8-Port GPON Managed OLT GPL-8000
Users Manual of GPL-8000 Trademarks Copyright © PLANET Technology Corp. 2020. Contents are subject to revision without prior notice. PLANET is a registered trademark of PLANET Technology Corp. All other trademarks belong to their respective owners.
Users Manual of GPL-8000 Contents Introduction 19 Packet Contents ...................................................................................................................................... 19 Product Description ................................................................................................................................. 20 How to Use This Manual .........................................................................................................................
Users Manual of GPL-8000 Terminal Configuration ............................................................................................................................ 52 4.2.1. VTY configuration introduction ....................................................................................................... 52 4.2.2. Configuration tasks ........................................................................................................................ 52 4.2.2.1.
Users Manual of GPL-8000 6.1.5 AAA Authentication Configuration Example ................................................................................... 79 6.1.6 AAA Authorization Configuration Task List ..................................................................................... 79 6.1.7 AAA Authorization Configuration Task ........................................................................................... 79 6.1.8 AAA Authorization Example .............................................
Users Manual of GPL-8000 7.6.7 ONU Remote Controller ............................................................................................................... 115 Advanced Config ................................................................................................................................... 117 7.7.1 Configuring Port Description ........................................................................................................ 117 7.7.
Users Manual of GPL-8000 9.1.1 9.1.2 9.1.3 Understanding Interface Range ................................................................................................... 158 Entering Interface Range Mode ................................................................................................... 158 Configuration Example ................................................................................................................
Users Manual of GPL-8000 14.1.3 Applying MAC List ....................................................................................................................... 166 Configuring 802.1x 167 Chapter 15. ............................................................................................................................................................. 167 802.1x Configuration Task List .........................................................................................................
Users Manual of GPL-8000 Chapter 18. ............................................................................................................................................................. 181 Private VLAN Settings .......................................................................................................................... 181 Overview of Private VLAN ....................................................................................................................
Users Manual of GPL-8000 Chapter 22. ............................................................................................................................................................. 228 PDP Overview ....................................................................................................................................... 228 22.1.1 Overview ...................................................................................................................................... 228 22.
Users Manual of GPL-8000 27.1.2 Basic Concepts of MEAPS .......................................................................................................... 253 27.1.3 Types of EAPS Packets ............................................................................................................... 257 27.1.4 Fast Ethernet Ring Protection Mechanism .................................................................................. 257 Fast Ethernet Ring Protection Configuration .....................
Users Manual of GPL-8000 OAM Configuration ............................................................................................................................... 309 33.1.1 OAM Overview ............................................................................................................................. 309 33.1.2 OAM Configuration Task List ....................................................................................................... 312 33.1.3 OAM Configuration Tasks ............
Users Manual of GPL-8000 38.1.1 38.1.2 38.1.3 Introduction .................................................................................................................................. 342 Configuring Layer 2 Protocol Tunnel ........................................................................................... 342 Configuration Example of Layer 2 Protocol Tunnel ..................................................................... 342 Loopback Detection Configuration 343 Chapter 39. .........
Users Manual of GPL-8000 43.2.2 NAT Configuration Task List ......................................................................................................... 376 43.2.3 NAT Configuration Task ............................................................................................................... 376 43.2.4 NAT Configuration Example......................................................................................................... 385 Configuring DHCP ....................................
Users Manual of GPL-8000 Configuration Example .......................................................................................................................... 452 IP-PBR Configuration 453 Chapter 47. ............................................................................................................................................................. 453 IP-PBR Configuration ...................................................................................................................
Users Manual of GPL-8000 Chapter 50. ............................................................................................................................................................. 482 Multicast Overview ................................................................................................................................ 482 50.1.1 Multicast Routing Realization ...................................................................................................... 482 50.1.
Users Manual of GPL-8000 53.1.2 53.1.3 53.1.4 Setting RIPng Configuration Task List ......................................................................................... 513 RIPng Configuration Tasks .......................................................................................................... 514 RIPng Configuration Example ..................................................................................................... 518 OSPFv3 Configuration 518 Chapter 54. .....................
Users Manual of GPL-8000 Overview ............................................................................................................................................... 538 Cluster Management Configuration Task List ....................................................................................... 539 Cluster Management Configuration Task .............................................................................................. 539 57.3.1 Planning Cluster .................................
Users Manual of GPL-8000 Introduction Thank you for purchasing PLANET GPON OLT GPL-8000.
Users Manual of GPL-8000 Product Description High-performance GPON for FTTx Applications PLANET GPL-8000 GPON Optical Line Terminal (OLT) consists of eight GPON ports, four Gigabit TP/SFP combo ports, four Gigabit SFP ports, four 10G SFP+ ports and one management port. It complies with ITU-T G.984/G.988 and meets the requirements of GPON OLT’s network access technology.
Users Manual of GPL-8000 Extractive Power Supply Design to Increase Flexibility The GPL-8000 is equipped with one extractive 100~240V AC power supply unit, so it is easy to replace the power for users. Besides, the GPL-8000 reserves another backup power slot on the rear panel and users can add the second AC or DC power to the redundant power supply installation. The AC power or DC power is optional.
Users Manual of GPL-8000 How to Use This Manual This User Manual is structured as follows: Section 2, Hardware Installation The section explains the functions of the Switch and how to physically install the GPON OLT. Section 3, Web-based Management The section explains how to manage the GPON OLT from Web UI. Section 4, Switch Operation The chapter explains how to do the switch operation of the GPON OLT. Appendix A The section contains cable information of the GPON OLT.
Users Manual of GPL-8000 IP Routing Features Supports dynamic routing protocol: RIP and OSPF IPv4 static routing Routing interface provides per VLAN routing mode Layer 2 Features Supports VLAN - IEEE 802.1Q tag-based VLAN - Provider Bridging (VLAN Q-in-Q, IEEE 802.1ad) supported - GVRP for dynamic VLAN management Supports Link Aggregation - 802.
Users Manual of GPL-8000 Access Control List - IP-based Access Control List (ACL) - MAC-based Access Control List (ACL) - Time-based ACL DHCP Snooping to filter distrusted DHCP messages Dynamic ARP Inspection discards ARP packets with invalid MAC address to IP address binding IP Source Guard prevents IP spoofing attacks Management IPv4 and IPv6 dual stack management Switch Management Interfaces - Console and Telnet Command Line Interface - HTTP web switch management -
Users Manual of GPL-8000 Product Specifications Product GPL-8000 Hardware Specifications GPON Ports 10/100/1000BASE-T RJ45 Ports 1000BASE-X SFP Slots 8, supporting Class C+, Class C++ and Class B+ 4 TP/SFP combo interfaces, shared with Port-1 to Port-4 8, supporting 1000BASE-SX/LX/BX SFP transceiver Backward compatible with 100BASE-FX SFP transceiver 10GBASE-X SFP+ Slots 4, supporting 10GBASE-SR/LR SFP+ transceiver Management Port One 10/100BASE-TX RJ45 port Console One RJ45-to-RS232 serial port (
Users Manual of GPL-8000 PON Module Wavelength TX: 1490nm; RX: 1310nm PON Fiber Type 9/125um SMF (Single mode fiber optic) Layer 3 Functions IP Interfaces Routing Table Max. 1K VLAN interfaces for IPv4 Max.
Users Manual of GPL-8000 Storm Control Bandwidth Control Source MAC/destination MAC/Source + destination MAC Per 100pps 1-14880 At least 64Kbps stream PON interfaces: Dynamic Bandwidth Allocation (DBA) Service Level Agreement (SLA) Limiting the upstream/downstream rate based on each ONT/ONU/HGU 8 priority queues on all switch ports QoS Scheduling for priority queues - Weighted Round Robin (WRR) - Strict priority Traffic classification: Ring - IEEE 802.
Users Manual of GPL-8000 Management Functions Console and Telnet System Configuration Web browser SNMP v1, v2c Secure Management SSHv2, SSLv3 Interfaces Maximum 8 sessions for SSH and telnet connection IPv4 and IPv6 dual stack management SNMP MIB and TRAP SNMP RMON 1, 2, 3, 9 four groups System Management Firmware upgrade by HTTP/TFTP/FTP protocol through Ethernet network Configuration upload/download through HTTP/TFTP/FTP protocol Supports IEEE 802.
Users Manual of GPL-8000 IEEE 802.3ae 10Gb/s Ethernet IEEE 802.3x flow control and back pressure IEEE 802.3ad port trunk with LACP IEEE 802.1D Spanning Tree Protocol IEEE 802.1w Rapid Spanning Tree Protocol IEEE 802.1s Multiple Spanning Tree Protocol IEEE 802.1p Class of Service IEEE 802.1Q VLAN tagging IEEE 802.1X port authentication network control IEEE 802.
Users Manual of GPL-8000 Hardware Installation This section describes the hardware features and installation of the GPON OLT on the desktop or rack mount. For easier management and control of the GPON OLT, familiarize yourself with its display indicators and ports. Front panel illustrations in this chapter display the unit LED indicators. Before connecting any network device to the GPON OLT, please read this chapter completely. Hardware Description 2.1.1.
Users Manual of GPL-8000 2.1.2. LED Indications The front panel LEDs indicates instant status of port links, data activity and system power, and help to monitor and troubleshoot when needed. Figure 2-4 shows the LED indications of GPL-8000. GPL-8000 LED Indication Figure 2-4 GPL-8000 LED Panel System LED Color PWR1 Green PWR2 Green ALM Red Function Lights : Lights : Lights : Blinks SYS Green : Off: To indicate that the Switch is powered on. To indicate that the Switch is powered on.
Users Manual of GPL-8000 1000BASE-T RJ45 Interfaces LED Color Function To indicate the link through that RJ45 port is successfully Lights: established. Port G1-4 Green Off: Blinks: To indicate that the RJ45 port is link-down. To indicate that the switch is actively sending or receiving data over that port. 1G Shared SFP+ Interfaces LED Color Function To indicate the link through that SFP+ port is successfully Lights: established.
Users Manual of GPL-8000 2.1.4. OLT Rear Panel The rear panel of the GPON OLT indicates an AC inlet power socket, which accepts input power from 100 to 240V AC, 50-60Hz. Figure 2-5 shows the rear panel of this GPON OLT. GPL-8000 Rear Panel Figure 2-5 Rear Panel of GPL-8000 ■ AC Power Receptacle For compatibility with electric service in most areas of the world, the GPON OLT’s power supply automatically adjusts to line power in the range of 100-240V AC and 50/60 Hz.
Users Manual of GPL-8000 The device is a power-required device; if your networks should be active all the time, please consider using UPS (Uninterrupted Power Supply) for your device. It will prevent you from network data loss or network downtime. In some areas, installing a surge suppression device may also help to protect your GPON OLT from being damaged by unregulated surge or current to the switch or the power adapter.
Users Manual of GPL-8000 Installing the OLT This section describes how to install your GPON OLT and make connections to the GPON OLT. Please read the following topics and perform the procedures in the order being presented. To install your GPON OLT on a shelf, simply complete the following steps. 2.3.1.
Users Manual of GPL-8000 Figure 2-10 Mounting the GPON OLT on a Rack 2.3.2. Installing the Uplink Port The sections describe how to insert an SFP transceiver into an SFP slot and UTP copper cable to RJ45 port. The SFP transceivers are hot-pluggable and hot-swappable. You can plug in and out the transceiver to/from any SFP port without having to power down the GPON OLT as Figure 2-11 shows.
Users Manual of GPL-8000 Approved PLANET SFP Transceivers PLANET GPON OLT supports both Single mode and Multi-mode SFP transceivers. The following list of approved PLANET SFP transceivers is correct at the time of publication: 1000BASE-X SFP modules: Gigabit Ethernet Transceiver (1000BASE-X SFP) Model Speed (Mbps) Connector Interface Fiber Mode Distance Wavelength (nm) Operating Temp.
Users Manual of GPL-8000 MGB-TLB80 1000 WDM(LC) Single Mode 80km 1550nm 1490nm -40 ~ 75℃ 10Gigabit Ethernet Transceiver (10GBASE-X SFP+) Model Speed (Mbps) Connector Interface Fiber Mode Distance Wavelength (nm) Operating Temp.
Users Manual of GPL-8000 Removing the transceiver module 1. Make sure there is no network activity by consulting or checking with the network administrator. Or through the management interface of the switch/converter (if available), disable the port in advance. 2. Remove the Fiber Optic Cable gently. 3. Turn the handle of the MGB module to a horizontal position. 4. Pull out the module gently through the handle.
Users Manual of GPL-8000 Web-based Management This section introduces the configuration and functions of the Web-based management. About Web-based Management The GPL-8000 offers management features that allow users to manage the OLT from anywhere on the network through a standard browser such as Microsoft Internet Explorer. The Web-based Management supports Internet Explorer 8.0 above.
Users Manual of GPL-8000 Figure 3-1 Login Screen Default User name: admin Default Password: admin After entering the username and password, the main screen appears as Figure 3-2.
Users Manual of GPL-8000 The OLT menu on the left of the Web page lets you access all the commands and statistics the OLT provides. Now, you can use the Web management interface to continue the OLT management or manage the ONU by Web interface. The OLT menu on the left of the web page lets you access all the commands and statistics the ONU provides. 1. It is recommended to use Internet Explore 8.0 or above to access OLT. 2.
Users Manual of GPL-8000 4) SNMP should be enabled. The host with SNMP network management software should be able to ping the IP address of the switch, so that when running, SNMP network management software will be able to find it and implement read/write operation on it. Details about how to manage switches via SNMP network management software will not be covered in this manual; please refer to “Simple Network Management software user manual”.
Users Manual of GPL-8000 3.3.3. Help Function Use the question mark (?) and the direction mark to help you enter commands: The currently available command list can be presented if you enter a question mark. OLT> ? The currently available commands starting with the known characters in the list can be displayed if you enter the known characters and then a question mark (without space).
Users Manual of GPL-8000 Basic Configuration System Management Configuration 4.1.1. File Management Configuration 4.1.1.1. Managing the file system The filename in flash is no more than 20 characters and filenames are case insensitive. 4.1.1.2. Commands for the file system The boldfaces in all commands are keywords. Others are parameters. The content in the square brakcet “[ ]” is optional. Command Description format Formats the file system and delete all data.
Users Manual of GPL-8000 4.1.1.4. Updating software User can use this command to download OLT system software locally or remotely to obtain version update or the custom-made function version (like data encryption and so on). There are two ways of software update in monitor mode. a) Through TFTP monitor#copy tftpflash [ip_addr] The previous commad is to copy file from the tftp server to the flash in the system.
Users Manual of GPL-8000 Parameter Description local_filename Filename stored in the flash Users must enter the filename. Example The terminal program can be the Hyper Terminal program in WINDOWS 95, NT 4.0 or the terminal emulation program in WINDOWS 3.X. monitor#download c0 switch.bin Prompt: speed [9600]?115200 Then, modify the rate to 115200. After reconnection, select send file in the transfer menu of hyper terminal (terminal emulation).
Users Manual of GPL-8000 4.1.1.6. Using ftp to perform the update of software and configuration config #copy ftpflash [ip_addr|option] Use ftp to perform the update of software and configuration in formal program management. Use the copy command to download a file from ftp server to switch, also to upload a file from file system of the switch to ftp server. After you enter the command, the system will prompt you to enter the remote server name and remote filename.
Users Manual of GPL-8000 ###################################################################### ###################################################################### FTP: successfully receive 3377 blocks ,1728902 bytes config# 1. When the ftp server is out of service, the wait time is long. If this problem is caused by the tcp timeout time (the default value is 75s), you can configure the global command ip tcp synwait-time to modify the tcp connection time. However, it is not recommended to use it.
Users Manual of GPL-8000 4.1.2.3. Using ping to test network connection state monitor#ping This command is to test network connection state. Parameter description Parameter Description ip_address Destination IP address Example monitor#ping 192.168.20.100 PING 192.168.20.100: 56 data bytes 64 bytes from 192.168.20.100: icmp_seq=0. time=0. ms 64 bytes from 192.168.20.100: icmp_seq=1. time=0. ms 64 bytes from 192.168.20.100: icmp_seq=2. time=0. ms 64 bytes from 192.168.20.
Users Manual of GPL-8000 Command Function Ip http port number Modifies the port number of the http service. c) Configuring the access passward of the http service Http uses enable as the access password. You need to set the password enable if you want to perform authentication for http access. The password enable is set in global configuration mode using the following command: Command Function Enable password {0|7} line Sets the password enable.
Users Manual of GPL-8000 Terminal Configuration 4.2.1. VTY Configuration Introduction The system uses the line command to configure terminal parameters. Through the command, you can configure the width and height that the terminal displays. 4.2.2. Configuration Task The system has four types of lines: console, aid, asynchronous and virtual terminal. Different systems have different numbers of lines of these types.
Users Manual of GPL-8000 By default the logs will not be exported to the cache and cannot be browsed after you run show log. After you run logging buffer size to set the log cache, you can run show log to browse the log information. 4.2.5.
Users Manual of GPL-8000 Remote Monitoring 4.3.1. Configuring SNMP 4.3.1.1. Introduction The SNMP system includes the following parts: SNMP management side (NMS) SNMP agent (AGENT) Management information base (MIB) SNMP is a protocol working on the application layer. It provides the packet format between SNMP management side and agent. SNMP management side can be part of the network management system (NMS, like CiscoWorks). Agent and MIB are stored on the system.
Users Manual of GPL-8000 This switch only supports trap, but we provide the extension for "inform request". b) SNMP version System of our company supports the following SNMP versions: SNMPv1---simple network management protocol, a complete Internet standard,which is defined in RFC1157. SNMPv2C--- Group-based Management framework of SNMPv2, Internet test protocol, which is defined in RFC1901.
Users Manual of GPL-8000 Configuring SNMP trap Configuring SNMP binding source address Configuring NMPv3 group Configuring NMPv3 user Configuring NMPv3 EngineID a) Configuring SNMP view The SNMP view is to regulate the access rights (include or exclude) for MIB. Use the following command to configure the SNMP view.
Users Manual of GPL-8000 the linkman’s identifer and actual location of the controlled node. These information can be accessed through config. files. You can use the following commands in global configuration mode. Command Function snmp-server contacttext Sets the character string for the linkman of the node. snmp-server locationtext Sets the character string for the node location.
Users Manual of GPL-8000 When the system is started, the SNMP agent will automatically run. All types of traps are activated. You can use the command snmp-server host to specify which host will receive which kind of trap. Some traps need to be controlled through other commands. For example, if you want SNMP link traps to be sent when an interface is opened or closed, you need to run snmp trap link-status in interface configuration mode to activate link traps.
Users Manual of GPL-8000 i) Configuring SNMPv3 user You can run the following command to configure a local user. When an administrator logs in to a device, he has to user the username and password that are configured on the device. The security level of a user must be higher than or equals to that of the group which the user belongs to. Otherwise, the user cannot pass authentication. Command Function snmp-server user username Configures a local SNMPv3 user.
Users Manual of GPL-8000 how to set the community string public that can only read all MIB variables. how to set the community string private that can read and write all MIB variables. You can use the community string public to read MIB variables in the system. You can also use the community string private to read MIB variables and write writable MIB variables in the system. The above command specifies the community string public to send traps to 192.168.10.2 when a system requires to send traps.
Users Manual of GPL-8000 through SNMP NMS, you need to configure the SNMP of the switch. After the alarm function is configured, the device can monitor some statistic value in the system. The following table shows how to set the rMon alarm function: Command Function configure Enter the global configuration mode. rmon alarm indexvariableinterval Add a rMon alarm item. {absolute | delta} rising-thresholdvalue index is the index of the alarm item.
Users Manual of GPL-8000 log means to add a piece of information to the log table when a event is triggered. trap means a trap message is generated when the event is triggered. community means the name of a community. owner string is to describe the information about the alarm. 3. exit Enter the management mode again. 4. write Save the configuration. After a rMon event is configured, you must set the domain eventLastTimeSent of the rMon event item to sysUpTime when a rMon alarm is triggered.
Users Manual of GPL-8000 ifid means the ID of the interface. 3. rmon collection Enable the history function on the port. history index index means the index of the history item. [buckets Among all data collected by history item, the latest bucket-number] bucket-number items need to be saved. You can [interval second] browse the history item of the Ethernet to abtain [owner owner-name] these statistics values. The default value is 50 items.
Users Manual of GPL-8000 e) Displaying rMon configuration of switch Run show to display the rMon configuration of the switch. Command Purpose show rmon [alarm] [event] Displays the rmon configuration information. [statistics] [history] alarm means to display the configuration of the alarm item. event means to show the configuration of the event item and to show the items that are generated by the occurance of events and are contained in the log table.
Users Manual of GPL-8000 a) Default PDP configuration of the switch Function Default Setting PDP global configuration state Disabled PDP port configuration state Disabled PDP clock (frequency for sending messages) 60 seconds PDP information saving 180 seconds PDP version 2 b) Setting the PDP clock and information saving time Run the following commands in global configuration mode to set the frequency for PDP to send messages and the PDP information saving time: Command Purpose pdp timer seco
Users Manual of GPL-8000 4.3.3.3.
Users Manual of GPL-8000 SSH Configuration commands 4.4.1.Introduction 4.4.1.1. SSH server A scure and encrypted communication connection can be created between SSH client and the device through SSH server. The connection has telnet-like functions. SSH server supports the encryption algorithms including des, 3des and blowfish. 4.4.1.2. SSH client SSH client is an application running under the ssh protocol.
Users Manual of GPL-8000 4.4.2.3. Configuring the authentication timeout value After a connection is established between client and server, server cuts off the connection if authentication cannot be approved within the set time. Run the following command in global configuration mode to configure the configuration timeout value: Command Purpose Ip sshd timeout <60-65535> Configures the authentication timeout value. 4.4.2.4.
Users Manual of GPL-8000 ip sshd auth-method ssh-auth ip sshd access-class ssh-acl ip sshd enable 69
Users Manual of GPL-8000 Remote Monitoring Remote Monitoring 5.1.1 SNMP Configuration 5.1.2 Overview The SNMP system includes the following 3 parts: SNMP management server (NMS) SNMP agent (agent) MIB SNMP is a protocol for the application layer.It provides the format for the packets which are transmitted between NMS and agent. SNMP management server is a part of the network management system, such as CiscoWorks.
Users Manual of GPL-8000 Security Configuration AAAConfiguration 6.1.1 AAA Overview Access control is the way to control access to the network and services. Authentication, authorization, and accounting (AAA) network security services provide the primary framework through which you set up access control on your router or access server. 6.1.1.1 AAA Security Service AAA is an architectural framework for configuring a set of three independent security functions in a consistent manner.
Users Manual of GPL-8000 As with authentication, you configure AAA authorization by defining a named list of authorization methods, and then applying that list to various interfaces. For information about configuring authorization using AAA, refer to the chapter "Configuring Authorization.
Users Manual of GPL-8000 The software attempts authentication with the next listed authentication method only when there is no response from the previous method. If authentication fails at any point in this cycle—meaning that the security server or local username database responds by denying the user access—the authentication process stops and no other authentication methods are attempted.
Users Manual of GPL-8000 6.1.2.1 Overview of the AAA Configuration Process Configuring AAA is relatively simple after you understand the basic process involved. To configure security on a Cisco router or access server using AAA, follow this process: If you decide to use a separate security server, configure security protocol parameters, such as RADIUS, TACACS+, or Kerberos. Define the method lists for authentication by using an AAA authentication command.
Users Manual of GPL-8000 Command Purpose aaa authentication login {default | list-name}method1 [method2...] line [ console | vty ] line-number [ending-line-number] login authentication {default | list-name} Enables AAA globally. Enters line configuration mode for the lines to which you want to apply the authentication list. Applies the authentication list to a line or set of lines. The list-name is a character string used to name the list you are creating.
Users Manual of GPL-8000 (3) Login Authentication Using Local Password Use the aaa authentication login command with the local method keyword to specify that the Cisco router or access server will use the local username database for authentication.
Users Manual of GPL-8000 6.1.4.3 Configuring Message Banners for AAA Authentication AAA supports the use of configurable, personalized login and failed-login banners. You can configure message banners that will be displayed when a user logs in to the system to be authenticated using AAA and when, for whatever reason, authentication fails. 6.1.4.
Users Manual of GPL-8000 6.1.4.8 AAA authentication password-prompt To change the text displayed when users are prompted for a password, use the aaa authentication password-prompt command in global configuration mode. To return to the default password prompt text, use the no form of this command. password: The aaa authentication password-prompt command does not change any dialog that is supplied by a remote TACACS+ server.
Users Manual of GPL-8000 6.1.5 AAA Authentication Configuration Example 6.1.5.1 RADIUS Authentication Example This section provides one sample configuration using RADIUS.
Users Manual of GPL-8000 6.1.7.1 Configuring EXEC Authorization Using AAA Use the aaa authorization command to enable authorization Use aaa authorization exec command to run authorization to determine if the user is allowed to run an EXEC shell. This facility might return user profile information such as autocommand information. Use line configuration command login authorization to apply these lists.
Users Manual of GPL-8000 6.1.8 AAA Authorization Example EXEC local authorization example aaa authentication login default local aaa authorization exec default local ! username exec1 password 0 abc privilege 15 username exec2 password 0 abc privilege 10 username exec3 nopassword username exec4 password 0 abc user-maxlinks 10 username exec5 password 0 abc autocommand telnet 172.16.20.
Users Manual of GPL-8000 6.1.10.1 Configuring Accounting Connection Using AAA Use the aaa accounting command to enable AAA accounting. To create a method list to provide accounting information about all outbound connections made from the network access server, use the aaa accounting connection command. Command Purpose aaa accounting connection {default | list-name} {start-stop | stop-only | Establishes global accounting list.
Users Manual of GPL-8000 6.1.10.3 AAA Accounting Update To enable periodic interim accounting records to be sent to the accounting server, use the aaa accounting update command in global configuration mode. To disable interim accounting updates, use the no form of this command. Command Purpose aaa accounting update [newinfo] [periodicnumber] Enables AAA accounting update.
Users Manual of GPL-8000 maintaining network access for remote users. Use RADIUS in the following network environments that require access security: : Networks with multiple-vendor access servers, each supporting RADIUS. For example, access servers from several vendors use a single RADIUS server-based security database. In an IP-based network with multiple vendors' access servers, dial-in users are authenticated through a RADIUS server that has been customized to work with the Kerberos security system.
Users Manual of GPL-8000 6.2.1.2 RADIUS Operation When a user attempts to log in and authenticate to an access server using RADIUS, the following steps occur: (1) The user is prompted for and enters a username and password. (2) The username and encrypted password are sent over the network to theRADIUS server. (3) The user receives one of the following responses from the RADIUS server: a. ACCEPT—the user is authenticated. b.
Users Manual of GPL-8000 6.2.3 RADIUS Configuration Task List Configuring Switch to RADIUS Server Communication Configuring Switch to Use Vendor-Specific RADIUS Attributes Specifying RADIUS Authentication Specifying RADIUS Authorization Specifying RADIUS Accounting 6.2.4 RADIUS Configuration Task 6.2.4.1 Configuring Switch to RADIUS Server Communication The RADIUS host is normally a multiuser system running RADIUS server software from Livingston, Merit, Microsoft, or another software provider.
Users Manual of GPL-8000 6.2.4.2 Configuring Switch to Use Vendor-Specific RADIUS Attributes The Internet Engineering Task Force (IETF) draft standard specifies a method for communicating vendor-specific information between the network access server and the RADIUS server by using the vendor-specific attribute (attribute 26). Vendor-specific attributes (VSAs) allow vendors to support their own extended attributes not suitable for general use.
Users Manual of GPL-8000 6.2.5 RADIUS Configuration Examples 6.2.5.1 RADIUS Authentication and Authorization Example The following example shows how to configure the router to authenticate and authorize using RADIUS: aaa authentication login use-radius group radius local The lines in this sample RADIUS authentication and authorization configuration are defined as follows: : aaa authentication login use-radius radius local configures the router to use RADIUS for authentication at the login prompt.
Users Manual of GPL-8000 RADIUS server does not respond. The command login authentication admins specifies the method list admins as the login authentication method. Web Authentication Configuration The section describes the concept of Web authentication and configuration and usage of the Web authentication. 6.3.1 Overview 6.3.1.1 Web Authentication The Web authentication of the switch is a connection control mode as PPPoE and 802.1x.
Users Manual of GPL-8000 (2) The user accesses any Website through the browser (Write down the domain name, not the IP address, in the host part of the url column in the browser), which activates the DNS request of the user computer. (3) The DNS server returns the user a request response. The switch captures the request response message and changes the resolved address to the address of the built-in portal server in the switch.
Users Manual of GPL-8000 DNS ser ver dhcp ser ver swi t ch cl i ent AAA ser ver DHCP ACK DNS REQUERY DNS RESPONSE ht t p r equest ht t p r esponse( ask user t o l ogi n) ht t p r equest ( l ogi n) aut hent i cat i on r equest aut hent i cat i on r esul t st ar t account i ng r equest st ar t account i ng r esul t aut hent i cat i on r esul t ht t p r equest ( keepal i ve) ht t p r esponse( keepal i ve r esponse) ht t p r equest ( l ogout ) st op account i ng r equest ht t p r esponse( l
Users Manual of GPL-8000 2. Planning network topology The switch takes the routing interface as a unit to set the authentication attribute. if the web authentication function is enabled on a routing interface, network accesses through the routing interface are all controlled by the web authentication. the dhcp server, dns server or aaa server should connect the switch through the interface with web authentication function disabled. figure 6-4 shows the relative typical network topology.
Users Manual of GPL-8000 3. Configuring the transmission period of the online notification Through the online notification sent by the browser, the switch checks whether the user is online. Run the following command in global configuration mode to configure the transmission period (unit: second): Run... To... web-auth keep-alive<60-65535> Configure the transmission period for the online notification. 4.
Users Manual of GPL-8000 3. Configuring the accounting method list Different accounting method lists can be applied on each interface. By default, the accounting method list named default is applied on each interface. Run the following command in interface configuration mode to configure the accounting method list: Run... To... web-auth accounting WORD Configure the accounting method list. 6.3.2.
Users Manual of GPL-8000 6.3.4 Web Authentication Configuration Example Network topology See Figure 6-5: i nt er net DNS ser ver DHCP ser ver AAA ser ver ( 192. 168. 20. 1) ( 192. 168. 20.
Users Manual of GPL-8000 Configuration of the layer-2 interface interface FastEthernet0/1 switchport pvid 1 ! interface FastEthernet0/2 switchport pvid 2 ! interface FastEthernet0/3 switchport pvid 3 ! interface FastEthernet0/4 switchport pvid 4 Configuration of the routing interface interface VLAN1 no ip directed-broadcast ip helper-address 192.168.20.1 web-auth accounting acct-weba web-auth authentication auth-weba web-auth mode vlan-id web-auth enable ! interface VLAN2 ip address 192.168.20.41 255.255.
Users Manual of GPL-8000 Web Configuration HTTP Switch Configuration 7.1.1 HTTP Configuration Switch configuration can be conducted not only through command lines and SNMP but also through Web browser. The switches support the HTTP configuration, the abnormal packet timeout configuration, and so on. 7.1.1.1 Choosing the Prompt Language Up to now, switches support two languages, that is, English and Chinese, and the two languages can be switched over through the following command.
Users Manual of GPL-8000 7.1.1.5 Setting the Maximum Number of VLAN Entries on Web Page A switch supports at most 4094 VLANs and in most cases Web only displays parts of VLANs, that is, those VLANs users want to see. You can use the following command to set the maximum number of VLANs. The default maximum number of VLANs is 100. Command Purpose ip http web max-vlan { max-vlan } Sets the maximum number of VLAN entries displayed in a web page. 7.1.1.
Users Manual of GPL-8000 HTTP of version 1.1 JavaScriptTM of version 1.5 What's more, please ensure that the main program file, running on a switch, supports Web access and your computer has already connected the network in which the switch is located. 7.2.1.1 Initially Accessing the Switch When the switch is initially used, you can use the Web access without any extra settings: 1. Modify the IP address of the network adapter and subnet mask of your computer to 192.168.1.x and 255.255.255.
Users Manual of GPL-8000 7.2.1.2 Upgrading to the Web-Supported Version If your switch is upgraded to the Web-supported version during its operation and the switch has already stored its configuration files, the Web visit cannot be directly applied on the switch. Perform the following steps one by one to enable the Web visit on the switch: 1. Connect the console port of the switch with the accessory cable, or telnet to the management address of the switch through the computer. 2.
Users Manual of GPL-8000 7.2.3 Introduction of Web Interface The Web homepage appears after login, as shown in figure 2: Figure 2: Web homepage The whole homepage consists of the top control bar, the navigation bar, the configuration area and the bottom control bar. 7.2.3.1 Top Control Bar Figure 3: Top control bar Save All Write the current settings to the configuration file of the device. It is equivalent to the execution of the write command.
Users Manual of GPL-8000 7.2.3.2 Navigation Bar Figure 4 Navigation bar The contents in the navigation bar are shown in a form of list and are classified according to types. By default, the list is located at “Runtime Info”. If a certain item need be configured, please click the group name and then the sub-item. For example, to browse the flux of the current port, you have to click “Interface State" and then “Interface Flow”.
Users Manual of GPL-8000 7.2.3.3 Configuration Area Figure 5 Configuration Area The configuration display area shows the state and configuration of the device. The contents of this area can be modified by the clicking of the items in the navigation bar. 7.2.3.4 Configuration Area The configuration area is to show the content that is selected in the navigation area.
Users Manual of GPL-8000 7.3.1 Hostname Configuration If you click Basic Config -> Hostname Config in the navigation bar, the Hostname Configuration page appears, as shown in figure 2. Figure 2 Hostname configuration The hostname will be displayed in the login dialog box. The default name of the device is “Switch”. You can enter the new hostname in the text box shown in figure 8 and then click “Apply”. 7.3.2 Time Management If you click System Manage -> Time Manage, the Time Setting page appears.
Users Manual of GPL-8000 GPON Interface Config Figure 1: GPON Interface Config list 7.4.1 GPON Global Config On the left navigation bar, click “GPON Interface Config” -> “GPON Global Config”, and the following interface appears. Figure 2: Device Name Configuration On this page, you can configure ONU authentication method to serial number, password and authentication. You can broadcast GEM Port and the value ranges from 385 to 4094. Click “Apply” and the operation will take effect on the OLT.
Users Manual of GPL-8000 Figure 3: Interface ONU Bind Relationship Configuration Click “Detail” to show the concrete ONU binding relationship of the concrete interface. Select an ONU and click “Delete” to remove the binding or click “Go Back” to return to the default setting.
Users Manual of GPL-8000 Figure 6: ONU Discover Mode Interface Config You can designate the discover mode for each PON port: Auto or Disable. Click “Apply” to save the configuration. 7.4.4 ONU Authentication On the left navigation bar, click “GPON Interface Config” -> “ONU Authentication”, and the following page appears. Figure 7: ONU Authentication Interface Config You can on OLT to enable the ONU detection mechanism at MPCP registration.
Users Manual of GPL-8000 ONU Config Profile Figure 1: ONU Config Profile list 7.5.1 ONU T-Cont Config On the left navigation bar, click “ONU Config Profile” -> “ONU T-Cont Config”, and the following page appears. Figure 2 ONU T-Cont Profile List On ONU T-Cont Profile List, select a to-be-deleted item, click “Delete” to delete the corresponding ONU profile. The default profile cannot be deleted. Click “New” or “Edit” to edit the profile on the following page.
Users Manual of GPL-8000 Figure 3: ONU T-Cont Profile Config 7.5.2 ONU Rate Limit Config On the left navigation bar, click “ONU Config Profile” -> “ONU Rate Limit Config”, and the following page appears. Figure 4: ONU T-Cont Profile List On ONU T-Cont Profile List, select a to-be-deleted item, click “Delete” to delete the corresponding ONU profile. The default profile cannot be deleted. Click “New” or “Edit” to edit the profile on the following page.
Users Manual of GPL-8000 7.5.3 ONU Virtual Port Config On the left navigation bar, click “ONU Config Profile” -> “ONU Rate Virtual Port Config”, and the following page appears. Figure 6: ONU Virtual Port Profile List On ONU Virtual Profile List, select a to-be-deleted item, click “Delete” to delete the corresponding ONU profile. The default profile cannot be deleted. Click “New” or “Edit” to edit the profile on the following page.
Users Manual of GPL-8000 Figure 9: ONU T-Cont Virtual Port Bind Profile tvbind-default On ONU Virtual Profile List, select a to-be-deleted item, click “Delete” to delete the corresponding ONU profile. The default profile cannot be deleted. Click “New” or “Edit” to edit the profile on the following page. On the page, you can edit Virtual Port ID, Virtual Port Profile, T-Cont ID and T-Cont Profile. After the configuration is finished, click “Apply” to save the configuration.
Users Manual of GPL-8000 Figure 12: ONU VLAN Profile Config 7.5.6 ONU Flow Mapping Config On the left navigation bar, click “ONU Config Profile” -> “ONU Flow Mapping Configuration”, and the following page appears. Figure 13: ONU Flow Mapping Profile List Figure 14: ONU Flow Mapping Profile flow-mapping-default On ONU Flow Mapping Profile List, select a to-be-deleted item, click “Delete” to delete the corresponding ONU profile. The default profile cannot be deleted.
Users Manual of GPL-8000 Figure 15: Add ONU Flow Mapping Profile flow-mapping-default 113
Users Manual of GPL-8000 ONU Interface Config Figure 1: ONU Interface Config list 7.6.1 ONU Description On the left navigation bar, click “ONU Interface Config” -> “ONU Description”, and the following page appears. Figure 2: ONU Description list 7.6.2 T-Cont Virtual Port Bind On the left navigation bar, click “ONU Interface Config” -> “T-Cont Virtual Port Bind”, and the following page appears.
Users Manual of GPL-8000 On the page of T-Cont Virtual Port Bind Interface Config, click “Apply” to save the setting or click “Reset” to return to the default setting. 7.6.3 Flow Mapping On the left navigation bar, click “ONU Interface Config” -> “Flow Mapping”, and the following page appears. Figure 4: Flow Mapping Interface Configuration On the page of Flow Mapping Interface Config, click “Apply” to save the setting or click “Reset” to return to the default setting. 7.6.
Users Manual of GPL-8000 Figure 8: ONU Remote Controller Config 116
Users Manual of GPL-8000 Advanced Config Figure 1: Advanced Config list 7.7.1 Configuring Port Description If you click Advanced Config -> Port description Config in the navigation bar, the Port description Configuration page appears, as shown in figure 2.
Users Manual of GPL-8000 You can modify the port description on this page and enter up to 120 characters. The description of the VLAN port cannot be set at present. 7.7.2 Configuring the Attributes of the Port If you click Advanced Config -> Port attribute Config in the navigation bar, the Port Attribute Configuration page appears, as shown in figure 3.
Users Manual of GPL-8000 On this page you can set the reception speed and transmission speed of a port. By default, all ports have no speed limited. 7.7.4 Port mirroring If you click Advanced Config -> Port Mirror in the navigation bar, the Port Mirror Config page appears, as shown in figure 5. Figure 5: Port mirror configuration Click the drop-down list on the right side of "Mirror Port" and select a port to be the destination port of mirror.
Users Manual of GPL-8000 7.7.5 VLAN Settings 7.7.5.1 VLAN List If you click Advanced Config -> VLAN Config in the navigation bar, the VLAN Config page appears, as shown in figure 2. Figure 2: VLAN configuration The VLAN list will display VLAN items that exist in the current device according to the ascending order. In case of lots of items, you can look for the to-be-configured VLAN through the buttons like “Prev”, “Next” and “Search”. You can click “New” to create a new VLAN.
Users Manual of GPL-8000 Through the port list, you can set for each port the default VLAN , the VLAN mode (Trunk or Access), whether to allow the entrance of current VLAN packets and whether to execute the untagging of the current VLAN when the port works as the egress port. When a port in Trunk mode serves as an egress port, it will untag the default VLAN by default.
Users Manual of GPL-8000 7.7.6 Configuring the VLAN Interface If you click Advanced Config -> VLAN interface, the Configuring the VLAN interface page appears. Figure 2: Configuring the VLAN interface Click New to add a new VLAN interface. Click Cancel to delete a VLAN interface. Click Modify to modify the settings of a corresponding VLAN interface.
Users Manual of GPL-8000 7.7.7 LDP Configuration 7.7.7.1 Configuring the Global Attributes of LLDP If you click Advanced Config -> LLDP Config in the navigation bar, the Global LLDP Config page appears, as shown in figure 6. Figure 6: Configuring the global attributes of LLDP You can choose to enable LLDP or disable it. When you choose to disable LLDP, you cannot configure LLDP. The “HoldTime” parameter means the ttl value of the packet that is transmitted by LLDP, whose default value is 120s.
Users Manual of GPL-8000 7.7.8 STP Configuration 7.7.8.1 STP Status Information If you click Advanced Config -> STP Config in the navigation bar, the STP Config page appears, as shown in figure 10. Figure 10: Configuring the global attributes of STP The root STP configuration information and the STP port’s status are only-read. On the local STP configuration page, you can modify the running STP mode by clicking the Protocol type drop-down box. The STP modes include STP, RSTP and disabled STP.
Users Manual of GPL-8000 The configuration of the attributes of the port is irrelative of the global STP mode. For example, if the protocol status is set to “Disable” and the STP mode is also changed, the port will not run the protocol in the new mode. The default value of the path cost of the port is 0, meaning the path cost is automatically calculated according to the speed of the port. If you want to change the path cost, please enter another value.
Users Manual of GPL-8000 7.7.9 Port security 7.7.9.1 IP Binding Configuration If you click Advanced Config -> Port Security -> IP bind in the navigation bar, the Configure the IP-Binding Info page appears, as shown in figure 7. Figure 7: IP binding configuration Click “Detail” and then you can conduct the binding of the source IP address for each physical port. In this way, the IP address that is allowed to visit the port will be limited.
Users Manual of GPL-8000 If you click “Detail”, you can conduct the binding of the source MAC address for each physical port. According to the configured static MAC filtration mode, the MAC address of a port can be limited, allowed or forbidden to visit. Figure 13: Setting static MAC filtration entries 7.7.9.
Users Manual of GPL-8000 7.7.10 Storm control In the navigation bar, click Advanced Config -> Storm control. The system then enters the page, on which the broadcast/multicast/unknown unicast storm control can be set. 7.7.10.1 Broadcast Storm Control Figure 15: Broadcast storm control Through the drop-down boxes in the Status column, you can decide whether to enable broadcast storm control on a port. In the Threshold column you can enter the threshold of the broadcast packets.
Users Manual of GPL-8000 threshold range for each port is given behind the threshold. 7.7.10.3 Unknown Unicast Storm Control Figure 17: Unknown unicast storm control In the Threshold column you can enter the threshold of the broadcast packets. The legal threshold range for each port is given behind the threshold.
Users Manual of GPL-8000 7.7.11 IP Access Control List 7.7.11.1 Setting the Name of the IP Access Control List If you click Advanced Config -> IP access control list -> IP access control list Config, the IP ACL configuration page appears. Figure 9: IP access control list configuration Click New to add a name of the IP access control list. Click Cancel to delete an IP access control list.
Users Manual of GPL-8000 Figure 13: Extended IP access control list Click New to add a rule of the IPaccess control list. Click Cancel to delete a rule of the IP access control list. If you click Modify, the corresponding IP access control list appears and you can set the corresponding rules for the IP access control list. Figure 14: Setting the Rules of the extended IP access control list 7.7.11.
Users Manual of GPL-8000 7.7.12 MAC Access Control List 7.7.12.1 Setting the Name of the MAC Access Control List If you click Advanced Config -> MAC access control list -> MAC access control list Config, the MAC ACL configuration page appears. Figure 4: MAC access control list configuration Click New to add a name of the MAC access control list. Click Cancel to delete a MAC access control list. Figure 5: Setting the name of MAC access control list 7.7.12.
Users Manual of GPL-8000 Figure 8: Applying the MAC access control list 7.7.13 Link Aggregation Configuration If you click Advanced Config ->Port Channel in the navigation bar, the Port aggregation Config page appears, as shown in figure 8. Figure 8: Port aggregation configuration If you click New, an aggregation group can be created. Up to 32 aggregation groups can be configured through Web and up to 8 physical ports in each group can be aggregated.
Users Manual of GPL-8000 7.7.14 Ring Protection Configuration 7.7.14.1 EAPS Ring List If you click Advanced Config -> EAPS Ring Config, the EAPS ring list page appears. Figure 19: EAPS Ring List In the list shows the currently configured EAPS ring, including the status of the ring, the forwarding status of the port and the status of the link. Click “New” to create a new EAPS ring. Click the “Operate” option to configure the “Time” parameter of the ring. 1. The system can support 8 EAPS rings. 2.
Users Manual of GPL-8000 Enter a value between 1 and 4094 in the text box on the right of “Control VLAN” as the control VLAN ID. When a ring is established, the control VLAN will be automatically established too. Please note that if the designated control VLAN is 1 and the VLAN of the control device is also 1 the control device cannot access the control VLAN. Additionally, please do not enter a control VLAN ID that is same as that of another ring.
Users Manual of GPL-8000 Layer 3 Configuration Figure 1: Layer 3 configuration list Only Layer 3 switches have the Layer 3 configuration.
Users Manual of GPL-8000 7.8.1 Setting the Static Route If you click Layer 3 Config -> Static route Config, the Static route configuration page appears. Figure 4: Displaying the static route Click Create to add a static route. If you click Edit, you can modify the current static route. If you click Cancel, you can cancel the chosen static route.
Users Manual of GPL-8000 Remote Monitor configuration Figure 1: Remote Monitor configuration list 7.9.1 SNMP Configuration If you click Remote Monitor -> SNMP management in the navigation bar, the SNMP management page appears, as shown in figure 2. 7.9.1.1 SNMP Community Management Figure 2: SNMP community management On the SNMP community management page, you can know the related configuration information about SNMP community.
Users Manual of GPL-8000 7.9.1.2 SNMP Host Management Figure 4: SNMP host management On the SNMP community host page, you can know the related configuration information about SNMP host. You can create, modify or cancel the SNMP host information, and if you click New or Edit, you can switch to the configuration page of SNMP host. Figure 5: SNMP host management settings On the SNMP host configuration page, you can enter SNMP Host IP, SNMP Community, SNMP Message Type and SNMP Community Version.
Users Manual of GPL-8000 7.9.2.2 RMON History Information Configuration If you click Remote Monitor -> RMON Config -> RMON history -> New, the RMON history page appears. Figure 7: Configuring the RMON history information You need to set a physical port to be the reception terminal of the monitor data. The index is used to identify a specific interface; if the index is same to that of the previous application interface, it will replace that of the previous application interface.
Users Manual of GPL-8000 index of the falling event will be triggered. 7.9.2.4 RMON Event Configuration If you click Remote Monitor -> RMON Config -> RMON Event -> New, the RMON event page appears. Figure 9: RMON event configuration The index corresponds to the rising event index and the falling event index that have already been configured on the RMON alarm config page. The owner is used to describe the descriptive information of an event.
Users Manual of GPL-8000 System Management Figure 1: Navigation list of system management 7.10.1 User Management 7.10.1.1 User List If you click System Manage -> User Manage, the User Management page appears. Figure 2: User list You can click “New” to create a new user. To modify the permission or the login password, click “Edit” on the right of the user list. 1. Please make sure that at least one system administrator exists in the system, so that you can manage the devices through Web. 2.
Users Manual of GPL-8000 7.10.1.2 Establishing a New User If you click “New” on the User Management page, the Creating User page appears. Figure 3: Creating new users In the “User name” text box, enter a name, which contains letters, numbers and symbols except “?”, “\”, “&”, “#” and the "Space". In the “Password” textbox enter a login password, and in the “Confirming password” textbox enter this login password again. In the “User permission” dropdown box set the user's permission.
Users Manual of GPL-8000 The user group name cannot be created before. The Pass-Group Name, Authen-Group Name and Author-Group Name must be created before; otherwise, the new created user group cannot be succeeded. Set Pass-Group Name, Authen-Group Name, and Author-Group Name on the relevant tab pages. 7.10.1.4 Pass-Group Mgr On the left navigation bar, click “System Mgr” -> “User Mgr” -> “Pass- Group Mgr” and the following page appears.
Users Manual of GPL-8000 Figure 8: Authorization Group Management Click “New” to create a new authen-group name. Click “Delete” to delete the authen-group name. Figure 9: Authentication Group Configuration On the above page, the Max try times and Duration for all tries must be configured simultaneously. Otherwise, the configuration cannot take effect. 7.10.1.6 Author-Group Mgr On the left navigation bar, click “System Mgr” -> “User Mgr” -> “Author-Group Mgr” and the following page appears.
Users Manual of GPL-8000 Figure 11: Authorization Group Configuration The authorization rule determines your permission of the administrator or the limited user. If you are the administrator, you have the administrator right. If you are the limited user, you can only but check the web. 7.10.2 Log Management If you click System Manage -> Log Manage, the Log Management page appears.
Users Manual of GPL-8000 Figure 13: Ping Ping is used to test whether the switch connects other devices. If a Ping test need be conducted, please enter an IP address in the “Destination address” textbox, such as the IP address of your PC, and then click the “PING” button. If the switch connects your entered address, the device can promptly return a test result to you; if not, the device will take a little more time to return the test result.
Users Manual of GPL-8000 7.10.4.2 Importing the Configuration Information Figure 15: Importing the configuration files You can import the configuration files from PC to the device and replace the configuration file that is currently being used. For example, by importing the backup configuration files, you can resume the device to its configuration of a previous moment. 1.
Users Manual of GPL-8000 7.10.5 Software Management If you click System Manage -> IOS Software, the software managementpage appears. 7.10.5.1 Backing up the IOS Software Figure 16: Backing up IOS On this page the currently running software version is displayed. If you want to backup IOS, please click “Backuping IOS”; then on the browser the file download dialog box appears; click “Save” to store the IOS file to the disk of the PC, mobile storage device or other network location.
Users Manual of GPL-8000 7.10.6 Factory Settings On the left navigation bar, click “System Mgr” -> “Factory Setting” and the following page appears. Figure 18: Restore to the original settings 1. If you click the “Resume” button, the current configuration will be replaced by the original configuration, which will take effect after rebooting. 2.
Users Manual of GPL-8000 Interface Configuration Introduction This section helps user to learn various kinds of interface that our switch supports and consult configuration information about different interface types. For detailed description of all interface commands used in this section, refer to Interface configuration command. For files of other commands appeared in this section, refer to other parts of the manual.
Users Manual of GPL-8000 8.1.2 Interface Configuration Introduction The following description applies to the configuration process of all interfaces. Take the following steps to perform interface configuration in global configuration mode. (1) Run the interface command to enter the interface configuration mode and start configuring interface. At this time, the switch prompt becomes ‘config_’ plus the shortened form of the interface to be configured. Use these interfaces in terms of their numbers.
Users Manual of GPL-8000 There is no need to add blank between interface type and interface number. For example, in the above line, g 1/1 or g 1/1 is both rights. (1) You can configure the interface configuration commands in interface configuration mode. Various commands define protocols and application programs to be executed on the interface. These commands will stay until user exits the interface configuration mode or switches to another interface.
Users Manual of GPL-8000 8.2.1.3 Configuring Time Delay The upper protocol uses time delay information to perform operation decision. Use the following command to configure time delay for the interface in the interface configuration mode. Command Description delaytensofmicroseconds Configures time delay for the currently configured interface. The configuration of time delay is just an information parameter. Use this command cannnot adjust the actual time delay of an interface. 8.2.
Users Manual of GPL-8000 You can use the show interface command and the show running-config command to check whether an interface has been shut down. An interface that has been shut down is displayed as ‘administratively down’ in the show interface command display. For more details, please refer to the following example in ‘Interface Shutdown Example’. 8.2.3 Configuring Logistical Interface This section describes how to configure a logical interface.
Users Manual of GPL-8000 8.2.3.3 Configuring Aggregation Interface The inadequate bandwidth of a single Ethernet interface gives rise to the birth of the aggregation interface. It can bind several full-duplex interfaces with the same rate together, greatly improving the bandwidth. Run the following command to define the aggregation interface: Command Description Interface port-aggregator number Configures the aggregation interface 8.2.3.
Users Manual of GPL-8000 Command Description [no] subvlan[setstr] [add Configure SubVLAN in Super VLAN. The added Sub VLAN cannot addstr][removeremstr] possess a management interface or cannot belong to other Super VLANs. In original state, Super VLAN does not contain any Sub VLAN. Only one sub command can only be used every time. setstr means to set the Sub VLAN list. For example, List 2,4-6 indicate VLAN 2, 4, 5 and 6. add means to add VLAN list in the original SubVLAN list.
Users Manual of GPL-8000 Interface Range Configuration Interface Range Configuration Task 9.1.1 Understanding Interface Range In the process of configuring interface tasks, there are cases when you have to configure the same attribute on ports of the same type. In order to avoid repeated configuration on each port, we provide the interface range configuration mode. You can configure ports of the same type and slot number with the same configuration parameters. This reduces the workload.
Users Manual of GPL-8000 is mandatory. Steps described in other sections are optional. 10.1.1 Selecting Ethernet Interface Run the following command in global configuration mode to enter the Ethernet interface configuration mode: Run… To… interface fastethernet [slot|port ] Enter the fastEthernet interface configuration mode interface gigaethernet [slot|port ] Enter the gigabit Ethernet interface configuration mode.
Users Manual of GPL-8000 11.1.1 Configuring Flow Control for the Port You can control the flow rate on the incoming and outgoing ports through configuration. Run the following commands in previliged mode to limit the flow rate of the port. Each band is defaulted as 128 kbps. Command Purpose configure Enters the global configuration mode. interface f1/0 Enters the to-be-configured port. [no] switchport rate-limit band Configures the flow rate limits for the port.
Users Manual of GPL-8000 11.1.3 Configuring the Storm Control on the Port The ports of the switch may receives the attack by the continuous abnormal unicast (MAC address lookup failing), multicast or broadcast message. In this case, the attacked ports or the whole switch may break down. The storm control mechanism of the port is therefore generated. Command Purpose storm-control {broadcast | multicast | Performs the storm control to the unicast} threshold count broadcast/multicast/unicast message.
Users Manual of GPL-8000 configure Enters the global configuration mode. interface g0/1 Enters the to-be-configured port. [no] switchport port-security Configures the secure port mode. mode static {accept | reject} exit Goes back to the global configuration mode. exit Goes back to the EXEC mode. write Saves the configuration. 11.3.
Users Manual of GPL-8000 Configuring Port Mirroring Configuring Port Mirroring Task List Configuring port mirroring Displaying port mirroring information Configuring Port Mirroring Task 12.1.1 Configuring Port Mirroring Through configuring port mirroring, you can use one port of a switch to observe the traffic on a group of ports. Enter the privilege mode and perform the following steps to configure port mirroring: Command Description configure Enters the global configuration mode.
Users Manual of GPL-8000 Clearing Dynamic Mac Address MAC address Configuration Task 13.2.1 Configuring Static Mac Address Static MAC address entries are MAC address entries that do not age by the switch and can only be deleted manually. According to the actual requirements during the operation process, you can add and delete a static MAC address. Use the following command in privileged level to add and delete a static MAC address. Command Purpose configure Enters the global configuration mode.
Users Manual of GPL-8000 Vlan-id indicates the VLAN number. Valid value is from 1 to 4094. Interface-id indicates the interface name. Static indicates the static MAC address table. 13.2.4 Clearing Dynamic MAC Address The acquired MAC addresses need to be cleared in some circumstances. Use the following command to delete a dynamic MAC address in privileged mode: Command Purpose clear mac address-table dynamic Deletes a dynamic MAC address entry.
Users Manual of GPL-8000 out of effect (see the following example). The same item can only be configured once in the same MAC address. Perform the following operations in MAC list configuration mode to configure the items of the MAC list: Run… To… [no] {deny | permit} {any | host Add/Delete an item of the MAC list. You can src-mac-addr} {any | host rerun the command to add or delete multiple dst-mac-addr}[ethertype] items of the MAC list.
Users Manual of GPL-8000 configure Enter the global configuration mode. interface f0/1 Log in to the port that is to be configured. [no] mac access-group name Apply the created MAC list to the port or delete the applied MAC list from the port. name means the name of the MAC list. exit Enter the global configuration mode again. exit Enter the management mode again. write Save configuration. Configuring 802.1x 802.1x Configuration Task List Configuring 802.
Users Manual of GPL-8000 authentication method is defaulted by the port. Mandatory authentication disapproval means the port authentication does not get passed no matter what kind of method is applied. No user can perform the data access control through the port. 802.1x authentication startup means the port is to run 802.1x authentication protocol. 802.1x authentication will be applied to users who access the port. Only users who pass the authentication can perform data access control through the port.
Users Manual of GPL-8000 Run the following command to start up the 802.1x authentication: Run… To… dot1x port-control auto Configure the 802.1x protocol control method on the port. aaa authentication dot1x {default Configure the AAA authentication of |list name} method 802.1x. Run one of the following commands in port configuration mode to select 802.1x control method: Run… To… dot1x port-control auto Start up the 802.1x authentication method on the port.
Users Manual of GPL-8000 15.2.3 Configuring Maximum Times for 802.1x ID Authentication When 802.1x authentication starts or 802.1x authentication is being performed again, 802.1x sends ID authentication request to guest hosts. If the request message is dropped or delayed because network problems, the requirement message will be sent again. If the message is resent certain times, 802.1x stops to send the message and the ID authentication fails.
Users Manual of GPL-8000 15.2.7 Configuring Authentication Method for 802.1x Port The 802.1x authentication can be performed in different methods at different ports. In the default configuration, the 802.1x authentication adopts the default method. Run the following command in interface configuration mode to configure the method of the 802.1x authentication: Run… To… dot1x authentication method yyy Configure the method of the 802.1x authentication. 15.2.8 Selecting Authentication Type for 802.
Users Manual of GPL-8000 module decides whether to send the update message. At the same time, You are required to enable the dot1x re-authentication function so that the switch can know when supplicant is abnormal. Run the following commands in interface configuration mode to enable the dot1x accounting and to configure the accounting method: Run… To… dot1xaccounting enable Enable the dot1x accounting. dot1x accounting method {method name} Configure the accounting method. Its default value is default.
Users Manual of GPL-8000 15.2.13 Monitoring 802.1x Authentication Configuration and State To monitor the configuration and state of 802.1x Authentication and decide which 802.1x parameter needs to be adjusted, run the following command in management mode: Run… To… show dot1x {interface ….} Monitor the configuration and state of 802.1x authentication. 802.1x Configuration Example Host A connects port F0/10 of the switch. Host B connects port F0/12. The IP address of the radius-server host is 192.168.
Users Manual of GPL-8000 VLAN Configuration VLAN Introduction Virtual LAN (VLAN) refers to a group of logically networked devices on one or more LANs that are configured so that they can communicate as if they were attached to the same wire, when in fact they are located on a number of different LAN segments. In 1999 IEEE established IEEE 802.1Q Protocol Standard Draft used to standardize VLAN realization project.
Users Manual of GPL-8000 Run… To… vlan vlan-id Enter the VLAN configuration mode. name str Name in the vlan configuration mode. Exit Exit vlan configuration mode, and establish vlan. vlan vlan-range Establish multiple VLANs at the same time. no vlan vlan-id | vlan-range Delete one or multiple VLANs. Vlan can perform dynamic addtion and deletion via vlan management protocol GVRP. 16.3.
Users Manual of GPL-8000 The command to globally enable dot1q-tunnel is as follows: Command Description double-tagging Globally enables double-tagging feature of the switch. 16.3.3 Creating/Deleting VLAN Interface Vlan interface can be established to realize network management or layer 3 routing feature. The vlan interface can be used to specify ip address and mask. Run the following command to configure vlan interface: Run… To… [no] interface vlan vlan-id Create/Delete a VLAN interface. 16.3.
Users Manual of GPL-8000 16.3.5 Monitoring Configuration and State of VLAN Run the following commands in EXEC mode to monitor configuration and state of VLAN: Run… To… show vlan [ idx | interfaceintf ] Display configuration and state of VLAN. show interface {vlan | supervlan} x Display the states of vlan ports. Configuration Examples Users PC1~PC6 connect the switch through ports 1~6. The IP addresses of these PCs belong to the network section 192.168.1.0/24.
Users Manual of GPL-8000 GVRP Configuration Configuring GVRP Introduction GVRP (GARP VLAN Registration Protocol GARP VLAN) is a GARP (GARP VLAN Registration Protocol GARP VLAN) application that provides IEEE 802.1Q-compliant VLAN pruning and dynamic VLAN creation on 802.1Q trunk ports.
Users Manual of GPL-8000 17.4.3 Monitoring and Maintenance of GVRP Perform the following operations in EXEC mode: Command Description show gvrp statistics [interface Displays GVRP statistics. port_list] show gvrp status Displays GVRP global state information. [ no ] debug gvrp [ packet | event ] Enables/disables GVRP data packet and event debug switches. All debug switches will be enabled/disabled if not specified the concrete switch.
Users Manual of GPL-8000 (5) Configure the interface 9 that Switch A connects to Switch B to trunk: Switch_config_g0/9# switchport mode trunk (6) Enable global GVRP of switch B: Switch_config#gvrp (7) Enable GVRP of interface 9 of Switch B Switch_config_g0/9#gvrp (8) Configure VLAN 40, Vlan 50 and Vlan60 on Switch B Switch_config#vlan 40 Switch_config#vlan 50 Switch_config#vlan 60 After completing the configuration, the VLAN configuration information will be displayed respectively on Switch A and Switc
Users Manual of GPL-8000 Private VLAN Settings Private VLAN Settings Overview of Private VLAN Private VLAN has settled the VLAN application problems facing ISPs: If ISP provides each user with a VLAN, the support by each device of 4094 VLANs will restrict the total of ISP-supported users. Private VLAN Type and Port Type in Private VLAN Private VLAN subdivides the L2 broadcast domain of a VLAN into multiple sub-domains, each of which consists of a private VLAN pair: a primary VLAN and a secondary VLAN.
Users Manual of GPL-8000 18.3.4 Modifying the Fields in VLAN TAG This functionality supports to modify the VLAN ID and priority in VLAN tag and decides whether the egress packets of private VLAN carry the tag or not.
Users Manual of GPL-8000 18.5.3 Configuring the L2 Port of Private VLAN to Be the Host Port Run the following commands to set the L2 port of private VLAN to be the host port: Command Purpose Interfaceinterface Enters the interface configuration mode. switchport mode private-vlan host Sets the layer-2 port to be in host’s port mode. no switchport mode Deletes the private VLAN mode configuration of L2 port.
Users Manual of GPL-8000 18.5.6 Displaying the Configuration Information of Private VLAN Run the following commands in global, interface or VLAN configuration mode to display the private VLAN configuration information of private VLAN and L2 port: Command Purpose show vlan private-vlan Displays the configuration of private VLAN. show vlan private-vlan interface interface Displays the configuration of the L2 port in the private VLAN.
Users Manual of GPL-8000 Switch_config#interface GigaEthernet0/3 Switch_config_g0/3#switchport mode private-vlan host Switch_config_g0/3#switchport private-vlan host-association 2 3 Switch_config_g0/3#switchport pvid 3 Switch_config#interface GigaEthernet0/4 Switch_config_g0/4#switchport mode private-vlan host Switch_config_g0/4#switchport private-vlan host-association 2 4 Switch_config_g0/4# switchport pvid 4 Switch_config#interface GigaEthernet0/5 Switch_config_g0/5#switchport mode private-vlan host Sw
Users Manual of GPL-8000 186
Users Manual of GPL-8000 STP Configuration Configuring STP 19.1.1 STP Introduction The standard Spanning Tree Protocol (STP) is based on the IEEE 802.1D standard. A switch stack appears as a single spanning-tree node to the rest of the network, and all stack members use the same bridge ID. Unless otherwise noted, the term switch refers to a standalone switch and to a switch stack.
Users Manual of GPL-8000 (3) Port identifier for each port of the bridge The bridge with highest priority (the identifier value is the smallest) is selected as the root. Ports of each bridge have the attribute Root Path Cost, that is, the minimum of path cost summation of all ports from the root to the bridge. The designated port of each network segment refers to the port connecting to the network segment and having the minimum path cost.
Users Manual of GPL-8000 19.1.3.2 Disabling/Enabling STP Spanning tree is enabled by default. Disable spanning tree only if you are sure there are no loops in the network topology. Follow these steps to disable spanning-tree: Command Purpose no spanning-tree Disables STP. To enable spanning-tree, use the following command: Command Purpose spanning-tree Enables default mode STP (SSTP). spanning-tree mode {sstp | rstp} Enables a certain mode STP. 19.1.3.
Users Manual of GPL-8000 19.1.3.6 Configuring the Forward Delay Time Configure sstp forward delay to determine the number of seconds an interface waits before changing from its spanning-tree learning and listening states to the forwarding state. Use the following command to configure sstp forward delay: Command Purpose spanning-tree sstpforward-time Configures sstp Forward time. no spanning-tree sstp forward-time Returns forward time to default value (15s). 19.1.3.
Users Manual of GPL-8000 19.1.3.10 Monitoring STP State To monitor the STP configuration and state, use the following command in management mode: Command Purpose show spanning-tree Displays spanning-tree information on active interfaces only. show spanning-tree detail Displays a detailed summary of interface information. show spanning-tree interface Displays spanning-tree information for the specified interface. 19.1.4 Configuring VLAN STP 19.1.4.
Users Manual of GPL-8000 forward-time designated VLAN to the default configuration. spanning-tree vlan vlan-list max-age Configures Max-age for the designated value VLAN. no spanning-tree vlan vlan-list Resumes Max-age of the designated max-age VLAN to the default configuration. spanning-tree vlan vlan-list hello-time Configures HELLO-TIME for the value designated VLAN. no spanning-tree vlan vlan-list Resumes HELLO-TIME of the hello-time designated VLAN to the default configuration.
Users Manual of GPL-8000 19.1.6 RSTP Configuration Task 19.1.6.1 Enabling/Disabling Switch RSTP Follow these configurations in the global configuration mode: Command Purpose spanning-tree mode rstp Enables RSTP no spanning-tree mode Returns STP to default mode (SSTP) 19.1.6.2 Configuring the Switch Priority You can configure the switch priority and make it more likely that a standalone switch or a switch in the stack will be chosen as the root switch.
Users Manual of GPL-8000 If you configure the Forward Delay Time to a relatively small value, it may leads to a temporary verbose path. If you configure the Forward Delay Time to a relatively big value, the system may not resume connecting for a long time. We recommend user to use the default value. The Forward Delay Time of the bridge is 15 seconds. 19.1.6.
Users Manual of GPL-8000 Beginning in interface configuration mode, follow these steps to configure the cost of an interface: Command Purpose spanning-tree rstp costvalue Configures the cost for an interface. no spanning-tree rstp cost Returns path cost to default value. The modification of the priority of the Ethernet port will arise the recalculation of the spanning tree. We recommend user to use the default value and let RSTP protocol calculate the path cost of the current Ethernet interface.
Users Manual of GPL-8000 distributed to different STPs, creating multiple topologies in the network. In networks created by MSTP, frames of different VLANs can be forwarded through different paths, realizing the load balance of the VLAN data. Different from the mechanism that VLAN distributes STP, MSTP allows multiple VLANs to be distributed to one STP topology, effectively reducing STPs required to support lots of VLANs. 19.2.1.
Users Manual of GPL-8000 1. CIST Common and Internal Spanning Tree (CIST) means the spanning tree comprised by all single switches and interconnected LAN. These switches may belong to different MST regions. They may be switches running traditional STP or RSTP. Switches running STP or RSTP in the MST regions are considered to be in their own regions. After the network topology is stable, the whole CIST chooses a CIST root bridge.
Users Manual of GPL-8000 2. Alternate port Figure 2.3 Alternate port The alternate port is a backup path between the current switch and the root bridge. When the connection of root port is out of effect, the alternate port can promptly turn into a new root port without work interruption. 3. Designated port Figure 2.4 Designated port The designated port can connect switches or LAN in the next region. It is the path between the current LAN and root bridge.
Users Manual of GPL-8000 4. Backup port Figure 2.5 Backup port When two switch ports directly connect or both connect to the same LAN, the port with lower priority is to be the backup port, the other port is to be the designated port. If the designated port breaks down, the backup port becames the designated port to continue working. 5. Master port Figure 2.6 Master port The Master port is the shortest path between MST region and CIST root bridge.
Users Manual of GPL-8000 6. Boundary port The concept of boundary port in CIST is a little different from that in each MSTI. In MSTI, the role of the boundary port means that the spanning tree instance does not expand on the port. 7. Edge port In the RSTP protocol or MSTP protocol, edge port means the port directly connecting the network host. These ports can directly enter the forwarding state without causing any loop in the network. Figure 2.
Users Manual of GPL-8000 Table 2.
Users Manual of GPL-8000 19.2.1.6 Stable State The MSTP switch performs calculation and compares operations according to the received BPDU, and finally ensures that: (1) One switch is selected as the CIST root of the whole network. (2) Each switch and LAN segment can decide the minimum cost path to the CIST root, ensuring a complete connection and prevent loops. (3) Each region has a switch as the CIST regional root. The switch has the minimum cost path to the CIST root.
Users Manual of GPL-8000 19.2.2 MSTP Configuration Task List Default MSTP configuration Enabling and disabling MSTP Configuring MSTP region Configuring network root Configuring secondary root Configuring bridge priority Configuring time parameters of STP Configuring network diameter Configuring maximum hop count Configuring port priority Configuring path cost for port Configuring port connection type Activating MST-compatible mode 19.2.2.
Users Manual of GPL-8000 The main function of the compatible mode is to create the MST area for switches and other MSTP-running switches. In actual networking, make sure that the switch has the same configuration name and the same edit number. It is recommended to configure switches running other MSTP protocols to the CIST root, ensuring that the switch enters the compatible mode by receiving message.
Users Manual of GPL-8000 19.2.3.2 Enabling and Disabling MSTP The STP protocol can be started in PVST or SSTP mode by default. You can stop it running when the spanning-tree is not required. Run the following command to set the STP to the MSTP mode: Command Purpose spanning-tree Enables STP in default mode. spanning-tree mode mstp Enables MSTP. Run the following command to disable STP: Command Purpose no spanning-tree Disables the STP. 19.2.3.
Users Manual of GPL-8000 spanning-tree mstp instanceinstance-id Maps VLAN to MSTI. vlanvlan-list instance-id represents the instance number of the spanning tree, meaning an MSTI. It ranges from 1 to 15. vlan-list means the VLAN list that is mapped to the spanning tree. It ranges from 1 to 4094. instance-id is an independent value representing a spanning tree instance. vlan-list can represent a group of VLANs, such as ”1,2,3”, ”1-5” and “1,2,5-10”.
Users Manual of GPL-8000 Run the following command to set the switch to the network root: Command Purpose spanning-tree mstpinstance-idroot primary Sets the switch to the root in the designated [ diameternet-diameter spanning tree instance. [ hello-timeseconds ] ] instance-id represents the number of the spanning tree instance, ranging from 0 to 15. net-diameter represents the network diameter, which is an optional parameter. It is effective when instance-id is 0. It ranges from 2 to 7.
Users Manual of GPL-8000 Command Purpose spanning-tree mstpinstance-idroot secondary Sets the switch to the secondary root in the designated [ diameternet-diameter [ hello-timeseconds ] ] spanning tree instance. instance-id represents the number of the spanning tree instance, ranging from 0 to 15. net-diameter represents the network diameter, which is an optional parameter. It is effective when instance-id is 0. It ranges from 2 to 7.
Users Manual of GPL-8000 19.2.3.7 Configuring STP Time Parameters The following are STP time parameters: Hello Time: The interval to send the configuration message to the designated port when the switch functions as the network root. Forward Delay: Time that the port needs when it changes from the Blocking state to the learning state and to the forwarding state in STP mode. Max Age: The maximum live period of the configuration information about the spanning tree.
Users Manual of GPL-8000 19.2.3.8 Configuring Network Diameter Network diameter stands for the maximum number of switches between two hosts in the network, representing the scale of the network. You can set the MSTP network diameter by running the command spanning-tree mstp diameternet-diameter. The parameter net-diameter is valid only to CIST. After configuration, three STP time parameters are automatically updated to comparatively better values.
Users Manual of GPL-8000 Command Purpose spanning-tree port-priorityvalue Sets the port priority in all spanning tree instances. value stands for the port priority. It can be one of the following values: 0, 16, 32, 48, 64, 80, 96, 112 128, 144, 160, 176, 192, 208, 224, 240 no spanning-tree mstpinstance-id Resumes the port priority to the default value. port-priority no spanning-tree port-priority Resumes the port priority to the default value in all spanning tree instances.
Users Manual of GPL-8000 19.2.3.12 Configuring Port Connection Type If the connection between MSTP-supported switches is the point-to-point direct connection, the switches can rapidly establish connection through handshake mechanism. When you configure the port connection type, set the port connection to the point-to-point type. The protocol decides whether to use the point-to-point connection or not according to the duplex attribute.
Users Manual of GPL-8000 The main function of the compatible mode is to create the MST area for switches and other MSTP-running switches. In actual networking, make sure that the switch has the same configuration name and the same edit number. It is recommended to configure switches running other MSTP protocols to the CIST root, ensuring that the switch enters the compatible mode by receiving message.
Users Manual of GPL-8000 19.2.3.15 Checking MSTP Information In monitor command, global configuration command or port configuration command, run the following command to check all information about MSTP. Command Purpose show spanning-tree Checks MSTP information. (Information about SSTP, PVST, RSTP and MSTP can be checked) show spanning-tree detail Checks the details of MSTP information.
Users Manual of GPL-8000 STP Optional Characteristic Configuration Configuring STP Optional Characteristic 20.1.1 STP Optional Characteristic Introduction The spanning tree protocol module of the switch supports seven additional features (the so-called optional features). These features are not configured by default.
Users Manual of GPL-8000 Figure 1.1 Port Fast Instruction: For the rapid convergent spanning tree protocol, RSTP and MSTP, can immediately bring an interface to the forwarding state, and therefore there is no need to use Port Fast feature. 20.1.1.2 BPDU Guard The BPDU guard feature can be globally enabled on the switch or can be enabled per port, but the feature operates with some differences.
Users Manual of GPL-8000 20.1.1.3 BPDU Filter The BPDU filtering feature can be globally enabled on the switch or can be enabled per interface, but the feature operates with some differences. In SSTP/PVST mode, if a Port Fast port with BPDU filter configured receives the BPDU, the features BPDU Filter and Port Fast at the port will be automatically disabled, resuming the port as a normal port. Before entering the Forwarding state, the port must be in the Listening state and Learning state.
Users Manual of GPL-8000 Figure 1.3 Uplink Fast The Uplink Fast feature adjusts to the slowly convergent SSTP and PVST. In RSTP and MSTP mode, new root port can rapidly enter the Forwarding state without the Uplink Fast function. 20.1.1.5 Backbone Fast The Backbone Fast feature is a supplement of the Uplink Fast technology.
Users Manual of GPL-8000 Figure 1.4 Backbone Fast Suppose the bridge priority of switch C is higher than that of switch B. When L1 is disconnected, switch B is selected to send BPDU to switch C because the bridge priority is used as root priority. To switch C, the information contained by BPDU is not prior to information contained by its own. When Backbone Fast is not enabled, the port between switch C and switch B ages when awaiting the bridge information and then turns to be the designated port.
Users Manual of GPL-8000 20.1.1.6 Root Guard The Root Guard feature prevents a port from turning into a root port because of receiving high-priority BPDU. The Layer 2 network of a service provider (SP) can include many connections to switches that are not owned by the SP. In such a topology, the spanning tree can reconfigure itself and select a customer switch as the root switch, as shown in Figure 17-8.
Users Manual of GPL-8000 20.1.2 Configuring STP Optional Characteristic 20.1.2.1 STP Optional Characteristic Configuration Task Configuring Port Fast Configuring BPDU Guard Configuring BPDU Filter Configuring Uplink Fast 20.1.2.2 Configuring Port Fast An interface with the Port Fast feature enabled is moved directly to the spanning-tree forwarding state without waiting for the standard forward-time delay.
Users Manual of GPL-8000 20.1.2.3 Configuring BPDU Guard When you globally enable BPDU guard on ports that are Port Fast-enabled (the ports are in a Port Fast-operational state), spanning tree shuts down Port Fast-enabled ports that receive BPDUs. In a valid configuration, Port Fast-enabled ports do not receive BPDUs.
Users Manual of GPL-8000 20.1.2.4 Configuring BPDU Filter When you globally enable BPDU filtering on Port Fast-enabled interfaces, it prevents interfaces that are in a Port Fast-operational state from sending or receiving BPDUs. The interfaces still send a few BPDUs at link-up before the switch begins to filter outbound BPDUs. You should globally enable BPDU filtering on a switch so that hosts connected to these interfaces do not receive BPDUs.
Users Manual of GPL-8000 20.1.2.6 Configuring Backbone Fast BackboneFast is a complementary technology to the UplinkFast feature, which responds to failures on links directly connected to access switches. BackboneFast optimizes the maximum-age timer, which controls the amount of time the switch stores protocol information received on an interface.
Users Manual of GPL-8000 20.1.2.8 Configuring Loop Guard You can use loop guard to prevent alternate or root ports from becoming designated ports because of a failure that leads to a unidirectional link. This feature is most effective when it is configured on the entire switched network. Loop guard operates only on interfaces that are considered point-to-point by the spanning tree. Loop Guard feature acts differently somehow in SSTP/PVST.
Users Manual of GPL-8000 Link Aggregation Configuration Configuring Port Aggregation 21.1.1 Overview Link aggregation, also called trunking, is an optional feature available on the Ethernet switch and is used with Layer 2 Bridging. Link aggregation allows logical merge of multiple ports in a single link. Because the full bandwidth of each physical link is available, inefficient routing of traffic does not waste bandwidth. As a result, the entire cluster is utilized more efficiently.
Users Manual of GPL-8000 21.1.3.2 Aggregation of Physical Port To aggregate multiple physical ports into a logical channel, you can use static aggregation or LACP protocol for negotiation.
Users Manual of GPL-8000 It is to share the data traffic according to the destination MAC address, that is, the message with same MAC address attributes is to get through a physical port. both-mac It is to share the data traffic according to source and destination MAC addresses, that is, the message with same MAC address attributes is to get through a physical port.
Users Manual of GPL-8000 PDP can be set on all SNAPs (e.g. Ethernet). 22.1.2 PDP Configuration Tasks Default PDP Configuration Setting the PDP Clock and Information Storage Setting the PDP Version Starting PDP on a Switch Starting PDP on a Port PDP Monitoring and Management 22.1.2.1 Default PDP Configuration Function Default Settings Global configuration mode This function is not enabled by default. Interface configuration mode Starts up.
Users Manual of GPL-8000 22.1.2.3 Setting the PDP Version To set the PDP version, you can run the following command in global configuration mode. Command Purpose pdp version {1|2} Setts the PDP version. 22.1.2.4 Starting PDP on a Switch To enable PDP, you can run the following commands in global configuration mode. Command Purpose pdp run Starts PDP on a switch. 22.1.2.5 Starting PDP on a Port To enable PDP on a port by default, you can run the following command in port configuration mode.
Users Manual of GPL-8000 LLDP Configuration LLDP 23.1.1 LLDP Introduction The 802.1ABlink layer discovery protocol (LLDP) at 802.1AB helps to detect network troubles easily and maintain the network topology. LLDP is a unidirectional protocol. One LLDP agent transmits its state information and functions through its connected MSAP, or receives the current state information or function information about the neighbor. However, the LLDP agent cannot request any information from the peer through the protocol.
Users Manual of GPL-8000 23.1.3.2 Configuring holdtime You can control the timeout time of transmitting the LLDP message through modifying holdtime: Run the following command in global configuration mode to configure holdtime of LLDP: Command Purpose lldpholdtimetime Configures the timeout time of LLDP. nolldpholdtime Resumes the timeout time to the default value, 120 seconds. 23.1.3.3 Configuring timer You can control the interval of the switch to transmit message by configuring the timer of LLDP.
Users Manual of GPL-8000 no lldptlv-selecttlv-type Tlvs or tlv-types which needs to be deleted include: macphy-confg management-address port-description port-vlan system-capabilities system-description system-name 23.1.3.6 Configuring the Transmission or Reception Mode LLDP can work under three modes: transmit-only, receive-only and transmit-and-receive. By default, LLDP works under the transmit-and-receive mode. You can modify the working mode of LLDP through the following commands.
Users Manual of GPL-8000 23.1.3.8 Configuring the Deletion Commands You can delete the received neighbor lists and all statistics information by running the following command in EXEC mode. Command Purpose clearlldpcounters Deletes all statistics data. clearlldptable Deletes all received neighbor information. 23.1.3.
Users Manual of GPL-8000 FlexLinkLite Configuration FlexLinkLite Configuration 24.1.1 FlexLinkLite Overview FlexLinkLite is used in a network environment to easily construct two uplink links, which back up each other. If STP is not enabled in this network environment, FlexLinkLite can avoid the loop and conduct fast switchover when a link is out of effect. Figure 1: FlexLinkLite-enabled network FlexLinkLite includes a pair of ports that back up each other.
Users Manual of GPL-8000 24.1.2 FlexLinkLite Configuration 24.1.2.1 Run the following commands to set the backup port: Run the following commands to set the FlexLinkLite backup port: Command Purpose Switch# configure Enters the global configuration mode of the switch. Switch_config# interface intf-name Enters the interface configuration mode. Intf-name: stands for the name of a port, such as G0/1 or F0/10.
Users Manual of GPL-8000 24.1.2.3 Setting the Transmission and Reception of TCN Packets Command Purpose Switch_config_intf# switchport bakcup Allows a port to transmit the TCN packets. interface tcn transmit Switch_config_intf# switchport backup Allows a port to process the TCN packets. interface tcn accept The transmit command can be enabled on the device with a configured backup port. When a backup port is switched, it will transmit the TCN packets.
Users Manual of GPL-8000 Active Backup State Preemption G0/1 G0/2 Active Up/Backup Down Role/15/0 Make the following settings to enable the TCN packets to be received: Switch# config Switch_config# interface range g0/10 , 11 Switch_config_if_range# switchport backup interface tcn accept Switch_config_if_range# exit Switch_config# 238
Users Manual of GPL-8000 BackupLink Configuration BackupLink Overview 25.1.1 Overview Link aggregation, also called trunking, is an optional feature available on the Ethernet switch and is used with Layer 2 Bridging. Link aggregation allows logical merge of multiple ports in a single link. Because the full bandwidth of each physical link is available, inefficient routing of traffic does not waste bandwidth. As a result, the entire cluster is utilized more efficiently.
Users Manual of GPL-8000 25.1.2.2 Aggregation of Physical Port To aggregate multiple physical ports into a logical channel, you can use static aggregation or LACP protocol for negotiation.
Users Manual of GPL-8000 dst-mac It is to share the data traffic according to the destination MAC address, that is, the message with same MAC address attributes is to get through a physical port. both-mac It is to share the data traffic according to source and destination MAC addresses, that is, the message with same MAC address attributes is to get through a physical port.
Users Manual of GPL-8000 EAPS Configuration Introduction of Fast Ethernet Ring Protection 26.1.1 Overview The Ethernet ring protection protocol is a special type of link-layer protocol specially designed for constructing the ring Ethernet topology. The Ethernet protection protocol can shut down one link in a complete ring topology, preventing the data loop from forming the broadcast storm. If a link is broken, the protocol immediately resumes the link that is previously shut down.
Users Manual of GPL-8000 26.1.2.1 Roles of Ring’s Nodes Each switch on an Ethernet ring is a ring node. The ring nodes are classified into master nodes and transit nodes. Only one switch on the Ethernet ring can serve as a mere master node and other switches are worked as transit nodes. Master node: It positively knows whether the ring’s topology is complete, removes loopback, control other switches to update topology information.
Users Manual of GPL-8000 26.1.2.3 Control VLAN and Data VLAN A private control VLAN is used between master node and transit node to transmit protocol packets. This control VLAN is specified by user through configuration and ring's ports are added also by user to the control VLAN, which guarantees that the protocol packets can be normally forwarded.
Users Manual of GPL-8000 26.1.3 Types of EAPS Packets The EAPS packets can be classified into the following types, as shown in table 1.1. Table 1.1 Types of EAPS packets Type of the packet Remarks Loopback detection It is transmitted by the master node to detect whether the （HEALTH） topology of the ring network is complete. LINK-DOWN Indicates that link interruption happens in the ring. This kinds of packets are transmitted by the transit node.
Users Manual of GPL-8000 26.1.4.2 Notification of Invalid Link of Transit Node After the transit port of the transit node is out of effect, the LINK-DOWN packet will be immediately transmitted by the other transit port to notify other nodes. In normal case, the packet passes through other transit nodes and finally arrives at one port of the master node. After the master node receives the LINK-DOWN packet, it thinks that the ring network is invalid.
Users Manual of GPL-8000 26.2.2 Requisites before Configuration Before configuring MEAPS, please read the following items carefully: One of important functions of the ring protection protocol is to stop the broadcast storm, so please make sure that before the ring link is reconnected all ring nodes are configured.If the ring network is connected in the case that the configuration is not finished, the broadcast storm may easily occur.
Users Manual of GPL-8000 Command Purpose Switch_config_ring#control-vlan vlan-id Configures the control VLAN. Vlan-id: ID of the control VLAN Switch_config_ring#master-node Configures the node type to be a master node. Switch_config_ring#hello-time value This step is optional. Configures the cycle for the master node to transmit the HEALTH packets. Value: It is a time value ranging from 1 to 10 seconds and the default value is 1 second. Switch_config_ring#fail-time value This step is optional.
Users Manual of GPL-8000 26.2.4.2 Configuring the Transit Node Configure a switch to be the transit node of a ring network according to the following steps: Command Purpose Switch#config Enters the switch configuration mode. Switch_config#ether-ring id Sets a node and enters the node configuration mode. id: Instance ID Switch_config_ring#control-vlan Configures the control VLAN. vlan-id Vlan-id: ID of the control VLAN Switch_config_ring#transit-node Configures the node type to be a transit node.
Users Manual of GPL-8000 show ether-ring id detail Browses the detailed information about the ring protection protocol and the port of Ethernet ring. show ether-ring id interface intf-name Browses the state of the Ether-ring port or that of the common port. 26.2.5 MEAPS configuration 26.2.5.1 Configuration Example MEAPS configuration As shown in figure 2.1, master node S1 and transit node S2 are configured as follows. As to the settings of other nodes, they are same to S2's settings.
Users Manual of GPL-8000 S1_config_g0/1#exit S1_config#interface gigaEthernet 0/3 S1_config_g0/3#ether-ring 1 secondary-port S1_config_g0/3#exit Establishes the control VLAN: S1_config#vlan 2 S1_config_vlan2#exit S1_config#interface range g0/1 , 3 S1_config_if_range#switchport mode trunk S1_config_if_range#exit Configuring switch S2: S1_config#no spanning-tree S1_config#ether-ring 1 S1_config_ring1#control-vlan 2 S1_config_ring1#transit-node S1_config_ring1#pre-forward-time 8 S1_config_ring1#exit S1_conf
Users Manual of GPL-8000 MEAPS Settings MEAPS Introduction 27.1.1 MEAPS Overview EAPS is a protocol specially applied on the link layer of the Ethernet ring. When the Ethernet ring is complete, you should prevent the broadcast storm from occurring on the data loopback. But when a link of an Ethernet ring is broken, you should enable the backup link rapidly to resume the communication of different nodes in the ring. The role of switch is specified by you through configuration.
Users Manual of GPL-8000 27.1.2 Basic Concepts of MEAPS 27.1.2.1 Domain The domain specifies the protection range of the Ethernet loopback protection protocol and is marked by ID, which consists of integers; A group of switches that support the same protection data and have the same control VLAN can form a domain after they are connected with each other. One domain may include only one ring or multiple rings that intersect each other. See the following figure.
Users Manual of GPL-8000 transmit the MEAPS packets. Each MEAPS has two control VLANs, that is, the main control VLAN and the sub control VLAN. You need to specify the main control VLAN when configuring the major ring or the sub ring. During configuration you just need to specify the main control VLAN and take a VLAN, the ID of which is 1 more than the ID of the main control VLAN, as the sub control VLAN.
Users Manual of GPL-8000 27.1.2.8 Transit Node All switches on the Ethernet except the master node can be called as the transit nodes. The transit node only checks the state of the local port of the ring, and notifies the master node of the invalid link. See the following figure, in which S1, S2, S5 and S6 are all transit nodes. 27.1.2.
Users Manual of GPL-8000 Remarks: A port can be set as the primary port or the transit port of a node and it cannot be reset. 27.1.2.12 Common Port and Edge Port The edge node and the assistant node are the places where the sub ring and the major ring intersect. As to the two ports that access the Ethernet, one is a common port, which is the public port of the sub ring and the major ring; the other is the edge port in the sub ring. The roles of the two ports are decided by users through configuration.
Users Manual of GPL-8000 27.1.2.14 Complete Flag of Ring Both the master node and the transit node can show whether the current ring network is complete through the state symbol “COMPLETE”. On the master node, only when all links of the ring network are normal, the primary port is in forwarding state and the secondary port is in blocking state can the "COMPLETE” symbol be real; on the transit node, only when its two transit ports are in forwarding state can the “COMPLETE” symbol be true.
Users Manual of GPL-8000 updates the local topology information and reports other nodes to age the MAC address table through RING-UP-FLUSH-FDB packets. As shown in the following figure, the master node, S4, transmits the HELLO packets periodically. If the loopback has no troubles, the HELLO packets will arrive at the secondary port of the master node, and the master node will block data forwarding of the data VLAN that the secondary port belongs to, preventing the loopback from happening.
Users Manual of GPL-8000 LINK_DOWN LINK_DOWN S2:Transit S1:Transit P-Primary port S-Secondary port B-Block port S3:Transit x LINK_DOWN S B P S4:Master LINK_DOWN LINK_DOWN S5:Transit S6:Transit Figure 4: Link status change notification After the transit port is resumed, it does not immediately transmit the packets of data VLANs, but enters the Pre-Forwarding state. A transit port in pre-forwarding state only transmits and receives the control packets from the control VLAN.
Users Manual of GPL-8000 S B Sub HELLO P S2:Assistant S1:Transit Major HELLO Major Ring P-Primary port S-Secondary port B-Block port S S3:Master Sub Ring B P S4:Master S5:Edge S6:Transit Figure 5: Intersection of the major ring and the sub ring When trouble occurs on the link of the major ring, and when the channel of the sub-ring protocol packets between the edge node and the assistant node are interrupted, the master node of the sub ring cannot receive the HELLO packets that the master nod
Users Manual of GPL-8000 The channel status checkup mechanism of the sub-ring protocol packet on the major ring is introduced to solve the problem about the dual homing ring. This mechanism is to monitor the status of the channel link on the major ring between the edge node and the assistant node, which requires the help of the edge node and the assistant node.
Users Manual of GPL-8000 Figure 8. Check the channel status on the major ring between the edge node and the assistant node. 2. The edge node blocks the edge port at the interruption of the channel.
Users Manual of GPL-8000 eP x Transit S eP B Assistant Transit Major Ring x S Sub Ring I P Master Sub Ring II P P-Primary port S-Secondary port Master B-Block port Edge eP-EdgePreforwarding port EDGE-HELLO P Transit S B LINK-DOWN Master Figure 9: The edge node blocks the edge port at the interruption of the channel. 3.
Users Manual of GPL-8000 Fast Ethernet Ring Protection Configuration 27.2.1 Requisites before Configuration Before configuring MEAPS, please read the following items carefully: One of important functions of the ring protection protocol is to stop the broadcast storm, so please make sure that before the ring link is reconnected all ring nodes are configured. If the ring network is connected in the case that the configuration is not finished, the broadcast storm may easily occur.
Users Manual of GPL-8000 27.2.2 MEAPS Configuration Tasks Configuring the Master Node Configuring the Transit Node Configuring the Edge Node and the Assistant Node Configuring the Ring Port Browsing the State of the Ring Protection Protocol 27.2.3 Fast Ethernet Ring Protection Configuration 27.2.3.1 Configuring the Master Node Configure a switch to be the master node of a ring network according to the following steps: Command Purpose Switch#config Enters the switch configuration mode.
Users Manual of GPL-8000 Remarks: During configuration, both the major ring and the sub-ring should be set to have the same control VLAN—the control VLAN of the major ring. After this configuration is successfully set, the control VLAN of major ring and the control VLAN of sub-ring are created on the major ring, and at the same time the sub-ring control VLAN is created on the sub-ring and the major-ring control VLAN is forbidden on the sub-ring. 27.2.3.
Users Manual of GPL-8000 27.2.3.3 Configuring the Edge Node and the Assistant Node Configure a switch to be the master node of a ring network according to the following steps: Command Purpose Switch# config Enters the switch configuration mode. Sets a node and enters the node configuration mode. id1: instance ID of a node id2: instance ID of a domain (omitted when it is Switch_config#mether-ring id1 domainid2 0) Switch_config_ring1#edge-node[assistant- It is an obligatory step.
Users Manual of GPL-8000 It is an obligatory step. Sets the control VLAN and establishes VLAN “id” and VLAN “id-1”. Switch_config_ring1#control-vlanvlan-id vlan-id: ID of the control VLAN It is an obligatory step. You can complete the ring configuration even if not using this command, but the system cannot enter the single-ring networking mode.
Users Manual of GPL-8000 27.2.3.6 Browsing the State of the Ring Protection Protocol Run the following command to browse the state of the ring protection protocol: Command Purpose show mether-ring Browses the summary information about the ring protection protocol and the ports of ring. show mether-ring id1 domain id2 Browses the summary information about the designated ring protection protocol and the ports of ring.
Users Manual of GPL-8000 Figure 11: Complete state 27.3.2.1 Link-Down The link-down state of the ring is decided by the polling mechanism, the notification of the link state change and the channel status checkup mechanism of the sub-ring protocol packet. Surely the link-down state of the ring is also advocated as to only one ring. When some link in the ring is in link-down state, the ring changes from the compete state to the troubled state, that is, the link-down state.
Users Manual of GPL-8000 After the master node receives the link-down packet, its state will be changed to the Failed state and at the same time the secondary port will be opened, the FDB table will be refreshed, and the RING-DOWN-FLUSH-FDB packets will be transmitted from two ports for notifying all nodes.
Users Manual of GPL-8000 Figure 14: Recovery of the ring’s link and the shift of the transit node to preforwarding The transit port can transmit the control packet in preforwarding state, so the secondary port of the master node can receive the hello packet from the primary port. Hence, the master node shifts its state to Complete, blocks the secondary port and transmits the RING-UP-FLUSH-FDB packet from the primary port.
Users Manual of GPL-8000 27.3.3 MEAPS configuration 27.3.3.1 Configuration Example MEAPS configuration As shown in figure 2.1, master node S1 and transit node S2 are configured as follows. As to the settings of other nodes, they are the same as S2's settings.
Users Manual of GPL-8000 Switch_config_ring1#transit-node Switch_config_ring1#major-ring Switch_config_ring1#control-vlan 2 The following commands are used to set the time related parameters: Switch_config_ring1#pre-forward-time 12 Exits from the node configuration mode: Switch_config_ring1#quit The following commands are used to set the transit port of node 1: Switch_config#interface gigaEthernet 0/1 Switch_config_g0/1#mether-ring 1 domain 1 transit-port Switch_config_g0/1#switchport mode trunk Switch_
Users Manual of GPL-8000 Switch_config_ring1#control-vlan 2 The following commands are used to set the time related parameters: Switch_config_ring1#pre-forward-time 12 Exits from the node configuration mode: Switch_config_ring1#quit The following commands are used to set the transit port of node 1: Switch_config#interface gigaEthernet 0/1 Switch_config_g0/1#mether-ring 1 domain 1 transit-port Switch_config_g0/1#switchport mode trunk Switch_config_g0/1#quit Switch_config#interface gigaEthernet 0/2 Switch
Users Manual of GPL-8000 Switch_config_ring4#hello-time 4 Switch_config_ring4#fail-time 12 Exits from the node configuration mode: Switch_config_ring4#quit The following commands are used to set the primary port and secondary port of node 4: Switch_config#interface gigaEthernet 0/1 Switch_config_g0/1#mether-ring 4 domain 1 primary-port Switch_config_g0/1#switchport mode trunk Switch_config_g0/1#quit Switch_config#interface gigaEthernet 0/2 Switch_config_g0/2#mether-ring 4 domain 1 secondary-port Switch_c
Users Manual of GPL-8000 Configuring switch S6: The following commands are used to set the major-ring master node, node 1: Switch_config#mether-ring 1 domain 1 Switch_config_ring1#master-node Switch_config_ring1#major-ring Switch_config_ring1#control-vlan 2 The following commands are used to set the time related parameters: Switch_config_ring1#hello-time 4 Switch_config_ring1#fail-time 12 Exits from the node configuration mode: Switch_config_ring1#quit The following commands are used to set the transit
Users Manual of GPL-8000 Configuring switch S7: The following commands are used to set the major-ring transit node, node 1: Switch_config#mether-ring 1 domain 1 Switch_config_ring1#transit-node Switch_config_ring1#major-ring Switch_config_ring1#control-vlan 2 The following commands are used to set the time related parameters: Switch_config_ring1#pre-forward-time 12 Exits from the node configuration mode: Switch_config_ring1#quit The following commands are used to set the transit port of node 1: Switch_c
Users Manual of GPL-8000 Configuring switch S8: The following commands are used to set the sub-ring transit node, node 4: Switch_config#mether-ring 4 domain 1 Switch_config_ring4# transit -node Switch_config_ring4#sub-ring Switch_config_ring4#control-vlan 2 The following commands are used to set the time related parameters: Switch_config_ring4#pre-forward-time 12 Exits from the node configuration mode: Switch_config_ring4#quit The following commands are used to set the transit port of node 4: Switch_con
Users Manual of GPL-8000 ELPS Configuration ELPS Overview 28.1.1 Overview If DHCP snooping is enabled in a VLAN, the DHCP packets which are received from all distrusted physical ports in a VLAN will be legally checked. The DHCP response packets which are received from distrusted physical ports in a VLAN will then be dropped, preventing the faked or mis-configured DHCP server from providing address distribution services.
Users Manual of GPL-8000 Setting an Interface to an ARP-Trusting Interface ARP monitoring is not enabled on those trusted interfaces. The interfaces are distrusted ones by default. Run the following commands in interface configuration mode. Command Purpose arp inspection trust Sets an interface to an ARP-trusting interface. no arp inspection trust Resumes an interface to an ARP-distrusting interface.
Users Manual of GPL-8000 Configuring the TFTP Server for Backing up Interface Binding After the switch configuration is rebooted, the previously-configured interface binding will be lost. In this case, there is no binding relationship on this interface. After source IP address monitoring is enabled, the switch rejected forwarding all IP packets. After the TFTP server is configured for interface binding backup, the binding relationship will be backed up to the server through the TFTP protocol.
Users Manual of GPL-8000 Configuring Interface Binding Manually If a host does not obtain the address through DHCP, you can add the binding item on an interface of a switch to enable the host to access the network. You can run no ip source binding MAC IP to delete items from the corresponding binding list. Note that the manually-configured binding items have higher priority than the dynamically-configured binding items.
Users Manual of GPL-8000 switch#show ip dhcp-relay snooping ip dhcp-relay snooping vlan 3 ip arp inspection vlan 3 DHCP Snooping trust interface: FastEthernet0/1 ARP Inspect interface: FastEthernet0/11 The following shows the binding information about dhcp-relay snooping: switch#show ip dhcp-relay snooping binding Hardware Address IP Address a8-f7-e0-26-23-89 192.2.2.
Users Manual of GPL-8000 UDLD Configuration Unidirectional Link Detection (UDLD) 29.1.1 UDLD Overview UDLD is a L2 protocol that monitors the physical location of the cable through the devices which are connected by optical cable or twisted-pair, and detects whether the unidirectional link exists. Only when the connected device supports UDLD can the unidirectional link be detected and shut down. The unidirectional link can cause a lot of problems, including the STP topology ring.
Users Manual of GPL-8000 29.1.1.2 Running Mechanism UDLD is a L2 protocol running on the LLC layer, which uses 01-00-0c-cc-cc-cc as its destination MAC address. SNAP HDLC is similar to 0x0111. When it runs with layer-1 FEFI and automatic negotiation, the completeness of a link in the physical layer and the logical link layer can be checked.
Users Manual of GPL-8000 29.1.1.5 Echo Detection The echo mechanism is the basis of the detection algorithm. Once a UDLD device learns a new neighbor or another synchronization request from an asynchronous neighbor, it will start or restart the detection window of the local terminal and transmit an echo message for full agreement. Because all neighbors are demanded a corresponding action, the echo sender expects an echos message.
Users Manual of GPL-8000 29.1.3.2 Enabling or Disabling the UDLD Interface In interface configuration mode, run the following command to enable the UDLD function of an interface. Command Purpose udld port Enables the UDLD module of an interfaces in some [aggressive] mode. If the aggressive parameter is not entered, the UDLD function of the interface is enabled in normal mode; if the aggressive parameter is entered, the UDLD function of the interface is enabled in aggressive mode.
Users Manual of GPL-8000 It is used to display the running states of the UDLD modules of the current interfaces.
Users Manual of GPL-8000 Switch#show udld interface f0/1 Interface FastEthernet0/1 --Port enable administrative configuration setting: Enabled Port enable operational state: Enabled Current bidirectional state: Bidirectional Current operational state: Advertisment Message interval: 15 Time out interval: 5 Entry 1 --Expiration time: 42 Cache Device index: 1 Device ID: Port ID: CAT0611Z0L9 FastEthernet0/1 Neighbor echo 1 device: Neighbor echo 1 port: S35000202 FastEthernet0/1 Message interval: 15
Users Manual of GPL-8000 Switch_config#udld enable Switch_config# Entering the show command on managed switch A: Switch_config#show udld interface g0/1 Interface g0/1 --Port enable administrative configuration setting: Port enable operational state: Current bidirectional state: Current operational state: Enabled Enabled Unknown Detection Message interval: 15 Time out interval: 1 Entry 1 --Expiration time: 44 Cache Device index: 1 Device ID: Port ID: XGS-6350-12X8TR FastEthernet0/1 Neighbor echo 1 d
Users Manual of GPL-8000 Device ID: Port ID: XGS-6350-12X8TR FastEthernet0/1 Neighbor echo 1 device: Neighbor echo 1 port: XGS-6350-12X8TR FastEthernet0/1 Message interval: 15 Time out interval: 7 UDLD Device name: XGS-6350-12X8TR Switch_config# Switch_config#show udld interface f0/1 Interface FastEthernet0/1 --Port enable administrative configuration setting: Port enable operational state: Enabled Enabled Current bidirectional state: Bidirectional Current operational state: Advertisment Me
Users Manual of GPL-8000 IGMP-Snooping Configuration IGMP-snooping Configuration 30.1.1 IGMP-snooping Configuration Task The task of IGMP-snooping is to maintain the relationships between VLAN and group address and to update simultaneously with the multicast changes, enabling layer-2 switches to forward data according to the topology structure of the multicast group.
Users Manual of GPL-8000 is configured. IGMP-snooping can run on up to 16 VLANs. To enable IGMP-snooping on VLAN3, you must first run no ip IGMP-snooping to disable IGMP-snooping of all VLANs, then configure ipIGMP-snooping VLAN 3 and save configuration. 30.1.1.2 Adding/Deleting Static Multicast Address of VLAN Hosts that do not support IGMP can receive corresponding multicast message by configuring the static multicast address.
Users Manual of GPL-8000 30.1.1.4 Configuring the Function to Filter Multicast Message Without Registered Destination Addresss When multicast message target fails to be found (DHL, the destination address is not registered in the switch chip through igmp-snooping), the default process method is to send message on all ports of VLAN.Through configuration, you can change the process method and all multicast messages whose destination addresses are not registered to any port will be dropped.
Users Manual of GPL-8000 30.1.1.6 Configuring Response Time Timer of IGMP-Snooping The response time timer is the upper limit time that the host reports the multicast after IGMP inquirer sends the query message. If the report message is not received after the timer ages, the switch will delete the multicast address.
Users Manual of GPL-8000 30.1.1.8 Monitoring and Maintaining IGMP-Snooping Perform the following operations in management mode: Command Description show ip igmp-snooping Displays IGMP-snooping configuration information. show ip igmp-snooping timer Displays the clock information of IGMP-snooping. show ip igmp-snooping groups Displays information about the multicast group of IGMP-snooping. show ip igmp-snooping statistics Displays statistics information about IGMP-snooping.
Users Manual of GPL-8000 Display IGMP-snooping timer: switch#show ip igmp-snooping timers vlan 1 router age : 251 Indicating the timeout time of the router age timer vlan 1 multicast address 0100.5e00.0809 response time : 1 Indicating the period from when the last multicast group query message is received to the current time; if no host on the port respond when the timer times out, the port will be deleted..
Users Manual of GPL-8000 30.1.1.9 IGMP-Snooping Configuration Example Figure 1 shows network connection of the example. Configuring Switch (1) Enable IGMP-snooping of VLAN 1 connecting Private Network A. Switch_config#ip igmp-snooping vlan 1 (2) Enable IGMP-snooping of VLAN 2 connecting Private Network B.
Users Manual of GPL-8000 IGMP-Proxy Configuration IGMP-proxy Configuration 31.1.1.1 IGMP-proxy Configuration Tasks The IGMP Proxy allows the VLAN where the multicast user is located to receive the multicast source from other VLANs. The IGMP Proxy runs on layer 2 independently without other multicast routing protocols.
Users Manual of GPL-8000 31.1.1.3 Adding/Deleting VLAN Agent Relationship Run the following commands in global configuration mode. Command Purpose ip igmp-proxyagent-vlan avlan_map Adds the agent VLAN (avlan_map) to client-vlan map manage the represented vlan cvlan_map (cvlan_map). Deletes the agent relationship.
Users Manual of GPL-8000 All entries are to be displayed if no filtration conditions are specified. static: only display the entries of static multicast cache. [ no ] debug ip Enables or disables the IGMP-proxy debug switch. igmp-proxy [error | event | packet] The following example shows how to display the forwarding caches of IGMP proxy: Switch# show ip igmp-proxy mcache Codes: '+' synchronization, '-' deleted, 'S' static '^' unsynchronization Item 1: Group 225.1.1.2 +(192.168.213.
Users Manual of GPL-8000 MLD-Snooping Configuration MLD-Snooping Configuration 32.1.1 IPv6 Multicast Overview The task of MLD snooping is to maintain the forwarding relationship of IPv6 group addresses in VLAN and synchronize with the change of the multicast group, enabling the data to be forwarded according to the topology of the multicast group.
Users Manual of GPL-8000 32.1.2.2 Enabling/Disabling the Solicitation of Hardware Forward of Multicast Group Run the following commands in global configuration mode. Command Purpose ipv6 mld-snooping solicitation Enables the solicitation of hardware forward of multicast group. no ipv6 mld-snooping Disables the solicitation of hardware solicitation forward of multicast group. 32.1.2.3 Adding/Canceling the Static Multicast Address of VLAN Run the following commands in global configuration mode.
Users Manual of GPL-8000 32.1.2.5 Setting Response Time Timer of MLD-Snooping Run the following commands in global configuration mode. Command Operation ipv6 mld-snooping timer Sets the response time of MLD-Snooping. response-timetimer_value no ipv6 mld-snooping timer Resumes the default response time of MLD-Snooping. response-time The value of the timer cannot be set too small, or the multicast communication may be unstable. The default response time of MLD snooping is 15 seconds. 32.1.2.
Users Manual of GPL-8000 32.1.2.8 Monitoring and Maintaining MLD-Snooping Multicast Run the following commands in EXEC mode: Command Operation show ipv6 mld-snooping Displays the configuration of MLD-Snooping. show ipv6 mld-snooping timer Displays the clock of MLD-Snooping. show ipv6 mld -snooping groups Displays the multicast group of MLD-Snooping.
Users Manual of GPL-8000 The multicast group of MLD-Snooping is displayed blow: #show ipv6 mld--snooping groups Vlan Group Type Port(s) ---- --------------- ---- ------------------------------------1 FF02: : 1: FF32: 1B9B MLD 1 FF02: : 1: FF00: 2 MLD G2/23 1 FF02: : 1: FF00: 12 MLD G2/23 1 FF02: : 1: FF13: 647D MLD 2 FF02: : 1: FF00: 2 2 FF02: : 1: FF61: 9901 MLD MLD G2/23 G2/23 G2/22 G2/22 The timer of MLD-Snooping is displayed blow: #show ipv6 mld-snooping timers vlan 1
Users Manual of GPL-8000 The MLD-Snooping proxying is displayed below: #show ipv6 mld-snooping mac Vlan Mac Ref Flags ---- --------------- ---- -----1 3333: 0000: 2 3333: FF02: ff61: : 1: FF02: 1 3333: FF02: 1 3333: FF02: 1 3333: FF02: 2 3333: FF02: 1 3333: 1 ff00: : 1: ff00: : 1: ff13: : 1: ff32: : 1: ff00: : 1: ff00: 12 9901 1 0 FF61: 1 3333: 0000: 1 3333: 0001 9901 0002 12 0002 1 0 FF00: 2 0012 1 0 FF00: 12 647d 1 0 FF13: 647D 1b9b 1 0 FF32: 1B9B 0002 1 0 FF00: 2 0001 1 2 3333: f
Users Manual of GPL-8000 OAM Configuration OAM Configuration 33.1.1 OAM Overview EFM OAM of IEEE 802.3ah provides point-to-point link trouble/performance detection on the single link. However, EFM OAM cannot be applied to EVC and so terminal-to-terminal Ethernet monitoring cannot be realized. OAM PDU cannot be forwarded to other interfaces. Ethernet OAM regulated by IEEE 802.3ah is a relatively slow protocol.
Users Manual of GPL-8000 Remote trouble indication It is difficult to check troubles in the Ethernet, especially the case that the network performance slows down while physical network communication continues. OAM PDU defines a flag domain to allow Ethernet OAM entity to transmit the trouble information to the peer. The flag can stand for the following emergent link events: Link Fault: The physical layer detects that the reception direction of the local DTE has no effect.
Users Manual of GPL-8000 Capacity Active Mode Passive Mode Initializing the Ethernet OAM discovery process Yes No Responding to the OAM discovery initialization process Yes Yes Transmitting the Information OAM PDU packet Yes Yes Permitting to transmit the Event Notification OAM PDU Yes Yes Yes No Allowing to transmit Variable Response OAM PDU packet Yes Yes Allowing to transmit the Loopback Control OAM PDU Yes No Yes，but the peer Yes packet Allowing to transmit the Variable Request
Users Manual of GPL-8000 Length/Type: Always adopts the Type encoding. The protocol type of the Ethernet OAM packet is 0x8809. Subtype: The subtype of the protocol for Ethernet OAM packets is 0x03.
Users Manual of GPL-8000 33.1.3 OAM Configuration Tasks 33.1.3.1 Enabling OAM on an Interface Run the following command to enable OAM: Procedure Command Purpose Step1 config Enters the global configuration mode. Step2 interface intf-type intf-id Enters the interface configuration mode. Step3 ethernet oam Enables Ethernet OAM on an interface.
Users Manual of GPL-8000 33.1.3.2 Enabling Remote OAM Loopback The procedure to enable remote loopback on an interface is shown in the following table: Procedure Command Purpose Step1 config Enters the global configuration mode. Step2 interface intf-type intf-id Enters the interface configuration mode.
Users Manual of GPL-8000 number. It ranges between 0 and 65535 and its default value is 1. The window parameter is used to configure the window size of the round-query period. The unit of the window size is the number of the 100M signal. The window size ranges between 10 and 600 on a 1000M Ethernet interface and its default value is 10 in this case, while the window size ranges between 1 and 60 on a 100M Ethernet interface and its default value is 1 in this case.
Users Manual of GPL-8000 The unit of the window size is the number of the 14881 frames. The window size ranges between 100 and 6000 on a 1000M Ethernet interface and its default value is 100 in this case, while the window size ranges between 10 and 600 on a 100M Ethernet interface and its default value is 10 in this case.
Users Manual of GPL-8000 Step9 Enables the local link monitoring. When the ethernet link-monitor on link monitoring function is supported, the local link monitoring is automatically enabled. 33.1.3.4 Configuring the Trouble Notification From Remote OAM Entity You can configure an error-disable action on an interface. The local interface will enter the errdisabled state in the following cases: 1. The high threshold of a normal link event on a local interface is exceeded. 2.
Users Manual of GPL-8000 receive the Dying Gasp packet. When the local port enters the errdisabled state or is closed by the administrator or the OAM function of the local port is closed by the manager, the Dying Gasp packet will be transmitted to the remote terminal that connects the local port. 33.1.3.
Users Manual of GPL-8000 Switch_config_g0/1#ethernet oam Switch_config_g0/1#ethernet oam mode passive Switch_config_g0/1#ethernet oam link-monitor frame threshold low 10 Switch_config_g0/1#ethernet oam link-monitor frame window 30 Switch_config_g0/1#show ethernet oam configuration int g0/1 GigaEthernet0/1 General ------Admin state : Mode : enabled passive PDU max rate : PDU min rate 10 packets/second : Link timeout 1 seconds/packet : 1 seconds High threshold action: no action Remote Failure
Users Manual of GPL-8000 Errored Frame Period Event Window : 100 * 14881 frames Low threshold High threshold : : 1 error frame(s) none Errored Frame Seconds Summary Event Window : 60 seconds Low threshold High threshold : : 1 error second(s) none Errored CRC Frames Event Window : 1 seconds Low threshold High threshold : : 10 error frame(s) none Configuring switch B: Switch_config_g0/1#ethernet oam Switch_config_g0/1#show ethernet oam statistics link-monitor int g0/1 GigaEthernet0/1 Local
Users Manual of GPL-8000 Errored Frame Event: No errored frame event happened yet. Errored Frame Period Event: No errored frame period event happened yet. Errored Frame Seconds Summary Event: No errored frame seconds summary event happened yet. Errored CRC Frames Event: No errored CRC frame event happened yet.
Users Manual of GPL-8000 CFM and Y1731 Configuration Overview 34.1.1 Stipulations 34.1.1.1 Format Stipulation in the Command Line Syntax Meaning Stands for the keyword in the command line, which stays unchanged and must be entered without Bold any modification. It is presented as a bold in the command line. Stands for the parameter in the command line, which must be replaced by the actual value. It must be {italic} presented by the italic in the brace.
Users Manual of GPL-8000 Command Purpose ethernet cfm md mdnf {string} Adds a maintenance domain whose mdn [level<0-7> | name is char_string. creation | Note: sit | The system enters the maintenance ip] domain configuration mode after the maintenance domain is added. 34.2.3.
Users Manual of GPL-8000 34.2.4 CFM Maintenance 34.2.4.1 Using the Loopback Function Configuration mode: EXEC Command Purpose ethernet cfm loopback mdnf {string} Uses a designated MEP to conduct mdn manf {string} man loopback towards itself. mepid <1-8191> mac number <1-64> 34.2.4.
Users Manual of GPL-8000 Enabling Frame Delay Measurement Displaying the Information About OAM Protocol 34.3.1.1 Specifying an MEP to Forward AIS Frame Run the following commands specify an MEP to transmit AIS frames: Procedure Command Purpose Step1 config Enters the global configuration mode. Step2 ethernet y1731 ais-mep Designates the transmission interval of AIS timer time packets. <1> -- 1 frame per second <2> -- 1 frame per minute The default transmission value is 1 second.
Users Manual of GPL-8000 show ethernet y1731 interface Displaying MEP and MIP Configurations on interface-name a Port interface-namestands for port identifier. show ethernet y1731 meglist The above-mentioned command is used to [MEGID ] display the configuration of all MEG or the detailed configuration about a certain MEG. MEGID is the name of to-be-displayed MEG. show ethernet y1731 miplist The above-mentioned command is used to display the information about all configured MIPs.
Users Manual of GPL-8000 DHCP-Snooping Configuration DHCP-Snooping Configuration 35.1.1 DHCP-Snooping Configuration Tasks DHCP-Snooping is to prevent the fake DHCP server from providing the DHCP service by judging the DHCP packets, maintaining the binding relationship between MAC address and IP address. The L2 switch can conduct the DAI function and the IP source guard function according to the binding relationship between MAC address and IP address.
Users Manual of GPL-8000 35.1.1.2 Enabling DHCP-Snooping in a VLAN If DHCP snooping is enabled in a VLAN, the DHCP packets which are received from all distrusted physical ports in a VLAN will be legally checked. The DHCP response packets which are received from distrusted physical ports in a VLAN will then be dropped, preventing the faked or mis-configured DHCP server from providing address distribution services.
Users Manual of GPL-8000 35.1.1.5 Setting an Interface to an ARP-Trusting Interface ARP monitoring is not enabled on those trusted interfaces. The interfaces are distrusted ones by default. Run the following commands in interface configuration mode. Command Purpose arp inspection trust Sets an interface to an ARP-trusting interface. Resumes an interface to an no arp inspection trust ARP-distrusting interface. 35.1.1.
Users Manual of GPL-8000 35.1.1.8 Configuring the TFTP Server for Backing up Interface Binding After the switch configuration is rebooted, the previously-configured interface binding will be lost. In this case, there is no binding relationship on this interface. After source IP address monitoring is enabled, the switch rejected forwarding all IP packets. After the TFTP server is configured for interface binding backup, the binding relationship will be backed up to the server through the TFTP protocol.
Users Manual of GPL-8000 35.1.1.11 Configuring Interface Binding Manually If a host does not obtain the address through DHCP, you can add the binding item on an interface of a switch to enable the host to access the network. You can run no ip source binding MAC IP to delete items from the corresponding binding list. Note that the manually-configured binding items have higher priority than the dynamically-configured binding items.
Users Manual of GPL-8000 The following shows the information about the DHCP snooping configuration: switch#show ip dhcp-relay snooping ip dhcp-relay snooping vlan 3 ip arp inspection vlan 3 DHCP Snooping trust interface: FastEthernet0/1 ARP Inspect interface: FastEthernet0/11 The following shows the binding information about dhcp-relay snooping: switch#show ip dhcp-relay snooping binding Hardware Address IP Address a8-f7-e0-26-23-89 192.2.2.
Users Manual of GPL-8000 35.1.1.14 Example of DHCP-Snooping Configuration The network topology is shown in figure 1. Figure 1 Configuring Switch (1) Enable DHCP snooping in VLAN 1 which connects private network A. Switch_config# ip dhcp-relay snooping Switch_config#ip dhcp-relay snooping vlan 1 (2) Enable DHCP snooping in VLAN 2 which connects private network B.
Users Manual of GPL-8000 MACFF Configuration MACFF Settings 36.1.1 Configuration Tasks MACFF is to isolate downlink ports of the same VLAN in a switch from exchanging inter-access packets, enabling these packets to be allocated to the default gateway of client through DHCP server and then to downlink ports.
Users Manual of GPL-8000 36.1.1.2 Enabling MACFF in VLAN If MACFF is enabled in a VLAN, the DHCP packets which are received from all DHCP-snooping untrusted physical ports in a VLAN will be legally checked. If the destination IP address is the IP address of any DHCP client, on which the physical port that receives the ARP packets is located, these ARP packets will be dropped; if these are ARP response packets, these packets will also be dropped.
Users Manual of GPL-8000 36.1.1.5 Specifying a Physical Port to Shut down MACFF If you specify a physical port to close MACFF, packets on this port will not be isolated and ARP packets will not be listened. Run the following commands in physical interface configuration mode. Command Operation macff disable Specifies a physical port to shut down MACFF. no macff disable Specifies a physical port to enable MACFF (it is enabled by default). In default settings, the ports are allowed to enable MACFF. 36.
Users Manual of GPL-8000 (2) Enable MACFF in VLAN2, which connects private network B. The default gateway allocated by DHCP server is 192.168.2.2 (If necessary, the default gateway can also be 192.168.2.1). Switch_config#arp 192.168.2.2 a8: f7: e0: ea: 74: ee Switch_config#ip dhcp-relay snooping vlan 2 Switch_config#macff vlan 2 enable (3) Sets the ports that connect DHCP server, default gateway and other ARs respectively to be trusted.
Users Manual of GPL-8000 IEEE 1588 Transparent Clock Configuration Task List for IEEE1588 Transparent Clock Configuration Enabling the Transparent Clock Creating the Transparent Clock Port Configuring the Link Delay Calculation Mode Configuring the Forwarding Mode of Sync Packets Configuring the Domain Filtration Function Setting the Transmission Interval of Pdelay_Req Packets Tasks for IEEE1588 Transparent Clock Configuration Enabling the Transparent Clock The IEEE1588 transparent
Users Manual of GPL-8000 37.3.1 Creating the Transparent Clock Port The transparent clock can include multiple PTP ports to connect the master and slave clock respectively. Run the following commands in port configuration mode to create the PTP ports: Command Purpose ptp start l2 Creates the PTP L2 port. Ptp start l3 Creates the PTP L3 port. Run the following command in port configuration mode to delete the PTP ports: Command Purpose no ptp start Delete the PTP port. 37.3.
Users Manual of GPL-8000 Command Purpose ptp sync-mechanism store-forward Sets the forwarding method of Sync packets to store-forward. To switch the forwarding mode over to straight forwarding, run the following command in global configuration mode: Command Purpose ptp sync-mechanism Sets the forwarding method of Sync straight-forward packets to store-forward. 37.3.
Users Manual of GPL-8000 PTP TC Configuration Example See the following figure: TC MASTER G0/12 SLAVE G0/10 MASTER here stands for the master clock, which is a L2 PTP device. SLAVE here stands for the master clock, which is a L3 PTP device. TC stands for a switch that supports transparent clock. The master clock connects port g0/12 of the switch, while the slave clock connects port g0/10 of the switch. MASTER, TC and SLAVE are all working in P2P mode. Ports g0/10 and G0/12 belong to VLAN1.
Users Manual of GPL-8000 Layer 2 Tunnel Protocol Configuration Configuring Layer-2 Protocol Tunnel 38.1.1 Introduction Layer-2 protocol tunnel allows users between two sides of the switch to transmit the specified layer 2 protocol on their own network without being influenced by the relevant layer 2 software module of the switch. The switch is a transparent media for users. 38.1.
Users Manual of GPL-8000 Loopback Detection Configuration Setting Loopback Detection 39.1.1 Introduction of Loopback Detection The loopback in a network may trigger the repeated transmission of broadcast, multicast or unicast packets, wasting network resources and even leaving network breakdown.
Users Manual of GPL-8000 RESERVE 2 Reserved field SYSMAC 6 MAC address of the switch SEQUENCE 4 Sequence ID of packet, which is generated randomly by the system before the packet is transmitted DiID 4 Port ID, which is the ID of the global port of 85 Series End 2 0x0000, end character 39.1.
Users Manual of GPL-8000 39.1.3.3 Configuring a Port to Conduct Loopback Detection in Specified VLAN If you set loopback detection in a specified VLAN, a port shall transmit multiple detection packets with specified VLAN tag regularly and the port can transmit up to 10 detection packets with specified VLAN tag. One point to be noted is that the port must exist in the specified VLAN, or the configuration takes no effect.
Users Manual of GPL-8000 cannot be forwarded to other ports. The port is then in protocol down state and its MAC address table list ages. Nolearn: means to forbid the port to learn MAC addresses. When loopback is detected, the port will not conduct MAC address learning any more and at the same time the MAC address table of this port ages. shutdown: Means to close the port.
Users Manual of GPL-8000 39.1.3.9 Displaying the Configuration of Port Loopback Detection Command Purpose show loopback-detection interface intf Displays the configuration of port loopback detection. This command is mainly used to display port loopback detection, including the port timer and the information about transmitted and received packets. 39.1.4 Configuration Example Figure 1.1 Loopback detection configuration As shown in figure 1.
Users Manual of GPL-8000 Configuration of interface GigaEthernet0/2: switchport mode trunk Configuration of interface GigaEthernet0/3: switchport mode trunk Global Configuration vlan1-3 Switch S3: Configuration of interface GigaEthernet0/1: switchport pvid 3 If loopback exists in the network that S3 connects and the PVID of the interface, on which loopback exists, is 3, the packets will be transmitted to interface g0/1 of S1 and S1 will block interface g0/1 after finding loopback.
Users Manual of GPL-8000 QoS Configuration If you care to use your bandwidth and your network resources efficiently, you must pay attention to QoS configuration. QoS Configuration 40.1.1 QoS Overview 40.1.1.1 40.1.1.1 QoS Concept In general, the switch works in best-effort served mode in which the switch treats all flows equally and tries its best to deliver all flows. Thus if congestion occurs all flows have the same chance to be discarded.
Users Manual of GPL-8000 2. Differentiated service As to the differentiated service, if a special service is to be transmitted in a network, each packet should be specified with a corresponding QoS tag. The switch uses this QoS rule to conduct classification and complete the intelligent queuing. The QoS of the switch provides Strict Priority (SP), Weighted Round Robin (WRR), Deficit Round Robin (DRR) and First-Come-First-Served (FCFS). 40.1.1.
Users Manual of GPL-8000 40.1.1.4 Weighted Random Early Detection Congestion avoidance and traditional packet loss mechanism Excessive congestion may inflict damage on network resources, so network congestion should be resolved through some measures. Congestion avoidance is a sort of flow control method of positively dropping packets and regulating network flows to solve network overload via network resource monitoring.
Users Manual of GPL-8000 40.1.2 QoS Configuration Task List In general, ONU will try its best to deliver each packet and when congestion occurs all packets have the same chance to be discarded. However, in reality different packets have different importance and the comparatively important packets should get the comparatively good service.
Users Manual of GPL-8000 40.1.3.2 Setting the Bandwidth of the CoS Priority Queue The bandwidth of priority queue means the bandwidth distribution ratio of each priority queue, which is set when the schedule policy of the CoS priority queue is set to WRR/DRR. This series of switches has 8 priority queues in total. If this command is run, the bandwidth of all priority queues on all interfaces are affected. This command validates only when the queue schedule policy is set to WRR or DRR.
Users Manual of GPL-8000 40.1.3.4 Configuring the Minimum and Maximum Bandwidths of CoS Priority Queue The minimum and maximum bandwidths of CoS priority queue can be modified through configuration. All the flows with a bandwidth less than the configured minimum bandwidth shall not be dropped, but the flows with a bandwidth bigger than the configured maximum bandwidth shall all be dropped. Enter the privileged mode. Command Purpose config Enters the global configuration mode.
Users Manual of GPL-8000 [no] cos default cos Sets the CoS value of the received untagged frames. cos stands for the corresponding CoS value. exit Goes back to the global configuration mode. exit Goes back to the EXEC mode. write Saves the settings. 40.1.3.7 Setting the CoS Priority Queue of a Port When a priority queue is set on a L2 port, the priority queue will be used by the L2 port; otherwise, you should conduct the configuration of a global CoS priority queue.
Users Manual of GPL-8000 40.1.3.9 Establishing the QoS Policy Mapping Flow classification means to identify a class of packets with certain attributes by applying a certain regulation and take designated actions towards to these packets. Enter the privileged mode and then run the following commands to establish a new QoS policy mapping. Command Purpose config Enters the global configuration mode. [no]policy-mapname Enters the configuration mode of the QoS policy map.
Users Manual of GPL-8000 Command Purpose config Enters the global configuration mode. [no]policy-map name Enters the configuration mode of the QoS policy map. name stands for the name of the policy. description description-text Sets the description of the QoS policy. description-text stands for the text to describe the policy. classify {any | cos cos | Matches up with any packet. icosicos | vlanvlanid | Configures the matched COS value which ivlanivlanid | ranges between 0 and 7.
Users Manual of GPL-8000 40.1.3.12 Setting the Actions of the Match-up Data Flow of the QoS Policy Mapping The actions to define the data flow mean to take corresponding actions to a data flow with compliance of the filtration rule, which include bandwidth limit, drop, update, etc. Enter the privileged mode and run the following commands to set the action of a policy, matching up the data flow. The action will replace the previous settings. Command Purpose config Enters the global configuration mode.
Users Manual of GPL-8000 session-value is used to set mirroring, which ranges from 1 to 4. queue-value is used to set the mapping queue, which ranges from 1 to 8. Redirects the egress port of the matched flow. stat-packet stands for the number of packets under statistics. stat-byte means the number of bytes under statistics. vlanID is used to replace or add the outer vlan ID, which ranges from 1 to 4094. exit Goes back to the global configuration mode. exit Goes back to the EXEC mode. 40.1.3.
Users Manual of GPL-8000 40.1.4 QoS Configuration Example 40.1.4.1 Example for Applying the QoS Policy on a Port The following example shows how to set packet’s cos to 2 on port g0/2: ip access-list extended ipacl permit ip 192.168.20.2 255.255.255.255 192.168.20.210 255.255.255.
Users Manual of GPL-8000 DoS Attack Prevention Configuration DoS Attack Prevention Configuration 41.1.1 DoS Attack Overview 41.1.1.1 Concept of DoS Attack The DoS attack is also called the service rejection attack. Common DoS attacks include network bandwidth attacks and connectivity attacks. DoS attack is a frequent network attack mode triggered by hackers. Its ultimate purpose is to break down networks to stop providing legal users with normal network services.
Users Manual of GPL-8000 41.1.2 DoS Attack Prevention Configuration Task List As to global DoS attack prevention configuration, you configure related sub-functions and then the switch drops corresponding DoS attack packets. Hence, the bandwidth of the switch is guaranteed not to be used up. DoS attack prevention configuration tasks are shown below: Configuring Global DoS Attack Prevention Displaying All DoS Attack Prevention Configuration 41.1.3 DoS Attack Prevention Configuration Tasks 41.1.3.
Users Manual of GPL-8000 41.1.3.2 Displaying All DoS Attack Prevention Configurations You can display the Dos attack prevention configurations through the show command. Run the following command in EXEC mode to display the configured DoS attack prevention functions. Command Purpose show dos Displays Dos attack prevention configuration. 41.1.
Users Manual of GPL-8000 Attack Prevention Configuration Attack Prevention Configuration 42.1.1 Overview To guarantee the reasonable usage of network bandwidth, our 6508 series switches provide the function to prevent vicious traffic from occupying lots of network bandwidth. In light of current attack modes, our 6508 series switches can limit the hosts that send lots of ARP, IGMP or IP message in a period of time and do not provide any service to these hosts.
Users Manual of GPL-8000 42.1.3.3 Starting up the Attack Prevention Function After all parameters for attack prevention are set, you can start up the attack prevention function. Note that small parts of processor source will be occupied when the attack prevention function is started. Command Description filter enable Starts up the attack prevention function. Use the no filter enable command to disable the attack prevention function and remove the block to all attack sources. 42.1.3.
Users Manual of GPL-8000 Network Protocol Configuration Configuring IP Addressing 43.1.1 IP Introduction 43.1.1.1 IP Internet Protocol (IP) is a protocol in the network to exchange data in the text form. IP has the functions such as addressing, fragmenting, regrouping and multiplexing. Other IP protocols (IP protocol cluster) are based on IP. As a protocol working on the network layer, IP contains addressing information and control information which are used for routing.
Users Manual of GPL-8000 43.1.1.3 Choosing routing protocol It is a complex procedure to choose routing protocol. When you choose the routing protocol, consider the following items: Size and complexity of the network Whether the length-various network need be supported Network traffic Safety requirements Reliability requirements Strategy Others Details of the above items are not described in the section.
Users Manual of GPL-8000 43.1.3 Configuring IP Address 43.1.3.1 Configuring IP Address at Network Interface The IP address determines the destination where the IP message is sent to. Some IP special addresses are reserved and they cannot be used as the host IP address or network address. Table 1 lists the range of IP addresses, reserved IP addresses and available IP addresses. Type A B C D E Address or Range State 0.0.0.0 Reserved 1.0.0.0 to 126.0.0.0 Available 127.0.0.0 Reserved 128.0.0.
Users Manual of GPL-8000 43.1.3.2 Configuring Multiple IP Addresses on Network Interface Each interface can possess multiple IP addresses, including a primary IP address and multiple subordinate IP addresses. You need to configure the subordinate IP addresses in the following two cases: If IP addresses in a network segment are insufficient. For example, there are only 254 available IP addresses in a certain logical subnet, however, 300 hosts are needed to connect the physical network.
Users Manual of GPL-8000 address of the device or the local address of the link layer. The process on how to obtain the local address of the link layer from the IP address is called as Address Resolution Protocol (ARP). The process on how to obtain the IP address from the local address of the link layer is called as Reverse Address Resolution (RARP). Our system adopts address resolution in two types: ARP and proxy ARP. The ARP and proxy ARP are defined in RFC 860 and 1027 respectively.
Users Manual of GPL-8000 Activating proxy ARP The system uses the proxy ARP (defined by RFC 1027) to obtain the host’s MAC address on other networks for the hosts without corresponding routes.
Users Manual of GPL-8000 43.1.3.4 Configuring Routing Process You can configure one or multiple routing protocols according to your actual network requirements. The routing protocol provides information about the network topology. The details about configuring IP routing protocols such as BGP, RIP and OSPF are shown in the following sections. 43.1.3.5 Configuring Broadcast Message Handling The destination addresses of the broadcast message are all the hosts on a physical network.
Users Manual of GPL-8000 Run the following command in interface configuration mode to allow message forwarding and to specify the destination address: Run… To… ip helper-addressaddress Allow to forward the UDP broadcast message and to specify the destination address. Run the following command in global configuration mode to specify protocols to be forwarded: Run… To… ip forward-protocol udp [port] Specify which interfaces’ UDP protocols will be forwarded. 43.1.3.
Users Manual of GPL-8000 43.1.3.7 IP Addressing Example The following case shows how to configure the IP address on interface VLAN 11. interface vlan 11 ip address 202.96.2.3 255.255.255.0 Configuring NAT 43.2.1 Introduction The Internet faces two key problems: insufficient IP address space and route measurement. Network Address Translation (NAT) is an attribute.
Users Manual of GPL-8000 global address. When the message reaches the domain, NAT transforms the unique global address to the local address. If multiple interfaces exist, each NAT must have the same the transfer table. If no address is available, the software cannot distribute an address and NAT will drop the message and returns an ICMP message indicating the host cannot be reached. The switch with NAT configured should not publish the local network.
Users Manual of GPL-8000 43.2.2 NAT Configuration Task List Before configuring any NAT, you must know the range of the inside local address and inside global address. The NAT configuration task list is shown as follows: Translating inside source address Reloading inside global address Translating the overlapping address Providing TCP load balance Changing translation timeout time and limiting the number of connections Monitoring and maintaining NAT 43.2.3 NAT Configuration Task 43.
Users Manual of GPL-8000 (4) Host B receives the message through inside global IP destination address (DA) 2.2.2.2 and responds to host 1.1.1.1. (5) When the routing switch receives message of the inside global IP address, it takes the inside global address as a keyword to query the NAT table, translates the address to the inside local address of host 1.1.1.1, and forwards message to host 1.1.1.1. (6) Host 1.1.1.1 receives the message and continues the session.
Users Manual of GPL-8000 Only those transferable addresses can be contained in the access list (remember that an implicit item “deny all” exists at the end of each access list). The random access list may lead to unexpected results. Refer to section 2.4.1 “Dynamic Inside Source Address Transfer Example” for details. 43.2.3.2 Reloading Inside Global Address Multiple local addresses use one global address through the routing switch. All the addresses can be stored in the inside global address pool.
Users Manual of GPL-8000 transfers the address to the inside local address 1.1.1.1 and forwards the packet to host 1.1.1.1. (6) Host 1.1.1.1 receives the packet and continues the session. The routing switch performs step 2 and step 5 for each packet. Run the following commands in global configuration mode to configure the reloading of the inside global address: Run… To… ip nat pool name start-ip end-ip Define a to-be-distributed global address netmask pool according to requirements.
Users Manual of GPL-8000 43.2.3.3 Translating Overlapping Addresses When an internal local address is the same as the to-be-connected outside address, address overlapping occurs. The following figure shows how NAT translates the overlapping addresses. Figure 43-3 Network Condition Where NAT Translates Overlapping Addresses The routing switch performs the following steps when translating the overlapping addresses: (1) The user of host 1.1.1.1 uses domain name to send instructions for connecting host C.
Users Manual of GPL-8000 1. Configuring static transfer Run the following commands in global configuration mode to configure static source address translation: Run… To… ip nat outside source static global-ip Creates static translation between outside local-ip local address and outside global address. interface type number Specify the inside interface. ip nat inside Label the interface as one to connect the inside network. interfacetype number Specify the outside interface.
Users Manual of GPL-8000 43.2.3.4 Providing TCP Load Balance Another fashion of using NAT is unrelated to the Internet address. Your organization may have multiple hosts to communicate with a frequently used host. In this case, you can use NAT technology to create a virtual host in the inside network, helping the load balance among actual hosts. You need to replace the destination address of the access list with the address in the cycle address pool.
Users Manual of GPL-8000 Run... To... ip nat pool name start-ip end-ip Define an address pool containing the addresses netmask of real hosts. ip access-list standard Define an access table permitting addresses of access-list-name permit source virtual hosts. [source-mask] ip nat inside destination list Create a dynamic inside target transfer access-list-name pool name mechanism and confirm the previously defined access list. interface type number Specify the inside interface.
Users Manual of GPL-8000 ip nat translation Set the timeout time of the ICMP NAT icmp-timeoutseconds (the default time is 60 seconds). ip nat translation Set the timeout time of the NAT in the syn-timeoutseconds TCP SYN state (the default time is 60 seconds). ip nat translation finrst-timeout Change the TCP FIN/RST timeout seconds value (the default value is 60 seconds). There are three methods to limit the NAT connections.
Users Manual of GPL-8000 Run one of the following commands in management mode to display the transfer information: Run... To... show ip nat translations [verbose] Display active translation. show ip nat statistics Display translation statistics. 43.2.4 NAT Configuration Example 43.2.4.1 Dynamic Inside Source Transfer Example The following example shows how to transfer all source addresses (192.168.1.0/24) that matches access list a1 to one address in the net-208 pool whose address range is from 171.
Users Manual of GPL-8000 ip nat inside ! ip access-list standard a1 permit 192.168.1.0 255.255.255.0 ！ 43.2.4.3 Example to overlapping address transfer The following example shows that other users in the Internet are legally using the address in the local network. Extra transfer is needed to access the outside network. The net-10 address pool is an outside local IP address pool.
Users Manual of GPL-8000 interface vlan11 ip address 192.168.15.17 255.255.255.240 ip nat inside ! ip access-list standard a2 permit 192.168.15.1 255.255.255.0 Configuring DHCP 43.3.1 Introduction The Dynamic Host Configuration Protocol (DHCP) provides some parameters of network configuration fro hosts in the Internet. DHCP will be described in RFC 2131. The most important function of DHCP is to distribute IP addresses on the interface. DHCP supports three mechanisms of distributing IP addresses.
Users Manual of GPL-8000 43.3.1.3 DHCP Terminology DHCP is based on the Server/Client model. The DHCP-server and DHCP-client exist in the DHCP running conditions. DHCP-Server It is a device to distribute and recycle the DHCP-related sources such as IP addresses and lease time. DHCP-Client It is a device to obtain information from the DHCP server for devices of the local system to use, such as IP address information.
Users Manual of GPL-8000 3. Configuring DHCP parameters You can adjust the parameters for the DHCP protocol interaction according to requirements. Run the following commands in global configuration mode: Run... To... ip dhcp client minlease seconds Specify the minimum lease time. ip dhcp client retransmit count Specify the times of resending protocol message. ip dhcp client select seconds Specify the interval for SELECT. The command is optional when you perform operations to obtain an IP address.
Users Manual of GPL-8000 43.3.3 Configuring DHCP Server 43.3.3.1 DHCP Server Configuration Tasks Enabling DHCP server Disabling DHCP server Configuring ICMP detection parameter Configuring database storage parameter Configuring the address pool of DHCP server Configuring the parameter for the address pool of DHCP server Monitoring DHCP server Clearing information about DHCP server 43.3.3.2 Configuring DHCP Server 43.3.3.
Users Manual of GPL-8000 43.3.3.6 Configuring database storage parameter To configure the interval when the address distribution information is stored in the agent database, run the following command in global configuration mode. Run... To... ip dhcpd write-time time Specify the interval at which the address distribution information is stored in the agent database. 43.3.3.
Users Manual of GPL-8000 Run the following command to configure the lease time of the address that is distributed to the client: Run... To... lease {days [hours][minutes] | infinite } Configure the lease time of the address that is distributed to the client. Run the following command to configure the netbios server address that is distributed to the client: Run... To... netbios-name-serverip-addr… Configure the netbios server address that is distributed to the client.
Users Manual of GPL-8000 43.3.3.11 DHCP Server Configuration Example In the following example, the timeout time of the ICMP detection packet is set to 200ms; Address pool 1 is configured and the DHCP server is enabled. ip dhcpd ping timeout 2 ip dhcpd pool 1 network 192.168.20.0 255.255.255.0 range 192.168.20.211 192.168.20.215 domain-name my315 default-router 192.168.20.1 dns-server 192.168.1.3 61.2.2.10 netbios-name-server 192.168.20.
Users Manual of GPL-8000 Run… To… ip unreachables Enable the function to send an ICMP-unreachable message. 2. Sending ICMP redirection message Sometimes the host selects an unfavorable route. After a routing switch on the route receives a message from the host, it is to check the routing table and then forward the message through the message-receiving interface to another routing switch that is in the same network segment as the host.
Users Manual of GPL-8000 If a link in the route is disconnected, the message is to take other routes. Its minimum MTU may be different from the original route. The routing switch then notifies the source host of the MTU of the new route. The IP message should be packaged with the minimum MTU of the route as much as possible. In this way, the segmentation is avoided and fewer messagesare sent, improving the communication efficiency. Relevant hosts must support the IP route MTU detection.
Users Manual of GPL-8000 7. Allowing IP fast exchange IP fast exchange uses the route cache to forward the IP message. Before the switch forwards message to a certain destination, its system will check the routing table and then forward the message according to a route. The selected route will be stored in the routing cache of the system software. If latter message will be sent to the same host, the switch will forward latter message according to the route stored in the routing cache.
Users Manual of GPL-8000 43.4.1.2 Configuring Performance Parameters 1. Setting the wait time for TCP connection When the routing switch performs TCP connection, it considers that the TCP connection fails if the TCP connection is not created during the wait time. The routing switch then notifies the upper-level program of the failed TCP connection. You can set the wait time for TCP connection. The default value of the system is 75 seconds.
Users Manual of GPL-8000 show ip cache [prefix mask] [type Display the routing cache that is used for number] fast IP message exchange. show ip sockets Display all socket information about the routing switch. show ip traffic Display statistics data about IP protocol. show tcp Display information about all TCP connection states. Briefly display information about TCP show tcp brief connection states. show tcp statistics Display TCP statistics data.
Users Manual of GPL-8000 terminates the match regulations. The order of the conditions is, therefore, important. If no regulations match, the address is declined. Use the access list by following the following steps: (1) Create the access list by designating the access list name and conditions. (2) Apply the access list to the interface. 43.4.2.2 Creating Standard and Extensible IP Access List Use a character string to create an IP access list.
Users Manual of GPL-8000 After the access list is originally created, any part that is added later can be put at the end of the list. That is to say, you cannot add the command line to the designated access list. However, you can run no permit and no deny to delete items from the access list. When you create the access list, the end of the access list includes the implicit deny sentence by default. If the mask is omitted in the relative IP host address access list, 255.255.255.
Users Manual of GPL-8000 43.4.2.4 Extensible Access List Example In the following example, the first line allows any new TCP to connect the destination port after port 1023. The second line allows any new TCP to connect the SMTP port of host 130.2.1.2. ip access-list extended aaa permit tcp any 130.2.0.0 255.255.0.0 gt 1023 permit tcp any 130.2.1.2 255.255.255.255 eq 25 interface vlan 10 ip access-group aaa in Another example to apply the extensible access list is given.
Users Manual of GPL-8000 43.4.3 Configuring IP Access List Based on Physical Port 43.4.3.1 Filtering IP Message 43.4.3.2 Filtering IP Message Filtering message helps control the movement of packet in the network. The control can limit network transmission and network usage through a certain user or device. To make packets valid or invalid through the crossly designated interface, our routing switch provides the access list.
Users Manual of GPL-8000 Run the following command in global configuration mode to create an extensible access list. Run… To… ip access-list extended name Use a name to define an extensible IP access list. {deny | permit} Designate one or multiple permit/deny protocolsourcesource-maskdes conditions in extensible access list tination destination-mask configuration mode. The previous setting [precedenceprecedence] decides whether the packet is approved or [tostos] [established] disapproved.
Users Manual of GPL-8000 the software will send the packet. If the access list does not permit the address, the software drops the packet and returns an ICMP unreachable message. If the designated access list does not exist, all packets allows to pass. 43.4.3.5 Extensible Access List Example 1.
Users Manual of GPL-8000 IP ACL Application Configuration Applying the IP Access Control List 44.1.1 Applying ACL on Ports After an ACL is established, it can be applied on one or many slots or globally. Run the following command in global or port configuration mode: Command Purpose config Enters the global configuration mode. interface g0/1 Enters the to-be-configured port.
Users Manual of GPL-8000 Routing Configuration Configuring RIP 45.1.1 Overview The section describes how to configure the RIP. For details about RIP commands, refer to the setion “RIP Commands” in “Network Protocol Command Reference”. The routing information protocol (RIP) is still a commonly used interior gateway protocol (IGP), mainly applied to small-scale networks of the same type. RIP is a classical distance vector routing protocol, which appears in RFC 1058.
Users Manual of GPL-8000 Monitoring and maintaining RIP 45.1.3 Configuring RIP Tasks 45.1.3.1 Starting up RIP Run the following command in global configuration mode to activate RIP: Command Purpose Activates the RIP routing process and enters the switch routerrip configuration mode. networknetwork-number Specifies the network number related to the RIP routing process. 45.1.3.2 Allowing RIP Routing to Update the Single-Program Broadcast Normally, RIP is a broadcast protocol.
Users Manual of GPL-8000 45.1.3.5 Specifying the RIP Version Number The RIP-2 of our switches supports authentication, PIN management, routing summary, CIDR and VLSM. By default, the switch receives RIP-1 and RIP-2, but the switch only sends RIP-1. Through configuration, the switch can receive and send only the packet RIP-1, or only the packet RIP-2.
Users Manual of GPL-8000 ip rip authentication simple Configures the interface to use the plain authentication. ip rip password [string] Configures the PIN of the plain authentication. Run the following commands in interface configuration mode to configure the MD5 authentication of the RIP: Command Purpose ip rip authentication message-digest Configures the interface to use the MD5 authentication. ip rip message-digest-key [key-ID] Configures the PIN and ID of the md5 md5 [key] authentication.
Users Manual of GPL-8000 45.1.3.9 Configuring the Maximum Number of Routes By default, the local RIP routing table contains up to 1024 routes. When the route number exceeds the maximum number, you cannot add new routes to the routing table. At the same time, the system notifies you that the route number has already reached the maximum number set for the routing table.
Users Manual of GPL-8000 Command Purpose show ip rip Display the current state of the RIP protocol. show ip rip database Displays all RIP routes. show ip rip protocol Displays all RIP-relative information. Run the following commands in management mode to track routing protocol information: Command debug ip rip database debug ip rip protocol Purpose Tracks information about adding RIP route to the routing table, deleting route from the routing table and changing route. Tracks RIP message. 45.1.
Users Manual of GPL-8000 The router makes routing decision according to the information provided by the directly-connecting neighbor; The router provides its routing information to its directly-connecting neighbor.However, BEIGRP has more advantages compared with the distance vector protocol: BEIGRP saves all routes sent by all neighbors in the topology, not just saving the best route received up to now.
Users Manual of GPL-8000 45.2.3 BEIGRP Configuration Task 45.2.3.1 Activating BEIGRP Perform the following operations to create a BEIGRP process: Command Purpose router beigrpas-number Adds a BEIGRP process in global configuration mode. networknetwork-number Adds network segment to the BEIGRP network-mask process in route configuration mode. After the above configuration is complete, BEIGRP starts to run on all interfaces of the network segment.
Users Manual of GPL-8000 45.2.3.5 Disabling Automatic Route summary The automatic collection of BEIGRP is different from that of other dynamic routing protocols. It complies with the following regulations: When multiple networks in a BEIGRP process are defined, a summary route of the defined network is generated if at least one subnet of the network is in the BEIGRP topology table. The created summary route is oriented to the Null0 interface has the minimum distance of all subnets.
Users Manual of GPL-8000 45.2.3.7 Configuring Forwarding Route When BEIGRP forwards other types of routes, BEIGRP complies with the following regulations: If the present route is static or directly-connected, the command default-metric need not be configured and other compound distance parameters (bandwidth, delay, reliability, effective load and MTU) are directly obtained from the current port.
Users Manual of GPL-8000 The router sends the hello multiple-program broadcast packet on the interfaces where BEIGRP runs. Each BEIGRP-supporting router receives these multiple-program broadcast packets. Therefore, all neighbors can be found. The Hello protocol uses two timers to detect the disappearance of neighbors. The hello interval specifies the transmission frequency of the BEIGRP hello message on the interface of the router.
Users Manual of GPL-8000 Run the following commands to display all BEIGRP statistics information: Command Purpose show ip beigrp interfaces [interface] Displays the information about BEIGRP [as-number] interface. show ip beigrp neighbors[as-number Displays the information about BEIGRP | interface] neighbors. show ip beigrp topology [as-number | Displays the information about BEIGRP all-link | summary | active] topology table. 45.2.
Users Manual of GPL-8000 MD5 authentication are supported. Routing interface The configurable interface parameters include the output parameters cost, resending interval, interface output delay, the priority of the switch, the interval to judge the shutdown of the switch, the interval of the hello packet and the authentication PIN. Virtual link The virtual link is supported. NSSA area See RFC 1587. OSPF in the See RFC 1793. on-demand circuit 45.3.
Users Manual of GPL-8000 Command router ospfprocess-id networkaddressmaskareaarea-id Purpose Activates the OSPF routing protocol and enters the switch configuration mode. Configures the running interface of OSPF and the relevant interface domain ID. 45.3.3.2 Configuring Interface Parameters of OSPF You are allowed to modify OSPF parameters of the interface according to actual requirements. When you modify a parameter, make sure that the parameter on all switches of the interconnected network is same.
Users Manual of GPL-8000 45.3.3.3 Configuring OSPF in Different Physical Networks OSPF divides the physical media of the network into the following classes: Broadcast network (Ethernet, Token Ring, FDDI) Non-broadcast and multi-access network (SMDS, Frame Relay, X.25) Point-to-point network (HDLC, PPP) The X.25 and frame-relay network provides optional broadcast capability. You can configure the OSPF to run in the broadcast network through the map command.
Users Manual of GPL-8000 45.3.3.5 Configuring OSPF Area Parameters The configurable area parameters include authentication, stub area and the value of the default routing summary. The authentication is based on the password protection. Stub area is an area which exterior routes are not sent to. ABR generates a default exterior route to enter the stub area, enabling stub area to connect exterior networks out of the automatic area.
Users Manual of GPL-8000 45.3.3.8 Generating Default Route ASBR requires generating a default route to enter the OSPF route area. When you configure the switch to distribute the route to the OSPF area, the route automatically becomes ASBR. However, default ASBR does not generate the default route to enter the OSPF routing area. Run the following command in switch configuration mode to force ASBR to generate the default route.
Users Manual of GPL-8000 45.3.3.11 onfiguring Timer for Routing Calculation You can configure the delay between when OSPF receives the topology change information and when the calculation is started. You also can configure the interval of continuously calculating SPF. Run the following command in switch configuration mode. Command Purpose timersdelaydelaytime Sets the delay of routing calculation in an area. timersholdholdtime Sets the minimum interval of routing calculation in an area. 45.3.3.
Users Manual of GPL-8000 show ip ospf neighbor Displays information about neighbors of OSPF according to the interface. debug ip ospf adj Monitors the procedure of establishing OSPF adjacency. debug ip ospf events Monitors the OSPF interface and neighboring events. debug ip ospf flood Monitors the flooding of OSPF database. debug ip ospf lsa-generation Monitors the LSA generation of OSPF. debug ip ospf packet Monitors the OSPF message.
Users Manual of GPL-8000 45.3.4.2 OSPF Route and Route Distribution Configuration Example OSPF demands to exchange information among internal switches, ABR and ASBR. In the minimum configuration, the OSPF-based switch can work with default parameter settings. There is no authentication demand. The following are three configuration examples: The first example shows basic OSPF commands. The second example shows how to configure internal routing switches, ABR and ASBR in an automatic system.
Users Manual of GPL-8000 ip address 131.108.20.5 255.255.255.0 Interface vlan11 is in area 2: interface vlan 11 ip address 131.108.1.5 255.255.255.0 Interface vlan12 is in area 2: interface vlan 12 ip address 131.108.2.5 255.255.255.0 Interface vlan13 is in area 3: interface vlan 13 ip address 131.109.10.5 255.255.255.0 Interface vlan14 is in area 0: interface vlan 14 ip address 131.109.1.1 255.255.255.0 Interface vlan 100 is in area 0: interface vlan 100 ip address 10.1.0.1 255.255.0.
Users Manual of GPL-8000 45.3.4.2.3 Complex Configuration of Interior Switches, ABR and ASBR The following example shows how to configure multiple switches in a single OSPF automatic system. The following figure shows the network topology of the configuration example. Configure switches according to the previous figure. RTA: interface loopback 0 ip address 202.96.207.81 255.255.255.0 ! interface vlan 10 ip address 192.168.10.81 255.255.255.0 ! interface vlan 10 ip address 192.160.10.81 255.255.255.
Users Manual of GPL-8000 ! interface vlan 11 ip address 192.160.20.82 255.255.255.0 ! router ospf 192 network 192.168.20.0 255.255.255.0 area 1 network 192.168.10.0 255.255.255.0 area 1 ! RTC: interface loopback 0 ip address 202.96.208.83 255.255.255.252 ! interface vlan 10 ip address 192.163.20.83 255.255.255.0 ! interface vlan 11 ip address 192.160.20.83 255.255.255.0 ! router ospf 192 network 192.168.20.0 255.255.255.0 area 1 network 192.163.20.0 255.255.255.0 area 0 ! 45.3.4.
Users Manual of GPL-8000 The following are basic configuration tasks: (1) Configuring the address range for Ethernets 0 to 3 (2) Activating OSPF on every interface (3) Setting the authentication password for each area and network (4) Setting the link state value and other interface parameters Use one area command respectively to set authentication parameters and stub area. You can use one command to set these parameters. Set backbone area (Area 0).
Users Manual of GPL-8000 router ospf 192 network 192.168.0.0 255.255.255.0 area 0 network 192.168.20.0 255.255.255.0 area 192.168.20.0 network 192.168.30.0 255.255.255.0 area 192.168.30.0 network 192.168.40.0 255.255.255.0 area 192.168.40.0 area 0 authentication simple area 192.168.20.0 stub area 192.168.20.0 authentication simple area 192.168.20.0 default-cost 20 area 192.168.20.0 authentication simple area 192.168.20.0 range 36.0.0.0 255.0.0.0 area 192.168.30.0 range 192.42.110.0 255.255.255.
Users Manual of GPL-8000 EGP is different from IGP with its enhanced control capability. BGP provides multiple optional methods to control the routes. Use neighbor-based access-list, aspath-list and prefix-list to filter the route. Or use port-based access-list and prefix-list to filter the route or the Nexthop attribute of the route. Use route-map to modify BGP route's attributes such as MED, Local Preference and Weight.
Users Manual of GPL-8000 45.4.2 BGP Configuration Task 45.4.2.1 Configuring Basic BGP Characteristic BGP configuration tasks can be classified into two groups: basic tasks and advanced tasks. The first two items of basic tasks are mandatory for BGP configuration. Other items in basic tasks and advanced tasks are optional. 45.4.2.1.
Users Manual of GPL-8000 45.4.2.1.3 Configuring BGP Soft Reconfiguration In general, BGP neighbors exchange all routes only when the connection is created; they then exchange only the changed routes later. If the configured routing policy is changed, you must clear the BGP sessions before you apply the changed routing policy to the received routes. However, clearing the BGP session can disable the high-speed cache and seriously undermine network running.
Users Manual of GPL-8000 45.4.2.1.5 Configuring Synchronization Between BGP and IGPs If an AS sends information at the third AS through your AS, the internal routing state of your AS must be the same as the routing information that the AS broadcasts to other ASs. For example, before all routers in your AS learn the routes through IGP, your AS may receive routing information from your BGP that some routers cannot route.
Users Manual of GPL-8000 45.4.2.1.7 Configuring Neighbor-Based BGP Routing Filtration The router software provides the following methods to filter the BGP routes of the designated neighbor: (1) Use the Aspath list filter with the commands ip aspath-list and neighbor filter-list. Command Purpose ip aspath-listaspaths-list-name {permit | deny} Defines a BGP-related access table. as-regular-expression router bgpautonomous-system Enters the router configuration mode.
Users Manual of GPL-8000 For details, refer to the section “Example for Port-Based BGP Route Filtration”. 45.4.2.1.9 Cancelling BGP-Updated Next Hop Processing You can cancel the next hop processing for the neighbor's BGP update. The configuration is useful in the non-broadcast networks such as frame relay or X.25. In frame relay or X.25, BGP neighbors cannot directly access all other neighbors in the same IP subnet.
Users Manual of GPL-8000 aggregate network/len route-map Generates the designated aggregation address through the map-name route map. Refer to the section “BGP Route Aggregation Example”. 45.4.2.2.
Users Manual of GPL-8000 neighbor {ip-address } Applies the route map. route-mapaccess-list-name {in | out } Perform the following operations to configure the community-attribute–based routing information filtration: Command Purpose ip community-list standard | Defines the community list. expendedcommunity-list-name {permit | deny} communtiy-expression route-map map-name Configures the route map. sequence-number {deny | permit} match community-list-name Configures the matching regulations.
Users Manual of GPL-8000 45.4.2.2.5 Configuring Route Reflector Another method to reduce IBGP connections is to configure the route reflector. The peers in the route reflector are divided into two groups: client peers and other routers in the AS (non-client peers). The route reflector reflects the routes between the two groups. The route reflector and the client peers consists of a cluster. The non-client peers must be fully connected. The client peers need not be fully connected.
Users Manual of GPL-8000 45.4.2.2.7 Configuring multihop external peers The external peers must be in the directly-connected networks by default. Run the following command to configure multihop external peers: Command Purpose neighbor {ip-address } ebgp-multihop Sets the BGP neighbor to the multihop ttl external peers. 45.4.2.2.8 Setting BGP route management distance The management distance is a unit to measure the priority of routing protocols.
Users Manual of GPL-8000 45.4.3 Monitoring and Maintaining BGP The administrator can browse and delete the content in the routing table or other databases in BGP. The value of the detailed statistics information can be displayed. 45.4.3.1 Clearing BGP routing table and database Run the following command in management mode to perform relative tasks about clearing high-speed cache, table or BGP database. Command Purpose clear ip bgp * Resets all BGP connections.
Users Manual of GPL-8000 show ip bgp neighbors [address] Displays the routes learned from a [received-routes | routes | special BGP neighbor. advertised-routes] show ip bgp paths Displays all BGP path information in the database. show ip bgp summary Displays the state of all BGP connections. 45.4.3.3 Tracking BGP information To locate the fault and resolve the problem, you need to observe the BGP connection establishment, route receiving and route forwarding by tracking the BGP information.
Users Manual of GPL-8000 router bgp 100 neighbor 1.1.1.1 route-map freddy out ! ip aspath-list abc permit ^690_ ip aspath-list xyz permit .
Users Manual of GPL-8000 45.4.4.3 Example for neighbor-based BGP path filtration The following is an example for neighbor-based BGP path filtration. The route that gets through the access list test1of as-path obtains a weight value 100. Only the route that gets through the access list test2 of as-path can be sent to neighbor 193.1.12.10. Similarly, the route that gets through the access list test3 can be accepted by neighbor 193.1.12.10: router bgp 200 neighbor 193.1.12.10 remote-as 100 neighbor 193.1.12.
Users Manual of GPL-8000 ! ip prefix-list max24 seq 5 permit 0.0.0.0/0 ge 8 le 24 ! In the following example, the router filters all the routes and only accepts the routes whose prefix length ranges from 8 to 24: router bgp 12 filter * in prefix-list max24 ip prefix-list max24 seq 5 permit 0.0.0.0/0 ge 8 le 24 The following example shows that route whose prefix length is no more than 24 is permitted in network 192/8: ip prefix-list abc permit 192.0.0.
Users Manual of GPL-8000 router bgp 100 aggregate 193.0.0.0/8 The following example shows how to create the aggregation route 193.*.*.* and how to constrain more detailed routes from broadcasting to all neighbors: router bgp 100 aggregate 193.0.0.0/8 summary-only 45.4.4.7 BGP route reflector configuration example The following is an example for the route reflector configuration. RTA, RTB, RTC and RTE belongs to the same autonomous system AS200.
Users Manual of GPL-8000 neighbor 4.0.0.2 remote-as 100 /*RTD EBGP*/ network 11.0.0.0/8 ! ip route 11.0.0.0 255.0.0.0 2.0.0.12 RTB configuration: interface vlan110 ip address 3.0.0.2 255.0.0.0 ! router bgp 200 neighbor 3.0.0.1 remote-as 200 /*RTA IBGP*/ network 13.0.0.0/8 ! ip route 13.0.0.0 255.0.0.0 3.0.0.12 RTC configuration: interface vlan110 ip address 2.0.0.2 255.0.0.0 ! router bgp 200 neighbor 2.0.0.1 remote-as 200 /*RTA IBGP*/ network 12.0.0.0/8 ! ip route 12.0.0.0 255.0.0.0 2.0.0.
Users Manual of GPL-8000 neighbor 5.0.0.1 remote-as 200 /*RTA IBGP*/ network 15.0.0.0/8 ! ip route 15.0.0.0 255.0.0.0 5.0.0.12 45.4.4.8 BGP autonomous system alliance example The following figure shows an autonomous system alliance configuration. RTA, RTB and RTC create the IBGP connection. RTA, RTB and RTC belong to the private autonomous system 65010. RTE belongs to the private autonomous system 65020. RTE and RTA establish the EBGP connection in the autonomous system alliance.
Users Manual of GPL-8000 neighbor 5.0.0.2 remote-as 65020 /*RTE EBGP*/ neighbor 4.0.0.2 remote-as 100 /*RTD EBGP*/ RTB configuration: interface vlan110 ip address 1.0.0.2 255.0.0.0 ! interface vlan111 ip address 3.0.0.1 255.0.0.0 ! router bgp 65010 bgp confederation identifier 200 bgp confederation peers 65020 neighbor 1.0.0.1 remote-as 65010 /*RTA IBGP*/ neighbor 3.0.0.2 remote-as 65010/*RTC IBGP*/ RTC configuration: interface vlan110 ip address 2.0.0.2 255.0.0.0 ! interface vlan111 ip address 3.0.0.
Users Manual of GPL-8000 RTE configuration: interface vlan110 ip address 5.0.0.2 255.0.0.0 ! router bgp 65020 bgp confederation identifier 200 bgp confederation peers 65010 neighbor 5.0.0.1 remote-as 65010 /*RTA EBGP*/ 45.4.4.9 Example for route map using BGP community attribute In the following example, the command route map set-community is used to update the outgoing routes of neighbor 171.69.232.50. The special community attribute value no-export can be set through the route of the access list aaa.
Users Manual of GPL-8000 ip aspath-list test1 permit 70$ ip aspath-list test2 permit .* In the following example, Set the MED and the local priority of the route from neighbor 171.69.232.55 according to the community attribute value. Set MED of all routes that match the community list com1 to 8000. These routes may contain routes with community value “100 200 300” and “900 901”. These routes may have other attribute values. Set the local priority of the routes which send the community list com2 to 500.
Users Manual of GPL-8000 at the next hop, the switch first checks whether the item of destination A exists in the IP cache of hardware. If the item exists, the message will be forwarded through hardware. If the item does not exist, the message is sent to CPU and then processed through software. IP hardware subnet routing items include the destination subnet, mask, IP address of the next hop, interface and so on.
Users Manual of GPL-8000 The ARP of the next-hop IP address does not exist, the system will send an ARP request and temporarily designate the next-hop routing item as CPU. After the system receives the ARP response, the system then update the next hop to the user-designating address. If the VLAN interface where the next hop resides is found different from the configured interface during the ARP response, the next hop of the route is designated as CPU. Users then need to correct the configuration.
Users Manual of GPL-8000 by the hardware without the operation of CPU. The packets forwarded by IP-PBR have the highest priority and only those packets unmatched with IP-PBR rule are forwarded to CPU. The current IP-PBR supports the IP ACL policy and the next-hop IP address policy. When multiple next hops are configured, the first effect next hop is chosen. IP-PBR also supports equivalent routing that is realized by the switch chip. Hardware equivalent routing needs no extra configuration.
Users Manual of GPL-8000 47.1.2 ISIS Configuration Task List To configure IP-PBR, do as follows: Create ACL; Create a route map; Apply the route map on a port; To create an ACL, run the following command globally: Command Remarks ip access-list standard net1 Enters the ACL configuration mode and defines ACL. To create a route map, run the following commands globally: Command Remarks route-map pbr Enters the route map configuration mode. match ip addressaccess-list Configures the match-up policy.
Users Manual of GPL-8000 All data related about IP-PBR running are shown below: switch#show ip pbr IP policy based route state: enabled No equiv exf apply item VLAN3 use route-map ddd, and has 1 entry active. -----------------Entry sequence 10, permit Match ip access-list: ac1 Set Outgoing nexthop 90.0.0.3 The IP-PBR policy routing information is shown below: switch#show ip pbr policy IP policy based route state: enabled VLAN3 use route-map ddd, and has 1 entry active.
Users Manual of GPL-8000 47.1.4 IP-PBR Configuration Example Switch configuration: ! ip pbr ! interface vlan1 ip address 10.1.1.3 255.255.255.0 no ip directed-broadcast ip policy route-map pbr ! ip access-list standard ac1 permit 10.1.1.21 255.255.255.255 ! ip access-list standard ac2 permit 10.1.1.2 255.255.255.255 ! route-map pbr 10 permit match ip address ac1 set ip next-hop 13.1.1.99 ! route-map pbr 20 permit match ip address ac2 set ip next-hop 13.1.1.99 14.1.1.
Users Manual of GPL-8000 table on the ISP's routers. Each client network is connected to the interface of the network devices of ISP, while ISP's device will relate each interface to a VPN routing table. One VPN routing table is also called as a VRF (VPN Routing /Forwarding table). VRF is usually deployed on a Provider Edge (PE) device, such as MPLS VRF VPN. A PE supports multiple VPNs, and each VPN has its independent IP address space among which IP addresses can be overlapped.
Users Manual of GPL-8000 48.1.1.1 Establishing Routes with CE The Multi-VRF CE switch can establish routes with CE through multiple dynamic routing protocols. CE can be routers or the Ethernet switches. The routing protocols which are supported include OSPF, RIP and BEIGRP. The MCE switch also supports static routing configuration. The MCE switch generally needs different VLAN ports to connect CEs that belong to different VPNs.
Users Manual of GPL-8000 48.2.3 MCE Configuration 48.2.3.1 Configuring VRFRefer to the following steps to configure one or multiple VRFs. Command Purpose Switch# config Enters the switch configuration mode. Switch_config# ip vrf vrf-name Creates VRF and enters the VRF configuration mode. vrf-name: VRF name with up to 31 characters Switch_config_vrf# rd Sets the route distinguisher of VRF. route-distinguisher route-distinguisher: Stands for the distinguisher of the route.
Users Manual of GPL-8000 Command Purpose Switch# config Enters the switch configuration mode. Switch_config# router ospf Starts the OSPF-VRF route and enters the configuration process-id vrf vrf-name mode. Switch_config_ospf# Defines the OSPF network, mask and area ID. networknetwork-number network-maskareaarea-id Switch_config_ospf# redistribute Forwards the designated BGP network to the OSPF network. bgp ASN Switch_config_ospf# exit Exits from the OSPF configuration mode.
Users Manual of GPL-8000 48.2.3.4 Testifying the VRF Connectivity Between PE and CE Use the PING command with the VRF option to testify the VRF connectivity of PE and CE. Command Purpose Switch# ping –vrfvrf-nameip-address Conducts the PING operation to the addresses in VRF. MCE Configuration Example Figure 2.1 shows a simple VRF network. Both S1 and S2 are the Multi-VRF CE switches. S11, S12 and S13 belong to VPN1, S21 and S22 belong to VPN2, and all of them are customer devices.
Users Manual of GPL-8000 Set the routing protocol between CE and customer's device: Switch_config# router ospf 101 Switch_config_ospf_101# network 11.0.0.0 255.0.0.0 area 0 Switch_config_ospf_101# exit 48.3.2 Configuring MCE-S1 Configures VRF on the Multi-VRF CE device.
Users Manual of GPL-8000 Set the L3 VLAN port of a switch, bind the VRF to the VLAN port and set the IP address. S1 connects PE through two logical ports, VLAN21 and VLAN22. The two ports, VLAN11 and VLAN15, connect VPN1 and VPN2 respectively. Switch_config# interface VLAN11 Switch_config_v11# ip vrf forwarding vpn1 Switch_config_v11# ip address 11.0.0.1 255.0.0.0 Switch_config_v11# exit Switch_config# interface VLAN15 Switch_config_v15# ip vrf forwarding vpn2 Switch_config_v15# ip address 15.0.0.1 255.0.
Users Manual of GPL-8000 Switch_config_bgp_vpn1# redistribute ospf 1 Switch_config_bgp_vpn1# neighbor 21.0.0.1 remote-as 200 Switch_config_bgp_vpn1# exit-address-family Switch_config_bgp# address-family ipv4 vrf vpn2 Switch_config_bgp_vpn2# no synchronization Switch_config_bgp_vpn2# redistribute ospf 2 Switch_config_bgp_vpn2# neighbor 22.0.0.1 remote-as 200 Switch_config_bgp_vpn2# exit-address-family Switch_config_bgp# exit Create VLAN.
Users Manual of GPL-8000 Switch_config_g1/1# interface gigaEthernet 1/2 Switch_config_g1/2# switchport mode trunk Switch_config_g1/2# exit Set the L3 VLAN interface of PE, which connects S1: Switch_config# interface VLAN21 Switch_config_v21# ip vrf forwarding vpn1 Switch_config_v21# ip address 21.0.0.1 255.0.0.0 Switch_config_v21# exit Switch_config# interface VLAN22 Switch_config_v22# ip vrf forwarding vpn2 Switch_config_v22# ip address 22.0.0.1 255.0.0.
Users Manual of GPL-8000 Switch_config_bgp# exit Set VLAN and enable the subnet routing forwarding. Switch_config# vlan 1,21-22,31-32 Switch_config# ip exf 48.3.
Users Manual of GPL-8000 Set the L3 VLAN port of a switch, bind the VRF to the VLAN port and set the IP address. S2 connects PE through two logical ports, VLAN31 and VLAN32. The two ports, VLAN41 and VLAN46, connect VPN1 and VPN2 respectively. Switch_config# interface VLAN41 Switch_config_v41# ip vrf forwarding vpn1 Switch_config_v41# ip address 41.0.0.1 255.0.0.0 Switch_config_v41# exit Switch_config# interface VLAN46 Switch_config_v46# ip vrf forwarding vpn2 Switch_config_v46# ip address 46.0.0.1 255.0.
Users Manual of GPL-8000 Switch_config_bgp_vpn1# redistribute ospf 1 Switch_config_bgp_vpn1# neighbor 31.0.0.1 remote-as 200 Switch_config_bgp_vpn1# exit-address-family Switch_config_bgp# address-family ipv4 vrf vpn2 Switch_config_bgp_vpn2# no synchronization Switch_config_bgp_vpn2# redistribute ospf 2 Switch_config_bgp_vpn2# neighbor 32.0.0.1 remote-as 200 Switch_config_bgp_vpn2# exit-address-family Switch_config_bgp# exit Create VLAN.
Users Manual of GPL-8000 48.3.6 TestifyingVRF Connectivity Run the PING command on S1 to testify the connectivity of VPN1 between S1 and S11: Switch# ping -vrf vpn1 11.0.0.2 !!!!! --- 11.0.0.2 ping statistics --5 packets transmitted, 5 packets received, 0% packet loss round-trip min/avg/max = 0/0/0 ms Testify the connectivity between S1 and PE: Switch# ping -vrf vpn1 21.0.0.1 !!!!! --- 21.0.0.
Users Manual of GPL-8000 Reliability Configuration Configuring Port Backup This chapter discusses how to back up the interface, describes the backup functions on the asynchronism serial interface, synchronism serial interface or ISDN interface. For details about interface backup commands, refer to Interface Backup Command Reference. 49.1.1 Overview Interface backup functions can enabled Backup interface or disabled it according to statement or flux information of Primary interface .
Users Manual of GPL-8000 Set delaying of enabled and disabled backup interface .To realize time gap between primary interface state changing and the result of state of backup interface changing. 1. choose backup interface 2. enabled interface backup delaying in this interface . choose backup interface,You can use instructions as follows in interface configuration mode. Command Purpose Backup interfaceslot/port Choose backup interface of this port.
Users Manual of GPL-8000 49.1.4 Examples of Port Backup Configuration Enable the backup interface on serial interface 1/0,and choose serial interface 1/1 as his backup interface. The time of backup interface activation and deactivation is both 5 seconds. Flux equalization setting is when true flux of primary interface pass 60% of band width , activate backup interface, while flux through both interfaces is less than 30% of band width of primary interface, activate backup interface.
Users Manual of GPL-8000 Configuring HSRP protocol 49.2.1 Overview HSRP is a standard method of providing high network availability by providing first-hop redundancy for IP hosts on an IEEE 802 LAN configured with a default gateway IP address. HSRP routes IP traffic without relying on the availability of any single router. It enables a set of router interfaces to work together to present the appearance of a single virtual router or default gateway to the hosts on a LAN.
Users Manual of GPL-8000 mac-addressmac-address address. standby [group-number] Configure hsrp priority level.(To vote in prioritypriority active/standby router) standby [group-number] preempt Configure hsrp preempt. If local router's [delaydelay] priority is larger than active router, local router should try to replace the active router. Configure hsrp preempt delay timer.Local router should replace active router after preempt delay timer.
Users Manual of GPL-8000 R1 HSRP Configuration Interface Ethernet0 ip address 171.16.6.5 255.255.255.0 standby 1 preempt standby 1 ip 171.16.6.100 255.255.255.0 standby 1 trackl Serial0 standby 2 preempt standby 2 ip 171.16.6.200 255.255.255.0 standby 2 track Serial0 standby 2 priority 95 The following is the R2 configuration: Configure two HSRP groups on interface Ethernet 0. The virtual IP of group 1 is 171.16.6.100 and the privilege of group1 is 100, so R2 is the standby router of group1.
Users Manual of GPL-8000 forwards the packets whose destination address is the virtual MAC address of the backup group. When VRRP detects the invalidity of the main router, the VRRP routers will select one as a new main router to obtain the MAC and the IP of the backup group. The VRRP-running main router transmits the Advertise packets based on the Sock Raw multicast, while the standby routers receive these packets.
Users Manual of GPL-8000 Master Primary IP An IP address selected from the addresses of an interface Address according to a certain regulation, which is normally the first IP address Virtual Router A standby router which will be selected to serve as a Backup data-forwarding router when the master router invalidates 49.3.
Users Manual of GPL-8000 49.3.3.5 Configuring the Privilege for VRRP Hot Backup Command Purpose [no] vrrp group-number Sets the hot standby privilege level priority<1-255> in the VRRP router for selecting the primary router and the standby router. 49.3.3.6 Configuring the Preemption Mode Command Purpose [no] vrrp group-numberpreempt Sets the preemption mode. [delay<1-254>] 49.3.3.
Users Manual of GPL-8000 Group 3 vip: 100.1.1.30 vmac: 00:00:5e:00:01:03 Host John e1/1.2 F0/22 F0/20 e1/1.1 A F0/21 F0/23 B e1/1.1 e2/1 vrrp Group 6 vip: 200.1.1.30 vmac: 00:00:5e:00:01:06 e2/1 e1/1.2 Host Tom Figure 3-2 Simple VRRP application topology The configuration is shown as follows: Router A: ----------------------------------interface Ethernet1/1.1 encapsulation dot1Q 2 ip address 100.1.1.5 255.255.255.0 vrrp 3 associate 100.1.1.30 255.255.255.
Users Manual of GPL-8000 vrrp 3 priority 110 vrrp 3 description line1-backup vrrp 3 authentication line1pwd vrrp 3 preempt vrrp 3 timers advertise dsec 15 ---------------------------------interface Ethernet1/1.2 encapsulation dot1Q 3 ip address 200.1.1.6 255.255.255.0 vrrp 6 associate 200.1.1.30 255.255.255.
Users Manual of GPL-8000 Multicast Configuration Multicast Overview The chapter describes how to cofigure the multicast routing protocol. For the details of the multicast routing commands, refer to the part “Multicast Routing Commands”. The traditional IP transmission allows only one host to communicate with a single host (unicast communication) or to communicate with all hosts (broadcast communication). The multicast technology allows one host to send message to some hosts.
Users Manual of GPL-8000 50.1.2 Multicast Routing Configuration Task List 50.1.2.
Users Manual of GPL-8000 50.1.2.4 PIM-SM Configuration Task List Configuring static RP Configuring standby BSR Configuring standby RP Displaying PIM-SM multicast routing Clearing multicast routes learned by PIM-SM Basic Multicast Routing Configuration 50.2.1 Starting up Multicast Routing To allow the router software to forward the multicast message, you must start up the multicast routing.
Users Manual of GPL-8000 50.2.3 Configuring TTL Threshold Run the command ip multicast ttl-threshold to configure the TTL threshold of the multicast message that is allowed to pass the port. Run the command no ip multicast ttl-threshold to use the default threshold value 1. Command ip multicast ttl-thresholdttl-value Purpose Configures the TTL threshold on the port.
Users Manual of GPL-8000 After the static multicast routing is configured, the router can perform the RPF check according to the configuration information. The RPF check is not based on the unicast routing table any more. Therefore, the multicast message goes through the tunnel, while the unicast message does not go through the tunnel. The static multicast route only exists in the local place. It will not be announced or forwarded.
Users Manual of GPL-8000 Run the following command to limit the output rate of a multicast flow to n kbps Command Purpose ip Configures the maximum output rate multicast rate-limit outgroup-listaccess-list1 source-list limitation of the multicast flow in a certain access-list2 kbps range. 50.2.8 Configuring IP Multicast Helper Run the command ip multicast helper-map to use the multicast route to connect two broadcast networks in the multicast network.
Users Manual of GPL-8000 multicast message with port number 4000 and the destination address 230.0.0.1 that is sent from the source address 192.168.20.97/24 to the broadcast message with the destination address 172.10.255.255. In the first-hop router connecting the source broadcast network, perform the following operations: (the router is configured on the VLAN port) interface ethernet 0 ip directed-broadcast ip multicast helper-map broadcast 230.0.0.
Users Manual of GPL-8000 Example The configuration of router A and B is shown as follows: Stub Router A Configuration ip multicast-routing ip pim-dm ip igmp helper-address 10.0.0.2 Central Router B Configuration ip multicast-routing ip pim-dm ip pim-dm neighbor-filter stubfilter ip access-list stubfilter deny 10.0.0.1 50.2.10 Monitoring and Maintaining Multicast Route 50.2.10.
Users Manual of GPL-8000 IGMP Configuration 50.3.1 Overview 50.3.1.1 IGMP Internet Group Management Protocol (IGMP) is a protocol used to manage multicast group members. IGMP is an asymmetric protocol, containing the host side and the switch side. At the host side, the IGMP protocol regulates how the host, the multicast group member, reports the multicast group it belongs to and how the host responds to the query message from the switch.
Users Manual of GPL-8000 You can configure the IGMP-Router function at different interfaces (the multicast routing protocol configured on different interfaces can start up the IGMP-Router function) and different versions of IGMP can be run on different interfaces. Note that a multicast switch can start up the IGMP-Router function on only one of the ports that connect the same network.
Users Manual of GPL-8000 For IGMP-Router V1, the interval of other queriers is useless. For IGMP-Router V3, the interval cannot be configured because it is decided by the protocol itself. 50.3.2.4 Configuring Maximum IGMP Response Time For IGMP-Router V2 and IGMP-Router V3, special data field in the transmitted IGMP General Query message regulates the maximum response time of the IGMP host.
Users Manual of GPL-8000 50.3.2.6 Static IGMP Configuration Besides the functions regulated by the IGMP-Router protocol, BODCOM’s switches support the static multicast group configuration on the port. For the IGMP host, its multicast group member relationship may vary. Suppose the IGMP host only belongs to the multicast group group1, it receives the multicast message from and sends the multicast message to the multicast group group1.
Users Manual of GPL-8000 Command Purpose Configures the access list that ip igmp immediate-leave realizes the function to immediately group-listlist-name leave the multicast group for the IGMP host. ip access-list standardlist-name Creates a standard IP access list named list-name. Configures the IP address for the permitsource-address IGMP host that will realize the immediate-leave function in standard access-list configuration mode.
Users Manual of GPL-8000 50.3.3.4 Maximum IGMP response time example The following example shows how to modify the maximum IGMP response time to 15 seconds on the interface ethernet 1/0: interface ethernet 1/0 ip igmp query-max-response-time 15 50.3.3.
Users Manual of GPL-8000 In a multicast group, the multicast group information cannot be simultaneously configured both for a specific source address and for all source addresses. The command used in the later configuration will be omitted. For example, If you run the command ip igmp static-group 224.1.1.7 include 192.168.20.168 after the command ip igmp static-group 224.1.1.7 is executed, the command ip igmp static-group 224.1.1.7 include 192.168.20.168 will be omitted. 50.3.3.
Users Manual of GPL-8000 As long as source S still sends information to group G, the first-hop switch will periodically send the refreshing information of the routing item (S,G) to the nether original broadcast tree to finish refreshing. The state refreshing mechanism of PIM-DM can refresh the state of the downstream, ensuring that the pruning of the broadcast tree does not time out.
Users Manual of GPL-8000 50.4.2.2 Configuring State-Refresh The state-refresh control information of the PIM-DM is forwarded in management mode by default. The configuration commands in interface configuration mode are effective only to the configurations at the upstream ports when the first-hop switch directly connecting the source sends the state-refresh message periodically. For the following switches, the interval is the period to receive and handle the state-refresh message.
Users Manual of GPL-8000 50.4.2.5 Clearing Item (S,G) Normally, item (S,G) in the local MRT or the statistics value of the multicast message number forwarded through item (S,G) need be cleared. Run the following commands in management mode. Command Purpose clear ip mroute pim-dm {* | group Clears the item (S,G) in the local MRT. [source]} The operation is to delete all or part items of the local multicast routing table. Multicast message forwarding may be affected.
Users Manual of GPL-8000 Figure 5-1 Join-in mechanism of PIM-SM PIM-SM forwards the multicast packet by creating the multicast distribution tree. The multicast distribution tree can be classified into two groups: Shared Tree and Shortest Path Tree. Shared Tree takes the RP of group G as the root, while Shortest Path Tree takes the multicast source as the root. PIM-SM creates and maintains the multicast distribution tree through the displayed join/prune mode.
Users Manual of GPL-8000 about a group member’s relationship from the directly-connected host, if the DR has no the routing item of the group, the DR will map the group address to a candidate RP through the Hash algorithm. The DR then multicasts the Join/prune message hop by hop towards the RP. Finally, the DR packages the multicast data in the registration message and unicasts it to the RP. 50.5.2 Configuring PIM-SM 50.5.2.
Users Manual of GPL-8000 50.5.2.4 Configuring Candidate RP Configure the candidate RP to enable it to be sent to the BSR periodically and then be diffused to all PIM-SM routers in the domain, ensuring the RP mapping is unique. Run the following command in global configuration mode: Command ip pim-sm rp-candidate [typenumber] [interval|group-list acl-name] no ip pim-sm rp-candidate [typenumber] Purpose Configures the local switch as the candidate RP.
Users Manual of GPL-8000 ! interface Serial2/0 ip address 192.168.21.142 255.255.255.0 physical-layer speed 128000 ip pim-sm ! router rip network 192.168.21.0 network 192.166.1.0 network 192.166.100.0 version 2 ! ip pim-sm bsr-candidate Loopback0 30 201 ip pim-sm rp-candidate Loopback0 ! Device B: ! ip multicast-routing ! interface Ethernet0/1 ip address 192.168.200.144 255.255.255.0 ip pim-sm ip pim-sm dr-priority 200 ! interface Serial0/0 ip address 192.168.21.144 255.255.255.0 ip pim-sm ! 50.5.3.
Users Manual of GPL-8000 ip address 192.166.1.142 255.255.255.0 ip pim-sm ! interface Serial2/0 ip address 192.168.21.142 255.255.255.0 physical-layer speed 128000 ip pim-sm ! router rip network 192.168.21.0 network 192.166.100.0 ! ip pim-sm bsr-candidate Loopback0 30 201 ! Device B: ! ip multicast-routing ! interface Loopback0 ip address 192.168.100.144 255.255.255.0 ip pim-sm ! interface Ethernet0/1 ip address 192.168.200.144 255.255.255.0 ip pim-sm ! interface Serial0/0 ip address 192.168.21.144 255.
Users Manual of GPL-8000 The IPv6 protocol is disabled in default state. If the IPv6 protocol need be used on a VLAN interface, this protocol should be first enabled in VLAN interface configuration mode. To enable the IPv6 protocol, users have to set the IPv6 address. If on a VLAN interface at least one IPv6 address is set, the VLAN interface can handle the IPv6 packets and communicates with other IPv6 devices.
Users Manual of GPL-8000 link. To set a global IPv6 address in VLAN interface configuration mode, run the following commands. Command Purpose ipv6 address autoconfig Sets a global address automatically. ipv6 address [ipv6-address/prefix-length | prefix-name Sets a global address. sub-bits/prefix-length] | [eui-64] ipv6 address X: X: X: X: : X/<0-128> anycast Sets an address of unicast/broadcast/multicast.
Users Manual of GPL-8000 1. Setting the transmission frequency of the ICMPv6 packet If you want to limit the transmission frequency of the ICMPv6 packet, run the command in the following table. If the ICMPv6 transmission frequency is larger than the set value, the transmission frequency will be limited. The default transmission frequency is 1000us. If you want to modify the transmission frequency, run the following command in global mode: 2.
Users Manual of GPL-8000 To open IPv6 redirection, run the following command: 5. Command Purpose ipv6 redirects Allows IPv6 to transmit the redirection packets. Setting IPv6 destination unreachability In many cases, the system will automatically transmit the destination-unreachable packets. Users can close this function. If this function is closed, the system will not transmit the ICMP unreachable packets.
Users Manual of GPL-8000 packet-forwarding neighboring routers. Additionally, the node uses the ND mechanism to positively trace which neighbors are reachable or unreachable and to test the changed link-layer address. When a router or the path to a router has trouble, the host positively looks for another working router or another path. IPv6 ND corresponds to IPv4 ARP, ICMP router discovery and ICMP redirect.
Users Manual of GPL-8000 Setting the number of transmitted NSs when ND performs DAD on a local port Before the IPv6 port is started, it should send the NS information to the local machine to find if there is any duplicate IPv6 address existing on links through DAD. Command Purpose ipv6 nd dad attempts num Sets the number of transmitted NSs when the local port performs DAD.
Users Manual of GPL-8000 Command Purpose ipv6 nd prefix Means that the local port transmits the {ipv6-prefix/prefix-length | default} prefix option's content in the RA [no-advertise | [valid-lifetime message. preferred-lifetime [off-link | no-autoconfig]] ] Setting the RA transmission interval The following command is used to set the range of RA transmission interval.
Users Manual of GPL-8000 port. Its default value is 0ms. Setting the value of the router preference in the RA message router-preference means the router’s priority, which accounts for two bits in the flags domain in the RA message.The router’s priority can be high, medium and low. The medium priority is the default settings. Command Purpose ipv6 nd router-preference Sets the router-preference field in preference the RA message transmitted by the local port.It is medium by default.
Users Manual of GPL-8000 RIPNG Configuration Configuring RIPNG 53.1.1 Overview Routing Information Protocol of next generation (RIPng) is the RIP of version 6. In the equipment RIPng and RIP are two completely independent modules that are in charge of the learning and management of the routing information in version 6 and version 4 respectively. RIPng is same to RIP in the internal working mechanism. RIPng switches the routing information through the UDP broadcast.
Users Manual of GPL-8000 Monitoring and Maintaining RIPng 53.1.3 RIPng Configuration Tasks 53.1.3.1 Allowing to Set the Unicast Routing Protocol To set the RIPng, you must first run the following command to allow setting the switch of a unicast route. Command Ipv6 unicast-routing Purpose Enables to set the unicast routing protocol on a device. 53.1.3.
Users Manual of GPL-8000 users must make configuration on a router to allow the switching of routing information. To reach the aim above, run the following command in RIPng configuration mode: Command Purpose neighboripv6-address Defines a neighboring router and switches the routing information with this neighboring router. 53.1.3.5 Applying the Offset on the Routing Weight The offset list is used to add an offset for an incoming or outgoing route which RIPng learns.
Users Manual of GPL-8000 53.1.3.8 Adjusting the Timer The routing protocol needs several timers to judge the transmission frequency of routing updates and how long it takes for a route to become invalid. You can adjust these timers to make the performance of a routing protocol more suitable for the requirements of network interconnecting.
Users Manual of GPL-8000 In normal cases, you are not recommended to change the default state unless you are sure that the routes can be correctly declared after the state of your application program is changed. If horizontal fragmentation is forbidden on a serial interface that connects a packet switching network, you have to disable horizontal fragmentation on routers of any related multicast group on a network. 53.1.3.
Users Manual of GPL-8000 53.1.
Users Manual of GPL-8000 OSPFv3 supports the IPv6 subnet, the mark of the external routing information and the packet’s authentication. OSPFv3 and OSPFv2 have a lot in common: Both router ID and area ID are 32 bit. The following are the same type of packets: Hello packets, DD packets, LSR packets, LSU packets and LSAck packets.
Users Manual of GPL-8000 other settings are optional.
Users Manual of GPL-8000 Command Purpose ipv6 ospf costcost Sets the cost of the packet that is transmitted from the OSPFv3 interface. ipv6 ospf retransmit-interval seconds Sets the LSA retransmission interval between neighbors. ipv6 ospf transmit-delayseconds Sets the delay time for transmitting LSA on an OSPFv3 interface. ipv6 ospf prioritynumber Sets a router to be the priority of the OSPFv3 DR router.
Users Manual of GPL-8000 external route that enters the stub area, enabling the stub area to communicate with external networks of an autonomous area. In order to make use of the attributes supported by the OSPF stub, the default route must be used in the stub area. To further reduce LSAs that are forwarded to the stub area, you can forbid the summary function on ABR.
Users Manual of GPL-8000 Command Purpose areaarea-idrange ipv6-prefix Sets the address' range of the /prefix-length summary route. 54.3.7 Setting the Summary of the Forwarded Routes When routes are distributed from other routing areas to the OSPFv3 routing area, each route is singularly broadcasted as an external LSA. However, you can set a route on a router to make this route cover an address range. In this way, the size of the OSPFv3 link-state database can be reduced.
Users Manual of GPL-8000 54.3.10 Setting the Management Distance of OSPFv3 The management distance means the trust level of the routing information source. Generally speaking, the management distance is an integer between 0 and 255. The bigger its value is, the lower the trust level is. If the management distance is 255, the routing information source will be distrusted and omitted. OSPFv3 uses three different kinds of management distances: inter-domain, inner-domain and exterior.
Users Manual of GPL-8000 show ipv6 ospf [process-id] database [intra-prefix][adv-router router-id] show ipv6 ospf interface Displays the information about the OSPFv3 interface. show ipv6 ospf neighbor Displays the information about OSPFv3 neighbors. show ipv6 ospf route Displays the routing information about OSPFv3. show ipv6 ospf topology Displays the OSPFv3 topology. show ipv6 ospf virtual-links Displays the virtual links of OSPFv3. debug ipv6 ospf Monitors all OSPFv3 behaviors.
Users Manual of GPL-8000 connect Ethernet interface 0 to area 0.0.0.0, distribute RIPng to OSPFv3 and OSPFv3 to RIPng. ipv6 unicast-routing ! interface vlan 10 ipv6 address 2001: : 1/64 ipv6 enable ipv6 rip aaa enable ipv6 rip aaa split-horizon ipv6 ospf 90 area 0 ipv6 ospf cost 1 ! router ospfv3 90 router-id 1.1.1.1 redistribute rip ! router ripng aaa redistribute ospf 90 2. Configuring multiple OSPFv3 processes The following example shows that two OSPFv3 processes are created.
Users Manual of GPL-8000 router ospfv3 109 router-id 1.1.1.1 redistribute static ! router ospfv3 110 router-id 2.2.2.2 ! Each interface can belong to many OSPFv3 processes, but if an interface belongs to multiple OSPFv3 processes each OSPFv3 process must correspond to different instances. 3. Complicated configuration example The following example shows how to configure multiple routers in a single OSPFv3 autonomous system.
Users Manual of GPL-8000 ipv6 enable ipv6 ospf 1 area 1 ! ! router ospfv3 1 router-id 2.2.2.
Users Manual of GPL-8000 router-id 1.1.1.1 area 1 stub redistribute static ! R2: interface vlan 0 ipv6 enable ipv6 ospf 1 area 1 ! ! router ospfv3 1 router-id 2.2.2.
Users Manual of GPL-8000 Configure the router according to the above-mentioned figure: R1: interface vlan 0 ipv6 address 101: : 1/64 ipv6 enable ipv6 ospf 1 area 1 ! interface vlan 1 ipv6 address 6: : 1/64 ipv6 enable ipv6 ospf 1 area 0 ! ipv6 route 2001: : /64 6: : 2 ! router ospfv3 1 router-id 200.200.200.1 area 1 virtual-link 200.200.200.
Users Manual of GPL-8000 ! router ospfv3 1 router-id 200.200.200.2 area 1 virtual-link 200.200.200.1 ! Browsing the state of the OSPFv3 neighbor: R1#show ipv6 ospf neighbor OSPFv3 Process (1) Neighbor ID Pri State Dead Time Interface 200.200.200.2 1 Full/DR 00: 00: 35 200.200.200.2 1 Full/ - 00: 00: 36 Instance ID VLAN0 0 VLINK1 0 R2#show ipv6 ospf neighbor OSPFv3 Process (1) OSPFv3 Process (1) Neighbor ID Pri State Dead Time Interface 200.200.200.1 1 Full/Backup 200.200.200.
Users Manual of GPL-8000 C fe80: : 2e0: fff: fe26: 2d98/128[2] is directly connected, L, VLAN0 C fe80: : /64[1] is directly connected, C, VLAN1 C fe80: : 2e0: fff: fe26: 2d99/128[1] is directly connected, L, VLAN1 C ff00: : /8[2] is directly connected, L,Null0 R2#show ipv6 route O 6: : /64[1] [110,20] via fe80: C 101: : 4: : 2e0: fff: fe26: 2d98(on VLAN0) fff: fe26: 2d98(on VLAN0) /64[1] is directly connected, C, VLAN0 O 101: : 1/128[1] [110,10] via fe80: C 101: :
Users Manual of GPL-8000 BFD Configuration Overview BFD (Bidirectional Forwarding Detection) is a set of all-net uniform detection mechanism used for rapid detection and monitoring of link or IP routing forwarding connectivity. To improve the performance of existing networks, communication troubles can be detected rapidly between neighboring protocols so that a standby communication channel can be quickly established.
Users Manual of GPL-8000 time out. If min_rx_interval on the local end is decreased, the local detection time cannot be modified until the packets reset by the peer’s F field are received, which ensures that the transmission interval of BFD control packets on the peer has been decreased before the decrease of local detection time.
Users Manual of GPL-8000 55.2.4 Enabling Port BFD Authentication Port BFD authentication is not activated by default. Authentication configuration takes immediate effect before BFD neighbor is up, and the two terminals of a link on which BFD detection is conducted can be up only when their BFD authentication configurations are same.
Users Manual of GPL-8000 B: interface vlan1 ip address 1.1.1.2 255.255.255.0 bfd enable no ip directed-broadcast ！ router bgp 200 no synchronization bgp log-neighbor-changes neighbor 1.1.1.1 remote-as 100 neighbor 1.1.1.1 fall-over bfd ！ SNTP Configuration Overview 56.1.1 Stipulations 56.1.1.1 Format Stipulation in the Command Line Syntax Definition Stands for the keyword in the command line, which stays unchanged and must be entered without any Bold modification.
Users Manual of GPL-8000 SNTP adopts the client-server mode. The server obtains its own time by receiving the GPS signals or takes its own atomic clock as its time standard, while the client, by regularly accessing the time service provided by the server, gets the correct time information and regulates its own clock to synchronize with the time on the Internet. The UDP protocol and port 123 are used for the communication between the client and the server. 56.2.
Users Manual of GPL-8000 The local switch takes as the SNTP client: Setting the IP Address of the SNTP Server Setting the Interval of Browsing the SNTP Server Disabling the SNTP Server 56.2.3 SNTP Configuration 56.2.3.1 Setting the Grade of the SNTP Server Configuration mode: Global Command Purpose sntp master [Stratum] Sets the grade of the SNTP server. 56.2.3.2 Enabling the SNTP Server Configuration mode: Global Command Purpose sntp master The SNTP server is enabled by default. 56.2.3.
Users Manual of GPL-8000 be a switch worked as the command switch, which allows up to 255 switches simultaneously to join the cluster as member switches. As the single access node in the cluster, the command switch is used to configure, manage and monitor member switches. One switch belongs to only one cluster at a certain moment.
Users Manual of GPL-8000 Command Description cluster mode Sets the current switch to the command commandercluster-name switch. B. Activating standby switch Run the following command in global configuration mode to set the current switch to the standby switch: Command Description cluster mode commander member Sets the current switch to the standby switch. C.
Users Manual of GPL-8000 D. Configuring hop number of the discovery protocol The cluster uses the hop number to measure the distance of switches in the cluster. The hop number of the discovery protocol configured on the command switch equals the distance between the cluster verge and the candidate switch which is farthest to the cluster verge.
