ALCATEL-LUCENT EnterprisseSSolluutioonsDDiv. IIP...

AAALLLCCCAAATTTEEELLL---LLLUUUCCCEEENNNTTT EEEnnnttteeerrrppprrriiissseee SSSooollluuutttiiiooonnnsss DDDiiivvv...

IIIPPP NNNeeetttwwwooorrrkkkiiinnnggg PPPooorrrtttfffooollliiiooo

IIPP NNeettwwoorrkkiinngg SSoolluuttiioonnss wwiitthh

OOmmnniiSSwwiittcchh 66885500 PPrroodduucctt FFaammiillyy

BBooiilleerrppllaattee DDooccuummeenntt

OS6850 Series Boilerplate Doc. Rev.6.0 / Feb. 2008 Page 1 Alcatel-Lucent-ESD

Software & Hardware Release: AOSv6.3.1r01 Calabasas/CA./USA

TTaabbllee ooff CCoonntteennttss

DDiissccllaaiimmeerr _____________________________________________________________________19

TTrraaddeemmaarrkk TTeexxtt_________________________________________________________________19

RReevviissiioonn HHiissttoorryy ________________________________________________________________19

AAllccaatteell--LLuucceenntt CCoommppaannyy BBaacckkggrroouunndd _______________________________________________20

AAbboouutt BBooiilleerrppllaattee _______________________________________________________________21

AAbboouutt AAllccaatteell--LLuucceenntt OO//SS ((AAOOSS)) ___________________________________________________22

OOmmnniiSSwwiittcchh 66885500 SSeerriieess // MMaarrkkeettiinngg ________________________________________________23

IInnttrroodduuccttiioonn _________________________________________________________________________ 23

TThhee OOmmnniiSSwwiittcchh 66885500 FFaammiillyy __________________________________________________________ 24 KKeeyy CCuussttoommeerr BBeenneeffiittss ________________________________________________________________________ 24 PPoowweerr SSuuppppllyy OOppttiioonnss_________________________________________________________________________ 32 GGiiggaabbiitt EEtthheerrnneett aatt tthhee EEddggee ____________________________________________________________________ 33 IInntteelllliiggeennccee aatt tthhee CCoorree ________________________________________________________________________ 33 PPeerrffoorrmmaannccee ________________________________________________________________________________ 33 1100--GGiiggaabbiitt EEtthheerrnneett AApppplliiccaattiioonnss ________________________________________________________________ 33 CCaarrrriieerr--CCllaassss ffoorr tthhee EEnntteerrpprriissee__________________________________________________________________ 34 SSeeccuurree NNeettwwoorrkkiinngg ___________________________________________________________________________ 34 AAllccaatteell--LLuucceenntt AAcccceessss GGuuaarrddiiaann aanndd OOmmnniiVViissttaa 22777700 QQuuaarraannttiinnee MMaannaaggeerr_________________________ 35

HHiigghh AAvvaaiillaabbiilliittyy_____________________________________________________________________________ 35 AAddvvaanncceedd QQooSS_______________________________________________________________________________ 36 IIPPvv66 SSuuppppoorrtt ________________________________________________________________________________ 36 CCoommpplliiaannccyy _________________________________________________________________________________ 36 WWeebbVViieeww___________________________________________________________________________________ 36 CCLLII _______________________________________________________________________________________ 36 SSiimmpplliiffiieedd MMaannaaggeeaabbiilliittyy ______________________________________________________________________ 37 OOnneeTToouucchh NNeettwwoorrkk MMaannaaggeemmeenntt ____________________________________________________________ 37

OOmmnniiSSwwiittcchh 66885500 SSeerriieess // TTeecchhnniiccaall ________________________________________________38

NNeettwwoorrkk PPoossiittiioonniinngg aanndd AApppplliiccaattiioonnss ___________________________________________________ 38 GGiiggaabbiitt ttoo tthhee DDeesskkttoopp AApppplliiccaattiioonnss ______________________________________________________________ 39 SSeerrvveerr AAggggrreeggaattiioonn ___________________________________________________________________________ 40 LL33 AAggggrreeggaattiioonn//DDiissttrriibbuuttiioonn ____________________________________________________________________ 41 EEnntteerrpprriissee SSmmaallll CCoorree CCaappaacciittyy _________________________________________________________________ 42 RReessiiddeennttiiaall // MMeettrroo TTrriippllee--ppllaayy EEtthheerrnneett AAcccceessss_____________________________________________________ 43 TTrriippllee--PPllaayy SSwwiittcchhiinngg _________________________________________________________________________ 44 CCoommbboo PPoorrtt AApppplliiccaattiioonn EExxaammppllee________________________________________________________________ 44

HHaarrddwwaarree OOvveerrvviieeww __________________________________________________________________ 45 OOmmnniiSSwwiittcchh 66885500 SSeerriieess _______________________________________________________________________ 45 OOmmnniiSSwwiittcchh 66885500--2244 _______________________________________________________________________ 51 OmniSwitch 6850-24 Specifications __________________________________________________________ 52

OOmmnniiSSwwiittcchh 66885500--4488 _______________________________________________________________________ 53 OmniSwitch 6850-48 Specifications __________________________________________________________ 54

OOmmnniiSSwwiittcchh 66885500--2244XX______________________________________________________________________ 55 OmniSwitch 6850-24X Specifications ________________________________________________________ 56

OOmmnniiSSwwiittcchh 66885500--4488XX______________________________________________________________________ 57



OmniSwitch 6850-48X Specifications ________________________________________________________ 58 OOmmnniiSSwwiittcchh 66885500--PP2244______________________________________________________________________ 59 OmniSwitch 6850-P24 Specifications_________________________________________________________ 60

OOmmnniiSSwwiittcchh 66885500--PP4488______________________________________________________________________ 61 OmniSwitch 6850-P48 Specifications_________________________________________________________ 62

OOmmnniiSSwwiittcchh 66885500--PP2244XX ____________________________________________________________________ 63 OmniSwitch 6850-P24X Specifications _______________________________________________________ 64

OOmmnniiSSwwiittcchh 66885500--PP4488XX ____________________________________________________________________ 65 OmniSwitch 6850-P48X Specifications _______________________________________________________ 66

OOmmnniiSSwwiittcchh 66885500--UU2244XX ____________________________________________________________________ 67 OmniSwitch 6850-U24X Specifications _______________________________________________________ 68

OOmmnniiSSwwiittcchh 66885500--2244LL______________________________________________________________________ 69 OmniSwitch 6850-24L Specifications_________________________________________________________ 70

OOmmnniiSSwwiittcchh 66885500--PP2244LL ____________________________________________________________________ 71 OmniSwitch 6850-P24L Specifications _______________________________________________________ 72

OOmmnniiSSwwiittcchh 66885500--4488LL______________________________________________________________________ 73 OmniSwitch 6850-48L Specifications_________________________________________________________ 74

OOmmnniiSSwwiittcchh 66885500--PP4488LL ____________________________________________________________________ 75 OmniSwitch 6850-P48L Specifications _______________________________________________________ 76

RReeaarr PPaanneell _______________________________________________________________________________ 77 SSttaattuuss LLEEDDss ______________________________________________________________________________ 78 10/100/1000 LEDs________________________________________________________________________ 79 1000 SFP LEDs__________________________________________________________________________ 79 10000 XFP LEDs ________________________________________________________________________ 79

CChhaassssiiss RReeaarr PPaanneell ___________________________________________________________________________ 79 AArrcchhiitteeccttuurree_________________________________________________________________________________ 80 TThhee OOmmnniiSSwwiittcchh 66885500--4488 && PP4488 IInntteerrnnaall AArrcchhiitteeccttuurree___________________________________________ 80 TThhee OOmmnniiSSwwiittcchh 66885500--4488XX && PP4488XX IInntteerrnnaall AArrcchhiitteeccttuurree________________________________________ 81 TThhee OOmmnniiSSwwiittcchh 66885500--2244 && PP2244 IInntteerrnnaall AArrcchhiitteeccttuurree___________________________________________ 82 TThhee OOmmnniiSSwwiittcchh 66885500--2244XX && PP2244XX IInntteerrnnaall AArrcchhiitteeccttuurree________________________________________ 83

OOmmnniiSSwwiittcchh 66885500 ---- FFiibbeerr OOppttiiccss TTrraannsscceeiivveerrss TTeecchhnniiccaall SSppeecciiffiiccaattiioonnss OOvveerrvviieeww _________________________ 84 SSmmaallll FFoorrmm FFaaccttoorr PPlluuggggaabbllee ((SSFFPP MMSSAA)) _____________________________________________________ 86 HHaannddlliinngg FFiibbeerr aanndd FFiibbeerr OOppttiicc CCoonnnneeccttoorrss ___________________________________________________ 87 CCooaarrssee WWaavvee DDiivviissiioonn MMuullttiipplleexxiinngg ((CCWWDDMM)) __________________________________________________ 98 1100GGbbppss SSmmaallll FFoorrmm FFaaccttoorr PPlluuggggaabbllee ((XXFFPPss)) _________________________________________________ 102 Eye Safety _____________________________________________________________________________ 102 XFP-10G Specifications __________________________________________________________________ 103

PPiinn--OOuuttss___________________________________________________________________________________ 105 RRJJ--4455 CCoonnssoollee PPoorrtt CCoonnnneeccttoorr PPiinnoouuttss _____________________________________________________ 105 RRJJ--4455 CCoonnssoollee PPoorrtt CCoonnnneeccttoorr PPiinnoouuttss _____________________________________________________ 105 1100//110000MMbbppss EEtthheerrnneett PPoorrtt RRJJ--4455 PPiinnoouuttss ((NNoonn--PPooEE)) ___________________________________________ 105 PPoowweerr oovveerr EEtthheerrnneett PPoorrtt RRJJ--4455 PPiinnoouuttss ((wwiitthh PPooEE))___________________________________________ 105 11 GGiiggaabbiitt EEtthheerrnneett PPoorrtt RRJJ--4455 PPiinnoouuttss ((NNoonn--PPooEE))______________________________________________ 105 1100//110000//11000000MMbbppss PPoowweerr oovveerr EEtthheerrnneett PPoorrtt --RRJJ--4455 PPiinnoouuttss _____________________________________ 106 CCoonnssoollee PPoorrtt // SSeerriiaall CCoonnnneeccttiioonn DDeeffaauulltt SSeettttiinnggss ______________________________________________ 106 OOSS66885500 DDBB--2255 PPOOWWEERR CCOONNNNEECCTTOORR PPIINN--OOUUTT _____________________________________________ 107

AAvvaaiillaabbiilliittyy FFeeaattuurree__________________________________________________________________________ 108 SSooffttwwaarree RRoollllbbaacckk ________________________________________________________________________ 108 BBaacckkuupp PPoowweerr SSuupppplliieess____________________________________________________________________ 108 HHoott SSwwaappppiinngg____________________________________________________________________________ 108 HHaarrddwwaarree MMoonniittoorriinngg_____________________________________________________________________ 109 Automatic Monitoring____________________________________________________________________ 109 LEDs _________________________________________________________________________________ 109 User-Driven Monitoring __________________________________________________________________ 109

AAuuttoo nneeggoottiiaattiioonn GGuuiiddeelliinneess ___________________________________________________________________ 109



VVaalliidd PPoorrtt SSeettttiinnggss oonn OOmmnniiSSwwiittcchh 66885500 SSeerriieess SSwwiittcchheess ____________________________________________ 109 1100//110000//11000000 CCrroossssoovveerr SSuuppppoorrtteedd ______________________________________________________________ 109 1100//110000 CCrroossssoovveerr SSuuppppoorrtteedd ___________________________________________________________________ 109 TThhee OOmmnniiSSwwiittcchh 66885500 SSeerriieess PPoowweerr SSuuppppllyy SSyysstteemm ________________________________________________ 110 PPoowweerr SSuuppppllyy SShheellff _______________________________________________________________________ 111 PPoowweerr SSuuppppllyy RReedduunnddaannccyy_________________________________________________________________ 111 MMoonniittoorriinngg CChhaassssiiss PPoowweerr _________________________________________________________________ 111 PPoowweerr SSuuppppllyy SSppeecciiffiiccaattiioonnss________________________________________________________________ 112 PPoowweerr SSuuppppllyy SShheellff _______________________________________________________________________ 115 PPSS--551100WW--AACC PPoowweerr SSuuppppllyy ________________________________________________________________ 115 PPSS--336600WW--AACC PPoowweerr SSuuppppllyy ________________________________________________________________ 116 PPSS--112266WW--AACC PPoowweerr SSuuppppllyy ________________________________________________________________ 117 PPSS--112200WW--DDCC PPoowweerr SSuuppppllyy ________________________________________________________________ 117

MMaannaaggiinngg OOmmnniiSSwwiittcchh 66885500 SSeerriieess SSttaacckkss________________________________________________________ 118 OOmmnniiSSwwiittcchh 66885500 SSeerriieess SSttaacckk OOvveerrvviieeww _____________________________________________________ 118 RRoolleess wwiitthhiinn tthhee SSttaacckk_____________________________________________________________________ 118 Primary and Secondary Management ________________________________________________________ 118

PPrriimmaarryy MMaannaaggeemmeenntt MMoodduullee SSeelleeccttiioonn______________________________________________________ 118 Using the Chassis MAC Address ___________________________________________________________ 119 Using Saved Slot Information ______________________________________________________________ 119 Using Switch Uptime ____________________________________________________________________ 119

SSeeccoonnddaarryy MMaannaaggeemmeenntt MMoodduullee SSeelleeccttiioonn ____________________________________________________ 119 Using the Stacking Connection to the Primary Switch ___________________________________________ 119 Using Saved Slot Information ______________________________________________________________ 119

IIddllee MMoodduullee RRoollee _________________________________________________________________________ 120 PPaassss--TThhrroouugghh MMooddee ______________________________________________________________________ 120 SSttaacckk CCaabblliinngg____________________________________________________________________________ 121 Redundant Stacking Cable Connection _______________________________________________________ 122

SSlloott NNuummbbeerriinngg __________________________________________________________________________ 122 Dynamic Slot Number Assignment__________________________________________________________ 122 Manual Slot Number Assignment ___________________________________________________________ 122

HHoott--SSwwaappppiinngg MMoodduulleess iinn aa SSttaacckk___________________________________________________________ 123 RReemmoovviinngg SSwwiittcchheess ffrroomm aann EExxiissttiinngg SSttaacckk ___________________________________________________ 123 IInnsseerrttiinngg SSwwiittcchheess iinnttoo aann EExxiissttiinngg SSttaacckk _____________________________________________________ 123 MMeerrggiinngg SSttaacckkss __________________________________________________________________________ 123 RReellooaaddiinngg SSwwiittcchheess _______________________________________________________________________ 124 Reloading the Primary Management Module __________________________________________________ 124 Reloading the Secondary Management Module ________________________________________________ 124 Reloading Switches with Idle Roles _________________________________________________________ 124 Reloading Switches in Pass-Through Mode ___________________________________________________ 124 Reloading All Switches in a Stack___________________________________________________________ 124 Software Synchronization During a Full Reload________________________________________________ 124 Effects of Saved Slot Number Information on the Reload Process __________________________________ 125

AAvvooiiddiinngg SSpplliitt SSttaacckkss _____________________________________________________________________ 125 CChhaannggiinngg tthhee SSeeccoonnddaarryy MMoodduullee ttoo PPrriimmaarryy __________________________________________________ 126 SSyynncchhrroonniizziinngg SSwwiittcchheess iinn aa SSttaacckk___________________________________________________________ 126 AAuuttoommaattiicc SSyynncchhrroonniizzaattiioonn dduurriinngg aa FFuullll RReellooaadd ______________________________________________ 126 MMoonniittoorriinngg tthhee SSttaacckk______________________________________________________________________ 126 Visually Monitoring the Stack______________________________________________________________ 126

MMaannaaggiinngg PPoowweerr oovveerr EEtthheerrnneett ((PPooEE))____________________________________________________________ 127 PPoowweerr oovveerr EEtthheerrnneett SSppeecciiffiiccaattiioonnss __________________________________________________________ 127 PPoowweerr oovveerr EEtthheerrnneett DDeeffaauullttss ______________________________________________________________ 128 PPoorrtt PPrriioorriittyy LLeevveellss_______________________________________________________________________ 128 CCaappaacciittoorr DDeetteeccttiioonn MMeetthhoodd________________________________________________________________ 128 UUnnddeerrssttaannddiinngg PPrriioorriittyy DDiissccoonnnneecctt __________________________________________________________ 128



MMoonniittoorriinngg PPoowweerr oovveerr EEtthheerrnneett vviiaa CCLLII_____________________________________________________ 129 PPoowweerr CCoorrddss_____________________________________________________________________________ 130 Specifications __________________________________________________________________________ 130

RReedduunnddaanntt AACC CCiirrccuuiitt RReeccoommmmeennddaattiioonn _____________________________________________________ 130 GGrroouunnddiinngg tthhee CChhaassssiiss ____________________________________________________________________ 130

TTeemmppeerraattuurree MMaannaaggeemmeenntt_____________________________________________________________________ 130

MMTTBBFF CCaallccuullaattiioonn SSttaannddaarrddss aanndd RReeqquuiirreemmeennttss _________________________________________ 131

MMTTBBFF CCaallccuullaattiioonn SSttaannddaarrddss aanndd RReeqquuiirreemmeennttss _________________________________________ 131

RReegguullaattoorryy CCoommpplliiaannccee aanndd SSaaffeettyy IInnffoorrmmaattiioonn __________________________________________ 148 DDeeccllaarraattiioonn ooff CCoonnffoorrmmiittyy:: CCEE MMaarrkk ____________________________________________________________ 148 WWaassttee EElleeccttrriiccaall aanndd EElleeccttrroonniicc EEqquuiippmmeenntt ((WWEEEEEE)) SSttaatteemmeenntt________________________________________ 148 SSttaannddaarrddss CCoommpplliiaannccee________________________________________________________________________ 148 SSaaffeettyy SSttaannddaarrddss _________________________________________________________________________ 148 EEMMCC SSttaannddaarrddss__________________________________________________________________________ 149 SSaaffeettyy aanndd EEnnvviirroonnmmeennttaall SSttaannddaarrddss ________________________________________________________ 149 FFCCCC CCllaassss AA,, PPaarrtt 1155 _____________________________________________________________________ 149 CCaannaaddaa CCllaassss AA SSttaatteemmeenntt _________________________________________________________________ 150 JJAATTEE___________________________________________________________________________________ 150 CCIISSPPRR2222 CCllaassss AA WWaarrnniinngg_________________________________________________________________ 150 VVCCCCII___________________________________________________________________________________ 150 CCllaassss AA WWaarrnniinngg ffoorr TTaaiiwwaann aanndd OOtthheerr CChhiinneessee MMaarrkkeettss _______________________________________ 150

TTrraannssllaatteedd SSaaffeettyy WWaarrnniinnggss ___________________________________________________________ 151 IImmppoorrttaanntt WWaarrnniinnggss__________________________________________________________________________ 151 BBllaannkk PPaanneellss WWaarrnniinngg ____________________________________________________________________ 151 EElleeccttrriiccaall SSttoorrmm WWaarrnniinngg__________________________________________________________________ 151 IInnssttaallllaattiioonn WWaarrnniinngg ______________________________________________________________________ 151 IInnvviissiibbllee LLaasseerr RRaaddiiaattiioonn WWaarrnniinngg __________________________________________________________ 151 LLiitthhiiuumm BBaatttteerryy WWaarrnniinngg__________________________________________________________________ 151 OOppeerraattiinngg VVoollttaaggee WWaarrnniinngg ________________________________________________________________ 151 PPoowweerr DDiissccoonnnneeccttiioonn WWaarrnniinngg______________________________________________________________ 151 PPrrooppeerr EEaarrtthhiinngg RReeqquuiirreemmeenntt WWaarrnniinngg ______________________________________________________ 151 RReeaadd IImmppoorrttaanntt SSaaffeettyy IInnffoorrmmaattiioonn WWaarrnniinngg _________________________________________________ 152 RReessttrriicctteedd AAcccceessss LLooccaattiioonn WWaarrnniinngg_________________________________________________________ 152 WWrriisstt SSttrraapp WWaarrnniinngg _____________________________________________________________________ 152

OOmmnniiSSwwiittcchh 66885500 SSeerriieess HHaarrddwwaarree && SSooffttwwaarree FFeeaattuurreess OOvveerrvviieeww TTaabbllee ___________________ 153

AAllccaatteell--LLuucceenntt AAOOSS RReelleeaassee BBrriieeffss _____________________________________________________ 218 OOVVEERRVVIIEEWW _______________________________________________________________________________ 218 WWhhaattss NNeeww?? ____________________________________________________________________________ 219

NNeeww SSooffttwwaarree FFeeaattuurreess ((AAOOSSvv66..11..33rr0011))__________________________________________________________ 219 FFeeaattuurree SSuummmmaarryy ________________________________________________________________________ 219




SSooffttwwaarree SSuuppppoorrtteedd __________________________________________________________________________ 223 FFeeaattuurree SSuummmmaarryy ________________________________________________________________________ 223

OOmmnniiSSwwiittcchh 66885500 SSeerriieess IIEETTFF // IIEEEEEE SSttaannddaarrddss ________________________________________ 315

OOmmnniiSSwwiittcchh 66885500 SSeerriieess TTyyppiiccaall RRFFPP QQuueessttiioonnss && AAnnsswweerrss TTaabbllee _________________________ 320



AAllccaatteell--LLuucceenntt AAOOSS VVaalluuee PPrrooppoossiittiioonnss_____________________________________________333

VVaalluuee ______________________________________________________________________________ 333

HHiigghh AAvvaaiillaabbiilliittyy ____________________________________________________________________ 335 TThhee SSppaannnniinngg TTrreeee AAllggoorriitthhmm aanndd PPrroottooccooll ((SSTTPP)) __________________________________________________ 337 SSppaannnniinngg TTrreeee SSppeecciiffiiccaattiioonnss _______________________________________________________________ 337 SSppaannnniinngg TTrreeee BBrriiddggee PPaarraammeetteerr DDeeffaauullttss ____________________________________________________ 337 SSppaannnniinngg TTrreeee PPoorrtt PPaarraammeetteerr DDeeffaauullttss______________________________________________________ 338 MMuullttiippllee SSppaannnniinngg TTrreeee ((MMSSTT)) RReeggiioonn DDeeffaauullttss _______________________________________________ 338 RRiinngg RRaappiidd SSppaannnniinngg TTrreeee ((RRRRSSTTPP)) DDeeffaauullttss _________________________________________________ 338 SSppaannnniinngg TTrreeee OOvveerrvviieeww __________________________________________________________________ 339 HHooww tthhee SSppaannnniinngg TTrreeee TTooppoollooggyy iiss ccaallccuullaatteedd ________________________________________________ 339 BBrriiddggee PPrroottooccooll DDaattaa UUnniittss ((BBPPDDUU)) _________________________________________________________ 341 TTooppoollooggyy EExxaammpplleess _______________________________________________________________________ 342 SSppaannnniinngg TTrreeee OOppeerraattiinngg MMooddeess____________________________________________________________ 344 Using Flat Spanning Tree Mode ____________________________________________________________ 344 Using 1x1 Spanning Tree Mode ____________________________________________________________ 345 Using 1x1 Spanning Tree Mode with PVST+__________________________________________________ 346 OmniSwitch PVST+ Interoperability ________________________________________________________ 346 802.1q Tagged VLANs ___________________________________________________________________ 346 BPDU Processing in PVST+ Mode__________________________________________________________ 346 Recommendations and Requirements for PVST+ Configurations __________________________________ 346 Configuring STP Bridge Parameters _________________________________________________________ 347 Bridge Configuration Commands Overview___________________________________________________ 348

BBrriiddggee PPrriioorriittyy___________________________________________________________________________ 348 BBrriiddggee HHeelllloo TTiimmee ________________________________________________________________________ 348 BBrriiddggee MMaaxx AAggee TTiimmee _____________________________________________________________________ 349 BBrriiddggee FFoorrwwaarrdd DDeellaayy TTiimmee________________________________________________________________ 349 UUssiinngg AAuuttoommaattiicc VVLLAANN CCoonnttaaiinnmmeenntt________________________________________________________ 350 CCoonnffiigguurriinngg SSTTPP PPoorrtt PPaarraammeetteerrss___________________________________________________________ 351 Bridge Configuration Commands Overview___________________________________________________ 351 Enabling/Disabling Spanning Tree on a Port __________________________________________________ 351 Spanning Tree on Link Aggregate Ports ______________________________________________________ 351 Configuring Port Priority__________________________________________________________________ 352 Port Priority on Link Aggregate Ports ________________________________________________________ 352 Configuring Port Path Cost ________________________________________________________________ 352 Path Cost for Link Aggregate Ports__________________________________________________________ 353 Configuring Port Mode ___________________________________________________________________ 354 Mode for Link Aggregate Ports_____________________________________________________________ 354 Configuring Port Connection Type __________________________________________________________ 354 Connection Type on Link Aggregate Ports ____________________________________________________ 355

UUssiinngg RRRRSSTTPP____________________________________________________________________________ 355 SSaammppllee SSppaannnniinngg TTrreeee CCoonnffiigguurraattiioonn ________________________________________________________ 356

IIEEEEEE 880022..11ss MMuullttiippllee SSppaannnniinngg TTrreeee ____________________________________________________________ 357 MMSSTT SSppeecciiffiiccaattiioonnss _______________________________________________________________________ 357 SSppaannnniinngg TTrreeee BBrriiddggee PPaarraammeetteerr DDeeffaauullttss ____________________________________________________ 357 SSppaannnniinngg TTrreeee PPoorrtt PPaarraammeetteerr DDeeffaauullttss______________________________________________________ 358 MMSSTT RReeggiioonn DDeeffaauullttss _____________________________________________________________________ 358 MMSSTT GGeenneerraall OOvveerrvviieeww ___________________________________________________________________ 358 HHooww MMSSTTPP WWoorrkkss _______________________________________________________________________ 358 CCoommppaarriinngg MMSSTTPP wwiitthh SSTTPP aanndd RRSSTTPP ______________________________________________________ 360 WWhhaatt iiss aa MMuullttiippllee SSppaannnniinngg TTrreeee IInnssttaannccee ((MMSSTTII)) ____________________________________________ 360 WWhhaatt iiss aa MMuullttiippllee SSppaannnniinngg TTrreeee RReeggiioonn ____________________________________________________ 361 WWhhaatt iiss tthhee CCoommmmoonn SSppaannnniinngg TTrreeee_________________________________________________________ 362



WWhhaatt iiss tthhee IInntteerrnnaall SSppaannnniinngg TTrreeee ((IISSTT)) IInnssttaannccee_____________________________________________ 362 WWhhaatt iiss tthhee CCoommmmoonn aanndd IInntteerrnnaall SSppaannnniinngg TTrreeee IInnssttaannccee ______________________________________ 362 UUnnddeerrssttaannddiinngg SSppaannnniinngg TTrreeee MMooddeess ________________________________________________________ 362 MMSSTT IInntteerrooppeerraabbiilliittyy aanndd MMiiggrraattiioonn_________________________________________________________ 362 MMiiggrraattiinngg ffrroomm FFllaatt MMooddee SSTTPP//RRSSTTPP ttoo FFllaatt MMooddee MMSSTTPP ______________________________________ 363 MMiiggrraattiinngg ffrroomm 11xx11 MMooddee ttoo FFllaatt MMooddee MMSSTTPP ________________________________________________ 363

MMAACC RReetteennttiioonn _____________________________________________________________________________ 364 MMAACC RReetteennttiioonn DDeeffaauullttss___________________________________________________________________ 364 MMAACC RReetteennttiioonn OOvveerrvviieeww__________________________________________________________________ 364 HHooww MMAACC RReetteennttiioonn WWoorrkkss _______________________________________________________________ 366 MMAACC RReetteennttiioonn AAfftteerr MMuullttiippllee TTaakkee--OOvveerrss ___________________________________________________ 366 MMAACC RReetteennttiioonn AApppplliiccaattiioonnss _______________________________________________________________ 367 LLiinnkk FFaaiilluurree _____________________________________________________________________________ 368

SSttaattiicc ((OOmmnniiCChhaannnneell)) LLiinnkk AAggggrreeggaattiioonn__________________________________________________________ 369 SSttaattiicc LLiinnkk AAggggrreeggaattiioonn SSppeecciiffiiccaattiioonnss _______________________________________________________ 369 SSttaattiicc LLiinnkk AAggggrreeggaattiioonn DDeeffaauullttss____________________________________________________________ 369 SSttaattiicc LLiinnkk AAggggrreeggaattiioonn OOvveerrvviieeww___________________________________________________________ 369 Static Link Aggregation Operation __________________________________________________________ 370

RReellaattiioonnsshhiipp ttoo OOtthheerr FFeeaattuurreess _____________________________________________________________ 370 DDyynnaammiicc ((IIEEEEEE 880022..33aadd)) LLiinnkk AAggggrreeggaattiioonn_______________________________________________________ 371 DDyynnaammiicc LLiinnkk AAggggrreeggaattiioonn SSppeecciiffiiccaattiioonnss ____________________________________________________ 371 DDyynnaammiicc LLiinnkk AAggggrreeggaattiioonn DDeeffaauulltt VVaalluueess____________________________________________________ 372 DDyynnaammiicc LLiinnkk AAggggrreeggaattiioonn OOvveerrvviieeww ________________________________________________________ 372 Dynamic Link Aggregation Operation _______________________________________________________ 373

RReellaattiioonnsshhiipp ttoo OOtthheerr FFeeaattuurreess _____________________________________________________________ 373

EEmmbbeeddddeedd SSeeccuurriittyy __________________________________________________________________ 374 LLeeaarrnneedd PPoorrtt SSeeccuurriittyy ________________________________________________________________________ 375 LLeeaarrnneedd ppoorrtt SSeeccuurriittyy SSppeecciiffiiccaattiioonnss_________________________________________________________ 375 LLeeaarrnneedd ppoorrtt SSeeccuurriittyy DDeeffaauullttss _____________________________________________________________ 375 LLeeaarrnneedd PPoorrtt SSeeccuurriittyy OOvveerrvviieeww ____________________________________________________________ 376 HHooww LLPPSS AAuutthhoorriizzeess SSoouurrccee MMAACC AAddddrreesssseess _________________________________________________ 376 DDyynnaammiicc CCoonnffiigguurraattiioonn ooff AAuutthhoorriizzeedd MMAACC AAddddrreesssseess _________________________________________ 377 SSttaattiicc CCoonnffiigguurraattiioonn ooff AAuutthhoorriizzeedd MMAACC AAddddrreesssseess____________________________________________ 377 UUnnddeerrssttaannddiinngg tthhee LLPPSS TTaabbllee ______________________________________________________________ 377 SSeelleeccttiinngg tthhee SSeeccuurriittyy VViioollaattiioonn MMooddee________________________________________________________ 377

IIPP--DDiirreecctteedd BBrrooaaddccaassttss _______________________________________________________________________ 378 DDeenniiaall ooff SSeerrvviiccee ((DDooSS)) FFiilltteerriinngg _______________________________________________________________ 378 AAuutthheennttiiccaatteedd VVLLAANNss ((AA--VVLLAANNss))______________________________________________________________ 379 AAuutthheennttiiccaatteedd NNeettwwoorrkk OOvveerrvviieeww ___________________________________________________________ 379 AAuutthheennttiiccaattiioonn CClliieennttss_____________________________________________________________________ 380 Telnet Authentication Client _______________________________________________________________ 380 Web Browser Authentication Client _________________________________________________________ 380 SSL for Web Browser Clients ______________________________________________________________ 380 The AV-Client__________________________________________________________________________ 381 The AV-Client & DHCP __________________________________________________________________ 381 Delay for IP Address Request ______________________________________________________________ 381 Releasing the IP Address__________________________________________________________________ 381

PPoorrtt BBiinnddiinngg aanndd AAuutthheennttiiccaatteedd VVLLAANNss______________________________________________________ 382 TThhee SSeerrvveerr AAuutthhoorriittyy MMooddee ________________________________________________________________ 382 Single Mode ___________________________________________________________________________ 382 Multiple Mode__________________________________________________________________________ 382 User Network Profile_____________________________________________________________________ 383

IIEEEEEE 880022..11XX _______________________________________________________________________________ 384 IIEEEEEE 880022..11XX SSppeecciiffiiccaattiioonnss ________________________________________________________________ 384



IIEEEEEE 880022..11XX DDeeffaauullttss _____________________________________________________________________ 384 880022..11XX OOvveerrvviieeww _________________________________________________________________________ 385 802.1X Port Behavior ____________________________________________________________________ 385 802.1X Ports and DHCP __________________________________________________________________ 386 Re-authentication________________________________________________________________________ 386 802.1X Accounting ______________________________________________________________________ 386 Compared to Authenticated VLANs _________________________________________________________ 386 Port-Based Network Access Control _________________________________________________________ 386

880022..11XX oonn tthhee OOmmnniiSSwwiittcchh 66885500 ____________________________________________________________ 387 Device Classification Policies ______________________________________________________________ 387

PPoorrtt MMaappppiinngg ((AAKKAA PPrriivvaattee VVLLAANN)) ____________________________________________________________ 388 PPoorrtt MMaappppiinngg SSppeecciiffiiccaattiioonnss________________________________________________________________ 388 PPoorrtt MMaappppiinngg DDeeffaauullttss ____________________________________________________________________ 388 EExxaammppllee PPoorrtt MMaappppiinngg OOvveerrvviieeww ___________________________________________________________ 389

AAcccceessss CCoonnttrrooll LLiissttss ---- AACCLLss __________________________________________________________________ 390 AACCLL SSppeecciiffiiccaattiioonnss _______________________________________________________________________ 390 AACCLL DDeeffaauullttss ____________________________________________________________________________ 390 AACCLL OOvveerrvviieeww ___________________________________________________________________________ 391 Rule Precedence ________________________________________________________________________ 391 How Precedence is Determined_____________________________________________________________ 392 Interaction With Other Features ____________________________________________________________ 392 Valid Combinations______________________________________________________________________ 392 ACL Configuration Overview______________________________________________________________ 392 Policy Conditions For ACLs _______________________________________________________________ 393 Policy Actions For ACLs _________________________________________________________________ 393 Layer 2 ACLs __________________________________________________________________________ 394 Layer 3/4 ACLs_________________________________________________________________________ 394 Multicast Filtering ACLs__________________________________________________________________ 395 Using ACL Security Features ______________________________________________________________ 396

AACCLL MMaannaaggeerr ((AACCLLMMAANN))____________________________________________________________________ 397 AACCLLMMAANN DDeeffaauullttss _______________________________________________________________________ 397 AACCLLMMAANN OOvveerrvviieeww ______________________________________________________________________ 397 AACCLLMMAANN CCoonnffiigguurraattiioonn FFiillee_______________________________________________________________ 397 AACCLL TTeexxtt FFiilleess___________________________________________________________________________ 398 AACCLL PPrreecceeddeennccee _________________________________________________________________________ 398 IInntteerraaccttiioonn WWiitthh tthhee AAllccaatteell--LLuucceenntt CCLLII _____________________________________________________ 398 UUssiinngg tthhee AACCLLMMAANN SShheellll__________________________________________________________________ 398 AACCLLMMAANN MMooddeess aanndd CCoommmmaannddss___________________________________________________________ 399 SSuuppppoorrtteedd PPrroottooccoollss aanndd SSeerrvviicceess ___________________________________________________________ 399

NNeettwwoorrkk SSeeccuurriittyy____________________________________________________________________________ 401 NNeettwwoorrkk SSeeccuurriittyy SSppeecciiffiiccaattiioonnss_____________________________________________________________ 401 NNeettwwoorrkk SSeeccuurriittyy DDeeffaauullttss _________________________________________________________________ 401 NNeettwwoorrkk SSeeccuurriittyy OOvveerrvviieeww ________________________________________________________________ 402 Anomalies _____________________________________________________________________________ 402 Monitoring Group _______________________________________________________________________ 403 Anomaly parameters Description ___________________________________________________________ 403

DDiissttrriibbuutteedd IInntteelllliiggeennccee_______________________________________________________________ 404 VVLLAANNss ___________________________________________________________________________________ 406 VVLLAANN SSppeecciiffiiccaattiioonnss ______________________________________________________________________ 406 VVLLAANN DDeeffaauullttss __________________________________________________________________________ 406 VVLLAANN MMaannaaggeemmeenntt OOvveerrvviieeww______________________________________________________________ 407 CCrreeaattiinngg//MMooddiiffyyiinngg VVLLAANNss ________________________________________________________________ 407 EEnnaabblliinngg//DDiissaabblliinngg SSppaannnniinngg TTrreeee ffoorr aa VVLLAANN________________________________________________ 408 VVLLAANN AAuutthheennttiiccaattiioonn _____________________________________________________________________ 408



VVLLAANN RRoouutteerr IInntteerrffaacceess___________________________________________________________________ 408 SSiinnggllee MMAACC RRoouutteerr MMooddee _________________________________________________________________ 408

DDeeffiinniinngg VVLLAANN PPoorrtt AAssssiiggnnmmeennttss ______________________________________________________________ 409 PPoorrtt AAssssiiggnnmmeenntt SSppeecciiffiiccaattiioonnss _____________________________________________________________ 409 PPoorrtt AAssssiiggnnmmeenntt DDeeffaauullttss __________________________________________________________________ 409 SSttaattiiccaallllyy AAssssiiggnniinngg PPoorrttss ttoo VVLLAANNss _________________________________________________________ 410 DDyynnaammiiccaallllyy AAssssiiggnniinngg PPoorrttss ttoo VVLLAANNss ______________________________________________________ 410 HHooww DDyynnaammiicc PPoorrtt AAssssiiggnnmmeenntt WWoorrkkss_______________________________________________________ 410 VVLLAANN MMoobbiillee TTaagg CCllaassssiiffiiccaattiioonn ____________________________________________________________ 410 VVLLAANN RRuullee CCllaassssiiffiiccaattiioonn__________________________________________________________________ 411 IIggnnoorriinngg BBrriiddggee PPrroottooccooll DDaattaa UUnniittss ((BBPPDDUU))__________________________________________________ 411 UUnnddeerrssttaannddiinngg MMoobbiillee PPoorrtt PPrrooppeerrttiieess _______________________________________________________ 412 WWhhaatt iiss aa CCoonnffiigguurreedd DDeeffaauulltt VVLLAANN??________________________________________________________ 412 WWhhaatt iiss aa SSeeccoonnddaarryy VVLLAANN?? _______________________________________________________________ 412 MMoobbiillee PPoorrtt PPrrooppeerrttiieess ____________________________________________________________________ 412

DDeeffiinniinngg VVLLAANN RRuulleess________________________________________________________________________ 413 VVLLAANN RRuulleess SSppeecciiffiiccaattiioonnss_________________________________________________________________ 413 VVLLAANN RRuulleess DDeeffaauullttss _____________________________________________________________________ 413 VVLLAANN RRuulleess OOvveerrvviieeww ____________________________________________________________________ 413 VVLLAANN RRuullee TTyyppeess ________________________________________________________________________ 414 DHCP Rules ___________________________________________________________________________ 414 Binding Rules __________________________________________________________________________ 415 MAC Address & MAC Address Range Rules__________________________________________________ 415 Network Address Rules___________________________________________________________________ 415 Protocol Rules __________________________________________________________________________ 416 Port Rules _____________________________________________________________________________ 416 Understanding VLAN Rule Precedence ______________________________________________________ 416

IIEEEEEE 880022..11QQ _______________________________________________________________________________ 417 880022..11QQ SSppeecciiffiiccaattiioonnss _____________________________________________________________________ 417 880022..11QQ DDeeffaauullttss __________________________________________________________________________ 417 880022..11QQ OOvveerrvviieeww _________________________________________________________________________ 417 FFoorrcciinngg aa SSwwiittcchh IInntteerrnnaall TTaagg ______________________________________________________________ 417

GGVVRRPP ____________________________________________________________________________________ 418 GGVVRRPP SSppeecciiffiiccaattiioonnss ______________________________________________________________________ 418 GGVVRRPP DDeeffaauullttss __________________________________________________________________________ 418 GGAARRPP OOvveerrvviieeww _________________________________________________________________________ 419

VVLLAANN SSttaacckkiinngg_____________________________________________________________________________ 422 VVLLAANN SSttaacckkiinngg SSppeecciiffiiccaattiioonnss ______________________________________________________________ 422 SSeerrvviiccee--BBaasseedd VVLLAANN SSttaacckkiinngg DDeeffaauullttss ______________________________________________________ 423 PPoorrtt--BBaasseedd VVLLAANN SSttaacckkiinngg DDeeffaauullttss_________________________________________________________ 423 VVLLAANN SSttaacckkiinngg OOvveerrvviieeww _________________________________________________________________ 424 HHooww VVLLAANN SSttaacckkiinngg WWoorrkkss _______________________________________________________________ 426 VVLLAANN SSttaacckkiinngg MMooddeess ____________________________________________________________________ 426 Service Mode___________________________________________________________________________ 426 Legacy Mode___________________________________________________________________________ 427 Interaction With Other Features ____________________________________________________________ 427 GARP VLAN Registration Protocol (GVRP) __________________________________________________ 427 IP Multicast VLANs _____________________________________________________________________ 427 Link Aggregation________________________________________________________________________ 428 Quality of Service (QoS) __________________________________________________________________ 428 Ring Rapid Spanning Tree Protocol (RRSTP) _________________________________________________ 428 Spanning Tree __________________________________________________________________________ 428

VVLLAANN SSttaacckkiinngg AApppplliiccaattiioonn EExxaammpplleess _______________________________________________________ 429 EEtthheerrnneett OOAAMM______________________________________________________________________________ 430 EEtthheerrnneett OOAAMM SSppeecciiffiiccaattiioonnss_______________________________________________________________ 430



EEtthheerrnneett OOAAMM DDeeffaauullttss ___________________________________________________________________ 430 EEtthheerrnneett OOAAMM OOvveerrvviieeww __________________________________________________________________ 431 CCoonnnneeccttiivviittyy FFaauulltt MMaannaaggeemmeenntt ____________________________________________________________ 431

IInntteerrnneett PPrroottooccooll ((IIPP))_________________________________________________________________________ 433 IIPP SSppeecciiffiiccaattiioonnss _________________________________________________________________________ 433 IIPP DDeeffaauullttss ______________________________________________________________________________ 433 IIPP OOvveerrvviieeww _____________________________________________________________________________ 433 IP Protocols ____________________________________________________________________________ 433 Transport Protocols ______________________________________________________________________ 434 Application-Layer Protocols _______________________________________________________________ 434 Additional IP Protocols ___________________________________________________________________ 434

IIPP FFoorrwwaarrddiinngg ___________________________________________________________________________ 435 SSttaattiicc RRoouuttee _____________________________________________________________________________ 435 DDeeffaauulltt RRoouuttee____________________________________________________________________________ 435 AAddddrreessss RReessoolluuttiioonn PPrroottooccooll ((AARRPP))__________________________________________________________ 436 TThhee TTiimmee--ttoo--LLiivvee ((TTTTLL)) VVaalluuee _____________________________________________________________ 436 LLooccaall PPrrooxxyy AARRPP_________________________________________________________________________ 436 AARRPP FFiilltteerriinngg____________________________________________________________________________ 436 IIPP--DDiirreecctteedd BBrrooaaddccaassttss ____________________________________________________________________ 437 DDeenniiaall ooff SSeerrvviiccee ((DDooSS)) FFiilltteerriinngg ____________________________________________________________ 437 IIPP SSeerrvviicceess ______________________________________________________________________________ 438 MMaannaaggiinngg IIPP_____________________________________________________________________________ 438 Internet Control Message Protocol (ICMP)____________________________________________________ 438 The Minimum Packet Gap_________________________________________________________________ 439 ICMP Control Table _____________________________________________________________________ 439 ICMP Statistics Table ____________________________________________________________________ 439 The Ping Command______________________________________________________________________ 439 Tracing an IP Route______________________________________________________________________ 439 Displaying TCP Information _______________________________________________________________ 439 Displaying UDP Information_______________________________________________________________ 439

TTuunnnneelliinngg _______________________________________________________________________________ 440 Generic Routing Encapsulation_____________________________________________________________ 440 IP Encapsulation within IP ________________________________________________________________ 440 Tunneling operation______________________________________________________________________ 440

IIPPvv66 ______________________________________________________________________________________ 441 IIPPvv66 SSppeecciiffiiccaattiioonnss________________________________________________________________________ 441 IIPPvv66 DDeeffaauullttss ____________________________________________________________________________ 441 IIPPvv66 OOvveerrvviieeww ___________________________________________________________________________ 442 IIPPvv66 AAddddrreessssiinngg__________________________________________________________________________ 442 IIPPvv66 AAddddrreessss NNoottaattiioonn ____________________________________________________________________ 443 IIPPvv66 AAddddrreessss PPrreeffiixx NNoottaattiioonn_______________________________________________________________ 443 AAuuttoo--ccoonnffiigguurraattiioonn ooff IIPPvv66 AAddddrreesssseess________________________________________________________ 443 TTuunnnneelliinngg IIPPvv66 oovveerr IIPPvv44__________________________________________________________________ 444 66ttoo44 TTuunnnneellss_____________________________________________________________________________ 444 66ttoo44 SSiittee ttoo 66ttoo44 SSiittee oovveerr IIPPvv44 DDoommaaiinn ______________________________________________________ 445 66ttoo44 SSiittee ttoo IIPPvv66 SSiittee oovveerr IIPPvv44//IIPPvv66 DDoommaaiinnss_________________________________________________ 446 CCoonnffiigguurreedd TTuunnnneellss_______________________________________________________________________ 446

IIPPXX ______________________________________________________________________________________ 447 IIPPXX SSppeecciiffiiccaattiioonnss ________________________________________________________________________ 447 IIPPXX DDeeffaauullttss_____________________________________________________________________________ 447 IIPPXX OOvveerrvviieeww____________________________________________________________________________ 447 IIPPXX RRoouuttiinngg _____________________________________________________________________________ 448 IIPPXX RRoouutteerr PPoorrtt CCoonnffiigguurraattiioonn OOppttiioonnss______________________________________________________ 448 SSttaattiicc RRoouutteess ____________________________________________________________________________ 449 TTyyppee--2200 PPaacckkeett FFoorrwwaarrddiinngg ________________________________________________________________ 449



EExxtteennddeedd RRIIPP aanndd SSAAPP PPaacckkeettss_____________________________________________________________ 449 RRIIPP aanndd SSAAPP TTiimmeerrss______________________________________________________________________ 449 UUssiinngg tthhee PPIINNGG CCoommmmaanndd_________________________________________________________________ 449 IIPPXX RRIIPP//SSAAPP FFiilltteerriinngg ____________________________________________________________________ 450 RIP Filters _____________________________________________________________________________ 450 SAP Filters ____________________________________________________________________________ 450 GNS Filters ____________________________________________________________________________ 450

RRIIPP_______________________________________________________________________________________ 451 RRIIPP SSppeecciiffiiccaattiioonnss ________________________________________________________________________ 451 RRIIPP DDeeffaauullttss_____________________________________________________________________________ 451 RRIIPP OOvveerrvviieeww____________________________________________________________________________ 452 RIP Version 2 __________________________________________________________________________ 452 RIP Routing____________________________________________________________________________ 453 The RIP Interface Metric__________________________________________________________________ 453 The RIP Forced Hold-down Interval _________________________________________________________ 454 RIP Redistribution_______________________________________________________________________ 454 Redistribution Metric_____________________________________________________________________ 454 RIP Redistribution Filter __________________________________________________________________ 454 RIP Security ___________________________________________________________________________ 454

OOSSPPFFvv22 // OOSSPPFFvv33___________________________________________________________________________ 455 OOSSPPFFvv22 SSppeecciiffiiccaattiioonnss ____________________________________________________________________ 455 OOSSPPFFvv22 DDeeffaauullttss _________________________________________________________________________ 456 OOSSPPFFvv33 SSppeecciiffiiccaattiioonnss ____________________________________________________________________ 457 OOSSPPFFvv33 DDeeffaauullttss _________________________________________________________________________ 457 OOSSPPFF OOvveerrvviieeww __________________________________________________________________________ 458 OSPF Areas ____________________________________________________________________________ 459 Classification of Routers __________________________________________________________________ 460 Virtual Links ___________________________________________________________________________ 460 Stub Areas _____________________________________________________________________________ 461 Not-So-Stubby-Areas ____________________________________________________________________ 461

TToottaallllyy SSttuubbbbyy AArreeaass______________________________________________________________________ 462 EEqquuaall CCoosstt MMuullttii--PPaatthh ((EECCMMPP)) RRoouuttiinngg _____________________________________________________ 463 NNoonn BBrrooaaddccaasstt OOSSPPFF RRoouuttiinngg ______________________________________________________________ 463 GGrraacceeffuull RReessttaarrtt oonn SSwwiittcchheess wwiitthh RReedduunnddaanntt MMaannaaggeemmeenntt _____________________________________ 464 IInntteerrffaaccee AAuutthheennttiiccaattiioonn___________________________________________________________________ 464

IISS--IISS _____________________________________________________________________________________ 465 IISS--IISS SSppeecciiffiiccaattiioonnss _______________________________________________________________________ 465 IISS--IISS DDeeffuuaallttss TTaabbllee ______________________________________________________________________ 465 IISS--IISS OOvveerrvviieeww___________________________________________________________________________ 467 IISS--IISS PPaacckkeett TTyyppeess _______________________________________________________________________ 468 IISS--IISS AArreeaass______________________________________________________________________________ 469 GGrraacceeffuull RReessttaarrtt oonn SSttaacckkss wwiitthh RReedduunnddaanntt SSwwiittcchheess___________________________________________ 470 IISS--IISS AApppplliiccaattiioonn EExxaammppllee _________________________________________________________________ 471

BBGGPP______________________________________________________________________________________ 472 BBGGPP SSppeecciiffiiccaattiioonnss _______________________________________________________________________ 472 BBGGPP OOvveerrvviieeww ___________________________________________________________________________ 473 AAuuttoonnoommoouuss SSyysstteemmss ((AASSss)) ________________________________________________________________ 474 IInntteerrnnaall vvss.. EExxtteerrnnaall BBGGPP _________________________________________________________________ 475 CCoommmmuunniittiieess ____________________________________________________________________________ 476 RRoouuttee RReefflleeccttoorrss _________________________________________________________________________ 477 BBGGPP CCoonnffeeddeerraattiioonnss ______________________________________________________________________ 478 PPoolliicciieess _________________________________________________________________________________ 479 RReegguullaarr EExxpprreessssiioonnss ______________________________________________________________________ 480 TThhee RRoouuttee SSeelleeccttiioonn PPrroocceessss________________________________________________________________ 480 RRoouuttee DDaammppeenniinngg ________________________________________________________________________ 481



CCIIDDRR RRoouuttee NNoottaattiioonn _____________________________________________________________________ 481 SSyynncchhrroonniizziinngg BBGGPP aanndd IIGGPP RRoouutteess_________________________________________________________ 481 CCoonnttrroolllliinngg RRoouuttee FFllaappppiinngg TThhrroouugghh RRoouuttee DDaammppeenniinngg ________________________________________ 482 EExxaammppllee:: FFllaappppiinngg RRoouuttee SSuupppprreesssseedd,, tthheenn UUnnssuupppprreesssseedd ______________________________________ 482 SSeettttiinngg UUpp RRoouuttee RReefflleeccttiioonn ________________________________________________________________ 483 WWoorrkkiinngg wwiitthh CCoommmmuunniittiieess ________________________________________________________________ 485 RRoouuttiinngg PPoolliicciieess __________________________________________________________________________ 485

RRDDPP______________________________________________________________________________________ 486 RRDDPP SSppeecciiffiiccaattiioonnss _______________________________________________________________________ 486 RRDDPP DDeeffaauullttss ____________________________________________________________________________ 486 RRDDPP OOvveerrvviieeww ___________________________________________________________________________ 487 RDP Interfaces__________________________________________________________________________ 488 Security Concerns _______________________________________________________________________ 488 Defining the Advertisement Interval _________________________________________________________ 488

DDHHCCPP RReellaayy _______________________________________________________________________________ 489 DDHHCCPP RReellaayy SSppeecciiffiiccaattiioonnss_________________________________________________________________ 489 DDHHCCPP RReellaayy DDeeffaauullttss _____________________________________________________________________ 489 DDHHCCPP RReellaayy OOvveerrvviieeww ____________________________________________________________________ 490 DHCP ________________________________________________________________________________ 490 DHCP and the OmniSwitch________________________________________________________________ 490 DHCP Relay and Authentication____________________________________________________________ 491 External DHCP Relay Application __________________________________________________________ 491 Internal DHCP Relay_____________________________________________________________________ 492 DHCP Relay Implementation ______________________________________________________________ 493 Per-VLAN DHCP _______________________________________________________________________ 493 Enabling BOOTP/DHCP Relay_____________________________________________________________ 493

UUssiinngg AAuuttoommaattiicc IIPP CCoonnffiigguurraattiioonn __________________________________________________________ 493 UUDDPP PPoorrtt RReellaayy __________________________________________________________________________ 494 CCoonnffiigguurriinngg DDHHCCPP SSeeccuurriittyy FFeeaattuurreess________________________________________________________ 494 Using the Relay Agent Information Option (Option-82)__________________________________________ 495 How the Relay Agent Processes DHCP Packets from the Client ___________________________________ 495 How the Relay Agent Processes DHCP Packets from the Server ___________________________________ 495 Using DHCP Snooping ___________________________________________________________________ 496 DHCP Snooping Configuration Guidelines____________________________________________________ 496

VVRRRRPP ____________________________________________________________________________________ 497 VVRRRRPP SSppeecciiffiiccaattiioonnss ______________________________________________________________________ 497 VVRRRRPP DDeeffaauullttss___________________________________________________________________________ 497 VVRRRRPP OOvveerrvviieeww _________________________________________________________________________ 498 Why Use VRRP?________________________________________________________________________ 498 Definition of a Virtual Router ______________________________________________________________ 499 VRRP MAC Addresses ___________________________________________________________________ 499 ARP Requests __________________________________________________________________________ 499 ICMP Redirects _________________________________________________________________________ 499 VRRP Startup Delay _____________________________________________________________________ 500 VRRP Tracking _________________________________________________________________________ 500 Interaction With Other Features ____________________________________________________________ 500 Configuration Overview __________________________________________________________________ 500 Basic Virtual Router Configuration__________________________________________________________ 500 The Advertisement Interval________________________________________________________________ 500 Virtual Router Priority____________________________________________________________________ 501 Preemption for Virtual Routers _____________________________________________________________ 501 VRRP Authentication ____________________________________________________________________ 501 VRRP Traps ___________________________________________________________________________ 502 VRRP Application Example _______________________________________________________________ 502 VRRP Tracking Example _________________________________________________________________ 503



VRRP3 Application Example ______________________________________________________________ 504 VRRP3 Tracking Example ________________________________________________________________ 505

QQuuaalliittyy OOff SSeerrvviiccee ((QQooSS)) _____________________________________________________________________ 506 QQooSS SSppeecciiffiiccaattiioonnss ________________________________________________________________________ 506 QQooSS GGeenneerraall OOvveerrvviieeww ____________________________________________________________________ 507 QoS Policy Overview ____________________________________________________________________ 507 How Policies Are Used ___________________________________________________________________ 508 Valid Policies __________________________________________________________________________ 508 Interaction With Other Features ____________________________________________________________ 508

CCoonnddiittiioonn CCoommbbiinnaattiioonnss___________________________________________________________________ 509 AAccttiioonn CCoommbbiinnaattiioonnss______________________________________________________________________ 510 CCoonnddiittiioonn aanndd AAccttiioonn CCoommbbiinnaattiioonnss _________________________________________________________ 510 QQooSS DDeeffaauullttss ____________________________________________________________________________ 511 Global QoS Defaults _____________________________________________________________________ 511 QoS Port Defaults _______________________________________________________________________ 511 Policy Rule Defaults _____________________________________________________________________ 512 Policy Action Defaults ___________________________________________________________________ 512 Default (Built-in) Policies _________________________________________________________________ 512

QQooSS CCoonnffiigguurraattiioonn OOvveerrvviieeww _______________________________________________________________ 513 AAuuttoommaattiicc QQooSS PPrriioorriittiizzaattiioonn_______________________________________________________________ 513 AAuuttoommaattiicc PPrriioorriittiizzaattiioonn ffoorr NNMMSS TTrraaffffiicc ____________________________________________________ 513 AAuuttoommaattiicc PPrriioorriittiizzaattiioonn ffoorr IIPP PPhhoonnee TTrraaffffiicc _________________________________________________ 513 UUssiinngg QQuuaarraannttiinnee MMaannaaggeerr aanndd RReemmeeddiiaattiioonn _________________________________________________ 514 UUssiinngg tthhee QQooSS LLoogg________________________________________________________________________ 515 Forwarding Log Events to PolicyView / Console _______________________________________________ 515

CCllaassssiiffyyiinngg BBrriiddggeedd TTrraaffffiicc aass LLaayyeerr 33 _______________________________________________________ 515 TThhee SSttaattiissttiiccss IInntteerrvvaall _____________________________________________________________________ 515 QQooSS PPoorrttss aanndd QQuueeuueess_____________________________________________________________________ 516 SShhaarreedd QQuueeuueess ___________________________________________________________________________ 516 PPrriioorriittiizziinngg aanndd QQuueeuuee MMaappppiinngg ____________________________________________________________ 516 PPrriioorriittyy ttoo QQuueeuuee MMaappppiinngg TTaabbllee ___________________________________________________________ 516 QQuueeuuiinngg SScchheemmeess_________________________________________________________________________ 517 TTrruusstteedd aanndd UUnnttrruusstteedd PPoorrttss _______________________________________________________________ 518 PPoolliicciieess _________________________________________________________________________________ 519 AASSCCIIII--FFiillee--OOnnllyy SSyynnttaaxx ___________________________________________________________________ 519 PPoolliiccyy CCoonnddiittiioonnss_________________________________________________________________________ 519 PPoolliiccyy AAccttiioonnss____________________________________________________________________________ 520 RRuullee PPrreecceeddeennccee__________________________________________________________________________ 520 How Precedence is Determined_____________________________________________________________ 520

RRuulleess wwiitthh CCoommppaattiibbllee AAccttiioonnss _____________________________________________________________ 520 RRuulleess wwiitthh CCoonnfflliiccttiinngg AAccttiioonnss______________________________________________________________ 520 TTeessttiinngg CCoonnddiittiioonnss________________________________________________________________________ 521 UUssiinngg CCoonnddiittiioonn GGrroouuppss iinn PPoolliicciieess __________________________________________________________ 521 UUssiinngg NNeettwwoorrkk GGrroouuppss ____________________________________________________________________ 521 UUssiinngg SSeerrvviicceess && SSeerrvviiccee GGrroouuppss____________________________________________________________ 521 UUssiinngg MMAACC GGrroouuppss_______________________________________________________________________ 522 UUssiinngg PPoorrtt GGrroouuppss________________________________________________________________________ 522 PPoorrtt GGrroouuppss aanndd MMaaxxiimmuumm BBaannddwwiiddtthh ______________________________________________________ 522 Source Port Group Example _______________________________________________________________ 523 Destination Port Group Examples ___________________________________________________________ 523

UUssiinngg MMaapp GGrroouuppss _______________________________________________________________________ 524 How Map Groups Work __________________________________________________________________ 524

PPoolliiccyy AApppplliiccaattiioonnss _______________________________________________________________________ 525 BBaassiicc QQooSS PPoolliicciieess ________________________________________________________________________ 526 Basic Commands________________________________________________________________________ 526



Traffic Prioritization Example______________________________________________________________ 526 Bandwidth Shaping Example ______________________________________________________________ 526

RReeddiirreeccttiioonn PPoolliicciieess _______________________________________________________________________ 527 IICCMMPP PPoolliiccyy EExxaammppllee_____________________________________________________________________ 528 880022..11pp aanndd TTooSS//DDSSCCPP MMaarrkkiinngg aanndd MMaappppiinngg _________________________________________________ 529 PPoolliiccyy BBaasseedd RRoouuttiinngg______________________________________________________________________ 530 SSeerrvveerr LLooaadd BBaallaanncciinngg ((SSLLBB))_______________________________________________________________ 531 SSeerrvveerr LLooaadd BBaallaanncciinngg SSppeecciiffiiccaattiioonnss ________________________________________________________ 531 SSeerrvveerr LLooaadd BBaallaanncciinngg DDeeffaauullttss_____________________________________________________________ 532 SSeerrvveerr LLooaadd BBaallaanncciinngg OOvveerrvviieeww ___________________________________________________________ 532 SSeerrvveerr LLooaadd BBaallaanncciinngg VVIIPPss//CCoonnddiittiioonn ______________________________________________________ 532 SSeerrvveerr LLooaadd BBaallaanncciinngg EExxaammppllee ____________________________________________________________ 533 SSeerrvveerr HHeeaalltthh MMoonniittoorriinngg__________________________________________________________________ 534

IIPP MMuullttiiccaasstt SSwwiittcchhiinngg _______________________________________________________________________ 535 IIPPMMSS SSppeecciiffiiccaattiioonnss_______________________________________________________________________ 535 IIPPvv66MMSS SSppeecciiffiiccaattiioonnss_____________________________________________________________________ 535 IIPPMMSS DDeeffaauulltt VVaalluueess______________________________________________________________________ 536 IIPPvv66MMSS DDeeffaauulltt VVaalluueess____________________________________________________________________ 536 IIPPMMSS OOvveerrvviieeww __________________________________________________________________________ 537 IPMS Example _________________________________________________________________________ 537

RReesseerrvveedd MMuullttiiccaasstt AAddddrreesssseess ______________________________________________________________ 538 IIPP MMuullttiiccaasstt RRoouuttiinngg______________________________________________________________________ 538 PIM __________________________________________________________________________________ 538 DVMRP_______________________________________________________________________________ 538

IIPPMMSS aanndd LLiinnkk AAggggrreeggaattiioonn _______________________________________________________________ 539 IIGGMMPP VVeerrssiioonn 33__________________________________________________________________________ 539 MMLLDD ___________________________________________________________________________________ 539 IIPPMMSS AApppplliiccaattiioonn EExxaammppllee ________________________________________________________________ 540

MMuullttiiccaasstt AAddddrreessss BBoouunnddaarriieess__________________________________________________________________ 541 MMuullttiiccaasstt BBoouunnddaarryy SSppeecciiffiiccaattiioonnss __________________________________________________________ 541 MMuullttiiccaasstt AAddddrreessss BBoouunnddaarriieess OOvveerrvviieeww _____________________________________________________ 541 Multicast Addresses and the IANA__________________________________________________________ 541 Administratively Scoped Multicast Addresses _________________________________________________ 541 Source-Specific Multicast Addresses ________________________________________________________ 541 Multicast Address Boundaries______________________________________________________________ 542 Concurrent Multicast Addresses ____________________________________________________________ 542

DDVVMMRRPP___________________________________________________________________________________ 543 DDVVMMRRPP SSppeecciiffiiccaattiioonnss ____________________________________________________________________ 543 DDVVMMRRPP DDeeffaauullttss_________________________________________________________________________ 543 DDVVMMRRPP OOvveerrvviieeww________________________________________________________________________ 544 RReevveerrssee PPaatthh MMuullttiiccaassttiinngg _________________________________________________________________ 544 NNeeiigghhbboorr DDiissccoovveerryy _______________________________________________________________________ 545 MMuullttiiccaasstt SSoouurrccee LLooccaattiioonn,, RRoouuttee RReeppoorrtt MMeessssaaggeess,, aanndd MMeettrriiccss _________________________________ 545 DDeeppeennddeenntt DDoowwnnssttrreeaamm RRoouutteerrss aanndd PPooiissoonn RReevveerrssee ___________________________________________ 546 PPrruunniinngg MMuullttiiccaasstt TTrraaffffiicc DDeelliivveerryy __________________________________________________________ 546 GGrraaffttiinngg BBrraanncchheess BBaacckk oonnttoo tthhee MMuullttiiccaasstt DDeelliivveerryy TTrreeee _______________________________________ 546 DDVVMMRRPP TTuunnnneellss _________________________________________________________________________ 547

PPIIMM ______________________________________________________________________________________ 548 PPIIMM SSppeecciiffiiccaattiioonnss________________________________________________________________________ 548 PPIIMM DDeeffaauullttss ____________________________________________________________________________ 548 PPIIMM OOvveerrvviieeww ___________________________________________________________________________ 549 Rendezvous Points (RPs)__________________________________________________________________ 549 Candidate Rendezvous Points (C-RPs) _______________________________________________________ 549 Bootstrap Routers (BSRs) _________________________________________________________________ 549 Candidate Bootstrap Routers (C-BSRs) ______________________________________________________ 550



Designated Routers (DRs)_________________________________________________________________ 550 Shared (or RP) Trees _____________________________________________________________________ 550 Avoiding Register Encapsulation ___________________________________________________________ 551 RP Initiation of (S, G) Source-Specific Join Message____________________________________________ 552 SPT Switchover_________________________________________________________________________ 553

PPIIMM--SSSSMM SSuuppppoorrtt________________________________________________________________________ 555 Source-Specific Multicast Addresses ________________________________________________________ 555 PIM-SSM Specification___________________________________________________________________ 555

IIPP MMuullttiiccaasstt VVLLAANN __________________________________________________________________________ 556 IIPP MMuullttiiccaasstt VVLLAANN SSppeecciiffiiccaattiioonnss___________________________________________________________ 556 IIPP MMuullttiiccaasstt VVLLAANN DDeeffaauullttss _______________________________________________________________ 556 IIPP MMuullttiiccaasstt VVLLAANN OOvveerrvviieeww ______________________________________________________________ 557 VVLLAANN SSttaacckkiinngg MMooddee_____________________________________________________________________ 557 IIPPMMVVLLAANN LLooookkuupp MMooddee__________________________________________________________________ 557 EEnntteerrpprriissee MMooddee _________________________________________________________________________ 558 IIPPMMVV PPaacckkeett FFlloowwss_______________________________________________________________________ 558 VVLLAANN SSttaacckkiinngg MMooddee_____________________________________________________________________ 558 EEnntteerrpprriissee MMooddee _________________________________________________________________________ 560 IIPPMMVVLLAANN AApppplliiccaattiioonn EExxaammppllee____________________________________________________________ 561

SSiimmpplliiffiieedd MMaannaaggeeaabbiilliittyy _____________________________________________________________ 562 IInntteerrsswwiittcchh PPrroottooccoollss_________________________________________________________________________ 564 AAIIPP SSppeecciiffiiccaattiioonnss ________________________________________________________________________ 564 AAMMAAPP DDeeffaauullttss __________________________________________________________________________ 564 AAMMAAPP OOvveerrvviieeww _________________________________________________________________________ 564 Discovery Transmission State ______________________________________________________________ 564 Common Transmission State_______________________________________________________________ 564 Passive Reception State___________________________________________________________________ 565 Common Transmission and Remote Switches _________________________________________________ 565

IIEEEEEE 880022..11AABB______________________________________________________________________________ 566 IIEEEEEE 880022..11AABB ((LLLLDDAAPP)) SSppeecciiffiiccaattiioonnss ______________________________________________________ 566 IIEEEEEE 880022..11AABB ((LLLLDDPP)) DDeeffaauullttss_____________________________________________________________ 566 880022..11AABB OOvveerrvviieeww ________________________________________________________________________ 567

MMaannaaggiinngg AAuutthheennttiiccaattiioonn SSeerrvveerrss _______________________________________________________________ 569 AAuutthheennttiiccaattiioonn SSeerrvveerr SSppeecciiffiiccaattiioonnss_________________________________________________________ 569 SSeerrvveerr DDeeffaauullttss __________________________________________________________________________ 569 RADIUS Authentication Servers____________________________________________________________ 569 LDAP Authentication Servers ______________________________________________________________ 569

SSeerrvveerr OOvveerrvviieeww _________________________________________________________________________ 570 BBaacckkuupp AAuutthheennttiiccaattiioonn SSeerrvveerrss _____________________________________________________________ 570 AAuutthheennttiiccaatteedd SSwwiittcchh AAcccceessss _______________________________________________________________ 570 AAuutthheennttiiccaatteedd VVLLAANNss_____________________________________________________________________ 571 PPoorrtt--BBaasseedd NNeettwwoorrkk AAcccceessss CCoonnttrrooll ((880022..11XX)) _________________________________________________ 571 AACCEE//SSeerrvveerr _____________________________________________________________________________ 572 RRAADDIIUUSS SSeerrvveerrss _________________________________________________________________________ 572 RADIUS Server Attributes ________________________________________________________________ 572

LLDDAAPP SSeerrvveerrss ___________________________________________________________________________ 573 LDAP Server Details_____________________________________________________________________ 573 LDIF File Structure ______________________________________________________________________ 573 Directory Entries ________________________________________________________________________ 573 Directory Searches_______________________________________________________________________ 574 Retrieving Directory Search Results _________________________________________________________ 574 Directory Modifications __________________________________________________________________ 574 Directory Compare and Sort _______________________________________________________________ 575 The LDAP URL ________________________________________________________________________ 575



Password Policies and Directory Servers _____________________________________________________ 575 Directory Server Schema for LDAP Authentication _____________________________________________ 575 LDAP Accounting Attributes ______________________________________________________________ 576 SSL for an LDAP Authentication Server _____________________________________________________ 576

MMaannaaggiinngg PPoolliiccyy SSeerrvveerrss______________________________________________________________________ 576 PPoolliiccyy SSeerrvveerr SSppeecciiffiiccaattiioonnss ________________________________________________________________ 576 PPoolliiccyy SSeerrvveerr DDeeffaauullttss_____________________________________________________________________ 576 PPoolliiccyy SSeerrvveerr OOvveerrvviieeww____________________________________________________________________ 577 Installing the LDAP Policy Server __________________________________________________________ 577 Secure Socket Layer for a Policy Server ______________________________________________________ 577 Interaction With CLI Policies ______________________________________________________________ 577

DDiiaaggnnoossiinngg SSwwiittcchh PPrroobblleemmss __________________________________________________________________ 578 UUDDLLDD ____________________________________________________________________________________ 578 UUDDLLDD SSppeecciiffiiccaattiioonnss ______________________________________________________________________ 578 UUDDLLDD DDeeffaauullttss __________________________________________________________________________ 578 UUDDLLDD OOvveerrvviieeww _________________________________________________________________________ 579 UDLD Operational Mode _________________________________________________________________ 579 Normal Mode __________________________________________________________________________ 579 Aggressive Mode________________________________________________________________________ 579 Mechanisms to Detect Unidirectional Links _______________

Date post:	05-Apr-2018
Category:	Documents
Upload:	leminh
View:	227 times
Download:	8 times

ALCATEL-LUCENT EnterprisseSSolluutioonsDDiv. IIP...

Documents