No part of this work may be reproduced in any form or by any means – graphic, electronic or mechanical, including
photocopying, recording, taping or storage in an information retrieval system – without prior written permission of the
copyright owner.
The trademarks, logos and service marks ("Marks") displayed herein are the property of Foundry® or other third
parties. You are not permitted to use these Marks without the prior written consent of Foundry or such appropriate third
party.
Foundry Networks, BigIron, Terathon, FastIron, IronView, JetCore, NetIron, SecureIron, ServerIron, Tu r b o Ir o n , IronWare, EdgeIron, IronPoint, the Iron family of marks and the Foundry Logo are trademarks or registered trademarks
of Foundry Networks, Inc. in the United States and other countries.
F-Secure is a trademark of F-Secure Corporation. All other trademarks mentioned in this document are the property of
their respective owners.
Foundry Networks
4980 Great America Parkway
Santa Clara, CA 95054
This guide describes the NetIron MLX router from Foundry Networks. It provides procedures for installing modules
into the NetIron MLX Series chassis, cabling the Ethernet interface ports, and performing a basic configuration of
the software. This guide also explains how to perform tasks using the command line interface (CLI).
Audience
This guide is designed for network installers, system administrators, and resellers who will install and perform a
basic software configuration for the NetIron MLX Series router. This guide assumes a working knowledge of Layer
2 and Layer 3 switching and routing concepts.
Nomenclature
This guide uses the following typographical conventions to show information:
Italichighlights the title of another publication and occasionally emphasizes a word or phrase.
Boldhighlights a CLI command.
Bold Italichighlights a term that is being defined.
NOTE: A note emphasizes an important fact or calls your attention to a dependency.
WARNING: A warning calls your attention to a possible hazard that can cause injury or death.
CAUTION:A caution calls your attention to a possible hazard that can damage equipment.
Updates to Manuals
Manuals for this product may be updated between releases. For the latest edition of manuals, check the Foundry
Knowledge Portal at kp.foundrynet.com.
Foundry NetIron MLX Series Installation and Basic Configuration Guide
How to Get Help or Report Errors
Foundry Networks is committed to ensuring that your investment in our products remains cost-effective. If you
need assistance, or find errors in the manuals, contact Foundry Networks using one of the following options:
Web Access
If you find errors in this document, please report the error by going to kp.foundrynet.com. After you login in, click
Cases > Create a New Ticket. Make sure you specify the document title in the ticket description.
Email Access
Send an e-mail to support@foundrynet.com.
Telephone Access
1.877.TURBOCALL (887.2622) United States
1.408.207.1600Outside the United States
Warranty Coverage
Contact Foundry Networks using any of the methods listed above for information about the standard and extended
warranties.
The NetIron MLX Series router provides high-performance routing for service providers, metro topologies, and
Internet Exchange Points. This chapter provides an overview of Foundry’s NetIron MLX Series routers. It provides
the following information:
•Overview of the benefits the NetIron MLX Series router offers
•Network topologies in which a NetIron MLX Series router will be commonly deployed
•The NetIron MLX Series router hardware and how each major hardware component functions
•Software features that the NetIron MLX Series router supports
•The NetIron MLX Series router’s architecture, how it differs from other Layer 3 router architectures, and how
you will benefit from the differences
Product Overview
The NetIron MLX Series router provides the following benefits:
•The ability of the 10 Gigabit Ethernet ports to process both inbound and outbound user packets at a full
10Gbps, thereby delivering true wire-speed performance
•IPv4 routing with very large hardware-based forwarding table and powerful hardware-based ACL and rate
limiting functions
•IPv6 routing with a rich feature set including hardware-based forwarding, and dual-stack support
•High availability (redundancy) of the following NetIron MLX Series router critical components:
•Management modules
•Fans
•Power supplies
•Switch fabric module
Each of these components, along with the interface modules, is hot swappable, which means you can remove
and replace them while the NetIron MLX Series chassis is powered on and running.
•Completely separate data and control planes, which results in uncompromised switching performance,
increased reliability of both planes, and increased security of the control plane in the event of a Denial of
Service attack (DoS) on the data plane
•Distributed data and control planes, which results in uncompromised wire-speed performance for the data
plane and faster and more efficient performance of management functions for the control plane
Foundry NetIron MLX Series Installation and Basic Configuration Guide
•A management (10BaseT/100BaseTX/1000BaseTX Ethernet) port that can provide connectivity to your
existing management network
•Increased amount of TCAM on the interface modules, which accommodates the processing of more software
functions such as those related to routing protocols
•Increased amounts of processor RAM on the management and interface modules, which allows larger default
table sizes for the MAC address table, the IP route table, and so on
•Airflow that circulates from the front to the back of the NetIron MLX Series router chassis, which directs hot air
from the chassis away from other racks of equipment rather than toward them
NetIron MLX Series Router Applications
The NetIron MLX Series router is commonly deployed in the following situations:
•Layer 2 metro networks
•MPLS Layer-3 VPN service provider networks supporting multi-VRFs and RFC 2547bis
•MPLS Layer-2 VPN service provider networks supporting both VPLS and VLL
Hardware Features
This chapter covers the following major hardware components of NetIron MLX Series routers:
•“Chassis”
•“Management Modules”
•“Interface Modules”
•“Switch Fabric Module”
•“Power Supplies”
•“Cooling System”, which is composed of temperature sensors, fans, fan control modules, and an air filter
•“Rack Mount Kit”
The following sections provide more information about these components.
Chassis
The NetIron MLX Series chassis consists of the following four chassis:
•NetIron MLX-4: Provides 4 interface slots
•NetIron MLX-8: Provides 8 interface slots
•NetIron MLX-16: Provides 16 interface slots
•NetIron MLX-32: Provides 32 interface slots
The following figures illustrate the NetIron MLX Series chassis.
Foundry NetIron MLX Series Installation and Basic Configuration Guide
Upon shipment from the factory, the following components are installed in the four versions of the NetIron MLX
Series chassis as described:
NetIron MLX-4
•Two switch fabric modules.
•A slot blank in each interface module slot. The slot blank covers a slot that does not currently have a module
installed in it, ensuring proper airflow within the chassis.
•A fan tray assembly, which is located in the front right side of the chassis. For more information about the fans,
see “Cooling System” on page 2-23.
•One power supply (AC or DC).
In the slots of the chassis, you can install the following:
•Up to two management modules (one active and one redundant).
•Up to three switch fabric modules.
•Up to four interface modules.
•Up to three power supplies (AC or DC).
Before installing any modules or power supplies, you must remove the slot blank or blank power supply faceplate,
respectively.
NetIron MLX-8
•Two switch fabric modules.
•A slot blank in each interface module slot. The slot blank covers a slot that does not currently have a module
installed in it, ensuring proper airflow within the chassis.
•A fan tray assembly, which is located in the front right side of the chassis. For more information about the fans,
see “Cooling System” on page 2-23.
•Two power supplies (AC or DC).
In the slots of the chassis, you can install the following:
•Up to two management modules (one active and one redundant).
•Up to three switch fabric modules.
•Up to eight interface modules.
•Up to four power supplies (AC or DC).
Before installing any modules or power supplies, you must remove the slot blank or blank power supply faceplate,
respectively.
NetIron MLX-16
•Three switch fabric modules.
•A slot blank in each interface module slot. The slot blank covers a slot that does not currently have a module
installed in it, ensuring proper airflow within the chassis.
•A fan tray assembly located in the front right side of the chassis, and two fan assemblies located at the rear of
the chassis. For more information about the fans, see “Cooling System” on page 2-23.
•Four power supplies (AC or DC).
In the slots of the chassis, you can install the following:
•Up to two management modules (one active and one redundant).
•Empty chassis with backplane and card cage shipping panels, and ten fan assemblies located at the rear of
the chassis, four for the upper card cage, four for the lower card cage, and two for the power supplies.
•A slot blank for each module slot (shipped separately). The slot blank covers a slot that does not currently
have a module installed in it, ensuring proper airflow within the chassis.
•Four AC power supplies.
In the slots of the chassis, you can install the following:
•Two management modules.
•Eight switch fabric modules.
•Up to 32 interface modules.
•Up to eight AC power supplies.
Before installing any modules or power supplies, you must remove the slot blank or blank power supply faceplate,
respectively (NetIron MLX-4, -8, and 16). On the NetIron MLX-32, before installing any modules, you must remove
the shipping panels covering the upper and lower card cages.
CAUTION: If you do not install a module in a slot, you must keep the slot blank in place. If you run the chassis
with an uncovered slot, the system may overheat.
Figure 2.1, Figure 2.2, Figure 2.3, and Figure 2.4 show the NetIron MLX Series chassis and the slots into which
you install the various modules. You must install the primary power supplies and the redundant power supplies as
described in the figures.
Figure 2.1, Figure 2.2, and Figure 2.3 and Figure 2.4 also show an electrostatic discharge (ESD) connector, into
which you can plug an ESD wrist strap to ground yourself while handling and installing modules.
WARNING: For safety reasons, the ESD wrist strap should contain a 1 meg ohm series resistor.
The NetIron MLX-16 and NetIron MLX-32 chassis versions also include a grounding lug connector, located on the
rear panel (left side).
Management Modules
The following management modules are available for NetIron MLX Series routers:
EIA/TIA-232 and 10/100/1000 Ethernet ports for out-of-band management
The management module controls the NetIron MLX Series hardware components, runs the networking protocols,
and provides the Real Time Operating System (RTOS).
Each NetIron MLX Series chassis requires one management module and can accept a second one for
redundancy. A redundant management module works along with the active management module. If the active
Foundry NetIron MLX Series Installation and Basic Configuration Guide
Pwr
Active
10/100/1000
Port 1
Port 2
Console
module becomes unavailable, the redundant management module automatically takes over the system operation,
minimizing system downtime. For information about the redundancy feature, see the chapter titled "Using a
Redundant Management Module" in the "Foundry NetIron XMR/MLX Configuration Guide".
The NetIron MLX-32 chassis uses a different management module than any of the other Foundry Networks
products. You cannot use management modules designed for the NetIron MLX-32 in any of the other NetIron MLX
Series chassis or management modules in the NetIron MLX-32 chassis designed for the NetIron MLX-4, NetIron
MLX-8, or NetIron MLX-16.
You can install management modules in dedicated slots marked M1 and M2. By default, the system considers the
module installed in the slot marked M1 to be the active management module.
NOTE: The NetIron MLX Series management module is dedicated, which means that you must install it in the
NetIron MLX Series chassis only. If you attempt to install the NetIron MLX Series management module in another
Foundry chassis or a management module intended for another Foundry chassis in the NetIron MLX Series
chassis, the module will not boot up to become active.
Additionally, the NetIron MLX-32 chassis uses a different management module than any of the other NetIron MLX
Series chassis. You cannot use management modules designed for the NetIron MLX-32 in any other Foundry
device, because it will not function properly.
A management module is hot swappable, which allows you to remove and replace it without powering down the
system.
Figure 2.5 shows the management module’s front panel.
Figure 2.5 Management Module Front Panel
The front panel includes the following control features:
•Two PCMCIA slots
•A Console port
•A 10/100/1000 Ethernet port
•Six LEDs
PCMCIA Slots
The PCMCIA slots support a flash PC card. The flash PC card provides storage space in addition to the system’s
flash memory. A flash PC card can store system files, including Boot images, startup configuration files, running
configuration files, and so on. As a result, you can perform system management tasks, such as copying files
between flash PC cards, copying files between a flash PC card and flash memory, and so on.
Console Port
The Console port is a standard DB-9 serial connector through which you can attach a PC or terminal to configure
the NetIron MLX Series system using the CLI.
This port interfaces the control plane only and not the data plane.
10/100/1000 Ethernet Port
The front panel includes a 10BaseT/100BaseTX/1000BaseTX auto-sensing, auto-negotiating Ethernet port. This
port has an RJ-45 unshielded twisted pair (UTP) connector.
Typical uses of this port include but are not limited to the following:
•Connecting a PC through which you can access the system through a Telnet or SSHv2 connection and
configure, monitor, and manage the NetIron MLX Series system.
•Connecting to the 10BaseT/100BaseTX/1000BaseTX port of a switch or router for connectivity to your
existing management network. You can then access the NetIron MLX Series system and configure, monitor,
and manage the system from a management station.
NOTE: The existing management network into which you can connect the 10/100/1000 Ethernet port must be
separate and isolated from the network over which user packets are switched and routed. For information about
the management port’s functionality, see “Understanding How the Management Port Functions” on page 4-5.
For information about connecting a PC and a switch to the 10/100/1000 Ethernet port, see “Attaching a
Management Station” on page 3-49.
This port interfaces the control plane only and not the data plane.
LEDs
Table 2.1 describes the LEDs on the management module’s front panel.
Table 2.1: Management Module LEDs
LEDPositionStateMeaning
Por t 1
and
Por t 2
ActiveLower LeftOnThe module is functioning as the active management
PwrUpper LeftOnThe module is receiving power.
10/100/1000
Ethernet Port
10/100/1000
Ethernet Port
Each adjacent
to the PCMCIA
slot that it
represents
Above and right
of RJ-45
connector
Above and left
of RJ-45
connector
On or blinkingThe software is currently accessing the PCMCIA flash card.
OffThe software is not currently accessing a PCMCIA flash
card inserted in a slot.
module.
OffThe module is functioning as the redundant management
module.
OffThe module is not receiving power.
On (Green)A link is established with the remote port.
OffA link is not established with the remote port.
On or blinking
(Yellow)
Off for an
extended period
The port is transmitting and receiving packets.
The port is not transmitting or receiving packets.
Foundry NetIron MLX Series Installation and Basic Configuration Guide
Interface Modules
The following interface modules are available for NetIron MLX Series routers:
Part NumberDescription
NI-MLX-10Gx44-port 10 GbE module with IPv4/IPv6/MPLS hardware support--requires XFP
optics
NI-MLX-10Gx22-port 10 GbE module with IPv4/IPv6/MPLS hardware support--requires XFP
optics
NI-MLX-1Gx20-SFP20-port FE/GE (100/1000) module with IPv4/IPv6/MPLS hardware support--
requires SFP optics
NI-MLX-1Gx20-GC20-port 10/100/1000 copper modules with IPv4/IPv6/MPLS hardware support
NI-X-OC192x22-port Packet over SONET (SDH) OC-192 (STM-64) interface module
NI-X-OC192x11-port Packet over SONET (SDH) OC-192 (STM-64) interface module
NI-X-OC48x88-port Packet over SONET (SDH) OC12/48 (STM-4/16) interface module
NI-X-OC48x44-port Packet over SONET (SDH) OC-12/48 (STM-4/16) interface module
NI-X-OC 48x22-port Packet over SONET (SDH) OC-12/48 (STM-4/16) interface module
Depending on the size of you NetIron MLX Series chassis, you can install up to 32 NetIron MLX Series interface
modules as described:
•NetIron MLX-4: Supports up to 4 interface modules
•NetIron MLX-8: Supports up to 8 interface modules
•NetIron MLX-16: Supports up to 16 interface modules
•NetIron MLX-32: Supports up to 32 interface modules
NOTE: A NetIron MLX Series interface module is dedicated, which means that you must install it in the NetIron
MLX Series chassis only. If you attempt to install a NetIron MLX Series interface module in another Foundry
chassis or an interface module intended for another Foundry chassis in the NetIron MLX Series chassis, the
module will not boot up to become active. Interface modules can be shared between NetIron MLX-4, NetIron MLX8, NetIron MLX-16, and NetIron MLX-32.
The interface modules are hot swappable, which means you can remove and replace them without powering down
the system.
10 Gigabit Ethernet Interface Modules (2-port and 4-port)
Figure 2.6 shows the 2-port and 4-port 10 Gigabit Ethernet module’s front panels with XFP optics installed.
Figure 2.6 2- port and 4-port 10 Gigabit Ethernet Modules Front Panel
Lnk
Act
Lnk
Act
Lnk
Act
Lnk
Act
1
2
34
Lnk
Act
Lnk
Act
1
2
The front panel of the 4-port module includes the following control features:
•Eight LEDs
•Four 10 Gigabit Ethernet XFP optics slots
The front panel of the 2-port module includes the following control features:
•Four LEDs
•Two 10 Gigabit Ethernet XFP optics slots
LEDs
The module’s front panel includes two LEDs that indicate the status of each port.
Product Overview
Table 2.2 describes the LEDs on the 10 Gigabit Ethernet module’s front panel.
Table 2.2: 10 Gigabit Ethernet Module LEDs
LEDPositionStateMeaning
LinkLeft of each
Ethernet port
OnA link is established with the remote port.
OffA link is not established with the remote
port.
ActiveLeft of each
Ethernet port
On The port is transmitting and receiving
packets.
Off The port is not transmitting or receiving
packets.
10 Gigabit Ethernet Ports
A 10 Gigabit Ethernet module contains two or four physical ports, through which you can connect your NetIron
MLX Series router to other network devices at a speed of 10 Gigabits.
Into a physical port, you must insert a fiber-optic transceiver provided by Foundry. The XFP-compliant fiber-optic
modules provide an optical transceiver or physical medium-dependent (PMD) interface for single or multi-mode
fiber that can be used with the LAN physical layer (PHY).
Foundry NetIron MLX Series Installation and Basic Configuration Guide
Port Status LEDs
(In each pair, the left most LED supports the port in the top row directly above it
and the right-most LED supports the port in the bottom directly above it )
The following 10 Gigabit optics are available from Foundry:
Table 2.3: XFP-Compliant Optics for the 10 GbE Ethernet Interface Module
Part NumberDescription
10G-XFP-SR850nm serial pluggable XFP optic (LC), target range 300m over multi-mode fiber
10G-XFP-LR1310nm serial pluggable XFP optic (LC) for up to 10km over single-mode fiber
10G-XFP-ER1550nm serial pluggable XFP optic (LC) for up to 40km over single-mode fiber
10G-XFP-ZR1550nm serial pluggable XFP optic (LC) for up to 80km over single-mode fiber
10G-XFP-ZRD-XXXX-AA10GBase-ZR DWDM, XFP optic, 80km, 1530.33 to 1561.42
10G-XFP-CX410-Base-CX4, XFP transceiver, 15km, CX connector (supported only on integrated
XFP slot on FGS624XGP and FGS624XGP-POE)
For more information about the fiber-optic transceivers and the cabling associated with them, see “Installing a
Fiber-Optic Module” on page 4-5.
FE/GbE (100/1000) Ethernet Interface Module (SFP)
Figure 2.8 shows the 20-port 100/1000 Ethernet mini-GBIC (or SFP) module’s front panel.
Figure 2.7 20-port 100/1000 Ethernet SFP Module Front Panel
The front panel includes the following control features:
•LEDs - The LEDs to the left support the top
•20 100/1000 Ethernet mini-GBIC (SFP) ports
Table 2.4: Gigabit Ethernet Module LEDs
PositionStateMeaning
Below each
On or blinkingThe port is transmitting and receiving
Ethernet port
(Left-side LED
supports port in
Off for an extended
period
top row while
right-side LED
supports port in
bottom row)
The port is not transmitting or receiving
packets.
Product Overview
100/1000 Ethernet Ports
This Ethernet interface module contains 20 physical ports, through which you can connect your NetIron MLX
Series router to other network devices at a speed of 100 Mbps or 1 GbE.
Into a physical port, you must insert a fiber-optic transceiver provided by Foundry. The SFP-compliant fiber-optic
modules provide an optical transceiver or physical medium-dependent (PMD) interface for fiber that can be used
with the LAN physical layer (PHY)
The following 100 Mbps and 1 GbE optical transceivers are available from Foundry:
Table 2.5: SFP-Compliant Transceivers for the 100/1000 Ethernet Interface Module
Foundry NetIron MLX Series Installation and Basic Configuration Guide
10/100/1000 Ethernet Interface Module (RJ-45)
Figure 2.8 shows the 20-port 10/100/1000 Ethernet module’s front panel.
Figure 2.8 20-port 10/100/1000 Copper Ethernet Module Front Panel
The front panel includes the following control features:
•LEDs
•Twenty 10/100/1000 Copper Ethernet ports
Table 2.6: Gigabit Ethernet Module LEDs
LEDPositionStateMeaning
Link/ActiveAs shown in
Figure 2.8 on
page 2-14.
On (solid)A link is established with the remote port
(with no traffic).
BlinkingThe port is transmitting and receiving
packets.
OffA link is not established with the remote
port and no traffic is being passed.
1 Gigabit x 48-T Module
Figure shows the 1 Gigabit x 48-T module’s front panel.
Figure 2.91 Gigabit x 48-T Module Front Panel
The front panel includes the following control features:
•LEDs
•8 ports of Mini-RJ21 connectors with each connector supporting 6 ports of 1GbE
The front panel includes eight Mini RJ-21 connectors that support six 1 Gigabit Ethernet ports each. A cable
connects from the RJ-21 connector on the interface module to a Mini RJ-21 connector on a patch panel. At the
patch panel, the ports are broken out into individual RJ-45 connectors for each port.
Cables and patch panels that support this module are available through any Tyco International distribution partner.
Information about these products is available at the following URL:
On (solid)A link is established with the remote port
(with no traffic).
BlinkingThe port is transmitting and receiving
packets.
Off A link is not established with the remote
port and no traffic is being passed.
POS Interface Modules
The NetIron MLX routers support the following Packet Over SONET/SDH (POS) interface modules beginning with
release 03.4.00 of Multi-Service IronWare software:
•Dual speed (OC-48c/STM-16)/(OC-12c/STM-4) – Available with 2, 4, or 8 ports
•Single speed OC-192C/STM-64 – – Available with 1 or 2 ports
Dual Speed OC-12c and OC-48c
The dual-speed OC-48c/OC-12c POS module is reconfigurable and can be reconfigured through CLI to support
OC-48 or OC-12 speeds.
NOTE: All POS modules for the NetIron MLX Series support both Packet over Socket and Packet over SDH
Figure 2.10 highlights the following features of the OC-12c/OC-48c POS interface module front panels:
•2, 4, or 8 ports that can accommodate SFP optics for the OC-12c/OC-48c modules
•A single LED to indicate if power is being received by the module
•4 LEDs per port that indicate the following port status: Active/Local Rail, TX Pkt, RX Pkt, and Carrier Rcvd /
Remote Fail
•2 IN and 2 OUT RJ-48 connectors to provide an BITS external clock source and to propagate a common
clock source (Line or BITS) among POS modules
The front panels of the POS interface modules contain the following:
•a power LED
•2, 4, or 8 ports that can accommodate SFP optics for the OC-12c and OC-48c modules
Product Overview
•1 or 2 ports that accommodate XFP for the OC-192c transceivers
•A single LED to indicate if power is being received by the module
•4 LEDs per port that indicate port status
•2 IN and 2 OUT RJ-48C connectors to provide an BITS external clock source and to propagate a common
clock source (Line or BITS) among POS modules
LED Operation
The front panels of the NetIron XMR/MLX POS interface modules contain a single Power LED for the entire
module and 4 LEDs per port to indicate port status as shown in Figure 2.10 and Figure 2.11, and described in
Table 2.8.
Table 2.8: POS Module LEDs
LEDPositionStateMeaning
PowerFar left of moduleOnPower is being received by the module
OffThe module is not receiving power.
Active/Local Failurecenter of board:
•top position
One LED per-port
as defined by
column position
GreenPort is enabled.
RedPort is enabled and their is a locally detected