configuration command.

Setting a dead timer for the neighboring routers

The dead timer of neighboring routers refers to the interval in which a router will regard the neighboring router as
dead if no Hello packet is received from it. The user can set a dead timer for the neighboring routers.
Beginning in privileged EXEC mode, follow these steps to set a dead timer for the neighboring routers.

Command

Purpose

Step 1 config terminal Enter global configuration mode.
Step 2 Interface ifName Enter interface configuration mode.

Step 3 ip ospf dead-interval seconds Configure a dead timer for the neighboring routers

By default, the dead interval for the neighboring

routers is 40 seconds.

Step 4 exit Return to global configuration mode.

Step 5

exit Return to privileged EXEC mode.

Step 6 show ip ospf interface [vlan-id] Verify your entries.

Step 7 Copy running-config

startup

-

config

(Optional) Save your entries in the configuration file.

To restore the default dead interval of the neighboring routers, use no ip ospf hello-interval interface configuration
command.

configuring an Interval required for sending LSU packets

Trans-delay seconds should be added to the aging time of the LSA in an LSU packet.Setting the parameter like this
mainly considers the time duration that the interface requires for transmitting the packet.
The user can configure the interval of sending LSU message. Obviously, more attention should be paid on this item
over low speed network.

10G Core Routing Switch User Manual

陈泽科技有限公司

- - 47 - -

www.stephen-tele.com

Beginning in privileged EXEC mode, follow these steps to configure an Interval required for sending LSU packets.

Command Purpose

Step 1 config terminal Enter global configuration mode.
Step 2 Interface ifName Enter interface configuration mode.

Step 3 ip ospf transmit-delay seconds Configure an interval for sending LSU packets

By default, the LSU packets are transmitted per

second.

Step 4 exit Return to global configuration mode.

Step 5 exit Return to privileged EXEC mode.
Step 6 show ip ospf interface [vlan-id] Verify your entries.

Step 7 Copy running-config

startup-config

(Optional) Save your entries in the configuration file.

To restore the default interval of sending LSU packets, use no ip ospf transmit-delay interface configuration command.

Setting an Interval for LSA Retransmission between Neighboring Routers

If a router transmits an LSA (Link State Advertisements) to the peer, it requires the acknowledgement packet from the
peer. If it does not receive the acknowledgement packet within the retransmit, it will retransmit this LSA to the
neighbor. The value of retransmit is user-configurable.

Beginning in privileged EXEC mode, follow these steps to set an Interval for LSA Retransmission between Neighboring
Routers.

Command

Purpose

Step 1 config terminal Enter global configuration mode.
Step 2 Interface ifName Enter interface configuration mode.

Step 3 ip ospf retransmit-interval

seconds

Configure the interval of LSA retransmission for the
neighboring routers
By default, the interval for neighboring routers to
retransmit LSAs is five seconds.

Step 4 exit Return to global configuration mode.

Step 5

exit Return to privileged EXEC mode.

Step 6 show ip ospf interface [vlan-id] Verify your entries.

Step 7 Copy running-config

startup-config

(Optional) Save your entries in the configuration file.

To restore the default LSA retransmission interval for the neighboring routers, use no ip ospf retransmit-interval
interface configuration command.

The value of interval should be bigger than the interval in which a packet can be transmitted and returned between
two routers. Note that you should not set the LSA retransmission interval too small. Otherwise, unnecessary
retransmission will be caused.

10G Core Routing Switch User Manual

陈泽科技有限公司

- - 48 - -

www.stephen-tele.com

Setting a Shortest Path First (SPF) Calculation Interval for OSPF

Whenever the LSDB of OSPF takes changes, the shortest path requires recalculation. Calculating the shortest path
upon change will consume enormous resources as well as affect the operation efficiency of the router. Adjusting the
SPF calculation interval, however, can restrain the resource consumption due to frequent network changes.

Beginning in OSPF configuration mode, follow these steps to set a Shortest Path First (SPF) Calculation Interval for
OSPF.

Command

Purpose

Step 1 timers spf delay-seconds

hold-seconds

Set the SPF calculation interval
By default, the interval of SPF recalculation is 5
seconds.

Step 2 exit Return to global configuration mode.

Step 3

exit Return to privileged EXEC mode.

Step 4 show ip ospf Verify your entries.

Step 5 Copy running-config

startup-config

(Optional) Save your entries in the configuration file.

To restore the SPF calculation interval, use no timers spf OSPF configuration command.

Configuring STUB Area of OSPF

STUB areas are some special LSA areas, in which the ABRs do not propagate the learned external routes of the AS. In
these areas, the routing table sizes of routers and the routing traffic are significantly reduced.
The STUB area is an optional configuration attribute, but not every area conforms to the configuration condition.
Generally, STUB areas, located at the AS boundaries, are those non-backbone areas with only one ABR. Even if this
area has multiple ABRs, no virtual links are established between these ABRs.
To ensure that the routes to the destinations outside the AS are still reachable, the ABR in this area will generate a
default route (0.0.0.0) and advertise it to the non-ABR routers in the area.

Please pay attention to the following items when configuring a STUB area:

 The backbone area cannot be configured to be the STUB area and the virtual link cannot pass through the STUB

area.

 If you want to configure an area to be the STUB area, then all the routers in this area should be configured with

this attribute.

 No ASBR can exist in a STUB area. In other words, the external routes of the AS cannot be propagated in the STUB

area.

Beginning in OSPF configuration mode, follow these steps to configure STUB Area of OSPF.

Command Purpose

Step 1 area area-id stub

[CR|no-summary]

Configure an area to be the STUB area

10G Core Routing Switch User Manual

陈泽科技有限公司

- - 49 - -

www.stephen-tele.com

Step 2 area area-id default-cost value Configure the cost of the default route transmitted by

OSPF to the STUB area

Step 3 exit Return to global configuration mode.

Step 4

exit Return to privileged EXEC mode.

Step 5 show ip ospf Verify your entries.

Step 6 Copy running-config

startup-config

(Optional) Save your entries in the configuration file.

To remove the configured STUB area, use no area area-id stub [CR|no-summary] OSPF configuration command.
To remove the cost of the default route to the STUB area, use no area area-id default-cost value OSPF configuration
command.
By default, the STUB area is not configured, and the cost of the default route to the STUB area is 1.

Configuring the Route Summarization of OSPF Area

Route summary means that ABR can aggregate information of the routes of the same prefix and advertise only one
route to other areas. An area can be configured with multiple aggregate segments, thereby OSPF can summarize them.
When the ABR transmits routing information to other areas, it will generate Sum_net_Lsa (type-3 LSA) per network. If
some continuous networks exist in this area, you can use the abr-summary command to summarize these segments
into one segment. Thus, the ABR only needs to send an aggregate LSA, and all the LSAs in the range of the aggregate
segment specified by the command will not be transmitted separately.

Once the aggregate segment of a certain network is added to the area, all the internal routes of the IP addresses in the
range of the aggregate segment will no longer be separately advertised to other areas. Only the route summary of the
whole aggregate network will be advertised. But if the range of the segment is restricted by the keyword
"not-advertise", the route summary of this segment will not be advertised. This segment is represented by IP address
and mask.Route summarization can take effect only when it is configured on ABRs.

Beginning in OSPF configuration mode, follow these steps to configure the Route Summarization of OSPF Area.

Command Purpose

Step 1 Area area_id range ip-address

mask

[CR|not-advertise|advertise

|

substitute

]

Configure the Route Summarization of OSPF Area

Step 2 exit Return to global configuration mode.

Step 3

exit Return to privileged EXEC mode.

Step 4 show ip ospf Verify your entries.

Step 5 Copy running-config

startup

-

config

(Optional) Save your entries in the configuration file.

To cancel route summarization of OSPF Area, use no summary-address ip-address mask OSPF configuration command.
By default, the inter-area routes will not be summarized.

10G Core Routing Switch User Manual

陈泽科技有限公司

- - 50 - -

www.stephen-tele.com

Configuring OSPF Virtual Link

According to RFC2328, after the area division of OSPF, not all the areas are equal. In which, an area is different from all
the other areas. Its area-id is 0.0.0.0 and it is usually called the backbone Area. The OSPF routes between
non-backbone areas are updated with the help of the backbone area. OSPF stipulates that all the non-backbone areas
should maintain the connectivity with the backbone area. That is, at least one interface on the ABR should fall into the
area 0.0.0.0. If an area does not have a direct physical link with the backbone area 0.0.0.0, a virtual link must be
created.
If the physical connectivity cannot be ensured due to the network topology restriction, a virtual link can satisfy this
requirement. The virtual link refers to a logic channel set up through the area of a non-backbone internal route
between two ABRs. Both ends of the logic channel should be ABRs and the connection can take effect only when both
ends are configured. The virtual link is identified by the ID of the remote router. The area, which provides the ends of
the virtual link with a non-backbone area internal route, is called the transit area. The ID of the transit area should be
specified when making configuration.
The virtual link is activated after the route passing through the transit area is calculated,which is equivalent to a p2p
connection between two ends. Therefore, similar to the physical interfaces, you can also configure various interface
parameters on this link, such as hello timer.
The "logic channel" means that the multiple routers running OSPF between two ABRs only take the role of packet
forwarding (the destination addresses of the protocol packets are not these routers, so these packets are transparent
for them and the routers forward them as common IP packets). The routing information is directly transmitted
between the two ABRs. The routing information herein refers to the type-3 LSAs generated by the ABRs, for which the
synchronization mode of the routers in the area will not be changed.

Beginning in OSPF configuration mode, follow these steps to configure OSPF Virtual Link.

Command

Purpose

Step 1 area area-id virtual-link

router-id [authentication |CR |
hello-interval seconds |
retransmit-interval

seconds | transmit-delay
seconds | dead-interval seconds

|

Create and configure a virtual link

authentication-key auth_key |

message-digest-key key_id md5

key ]

Step 2 exit Return to global configuration mode.

Step 3

exit Return to privileged EXEC mode.

Step 4 show ip ospf Verify your entries.

Step 5 Copy running-config

startup-config

(Optional) Save your entries in the configuration file.

To remove the created virtual link, use no area area-id virtual-link router-id [ CR | hello-interval seconds |

retransmit-interval seconds | transmit-delay seconds | dead-interval seconds | authentication-key auth_key|
message-digest-key key_id md5 key ] OSPF configuration command.

area-id and router-id have no default value. By default, hello timer is 10 seconds, retransmit 5 seconds, trans-delay 1
second, and the dead 40 seconds.

10G Core Routing Switch User Manual

陈泽科技有限公司

- - 51 - -

www.stephen-tele.com

Configuring OSPF Packet Authentication

OSPF supports simple authentication or MD5 authentication between neighboring routers.
All the routers in one area must use the same authentication mode (no authentication,simple text authentication or
MD5 cipher text authentication). If the mode of supporting authentication is configured, all routers on the same
segment must use the same authentication key. To configure a simple text authentication key, use the ospf
authentication-mode simple command. And, use the ospf authentication-mode md5 command to configure the MD5
cipher text authentication key if the area is configured to support MD5 cipher text authentication mode.

Beginning in privileged EXEC mode, follow these steps to configure OSPF Packet Authentication.

Command

Purpose

Step 1 config terminal Enter global configuration mode.
Step 2 Interface ifName Enter interface configuration mode.

Step 3 ip ospf authentication-key

auth_key

(Optional) Specify a password for OSPF simple text
authentication

Step 4 Ip ospf authentication Activating simple text authentication

Step 5 ip ospf message-digest-key

key_id md5 key

(Optional) Specify the key-id and key for OSPF MD5
authentication

Step 6 Ip ospf authentication

message

-

digest

Activating simple text authentication

Step 7 exit Return to global configuration mode.

Step 8

exit Return to privileged EXEC mode.

Step 9 show ip ospf interface [vlan-id] Verify your entries.

Step 10 Copy running-config

startup-config

(Optional) Save your entries in the configuration file.

To Cancel simple authentication on the interface, use no ip ospf authentication-key interface configuration command.
To Cancel the interface to use MD5 authentication, use no ip ospf message-digest-key interface configuration
command.
To Cancel authentication on the interface, use no ip ospf authentication interface configuration command.
By default, the interface is not configured with either simple authentication or MD5 authentication.

Disabling the Interface to Send OSPF Packets

To prevent OSPF routing information from being acquired by the routers on a certain network, use the passive
command to disable the interface to transmit OSPF packets.

Beginning in privileged EXEC mode, follow these steps to disable the Interface to Send OSPF Packets.

Command

Purpose

Step 1 config terminal Enter global configuration mode.

10G Core Routing Switch User Manual

陈泽科技有限公司

- - 52 - -

www.stephen-tele.com

Step 2 Router ospf Enter interface configuration mode.

Step 3 passive-interface ifname Disable the interface to send OSPF packets

Step 4 exit Return to global configuration mode.

Step 5 exit Return to privileged EXEC mode.
Step 6 show ip ospf interface [vlan-id] Verify your entries.

Step 7 Copy running-config

startup

-

config

(Optional) Save your entries in the configuration file.

To enable the interface to send OSPF packets, use no ip ospf passive-interface ifname interface configuration mode.

By default, all the interfaces are allowed to transmit and receive OSPF packets.
After an OSPF interface is set to be in silent status, the interface can still advertise its direct route. However, the OSPF
hello packets of the interface will be blocked, and no neighboring relationship can be established on the interface.
Thereby, the capability for OSPF to adapt to the networking can be enhanced, which will hence reduce the
consumption of system resources. On a switch, this command can disable/enable the specified VLAN interface to send
OSPF packets.

Displaying and Debugging OSPF

After the above configuration, execute show command in any view to display the running of the OSPF configuration,
and to verify the effect of the configuration.

Table Displaying and debugging OSPF

Operation Command

Display the brief information of
the OSPF routing process

show ip ospf

Display OSPF neighbor information show ip ospf neighbor

Display OSPF routing table show ip ospf routing

Display OSPF virtual links

show ip ospf virtual-links

Display OSPF statistics

show ip ospf database

Display LSDB information of
OSPF

show ip ospf lsa

Display OSPF interface
information

show ip ospf interface

10G Core Routing Switch User Manual

陈泽科技有限公司

- - 53 - -

www.stephen-tele.com

Typical OSPF Configuration Example

I. Networking requirements

In the following figure, Area 2 and Area 0 are not directly connected. Area 1 is required to be taken as transit area for
connecting Area 2 and Area 0.Enable OSPF service on switch and Correctly configure a virtual link between Switch B
and Switch C in Area 1.

II. Networking diagram

Figure OSPF virtual link configuration networking

III. Configuration procedure

OSPF Fault Diagnosis and Troubleshooting

Fault 1: OSPF has been configured in accordance with the above-mentioned steps, but OSPF on the router cannot run
normally.

Troubleshooting: Please check according to the following procedure.

Troubleshooting locally:
Check whether the protocol between two directly connected routers is in normal operation. The normal sign is the
peer state machine between the two routers reaches the FULL state. (Note: On a broadcast or NBMA network, if the
interfaces for two routers are in DROther state, the peer state machine for the two routers are in 2-way state, instead
of FULL state. The peer state machine between DR/BDR and all the other routers is in FULL state.

 Execute the show ip ospf neighbour command to view neighbours.
 Execute the show ip ospf interface command to view OSPF information in the interface.
 Check whether the physical connections and the lower level protocol operate normally. You can execute the ping

command to test. If the local router cannot ping the peer router, it indicates that faults have occurred to the
physical link and the lower level protocol.

10G Core Routing Switch User Manual

陈泽科技有限公司

- - 54 - -

www.stephen-tele.com

 If the physical link and the lower layer protocol are normal, please check the OSPF parameters configured on the

interface. The parameters should be the same parameters configured on the router adjacent to the interface. The
same area ID should be used, and the networks and the masks should also be consistent. (The p2p or virtually
linked segment can have different segments and masks.) Ensure that the dead timer on the same interface is at
least four times the value of the hello timer.

 If the network type is broadcast or NBMA, there must be at least one interface with a priority greater than zero.
 If an area is set as the STUB area, to which the routers are connected. The area on these routers must be also set

as the STUB area.

 The same interface type should be adopted for the neighboring routers.
 If more than two areas are configured, at least one area should be configured as the backbone area (that is to say,

the area ID is 0).

 Ensure the backbone area to connect with all the areas.
 The virtual links cannot pass through the STUB area.

Troubleshooting globally:
If OSPF cannot discover the remote routes yet in the case that the above steps are correctly performed, proceed to
check the following configurations.

 If more than two areas are configured on a router, at least one area should be configured as the backbone area.

As shown in the following figure: RTA and RTD are configured to belong to only one area, whereas RTB (area0 and
area1) and RTC (area1 and area 2) are configured to belong to two areas. In which, RTB also belongs to area0, which is
compliant with the requirement. However, none of the areas to which RTC belongs is area0. Therefore, a virtual link
should be set up between RTC and RTB. Ensure that area2 and area0 (backbone area) is connected.

Figure OSPF areas

 The backbone area (area 0) cannot be configured as the STUB area and the virtual link cannot pass through the

STUB area. That is, if a virtual link has been set up between RTB and RTC, neither area1 nor area0 can be
configured as a stub area. In the above figure, only area 2 can be configured as stub area.

 Routers in the STUB area cannot redistribute the external routes.
 Backbone area must guarantee the connectivity of all nodes.

IP Multicast Protocol

IP Multicast Overview

Problems with Unicast/Broadcast

The constant development of the Internet and increasing interaction of versatile data,voice and vedio information over
the network, has promoted the emergence of new services like e-commerce, network conference, online auction,
vedio on demand (VoD),and tele-education. These services require higher information security and greater rewards.

I. Unicast

10G Core Routing Switch User Manual

陈泽科技有限公司

- - 55 - -

www.stephen-tele.com

In unicast mode, every user that needs the inforamtion receives a copy through the channels the system separately
establishes for them. See Figure 13-1.

Figure Data transmission in unicast mode

Suppose that Users B, D, and E need the information, the information source Server establishes transmision channels
with every of them. Since the traffic in transmission increases with the number of users, excessive copies of the
information would spread over the network if the there is a large number of users in need of this infomration. As the
bandwidth would turn short, the unicast mode is incapable of massive transmission.

II. Broadcast

In broadcast mode, every user on the network receives the information regardless of their needs. See Figure 13-2 Data
transmission in broadcast mode.

Figure Data transmission in broadcast mode

Suppose the Users B, D, and E need the information, the information source Server broadcasts the information
through the router; User A and User C can also receive the information. In that case, information security and rewards
to services are not guaranteed. Moreover, bandwidth is terribly wasted when only a few part of users are in need of
the information.

In short, the unicast mode is useful in networks with scattered users, and the multicast mode is suitable for networks
with dense users. When the number of users is uncertain, the adoption of unicast or multicast mode results in low
efficiency.

10G Core Routing Switch User Manual

陈泽科技有限公司

- - 56 - -

www.stephen-tele.com

Advantages of Multicast

I. Multicast

IP multicast technology solves those problems. It allows the multicast source to send the information once only, and
ensures that the information will not be duplicated or distributed unless it reaches a fork in the tree route established
by the multicast routing protocol. See Figure 13-3 Data transmission in multicast mode.

Figure Data transmission in multicast mode

Suppose the Users B, D, and E need the information, they need to be organized into a receiver group to ensure that the
information can reach them smoothly. The routers on the network duplicate and forward the information according to
the distribution of these users in the group.

In multicast mode, the information sender is called the "multicast source", the receiver is called the "multicast group",
and the routers for multicast information transmission are called "multicast routers". Members of a multicast group
can scatter around the network; the multicast group therefore has no geographical limitation. It should be noted that a
multicast source does not necessarily belong to a multicast group. It sends data to multicast groups but is not
necessarily a receiver. Multiple sources can send packets to a multicast group simultaneously.

II. Advantages

The main advantages of multicast are:

 Enhanced efficiency: It reduces network traffic and relieves server and CPU of loads.
 Optimized performance: It eliminates traffic redundancy.
 Distributed application: It enables multipoint application.

Application of Multicast

IP multicast technology effectively implements point to multi-point forwarding with high speed, as saves network
bandwidth a lot and can relieve network loads. It facilitates also the development of new value-added services in the
Internet information service area that include online live show, Web TV, tele-education, telemedicine, network radio
station and real-time audio/video conferencing. It takes a positive role in:

10G Core Routing Switch User Manual

陈泽科技有限公司

- - 57 - -

www.stephen-tele.com

 Multimedia and streaming media application
 Occasional communication for training and cooperation
 Data storage and finance (stock) operation
 Point-to-multipoint data distribution

With the increasing popularity of multimedia services over IP network, multicast is gaining its marketplace.

Implementation of IP Multicast

Multicast Addresses

In multicast mode, there are questions about where to send the information, how to locate the destination or know
the receiver. All these questions can be narrowed down to multicast addressing. To guarantee the communication
between a multicast source and a multicast group, the network layer multicast address (namely the IP multicast
address) is required, along with the technique to correlate it with the link layer MAC multicast address. Following is the
introduction to these two kinds of addresses.

I. IP Multicast Addresses

According to the definition in Internet Assigned Number Authority (IANA), IP addresses fall into four types: Class A,
Class B, Class C and Class D. Unicast packets use IP addresses of Class A, Class B or Class C, depending on specific packet
scales.Multicast packets use IP addresses of Class D as their destination addresses, but Class D IP addresses cannot be
contained in the source IP field of IP packets.

During unicast data transmission, a packet is transmitted "hop-by-hop" from the source address to the destination
address. However, in IP multicast environment, a packet has more than one destination address, or a group of
addresses. All the information receivers are added to a group. Once a receiver joins the group, the data for this group
of addresses start flowing to this receiver. All members in the group can receive the packets.

Membership here is dynamic, and a host can join or leave the group at any time. A multicast group can be permanent
or temporary. Some multicast group addresses are allocated by IANA, and the multicast group is called permanent
multicast group. The IP addresses of a permanent multicast group are unchangeable, but its membership is changeable,
and the number of members is arbitrary. It is quite possible for a permanent group to not a single member. Those not
reserved for permanent multicast groups can be used by temporary multicast groups. Class D multicast addresses
range from 224.0.0.0 to 239.255.255.255. More information is listed in Table 13-1 Ranges and meanings of Class D
addresses.

Table Ranges and meanings of Class D addresses

Class D address range

Description

224.0.0.0∼224.0.0.255 Reserved multicast addresses (addresses of
permanent groups). All but 224.0.0.0 can be

allocated by routing protocols.

224.0.1.0∼238.255.255.255 Multicast addresses available for users (addresses of
temporary groups). They are valid in the entire

network.

239.0.0.0∼239.255.255.255 Multicast addresses for local management. They are
valid only in the specified local range.

10G Core Routing Switch User Manual

陈泽科技有限公司

- - 58 - -

www.stephen-tele.com

Reserved multicast addresses that are commonly used are described in the following table.

Table Reserved multicast address list

Class D address range Description

224.0.0.0

Base Address (Reserved)

224.0.0.1

Addresses of all hosts

224.0.0.2

Addresses of all multicast routers

224.0.0.3

Not for allocation

224.0.0.4

DVMRP routers

224.0.0.5

OSPF routers

224.0.0.6

OSPF DR

224.0.0.7

ST routers

224.0.0.8

ST hosts

224.0.0.9

RIP-2 routers

224.0.0.10

IGRP routers

224.0.0.11

Active agents

224.0.0.12

DHCP server/Relay agent

224.0.0.13 All PIM routers

224.0.0.14

RSVP encapsulation

224.0.0.15

All CBT routers

224.0.0.16

Specified SBM

224.0.0.17

All SBMS

224.0.0.18

VRRP

II. Ethernet Multicast MAC Addresses

When a unicast IP packet is transmitted on the Ethernet, the destination MAC address is the MAC address of the
receiver. However, for a multicast packet, the destination is no longer a specific receiver but a group with unspecific
members. Therefore, the multicast MAC address should be used.

10G Core Routing Switch User Manual

陈泽科技有限公司

- - 59 - -

www.stephen-tele.com

As Internet Assigned Number Authority (IANA) provisions, the high 24 bits of a multicast MAC address are 0x01005e
and the low 23 bits of a MAC address are the low 23 bits of a multicast IP address.

Figure Mapping between a multicast IP address and an Ethernet MAC address

The first four bits of the multicast address are 1110, representing the multicast identifier. Among the rest 28 bits, only
23 bits are mapped to the MAC address, and the other five bits are lost. This may results in that 32 IP addresses are
mapped to the same MAC address.

IP Multicast Protocols

Multicast involves multicast group management protocols and multicast routing protocols. Their application positions
are shown in follow Figure Application positions of multicast-related protocols.

Figure Application positions of multicast-related protocols

I. Multicast group management protocol

Multicast groups use Internet group management protocol (IGMP) as the management protocols. IGMP runs between
the switch and multicast router and defines the membership establishment and maintenance mechanism between
them.

II. Multicast routing protocols

10G Core Routing Switch User Manual

陈泽科技有限公司

- - 60 - -

www.stephen-tele.com

A multicast routing protocol runs between multicast routers to create and maintain multicast routes for correct and
efficient forwarding of multicast packet. The multicast routing creates a loop-free data transmission path from one
source to multiple receivers.The task of multicast routing protocols is to build up the distribution tree architecture. A
multicast router can use multiple methods to build up a path for data transmission, that is, a distribution tree.
As in unicast routing, the multicast routing can also be intra-domain or inter-domain. Intra-domain multicast routing is
rather mature and protocol independent multicast (PIM) is the most wildly used intra-domain protocol, which can
work in collaboration with unicast routing protocols. The inter-domain routing first needs to solve how to transfer
routing information between ASs. Since the ASs may belong to different telecom carriers, the inter-domain routing
information must contain carriers’ policies, in addition to distance information. Currently, inter-domain routing
protocols include multicast source discovery protocol (MSDP) and MBGP multicast extension.

IP Multicast Packet Forwarding

To ensure that multicast packets reach a router along the shortest path, the multicast router must check the receiving
interface of multicast packets depending on the unicast routing table or a unicast routing table independently provided
for multicast. This check mechanism is the basis for most multicast routing protocols to perform multicast forwarding,
and is known as Reverse Path Forwarding (RPF) check. A multicast router uses the source address of a received
multicast packet to query the unicast routing table or the independent multicast routing table to determine that the
receiving interface is on the shortest path from the receiving station to the source. If a source tree is used, the source
address is the address of the source host sending the multicast packet. If a shared tree is used, the source address is
the RP address of the shared tree. A multicast packet arriving at the router will be forwarded according to the
multicast forwarding entry if it passes the RPF check, or else, it will be discarded.

IGMP Snooping Configuration

IGMP Snooping Overview

IGMP Snooping Principle

IGMP Snooping (Internet Group Management Protocol Snooping) is a multicast control mechanism running on the
Layer 2 Ethernet switch and it is used for multicast group management and control.
IGMP Snooping runs on the link layer. When receiving the IGMP messages transmitted between the host and router,
the Layer 2 Ethernet switch uses IGMP Snooping to analyze the information carried in the IGMP messages. If the switch
hears IGMP host report message from an IGMP host, it will add the host to the corresponding multicast table. If the
switch hears IGMP leave message from an IGMP host, it will remove the host from the corresponding multicast table.
The switch continuously listens to the IGMP messages to create and maintain MAC multicast address table on Layer 2.
And then it can forward the multicast packets transmitted from the upstream router according to the MAC multicast
address table. When IGMP Snooping is disabled, the packets are multicast on Layer 2.

See the following figure:

10G Core Routing Switch User Manual

陈泽科技有限公司

- - 61 - -

www.stephen-tele.com

Figure Multicast packet transmission without IGMP Snooping

When IGMP Snooping runs, the packets are not broadcast on Layer 2. See the following figure:

Figure Multicast packet transmission when IGMP Snooping runs

Implement IGMP Snooping

I. Related concepts of IGMP Snooping

To facilitate the description, this section first introduces some related switch concepts of IGMP Snooping:

 Router Port: The port of the switch, directly connected to the multicast router.

10G Core Routing Switch User Manual

陈泽科技有限公司

- - 62 - -

www.stephen-tele.com

 Multicast member port: The port connected to the multicast member.The multicast member refers to a host

joined a multicast group.

 MAC multicast group: The multicast group is identified with MAC multicast address and maintained by the

Ethernet switch.

 Router port aging time: Time set on the router port aging timer. If the switch has not received any IGMP general

query message before the timer times out, it considers the port no longer as a router port.

 Multicast group member port aging time: When a port joins an IP multicast group,the aging timer of the port will

begin timing. The multicast group member port aging time is set on this aging timer. If the switch has not received
any IGMP report message before the timer times out, it transmits IGMP specific query message to the port.

 Maximum response time: When the switch transmits IGMP specific query message to the multicast member port,

the Ethernet switch starts a response timer,which times before the response to the query. If the switch has not
received any IGMP report message before the timer times out, it will remove the port from the multicast member
ports

II. Implement Layer 2 multicast with IGMP Snooping

The Ethernet switch runs IGMP Snooping to listen to the IGMP messages and map the host and its ports to the
corresponding multicast group address. To implement IGMP Snooping, the Layer 2 Ethernet switch processes different
IGMP messages in the way illustrated in the figure below:

Figure Implement IGMP Snooping

1) IGMP general query message: Transmitted by the multicast router to the multicast group members to query which
multicast group contains member. When an IGMP general query message arrives at a router port, the Ethernet
switch will reset the aging timer of the port. When a port other than a router port receives the IGMP general
query message, the Ethernet switch will notify the multicast router that a port is ready to join a multicast group
and starts the aging timer for the port.

2) IGMP specific query message: Transmitted from the multicast router to the multicast members and used for
querying if a specific group contains any member. When received IGMP specific query message, the switch only
transmits the specific query message to the IP multicast group which is queried.

10G Core Routing Switch User Manual

陈泽科技有限公司

- - 63 - -

www.stephen-tele.com

3) IGMP report message: Transmitted from the host to the multicast router and used for applying to a multicast
group or responding to the IGMP query message. When received the IGMP report message, the switch checks if
the MAC multicast group, corresponding to the IP multicast group the packet is ready to join exists.

If the corresponding MAC multicast group does not exist, the switch only notifies the router that a member is
ready to join a multicast group, creates a new MAC multicast group, adds the port received the message to the
group, starts the port aging timer, and then adds all the router ports in the native VLAN of the port into the MAC
multicast forwarding table, and meanwhile creates an IP multicast group and adds the port received the report
message to it. If the corresponding MAC multicast group exists but does not contains the port received the report
message, the switch adds the port into the multicast group and starts the port aging timer.
And then the switch checks if the corresponding IP multicast group exists. If it does not exist, the switch creates a
new IP multicast group and adds the port received the report message to it. If it exists, the switch adds the port to
it. If the MAC multicast group corresponding to the message exists and contains the port received the message,
the switch will only reset the aging timer of the port.

4) IGMP leave message: Transmitted from the multicast group member to the multicast router to notify that a router
host left the multicast group. When received a leave message of an IP multicast group, the Ethernet switch
transmits the specific query message concerning that group to the port received the message, in order to check if
the host still has some other member of this group and meanwhile starts a maximum response timer. If the switch
has not receive any report message from the multicast group, the port will be removed from the corresponding
MAC multicast group. If the MAC multicast group does not have any member, the switch will notify the multicast
router to remove it from the multicast tree.

IGMP Snooping Configuration

The main IGMP Snooping configuration includes:

 Enabling/disabling IGMP Snooping
 Configuring the aging time of multicast group member port

Among the above configuration tasks, enabling IGMP Snooping is required, while others are optional for your
requirements.

Enabling/Disabling IGMP Snooping

You can use the following commands to enable/disable IGMP Snooping to control whether MAC multicast forwarding
table is created and maintained on Layer 2.

Beginning in privileged EXEC mode, follow these steps to enable IGMP snooping.

Command

Purpose

Step 1 config terminal Enter global configuration mode.

Step 2 igmp-snooping enable Enable IGMP Snooping

Step 3 show igmp-snooping configuration Verify your entries.

Step 4 Copy running-config startup-config (Optional) Save your entries in the

configuration file.

10G Core Routing Switch User Manual

陈泽科技有限公司

- - 64 - -

www.stephen-tele.com

To disable IGMP snooping, use no igmp-snooping global configuration command.
By default, IGMP Snooping is disabled.

Configuring Aging Time of Multicast Group Member

This task is to manually set the aging time of the multicast group member port. If the switch receives no multicast
group report message during the member port aging time, it will transmit the specific query message to that port and
starts a maximum response timer.

Beginning in privileged EXEC mode, follow these steps to configure Aging Time of Multicast Group Member.

Command

Purpose

Step 1 config terminal Enter global configuration mode.
Step 2 igmp-snooping host-aging-time

seconds

Configure aging time

Seconds range is 10 to 3600.

Step 3 show igmp-snooping timeout Verify your entries.

Step 4 Copy running-config

startup

-

config

(Optional) Save your entries in the configuration file.

By default, the aging time of the multicast member is 300 seconds.

Configuring a Multicast Router Port

To add a multicast router port (add a static connection to a multicast router), use the igmp-snooping mrouter vlan
global configuration command on the switch.

Beginning in privileged EXEC mode, follow these steps to configure a multicast router port.

Command

Purpose

Step 1 config terminal Enter global configuration mode.
Step 2 igmp-snooping mrouter vlan

vlan-id interface interface-id

Specify the multicast router VLAN ID and specify the
interface to the multicast router.

• The VLAN ID range is 1 to 4094.

• The interface can be a physical interface or a port

channel. The port channel range is 1 to 12.

Step 3 show igmp-snooping mrouter

vlan all

Verify your entries.

Step 4 Copy running-config

startup

-

config

(Optional) Save your entries in the configuration file.

To remove a multicast router port from the VLAN, use the no igmp-snooping mrouter vlan vlan-id interface
interface-id global configuration command.

10G Core Routing Switch User Manual

陈泽科技有限公司

- - 65 - -

www.stephen-tele.com

Configuring a Host Statically to Join a Group

Hosts or Layer 2 ports normally join multicast groups dynamically, but you can also statically configure a host on an
interface. Beginning in privileged EXEC mode, follow these steps to add a Layer 2 port as a member of a multicast
group:

Command Purpose

Step 1 config terminal Enter global configuration mode.
Step 2 igmp-snooping static vlan

vlan-id ip-address interface
interface-id

Statically configure a Layer 2 port as a member of a
multicast group:

• vlan-id is the multicast group VLAN ID.

• ip-address is the group IP address.

• interface-id is the member port. It can be a physical

interface or port channel (1 to 12).

Step 3 show igmp-snooping Verify your entries.

configuration

Step 4 Copy running-config

startup-config

(Optional) Save your entries in the configuration file.

To remove the Layer 2 port from the multicast group, use the no igmp-snooping static vlan vlan-id ip-address interface
interface-id global configuration command.

Enabling IGMP Immediate Leave

When you enable IGMP Immediate Leave, the switch immediately removes a port when it detects an IGMP Version 2
leave message on that port. You should only use the Immediate-Leave feature when there is a single receiver present.
Beginning in privileged EXEC mode, follow these steps to enable IGMP Immediate Leave:

Command

Purpose

Step 1 config terminal Enter global configuration mode.
Step 2 igmp-snooping

immediate-leave enable

Enable IGMP Immediate Leave

Step 3 show igmp-snooping

configuration

Verify your entries.

Step 4 Copy running-config

startup

-

config

(Optional) Save your entries in the configuration file.

To disable IGMP Immediate Leave, use the no igmp-snooping immediate-leave global configuration command.

This example shows how to enable IGMP Immediate Leave:

Switch# configure terminal
Switch(config)# igmp-snooping immediate-leave

10G Core Routing Switch User Manual

陈泽科技有限公司

- - 66 - -

www.stephen-tele.com

IGMP Snooping Configuration Example

Enable IGMP Snooping

I. Networking requirements

To implement IGMP Snooping on the switch, first enable it. The switch is connected with the router via the router port,
and with user PC through the non-router ports.

II. Networking diagram

Figure IGMP Snooping configuration networking

III. Configuration procedure

# Enable IGMP snooping on switch

switch(config)# igmp-snooping enable

Troubleshoot IGMP Snooping

Fault: Multicast function cannot be implemented on the switch.

Troubleshooting:

1) IGMP Snooping is disabled.

 Input the display current-configuration command to display the status of IGMP Snooping.
 If the switch disabled IGMP Snooping, check whether the IGMP Snooping is not nabled globally or it is not enabled

in the VLAN. If it is not enabled globally, first nput the igmp-snooping enable command in system view and then in
VLAN iew. If it is not enabled in the VLAN, input the same command in VLAN view.

2) Multicast forwarding table set up by IGMP Snooping is wrong.

 Input the display igmp-snooping group command to display if the multicast roup is the expected one.
 If the multicast group created by IGMP Snooping is not correct, turn to rofessional maintenance personnel for

10G Core Routing Switch User Manual

陈泽科技有限公司

- - 67 - -

www.stephen-tele.com

help.

 Continue with diagnosis 3 if the second step is completed.

3) Multicast forwarding table set up on the bottom layer is wrong.

 Enable IGMP Snooping group in user view and then input the command display gmp-snooping group to check if

MAC multicast forwarding table in the bottom ayer and that created by IGMP Snooping is consistent. You may also
input the isplay mac vlan command in any view to check if MAC multicast forwarding able under vlanid in the
bottom layer and that created by IGMP Snooping is onsistent.

 If they are not consistent,please contact the maintenance personnel for help.

IGMP Configuration

IGMP Overview

Introduction to IGMP

Internet Group Management Protocol (IGMP) is a protocol in the TCP/IP suite responsible for management of IP
multicast members. It is used to establish and maintain multicast membership among IP hosts and their directly
connected neighboring routers. IGMP excludes transmitting and maintenance of membership information among
multicast routers, which are completed by multicast routing protocols. All hosts participating in multicast must
implement IGMP.

Hosts participating in IP multicast can join and leave a multicast group at any time. The number of members of a
multicast group can be any integer and the location of them can be anywhere. A multicast router does not need and
cannot keep the membership of all hosts. It only uses IGMP to learn whether receivers (i.e., group members) of a
multicast group are present on the subnet connected to each interface. A host only needs to keep which multicast
groups it has joined.

IGMP is not symmetric on hosts and routers. Hosts need to respond to IGMP query messages from the multicast router,
i.e., report the group membership to the router. The router needs to send membership query messages periodically to
discover whether hosts join the specified group on its subnets according to the received response messages. When the
router receives the report that hosts leave the group, the router will send a group-specific query packet (IGMP Version

2) to discover whether no member exists in the group.

Up to now, IGMP has three versions, namely, IGMP Version 1 (defined by RFC1112), IGMP Version 2 (defined by
RFC2236) and IGMP Version 3. At present, IGMP Version 2 is the most widely used version.
IGMP Version 2 boasts the following improvements over IGMP Version 1:

I. Election mechanism of multicast routers on the shared network segment

A shared network segment means that there are multiple multicast routers on a network segment. In this case, all
routers running IGMP on the network segment can receive the membership report from hosts. Therefore, only one
router is necessary to send membership query messages. In this case, the router election mechanism is required to
specify a router as the querier. In IGMP Version 1, selection of the querier is determined by the multicast routing
protocol. While IGMP Version 2 specifies that the multicast router with the lowest IP address is elected as the querier
when there are multiple multicast routers on the same network segment.

10G Core Routing Switch User Manual

陈泽科技有限公司

- - 68 - -

www.stephen-tele.com

II. Leaving group mechanism

In IGMP Version 1, hosts leave the multicast group quietly without informing the multicast router. In this case, the
multicast router can only depend on the timeout of the response time of the multicast group to confirm that hosts
leave the group. In Version 2, when a host is intended to leave, it will send a leave group message if it is the host who
responds to the latest membership query message.

III. Specific group query

In IGMP Version 1, a query of a multicast router is targeted at all the multicast groups on the network segment, which
is known as General Query. In IGMP Version 2, Group-Specific Query is added besides general query. The destination IP
address of the query packet is the IP address of the multicast group. The group address domain in the packet is also
the IP address of the multicast group. This prevents the hosts of members of other multicast groups from sending
response messages.

IV. Max response time

The Max Response Time is added in IGMP Version 2. It is used to dynamically adjust the allowed maximum time for a
host to response to the membership query message.

IGMP Configuration

1) IGMP basic configuration includes:

 Enabling multicast routing
 Enabling IGMP on an interface

2) IGMP advanced configuration includes:

 Configuring the IGMP version
 Configuring the interval of sending IGMP Group-Specific Query packet
 Configuring the times of sending IGMP Group-Specific Query packet
 Configuring the limit of IGMP groups on an interface
 Configuring a router to join specified multicast group
 Controlling the access to IP multicast groups
 Configuring the IGMP query message interval
 Configuring the IGMP querier present timer
 Configuring the maximum query response time
 Deleting IGMP Groups Joined on an Interface

Enabling Multicast routing

Enable multicast first before enabling IGMP and the multicast routing protocol.

Beginning in privileged EXEC mode, follow these steps to enable IP multicast routing.

Command Purpose

10G Core Routing Switch User Manual

陈泽科技有限公司

- - 69 - -

www.stephen-tele.com

Step 1 config terminal Enter global configuration mode.
Step 2 ip multicast-routing enable Enable IP multicast routing.

Step 3

exit Return to privileged EXEC

mode.

Step 4 show ip mroute Verify your entries.

Step 5

write

(Optional) Save your entries in the configuration file.

By default, multicast is disabled.
To disable multicast routing, use the ip multicast-routing disable global configuration command.

Enabling Igmp on a interface

Only multicast function is enabled can the ip multicast-routing enable command be executed. After this, you can
initiate IGMP feature configuration.

Beginning in privileged EXEC mode, follow these steps to enable igmp on a interface.

Command

Purpose

Step 1 config terminal Enter global configuration mode.
Step 2 ip pim interface interface-id

sparse-mode enable

Enable IP multicast routing.

Step 3

exit Return to privileged EXEC mode.

Step 4 show ip igmp interface

interface-id

Verify your entries.

Step 5

write

(Optional) Save your entries in the configuration file.

By default, multicast is disabled.
To disable multicast routing, use the ip pim interface interface-id sparse-mode disable global configuration command.

Configuring the IGMP Version

Beginning in privileged EXEC mode, follow these steps to configuring the igmp version.

Command Purpose

Step 1 config terminal Enter global configuration mode.

Step 2 ip igmp interface interface-id

version { 1 | 2 }

Specify the IGMP version that the switch uses.

Note:

If you change to Version 1, you cannot configure the

ip igmp query-interval or the ip igmp
query-max-response-time interface configuration
commands.

10G Core Routing Switch User Manual

陈泽科技有限公司

- - 70 - -

www.stephen-tele.com

Step 3 exit Return to privileged EXEC mode.

Step 4 show ip igmp interface interface-id Verify your entries.

Step 5 write (Optional) Save your entries in the configuration

file.

By default, IGMP Version 2 is used.

Note:

All routers on a subnet must support the same version of IGMP. After detecting the

presence of

IGMP Version 1 system, a router cannot automatically switch to Version 1.

Configuring the Interval to Send IGMP Query Message

Multicast routers send IGMP query messages to discover which multicast groups are present on attached networks.
Multicast routers send query messages periodically to refresh their knowledge of members present on their networks.

Beginning in privileged EXEC mode, follow these steps to configuring the Interval to Send IGMP Query Message.

Command

Purpose

Step 1 config terminal Enter global configuration mode.
Step 2 ip igmp query-interval seconds Configure the interval to send IGMP query message

By default, the interval is 60 seconds.

 Seconds is range from 1 to 65535.

Step 3 exit Return to privileged EXEC mode.
Step 4 write (Optional) Save your entries in the configuration

file.

When there are multiple multicast routers on a network segment, the querier is responsible for sending IGMP query
messages to all hosts on the LAN.

Configuring the Interval of Querying IGMP Packets

On the shared network, it is the query router (querier) that maintains IGMP membership on the interface. When an
IGMP querier receives an IGMP Leave Group message from a host, the last member query interval can be specified for
Group-Specific Queries.

 The host sends the IGMP Leave message.
 Upon receiving the message, IGMP querier sends the designated group IGMP query message for specified times

(defined by the robust-value in igmp robust-count, with the default value as 1 second) and at a time interval
(defined by the seconds in igmp lastmember-queryinterval, with the default value as 2).

 When other hosts reciver the message from the IGMP querier and are interested in this group, they return the

IGMP Memberhsip Report message within the defined maximum response time.

 If IGMP querier receives the report messges from other hosts within the period equal to robust-value × seconds, it

10G Core Routing Switch User Manual

陈泽科技有限公司

- - 71 - -

www.stephen-tele.com

continues memberhship maintenance for this group.

 If it receives no report message from any other host within this peroid, it reckons

This as timeout and ends mebership maintenance for this group.
This command can be used only when the querier runs IGMP version 2, since a host running IGMP Version 1 does not
send IGMP Leave Group message when it leaves a group.

Beginning in privileged EXEC mode, follow these steps to configuring the Interval of Querying IGMP Packets

Command Purpose

Step 1 config terminal Enter global configuration mode.
Step 2 ip igmp last-query-interval

senconds

Configure interval for querying IGMP packets
By default, the interval is 1 seconds.

 Seconds is range from 1 to 65.

Step 3

exit Return to privileged EXEC mode.

Step 4 write (Optional) Save your entries in the configuration

file.

Changing the IGMP Query Timeout for IGMPv2

If you are using IGMPv2, you can specify the period of time before the switch takes over as the querier for the
interface. By default, the switch waits twice the query interval controlled by the ip igmp query-interval interface
configuration command. After that time, if the switch has received no queries,it becomes the querier.
You can configure the query interval by entering the show ip igmp interface interface-id privileged EXEC command.

Beginning in privileged EXEC mode, follow these steps to change the IGMP query timeout. This procedure is optional.

Command

Purpose

Step 1 config terminal Enter global configuration mode.

Step 2 ip igmp querier-timeout senconds Specify the IGMP query timeout.

The default is 60 seconds (twice the query interval).

The range is 60 to 300.

Step 3 exit Return to privileged EXEC mode.
Step 4 write (Optional) Save your entries in the configuration

file.

Changing the Maximum Query Response Time for IGMPv2

If you are using IGMPv2, you can change the maximum query response time advertised in IGMP queries. The maximum
query response time enables the switch to quickly detect that there are no more directly connected group members
on a LAN. Decreasing the value enables the switch to prune groups faster.

Beginning in privileged EXEC mode, follow these steps to change the maximum query response time.This procedure is
optional.

Command

Purpose

10G Core Routing Switch User Manual

陈泽科技有限公司

- - 72 - -

www.stephen-tele.com

Step 1 config terminal Enter global configuration mode.
Step 2 ip igmp query-max-response

seconds

Change the maximum query response time
advertised in IGMP queries.
The default is 10 seconds. The range is 1 to 25.

Step 3

exit Return to privileged EXEC mode.

Step 4

write

(Optional) Save your entries in the configuration file.

Configuring a Router to Join Specified Multicast Group

Usually, the host operating IGMP will respond to IGMP query packet of the multicast router. In case of response failure,
the multicast router will consider that there is no multicast member on this network segment and will cancel the
corresponding path. Configuring one interface of the router as multicast member can avoid such problem. When the
interface receives IGMP query packet, the router will respond, thus ensuring that the network segment where the
interface is connected can normally receive multicast packets.
For an ethernet switch, you can configure a port in a VLAN interface to join a multicast group.

Beginning in privileged EXEC mode, follow these steps to configure a router to join specified multicast group.

Command Purpose

Step 1 config terminal Enter global configuration mode.
Step 2 ip igmp interface interface-id

join-group group-address

Configure a router to join specified multicast group
By default, a router joins no multicast group.

Step 3

exit Return to privileged EXEC mode.

Step 4 write (Optional) Save your entries in the configuration

file.

To leave a group , use ip igmp interface interface-id leave-group group-address global configuration command.

Configuring the Switch as a Statically Connected Member

Sometimes there is either no group member on a network segment or a host cannot report its group membership by
using IGMP. However, you might want multicast traffic to go to that network segment. These are ways to pull multicast
traffic down to a network segment:

 Use the ip igmp interface interface-id join-group Globle configuration command. With this method, the switch

accepts the multicast packets in addition to forwarding them. Accepting the multicast packets prevents the switch
from fast switching.

 Use the ip igmp interface interface-id static-group globle configuration command. With this method, the switch

does not accept the packets itself, but only forwards them. This method enables fast switching. The outgoing
interface appears in the IGMP cache, but the switch itself is not a member, as evidenced by lack of an L (local) flag
in the multicast route entry.

Beginning in privileged EXEC mode, follow these steps to configure the switch itself to be a statically connected

10G Core Routing Switch User Manual

陈泽科技有限公司

- - 73 - -

www.stephen-tele.com

member of a group (and enable fast switching). This procedure is optional.

Command Purpose

Step 1 config terminal Enter global configuration mode.
Step 2 ip igmp interface interface-id

static-group add group-address

Configure the switch as a statically connected
member of a group.
By default, this feature is disabled.

Step 3

exit Return to privileged EXEC mode.

Step 4

write

(Optional) Save your entries in the configuration file.

To remove the switch as a member of the group, use ip igmp interface interface-id static-group delete group-address
globle configuration command.

PIM-SM Configuration

PIM-SM Overview

Introduction to PIM-SM

PIM-SM (Protocol Independent Multicast, Sparse Mode) belongs to sparse mode multicast routing protocols. PIM-SM
is mainly applicable to large-scale networks with broad scope in which group members are relatively sparse.
Different from the flood & prune principle of the dense mode, PIM-SM assumes that all hosts do not need to receive
multicast packets, unless there is an explicit request for the packets.
PIM-SM uses the RP (Rendezvous Point) and the BSR (Bootstrap Router) to advertise multicast information to all
PIM-SM routers and uses the join/prune information of the router to build the RP-rooted shared tree (RPT), thereby
reducing the bandwidth occupied by data packets and control packets and reducing the process overhead of the router.
Multicast data flows along the shared tree to the network segments the multicast group members are on. When the
data traffic is sufficient, the multicast data flow can switch over to the SPT (Shortest Path Tree) rooted on the source to
reduce network delay. PIM-SM does not depend on the specified unicast routing protocol but uses the present unicast
routing table to perform the RPF check.
Running PIM-SM needs to configure candidate RPs and BSRs. The BSR is responsible for collecting the information from
the candidate RP and advertising the information.

PIM-SM Working Principle

The PIM-SM working process is as follows: neighbor discovery, building the RP-rooted shared tree (RPT), multicast
source registration and SPT switchover etc. The neighbor discovery mechanism is the same as that of PIM-DM, which
will not be described any more.

I. Build the RP shared tree (RPT)

When hosts join a multicast group G, the leaf routers that directly connect with the hosts send IGMP messages to learn
the receivers of multicast group G. In this way, the leaf routers calculate the corresponding rendezvous point (RP) for
multicast group G and then send join messages to the node of a higher level toward the rendezvous point (RP). Each
router along the path between the leaf routers and the RP will generate (*, G) entries in the forwarding table,
indicating that all packets sent to multicast group G are applicable to the entries no matter from which source they are

10G Core Routing Switch User Manual

陈泽科技有限公司

- - 74 - -

www.stephen-tele.com

sent. When the RP receives the packets sent to multicast group G, the packets will be sent to leaf routers along the
path built and then reach the hosts. In this way, an RP-rooted tree (RPT) is built as shown in the following figure.

Figure RPT schematic diagram

II. Multicast source registration

When multicast source S sends a multicast packet to the multicast group G, the PIM-SM multicast router directly
connected to S will encapsulate the received packet into a registration packet and send it to the corresponding RP in
unicast form. If there are multiple PIM-SM multicast routers on a network segment, the Designated Router (DR) will be
responsible for sending the multicast packet.

Preparations before Configuring PIM-SM

I. Configuring candidate RPs

In a PIM-SM network, multiple RPs (candidate-RPs) can be configured. Each Candidate-RP (C-RP) is responsible for
forwarding multicast packets with the destination addresses in a certain range. Configuring multiple C-RPs is to
implement load balancing of the RP. These C-RPs are equal. All multicast routers calculate the RPs corresponding to
multicast groups according to the same algorithm after receiving the C-RP messages that the BSR advertises.
It should be noted that one RP can serve multiple multicast groups or all multicast groups. Each multicast group can
only be uniquely correspondent to one RP at a time rather than multiple RPs.

II. Configuring BSRs

The BSR is the management core in a PIM-SM network. Candidate-RPs send announcement to the BSR, which is
responsible for collecting and advertising the information about all candidate-RPs. It should be noted that there can be
only one BSR in a network but you can configure multiple candidate-BSRs. In this case, once a BSR fails, you can switch
over to another BSR. A BSR is elected among the C-BSRs automatically. The C-BSR with the highest priority is elected as
the BSR. If the priority is the same, the C-BSR with the largest IP address is elected as the BSR.

III. Configuring static RP

The router that serves as the RP is the core router of multicast routes. If the dynamic RP elected by BSR mechanism is
invalid for some reason, the static RP can be configured to specify RP. As the backup of dynamic RP, static RP improves
network robusticity and enhances the operation and management capability of multicast network.

10G Core Routing Switch User Manual

陈泽科技有限公司

- - 75 - -

www.stephen-tele.com

PIM-SM Configuration

1) PIM-SM basic configuration includes:

 Enabling Multicast
 Enabling PIM-SM
 Configuring the PIM-SM domain border
 Configuring candidate-BSRs
 Configuring candidate-RPs
 Configuring static RP

2) PIM-SM advanced configuration includes:

 Configuring the sending interval for the Hello packets of the interface
 Configuring the filtering of multicast source/group
 Configuring the filtering of PIM neighbor
 Configuring the maximum number of PIM neighbor on an interface
 Configuring RP to filter the register messages sent by DR
 Clearing multicast route entries from PIM routing table
 Clearing PIM neighbor

It should be noted that at least one router in an entire PIM-SM domain should be configured with Candidate-RPs and
Candidate-BSRs.

Enabling Multicast

Enabling PIM-SM

This configuration can be effective only after multicast is enabled.
Beginning in privileged EXEC mode, follow these steps to enable PIM-SM.

Command

Purpose

Step 1 config terminal Enter global configuration mode.
Step 2 ip pim interface interface-id

sparse-mode enable

Enable IP multicast routing.

Step 3 exit Return to privileged EXEC mode.

Step 4 show ip igmp interface

interface

-id

Verify your entries.

Step 5 write (Optional) Save your entries in the configuration file.

Repeat this configuration to enable PIM-SM on other interfaces. Only one multicast routing protocol can be enabled
on an interface at a time.

10G Core Routing Switch User Manual

陈泽科技有限公司

- - 76 - -

www.stephen-tele.com

Configuring Candidate-BSRs

In a PIM domain, one or more candidate BSRs should be configured. A BSR (Bootstrap Router) is elected among
candidate BSRs. The BSR takes charge of collecting and advertising RP information.
The automatic election among candidate BSRs is described as follows:
One interface which has started PIM-SM must be specified when configuring the router as the candidate BSR.
At first, each candidate BSR considers itself as the BSR of the PIM-SM domain, and sends Bootstrap message by taking
the IP address of the interface as the BSR address.
When receiving Bootstrap messages from other routers, the candidate BSR will compare the BSR address of the newly
received Bootstrap message with that of itself. Comparison standards include priority and IP address. The bigger IP
address is considered better when the priority is the same. If the new BSR address is better, the candidate BSR will
replace its BSR address and stop regarding itself as the BSR.
Otherwise, the candidate BSR will keep its BSR address and continue to regard itself as the BSR.

Beginning in privileged EXEC mode, follow these steps to configure Candidate-BSRs.

Command

Purpose

Step 1 config terminal Enter global configuration mode.
Step 2 ip pim bsr-candidate interface-id

[ priority priority ]

Configure a candidate-BSR
By default, no BSR is set. The default priority is 0.
Priority range is 0 to 255.

Step 3 exit Return to privileged EXEC mode.

Step 4 show ip pim bsr-router Verify your entries.

Step 5

write

(Optional) Save your entries in the configuration file.

Candidate-BSRs should be configured on the routers in the network backbone

֠Caution:

One router can only be configured with one candidate-BSR. When a candidate-BSR is

configured on another interface, it will replace the previous configuration.

Configuring Candidate-RPs

In PIM-SM, the shared tree built by the multicast routing data is rooted at the RP. There is a mapping from a multicast
group to an RP. A multicast group can be mapped to an RP. Different groups can be mapped to one RP.
Beginning in privileged EXEC mode, follow these steps to configure Candidate-RPs.

Command

Purpose

Step 1 config terminal Enter global configuration mode.
Step 2 ip pim rp-candidate interface-id

[ priority

priority

]

Configure a candidate-RP

The default priority is 0.

Priority range is 0 to 255.

Step 3

exit Return t

o privileged EXEC mode.

Step 4 show ip pim rp Verify your entries.

Step 5

write

(Optional) Save your entries in the configuration file.

10G Core Routing Switch User Manual

陈泽科技有限公司

- - 77 - -

www.stephen-tele.com

When configuring RP, if the range of the served multicast group is not specified, the RP will serve all multicast groups.
Otherwise, the range of the served multicast group is the multicast group in the specified range. It is suggested to
configure Candidate RP on the backbone router.

Configuring Static RP

Static RP serves as the backup of dynamic RP, so as to improve network robusticity.
Beginning in privileged EXEC mode, follow these steps to configure static RP.

Command Purpose

Step 1 config terminal Enter global configuration mode.
Step 2 ip pim rp-address set ip-address Configure static RP

Step 3

exit Retur

n to privileged EXEC mode.

Step 4 show ip pim rp Verify your entries.

Step 5

write

(Optional) Save your entries in the configuration file.

If static RP is in use, all routers in the PIM domain must adopt the same configuration. If the configured static RP
address is the interface address of the local router whose state is UP, the router will function as the static RP. It is
unnecessary to enable PIM on the interface that functions as static RP. When the RP elected from BSR mechanism is
valid, static RP does not work.

Modifying the PIM Router-Query Message Interval

PIM routers and multilayer switches send PIM router-query messages to find which device will be the DR for each LAN
segment (subnet). The DR is responsible for sending IGMP host-query messages to all hosts on the directly connected
LAN.

With PIM SM operation, the DR is the device that is directly connected to the multicast source. It sends PIM register
messages to notify the RP that multicast traffic from a source needs to be forwarded down the shared tree. In this case,
the DR is the device with the highest IP address.

Beginning in privileged EXEC mode, follow these steps to modify the router-query message interval. This procedure is
optional.

Command

Purpose

Step 1 config terminal Enter global configuration mode.

Step 2 ip pim query-interval seconds

Configure the frequency at which the switch sends
PIM router-query messages.

The default is 30 seconds. The range is 1 to 65535.

Step 3 exit Return to privileged EXEC mode.
Step 4 show ip igmp interface

interface-id

Verify your entries.

Step 5

write

(Optional) Save your entries in the configuration file.

10G Core Routing Switch User Manual

陈泽科技有限公司

- - 78 - -

www.stephen-tele.com

ACL Configuration

ACL Overview

A series match rules must be configured to recognize the packets before they are filtered. Only when packets are
identified, can the network take corresponding actions, allowing or prohibiting them to pass, according to the preset
policies. Access control list (ACL) is targeted to achieve these functions.
ACLs classify packets using a series of matching rules, which can be source addresses, destination addresses and port
IDs. ACLs can be used globally on the switch or just at a port, through which the switch determines whether to forward
or drop the packets.
The matching rules defined in ACLs can also be imported to differentiate traffic in other situations, for example,
defining traffic classification rules in QoS.
An ACL rule can include many sub-rules, which may be defined for packets of different size. Matching order involves in
matching an ACL.

configuring ACL

The ACL configuration tasks include:

 Define ACL
 Applying an ACL to an Interface

You are recommended to run the configuration tasks in order, that is, first define ACL and last Applying an ACL to an
Interface.

Defining ACL

The switch supports several types of ACLs, which are described in this section. Follow these steps to define an ACL.

1) Enter the corresponding ACL configuration mode.

2) Define ACL sub-rules.

Note:

 The ACL will be effective at any time after being activated.
 You can define multiple rules for the ACL by using the rule command several times.
 The switch does not support the explicit “deny any any” rule for the egress IP ACL or

the egress MAC ACLs.

Creating a Numbered Standard ACL

Beginning in privileged EXEC mode, follow these steps to create a numbered standard ACL:

Command

Purpose

Step 1 config terminal Enter global configuration mode.
Step 2a access-list access-list-number Enter the standard ACL configuration mode.

The access-list-number is a decimal number
from 1 to 99.

10G Core Routing Switch User Manual

陈泽科技有限公司

- - 79 - -

www.stephen-tele.com

Step 2b rule rule_id [deny | permit] sip

{ip-address [net-mask|any]|any}

Define a standard IP access list rule by using
a source address and net-mask.
The rule-id is a decimal number from 0 to

127.
Enter deny or permit to specify whether to
deny or permit access if conditions are
matched.
The sip is the source address of the network
or host from which the packet is being sent
specified as:

• The 32-bit quantity in dotted-decimal
format.

• The keyword any as an abbreviation for
ip-address and net-mask of 0.0.0.0

255.255.255.255. You do not need to enter a

net-mask.

Step 4 show access-list access-list-number Verify your entries.

Step 5 Copy running-config startup-config (Optional) Save your entries in the

configuration file.

To delete a ACL, use no access-list access-list-number global configuration command.
To delete a standard ACL rule, use no rule rule_id standard ACL configuration command

.

Creating a Numbered Extended ACL

Beginning in privileged EXEC mode, follow these steps to create a numbered extended ACL:

Command Purpose

Step 1 config terminal Enter global configuration mode.

Step 2 access-list access-list-number Enter the extended ACL configuration mode.

The access-list-number is a decimal number from 100
to 199.

10G Core Routing Switch User Manual

陈泽科技有限公司

- - 80 - -

www.stephen-tele.com

Step 2a rule rule_id {deny | permit}

protocol Sip ip-address net-mask

dip ip-address net-mask
[match [dscp priority|

precedence priority | tos
priority]] [set [dscp priority|
precedence priority | tos
priority]]

Define an extended IP access list rule and the access
conditions.
The access-list-number is a decimal number from 100
to 199.
Enter deny or permit to specify whether to deny or
permit the packet if conditions are matched.
For protocol, enter the name or number of an IP
protocol: icmp, igmp, igrp, ip,, nos, ospf, pim, tcp, or
udp, or an integer in the range 0 to 255 representing
an IP protocol number. To match any Internet protocol
(including ICMP, TCP, and UDP) use the keyword ip.
Note This step includes options for most IP protocols.
For additional specific parameters for TCP, UDP, ICMP,
and IGMP, see steps 2b through 2c.
The sip is the number of the network or host from
which the packet is sent.
The dip is the network or host number to which the
packet is sent.
Sip and dip can be specified as:

• The 32-bit quantity in dotted-decimal format.

• The keyword any for 0.0.0.0 255.255.255.255 (any

host).

•The other keywords are optional and have these
meanings:

• precedence—Enter to match packets with a
precedence level specified as a
number from 0 to 7 or by name: routine (0), priority
(1), immediate (2), flash (3), flash-override (4), critical
(5), internet (6), network (7).

• tos—Enter to match by type of service level,
specified by a number from 0 to 15 or a name: normal
(0), max-reliability (2), max-throughput (4), min-delay
(8).

• dscp—Enter to match packets with the DSCP value
specified by a numberfrom 0 to 63, or use the
question mark (?) to see a list of available values.

or rule rule_id {deny | permit}

protocol [match [dscp priority|
precedence priority | tos
priority]] [set [dscp priority|
precedence priority | tos
priority]]

In access-list configuration mode, define an extended
IP access list rule if you want to apply to all ip address,
you can configure like this.

10G Core Routing Switch User Manual

陈泽科技有限公司

- - 81 - -

www.stephen-tele.com

Step 2b rule rule_id {deny | permit} tcp

sip ip-address net-mask dip

ip-address net-mask [sport
port] [dsport port]

[established]
[match [dscp priority|

precedence priority | tos
priority]] [set [dscp priority|
precedence priority | tos
priority]]

(Optional) Define an extended TCP access list rule and
the access conditions.
Enter tcp for Transmission Control Protocol.
The parameters are the same as those described in
Step 2a, with these exceptions:
(Optional) Enter an sport and dport to compare
source (if positioned after
sip) or destination (if positioned after dip) port.
Enter the port number as a decimal number (from 0 to

65535) or the name of a
The other optional keywords have these meanings:

• established—Enter to match an established
connection. This has the same function as matching on
the ack or rst flag.

• flag—Enter one of these flags to match by the
specified TCP header bits:

ack (acknowledge), fin (finish), psh (push), rst (reset),
syn (synchronize), or urg (urgent).

Step 2c rule rule_id {deny | permit} udp

sip ip-address net-mask dip

ip-address net-mask [sport
port] [dsport port] [match
[dscp priority| precedence
priority | tos priority]] [set [dscp
priority| precedence priority |

tos priority

]]

(Optional) Define an extended UDP access list rule and
the access conditions.
Enter udp for the User Datagram Protocol.
The UDP parameters are the same as those described
for TCP except that the
[sport/dport] port number or name must be a UDP
port number or name, and

the

flag

and

establish

.

Step 3 show access-list

access-list-number

Verify your entries.

Step 4 Copy running-config

startup-config

(Optional) Save your entries in the configuration file.

To delete an ACL, use no access-list access-list-number global configuration command.
To delete an extended ACL rule, use no rule rule_id standard ACL configuration command.

Applying an ACL to an Interface

Beginning in privileged EXEC mode, follow these steps to control access to an interface:

Command Purpose

Step 1 config terminal Enter global configuration mode.
Step 2 Interface interface_id Enter interface configuration mode for the physical

interface to be configured.

10G Core Routing Switch User Manual

陈泽科技有限公司

- - 82 - -

www.stephen-tele.com

Step 3 ip access-list access-list-number

in

Control access to the specified interface.

Step 4 exit Return to global configuration mode.

Step 5 show access-list

access

-

list-number

Verify your entries.

Step 6 Copy running-config

startup

-

config

(Optional) Save your entries in the configuration file.

To remove the specified access group, use the no ip access-list access-list-number in interface configuration command.
This example shows how to apply access list 2 to a port to filter packets entering the port:

Switch(config)# interface gigabitethernet1/1
Switch(config-if)# ip access-list 2 in

SNMP Configuration

SNMP Overview

By far, the Simple Network Management Protocol (SNMP) has gained the most extensive application in the computer
networks. SNMP has been put into use and widely accepted as an industry standard in practice. It is used for ensuring
the transmission of the management information between any two nodes. In this way,network administrators can
easily search and modify the information on any node on the network. In the meantime, they can locate faults
promptly and implement the fault diagnosis, capacity planning and report generating. SNMP adopts the polling
mechanism and provides the most basic function set. It is most applicable to the small-sized, fast-speed and low-cost
environment. It only requires the unverified transport layer protocol UDP; and is thus widely supported by many other
products.

In terms of structure, SNMP can be divided into two parts, namely, Network Management Station and Agent. Network
Management Station is the workstation for running the client program. At present, the commonly used NM platforms
include Sun NetManager and IBM NetView. Agent is the server software operated on network devices. Network
Management Station can send GetRequest, GetNextRequest and SetRequest messages to the Agent. Upon receiving
the requests from the Network Management Station, Agent will perform Read or Write operation according to the
message types, generate and return the Response message to Network Management Station. On the other hand,
Agent will send Trap message on its own initiative to the Network Management Station to report the events whenever
the device encounters any abnormalities such as new device found and restart

.

SNMP Versions and Supported MIB

To uniquely identify the management variables of a device in SNMP messages, SNMP adopts the hierarchical naming
scheme to identify the managed objects. It is like a tree.A tree node represents a managed object, as shown in the
figure below. Thus the object can be identified with the unique path starting from the root.

10G Core Routing Switch User Manual

陈泽科技有限公司

- - 83 - -

www.stephen-tele.com

Figure Architecture of the MIB tree

The MIB (Management Information Base) is used to describe the hierarchical architecture of the tree and it is the set
defined by the standard variables of the monitored network device. In the above figure, the managed object B can be
uniquely specified by a string of numbers {1.2.1.1}. The number string is the Object Identifier of the managed object.
The current SNMP Agent of Ethernet switch supports SNMP V1, V2C and V3. The MIBs supported are listed in the
following table.

Table 19-1 MIBs supported by the Ethernet Switch

MIB attribute

MIB content

References

Public MIB

MIB II based on TCP/IP network
device

RFC1213

BRIDGE MIB

RFC1493
RFC2675

RIP MIB

RFC1724

RMON MIB

RFC2819

Ethernet MIB

RFC2665

OSPF MIB

RFC1253

IF MIB

RFC1573

Private MIB

VLAN MIB

Device management

10G Core Routing Switch User Manual

陈泽科技有限公司

- - 84 - -

www.stephen-tele.com

Configure SNMP

The main configuration of SNMP includes:

 Set community Name
 Set the Destination Address of Trap
 Set Trap parameters

Setting Community Name

SNMP V1 and SNMPV2C adopt the community name authentication scheme. The SNMP message incompliant with the
community name accepted by the device will be discarded. SNMP Community is named with a character string, which
is called Community Name. The various communities can have read-only or read-write access mode. The community
with read-only authority can only query the device information, whereas the community with read-write authority can
also configure the device.

Beginning in privileged EXEC mode, follow these steps to set Community Name.

Command

Purpose

Step 1 config terminal Enter global configuration mode.

Step 2 snmp community

[readonly| readwrite ] string

Set community string.

Step 3

exit Return to privileged EXEC mode.

Step 4 show snmp community -string Verify your entries.

Step 5 Copy running-config

startup-config

(Optional) Save your entries in the configuration file.

Setting the Destination Address of Trap and Trap Parameters

You can use the following commands to set or delete the destination address and parameters of the trap.
Beginning in privileged EXEC mode, follow these steps to set the Destination Address of Trap.

Command

Purpose

Step 1 config terminal Enter global configuration mode.

Step 2 snmp trapreceiver [add |

delete]Host ip-address version
[v1 | v2c] [Community | cr]
string

Set the destination address of trap.

Step 3 exit Return to privileged EXEC mode.
Step 4 show snmp trapreceiver Verify your entries.

Step 5 Copy running-config

startup

-

config

(Optional) Save your entries in the configuration file.

10G Core Routing Switch User Manual

陈泽科技有限公司

- - 85 - -

www.stephen-tele.com

SNMP Configuration Example

I. Networking requirements

Network Management Station and the Ethernet switch are connected via the Ethernet. The IP address of Network
Management Station is 129.102.149.23 and that of the VLAN interface on the switch is 129.102.0.1. Perform the
following configurations on the switch: setting the community name and set trap host address.

II. Networking diagram

Figure SNMP configuration example

III. Configuration procedure

# Configure community string

switch(config)#snmp community readwrite public

# Configure trap host

switch(config)#snmp trapreceiver add 129.102.149.23

File System Management

This chapter describes how to update the software image of MCU Board and LPU board.
This system software images include the software image of MCU board and LPU board.
This system support FTP client, so you must prepare a FTP server for update the software image.

Update the software image of MCU board

Updating the software image of MCU board, please refer to follow steps:
Step 1: Please prepare FTP server and connect the FTP srever’s Ethernet port to the MCU board’s aux port. Setting the
ftp username、password and image file path.
Step 2: Connect the serial port of a PC (or a terminal) to the Console port of the switch with the Console cable. And run
terminal emulator (such as Terminal on Windows 3X or the Hyper Terminal on Windows 9X) on the Computer. Set the
terminal communication parameters as follows: Set the baud rate to 19200, databit to 8, parity check to none, stopbit
to 1, flow control to none and select the terminal type as VT100.
Step 3: Setting aux port ip address. After you login the system (by default the login username is admin, the login
password is empty; enable password is empty all).

10G Core Routing Switch User Manual

陈泽科技有限公司

- - 86 - -

www.stephen-tele.com

Beginning in privileged EXEC mode, follow these steps to set the aux port ip address

.

Command Purpose

Step 1 config terminal Enter global configuration mode.
Step 2 interface aux Enter aux port configuration mode

Step 3 ipaddress ip-address net-mask Setting aux port ip address..

Step 4 show interface aux Verify your entries.

Step 5 Copy running-config

startup

-

config

(Optional) Save your entries in the configuration file.

Note please confirm your FTP server can communicate with aux correctly.
Step 4：：：：Download the software image of MCU board from FTP server.

Please use the download ftp master-image ip-address username password filename global configuration command.
Step 5: Reboot the system for reload the new software image of MCU.

Update the software image of LPU board

Updating the software image of LPU board, please refer to follow steps:
Step 1: Please prepare FTP server and connect the FTP srever’s Ethernet port to the MCU board’s aux port. Setting the
ftp username、password and image file path.
Step 2: Connect the serial port of a PC (or a terminal) to the Console port of the switch with the Console cable. And run
terminal emulator (such as Terminal on Windows 3X or the Hyper Terminal on Windows 9X) on the Computer. Set the
terminal communication parameters as follows: Set the baud rate to 19200, databit to 8, parity check to none, stopbit
to 1, flow control to none and select the terminal type as VT100.
Step 3: Setting aux port ip address. After you login the system (by default the login username is admin, the login
password is empty; enable password is empty all).

Beginning in privileged EXEC mode, follow these steps to set the aux port ip address.

Command

Purpose

Step 1

config terminal

Enter global configuration mode.

Step 2

interface aux

Enter aux port configuration mode

Step 3

ipaddress

ip-address net

-

mask Setting aux port ip address..

Step 4

show interface aux

Verify your entries.

Step 5

Copy running

-

config startup

-

config

(Optional) Save your entries in the configuration file.

Note please confirm your FTP server can communicate with aux correctly.
Step 4：：：：Download the software image of MCU board from FTP server.
Please use the download ftp slot-image ip-address username password filename privileged EXEC mode command.
Step 5: send the software image of LPU board from MCU board to LPU board.
Please use the send image to slot slot-number privileged EXEC mode command.
Step 6: Reboot the LPU board to reload the new software image of LPU board.

10G Core Routing Switch User Manual

陈泽科技有限公司

- - 87 - -

www.stephen-tele.com

Copyright Notice:

No part of this document may be reproduced, transmitted, transcribed, stored in a retrieval system, or translated into
any language, in any form or by any means, electronic, mechanical, magnetic, optical, chemical, manual or otherwise
without the prior written permission of Stephen Technologies Co.,Limited.

Disclaimer Notice

No license is granted, implied or otherwise, under any patent or patent rights of Stephen Technologies Co.,Limited.
Stephen Technologies Co.,Limited, makes no warranties, implied or otherwise, in regard to this document and to the
products described in this document. The information provided by this document is believed to be accurate and
reliable to the publication date of this document. However, Stephen Technologies Co.,Limited assumes no
responsibility for any errors in this document. Furthermore, Stephen Technologies Co.,Limited, assumes no
responsibility for the use or misuse of the information in this document and for any patent infringements that may
arise from the use of this document. The information and product specifications within this document are subject to
change at any time, without notice and without obligation to notify any person of such change.

STEPHEN TECHNOLOGIES CO.,LIMITED

1204, LiuXiuShengChuangYeDaSha, High Tech
Park Southern Area, Shenzhen, China, 518057
Tel: [phone]
Fax:[phone]
Website: www.stephen-tele.com