Dell Networking S6000 Manual do Utilizador Página 1

Consulte online ou descarregue Manual do Utilizador para Software Dell Networking S6000. Dell Networking S6000 Configuration manual Manual do Utilizador

  • Descarregar
  • Adicionar aos meus manuais
  • Imprimir
Vista de página 0
Dell Configuration Guide for the S6000
System
9.5(0.1)
Vista de página 0
1 2 3 4 5 6 ... 985 986

Resumo do Conteúdo

Página 1 - 9.5(0.1)

Dell Configuration Guide for the S6000 System9.5(0.1)

Página 2 - Notes, Cautions, and Warnings

Priority-Based Flow Control Using Dynamic Buffer Method...284Pause and Resume of Traffic...

Página 3 - Contents

Example of Using the continue Clause in a Route Map!route-map test permit 10match commu comm-list1set community 1:1 1:2 1:3set as-path prepend 1 2 3 4

Página 4

Layer 4 ACL Rules ExamplesThe following examples show the ACL commands for Layer 4 packet filtering.Permit an ACL line with L3 information only, and t

Página 5

Configure a Standard IP ACLTo configure an ACL, use commands in IP ACCESS LIST mode and INTERFACE mode.For a complete list of all the commands related

Página 6

If you are creating a standard ACL with only one or two filters, you can let Dell Networking OS assign a sequence number based on the order in which t

Página 7

To delete a filter, enter the show config command in IP ACCESS LIST mode and locate the sequence number of the filter you want to delete. Then use the

Página 8

ip access-list extended access-list-name2. Configure an extended IP ACL filter for UDP packets.CONFIG-EXT-NACL modeseq sequence-number {deny | permit}

Página 9

The following example shows an extended IP ACL in which the sequence numbers were assigned by the software. The filters were assigned sequence numbers

Página 10

For information about MAC ACLs, refer to Layer 2.Assign an IP ACL to an InterfaceTo pass traffic through a configured IP ACL, assign that ACL to a phy

Página 11

Example of Viewing ACLs Applied to an InterfaceDell(conf-if)#show conf!interface GigabitEthernet 0/0 ip address 10.2.1.100 255.255.255.0 ip access-g

Página 12

seq 5 permit tcp any any seq 10 deny icmp any anyseq 15 permit 1.1.1.2Configure Egress ACLsEgress ACLs are supported on the S6000 platform.Egress A

Página 13

Managing ECMP Group Paths... 311Creating an ECMP Gro

Página 14

Dell(conf-if-te-0/0)#Dell(conf-if-te-0/0)#Dell(conf-if-te-0/0)#endDell#Applying Egress Layer 3 ACLs (Control-Plane)By default, packets originated from

Página 15

• To permit routes with the mask greater than /8 but less than /12, enter permit x.x.x.x/x ge 8.• To deny routes with a mask less than /24, enter deny

Página 16

• le max-prefix-length: the maximum prefix length to match (from 0 to 32).Example of Assigning Sequence Numbers to FiltersIf you want to forward all r

Página 17

Dell(conf-nprefixl)#permit 123.23.0.0 /16Dell(conf-nprefixl)#deny 133.24.56.0 /8Dell(conf-nprefixl)#show conf!ip prefix-list awe seq 5 permit 123.23.

Página 18

Applying a Prefix List for Route RedistributionTo pass traffic through a configured prefix list, use the prefix list in a route redistribution command

Página 19

CONFIG-ROUTER-OSPF modedistribute-list prefix-list-name out [connected | rip | static]Example of Viewing Configured Prefix Lists (ROUTER OSPF mode)To

Página 20

• IPv4, IPv6, or MAC ACLEXEC moderesequence access-list {ipv4 | ipv6 | mac} {access-list-name StartingSeqNum Step-to-Increment}• IPv4 or IPv6 prefix-l

Página 21

seq 15 permit ip any host 1.1.1.3seq 20 permit ip any host 1.1.1.4Dell# endDell# resequence access-list ipv4 test 2 2Dell# show running-config acl!ip

Página 22

When a stack unit is reset or a stack unit undergoes a failure, the ACL agent registers with the port mirroring application. The port mirroring utilit

Página 23

0 Te 0/0 Te 0/2 rx Flow N/A N/A The show config command has been modified to display monitoring co

Página 24

Delayed Installation of ECMP Routes Into BGP...336RDMA Over Converged Ethernet (

Página 25

Example of the flow-based enable CommandTo view an access-list that you applied to an interface, use the show ip accounting access-list command from E

Página 26

7Bidirectional Forwarding Detection (BFD)Bidirectional forwarding detection (BFD) is supported only on the S6000 platform.BFD is a protocol that is us

Página 27

NOTE: A session state change from Up to Down is the only state change that triggers a link state change in the routing protocol client.BFD Packet Form

Página 28

Field Descriptionsystem clears the poll bit and sets the final bit in its response. The poll and final bits are used during the handshake and in Deman

Página 29

BFD SessionsBFD must be enabled on both sides of a link in order to establish a session.The two participating systems can assume either of two roles:A

Página 30

handshake. Now the discriminator values have been exchanged and the transmit intervals have been negotiated.4. The passive system receives the control

Página 31

receives a Down status notification from the remote system, the session state on the local system changes to Init.Figure 10. Session State ChangesImpo

Página 32 - About this Guide

• Configure BFD for IS-IS• Configure BFD for BGP• Configure BFD for VRRP• Configuring Protocol Liveness• Troubleshooting BFDConfigure BFD for Physical

Página 33 - Configuration Fundamentals

Establishing a Session on Physical PortsTo establish a session, enable BFD at the interface level on both ends of the link, as shown in the following

Página 34 - Navigating CLI Modes

Remote Addr: 2.2.2.2Remote MAC Addr: 00:01:e8:06:95:a2Int: GigabitEthernet 4/24State: UpConfigured parameters: TX: 100ms, RX: 100ms, Multiplier: 3Nei

Página 35

Adjusting Timers... 362Adj

Página 36

Number of messages from IFA about port state change: 0 Number of messages communicated b/w Manager and Agent: 7Disabling and Re-Enabling BFDBFD is

Página 37 - The do Command

Establishing Sessions for Static RoutesSessions are established for all neighbors that are the next hop of a static route.Figure 12. Establishing Sess

Página 38 - Undoing Commands

• Change parameters for all static route sessions.CONFIGURATION modeip route bfd interval milliseconds min_rx milliseconds multiplier value role [acti

Página 39 - Entering and Editing Commands

Establishing Sessions with OSPF NeighborsBFD sessions can be established with all OSPF neighbors at once or sessions can be established with all neigh

Página 40 - Command History

INTERFACE modeip ospf bfd all-neighborsExample of Verifying Sessions with OSPF NeighborsTo view the established sessions, use the show bfd neighbors c

Página 41

• Disable BFD sessions with all OSPF neighbors.ROUTER-OSPF modeno bfd all-neighbors• Disable BFD sessions with all OSPF neighbors on an interface.INTE

Página 42

To view session parameters, use the show bfd neighbors detail command, as shown in the example in Displaying BFD for BGP Information.• Change paramete

Página 43 - Getting Started

Establishing Sessions with IS-IS NeighborsBFD sessions can be established for all IS-IS neighbors at once or sessions can be established for all neigh

Página 44 - Configuring a Host Name

The bold line shows that IS-IS BFD sessions are enabled.R2(conf-router_isis)#bfd all-neighborsR2(conf-router_isis)#do show bfd neighbors* - Active

Página 45 - Accessing the System Remotely

INTERFACE moseisis bfd all-neighbors disableConfigure BFD for BGPBidirectional forwarding detection (BFD) for BGP is supported on the S6000 platform.I

Página 46 - Configure a Management Route

Configuring EIS... 385Manageme

Página 47 - Configuration File Management

Figure 15. Establishing Sessions with BGP NeighborsThe sample configuration shows alternative ways to establish a BFD session with a BGP neighbor:• By

Página 48

typical response is to terminate the peering session for the routing protocol and reconverge by bypassing the failed neighboring router. A log message

Página 49 - Viewing Files

ROUTER BGP modeneighbor {ip-address | peer-group-name} bfd disable• Remove the disabled state of a BFD for BGP session with a specified neighbor.ROUTE

Página 50 - Managing the File System

Examples of the BFD show CommandsThe following example shows verifying a BGP configuration.R2# show running-config bgp!router bgp 2 neighbor 1.1.1.2

Página 51 - Using HTTP for File Transfers

Number of messages from IFA about port state change: 0Number of messages communicated b/w Manager and Agent: 5Session Discriminator: 10Neighbor Discri

Página 52

Down : 0Admin Down : 2The following example shows viewing BFD summary information.The bold line shows the message displayed when you e

Página 53

Connections established 1; dropped 0 Last reset neverLocal host: 2.2.2.3, Local port: 63805Foreign host: 2.2.2.2, Foreign port: 179E1200i_ExaScale#

Página 54 - Management

Establishing Sessions with All VRRP NeighborsBFD sessions can be established for all VRRP neighbors at once, or a session can be established with a pa

Página 55

The bold line shows that VRRP BFD sessions are enabled.Dell(conf-if-gi-4/25)#vrrp bfd all-neighborsDell(conf-if-gi-4/25)#do show bfd neighbor* - A

Página 56

Disabling BFD for VRRPIf you disable any or all VRRP sessions, the sessions are torn down.A final Admin Down control packet is sent to all neighbors a

Página 57 - Configuring Logging

Enabling Pause Frames...411Configure the

Página 58 - Audit and Security Logs

Down for neighbor 2.2.2.2 on interface Gi 4/24 (diag: 0) 00:54:38 : Sent packet for session with neighbor 2.2.2.2 on Gi 4/24 TX packet dump:

Página 59 - Configuring Logging Format

8Border Gateway Protocol IPv4 (BGPv4)Border gateway protocol IPv4 (BGPv4) version 4 (BGPv4) is supported on the S6000 platform.This chapter provides a

Página 60

Figure 17. Internal BGPBGP version 4 (BGPv4) supports classless interdomain routing and aggregate routes and AS paths. BGP is a path vector protocol —

Página 61 - Disabling System Logging

Figure 18. BGP Routers in Full MeshThe number of BGP speakers each BGP peer must maintain increases exponentially. Network management quickly becomes

Página 62

Establish a SessionInformation exchange between peers is driven by events and timers. The focus in BGP is on the traffic routing policies.In order to

Página 63 - Configuration

Route reflection divides iBGP peers into two groups: client peers and nonclient peers. A route reflector and its client peers form a route reflection

Página 64

• Next HopNOTE: There are no hard coded limits on the number of attributes that are supported in the BGP. Taking into account other constraints such a

Página 65 - Synchronizing Log Messages

Figure 20. BGP Best Path SelectionBest Path Selection Details1. Prefer the path with the largest WEIGHT attribute.2. Prefer the path with the largest

Página 66 - File Transfer Services

c. Paths with no MED are treated as “worst” and assigned a MED of 4294967295.7. Prefer external (EBGP) to internal (IBGP) paths or confederation EBGP

Página 67

and AS300. This is advertised to all routers within AS100, causing all BGP speakers to prefer the path through Router B.Figure 21. BGP Local Preferenc

Página 68 - Terminal Lines

Important Points to Remember... 436Enabling UDP Helper..

Página 69

Figure 22. Multi-Exit DiscriminatorsNOTE: Configuring the set metric-type internal command in a route-map advertises the IGP cost as MED to outbound E

Página 70

*> 7.0.0.0/30 10.114.8.33 0 0 18508 ?*> 9.2.0.0/16 10.114.8.33 10 0 18508 701 iAS PathThe AS path is the list of

Página 71 - Lock CONFIGURATION Mode

Multiprotocol BGPMultiprotocol extensions for BGP (MBGP) is defined in IETF RFC 2858. MBGP allows different types of address families to be distribute

Página 72 - S6000MXL Switch

internal configured, BGP advertises the metric configured in the redistribute command as MED.• If BGP peer outbound route-map has metric configured, a

Página 73

Configure 4-byte AS numbers with the four-octet-support command.AS4 Number RepresentationDell Networking OS supports multiple representations of 4-byt

Página 74

!router bgp 100bgp asnotation asdot+bgp four-octet-as-supportneighbor 172.30.1.250 local-as 65057<output truncated>Dell(conf-router_bgp)#do show

Página 75

appear as if it still belongs to Router B’s old network (AS 200) as far as communicating with Router C is concerned.Figure 23. Before and After AS Num

Página 76

3. Prepend "65001 65002" to as-path.Local-AS is prepended before the route-map to give an impression that update passed through a router in

Página 77

• The f10BgpM2[Cfg]PeerReflectorClient field is populated based on the assumption that route-reflector clients are not in a full mesh if you enable BG

Página 78 - Configuring 802.1X

By default, Dell Networking OS compares the MED attribute on different paths from within the same AS (the bgp always-compare-med command is not enable

Página 79 - Enabling 802.1X

Monitoring iSCSI Traffic Flows... 464Application of Qu

Página 80

NOTE: Sample Configurations for enabling BGP routers are found at the end of this chapter.1. Assign an AS number and enter ROUTER BGP mode.CONFIGURATI

Página 81

CONFIG-ROUTER-BGP modeneighbor {ip-address | peer-group-name} no shutdownExamples of the show ip bgp CommandsNOTE: When you change the configuration o

Página 82

For the router’s identifier, Dell Networking OS uses the highest IP address of the Loopback interfaces configured. Because Loopback interfaces are vir

Página 83 - Re-Authenticating a Port

Connections established 0; dropped 0 Last reset never No active TCP connectionDell#The following example shows verifying the BGP configuration usi

Página 84 - Configuring Timeouts

bgp asnotation asplainNOTE: ASPLAIN is the default method Dell Networking OS uses and does not appear in the configuration display.• Enable ASDOT AS N

Página 85 - Authentication

Configuring Peer GroupsTo configure multiple BGP neighbors at one time, create and populate a BGP peer group.An advantage of peer groups is that membe

Página 86

To add an internal BGP (IBGP) neighbor, configure the as-number parameter with the same BGP as-number configured in the router bgp as-number command.E

Página 87 - Configuring a Guest VLAN

neighbor 10.1.1.1 shutdown neighbor 10.14.8.60 remote-as 18505 neighbor 10.14.8.60 no shutdownDell(conf-router_bgp)#To disable a peer group, use t

Página 88

When you enable fall-over, BGP tracks IP reachability to the peer remote address and the peer local address. Whenever either address becomes unreachab

Página 89

Notification History 'Connection Reset' Sent : 5 Recv: 0Local host: 200.200.200.200, Local port: 65519Foreign host: 100.100.100.100, Foreig

Página 90 - CAM Usage

Configuring LACP Commands...499LACP Configuration Task

Página 91

CONFIG-ROUTER-BGP modeneighbor peer-group-name subnet subnet-number maskThe peer group responds to OPEN messages sent on this subnet.3. Enable the pee

Página 92 - ACL Optimization

network 100.10.92.0/24 network 192.168.10.0/24 bgp four-octet-as-support neighbor 10.10.21.1 remote-as 65123 neighbor 10.10.21.1 filter-list Lau

Página 93

neighbor 100.10.92.9 local-as 6500 neighbor 100.10.92.9 no shutdown neighbor 192.168.10.1 remote-as 65123 neighbor 192.168.10.1 update-source Loo

Página 94

• Set maximum time to retain the restarting peer’s stale paths.CONFIG-ROUTER-BGP modebgp graceful-restart [stale-path-time time-in-seconds]The default

Página 95 - Configure Route Map Filters

to affect interdomain routing. By identifying certain ASN in the AS_PATH, you can permit or deny routes based on the number in its AS_PATH.AS-PATH ACL

Página 96 - Configuring Match Routes

0x6cc18d4 0 1 18508 701 2914 4713 17935 i0x5982e44 0 162 18508 209 i0x67d4a14 0 2 18508 701 19878 ?0x559972c 0 31

Página 97 - Configuring Set Conditions

The following example applies access list Eagle to routes inbound from BGP peer 10.5.5.2. Access list Eagle uses a regular expression to deny routes o

Página 98

redistribute isis [level-1 | level-1-2 | level-2] [metric value] [route-map map-name]Configure the following parameters:– level-1, level-1-2, or level

Página 99 - Continue Clause

IETF RFC 1997 defines the COMMUNITY attribute and the predefined communities of INTERNET, NO_EXPORT_SUBCONFED, NO_ADVERTISE, and NO_EXPORT. All BGP ro

Página 100 - IP Fragment Handling

deny 701:667 deny 702:667 deny 703:667 deny 704:666 deny 705:666 deny 14551:666Dell#Configuring an IP Extended Community ListTo configure an IP

Página 101 - Layer 4 ACL Rules Examples

TIA Organizationally Specific TLVs...532Configure LLDP...

Página 102 - Configure a Standard IP ACL

Filtering Routes with Community ListsTo use an IP community list or IP extended community list to filter routes, you must apply a match community filt

Página 103 - Access Control Lists (ACLs)

To view the BGP configuration, use the show config command in CONFIGURATION ROUTER BGP mode.If you want to remove or add a specific COMMUNITY number f

Página 104 - Configure an Extended IP ACL

Dell>show ip bgp communityBGP table version is 3762622, local router ID is 10.114.8.48Status codes: s suppressed, d damped, h history, * valid, >

Página 105

CONFIG-ROUTER-BGP modebgp default local-preference value– value: the range is from 0 to 4294967295.The default is 100.To view the BGP configuration, u

Página 106

set next-hop ip-addressChanging the WEIGHT AttributeTo change how the WEIGHT attribute is used, enter the first command. You can also use route maps t

Página 107 - Applying an IP ACL

For inbound and outbound updates the order of preference is:• prefix lists (using the neighbor distribute-list command)• AS-PATH ACLs (using the neigh

Página 108 - Configure Ingress ACLs

• If the prefix list contains no filters, all routes are permitted.• If none of the routes match any of the filters in the prefix list, the route is d

Página 109 - Configure Egress ACLs

Filtering BGP Routes Using AS-PATH InformationTo filter routes based on AS-PATH information, use these commands.1. Create a AS-PATH ACL and assign it

Página 110 - IP Prefix Lists

• Assign an ID to a router reflector cluster.CONFIG-ROUTER-BGP modebgp cluster-id cluster-idYou can have multiple clusters in an AS.• Configure the lo

Página 111 - Implementation Information

Configuring BGP ConfederationsAnother way to organize routers within an AS and reduce the mesh for IBGP peers is to configure BGP confederations.As wi

Página 112

Notes, Cautions, and WarningsNOTE: A NOTE indicates important information that helps you make better use of your computer.CAUTION: A CAUTION indicates

Página 113 - Viewing Prefix Lists

Limiting the Source-Active Messages from a Peer...567Preventing MSDP from Cachi

Página 114

• history entry — an entry that stores information on a downed route• dampened path — a path that is no longer advertised• penalized path — a path tha

Página 115 - ACL Resequencing

show ip bgp flap-statistics [ip-address [mask]] [filter-list as-path-name] [regexp regular-expression]– ip-address [mask]: enter the IP address and ma

Página 116

Dampening enabled. 0 history paths, 0 dampened paths, 0 penalized pathsNeighbor AS MsgRcvd MsgSent TblVer InQ OutQ Up/Down State/PfxRcd10.114.8

Página 117 - Route Maps

To reset a BGP connection using BGP soft reconfiguration, use the clear ip bgp command in EXEC Privilege mode at the system prompt.When you enable sof

Página 118

Route Map ContinueThe BGP route map continue feature, continue [sequence-number], (in ROUTE-MAP mode) allows movement from one route-map entry to a sp

Página 119

• When exchanging updates with the peer, BGP sends and receives IPv4 multicast routes if the peer is marked as supporting that AFI/SAFI.• Exchange of

Página 120

EXEC Privilege modedebug ip bgp [ip-address | peer-group peer-group-name] notifications [in | out]• View information about BGP updates and filter by p

Página 121 - How BFD Works

Capabilities advertised to neighbor for IPv4 Unicast : MULTIPROTO_EXT(1) ROUTE_REFRESH(2) CISCO_ROUTE_REFRESH(128)For address family: IPv4 UnicastB

Página 122 - BFD Packet Format

00000000 00000000 00000000 00000000 0181a1e4 0181a25c 41af92c0 00000000 00000000 00000000 00000000 00000001 0181a1e4 0181a25c 41af9400 00000000

Página 123

Sample ConfigurationsThe following example configurations show how to enable BGP and set up some peer groups. These examples are not comprehensive dir

Página 124 - BFD Three-Way Handshake

31 Open Shortest Path First (OSPFv2 and OSPFv3)...605Protocol Overview...

Página 125 - Session State Changes

no shutdownR1(conf-if-lo-0)#int te 1/21R1(conf-if-te-1/21)#ip address 10.0.1.21/24R1(conf-if-te-1/21)#no shutdownR1(conf-if-te-1/21)#show config!inter

Página 126 - Configure BFD

R2(conf-router_bgp)#network 192.168.128.0/24R2(conf-router_bgp)#neighbor 192.168.128.1 remote 99R2(conf-router_bgp)#neighbor 192.168.128.1 no shutR2(c

Página 127 - Enabling BFD Globally

R1(conf-router_bgp)# neighbor 192.168.128.3 peer-group BBBR1(conf-router_bgp)#R1(conf-router_bgp)#show config!router bgp 99network 192.168.128.0/24nei

Página 128

Minimum time between advertisement runs is 30 secondsMinimum time before advertisements start is 0 secondsExample of Enabling Peer Groups (Router 2)R2

Página 129

BGP-RIB over all using 207 bytes of memory2 BGP path attribute entrie(s) using 128 bytes of memory2 BGP AS-PATH entrie(s) using 90 bytes of memory2 ne

Página 130 - Disabling and Re-Enabling BFD

9Content Addressable Memory (CAM)Content addressable memory (CAM) is supported on the S6000 platform.CAM is a type of memory that stores information i

Página 131

CAM Allocation SettingOpenflow 0fedgovacl 0The following additional CAM allocation settings are supported on the S6000, S4810 or S4820T platforms only

Página 132 - Configure BFD for OSPF

EXEC Privilege modecam-acl {default | l2acl number ipv4acl number ipv6acl number ipv4qos number l2qos number l2pt number ipmacacl number vman-qos | vm

Página 133

IPv4Flow : 24K entries : 24K entriesEgL2ACL : 1K entries : 1K entriesEgIPv4ACL : 1K entries : 1K entriesReserved

Página 134 - Disabling BFD for OSPF

L2PT : 0 0IpMacAcl : 0 0VmanQos : 0

Página 135 - Configure BFD for OSPFv3

Implementation Information... 657Protocol Ove

Página 136 - Configure BFD for IS-IS

-- Stack unit 7 -- Current Settings(in block sizes) 1 block = 128 entriesL2Acl : 6Ipv4Acl : 4I

Página 137

Troubleshoot CAM ProfilingThe following section describes CAM profiling troubleshooting.CAM Profile MismatchesThe CAM profile on all cards must match

Página 138 - Disabling BFD for IS-IS

A table-full error message is displayed once the number of entries is crossed the table size. Table-full message is generated only once when it crosse

Página 139 - Configure BFD for BGP

10Control Plane Policing (CoPP)Control plane policing (CoPP) is supported on the S6000 platform.Control plane policing (CoPP) uses access control list

Página 140

Figure 26. CoPP Implemented Versus CoPP Not ImplementedConfigure Control Plane PolicingFor example, border gateway protocol (BGP) and internet control

Página 141 - Disabling BFD for BGP

CoPP policies are configured by creating extended ACL rules and specifying rate-limits through QoS policies. The ACLs and QoS policies are assigned as

Página 142 - Use BFD in a BGP Peer Group

Examples of Configuring CoPP for Different ProtocolsThe following example shows creating the IP/IPv6/MAC extended ACL.Dell(conf)#ip access-list extend

Página 143

The following example shows creating the control plane service policy.Dell(conf)#control-plane-cpuqosDell(conf-control-cpuqos)#service-policy rate-lim

Página 144

The following example shows creating the control plane service policy.Dell#confDell(conf)#control-planeDell(conf-control-plane)#service-policy rate-li

Página 145

GVRP 01:80:c2:00:00:21 any Q7 CP _STP 01:80:c2:00:00:00 any Q7 CP _ISIS 01:80:c2:00:00:14/15 any Q

Página 146 - Configure BFD for VRRP

Configure Per-VLAN Spanning Tree Plus... 685Related Configuration

Página 147

11Data Center Bridging (DCB)Data center bridging (DCB) is supported on the S6000 platform.NOTE: Ethernet Enhancements in Data Center BridgingThe follo

Página 148

network that may drop packets in case of network congestion. IP networks rely on transport protocols (for example, TCP) for reliable data transmission

Página 149 - Troubleshooting BFD

The system supports loading two DCB_Config files:• FCoE converged traffic with priority 3.• iSCSI storage traffic with priority 4.In the Dell Networki

Página 150

• PFC uses DCB MIB IEEE 802.1azd2.5 and PFC MIB IEEE 802.1bb-d2.2.• PFC is supported on specified 802.1p priority traffic (dot1p 0 to 7) and is config

Página 151 - Autonomous Systems (AS)

Table 10. ETS Traffic GroupingsTraffic Groupings DescriptionPriority group A group of 802.1p priorities used for bandwidth allocation and queue schedu

Página 152 - Figure 17. Internal BGP

Data Center Bridging Exchange Protocol (DCBx)The data center bridging exchange (DCBx) protocol is disabled by default on the S4810; ETS is also disabl

Página 153 - Sessions and Peers

Enabling Data Center BridgingDCB is automatically configured when you configure FCoE or iSCSI optimization.Data center bridging supports converged enh

Página 154 - Route Reflectors

NOTE: Dell Networking does not recommend mapping all ingress traffic to a single queue when using PFC and ETS. However, Dell Networking does recommend

Página 155 - BGP Attributes

fpStatsPerPgTableThis table fetches the Allocated Min cells, Shared cells and Headroom cells per Priority Group, the mode in which the buffer cells ar

Página 156 - Best Path Selection Criteria

Enter the 802.1p values of the frames to be paused.The range is from 0 to 7.The default is none.Maximum number of loss less queues supported on the sw

Página 157 - Best Path Selection Details

Classifying Incoming Packets Using ECN and Color-Marking...723Sample configuration to mark non-ecn pack

Página 158 - Local Preference

You can enable any number of 802.1p priorities for PFC. Queues to which PFC priority traffic is mapped are lossless by default. Traffic may be interru

Página 159

interface type slot/port2. Configure the port queues that will still function as no-drop queues for lossless traffic.INTERFACE modepfc no-drop queues

Página 160

By default, the PFC buffer is enabled on all ports on the stack unit.• Configure the PFC buffer for all port pipes in a specified stack unit by specif

Página 161 - Next Hop

• When allocating bandwidth or configuring a queue scheduler for dot1p priorities in a priority group on a DCBx CIN interface, take into account the C

Página 162 - Multiprotocol BGP

4. Exit DCB Output Policy Configuration mode.POLICY-MAP-OUT-ETS modeexitDell Networking OS Behavior: Traffic in priority groups is assigned to strict-

Página 163 - Four-Byte AS Numbers

Creating an ETS Priority GroupAn ETS priority group specifies the range of 802.1p priority traffic to which a QoS output policy with ETS settings is a

Página 164 - AS4 Number Representation

The maximum number of priority groups supported in ETS output policies on an interface is equal to the number of data queues (4) on the port. The 802.

Página 165 - AS Number Migration

Dell Networking OS Behavior: Create a DCB output policy to associate a priority group with an ETS output policy with scheduling and bandwidth configur

Página 166

Configuring Bandwidth Allocation for DCBx CINAfter you apply an ETS output policy to an interface, if the DCBx version used in your data center networ

Página 167

dcb-policy input stack-unit {all | stack-unit-id} stack-ports all dcb-input-policy-nameEntering this command removes all DCB input policies applied to

Página 168 - BGP Configuration

42 Service Provider Bridging...758VLAN Stacking...

Página 169 - Enabling BGP

DCBx OperationDCBx performs the following operations:• Discovers DCB configuration (such as PFC and ETS) in a peer device.• Detects DCB mis-configurat

Página 170

• If the received peer configuration is not compatible with the currently configured port configuration, the link with the DCBx peer port is disabled

Página 171

NOTE: On a DCBx port, application priority TLV advertisements are handled as follows:• The application priority TLV is transmitted only if the priorit

Página 172

A newly elected configuration source propagates configuration changes received from a peer to the other auto-configuration ports. Ports receiving auto

Página 173

Behavior of Tagged PacketsThe below is example for enabling PFC for priority 2 for tagged packets. Priority (Packet Dot1p) 2 will be mapped to PG6 on

Página 174

Table 11.Internal-priority0 1 2 3 4 5 6 7Queue 1 2 0 3 4 5 6 7policy-map-input policy-dscp-based-pfc service-queue 0 class-map dscp-pfc-1 service-queu

Página 175 - Configuring Peer Groups

Figure 29. DCBx Sample TopologyDCBx Prerequisites and RestrictionsThe following prerequisites and restrictions apply when you configure DCBx operation

Página 176

[no] protocol lldp3. Configure the DCBx version used on the interface, where: auto configures the port to operate using the DCBx version received from

Página 177

• fcoe: enables the advertisement of FCoE in Application Priority TLVs.• iscsi: enables the advertisement of iSCSI in Application Priority TLVs.The de

Página 178

NOTE: You can configure the transmission of more than one TLV type at a time. You can only enable ETS recommend TLVs (ets-reco) if you enable ETS conf

Página 179 - Configuring Passive Peering

44 Simple Network Management Protocol (SNMP)...783Protocol Overview...

Página 180

in a DCBx TLV from a remote peer but received a different, conflicting DCBx version.DSM_DCBx_PFC_PARAMETERS_MATCH and DSM_DCBx_PFC_PARAMETERS_MISMATCH

Página 181

Command Outputshow qos priority-groupsDisplays the ETS priority groups configured on the switch, including the 802.1p priority classes and ID of each

Página 182 - Enabling Graceful Restart

The following example shows the show qos dcb-output command.Dell# show qos dcb-outputdcb-output ets priority-group san qos-policy san priority-group

Página 183

The following table describes the show interface pfc summary command fields.Table 13. show interface pfc summary Command DescriptionFields Description

Página 184

Fields DescriptionApplication Priority TLV: ISCSI TLV Tx Status Status of ISCSI advertisements in application priority TLVs from local DCBx port: enab

Página 185

1 0,1,2 100% ETS2 3 0 % SP3 4,5,6,7 0 % SP4 - -5

Página 186 - Redistributing Routes

Local Parameters :------------------Local is enabledTC-grp Priority# Bandwidth TSA0 0,1,2,3,4,5,6,7 100% ETS1 0% ETS2 0% ETS3 0% ETS4 0% ETS5 0% ETS6

Página 187 - Enabling Additional Paths

------------------Local is enabledTC-grp Priority# Bandwidth TSA0 0,1,2,3,4,5,6,7 100% ETS1

Página 188

Field DescriptionLocal Parameters ETS configuration on local port, including Admin mode (enabled when a valid TLV is received from a peer), priority g

Página 189

Number of Traffic Classes is 1Admin mode is onAdmin Parameters:--------------------Admin is enabledTC-grp Priority# Bandwidth TSA--------

Página 190

46 Spanning Tree Protocol (STP)... 808Protocol Overview...

Página 191

Pkts 1 Input ETS Reco TLV pkts, 1 Output ETS Reco TLV pkts, 0 Error ETS Reco TLV PktsThe following example shows the show interface DCBx detail comma

Página 192 - Changing MED Attributes

Field DescriptionConfiguration Source Specifies whether the port serves as the DCBx configuration source on the switch: true (yes) or false (no).Local

Página 193

policy map to forward the matched DSCP packet to that queue. PFC frames gets generated with PFC priority associated with the queue when the queue gets

Página 194 - Filtering BGP Routes

PRIORITY to PG mapping (PRIO2PG) is on the ingress for each port. By default, all priorities are mapped to PG7. A priority for which PFC has to be gen

Página 195

Figure 30. PFC and ETS Applied to LAN, IPC, and SAN Priority TrafficQoS Traffic Classification: The service-class dynamic dot1p command has been used

Página 196

dot1p Value in the Incoming FramePriority Group Assignment3 SAN4 IPC5 LAN6 LAN7 LANThe following describes the priority group-bandwidth assignment.Pri

Página 197

Dell(conf-qos-policy-out)# exitDell(conf)# qos-policy-output ipc etsDell(conf-qos-policy-out)# bandwidth-percentage 5Dell(conf-qos-policy-out)# exitEx

Página 198 - Aggregating Routes

In this example, the configured ETS bandwidth allocation and scheduler behavior is as follows:Unused bandwidth usage:Normally, if there is no traffic

Página 199 - Enabling Route Flap Dampening

Step Task Command Command Modepriority groups is made available and allocated according to the specified percentages. If a priority group does not use

Página 200

Step Task Command Command Mode1Enter interface configuration mode on an Ethernet port.interface {tengigabitEthernet slot/port | fortygigabitEthernet s

Página 201

48 Tunneling ... 835Configuring a Tunnel...

Página 202 - Changing BGP Timers

Configuring Lossless QueuesDCB also supports the manual configuration of lossless queues on an interface after you disable PFC mode in a DCB map and a

Página 203

Data Center Bridging: Default ConfigurationThis functionality is supported on the S6000 platform.Before you configure PFC and ETS on an S6000 switch (

Página 204 - Enabling MBGP Configurations

As soon as you apply a DCB map with PFC enabled on an interface, DCBx starts exchanging information with a peer. The IEEE802.1Qbb, CEE and CIN version

Página 205 - Debugging BGP

ETS Configuration NotesETS provides a way to optimize bandwidth allocation to outbound 802.1p classes of converged Ethernet traffic. Different traffic

Página 206 - Storing Last and Bad PDUs

The following prerequisites and restrictions apply when you configure ETS bandwidth allocation or strict-priority queuing in a DCB map:• When allocati

Página 207 - Capturing PDUs

Dynamic ingress buffering enables the sending of pause frames at different thresholds based on the number of ports that experience congestion at a tim

Página 208 - PDU Counters

Configure the dcb-buffer-threshold command and its related parameters only on ports with either auto configuration or dcb-map configuration. This comm

Página 209 - Sample Configurations

S6000-109-Dell(conf)#dcb pfc-shared-buffer-size 4000 S6000-109-Dell(conf)#dcb pfc-total-buffer-size 50003. Configure the number of PFC queues.CONFIGUR

Página 210

Applying a DCB Map in a Switch Stack Apply the same DCB map with PFC and ETS configuration to all stacked ports in a switch stack. You cannot apply di

Página 211

12Dynamic Host Configuration Protocol (DHCP)Dynamic host configuration protocol (DHCP) is available on the S6000 platform.DHCP is an application layer

Página 212

VLT Bandwidth Monitoring...864VLT and IGMP Snoop

Página 213

Option Number and DescriptionSubnet Mask Option 1Specifies the client’s subnet mask.Router Option 3Specifies the router IP addresses that may serve as

Página 214

Option Number and DescriptionIdentifiers a user-defined string used by the Relay Agent to forward DHCP client packets to a specific server.L2 DHCP Sno

Página 215 - CAM Allocation

Figure 32. Client and Server MessagingImplementation InformationThe following describes DHCP implementation.• Dell Networking implements DHCP based on

Página 216

Configure the System to be a DHCP ServerConfiguring the system to be a DHCP server is supported only on the S6000 platform.A DHCP server is a network

Página 217 - View CAM Profiles

3. Specify the range of IP addresses from which the DHCP server may assign addresses.DHCP <POOL> modenetwork network/prefix-length• network: the

Página 218 - View CAM-ACL Settings

lease {days [hours] [minutes] | infinite}The default is 24 hours.Specifying a Default GatewayThe IP address of the default router should be on the sam

Página 219

Creating Manual Binding EntriesAn address binding is a mapping between the IP address and the media access control (MAC) address of a client.The DHCP

Página 220 - CAM Optimization

Configure the System to be a DHCP ClientA DHCP client is a network device that requests an IP address and configuration parameters from a DHCP server.

Página 221 - Troubleshoot CAM Profiling

• Release the IP address dynamically acquired from a DHCP server from the interface.• Disable the DHCP client on the interface so it cannot acquire a

Página 222

• To display statistics about DHCP client interfaces, use the show ip dhcp client statistics interface type slot/port command.• To clear DHCP client s

Página 223 - Control Plane Policing (CoPP)

Contents1 About this Guide... 32Audience...

Página 224

Configuring and Controlling VXLAN from the NVP Controller GUI...906Configuring VxLAN Gateway...

Página 225

Virtual Link Trunking (VLT)A DHCP client is not supported on VLT interfaces.VLAN and Port ChannelsDHCP client configuration and behavior are the same

Página 226

The received stacking configuration is always applied on the master stack unit.option #230 "unit-number:3#priority:2#stack-group:14"Configur

Página 227

ip dhcp relay information-option remote-idDHCP SnoopingDHCP snooping protects networks from spoofing. In the context of DHCP snooping, ports are eithe

Página 228 - Show Commands

3. Enable DHCP snooping on a VLAN.CONFIGURATION modeip dhcp snooping vlan nameAdding a Static Entry in the Binding TableTo add a static entry in the b

Página 229

Drop DHCP Packets on Snooped VLANs OnlyBinding table entries are deleted when a lease expires or the relay agent encounters a DHCPRELEASE.Line cards m

Página 230 - Data Center Bridging (DCB)

MAC flooding An attacker can send fraudulent ARP messages to the gateway until the ARP cache is exhausted, after which, traffic from the gateway is br

Página 231 - Priority-Based Flow Control

To see how many valid and invalid ARP packets have been processed, use the show arp inspection statistics command.Dell#show arp inspection statisticsD

Página 232

The DHCP binding table associates addresses the DHCP servers assign, with the port on which the requesting client is attached. When you enable IP sour

Página 233

ip dhcp source-address-validation ipmacDell Networking OS creates an ACL entry for each IP+MAC address pair in the binding table and applies it to the

Página 234

13Equal Cost Multi-Path (ECMP)Equal cost multi-path (ECMP) is supported on theS6000 platform.ECMP for Flow-Based AffinityECMP for flow-based affinity

Página 235

Enabling Environmental Monitoring... 959Recognize an Over

Página 236 - Enabling Data Center Bridging

CONFIGURATION mode.ipv6 ecmp-deterministicConfiguring the Hash Algorithm SeedDeterministic ECMP sorts ECMPs in order even though RTM provides them in

Página 237

NOTE: An ecmp-group index is generated automatically for each unique ecmp-group when the user configures multipath routes to the same network. The sys

Página 238

Creating an ECMP Group BundleWithin each ECMP group, you can specify an interface.If you enable monitoring for the ECMP group, the utilization calcula

Página 239

Dell(conf-ecmp-group-5)#show config!ecmp-group 5 interface tengigabitethernet 0/2 interface tengigabitethernet 0/3 link-bundle-monitor enableDell(c

Página 240 - Configuring Lossless Queues

The following is the portion of the example output from Release 9.3(0.1):Neighbor Mac-Addr Port Vid EC --------

Página 241

14FCoE TransitThe Fibre Channel over Ethernet (FCoE) Transit feature is supported on the switch on Ethernet interfaces. When you enable the switch for

Página 242

FIP provides functionality for discovering and logging into an FCF. After discovering and logging in, FIP allows FCoE traffic to be sent and received

Página 243

Figure 33. FIP Discovery and Login Between an ENode and an FCFFIP Snooping on Ethernet BridgesIn a converged Ethernet network, intermediate Ethernet b

Página 244

FCoE-generated ACLsThese take precedence over user-configured ACLs. A user-configured ACL entry cannot deny FCoE and FIP snooping frames.The following

Página 245

The following sections describe how to configure the FIP snooping feature on a switch that functions as a FIP snooping bridge so that it can perform t

Página 246

1About this GuideThis guide describes the protocols and features the Dell Networking Operating System (OS) supports and provides configuration instruc

Página 247 - ETS Operation with DCBx

For VLAN membership, you must:• create the VLANs on the switch which handles FCoE traffic (use the interface vlan command).• configure each FIP snoopi

Página 248

Enable FIP Snooping on VLANsYou can enable FIP snooping globally on a switch on all VLANs or on a specified VLAN.When you enable FIP snooping on VLANs

Página 249 - Configure a DCBx Operation

Table 21. Impact of Enabling FIP SnoopingImpact DescriptionMAC address learning MAC address learning is not performed on FIP and FCoE frames, which ar

Página 250 - DCBx Port Roles

FCoE configuration:copy flash:/ CONFIG_TEMPLATE/ FCoE_DCB_Config running-configThe configuration files are stored in the flash memory in the CONFIG_TE

Página 251

Command Outputand MAC address, FCF MAC address, VLAN ID and FC-ID.show fip-snooping fcf [fcf-mac-address]Displays information on the FCFs in FIP-snoop

Página 252 - Configuration Source Election

Table 23. show fip-snooping sessions Command DescriptionField DescriptionENode MAC MAC address of the ENode .ENode Interface Slot/ port number of the

Página 253

The following example shows the show fip-snooping fcf command.Dell# show fip-snooping fcfFCF MAC FCF Interface VLAN FC-MAP FKA_ADV_PERIOD

Página 254 - Behavior of Tagged Packets

Number of FLOGI :1Number of FDISC :16Number of FLOGO

Página 255 - DCBx Example

Field DescriptionNumber of FLOGI Number of FIP-snooped FLOGI request frames received on the interface.Number of FDISC Number of FIP-snooped FDISC requ

Página 256 - Configuring DCBx

The following example shows the show fip-snooping vlan command.Dell# show fip-snooping vlan* = Default VLANVLAN FC-MAP FCFs Enodes Sessions----

Página 257

2Configuration FundamentalsThe Dell Networking Operating System (OS) command line interface (CLI) is a text-based interface you can use to configure i

Página 258

Example of Enabling the FIP Snooping Feature on the Switch (FIP Snooping Bridge)Dell(conf)# feature fip-snoopingExample of Enabling FIP Snooping on th

Página 259 - DCBx Error Messages

15Flex Hash and Optimized Boot-UpThis chapter describes the Flex Hash and fast-boot enhancements.Flex Hash Capability OverviewThis functionality is su

Página 260

When load balancing RRoCE packets using flex hash is enabled, the show ip flow command is disabled. Similarly, when the show ip flow command is in use

Página 261

a ToR, leaf and spine unit or configuration setup. An exterior border gateway protocol (EBGP) session exists between the ToR and leaf switch units, an

Página 262

9. Traffic from North-South and South-North nodes are of line rate type.10. Traffic outage for a planned reboot is less than 30 seconds for 4000 route

Página 263

because of the peer timing out, traffic disruption occurs from that point onwards, even if the system continues to maintain valid routing information

Página 264

dynamic ARP or ND database entries are not present or required to be restored. The system boot up mode will not be fast boot and actions specific to t

Página 265

While the above change will ensure that at least one path to each destination gets into the FIB as quickly as possible, it does prevent additional pat

Página 266

occurs. You can optimize the booting time of the ToR nodes that experience a single point of failure to reduce the outage in traffic-handling operatio

Página 267

16Force10 Resilient Ring Protocol (FRRP)Force10 resilient ring protocol (FRRP) is supported on the S6000 platform.FRRP provides fast network convergen

Página 268

• EXEC Privilege mode has commands to view configurations, clear counters, manage configuration files, run diagnostics, and enable or disable debug op

Página 269

The Member VLAN is the VLAN used to transmit data as described earlier.The Control VLAN is used to perform the health checks on the ring. The Control

Página 270

Multiple FRRP RingsUp to 255 rings are allowed per system and multiple rings can be run on one system.More than the recommended number of rings may ca

Página 271

Concept ExplanationControl VLAN Each ring has a unique Control VLAN through which tagged ring health frames (RHF) are sent. Control VLANs are used onl

Página 272

Concept ExplanationThere is no periodic transmission of TCRHFs. The TCRHFs are sent on triggered events of ring failure or ring restoration only.Imple

Página 273

Configuring the Control VLANControl and member VLANS are configured normally for Layer 2. Their status as control or member is determined at the FRRP

Página 274

• For a Gigabit Ethernet interface, enter the keyword GigabitEthernet then the slot/port information.• For a SONET interface, enter the keyword sonet

Página 275

• Slot/Port, range: Slot and Port ID for the interface. The range is entered Slot/Port-Port.• For a 10/100/1000 Ethernet interface, enter the keyword

Página 276

• Enter the desired intervals for Hello-Interval or Dead-Interval times.CONFIG-FRRP mode.timer {hello-interval|dead-interval} milliseconds– Hello-Inte

Página 277

Troubleshooting FRRPTo troubleshoot FRRP, use the following information.Configuration Checks• Each Control Ring must use a unique VLAN ID.• Only two i

Página 278 - Applying a DCB Map on a Port

no ip address switchport no shutdown!interface Vlan 101 no ip address tagged GigabitEthernet 2/14,31 no shutdown!interface Vlan 201 no ip addr

Página 279

CLI Command Mode Prompt Access CommandNOTE: Access all of the following modes from CONFIGURATION mode.AS-PATH ACLDell(config-as-path)# ip as-path acce

Página 280

17GARP VLAN Registration Protocol (GVRP)GARP VLAN registration protocol (GVRP) is supported on the S6000 platform.Typical virtual local area network (

Página 281 - PFC Configuration Notes

Configure GVRPTo begin, enable GVRP.To facilitate GVRP communications, enable GVRP globally on each switch. Then, GVRP configuration is per interface

Página 282

• Configure a GARP TimerEnabling GVRP GloballyTo configure GVRP globally, use the following command.• Enable GVRP for the entire switch.CONFIGURATION

Página 283 - ETS Configuration Notes

not be unconfigured when it receives a Leave PDU. Therefore, the registration mode on that interface is FIXED.• Forbidden Mode — Disables the port to

Página 284 - Pause and Resume of Traffic

LeaveAll Timer 5000Dell(conf)#Dell Networking OS displays this message if an attempt is made to configure an invalid GARP timer: Dell(conf)#garp time

Página 285 - Settings

18Internet Group Management Protocol (IGMP)Internet group management protocol (IGMP) is supported on the S6000 platform.Multicast is premised on ident

Página 286

Figure 37. IGMP Messages in IP PacketsJoin a Multicast GroupThere are two ways that a host may join a multicast group: it may respond to a general que

Página 287

response, the querier removes the group from the list associated with forwarding port and stops forwarding traffic for that group to the subnet.IGMP V

Página 288

Figure 39. IGMP Version 3–Capable Multicast Routers Address StructureJoining and Filtering Groups and SourcesThe following illustration shows how mult

Página 289 - Figure 31. DHCP packet Format

Figure 40. Membership Reports: Joining and FilteringLeaving and Staying in GroupsThe following illustration shows how multicast routers track and refr

Página 290

CLI Command Mode Prompt Access CommandRAPID SPANNING TREEDell(config-rstp)# protocol spanning-tree rstpREDIRECTDell(conf-redirect-list)# ip redirect-l

Página 291

Figure 41. Membership Queries: Leaving and StayingConfigure IGMPConfiguring IGMP is a two-step process.1. Enable multicast routing using the ip multic

Página 292

• Fast Convergence after MSTP Topology Changes• Designating a Multicast Router InterfaceViewing IGMP Enabled InterfacesInterfaces that are enabled wit

Página 293

IGMP version is 3Dell(conf-if-gi-1/13)#Viewing IGMP GroupsTo view both learned and statically configured IGMP groups, use the following command.• Vi

Página 294 - Configuration Tasks

INTERFACE modeip igmp query-interval• Adjust the maximum response time.INTERFACE modeip igmp query-max-resp-time• Adjust the last member query interva

Página 295 - Specifying a Default Gateway

Enabling IGMP Immediate-LeaveIf the querier does not receive a response to a group-specific or group-and-source query, it sends another (querier robus

Página 296 - Using DHCP Clear Commands

• View the configuration.CONFIGURATION modeshow running-config• Disable snooping on a VLAN.INTERFACE VLAN modeno ip igmp snoopingRelated Configuration

Página 297

• Configure the switch to only forward unregistered packets to ports on a VLAN that are connected to mrouter ports.CONFIGURATION modeno ip igmp snoopi

Página 298

ip igmp snooping last-member-query-intervalFast Convergence after MSTP Topology ChangesThe following describes the fast convergence feature.When a por

Página 299 - Stacking

routes. If SSH is specified as a management application, SSH links to and from an unknown destination uses the management default route.Protocol Separ

Página 300 - DHCP Server

can configure two default routes, one configured on the management port and the other on the front-end port.Two tables, namely, Egress Interface Selec

Página 301 - Configure Secure DHCP

CLI Command Mode Prompt Access CommandLLDP MANAGEMENT INTERFACEDell(conf-lldp-mgmtIf)#management-interface (LLDP Mode)LINEDell(config-line-console) or

Página 302

When the feature is disabled using the no management egress-interface-selection command, the following operations are performed:• All management appli

Página 303 - Clearing the Binding Table

the show management application pkt-drop-cntr command. This counter is cleared using clear management application pkt-drop-cntr command.• Packets whos

Página 304 - Dynamic ARP Inspection

traffic for such end-user-originated sessions destined to management port ip1 is handled using the EIS route lookup.Handling of Transit Traffic (Traff

Página 305

This phenomenon occurs where traffic is transiting the switch. Traffic has not originated from the switch and is not terminating on the switch.• Drop

Página 306 - Source Address Validation

Protocol Behavior when EIS is Enabled Behavior when EIS is Disableddns EIS Behavior Default Behaviorftp EIS Behavior Default Behaviorntp EIS Behavior

Página 307

Default Behavior: Route lookup is done in the default routing table and appropriate egress port is selected.Protocol Behavior when EIS is Enabled Beha

Página 308

Designating a Multicast Router InterfaceTo designate an interface as a multicast router interface, use the following command.Dell Networking OS also h

Página 309 - Equal Cost Multi-Path (ECMP)

19InterfacesThis chapter describes interface types, both physical and logical, and how to configure them with Dell Networking Operating System (OS).•

Página 310 - Link Bundle Monitoring

Interface TypesThe following table describes different interface types.Interface Type Modes Possible Default Mode Requires Creation Default StatePhysi

Página 311 - Managing ECMP Group Paths

Hardware is Force10Eth, address is 00:01:e8:05:f3:6a Current address is 00:01:e8:05:f3:6aPluggable media present, XFP type is 10GBASE-LR. Medium is

Página 312 - Creating an ECMP Group Bundle

-- Stack Info --Unit UnitType Status ReqTyp CurTyp Version Ports-------------------------------------------------

Página 313

interface GigabitEthernet 9/7 no ip address shutdown!interface GigabitEthernet 9/8 no ip address shutdown!interface GigabitEthernet 9/9 no ip add

Página 314

Configuration Task List for Physical InterfacesBy default, all interfaces are operationally disabled and traffic does not pass through them.The follow

Página 315 - FCoE Transit

Type of Interface Possible Modes Requires Creation Default State10/100/1000 Ethernet, 10 Gigabit EthernetLayer 2Layer 3No Shutdown (disabled)Managemen

Página 316 - Table 20. FIP Functions

For information about enabling and configuring the Spanning Tree Protocol, refer to Spanning Tree Protocol (STP).To view the interfaces in Layer 2 mod

Página 317

The ip-address must be in dotted-decimal format (A.B.C.D) and the mask must be in slash format (/xx).Add the keyword secondary if the IP address is th

Página 318

Configuring EISEIS is compatible with the following protocols: DNS, FTP, NTP, RADIUS, sFlow, SNMP, SSH, Syslog, TACACS, Telnet, and TFTP.To enable and

Página 319 - Using FIP Snooping

Configuring Management Interfaces on the S-SeriesYou can manage the S-Series from any port.To configure an IP address for the port, use the following

Página 320

NOTE: To monitor VLAN interfaces, use Management Information Base for Network Management of TCP/IP-based internets: MIB-II (RFC 1213).NOTE: You cannot

Página 321 - Configure the FC-MAP Value

• View Loopback interface configurations.EXEC modeshow interface loopback number• Delete a Loopback interface.CONFIGURATION modeno interface loopback

Página 322 - Configuring FIP Snooping

Port Channel BenefitsA port channel interface provides many benefits, including easy management, link redundancy, and sharing.Port channels are transp

Página 323

no ip address no shutdownLayer 2 protocols are disabled by default. To enable Layer 2 protocols, use the no disable command. For example, in PROTOC

Página 324

configuration becomes the common speed of the port channel. If the other interfaces configured in that port channel are configured with a different sp

Página 325

You can configure a port channel as you would a physical interface by enabling or configuring protocols or assigning access control lists.Adding a Phy

Página 326

Gi 13/8 (Up) Gi 13/13 (Up) Gi 13/14 (Up)Dell#The following example shows the

Página 327

Reassigning an Interface to a New Port ChannelAn interface can be a member of only one port channel. If the interface is a member of a port channel, r

Página 328

Example of Configuring the Minimum Oper Up Links in a Port ChannelDell#config tDell(conf)#int po 1Dell(conf-if-po-1)#minimum-links 5Dell(conf-if-po-1)

Página 329

– secondary: the IP address is the interface’s backup IP address. You can configure up to eight secondary IP addresses.Deleting or Disabling a Port Ch

Página 330

– ip-selection [dest-ip | source-ip] — Distribute IP traffic based on the IP destination or source address.– mac [dest-mac | source-dest-mac | source-

Página 331 - Flex Hash Capability Overview

The hash-algorithm command is specific to ECMP group. The default ECMP hash configuration is crc-lower. This command takes the lower 32 bits of the ha

Página 332 - Optimizing the Boot Time

Bulk Configuration ExamplesUse the interface range command for bulk configuration.• Create a Single-Range• Create a Multiple-Range• Exclude Duplicate

Página 333

Overlap Port RangesThe following is an example showing how the interface-range prompt extends a port range from the smallest start port number to the

Página 334 - LACP and IPv4 Routing

4 Management... 54Configuring Privilege Levels...

Página 335 - BGP Graceful Restart

Short-Cut Key CombinationActionCNTL-A Moves the cursor to the beginning of the command line.CNTL-B Moves the cursor back one character.CNTL-D Deletes

Página 336 - Changes to BGP Multipath

Choosing an Interface-Range MacroTo use an interface-range macro, use the following command.• Selects the interfaces range to be configured using the

Página 337

Traffic statistics: Current Rate Delta Input bytes: 0 0 Bps 0 Output bytes: 0 0 Bps 0 Input packets:

Página 338

EXEC Privilege modeshow tdr gigabitethernet <slot>/<port>Splitting QSFP Ports to SFP+ PortsSplitting QSFP ports to SFP+ ports is supported

Página 339 - Protocol Overview

When connected to a QSFP or QSFP+ port on a 40 Gigabit adapter, QSA acts as an interface for the SFP or SFP+ cables. This interface enables you to dir

Página 340 - Ring Status

Support for LM4 OpticsThe newly supported LM4 optics are similar in behavior to the LR4 optics that are already supported. However, in the output of s

Página 341 - Important FRRP Concepts

SFP+ 0 Id = 0x0dSFP+ 0 Ext Id = 0x00SFP+ 0 Connector = 0x23……………………….Dell#show interfaces tengi

Página 342

QSFP 0 Connector = 0x23QSFP 0 Transceiver Code = 0x08 0x00 0x00 0x00 0x00 0x00 0x00 0x00QSFP 0 Encoding = 0x00…

Página 343 - FRRP Configuration

Pluggable media present, SFP+ type is 10GBASE-SX……….LineSpeed 10000 MbitDell#show interfaces tengigabitethernet 0/4gigabitethernet 0/0 is up, line pro

Página 344 - Configuring the Control VLAN

0 10 QSFP 4x10GBASE-CR1-3M APF12420031B3P0 11 QSFP 4x10GBASE-CR1-3M APF12420031B3P0 12

Página 345

To view dampening information on all or specific dampened interfaces, use the show interfaces dampening command from EXEC Privilege mode.Dell# show in

Página 346 - Setting the FRRP Timers

• show run | grep Ethernet returns a search result with instances containing a capitalized “Ethernet,” such as interface GigabitEthernet 0/0.• show ru

Página 347 - Viewing the FRRP Information

Transmission MediaMTU Range (in bytes)Ethernet594-12000 = link MTU576-9234 = IP MTULink Bundle MonitoringLink bundle monitoring is supported only on t

Página 348 - Troubleshooting FRRP

Control how the system responds to and generates 802.3x pause frames on Ethernet interfaces. The default is rx off tx off. INTERFACE mode. flowcontrol

Página 349

The flow control sender and receiver must be on the same port-pipe. Flow control is not supported across different port-pipes.To enable pause frames,

Página 350

• All members must have the same link MTU value and the same IP MTU value.• The port channel link MTU and IP MTU must be less than or equal to the lin

Página 351 - Configure GVRP

Setting the Speed and Duplex Mode of Ethernet InterfacesTo discover whether the remote and local interface requires manual speed synchronization, and

Página 352 - Configure GVRP Registration

Gi 0/3 Down Auto Auto --Gi 0/4 Force10Port Up 1000 Mbit Auto 30-130Gi 0/5 Down Auto Auto --Gi 0/6

Página 353 - Configure a GARP Timer

• Change the default interval between keepalive messages.INTERFACE modekeepalive [seconds]• View the new setting.INTERFACE modeshow configView Advance

Página 354 - Dell(conf)#

Configuring the Interface Sampling SizeAlthough you can enter any value between 30 and 299 seconds (the default), software polling is done once every

Página 355 - IGMP Protocol Overview

0 64-byte pkts, 0 over 64-byte pkts, 0 over 127-byte pkts 0 over 255-byte pkts, 0 over 511-byte pkts, 0 over 1023-byte pktsReceived 0 input symbol

Página 356 - Leaving a Multicast Group

– For a Port Channel interface, enter the keywords port-channel then a number.– For the management interface on the RPM, enter the keyword ManagementE

Página 357 - IGMP Version 3

NOTE: You can filter a single command output multiple times. The save option must be the last option entered. For example: Dell# command | grep regula

Página 358

The compressed configuration will group all the similar looking configuration thereby reducing the size of the configuration. For this release, the co

Página 359 - Leaving and Staying in Groups

shutdown!interface TenGigabitEthernet 0/10no ip addressshutdown!interface TenGigabitEthernet 0/34ip address 2.1.1.1/16shutdown!interface Vlan 2no ip a

Página 360 - Configure IGMP

no ip addressno shutdown!interface Vlan 1000ip address 1.1.1.1/16no shutdownUncompressed config size – 52 lineswrite memory compressedThe write memory

Página 361 - Selecting an IGMP Version

20IPv4 RoutingIPv4 routing is supported on the S6000 platform.The Dell Networking Operating System (OS) supports various IP addressing features. This

Página 362 - Adjusting Timers

• Assigning IP Addresses to an Interface (mandatory)• Configuring Static Routes (optional)• Configure Static Routes for the Management Interface (opti

Página 363

interface GigabitEthernet 0/0 ip address 10.11.1.1/24 no shutdown!Dell(conf-if)#Dell(conf-if)#show conf!interface GigabitEthernet 0/0ip address 10.1

Página 364 - IGMP Snooping

S 6.1.2.4/32 via 6.1.20.2, Te 5/0 1/0 00:02:30S 6.1.2.5/32 via 6.1.20.2, Te 5/0 1/0 00:02:30S 6.1.2.6/32 via 6.1.20.2, Te 5/

Página 365 - Disabling Multicast Flooding

S 6.1.2.6/32 via 6.1.20.2, Te 5/0 1/0 00:02:30S 6.1.2.7/32 via 6.1.20.2, Te 5/0 1/0 00:02:30S 6.1.2.8/32 via 6.1.20.2, Te 5/0

Página 366

You can set this duration or interval for which the TCP connection waits to be established to a significantly high value to prevent the device from mo

Página 367 - Applications

Enabling Dynamic Resolution of Host NamesBy default, dynamic resolution of host names (DNS) is disabled.To enable DNS, use the following commands.• En

Página 368 - Protocol Separation

3Getting StartedThis chapter describes how you start configuring your system.When you power up the chassis, the system performs a power-on self test (

Página 369

ip domain-list nameConfigure this command up to six times to specify a list of possible domain names. Dell Networking OS searches the domain names in

Página 370

ARPDell Networking OS uses two forms of address resolution: address resolution protocol (ARP) and Proxy ARP.ARP runs over Ethernet and enables endstat

Página 371

Example of the show arp CommandThese entries do not age and can only be removed manually. To remove a static ARP entry, use the no arp ip-address comm

Página 372

– For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then the slot/port information.NOTE: Transit traffic may not be forwarded during th

Página 373

Figure 42. ARP Learning via ARP RequestBeginning with Dell Networking OS version 8.3.1.0, when you enable ARP learning via gratuitous ARP, the system

Página 374

The range is from 1 to 20.• Set the exponential timer for resending unresolved ARPs.CONFIGURATION modearp backoff-timeThe default is 30.The range is f

Página 375

UDP HelperUser datagram protocol (UDP) helper allows you to direct the forwarding IP/UDP broadcast traffic by creating special broadcast addresses and

Página 376

Configuring a Broadcast AddressTo configure a broadcast address, use the following command.• Configure a broadcast address on an interface.ip udp-broa

Página 377 - Interfaces

address to the configured broadcast 1.1.255.255 and routes the packet to VLANs 100 and 101. If you do not configure an IP broadcast address (using the

Página 378 - Interface Types

Figure 45. UDP Helper with Subnet Broadcast AddressesUDP Helper with Configured Broadcast AddressesIncoming packets with a destination IP address matc

Página 379

Accessing the Console PortTo access the console port, follow these steps:For the console port pinout, refer to Accessing the RJ-45 Console Port with a

Página 380 - Physical Interfaces

• If the Incoming packet has a destination IP address that matches the subnet broadcast address of any interface, the unaltered packet is routed to th

Página 381 - Overview of Layer Modes

21IPv6 RoutingInternet protocol version 6 (IPv6) routing is supported on the S6000 platform.NOTE: The IPv6 basic commands are supported on all platfor

Página 382

NOTE: Dell Networking OS provides the flexibility to add prefixes on Router Advertisements (RA) to advertise responses to Router Solicitations (RS). B

Página 383

• Partitioning will be applied well before the system initialization. This will be done using the NVRAM.• Dell Networking OS provides CLI for enabling

Página 384

IPv6 Header FieldsThe 40 bytes of the IPv6 header are ordered, as shown in the following illustration.Figure 47. IPv6 Header FieldsVersion (4 bits)The

Página 385 - Management Interfaces

The following lists the Next Header field values.Value Description0 Hop-by-Hop option header4 IPv46 TCP8 Exterior Gateway Protocol (EGP)41 IPv643 Rout

Página 386 - VLAN Interfaces

However, if the Destination Address is a Hop-by-Hop options header, the Extension header is examined by every forwarding router along the packet’s rou

Página 387 - Loopback Interfaces

of double colons is supported in a single address. Any number of consecutive 0000 groups may be reduced to two colons, as long as there is only one do

Página 388 - Port Channel Interfaces

Implementing IPv6 with Dell Networking OSDell Networking OS supports both IPv4 and IPv6 and both may be used simultaneously in your system.The followi

Página 389 - Port Channel Implementation

Feature and FunctionalityDocumentation and Chapter LocationS6000IS-IS for IPv6 8.3.11 Intermediate System to Intermediate SystemIPv6 IS-IS in the Dell

Página 390 - Creating a Port Channel

• Characters within the string can be letters, digits, and hyphens.To create a host name, use the following command.• Create a host name.CONFIGURATION

Página 391

Feature and FunctionalityDocumentation and Chapter LocationS6000(outbound SSH) Layer 3 onlySecure Shell (SSH) server support over IPv6 (inbound SSH) L

Página 392

Figure 48. Path MTU Discovery ProcessIPv6 Neighbor DiscoveryIPv6 neighbor discovery protocol (NDP) is supported on the S6000 platform.NDP is a top-lev

Página 393

Figure 49. NDP Router RedirectIPv6 Neighbor Discovery of MTU PacketsYou can set the MTU advertised through the RA packets to incoming routers, without

Página 394

Example for Configuring an IPv6 Recursive DNS ServerThe following example configures a RDNNS server with an IPv6 address of 1000::1 and a lifetime of

Página 395

Joined Group address(es): ff02::1 ff02::2 ff02::1:ff00:12 ff02::1:ff8b:7570 ND MTU is 0 ICMP redirects are not sent DAD is enabled, n

Página 396 - Changing the Hash Algorithm

• Clearing IPv6 RoutesAdjusting Your CAM-ProfileThe cam-acl command is supported on the S6000 platform.Although adjusting your CAM-profile is not a ma

Página 397 - Bulk Configuration

You can configure up to two IPv6 addresses on management interfaces, allowing required default router support on the management port that is acting as

Página 398 - Bulk Configuration Examples

Configuring Telnet with IPv6IPv6 telnet is supported on the S6000 platform.The Telnet client and server in Dell Networking OS supports IPv6 connection

Página 399 - Define the Interface Range

mroute IPv6 multicast-routing tableneighbors IPv6 neighbor informationospf OSPF informationpim PIM V6 informationprefix-list

Página 400

ND base reachable time is 30000 millisecondsND retransmit interval is 1000 millisecondsND hop limit is 64Showing IPv6 RoutesTo view the global IPv6 ro

Página 401 - Maintenance Using TDR

Configure a Management RouteDefine a path from the system to the network from which you are accessing the system remotely. Management routes are separ

Página 402

C 912::/64 [0/0] Direct, Lo 2, 00:02:33O IA 999::1/128 [110/2] via fe80::201:e8ff:fe8b:3166, Te 0/24, 00:01:30L fe80::/10 [0/0] Dire

Página 403

– ipv6 address: the format is x:x:x:x::x.– mask: the prefix length is from 0 to 128.NOTE: IPv6 addresses are normally written as eight groups of four

Página 404 - Example Scenarios

22iSCSI OptimizationiSCSI optimization is supported on the S6000 platform.This chapter describes how to configure internet small computer system inter

Página 405

• If you configure flow-control, iSCSI uses the current configuration. If you do not configure flow-control, iSCSI auto-configures flow control settin

Página 406

Monitoring iSCSI Traffic FlowsThe switch snoops iSCSI session-establishment and termination packets by installing classifier rules that trap iSCSI pro

Página 407

If more than 256 simultaneous sessions are logged continuously, the following message displays indicating the queue rate limit has been reached:%STKUN

Página 408 - Link Dampening

Configuring Detection and Ports for Dell Compellent ArraysTo configure a port connected to a Dell Compellent storage array, use the following command.

Página 409 - Clearing Dampening Counters

iSCSI optimization, which can turn on flow control again on reboot, use the no iscsi enable command and save the configuration.When you enable iSCSI o

Página 410

Parameter Default ValueiSCSI session monitoring Disabled. The CAM allocation for iSCSI is set to zero (0).iSCSI Optimization PrerequisitesThe followin

Página 411 - Enabling Pause Frames

5. Reload the switch.EXEC Privilege modereloadAfter the switch is reloaded, DCB/ DCBx and iSCSI monitoring are enabled.6. (Optional) Configure the iSC

Página 412 - Table 29. Layer 2 Overhead

– level: is the privilege level, is 15 by default, and is not required– encryption-type: specifies how you are inputting the password, is 0 by default

Página 413 - Port-Pipes

The range is from 5 to 43,200 minutes.The default is 10 minutes.9. (Optional) Configures DCBX to send iSCSI TLV advertisements.LLDP CONFIGURATION mode

Página 414

3260860The following example shows the show iscsi session command.VLT PEER1Dell#show iscsi sessionSession 0:------------------------------------------

Página 415 - Set Auto-Negotiation Options

23Intermediate System to Intermediate SystemIntermediate system to intermediate system (Is-IS) is supported on the S6000 platform.•• IS-IS is supporte

Página 416

The NET length is variable, with a maximum of 20 bytes and a minimum of 8 bytes. It is composed of the following:• area address — within your routing

Página 417

Transition ModeAll routers in the area or domain must use the same type of IPv6 support, either single-topology or multi-topology. A router operating

Página 418 - Dynamic Counters

A new TLV (the Restart TLV) is introduced in the IIH PDUs, indicating that the router supports graceful restart.TimersThree timers are used to support

Página 419

• Accepts external IPv6 information and advertises this information in the PDUs.The following table lists the default IS-IS values.Table 31. IS-IS Def

Página 420

Enabling IS-ISBy default, IS-IS is not enabled.The system supports one instance of IS-IS. To enable IS-IS globally, create an IS-IS routing process an

Página 421

The IP address must be on the same subnet as other IS-IS neighbors, but the IP address does not need to relate to the NET address.5. Enter an IPv6 Add

Página 422

IS-IS: Level-2 Hellos (sent/rcvd) : 4272/1538 IS-IS: PTP Hellos (sent/rcvd) : 0/0 IS-IS: Level-1 LSPs sourced (new/refresh) : 0/0 IS-IS: Level-2

Página 423 - IPv4 Routing

Example of Copying a File to an FTP ServerDell#copy flash://Dell-EF-8.2.1.0.bin ftp://myusername:[email protected]//Dell/Dell-EF-8.2.1.0!!!!!!!!!

Página 424

Use this command for IPv6 route computation only when you enable multi-topology. If using single-topology mode, to apply to both IPv4 and IPv6 route c

Página 425 - Configuring Static Routes

– level-1, level-2: identifies the database instance type to which the wait interval applies.The range is from 5 to 120 seconds.The default is 30 seco

Página 426

To view all interfaces configured with IS-IS routing along with the defaults, use the show isis interface command in EXEC Privilege mode.Dell#show isi

Página 427 - Messages

max-lsp-lifetime seconds– seconds: the range is from 1 to 65535.The default is 1200 seconds.Example of Viewing IS-IS Configuration (ROUTER ISIS Mode)T

Página 428 - Resolution of Host Names

• Set the metric style for the IS-IS process.ROUTER ISIS modemetric-style {narrow [transition] | transition | wide [transition]} [level-1 | level-2]Th

Página 429

The default level is level-1.For more information about this command, refer to Configuring the IS-IS Metric Style.The following table describes the co

Página 430

Dell#show isis databaseIS-IS Level-1 Link State DatabaseLSPID LSP Seq Num LSP Checksum LSP Holdtime ATT/P/OLB233.00-00 0x00000003 0x

Página 431 - Configuration Tasks for ARP

distribute-list prefix-list-name in [interface]– Enter the type of interface and slot/port information:– For a 1-Gigabit Ethernet interface, enter the

Página 432 - Clearing ARP Cache

– For a VLAN, enter the keyword vlan then a number from 1 to 4094.• Apply a configured prefix list to all outgoing IPv6 IS-IS routes.ROUTER ISIS-AF IP

Página 433 - ARP Learning via ARP Request

– process-id the range is from 1 to 65535.– level-1, level-1-2, or level-2: assign all redistributed routes to a level. The default is level-2.– metri

Página 434 - Configuring ARP Retries

Configure the Overload Bit for a Startup ScenarioFor information about setting the router overload bit for a specific period of time after a switch re

Página 435 - Configuration Tasks for ICMP

Configuring Authentication PasswordsYou can assign an authentication password for routers in Level 1 and for routers in Level 2.Because Level 1 and Le

Página 436 - Enabling UDP Helper

Example of Viewing the Overload Bit SettingWhen the bit is set, a 1 is placed in the OL column in the show isis database command output. The overload

Página 437

– interface: Enter the type of interface and slot/port information to view IS-IS information on that interface only.• View the events that triggered I

Página 438

Metric Style Correct Value Range for the isis metric Commandwide transition 0 to 16777215narrow transition 0 to 63transition 0 to 63Maximum Values in

Página 439

Beginning Metric Style Final Metric Style Resulting IS-IS Metric Valuetransition narrow original valuetransition narrow original valuetransition wide

Página 440 - Troubleshooting UDP Helper

Leaks from One Level to AnotherIn the following scenarios, each IS-IS level is configured with a different metric style.Table 35. Metric Value with Di

Página 441 - IPv6 Routing

NOTE: Whenever you make IS-IS configuration changes, clear the IS-IS process (re-started) using the clear isis command. The clear isis command must in

Página 442 - IPv6 Headers

ipv6 address 24:3::1/76ip router isisipv6 router isisno shutdownDell (conf-if-te-3/17)#Dell (conf-router_isis)#show config!router isismetric-style wid

Página 443

24Link Aggregation Control Protocol (LACP)Link aggregation control protocol (LACP) is supported on the S6000 platform.Introduction to Dynamic LAGs and

Página 444 - IPv6 Header Fields

• There is a difference between the shutdown and no interface port-channel commands:– The shutdown command on LAG “xyz” disables the LAG and retains t

Página 445 - Extension Header Fields

The Port-Authentication Process...76EAP over RADIU

Página 446 - Addressing

View Configuration FilesConfiguration files have three commented lines at the beginning of the file, as shown in the following example, to help you tr

Página 447 - Static and Dynamic Addressing

• Configure LACP mode.LACP mode[no] port-channel number mode [active | passive | off]– number: cannot statically contain any links.The default is LACP

Página 448

Configuring the LAG Interfaces as DynamicAfter creating a LAG, configure the dynamic LAG interfaces.To configure the dynamic LAG interfaces, use the f

Página 449

Dell(conf-if-po-32)#switchportDell(conf-if-po-32)#lacp long-timeoutDell(conf-if-po-32)#endDell# show lacp 32Port-channel 32 admin up, oper up, mode la

Página 450 - Path MTU Discovery

Figure 53. Shared LAG State TrackingTo avoid packet loss, redirect traffic through the next lowest-cost link (R3 to R4). Dell Networking OS has the ab

Página 451 - IPv6 Neighbor Discovery

As shown in the following illustration, LAGs 1 and 2 are members of a failover group. LAG 1 fails and LAG 2 is brought down after the failure. This ef

Página 452

• If a LAG that is part of a failover group is deleted, the failover group is deleted.• If a LAG moves to the Down state due to this feature, its memb

Página 453

ARP type: ARPA, ARP Timeout 04:00:00Last clearing of "show interface" counters 00:02:11Queueing strategy: fifoInput statistics: 132 pack

Página 454 - Configuration Tasks for IPv6

Figure 57. Inspecting Configuration of LAG 10 on ALPHALink Aggregation Control Protocol (LACP)507

Página 455 - Adjusting Your CAM-Profile

Figure 58. Verifying LAG 10 Status on ALPHA Using the show lacp CommandSummary of the LAG Configuration on AlphaAlpha(conf-if-po-10)#int gig 2/31Alpha

Página 456 - Assigning a Static IPv6 Route

interface GigabitEthernet 2/31no ip addressSummary of the LAG Configuration on BravoBravo(conf-if-gi-3/21)#int port-channel 10Bravo(conf-if-po-10)#no

Página 457 - Showing IPv6 Information

- - - network rw tftp: - - - network rw scp:You can change the default file system so that file manag

Página 458 - Showing an IPv6 Interface

Figure 59. Inspecting a LAG Port on BRAVO Using the show interface Command510Link Aggregation Control Protocol (LACP)

Página 459 - Showing IPv6 Routes

Figure 60. Inspecting LAG 10 Using the show interfaces port-channel CommandLink Aggregation Control Protocol (LACP)511

Página 460 - Clearing IPv6 Routes

Figure 61. Inspecting the LAG Status Using the show lacp commandThe point-to-point protocol (PPP) is a connection-oriented protocol that enables layer

Página 461

25Layer 2Layer 2 features are supported on the S6000 platform.Manage the MAC Address TableDell Networking OS provides the following management activit

Página 462

The range is from 10 to 1000000.Configuring a Static MAC AddressA static entry is one that is not subject to aging. Enter static entries manually.To c

Página 463

interface) before the system verifies that sufficient CAM space exists. If the CAM check fails, a message is displayed:%E90MH:5 %ACL_AGENT-2-ACL_AGENT

Página 464

mac learning-limit mac-address-stickyUsing sticky MAC addresses allows you to associate a specific port with MAC addresses from trusted devices. If yo

Página 465

no ip address switchport mac learning-limit 1 dynamic no-station-move mac learning-limit station-move-violation log no shutdownLearning Limit Vi

Página 466

Recovering from Learning Limit and Station Move ViolationsAfter a learning-limit or station-move violation shuts down an interface, you must manually

Página 467

When you use NIC teaming, consider that the server MAC address is originally learned on Port 0/1 of the switch (shown in the following) and Port 0/5 i

Página 468

Using Hashes to Validate Software ImagesYou can use the MD5 message-digest algorithm or SHA256 Secure Hash Algorithm to validate the software image on

Página 469

Apply all other configurations to each interface in the redundant pair such that their configurations are identical, so that transition to the backup

Página 470

LACP) port-channel interface as either the primary or backup link in a redundant pair with a physical interface.To ensure that existing network applic

Página 471

inactive: Vl 100:24:55: %RPM0-P:CP %IFMGR-5-OSTATE_UP: Changed interface state to up: Gi 3/4200:24:55: %RPM0-P:CP %IFMGR-5-ACTIVE: Changed Vlan interf

Página 472 - IS-IS Addressing

Figure 65. Configuring Far-End Failure DetectionThe report consists of several packets in SNAP format that are sent to the nearest known MAC address.I

Página 473 - Multi-Topology IS-IS

4. If the FEFD enabled system is configured to use FEFD in Normal mode and neighboring echoes are not received after three intervals, (you can set eac

Página 474 - Graceful Restart

To report interval frequency and mode adjustments, use the following commands.1. Setup two or more connected interfaces for Layer 2 or Layer 3.INTERFA

Página 475

To set up and activate two or more connected interfaces, use the following commands.1. Setup two or more connected interfaces for Layer 2 or Layer 3.I

Página 476

Sender state -- Bi-directional Sender info -- Mgmt Mac(00:01:e8:14:89:25), Slot-Port(Gi 1/0) Peer info -- Mgmt Mac (00:01:e8:14:89:25), Slot-Po

Página 477 - Enabling IS-IS

26Link Layer Discovery Protocol (LLDP)The link layer discovery protocol (LLDP) is supported on the S6000 platform.802.1AB (LLDP) OverviewLLDP — define

Página 478

Table 37. Type, Length, Value (TLV) TypesType TLV Description0 End of LLDPDU Marks the end of an LLDPDU.1 Chassis ID An administratively assigned name

Página 479

SHA256Dell# verify sha256 flash://FTOS-SE-9.5.0.0.binSHA256 hash for FTOS-SE-9.5.0.0.bin: e6328c06faf814e6899ceead219afbf9360e986d692988023b749e6b2093

Página 480

Figure 68. Organizationally Specific TLVIEEE Organizationally Specific TLVsEight TLV types have been defined by the IEEE 802.1 and 802.3 working group

Página 481

Type TLV Description127 Protocol Identity Indicates the protocols that the port can process. Dell Networking OS does not currently support this TLV.IE

Página 482 - Changing LSP Attributes

Regarding connected endpoint devices, LLDP-MED provides network connectivity devices with the ability to:• manage inventory• manage Power over Etherne

Página 483 - Table 32. Metric Styles

Type SubType TLV DescriptionNone or all TLVs must be supported. Dell Networking OS does not currently support these TLVs.127 5 Inventory — Hardware Re

Página 484 - Configuring the IS-IS Cost

Figure 69. LLDP-MED Capabilities TLVTable 40. Dell Networking OS LLDP-MED CapabilitiesBit Position TLV Dell Networking OS Support0 LLDP-MED Capabiliti

Página 485 - Changing the IS-Type

NOTE: As shown in the following table, signaling is a series of control packets that are exchanged between an endpoint device and a network connectivi

Página 486 - Applying IPv4 Routes

Extended Power via MDI TLVThe extended power via MDI TLV enables advanced PoE management between LLDP-MED endpoints and network connectivity devices.A

Página 487 - Applying IPv6 Routes

Important Points to Remember• LLDP is enabled by default.• Dell Networking systems support up to eight neighbors per interface.• Dell Networking syste

Página 488 - Redistributing IPv4 Routes

Enabling LLDPLLDP is enabled by default. Enable and disable LLDP globally or per interface. If you enable LLDP globally, all UP interfaces send period

Página 489 - Redistributing IPv6 Routes

3. Enter the disable command.LLDP-MANAGEMENT-INTERFACE mode.To undo an LLDP management port configuration, precede the relevant command with the keywo

Página 490 - Setting the Overload Bit

4ManagementManagement is supported on the S6000 platform.This chapter describes the different protocols or services used to manage the Dell Networking

Página 491 - Debugging IS-IS

Figure 72. Configuring LLDPViewing the LLDP ConfigurationTo view the LLDP configuration, use the following command.• Display the LLDP configuration.CO

Página 492 - Configure Metric Values

Viewing Information Advertised by Adjacent LLDP AgentsTo view brief information about adjacent devices or to view all the information that neighbors a

Página 493

Configuring LLDPDU IntervalsLLDPDUs are transmitted periodically; the default interval is 30 seconds.To configure LLDPDU intervals, use the following

Página 494

• Return to the default setting.CONFIGURATION mode or INTERFACE modeno modeExample of Configuring a Single ModeR1(conf)#protocol lldpR1(conf-lldp)#sho

Página 495

advertise dot1-tlv port-protocol-vlan-id port-vlan-id advertise dot3-tlv max-frame-size advertise management-tlv system-capabilities system-descri

Página 496

Figure 73. The debug lldp detail Command — LLDPDU Packet DissectionRelevant Management ObjectsDell Networking OS supports all IEEE 802.1AB MIB objects

Página 497

MIB Object CategoryLLDP Variable LLDP MIB Object DescriptionmsgTxInterval lldpMessageTxInterval Transmit Interval value.rxInfoTTL lldpRxInfoTTL Time t

Página 498

Table 44. LLDP System MIB ObjectsTLV Type TLV Name TLV Variable System LLDP MIB Object1 Chassis ID chassis ID subtype Local lldpLocChassisIdSubtypeRem

Página 499 - Configuring LACP Commands

TLV Type TLV Name TLV Variable System LLDP MIB Objectinterface numbering subtypeLocal lldpLocManAddrIfSubtypeRemote lldpRemManAddrIfSubtypeinterface n

Página 500 - LACP Configuration Tasks

Table 46. LLDP-MED System MIB ObjectsTLV Sub-Type TLV Name TLV Variable System LLDP-MED MIB Object1 LLDP-MED CapabilitiesLLDP-MED CapabilitiesLocallld

Página 501 - Setting the LACP Long Timeout

Allowing Access to CONFIGURATION Mode CommandsTo allow access to CONFIGURATION mode, use the privilege exec level level configure command from CONFIGU

Página 502 - Shared LAG State Tracking

TLV Sub-Type TLV Name TLV Variable System LLDP-MED MIB Object3 Location Identifier Location Data FormatLocal lldpXMedLocLocationSubtypeRemote lldpXMed

Página 503

27Microsoft Network Load BalancingThis functionality is supported on the S6000 platform.Network Load Balancing (NLB) is a clustering functionality tha

Página 504

• With NLB feature enabled, after learning the NLB ARP entry, all the subsequent traffic is flooded on all ports in VLAN1.With NLB, the data frame is

Página 505 - Configure a LAG on ALPHA

flooded out of all member ports. Since all the servers in the cluster receive traffic, failover and balancing are preserved.Enable and Disable VLAN Fl

Página 506

28Multicast Source Discovery Protocol (MSDP)Multicast source discovery protocol (MSDP) is supported on the S6000 platform.Protocol OverviewMSDP is a L

Página 507

Figure 74. Multicast Source Discovery Protocol (MSDP)RPs advertise each (S,G) in its domain in type, length, value (TLV) format. The total number of T

Página 508

Anycast RPUsing MSDP, anycast RP provides load sharing and redundancy in PIM-SM networks. Anycast RP allows two or more rendezvous points (RPs) to sha

Página 509

• Accept Source-Active Messages that Fail the RFP Check• Specifying Source-Active Messages• Limiting the Source-Active Cache• Preventing MSDP from Cac

Página 510

Figure 77. Configuring OSPF and BGP for MSDP558Multicast Source Discovery Protocol (MSDP)

Página 511

Figure 78. Configuring PIM in Multiple Routing DomainsMulticast Source Discovery Protocol (MSDP)559

Página 512

• Allow access to a CONFIGURATION, INTERFACE, LINE, ROUTE-MAP, and/or ROUTER mode command.CONFIGURATION modeprivilege {configure |interface | line | r

Página 513 - Manage the MAC Address Table

Figure 79. Configuring MSDPEnable MSDPEnable MSDP by peering RPs in different administrative domains.1. Enable MSDP.CONFIGURATION modeip multicast-msd

Página 514 - MAC Learning Limit

Examples of Configuring and Viewing MSDP R3_E600(conf)#ip multicast-msdp R3_E600(conf)#ip msdp peer 192.168.0.1 connect-source Loopback 0 R3_

Página 515

Limiting the Source-Active CacheSet the upper limit of the number of active sources that the Dell Networking OS caches.The default active source limit

Página 516

Figure 80. MSDP Default Peer, Scenario 1Multicast Source Discovery Protocol (MSDP)563

Página 517

Figure 81. MSDP Default Peer, Scenario 2564Multicast Source Discovery Protocol (MSDP)

Página 518 - NIC Teaming

Figure 82. MSDP Default Peer, Scenario 3Multicast Source Discovery Protocol (MSDP)565

Página 519 - Configure Redundant Pairs

Figure 83. MSDP Default Peer, Scenario 4Specifying Source-Active MessagesTo specify messages, use the following command.• Specify the forwarding-peer

Página 520

Dell(conf)#ip access-list standard fiftyDell(conf)#seq 5 permit host 200.0.0.50Dell#ip msdp sa-cacheMSDP Source-Active Cache - 3 entriesGroupAddr So

Página 521

Example of Verifying the System is not Caching Local SourcesWhen you apply this filter, the SA cache is not affected immediately. When sources that ar

Página 522 - Far-End Failure Detection

R3_E600(conf)#do show ip msdp sa-cacheR3_E600(conf)#R3_E600(conf)#do show ip msdp peerPeer Addr: 192.168.0.1 Local Addr: 0.0.0.0(639) Connect Sourc

Página 523 - FEFD State Changes

aux Auxiliary lineconsole Primary terminal linevty Virtual terminalDell(conf)#line vty 0Dell(config-line-v

Página 524 - Configuring FEFD

Logging Changes in Peership StatesTo log changes in peership states, use the following command.• Log peership state changes.CONFIGURATION modeip msdp

Página 525 - Enabling FEFD on an Interface

Example of the clear ip msdp peer Command and Verifying Statistics are ClearedR3_E600(conf)#do show ip msdp peerPeer Addr: 192.168.0.1 Local Addr:

Página 526 - Debugging FEFD

technique is less effective as traffic increases because preemptive load balancing requires prior knowledge of traffic distributions.• lack of scalabl

Página 527 - An RPM Failover

Configuring Anycast RPTo configure anycast RP, use the following commands.1. In each routing domain that has multiple RPs serving a group, create a Lo

Página 528 - 802.1AB (LLDP) Overview

CONFIGURATION modeip msdp originator-idExamples of R1, R2, and R3 Configuration for MSDP with Anycast RPThe following example shows an R1 configuratio

Página 529 - Optional TLVs

no shutdown!interface Loopback 0 ip pim sparse-mode ip address 192.168.0.1/32 no shutdown!interface Loopback 1 ip address 192.168.0.22/32 no sh

Página 530 - Table 38. Optional TLV Types

neighbor 192.168.0.22 remote-as 100 neighbor 192.168.0.22 ebgp-multihop 255 neighbor 192.168.0.22 update-source Loopback 0 neighbor 192.168.0.22

Página 531 - TIA-1057 (LLDP-MED) Overview

interface GigabitEthernet 2/1 ip pim sparse-mode ip address 10.11.4.1/24 no shutdown!interface GigabitEthernet 2/11 ip pim sparse-mode ip address

Página 532

redistribute connected redistribute bgp 200!router bgp 200 redistribute ospf 1 neighbor 192.168.0.2 remote-as 100 neighbor 192.168.0.2 ebgp-mult

Página 533 - LLDP-MED Capabilities TLV

29Multiple Spanning Tree Protocol (MSTP)Multiple spanning tree protocol (MSTP) is supported on the S6000 platform.Protocol OverviewMSTP — specified in

Página 534 - LLDP-MED Network Policies TLV

• Disable logging to terminal lines.CONFIGURATION modeno logging monitor• Disable console logging.CONFIGURATION modeno logging consoleAudit and Securi

Página 535

Spanning Tree VariationsThe Dell Networking OS supports four variations of spanning tree, as shown in the following table.Table 47. Spanning Tree Vari

Página 536 - Configure LLDP

• Enabling SNMP Traps for Root Elections and Topology Changes• Configuring Spanning Trees as HitlessEnable Multiple Spanning Tree GloballyMSTP is not

Página 537 - LLDP Compatibility

Specify the keyword vlan then the VLANs that you want to participate in the MSTI.Examples of Configuring and Viewing MSTIThe following examples shows

Página 538 - Enabling LLDP

Influencing MSTP Root SelectionMSTP determines the root bridge, but you can assign one bridge a lower priority to increase the probability that it bec

Página 539 - Advertising TLVs

NOTE: Some non-Dell Networking OS equipment may implement a non-null default region name. SFTOS, for example, uses the Bridge ID, while others may use

Página 540 - Figure 72. Configuring LLDP

The default is 15 seconds.2. Change the hello-time parameter.PROTOCOL MSTP modehello-time secondsNOTE: With large configurations (especially those con

Página 541

• Port priority influences the likelihood that a port is selected to be a forwarding port in case that several ports have the same port cost.The follo

Página 542 - Configuring LLDPDU Intervals

• Enable EdgePort on an interface.INTERFACE modespanning-tree mstp edge-port [bpduguard | shutdown-on-violation]Dell Networking OS Behavior: Regarding

Página 543 - Configuring a Time to Live

Figure 86. MSTP with Three VLANs Mapped to Two Spanning Tree InstancesRouter 1 Running-ConfigurationThis example uses the following steps:1. Enable MS

Página 544 - Debugging LLDP

no shutdown!interface Vlan 300 no ip address tagged GigabitEthernet 1/21,31 no shutdownRouter 2 Running-ConfigurationThis example uses the follow

Página 545 - Relevant Management Objects

When you enabled RBAC and extended logging:• Only the system administrator user role can execute this command.• The system administrator and system se

Página 546

name Tahiti revision 123 MSTI 1 VLAN 100 MSTI 2 VLAN 200,300!(Step 2)interface GigabitEthernet 3/11 no ip address switchport no shutdown!inter

Página 547

(Step 3)interface vlan 100 tagged 1/0/31 tagged 1/0/32exitinterface vlan 200 tagged 1/0/31 tagged 1/0/32exitinterface vlan 300 tagged 1/0/31 tag

Página 548

– Are there “extra” MSTP instances in the Sending or Received logs? This may mean that an additional MSTP instance was configured on one router but no

Página 549

INST 2: Flags: 0x70, Reg Root: 32768:0001.e8d5.cbbd, Int Root Cost Brg/Port Prio: 32768/128, Rem Hops: 20Multiple Spanning Tree Protocol (MSTP)593

Página 550

30Multicast FeaturesMulticast features are supported on the S6000 platform.NOTE: Multicast is supported on secondary IP addresses on the platform.NOTE

Página 551 - NLB Unicast Mode Scenario

Figure 87. Multicast with ECMPImplementation InformationBecause protocol control traffic in Dell Networking OS is redirected using the MAC address, an

Página 552 - NLB Multicast Mode Scenario

Protocol Ethernet AddressPIM-SM 01:00:5e:00:00:0d• The Dell Networking OS implementation of MTRACE is in accordance with IETF draft draft-fenner-trace

Página 553 - Configuring a Switch for NLB

• If the limit is decreased after it is reached, Dell Networking OS does not clear the existing sessions. Entries are cleared after a timeout (you may

Página 554

no access list limiting Receiver 1, so both IGMP reports are accepted, and two corresponding entries are created in the routing table.Figure 88. Preve

Página 555

Location Description• no shutdown1/31• Interface GigabitEthernet 1/31• ip pim sparse-mode• ip address 10.11.13.1/24• no shutdown2/1• Interface Gigabit

Página 556 - Anycast RP

IP Prefix Lists...1

Página 557

The following describes the two log messages formats:• 0 – Displays syslog messages format as described in RFC 3164, The BSD syslog Protocol• 1 – Disp

Página 558

Location Description• ip igmp access-group igmpjoinfilR2G2• no shutdownRate Limiting IGMP Join RequestsIf you expect a burst of IGMP Joins, protect th

Página 559

specified rate. The keyword infinity directs PIM to never switch to the SPT.Default: 10 kbpsIPv6 Configure PIM to switch over to the SPT when the mult

Página 560 - Enable MSDP

Figure 89. Preventing a Source from Transmitting to a GroupTable 51. Preventing a Source from Transmitting to a Group — DescriptionLocation Descriptio

Página 561

Location Description• no shutdown2/1• Interface GigabitEthernet 2/1• ip pim sparse-mode• ip address 10.11.1.1/24• no shutdown2/11• Interface GigabitEt

Página 562

Preventing a PIM Router from Processing a JoinTo permit or deny PIM Join/Prune messages on an interface using an extended IP access list, use the foll

Página 563

31Open Shortest Path First (OSPFv2 and OSPFv3)Open shortest path first (OSPFv2 for IPv4) and OSPF version 3 (OSPF for IPv6) are supported on the S6000

Página 564

Areas allow you to further organize your routers within in the AS. One or more areas are required within the AS. Areas are valuable in that they allow

Página 565

The backbone is the only area with a default area number. All other areas can have their Area ID assigned in the configuration.In the previous example

Página 566

Figure 91. OSPF Routing ExamplesBackbone Router (BR)A backbone router (BR) is part of the OSPF Backbone, Area 0.This includes all ABRs. It can also in

Página 567

An ABR can connect to many areas in an AS, and is considered a member of each area it connects to.Autonomous System Border Router (ASBR)The autonomous

Página 568

2. On the syslog server, create a reverse SSH tunnel from the syslog server to FTOS switch, using following syntax: ssh -R <remote port>:<sys

Página 569

available. An ABR floods the information for the router (for example, the ASBR where the Type 5 advertisement originated. The link-state ID for Type 4

Página 570 - Clearing Peer Statistics

Router Priority and CostRouter priority and cost is the method the system uses to “rate” the routers.For example, if not assigned, the system selects

Página 571 - MSDP with Anycast RP

Dell Networking OS supports stub areas, totally stub (no summary) and not so stubby areas (NSSAs) and supports the following LSAs, as described earlie

Página 572

OSPFv2 supports helper-only and restarting-only roles. By default, both helper and restarting roles are enabled. OSPFv2 supports the helper-reject rol

Página 573 - Configuring Anycast RP

example, if you create five OSPFv2 processes on a system, there must be at least five interfaces assigned in Layer 3 mode.Each OSPFv2 process is indep

Página 574

LSType:Type-5 AS External(5) Age:1 Seq:0x8000000c id:170.1.2.0 Adv:6.1.0.0 Netmask:255.255.255.0 fwd:0.0.0.0 E2, tos:0 metric:0To confirm

Página 575

Neighbor Count is 1, Adjacent neighbor count is 1 Adjacent with neighbor 1.1.1.1 (Backup Designated Router)Dell (conf-if-gi-2/2)#Configuration Info

Página 576 - MSDP Sample Configurations

If implementing multi-process OSPF, create an equal number of Layer 3 enabled interfaces and OSPF process IDs. For example, if you create four OSPFv2

Página 577

• Reset the OSPFv2 process.EXEC Privilege modeclear ip ospf process-id• View the current OSPFv2 status.EXEC modeshow ip ospf process-idExample of View

Página 578

If you try to enable more OSPF processes than available Layer 3 interfaces, the following message displays:C300(conf)#router ospf 1% Error: No router

Página 579

Sending System Messages to a Syslog ServerTo send system messages to a specified syslog server, use the following command. The following syslog standa

Página 580 - Spanning Tree Variations

Dell(conf)#router ospf 1Dell(conf-router_ospf-1)#network 1.2.3.4/24 area 0Dell(conf-router_ospf-1)#network 10.10.10.10/24 area 1Dell(conf-router_ospf-

Página 581

Loopback 0 is up, line protocol is up Internet Address 10.168.253.2/32, Area 0.0.0.1 Process ID 1, Router ID 10.168.253.2, Network Type LOOPBACK, Co

Página 582

Enabling Passive InterfacesA passive interface is one that does not send or receive routing information.Enabling passive interface suppresses routing

Página 583

GigabitEthernet 0/1 is up, line protocol is down Internet Address 10.1.3.100/24, Area 2.2.2.2 Process ID 34, Router ID 10.1.2.100, Network Type BROA

Página 584 - Modifying Global Parameters

The following examples shows how to disable fast-convergence.Dell#(conf-router_ospf-1)#no fast-convergeDell#(conf-router_ospf-1)#exDell#(conf)#exDell#

Página 585

NOTE: Be sure to write down or otherwise record the key. You cannot learn the key after it is configured. You must be careful when changing this key.N

Página 586 - Configuring an EdgePort

Timer intervals configured, Hello 10, Dead 40, Wait 40, Retransmit 5 Hello due in 00:00:06 Neighbor Count is 0, Adjacent neighbor count is 0Dell

Página 587 - MSTP Sample Configurations

graceful-restart grace-period secondsThe seconds range is from 40 and 3000.This setting is the time that an OSPFv2 router’s neighbors advertises it as

Página 588

graceful-restart grace-period 300 graceful-restart role helper-only graceful-restart mode unplanned-only graceful-restart helper-reject 10.1.1.1

Página 589

• Specify which routes are redistributed into OSPF process.CONFIG-ROUTEROSPF-id moderedistribute {bgp | connected | isis | rip | static} [metric metri

Página 590

• Specify the minimum severity level for logging to the syslog history table.CONFIGURATION modelogging history level• Specify the size of the logging

Página 591

• View the summary of all OSPF process IDs enables on the router.EXEC Privilege modeshow running-config ospf• View the summary information of the IP r

Página 592

!router ospf 90 area 2 virtual-link 4.4.4.4 area 2 virtual-link 90.90.90.90 retransmit-interval 300!ipv6 router ospf 999 default-information origin

Página 593

interface Loopback 10 ip address 192.168.100.100/24 no shutdownOSPF Area 0 — Gl 3/1 and 3/2router ospf 33333 network 192.168.100.0/24 area 0 netwo

Página 594 - Multicast Features

NOTE: The OSPFv2 network area command enables OSPF on multiple interfaces with the single command. Use the OSPFv3 ipv6 ospf area command on each inter

Página 595

ipv6 ospf process-id area area-id– process-id: the process ID number assigned.– area-id: the area ID for this interface.Assigning OSPFv3 Process ID an

Página 596 - Multicast Policies

• Specify whether some or all some of the interfaces are passive.CONF-IPV6-ROUTER-OSPF modepassive-interface {type slot/port}Interface: identifies the

Página 597

default-information originate [always [metric metric-value] [metric-type type-value]] [route-map map-name]Configure the following required and optiona

Página 598

– Unplanned-only: the OSPFv3 router supports graceful-restart only for unplanned restarts. During an unplanned restart, OSPFv3 sends out a Grace LSA o

Página 599

AS Bdr Rtr Status 1AS Scope LSA Count 0AS Scope LSA Cksum sum 0Originate New LSAS 73Rx New LSAS 114085Ext LSA Count

Página 600

To ensure integrity, data origin authentication, detection and rejection of replays, and confidentiality of the packet, RFC 4302 and RFC 4303 propose

Página 601

%CHMGR-5-CHECKIN: Checkin from line card 5 (type EX1YB, 1 ports)%TSM-6-PORT_CONFIG: Port link status for LC 5 => portpipe 0: OK portpipe 1: N/A%CHM

Página 602

• In an OSPFv3 encryption policy:– Both encryption and authentication are used.– IPsec security associations (SAs) are supported only in Transport mod

Página 603

no ipv6 ospf authentication ipsec spi number• Remove null authentication on an interface to allow the interface to inherit the authentication policy c

Página 604

no ipv6 ospf encryption null• Display the configuration of IPsec encryption policies on the router.show crypto ipsec policy• Display the security asso

Página 605

NOTE: When you configure encryption using the area encryption command, you enable both IPsec encryption and authentication. However, when you enable a

Página 606 - Area Types

– name: displays configuration details about a specified policy.• Display security associations set up for OSPFv3 links in IPsec authentication and en

Página 607 - Router Types

bbdd96e6eb4828e2e27bc3f9ff541e43faa759c9ef5706ba10345a1039ba8f8aTransform set : esp-128-aes esp-sha1-hmacThe following example shows the sho

Página 608 - Area Border Router (ABR)

• Did you configure the interfaces for Layer 3 correctly?• Is the router in the correct area type?• Did you include the routes in the OSPF database?•

Página 609 - Internal Router (IR)

32Policy-based Routing (PBR)Policy-based Routing (PBR) allows a switch to make routing decisions based on policies applied to an interface.This chapte

Página 610 - LSA Throttling

To enable a PBR, you create a redirect list. Redirect lists are defined by rules, or routing policies. The following parameters can be defined in the

Página 611 - OSPF with Dell Networking OS

Implementing Policy-based Routing with Dell Networking OS• Non-contiguous bitmasks for PBR• Hot-Lock PBRNon-contiguous bitmasks for PBRNon-contiguous

Página 612

Example of the show running-config logging CommandTo view nondefault settings, use the show running-config logging command in EXEC mode.Dell#show runn

Página 613

The following example creates a redirect list by the name of “xyz.”Dell(conf)#ip redirect-list ?WORD Redirect-list name (max 16 chars) Dell(co

Página 614

Dell(conf-redirect-list)#redirect 3.3.3.3 ?<0-255> An IP protocol number icmp

Página 615 - OSPF ACK Packing

PBR Exceptions (Permit)Use the command permit to create an exception to a redirect list. Exceptions are used when a forwarding decision should be base

Página 616

Applying a Redirect-list to an Interface Example:Dell(conf-if-te-2/0)#ip redirect-group xyz Dell(conf-if-te-2/0)#Applying a Redirect-list to an Interf

Página 617 - Assigning a Router ID

NOTE: If, the redirect-list is applied to an interface, the output of show ip redirect-list redirect-list-name command displays reachability and ARP s

Página 618

Create the Redirect-List GOLDEDGE_ROUTER(conf-if-Te-2/23)#ip redirect-list GOLDEDGE_ROUTER(conf-redirect-list)#description Route GOLD traffic to ISP_G

Página 619 - Enable OSPFv2 on Interfaces

View Redirect-List GOLDEDGE_ROUTER#show ip redirect-listIP redirect-list GOLD: Defined as: seq 5 redirect 10.99.99.254 ip 192.168.1.0/24 any, Next-ho

Página 620

33PIM Sparse-Mode (PIM-SM)Protocol-independent multicast sparse-mode (PIM-SM) is supported on the S6000 platform.PIM-SM is a multicast protocol that f

Página 621 - Configuring Stub Areas

3. If a host on the same subnet as another multicast receiver sends an IGMP report for the same multicast group, the gateway takes no action. If a rou

Página 622 - Enabling Passive Interfaces

Configuring PIM-SMConfiguring PIM-SM is a three-step process.1. Enable multicast routing (refer to the following step).2. Select a rendezvous point.3.

Página 623 - Enabling Fast-Convergence

CONFIGURATION modeservice timestamps [log | debug] [datetime [localtime] [msec] [show-timezone] | uptime]Specify the following optional parameters:– Y

Página 624

To display PIM neighbors for each interface, use the show ip pim neighbor command EXEC Privilege mode.Dell#show ip pim neighborNeighbor Interface

Página 625

ip access-list extended access-list-name3. Specify the source and group to which the timer is applied using extended ACLs with permit rules only.CONFI

Página 626

Dell#sh run pim!ip pim rp-address 1.1.1.1 group-address 224.0.0.0/4Overriding Bootstrap Router UpdatesPIM-SM routers must know the address of the RP f

Página 627

Creating Multicast Boundaries and DomainsA PIM domain is a contiguous set of routers that all implement PIM and are configured to operate within a com

Página 628 - Applying Prefix Lists

34PIM Source-Specific Mode (PIM-SSM)PIM source-specific mode (PIM-SSM) is supported on the S6000 platform.PIM-SSM is a multicast protocol that forward

Página 629 - Troubleshooting OSPFv2

Configure PIM-SMMConfiguring PIM-SSM is a two-step process.1. Configure PIM-SMM.2. Enable PIM-SSM for a range of addresses.Related Configuration Tasks

Página 630

• When you remove the mapping configuration, Dell Networking OS removes the corresponding (S,G) states that it created and re-establishes the original

Página 631 - OSPF Area 0 — Gl 1/1 and 1/2

Interface Vlan 400Group 239.0.0.1Uptime 00:00:05Expires NeverRouter mode INCLUDELas

Página 632 - OSPF Area 0 — Gl 2/1 and 2/2

35Port MonitoringPort monitoring is supported on the S6000 platform.Mirroring is used for monitoring Ingress or Egress or both Ingress and Egress traf

Página 633 - Enabling IPv6 Unicast Routing

Port MonitoringThe S6000 supports multiple source-destination statements in a single monitor session.The maximum number of source ports that can be su

Página 634 - Configuring Passive-Interface

CONFIGURATION modeftp-server enableExample of Viewing FTP ConfigurationDell#show running ftp!ftp-server enableftp-server username nairobi password 0 z

Página 635 - Configuring a Default Route

Example of Viewing a Monitoring SessionIn the example below, 0/25 and 0/26 belong to Port-pipe 1. This port-pipe has the same restriction of only four

Página 636

show interface2. Create a monitoring session using the command monitor session from CONFIGURATION mode, as shown in the following example.CONFIGURATIO

Página 637 - Displaying Graceful Restart

Figure 95. Port Monitoring ExampleEnabling Flow-Based MonitoringFlow-based monitoring is supported only on the S-Series platform.Flow-based monitoring

Página 638

Example of the flow-based enable CommandTo view an access-list that you applied to an interface, use the show ip accounting access-list command from E

Página 639

source session uses a separate reserved VLAN to transmit mirrored packets (mirrored source-session traffic is shown with an orange or green circle wit

Página 640

• Mirrored traffic is transported across the network using 802.1Q-in-802.1Q tunneling. The source address, destination address and original VLAN ID of

Página 641

RestrictionsWhen you configure remote port mirroring, the following restrictions apply:• You can configure the same source port to be used in multiple

Página 642

destination switches), and a destination session (destination ports connected to analyzers on destination switches).Configuration Steps for RPMStep Co

Página 643

Dell(conf)#inte te 0/30Dell(conf-if-te-0/30)#no shutdownDell(conf-if-te-0/30)#switchportDell(conf-if-te-0/30)#exitDell(conf)#interface vlan 30Dell(con

Página 644

Dell(conf)#monitor session 1 type rpmDell(conf-mon-sess-1)#source remote-vlan 10 dest te 0/3Dell(conf-mon-sess-1)#exitDell(conf)#monitor session 2 typ

Página 645 - Troubleshooting OSPFv3

– For a VLAN interface, enter the keyword vlan then a number from 1 to 4094.– For a 40-Gigabit Ethernet interface, enter the keyword fortyGigE then th

Página 646 - Viewing Summary Information

Configuring the Encapsulated Remote Port MirroringThe ERPM session copies traffic from the source ports/lags or source VLANs and forwards the traffic

Página 647 - Policy-based Routing (PBR)

6<no> flow-based enable Specify flow-based enable for mirroring on a flow by flow basis and also for vlan as source.7no enable (Optional) No dis

Página 648

ERPM Behavior on a typical Dell Networking OS The Dell Networking OS is designed to support only the Encapsulation of the data received / transmitted

Página 649 - Networking OS

39th byte in a given ERPM packet. The first 38/42 bytes of the header needs to be ignored/ chopped off.– Some tools support options to edit the captur

Página 650

36Per-VLAN Spanning Tree Plus (PVST+)Per-VLAN spanning tree plus (PVST+) is supported on the S6000 platform.Protocol OverviewPVST+ is a variation of s

Página 651

Table 52. Spanning Tree Variations Dell Networking OS SupportsDell Networking Term IEEE SpecificationSpanning Tree Protocol (STP) 802 .1dRapid Spannin

Página 652 - PBR Exceptions (Permit)

PROTOCOL PVST modeno disableDisabling PVST+To disable PVST+ globally or on an interface, use the following commands.• Disable PVST+ globally.PROTOCOL

Página 653

Figure 97. Load Balancing with PVST+The bridge with the bridge value for bridge priority is elected root. Because all bridges use the default priority

Página 654 - Sample Configuration

Root Identifier has priority 4096, Address 0001.e80d.b6d6Root Bridge hello time 2, max age 20, forward delay 15Bridge Identifier has priority 4096, Ad

Página 655 - Create the Redirect-List GOLD

PROTOCOL PVST modevlan max-ageThe range is from 6 to 40.The default is 20 seconds.The values for global PVST+ parameters are given in the output of th

Página 656 - View Redirect-List GOLD

line vty 0 access-class myvtyaclDell Networking OS Behavior: Prior to Dell Networking OS version 7.4.2.0, in order to deny access on a VTY line, appl

Página 657 - PIM Sparse-Mode (PIM-SM)

The range is from 0 to 240, in increments of 16.The default is 128.The values for interface PVST+ parameters are given in the output of the show spann

Página 658 - Send Multicast Traffic

PVST+ in Multi-Vendor NetworksSome non-Dell Networking systems which have hybrid ports participating in PVST+ transmit two kinds of BPDUs: an 802.1D B

Página 659 - Enable PIM-SM

Example of Viewing the Extend System ID in a PVST+ ConfigurationDell(conf-pvst)#do show spanning-tree pvst vlan 5 briefVLAN 5Executing IEEE compatible

Página 660 - Configuring S,G Expiry Timers

no ip address tagged GigabitEthernet 2/12,32 no shutdown!interface Vlan 200 no ip address tagged GigabitEthernet 2/12,32 no shutdown!interface

Página 661

37Quality of Service (QoS)Quality of service (QoS) is supported on the S6000 platform.Differentiated service is accomplished by classifying and queuin

Página 662

Feature DirectionConfigure a Scheduler to Queue EgressSpecify WRED Drop Precedence EgressCreate Policy Maps Ingress + EgressCreate Input Policy Maps I

Página 663

Figure 99. Dell Networking QoS ArchitectureImplementation InformationThe Dell Networking QoS implementation complies with IEEE 802.1p User Priority Bi

Página 664

Setting dot1p Priorities for Incoming TrafficDell Networking OS places traffic marked with a priority in a queue based on the following table.If you s

Página 665 - Enabling PIM-SSM

Example of Configuring an Interface to Honor dot1p Priorities on Ingress TrafficDell#config tDell(conf)#interface tengigabitethernet 1/0Dell(conf-if)#

Página 666

rate shape• Apply rate shaping to a queue.QoS Policy moderate-shapeExample of rate shape CommandDell#configDell(conf)#interface tengigabitethernet 1/0

Página 667

Multiprotocol BGP...162Imple

Página 668 - Port Monitoring

Dell(config-line-vty)#show configline vty 0 password myvtypasswordlogin authentication myvtymethodlistline vty 1 password myvtypasswordlogin authent

Página 669

Classify TrafficClass maps differentiate traffic so that you can apply separate quality of service policies to different types of traffic.For both cla

Página 670 - Configuring Port Monitoring

Dell(conf)#policy-map-input pmapDell(conf-policy-map-in)#service-queue 3 class-map cmap1Dell(conf-policy-map-in)#service-queue 1 class-map cmap2Dell(c

Página 671

ACLs acl1 and acl2 have overlapping rules because the address range 20.1.1.0/24 is within 20.0.0.0/8. Therefore (without the keyword order), packets w

Página 672

seq 10 deny ip any any!ip access-list extended AF2 seq 5 permit ip host 23.64.0.5 any seq 10 deny ip any anyDell# show cam layer3-qos interface te

Página 673 - Remote Port Mirroring

• Because this functionality forcibly marks all the packets matching the specific match criteria as ‘yellow’, Dell Networking OS does not support Poli

Página 674 - Configuration Notes

Configuring Policy-Based Rate PolicingTo configure policy-based rate policing, use the following command.• Configure rate police ingress traffic.QOS-P

Página 675

Table 56. Default Bandwidth WeightsQueue Default Weight Equivalent Percentage0 1 6.67%1 2 13.33%2 4 26.67%3 8 53.33%• Allocate bandwidth to queues.ban

Página 676 - Restrictions

• Each color map can only have one list of DSCP values for each color; any DSCP values previously listed for that color that are not in the new DSCP l

Página 677

Display a specific DSCP color map.Dell# show qos dscp-color-map mapTWODscp-color-map mapTWO yellow 16,55Displaying a DSCP Color Policy Configuration

Página 678

Applying a Class-Map or Input QoS Policy to a QueueApplying an Input QoS Policy to an Input Policy MapHonoring DSCP Values on Ingress PacketsHonoring

Página 679

EXEC Privilegetelnet [ip-address]If you do not enter an IP address, Dell Networking OS enters a Telnet dialog that prompts you for one.Enter an IPv4 a

Página 680 - Configuration steps for ERPM

Table 58. Default DSCP to Queue MappingDSCP/CP hex range (XXX)xxxDSCP DefinitionTraditional IP PrecedenceInternal Queue IDInternal Queue ID (S6000)DSC

Página 681

Mapping dot1p Values to Service QueuesAll traffic is by default mapped to the same queue, Queue 0.If you honor dot1p on ingress, you can create servic

Página 682

Applying an Output QoS Policy to a QueueSpecifying an Aggregate QoS PolicyApplying an Output Policy Map to an Interface3. Apply the policy map to an i

Página 683

QoS rate adjustment is disabled by default.• Specify the number of bytes of packet overhead to include in rate limiting, policing, and shaping calcula

Página 684

But when queue 1 gets congested on switch B, PFC frames for tagged packets will not be generated as PFC is not enabled on dot1p priority 5.Support for

Página 685 - Enabling PVST+

WRED profile to a policy-map so that specified traffic can be prevented from consuming too much of the BTM resources.WRED uses a profile to specify mi

Página 686 - Disabling PVST+

Applying a WRED Profile to TrafficAfter you create a WRED profile, you must specify to which traffic Dell Networking OS should apply the profile.Dell

Página 687

Test the policy-map size against the CAM space for a specific port-pipe or all port-pipes using these commands:• test cam-usage service-policy input p

Página 688

Committed rate refers to the guaranteed bandwidth for traffic entering or leaving the interface under normal network conditions. When traffic propagat

Página 689

Dell(config-qos-policy-out)# rate shape pps peak-rate burst-packets committed pps committed-rate burst-packets 4. Alternatively, configure the committ

Página 690

Example of Locking CONFIGURATION Mode for Single-User AccessDell(conf)#configuration mode exclusive autoBATMAN(conf)#exit3d23h35m: %RPM0-P:CP %SYS-5-C

Página 691

You can enable WRED and ECN capabilities per queue for granularity. You can disable these functionality per queue, and you can also specify the minimu

Página 692 - PVST+ Sample Configurations

Table 60. Scenarios of WRED and ECN ConfigurationQueue ConfigurationService-Pool ConfigurationWRED Threshold RelationshipQ threshold = Q-T,Service poo

Página 693

Dell(conf-wred) #wred—profile thresh-1 Dell(conf-wred) #threshold min 100 max 200 max-drop-rate 40 3. Configure another WRED profile, and specify the

Página 694 - Quality of Service (QoS)

– FIN– SYN–PSH– RST– URGIn the existing software, ECE/CWR TCP flag qualifiers are not supported.• Because this functionality forcibly marks all the pa

Página 695

action. During congestion, ECN enabled packets are not subject to any kind of drops like WRED except tail drops. Though ECN & WRED are independent

Página 696 - Port-Based QoS Configurations

You can use the ecn keyword with the ip access-list standard, ip access-list extended, seq, and permit commands for standard and extended IPv4 ACLs to

Página 697

• match ip vlanSample configuration to mark non-ecn packets as “yellow” with single traffic classConsider the use case where the packet with DSCP valu

Página 698

class-map match-any class_dscp_40 match ip access-group dscp_40_non_ecn set-color yellow match ip access-group dscp_40_ecn!class-map match-any class_d

Página 699

The maximum number of ports, including fan-out, supported is 104 and the maximum number of queues supported is 21. Analyzing and evaluating buffer sta

Página 700 - Classify Traffic

38Routing Information Protocol (RIP)Routing information protocol (RIP) is supported on the S6000 platform.RIP is based on a distance-vector algorithm;

Página 701 - Creating a Layer 2 Class Map

* persistent settings (stacking, fanout, etc.) * * After restoration the unit(s) will be powercycled immediately. *

Página 702

Implementation InformationDell Networking OS supports both versions of RIP and allows you to configure one version globally and the other version on i

Página 703

Enabling RIP GloballyBy default, RIP is not enabled in Dell Networking OS.To enable RIP globally, use the following commands.1. Enter ROUTER RIP mode

Página 704 - Create a QoS Policy

192.162.2.0/24 [120/1] via 29.10.10.12, 00:01:21, Fa 0/0192.162.2.0/24 auto-summary192.161.1.0/24 [120/1] via 29.10.10.12, 00:00:27, Fa 0/019

Página 705

distribute-list prefix-list-name in• Assign a configured prefix list to all outgoing RIP routes.ROUTER RIP modedistribute-list prefix-list-name outTo

Página 706 - DSCP Color Maps

• Set the RIP versions received on that interface.INTERFACE modeip rip receive version [1] [2]• Set the RIP versions sent out on that interface.INTERF

Página 707 - Displaying DSCP Color Maps

Automatic network summarization is in effect Outgoing filter for all interfaces is Incoming filter for all interfaces is Default redistribution m

Página 708 - Create Policy Maps

Controlling Route MetricsAs a distance-vector protocol, RIP uses hop counts to determine the best route, but sometimes the shortest hop count is a rou

Página 709

Dell#debug ip ripRIP protocol debug is ONDell#To disable RIP, use the no debug ip rip command.RIP Configuration ExampleThe examples in this section sh

Página 710

Core 2 RIP OutputThe examples in the section show the core 2 RIP output.Examples of the show ip Commands to View Core 2 Information• To display Core 2

Página 711 - Creating Output Policy Maps

The following example shows the show ip protocols command to show the RIP configuration activity on Core 2.Core2#show ip protocolsRouting Protocol is

Página 712 - Enabling QoS Rate Adjustment

BOOT_USER # boot change primaryboot device : flashfile name : systemaBOOT_USER #To boot from flash partition B:BOOT_USER # boot change primaryboot dev

Página 713

Examples of the show ip Commands to View Learned RIP Routes on Core 3The following example shows the show ip rip database command to view the learned

Página 714

GigabitEthernet 3/44 2 2 GigabitEthernet 3/43 2 2Routing for Networks: 10.11.20.0 10.11.30.0 192.168.2.0 192.168.1.0Rou

Página 715 - Creating WRED Profiles

ip address 192.168.2.1/24 no shutdown!router ripversion 2network 10.11.20.0network 10.11.30.0network 192.168.1.0network 192.168.2.0742Routing Infor

Página 716

39Remote Monitoring (RMON)Remote monitoring (RMON) is supported on the S6000 platform.RMON is an industry-standard implementation that monitors networ

Página 717

the sampled data — the new master RPM provides the same sampled data as did the old master — as long as the master RPM had been running long enough to

Página 718

Example of the rmon alarm CommandTo disable the alarm, use the no form of the command.The following example configures RMON alarm number 10. The alarm

Página 719

[no] rmon collection statistics {controlEntry integer} [owner ownername]– controlEntry: specifies the RMON group of statistics using a value.– integer

Página 720

40Rapid Spanning Tree Protocol (RSTP)Rapid spanning tree protocol (RSTP) is supported on the S6000 platform.Protocol OverviewRSTP is a Layer 2 protoco

Página 721

Important Points to Remember• RSTP is disabled by default.• Dell Networking OS supports only one Rapid Spanning Tree (RST) instance.• All interfaces i

Página 722 - Marking Packets

INTERFACE modeno shutdownExample of Verifying an Interface is in Layer 2 Mode and EnabledTo verify that an interface is in Layer 2 mode and enabled, u

Página 723

5802.1X802.1X is supported on the S6000 platform.802.1X is a method of port security. A device connected to a port that is enabled with 802.1X is disa

Página 724

Figure 103. Rapid Spanning Tree Enabled GloballyTo view the interfaces participating in RSTP, use the show spanning-tree rstp command from EXEC privil

Página 725

BPDU : sent 121, received 2The port is not in the Edge port modePort 379 (GigabitEthernet 2/3) is designated ForwardingPort path cost 20000, Port prio

Página 726

Modifying Global ParametersYou can modify RSTP parameters.The root bridge sets the values for forward-delay, hello-time, and max-age and overwrites th

Página 727

NOTE: With large configurations (especially those configurations with more ports) Dell Networking recommends increasing the hello-time.The range is fr

Página 728

To view the current values for interface parameters, use the show spanning-tree rstp command from EXEC privilege mode.Enabling SNMP Traps for Root Ele

Página 729

• If the interface to be shut down is a port channel, all the member ports are disabled in the hardware.• When you add a physical port to a port chann

Página 730

The range is from 50 to 950 milliseconds.Example of Verifying Hello-Time IntervalDell(conf-rstp)#do show spanning-tree rstp briefExecuting IEEE compat

Página 731 - Enabling RIP Globally

41Software-Defined Networking (SDN)Dell Networking operating software supports Software-Defined Networking (SDN). For more information, refer to the S

Página 732 - Configure RIP on Interfaces

42Service Provider BridgingService provider bridging is supported on the S6000 platform.VLAN StackingVirtual local area network (VLAN) stacking is sup

Página 733

Figure 104. VLAN Stacking in a Service Provider NetworkImportant Points to Remember• Interfaces that are members of the Default VLAN and are configure

Página 734

Figure 3. EAP Frames Encapsulated in Ethernet and RADUISThe authentication process involves three devices:• The device attempting to access the networ

Página 735 - Summarize Routes

Configure VLAN StackingConfiguring VLAN-Stacking is a three-step process.1. Creating Access and Trunk Ports2. Assign access and trunk ports to a VLAN

Página 736 - Debugging RIP

interface GigabitEthernet 7/12 no ip address switchport vlan-stack trunk no shutdownEnable VLAN-Stacking for a VLANTo enable VLAN-Stacking for a V

Página 737 - RIP Configuration Example

To configure trunk ports, use the following commands.1. Configure a trunk port to carry untagged, single-tagged, and double-tagged traffic by making i

Página 738 - Core 2 RIP Output

• MT — stacked trunk• MU — stacked access port• T — 802.1Q trunk port• U — 802.1Q access port• NU — Native VLAN (untagged)Dell# debug member vlan 603v

Página 739 - Core 3 RIP Output

Figure 105. Single and Double-Tag TPID Match764Service Provider Bridging

Página 740

Figure 106. Single and Double-Tag First-byte TPID MatchService Provider Bridging765

Página 741 - RIP Configuration Summary

Figure 107. Single and Double-Tag TPID MismatchVLAN Stacking Packet Drop PrecedenceVLAN stacking packet drop precedence is available on the S6000 plat

Página 742

Table 64. Drop Eligibility BehaviorIngress Egress DEI Disabled DEI EnabledNormal Port Normal Port Retain CFI Set CFI to 0.Trunk Port Trunk Port Retain

Página 743 - Remote Monitoring (RMON)

Marking Egress Packets with a DEI ValueOn egress, you can set the DEI value according to a different mapping than ingress.For ingress information, ref

Página 744 - Setting the rmon Alarm

• Mark the S-Tag dot1p and queue the frame according to the original C-Tag dot1p. In this case, you must have other dot1p QoS configurations; this opt

Página 745 - Configuring an RMON Event

3. The authenticator decapsulates the EAP response from the EAPOL frame, encapsulates it in a RADIUS Access-Request frame and forwards the frame to th

Página 746

service-policy input in layer2 no shutdownMapping C-Tag to S-Tag dot1p ValuesTo map C-Tag dot1p values to S-Tag dot1p values and mark the frames ac

Página 747

Figure 109. VLAN Stacking without L2PTYou might need to transport control traffic transparently through the intermediate network to the other region.

Página 748

the intermediate network because only Dell Networking OS could recognize the significance of the destination MAC address and rewrite it to the origina

Página 749

Enabling Layer 2 Protocol TunnelingTo enable Layer 2 protocol tunneling, use the following command.1. Verify that the system is running the default CA

Página 750

4. Set a maximum rate at which the RPM processes BPDUs for L2PT.VLAN STACKING modeprotocol-tunnel rate-limitThe default is: no rate limiting.The range

Página 751

43sFlowConfiguring sFlow is supported on the S6000 platform.OverviewThe Dell Networking Operating System (OS) supports sFlow version 5.sFlow is a stan

Página 752

Important Points to Remember• The Dell Networking OS implementation of the sFlow MIB supports sFlow configuration via snmpset.• Dell Networking recomm

Página 753

69 sFlow samples dropped due to sub-samplingLinecard 1 Port set 0 H/W sampling rate 8192Gi 1/16: configured rate 8192, actual rate 8192, sub-sampling

Página 754

Dell#show sflowsFlow services are enabledGlobal default sampling rate: 32768Global default counter polling interval: 201 collectors configuredCollecto

Página 755

Example of Viewing sFlow Configuration (Line Card)Dell#show sflow stack-unit 1stack-unit 1 Samples rcvd from h/w :165 Samples dropped for

Página 756

EAP over RADIUS802.1X uses RADIUS to shuttle EAP packets between the authenticator and the authentication server, as defined in RFC 3579.EAP messages

Página 757

As a result of back-off, the actual sampling-rate of an interface may differ from its configured sampling rate. You can view the actual sampling-rate

Página 758 - Service Provider Bridging

0 UDP packets exported0 UDP packets dropped0 sFlow samples collected0 sFlow samples dropped due to sub-samplingImportant Points to Remember• To export

Página 759

IP SA IP DA srcAS and srcPeerASdstAS and dstPeerASDescriptionwhere is source is reachable over ECMP.BGP BGP Exported Exported Extended gateway data is

Página 760 - Configure VLAN Stacking

44Simple Network Management Protocol (SNMP)Simple network management protocol (SNMP) is supported on the S6000 platform.NOTE: On Dell Networking route

Página 761

Configuration mode. When the FIPS mode is enabled on the system, SNMPv3 operates in a FIPS-compliant manner, and only the FIPS-approved algorithm opti

Página 762 - Debugging VLAN Stacking

Configuration Task List for SNMPConfiguring SNMP version 1 or version 2 requires a single step.NOTE: The configurations in this chapter use a UNIX env

Página 763 - VLAN Stacking

Creating a CommunityFor SNMPv1 and SNMPv2, create a community to enable the community-based security in Dell Networking OS.The management station gene

Página 764

snmp-server group group-name 3 noauth auth read name write name• Configure an SNMPv3 view.CONFIGURATION modesnmp-server view view-name oid-tree {inclu

Página 765

• Read the value of a single managed object.snmpget -v version -c community agent-ip {identifier.instance | descriptor.instance}• Read the value of th

Página 766 - Enabling Drop Eligibility

Configuring Contact and Location Information using SNMPYou may configure system contact and location information from the Dell Networking system or fr

Página 767

Important Points to Remember• Dell Networking OS supports 802.1X with EAP-MD5, EAP-OTP, EAP-TLS, EAP-TTLS, PEAPv0, PEAPv1, and MS-CHAPv2 with PEAP.• A

Página 768

Subscribing to Managed Object Value Updates using SNMPBy default, the Dell Networking system displays some unsolicited SNMP messages (traps) upon cert

Página 769

snmp coldstart SNMP_COLD_START: Agent Initialized - SNMP COLD_START. SNMP_WARM_START:Agent Initialized - SNMP WARM_START.s

Página 770 - Layer 2 Protocol Tunneling

exceeds threshold of %dC) MAJOR_TEMP_CLR: Major alarm cleared: chassis temperature lower (%s %d temperature is within threshold of %dC)envmon fan

Página 771

from SNMP OID <oid> %RPM0-P:CP %SNMP-4-RMON_FALLING_THRESHOLD: STACKUNIT0 falling threshold alarm from SNMP OID <oid> %RPM0-P:CP %SN

Página 772

MIB Object OID Object Values Descriptionis set to running-config or startup-config, copySrcFileName is not required.copyDestFileType .1.3.6.1.4.1.6027

Página 773 - Setting Rate-Limit BPDUs

Copying a Configuration FileTo copy a configuration file, use the following commands.NOTE: In UNIX, enter the snmpset command for help using the follo

Página 774 - Provider Backbone Bridging

• Copy the running-config to the startup-config from the UNIX machine.snmpset -v 2c -c public force10system-ip-address copySrcFileType.index i 2 copyD

Página 775 - Overview

copyUserName.index s server-login-id copyUserPassword.index s server-login-password• precede server-ip-address by the keyword a.• precede the values f

Página 776 - Enabling Extended sFlow

myfilenamecopyServerAddress.10 a 172.16.1.56 copyUserName.10 s mylogin copyUserPassword.10 s mypassAdditional MIB Objects to View Copy StatisticsDell

Página 777 - Displaying Show sFlow Global

index: the index value used in the snmpset command used to complete the copy operation.NOTE: You can use the entire OID rather than the object name. U

Página 778

Enabling BGP Neighbor Soft-Reconfiguration...202Route Map Continue...

Página 779 - Back-Off Mechanism

dot1x authentication2. Enter INTERFACE mode on an interface or a range of interfaces.INTERFACE modeinterface [range]3. Enable 802.1X on the supplicant

Página 780

VLAN"SNMPv2-SMI::mib-2.17.7.1.4.3.1.1.1107787786 = STRING: "My VLAN"[Dell system output]Dell#show int vlan 10Vlan 10 is down, line prot

Página 781

Example of Adding a Tagged Port to a VLAN using SNMPIn the following example, Port 0/2 is added as a tagged member of VLAN 10.>snmpset -v2c -c myco

Página 782

CONFIGURATION modesnmp-server community2. From the Dell Networking system, identify the interface index of the port for which you want to change the a

Página 783 - SNMPv3 Compliance With FIPS

In the following example, R1 has one dynamic MAC address, learned off of port TeGigabitEthernet 1/21, which a member of the default VLAN, VLAN 1. The

Página 784

Deriving Interface IndicesDell Networking OS assigns an interface number to each (configured or unconfigured) physical and logical interface.The inter

Página 785 - Set up SNMP

Monitor Port-ChannelsTo check the status of a Layer 2 port-channel, use f10LinkAggMib (.1.3.6.1.4.1.6027.3.2). In the following example, Po 1 is a swi

Página 786 - Creating a Community

SNMPv2-SMI::enterprises.6027.3.1.1.4.1.2 = STRING: "OSTATE_DN: Changed interface state to down: Po 1"2010-02-10 14:22:40 10.16.130.4 [10.16.

Página 787 - Reading Managed Object Values

45Storm ControlStorm control is supported on the S6000 platform.The storm control feature allows you to control unknown-unicast and broadcast traffic

Página 788 - Writing Managed Object Values

46Spanning Tree Protocol (STP)The spanning tree protocol (STP) is supported on the S6000 platform.Protocol OverviewSTP is a Layer 2 protocol — specifi

Página 789

Important Points to Remember• STP is disabled by default.• The Dell Networking OS supports only one spanning tree instance (0). For multiple instances

Página 790

Configuring Request Identity Re-TransmissionsIf the authenticator sends a Request Identity frame, but the supplicant does not respond, the authenticat

Página 791

To configure and enable the interfaces for Layer 2, use the following command.1. If the interface has been assigned an IP address, remove it.INTERFACE

Página 792

Figure 112. Spanning Tree Enabled GloballyTo enable STP globally, use the following commands.1. Enter PROTOCOL SPANNING TREE mode.CONFIGURATION modepr

Página 793

To view the spanning tree configuration and the interfaces that are participating in STP, use the show spanning-tree 0 command from EXEC privilege mod

Página 794

spanning-tree 0Modifying Global ParametersYou can modify the spanning tree parameters. The root bridge sets the values for forward-delay, hello-time,

Página 795 - Copying a Configuration File

PROTOCOL SPANNING TREE modemax-age secondsThe range is from 6 to 40.The default is 20 seconds.To view the current values for global parameters, use th

Página 796

CAUTION: Enable PortFast only on links connecting to an end station. PortFast can cause loops if it is enabled on an interface connected to a network.

Página 797

• When you add a physical port to a port channel already in the Error Disable state, the new member port is also disabled in the hardware.• When you r

Página 798

• disables spanning tree on an interface• drops all BPDUs at the line card without generating a console messageExample of Blocked BPDUsDell(conf-if-gi

Página 799 - Manage VLANs using SNMP

Root Bridge hello time 2, max age 20, forward delay 15Dell#STP Root GuardSTP root guard is supported on the platform.Use the STP root guard feature

Página 800

Figure 114. STP Root Guard Prevents Bridging LoopsConfiguring Root GuardEnable STP root guard on a per-port or per-port-channel basis.Dell Networking

Página 801 - Managing Overload on Startup

Example of Configuring and Verifying Port AuthenticationThe following example shows configuration information for a port for which the authenticator r

Página 802

• Enable root guard on a port or port-channel interface.INTERFACE mode or INTERFACE PORT-CHANNEL modespanning-tree {0 | mstp | rstp | pvst} rootguard–

Página 803

STP Loop GuardSTP loop guard is supported only on the platform.The STP loop guard feature provides protection against Layer 2 forwarding loops (STP lo

Página 804 - Deriving Interface Indices

Figure 115. STP Loop Guard Prevents Forwarding LoopsConfiguring Loop GuardEnable STP loop guard on a per-port or per-port channel basis.Dell Networkin

Página 805 - Monitor Port-Channels

• You cannot enable root guard and loop guard at the same time on an STP port. For example, if you configure loop guard on a port on which root guard

Página 806

47System Time and DateSystem time and date settings and the network time protocol (NTP) are supported on the S6000 platform.You can set system times a

Página 807 - Storm Control

certain fields in the message, recalculates the checksum and returns the message immediately. Information included in the NTP message allows the clien

Página 808 - Spanning Tree Protocol (STP)

Implementation InformationDell Networking systems can only be an NTP client.Configure the Network Time ProtocolConfiguring NTP is a one-step process.•

Página 809

CONFIGURATION modentp update-calendarExample of Updating the System Clock Relative to NTPR5/R8(conf)#do show calendar06:31:02 UTC Mon Mar 13 1989R5/R8

Página 810

– For a 1-Gigabit Ethernet interface, enter the keyword GigabitEthernet then the slot/port information.– For a loopback interface, enter the keyword l

Página 811

4. Configure an NTP server.CONFIGURATION modentp server ip-address [key keyid] [prefer] [version number]Configure the IP address of a server and the f

Página 812

Example of Placing a Port in Force-Authorized State and Viewing the ConfigurationThe example shows configuration information for a port that has been

Página 813

NOTE: • Leap Indicator (sys.leap, peer.leap, pkt.leap) — This is a two-bit code warning of an impending leap second to be inserted in the NTP time sca

Página 814 - Enabling PortFast

Dell Networking OS Time and DateYou can set the time and date using the Dell Networking OS CLI.Configuration Task List The following is a configuratio

Página 815

– month: enter the name of one of the 12 months in English. You can enter the name of a day to change the order of the display to time day month year.

Página 816

– time-zone: enter the three-letter name for the time zone. This name displays in the show clock output.– start-month: enter the name of one of the 12

Página 817 - Selecting STP Root

– start-day: Enter the number of the day. The range is from 1 to 31. You can enter the name of a month to change the order of the display to time day

Página 818 - STP Root Guard

48Tunneling Tunnel interfaces create a logical tunnel for IPv4 or IPv6 traffic. Tunneling supports RFC 2003, RFC 2473, and 4213.DSCP, hop-limits, flow

Página 819 - Configuring Root Guard

ipv6 address 2::1/64tunnel destination 90.1.1.1tunnel source 60.1.1.1tunnel mode ipv6ip no shutdownThe following sample configuration shows a tunnel c

Página 820

Configuring a Tunnel InterfaceYou can configure the tunnel interface using the ip unnumbered and ipv6 unnumbered commands.To configure the tunnel inte

Página 821 - STP Loop Guard

Configuring Tunnel source anylocal DecapsulationThe tunnel source anylocal command allows a multipoint receive-only tunnel to decapsulate tunnel packe

Página 822 - Configuring Loop Guard

Multipoint Receive-Only Type and IP Unnumbered Interfaces for TunnelsMultipoint receive-only type IP Tunnel is now supported in S6000 platform. This i

Página 823

The bold lines show that re-authentication is enabled and the new maximum and re-authentication time period.Dell(conf-if-Te-0/0)#dot1x reauthenticatio

Página 824 - System Time and Date

49Upgrade ProceduresTo find the upgrade procedures, go to the Dell Networking OS Release Notes for your system type to see all the requirements needed

Página 825

50Virtual LANs (VLANs)Virtual LANs (VLANs) are supported on the S6000 platform.VLANs are a logical broadcast domain or logical grouping of interfaces

Página 826 - Enabling NTP

By default, VLAN 1 is the Default VLAN. To change that designation, use the default vlan-id command in CONFIGURATION mode. You cannot delete the Defau

Página 827 - Disabling NTP on an Interface

information is preserved as the frame moves through the network. The following example shows the structure of a frame with a tag header. The VLAN ID i

Página 828

• Configure a port-based VLAN (if the VLAN-ID is different from the Default VLAN ID) and enter INTERFACE VLAN mode.CONFIGURATION modeinterface vlan vl

Página 829

The following example shows the steps to add a tagged interface (in this case, port channel 1) to VLAN 4. To view the interface’s status. Interface (p

Página 830

INTERFACE modeuntagged interfaceThis command is available only in VLAN interfaces.Move an Untagged Interface to Another VLANThe no untagged interface

Página 831 - Configuration Task List

Assigning an IP Address to a VLANVLANs are a Layer 2 feature. For two physical interfaces on different VLANs to communicate, you must assign an IP add

Página 832 - Set Daylight Saving Time

INTERFACE mode2. Configure the interface for Hybrid mode.INTERFACE modeportmode hybrid3. Configure the interface for Switchport mode.INTERFACE modeswi

Página 833

51VLT Proxy GatewayYou can configure a proxy gateway in VLT domains. A proxy gateway enables you to locally route the packets that are destined to a L

Página 834

The bold lines show the new supplicant and server timeouts.Dell(conf-if-Te-0/0)#dot1x port-control force-authorizedDell(conf-if-Te-0/0)#do show dot1x

Página 835 - Tunneling

When the routing table across DCs is not symmetrical, there is a possibility of a routing miss by a DC that do not have the route for the L3 traffic.

Página 836

8. LLDP port channel interface can’t be changed to legacy lag when proxy gateway is enabled.9.“vlt-peer-mac transmit” is recommended only for square V

Página 837

• There are only a couple of MACs for each unit to be transmitted so that all current active MACs can definitely be carried on the newly defined TLV.•

Página 838

2. Trace route across VLT domains may show extra hops.3. IP route symmetry must be maintained across the VLT domains. Assume if the route to a destina

Página 839 - Interfaces for Tunnels

8. Packet duplication – Assume exclude-vlan (say VLAN 10) is configured on C2/D2 for C1’s MAC. If packets for VLAN 10 with C1’s MAC get a hit at C2, t

Página 840 - Upgrade Procedures

VLT DOMAIN PROXY GW LLDP modeDell(conf-vlt-domain-proxy-gw-lldp)#peer-domain-link port-channel interface exclude-vlan vlan-range4. Display the VLT pro

Página 841 - Virtual LANs (VLANs)

52Virtual Link Trunking (VLT)Virtual link trunking (VLT) is supported on the S6000 platform.OverviewVLT allows physical links between two chassis to a

Página 842 - VLANs and Port Tagging

Figure 118. VLT on SwitchesVLT on Core SwitchesYou can also deploy VLT on core switches.Uplinks from servers to the access layer and from access layer

Página 843

Figure 119. Enhanced VLTVLT TerminologyThe following are key VLT terms.• Virtual link trunk (VLT) — The combined port channel between an attached devi

Página 844

Configure Virtual Link TrunkingVLT requires that you enable the feature and then configure the same VLT domain, backup link, and VLT interconnect on b

Página 845 - Moving Untagged Interfaces

Figure 7. Dynamic VLAN Assignment1. Configure 8021.x globally (refer to Enabling 802.1X) along with relevant RADIUS server configurations (refer to th

Página 846

• In a scenario where one hundred hosts are connected to a Peer1 on a non-VLT domain and traffic flows through Peer1 to Peer2; when you move these hos

Página 847 - Configuring Native VLANs

– The system automatically includes the required VLANs in VLTi. You do not need to manually select VLANs.– VLT peer switches operate as separate chass

Página 848

– The chassis backup link does not carry control plane information or data traffic. Its use is restricted to health checks only.• Virtual link trunks

Página 849 - VLT Proxy Gateway

– Dell Networking does not recommend enabling peer-routing if the CAM is full. To enable peer-routing, a minimum of two local DA spaces for wild card

Página 850

Primary and Secondary VLT PeersPrimary and Secondary VLT Peers are supported on the platform.To prevent issues when connectivity between peers is lost

Página 851

When the bandwidth usage drops below the 80% threshold, the system generates another syslog message (shown in the following message) and an SNMP trap.

Página 852

PIM-Sparse Mode Support on VLTThe designated router functionality of the PIM Sparse-Mode multicast protocol is supported on VLT peer switches for mult

Página 853

(DR) if they are incorrectly hashed. In addition to being first-hop or last -hop routers, the peer node can also act as an intermediate router.On a VL

Página 854

local DA entries in TCAM. In case a VLT node is down, a timer that allows you to configure the amount of time needed for peer recovery provides resili

Página 855

• VLT resiliency — After a VLT link or peer failure, if the traffic hashes to the VLT peer, the traffic continues to be routed using multicast until t

Página 856

If the supplicant fails authentication, the authenticator typically does not enable the port. In some cases this behavior is not appropriate. External

Página 857 - Enhanced VLT

Non-VLT ARP SyncSynchronization for non-ARP routing table entries is supported on the platform.ARP entries (including ND entries) learned on other por

Página 858 - VLT Terminology

Sample RSTP ConfigurationThe following is a sample of an RSTP configuration.Using the example shown in the Overview section as a sample VLT topology,

Página 859

interface port-channel id-numberEnter the same port-channel number configured with the peer-link port-channel command as described in Enabling VLT and

Página 860

You can optionally specify the time interval used to send hello messages. The range is from 1 to 5 seconds.3. Configure the port channel to be used as

Página 861

The range of domain IDs from 1 to 1000.2. Enter an amount of time, in seconds, to delay the restoration of the VLT ports after the system is rebooted.

Página 862

Configure a different unit ID (0 or 1) on each peer switch.Unit IDs are used for internal system operations.Use this command to minimize the time requ

Página 863

To configure the VLAN where a VLT peer forwards received packets over the VLTi from an adjacent VLT peer that is down, use the peer-down-vlan paramete

Página 864 - VLT Bandwidth Monitoring

3. Enter VLT-domain configuration mode for a specified VLT domain.CONFIGURATION modevlt domain domain-idThe range of domain IDs is from 1 to 1000.4. E

Página 865 - VLT Port Delayed Restoration

interface port-channel id-numberEnter the same port-channel number configured with the peer-link port-channel command in the Enabling VLT and Creating

Página 866

vlt domain domain id2. Configure the VLTi between VLT peer 1 and VLT peer 2.3. You can configure LACP/static LAG between the peer units (not shown).CO

Página 867 - VLT Routing

!interface TenGigabitEthernet 2/1 switchport dot1x authentication dot1x guest-vlan 200no shutdownDell(conf-if-Te-2/1)#Dell(conf-if-Te-2/1)#dot1x au

Página 868 - VLT Multicast Routing

NOTE: If you use a third-party ToR unit, Dell Networking recommends using static LAGs with VLT peers to avoid potential problems if you reboot the VLT

Página 869 - Configuring VLT Multicast

3. In the Top of Rack unit, configure LACP in the physical ports (shown for VLT peer 1 only. Repeat steps for VLT peer 2. The bold vlt-peer-lag port-c

Página 870 - RSTP Configuration

Te 0/50 (Up)s60-1#Verify VLT is up. Verify that the VLTi (ICL) link, backup link connectivity (heartbeat status), and

Página 871 - Configuring VLT

Figure 121. eVLT Configuration ExampleeVLT Configuration Step ExamplesIn Domain 1, configure the VLT domain and VLTi on Peer 1.Domain_1_Peer1#configur

Página 872

Domain_1_Peer2(conf-vlt-domain)# back-up destination 10.16.130.12Domain_1_Peer2(conf-vlt-domain)# system-mac mac-address 00:0a:00:0a:00:0aDomain_1_Pee

Página 873 - Configuring a VLT Backup Link

Configure eVLT on Peer 4.Domain_2_Peer4(conf)#interface port-channel 100Domain_2_Peer4(conf-if-po-100)# switchportDomain_2_Peer4(conf-if-po-100)# vlt-

Página 874

Verifying a VLT ConfigurationTo monitor the operation or verify the configuration of a VLT domain, use any of the following show commands on the prima

Página 875

Examples of the show vlt and show spanning-tree rstp CommandsThe following example shows the show vlt backup-link command.Dell_VLTpeer1# show vlt back

Página 876

The following example shows the show vlt detail command.Dell_VLTpeer1# show vlt detailLocal LAG Id Peer LAG Id Local Status Peer Status Active VLANs--

Página 877

Dell_VLTpeer2# show vlt statisticsVLT Statistics----------------HeartBeat Messages Sent: 994HeartBeat Messages Received: 978ICL Hello's Sent:

Página 878 - VLT Sample Configuration

6Access Control Lists (ACLs)This chapter describes access control lists (ACLs), prefix lists, and route-maps.• Access control lists (ACLs), Ingress IP

Página 879

Configuring Virtual Link Trunking (VLT Peer 1)Enable VLT and create a VLT domain with a backup-link and interconnect trunk (VLTi).Dell_VLTpeer1(conf)#

Página 880

Configure the backup link.Dell_VLTpeer2(conf)#interface ManagementEthernet 0/0Dell_VLTpeer2(conf-if-ma-0/0)#ip address 10.11.206.35/Dell_VLTpeer2(conf

Página 881

Troubleshooting VLTTo help troubleshoot different VLT issues that may occur, use the following information.NOTE: For information on VLT Failure mode t

Página 882

Description Behavior at Peer Up Behavior During Run TimeAction to Takethat the MAC address is the same on both units.Unit ID mismatchThe VLT peer does

Página 883

Specifying VLT Nodes in a PVLANYou can configure VLT peer nodes in a private VLAN (PVLAN). VLT enables redundancy without the implementation of Spanni

Página 884

not validated if you associate an ICL to a PVLAN. Similarly, if you dissociate an ICL from a PVLAN, although the PVLAN parity exists, ICL is removed f

Página 885

PVLAN Operations When a VLT Peer is RestartedWhen the VLT peer node is rebooted, the VLAN membership of the VLTi link is preserved and when the peer n

Página 886 - Verifying a VLT Configuration

VLT LAG Mode PVLAN Mode of VLT VLAN ICL VLAN MembershipMac SynchronizationPeer1 Peer2 Peer1 Peer2PromiscuousTrunk Primary Primary Yes NoTrunk Access P

Página 887

VLT LAG Mode PVLAN Mode of VLT VLAN ICL VLAN MembershipMac SynchronizationPeer1 Peer2 Peer1 Peer2Access Access Secondary (Community)Secondary (Communi

Página 888

INTERFACE PORT-CHANNEL modeno shutdown5. To configure the VLT interconnect, repeat Steps 1–4 on the VLT peer switch.6. Enter VLT-domain configuration

Página 889

Configure Enhanced Transmission Selection...242ETS Prerequisites and Re

Página 890

• Port/VLAN based IMPLICIT DENY Rules• VRF based PERMIT/DENY Rules• VRF based IMPLICIT DENY RulesNOTE: In order for the VRF ACLs to take effect, ACLs

Página 891 - Access Switch)

6. Enable the VLAN.INTERFACE VLAN modeno shutdown7. To obtain maximum VLT resiliency, configure the PVLAN IDs and mappings to be identical on both the

Página 892 - Troubleshooting VLT

supported only for the IP address belongs to the received interface IP network. Proxy ARP is not supported if the ARP requested IP address is differen

Página 893

VLT Nodes as Rendezvous Points for Multicast ResiliencyYou can configure virtual link trunking (VLT) peer nodes as rendezvous points (RPs) in a Protoc

Página 894

53Virtual Extensible LAN (VXLAN)Virtual Extensible LAN (VXLAN) is supported on the S6000 platform.OverviewS6000 device acts as the VXLAN gateway and p

Página 895

• Network Virtualization Platform (NVP) Controller• VTEP (VXLAN Tunnel End Point)• VXLAN Gateway• VXLAN Hypervisor• Service Node (SN)• Legacy TORNetwo

Página 896

Functional Overview of VXLAN GatewayThe following section is the functional overview of VXLAN Gateway:1. Provides connectivity between a Virtual serve

Página 897

Components of VXLAN Frame FormatSome of the important fields of the VXLAN frame format are described below:Outer Ethernet Header:The Outer Ethernet He

Página 898

To create a Hypervisor or server, the required fields are the IP address and SSL certificate of the server. The following are the snapshots of the use

Página 899

To create service node, the required fields are the IP address and SSL certificate of the server. The Service node is responsible for broadcast/unknow

Página 900

NOTE: For more details about NVP controller configuration, refer to the NVP user guide from VMWare .Configuring VxLAN GatewayTo configure the VxLAN ga

Página 901

• CAM OptimizationUser Configurable CAM AllocationUser configurable CAM allocations are supported on the S6000 platform.Allocate space for IPV6 ACLs b

Página 902

6. fail-mode (Optional)VxLAN INSTANCE modefail-mode secureIf the local VTEP loses connectivity with the controller, it will delete all its database an

Página 903 - Components of VXLAN network

Rx Bytes : 1317Tx Packets : 13Tx Bytes : 1321The following example shows the show vxlan vxlan-instance physical-locator command.Dell#show vxlan vxlan-

Página 904

Tunnel Key : 2VFI : 28674Unknown Multicast MAC Tunnels: 192.168.122.133 : vxlan_over_ipv4 (up)Port Vlan Bindings: Te 0/80: VLAN: 0 (0x80000001),

Página 905 - VXLAN Frame Format

54Virtual Routing and Forwarding (VRF)Virtual Routing and Forwarding (VRF) allows a physical router to partition itself into multiple Virtual Routers

Página 906 - Controller GUI

Figure 122. VRF Network ExampleVRF Configuration NotesAlthough there is no restriction on the number of VLANs that can be assigned to a VRF instance,

Página 907 - 2. Create Service Node

Dell Networking OS uses both the VRF name and VRF ID to manage VRF instances. The VRF name and VRF ID number are assigned using the ip vrf command. Th

Página 908

Feature/Capability Support Status for Default VRF Support Status for Non-default VRFNOTE: ACLs supported on all VRF VLAN ports. IPv4 ACLs are supporte

Página 909 - Configuring VxLAN Gateway

Feature/Capability Support Status for Default VRF Support Status for Non-default VRFRAD Yes NoIngress/Egress Storm-Control (per-interface/global)Yes N

Página 910

Assigning an Interface to a VRFYou must enter the ip vrf forwarding command before you configure the IP address or any other setting on an interface.N

Página 911

static routes for reaching specific destinations through a given gateway in a VRF. VRRP provides high availability and protection for next-hop static

Página 912

Implementing ACLs on Dell Networking OSYou can assign one IP ACL per interface with Dell Networking OS. If you do not assign an IP ACL to an interface

Página 913 - VRF Overview

Figure 123. Setup OSPF and Static Routes920Virtual Routing and Forwarding (VRF)

Página 914 - VRF Configuration Notes

Figure 124. Setup VRF InterfacesThe following example relates to the configuration shown in Figure1 and Figure 2.Router 1ip vrf blue 1 ! ip vrf orange

Página 915 - Table 74

interface GigabitEthernet 7/1 ip vrf forwarding orange ip address 20.0.0.1/24 no shutdown ! interface GigabitEthernet 7/2 ip vrf forwa

Página 916

interface GigabitEthernet 9/19 ip vrf forwarding orange ip address 21.0.0.1/24 no shutdown!interface GigabitEthernet 9/20 ip vrf forwardin

Página 917 - VRF Configuration

Gi 13/0-47, Ma 0/0, Ma 1/0,

Página 918 - View VRF Instance Information

110/2 00:10:41Dell#show ip route vrf greenCodes: C - connected, S - static, R - RIP, B - BGP, IN - internal BGP, EX - extern

Página 919 - Sample VRF Configuration

Vl 256Dell#show ip ospf 1 neighborNeighbor ID Pri State De

Página 920

Codes: C - connected, S - static, R - RIP, B - BGP, IN - internal BGP, EX - external BGP,LO - Locally Originated, O - OSPF, IA -

Página 921

55Virtual Router Redundancy Protocol (VRRP)Virtual router redundancy protocol (VRRP) is supported on the S6000 platform.VRRP OverviewVRRP is designed

Página 922

Figure 125. Basic VRRP ConfigurationVRRP BenefitsWith VRRP configured on a network, end-station connectivity to the network is not subject to a single

Página 923

closer to 0) before rules with higher-order numbers so that packets are matched as you intended. By default, all ACL rules have an order of 255.Exampl

Página 924

CAUTION: Increasing the advertisement interval increases the VRRP Master dead interval, resulting in an increased failover time for Master/Backup elec

Página 925

Examples of Configuring and Verifying VRRPThe following examples how to configure VRRP.Dell(conf)#int gi 1/1Dell(conf-if-gi-1/1)#vrrp-group 111Dell(co

Página 926

NOTE: Carefully following this procedure, otherwise you might introduce dual master switches issues.To migrate an IPv4 VRRP Group from VRRPv2 to VRRPv

Página 927 - Route Leaking VRFs

The VRID range is from 1 to 255.2. Configure virtual IP addresses for this VRID.INTERFACE -VRID modevirtual-address ip-address1 [...ip-address12]The r

Página 928 - VRRP Overview

When the VRRP process completes its initialization, the State field contains either Master or Backup.Setting VRRP Group (Virtual Router) PrioritySetti

Página 929 - VRRP Implementation

NOTE: You must configure all virtual routers in the VRRP group the same: you must enable authentication with the same password or authentication is di

Página 930 - VRRP Configuration

The following example shows how to disable preempt using the no preempt command.Dell(conf-if-gi-1/1)#vrrp-group 111Dell(conf-if-gi-1/1-vrid-111)#no pr

Página 931

advertise-interval centisecs centisecsThe range is from 25 to 4075 centisecs in units of 25 centisecs.The default is 100 centisecs.Examples of the adv

Página 932 - Assign Virtual IP addresses

– The valid VLAN IDs are from 1 to 4094.For a virtual group, you can also track the status of a configured object (the track object-id command) by ent

Página 933

vrrp-group 111 advertise-interval 10 authentication-type simple 7 387a7f2df5969da4 no preempt priority 255 track GigabitEthernet 1/2

Página 934

To create a route map, use the following command.• Create a route map and assign it a unique name. The optional permit and deny keywords are the actio

Página 935 - Disabling Preempt

virtual-address 2007::1 virtual-address fe80::1no shutdownSetting VRRP Initialization DelayVRRP initialization delay is supported on the S6000 plat

Página 936

Sample ConfigurationsBefore you set up VRRP, review the following sample configurations.VRRP for an IPv4 ConfigurationThe following configuration show

Página 937 - Track an Interface or Object

Examples of Configuring VRRP for IPv4 and IPv6The following example shows configuring VRRP for IPv4 Router 2.R2(conf)#int gi 2/31R2(conf-if-gi-2/31)#i

Página 938 - Tracking an Interface

Figure 127. VRRP for an IPv6 ConfigurationNOTE: In a VRRP or VRRPv3 group, if two routers come up with the same priority and another router already ha

Página 939

Although R2 and R3 have the same default, priority (100), R2 is elected master in the VRRPv3 group because the GigE 0/0 interface has a higher IPv6 ad

Página 940

VRRP in a VRF ConfigurationThe following example shows how to enable VRRP operation in a VRF virtualized network for the following scenarios.• Multipl

Página 941

Figure 128. VRRP in a VRF: Non-VLAN ExampleExample of Configuring VRRP in a VRF on Switch-1 (Non-VLAN)Switch-1S1(conf)#ip vrf default-vrf 0!S1(conf)#i

Página 942

!S1(conf)#interface GigabitEthernet 12/3S1(conf-if-gi-12/3)#ip vrf forwarding VRF-3S1(conf-if-gi-12/3)#ip address 20.1.1.5/24S1(conf-if-gi-12/3)#vrrp-

Página 943

VRRP in VRF: Switch-1 VLAN ConfigurationVRRP in VRF: Switch-2 VLAN ConfigurationSwitch-1S1(conf)#ip vrf VRF-1 1!S1(conf)#ip vrf VRF-2 2!S1(conf)#ip vr

Página 944

S2(conf-if-vl-100-vrid-101)#priority 255S2(conf-if-vl-100-vrid-101)#virtual-address 10.10.1.2S2(conf-if-vl-100)#no shutdown!S2(conf-if-gi-12/4)#interf

Página 945 - VRRP in a VRF Configuration

The following example shows a route map with multiple instances. The show config command displays only the configuration of the current route map inst

Página 946

56S-Series Debugging and DiagnosticsThis chapter describes debugging and diagnostics for the S6000 platform.Offline DiagnosticsThe offline diagnostics

Página 947 - VLAN Scenario

NOTE: The system reboots when the offline diagnostics complete. This is an automatic process. The following warning message appears when you implement

Página 948

-- Stack Info --Unit UnitType Status ReqTyp CurTyp Version Ports-------------------------------------------------

Página 949

S25P, 28 ports)00:09:00: %S25P:2 %CHMGR-0-PS_UP: Power supply 0 in unit 2 is up00:09:00: %STKUNIT1-M:CP %CHMGR-5-STACKUNITUP: Stack unit 2 is up[outpu

Página 950 - Offline Diagnostics

diagS6000IsPsuGood[954]: ERROR: Psu:1, Power supply is not present.Test 8.001 - Psu1 Fan AirFlow Type Test ...NOT PRESENTTes

Página 951

Configuring 104 10GbE Ports on the S6000 PlatformThe capability to configure up to 104 10-Gigabit Ethernet ports is supported on the S6000 platform.St

Página 952

• You can configure a disabled port as a fanout port when the maximum limit is not exceeded. This behavior reduces the number of reloads required to c

Página 953

This phenomenon occurs because in Release 9.4(0.0), static configuration for the restricted ports is maintained. Validation of the restricted ports is

Página 954

0 60 52 0 0 0 0 0 64 53 0 0 0

Página 955 - Configuring Fanout Mode

Hardware Watchdog TimerThe hardware watchdog command automatically reboots an Dell Networking OS switch/router with a single RPM that is unresponsive.

Página 956

Example of the match Command to Permit and Deny RoutesDell(conf)#route-map force permit 10Dell(config-route-map)#match tag 1000Dell(conf)#route-map fo

Página 957

RPM 65 60 75 70 80Dell#Troubleshoot an Over-temperature ConditionTo troubleshoot an over-temperature condition, use the follo

Página 958 - Trace Logs

OID String OID Name DescriptionNOTE: These OIDs only generate if you enable the enable optic-info-update-interval is enabled command.Hardware MIB Buff

Página 959 - Hardware Watchdog Timer

Physical memory is organized into cells of 128 bytes. The cells are organized into two buffer pools — the dedicated buffer and the dynamic buffer.• De

Página 960 - Table 76. SNMP Traps and OIDs

Figure 130. Buffer Tuning PointsDeciding to Tune BuffersDell Networking recommends exercising caution when configuring any non-default buffer settings

Página 961 - Buffer Tuning

BUFFER PROFILE modebuffer dedicated• Change the maximum number of dynamic buffers an interface can request.BUFFER PROFILE modebuffer dynamic• Change t

Página 962

The following example shows viewing the default buffer profile.Dell#show buffer-profile detail interface gigabitethernet 0/1Interface Gi 0/1Buffer-pro

Página 963 - Deciding to Tune Buffers

Using a Pre-Defined Buffer ProfileDell Networking OS provides two pre-defined buffer profiles, one for single-queue (for example, non-quality-of-servi

Página 964

buffer fp-uplink stack-unit 0 port-set 1 buffer-policy fsqueue-hig!Interface range gi 0/1 - 48buffer-policy fsqueue-fpDell#sho run int gi 0/10!interfa

Página 965

Dell#show hardware stack-unit 0 drops unit 0Port# :Ingress Drops :IngMac Drops :Total Mmu Drops :EgMac Drops :EgressDrops1 0 0 0 0 02 0 0 0 0 03 0 0 0

Página 966

noMbuf :0 noClus :0 recvd :0 dropped :0 recvToNet :0 rxError :0 rxDatapathErr :0 rxPkt(CO

Página 967 - Troubleshooting Packet Loss

• Match next-hop routes specified in a prefix list (IPv6).CONFIG-ROUTE-MAP modematch ipv6 next-hop {access-list-name | prefix-list prefix-list-name}•

Página 968 - Dataplane Statistics

34 over 255-byte pkts, 504838 over 511-byte pkts, 1009638 over 1023-byte pkts 0 Multicasts, 0 Broadcasts, 1649714 Unicasts 0 throttles, 0 discarde

Página 969 - Display Stack Port Statistics

Mini Core DumpsDell Networking OS supports mini core dumps on the application and kernel crashes. The mini core dump applies to Master, Standby, and M

Página 970 - Display Stack Member Counters

--------------------FREE MEMORY---------------uvmexp.free = 0x2312Enabling TCP DumpsA TCP dump captures CPU-bound control plane traffic to improve tro

Página 971 - Mini Core Dumps

57Standards ComplianceThis chapter describes standards compliance for Dell Networking products.NOTE: Unless noted, when a standard cited here is liste

Página 972 - Enabling TCP Dumps

MTU 9,252 bytesRFC and I-D ComplianceDell Networking OS supports the following standards. The standards are grouped by related protocol. The columns s

Página 973 - Standards Compliance

General IPv4 ProtocolsThe following table lists the Dell Networking OS support per platform for general IPv4 protocols.Table 79. General IPv4 Protocol

Página 974 - RFC and I-D Compliance

General IPv6 ProtocolsThe following table lists the Dell Networking OS support per platform for general IPv6 protocols.Table 80. General IPv6 Protocol

Página 975 - General IPv4 Protocols

RFC# Full Name S-Series/Z-Series2545 Use of BGP-4 Multiprotocol Extensions for IPv6 Inter-Domain Routing2796 BGP Route Reflection: An Alternative to F

Página 976 - Border Gateway Protocol (BGP)

Intermediate System to Intermediate System (IS-IS)The following table lists the Dell Networking OS support per platform for IS-IS protocol.Table 83. I

Página 977

MulticastThe following table lists the Dell Networking OS support per platform for Multicast protocol.Table 85. MulticastRFC# Full Name S-Series1112 H

Página 978

CONFIG-ROUTE-MAP modeset local-preference value• Specify a value for redistributed routes.CONFIG-ROUTE-MAP modeset metric {+ | - | metric-value}• Spec

Página 979 - Network Management

RFC# Full Name S4810 S4820T Z-SeriesManagement of TCP/IP-based internets1157 A Simple Network Management Protocol (SNMP)7.6.11212 Concise MIB Definiti

Página 980

RFC# Full Name S4810 S4820T Z-SeriesDigital Hierarchy (SONET/SDH) Interface Type2570 Introduction and Applicability Statements for Internet Standard M

Página 981

RFC# Full Name S4810 S4820T Z-SeriesradiusAuthClientMalformedAccessResponsesradiusAuthClientUnknownTypesradiusAuthClientPacketsDropped2698 A Two Rate

Página 982

RFC# Full Name S4810 S4820T Z-SeriesNetwork Management Protocol (SNMP)3418 Management Information Base (MIB) for the Simple Network Management Protoco

Página 983

RFC# Full Name S4810 S4820T Z-SeriesGateway Protocol (BGP-4) using SMIv2draft-ietf-isis-wgmib- 16Management Information Base for Intermediate System t

Página 984

RFC# Full Name S4810 S4820T Z-SeriesMultiple Spanning Tree ProtocolsFlow.org sFlow Version 5 7.7.1sFlow.org sFlow Version 5 MIB 7.7.1FORCE10-BGP4-V2-M

Página 985

RFC# Full Name S4810 S4820T Z-SeriesFORCE10-SS-CHASSIS-MIBForce10 S-Series Enterprise Chassis MIB7.6.1FORCE10-SMI Force10 Structure of Management Info

Página 986 - MIB Location

In the following example, the redistribute command calls the route map static ospf to redistribute only certain static routes into OSPF. According to

Comentários a estes Manuais

Sem comentários