Computer Hardware User Manual

ManualsBrandsAllied Telesis ManualsComputer Hardwarex900 Advanced Gigabit Layer 3+ Expandable Switches

8600

8000S

Stack

Link aggregation

1 Gigabit link

10/100 link

CORE

EDGE

x900

Servers

Allied Telesis www.alliedtelesis.com

Network Resiliency Solutions

x900 Advanced Gigabit Layer 3+ Expandable Switches

Tested Solution: VCStack + Link Aggregation

Prior to the advent of the Virtual Chassis Stacking (VCStack) solution, high availability in enterprise networks was achieved by

provisioning redundant links (with STP) and redundant routers (with VRRP). In normal operation, bandwidth and routing power would

sit idle in the network.

Allied Telesis now provides a truly resilient network. In normal operation, all bandwidth and all routing power in the network are fully

available for use all the time. If a link or device fails, some of the bandwidth or forwarding power will be lost, but the network will still

be fully operational and all remaining resources will continue to be fully utilized.

Diagram 1: VCStack + Link Aggregation

Key Benefits of the solution

Full bandwidth utilization and maximum availability

The key advantage comes from configuring the links from the edge to the core using 802.3ad link aggregation.This is possible

because VCS supports link aggregation on ports across different virtual chassis members, providing:

■

Full network bandwidth, as both ports are active; no links are blocked, as some would be with spanning tree.

■

Minimal network disruption if a link fails.The process within a switch when an aggregated link fails is very simple and the virtual

chassis almost instantly adapts its data forwarding on the loss of the link.

Summary of content (9 pages)

PAGE 1
Network Resiliency Solutions x900 Advanced Gigabit Layer 3+ Expandable Switches Tested Solution: VCStack + Link Aggregation Prior to the advent of the Virtual Chassis Stacking (VCStack) solution, high availability in enterprise networks was achieved by provisioning redundant links (with STP) and redundant routers (with VRRP). In normal operation, bandwidth and routing power would sit idle in the network. Allied Telesis now provides a truly resilient network.
PAGE 2
NETWORK RESILIENCY SOLUTIONS | VCStack + Link aggregation Customers benefits Customer requirements met with the VCStack + Link Aggregation resiliency solution: ■ A resilient solution without using Spanning Tree ■ A simpler replacement for VRRP and/or other legacy redundancy protocols ■ Simpler network management - the virtual chassis is managed as a single unit. The dedicated stacking link is backed up by a further resiliency link.
PAGE 3
NETWORK RESILIENCY SOLUTIONS | VCStack + Link aggregation x900 Configuration All log messages are sent to a syslog server. Higher-severity log messages are also buffered on the switch itself log buffered level errors log host 192.168.10.11 log host 192.168.10.11 level debugging Allow read-only SNMP monitoring from one management station access-list 1 permit 192.168.10.13 snmp-server enable trap auth nsm snmp-server community public ro 1 snmp-server host 192.168.10.
PAGE 4
NETWORK RESILIENCY SOLUTIONS | VCStack + Link aggregation interface port2.0.5 switchport switchport mode access switchport access vlan 171 static-channel-group 3 Create link aggregation groups across the VCStack members for resiliency. One for servers, and three for edge switches interface port1.0.7 switchport switchport mode access switchport access vlan 172 static-channel-group 4 interface port2.0.
PAGE 5
NETWORK RESILIENCY SOLUTIONS | VCStack + Link aggregation 8600 Configuration To enable secure HTTP management to use certificates, a distinguished name is required and system security must be enabled set system distinguished="cn=switch1, o=alliedtelesis, c=nz" enable system security Storm control is configured to prevent downstream loops from affecting the inner layers of the network set switch port=1-24 bclimit=3000 mclimit=3000 dlflimit=3000 By default, all ports are put into VLAN 171 create vlan="e
PAGE 6
NETWORK RESILIENCY SOLUTIONS | VCStack + Link aggregation Remote management sessions must use SSH and/or HTTPS enable ssh server serverkey=1 hostkey=0 expirytime=1 logintimeout=60 add pki certificate="cer_name" location=cer_name.cer trust=true set http server security=on sslkey=2 port=443 All log messages are sent to a syslog server. Higher-severity log messages are also buffered on the switch itself create log output=1 destination=syslog server=192.168.10.
PAGE 7
NETWORK RESILIENCY SOLUTIONS | VCStack + Link aggregation 8000S Configuration Broadcast and multicast limiting prevent downstream loops from affecting the inner layers of the network interface range ethernet 1/e(1-24),2/e(1-24) port storm-control broadcast enable port storm-control include-multicast exit The client-facing ports are configured as portfast so there is no delay in connectivity when client devices attach.
PAGE 8
NETWORK RESILIENCY SOLUTIONS | VCStack + Link aggregation The Radius server is used for authenticating management sessions and also for authenticating 802.1x clients radius-server host 192.168.10.34 auth-port 1812 acct-port 1813 key testing123-2 aaa authentication login default radius local aaa authentication dot1x default radius Management access is ONLY possible via the coreconnected aggregated link.
PAGE 9
NETWORK RESILIENCY SOLUTIONS | VCStack + Link aggregation About Allied Telesis Allied Telesis is a world class leader in delivering IP/Ethernet network solutions to the global market place. We create innovative, standards-based IP networks that seamlessly connect you with voice, video and data services.