Brocade BigIron RX Series Configuration Guide Bedienungsanleitung
Stöbern Sie online oder laden Sie Bedienungsanleitung nach Computerzubehör Brocade BigIron RX Series Configuration Guide herunter. Brocade BigIron RX Series Configuration Guide User Manual Benutzerhandbuch
- Seite / 155
- Inhaltsverzeichnis
- FEHLERBEHEBUNG
- LESEZEICHEN
- BigIron RX Series 1
- Document History 2
- Contents 3
- Applications 6
- Chapter 7 Configuring IP 8
- Chapter 8 Link Aggregation 9
- Chapter 9 Configuring LLDP 10
- Chapter 11 VLANs 11
- Chapter 16 Topology Groups 15
- Chapter 21 Layer 2 ACLs 18
- Chapter 25 Configuring RIP 22
- Chapter 28 Configuring MBGP 26
- Chapter 40 Configuring sFlow 33
- Chapter 43 IPv6 Addressing 34
- Chapter 45 Configuring RIPng 36
- Chapter 46 Configuring BGP4+ 36
- Appendix A Using Syslog 39
- About This Document 43
- Category Feature description 44
- • Brocade MRP 45
- • 802.1W 45
- Unsupported features 46
- What’s new in this document 47
- • Textual Conventions 54
- Book: BigIron RX Series 60
- • snAgGblCpuUtil1SecAvg 64
- • snAgGblCpuUtil5SecAvg 64
- • snAgGblCpuUtil1MinAvg 64
- System enhancements 65
- Layer 2 enhancements 66
- Layer 3 enhancements 67
- IP multicast enhancements 69
- Network management 71
- Hardware enhancements 71
- Multicast enhancement 73
- Security enhancements 74
- Document conventions 77
- Trademark references 78
- Related publications 78
- Getting technical help 78
- Document feedback 78
- EXEC commands 81
- CONFIG commands 82
- Accessing the CLI 85
- CLI command structure 86
- Optional fields 87
- List of available options 87
- Syntax shortcuts 92
- Management module switchover 96
- Switchover implications 97
- Management sessions 98
- Syslog and SNMP traps 98
- MAC address changes 98
- Layer 2 Hitless Failover 98
- 53-1002484-04 100
- BigIron RX# sync-standby 102
- BigIron RX# switchover 102
- BigIron RX# reset 102
- Status LED 103
- Software 104
- File system Root directory 106
- Management focus 107
- Flash memory file system 108
- PCMCIA flash card file system 109
- Wildcards 110
- Formatting a flash card 110
- Creating a subdirectory 115
- BigIron RX# mkdir slot2 TEST 116
- Removing a subdirectory 117
- Renaming a file 118
- Deleting a file 119
- TFTP server 123
- Loading the software 127
- Saving configuration changes 128
- File management messages 129
- <file-name> 130
- Securing access methods 131
- • Telnet access 134
- • SSH access 134
- • Web management access 134
- • SNMP access 134
- IP addresses 137
- Telnet access 138
- • TFTP access 139
- Disabling Telnet access 140
- Setting passwords 141
- Disabling password encryption 145
- Changing local user passwords 147
- BigIron RX# show run 148
- Retaining password history 150
- Setting passwords to expire 150
- • Generating a certificate 151
- Generating an SSL certificate 153
- TACACS authentication 154
- TACACS+ authentication 154
- TACACS+ authorization 155
- TACACS+ accounting 155
- Setting the TACACS+ key 160
- Setting the timeout parameter 161
- Configuring RADIUS security 169
- RADIUS authorization 170
- RADIUS accounting 170
- AAA operations for RADIUS 171
- Configuring RADIUS accounting 179
- Method parameter Description 185
- Management Applications 187
- On-line help 188
- Command completion 188
- Scroll control 188
- Line editing commands 189
- Character Operation 192
- Logging on through the CLI 193
- Web Management Interface 195
- Configuring Basic Parameters 197
- Disabling SNMP traps 200
- Setting the system clock 206
- Configuring CLI banners 208
- Telnet session is detected 209
- Configuring terminal display 210
- BigIron RX# write memory 211
- BigIron RX# reload 211
- Syntax: show default values 212
- • ACL – 416 215
- • IPv6 Multicast – 192 215
- Nexthop table 216
- Changing the MAC age time 217
- Pinging an IPv4 address 218
- Assigning a port name 221
- Speed/Duplex negotiation 222
- Changing the negotiation mode 224
- Wait for all cards feature 225
- Port transition hold timer 226
- Modifying port priority (QoS) 228
- About hardware-based PBR 230
- Enabling WAN PHY mode support 231
- Configuring IP 233
- ARP cache table 235
- Static ARP table 235
- IP Route table 236
- IP forwarding cache 236
- IP global parameters 237
- IP global parameters 238
- IP interface parameters 240
- Configuring IP parameters 241
- Configuring IP addresses 242
- Deleting an IP address 244
- GRE IP tunnel 245
- Configuring a GRE IP tunnel 246
- BigIron RX A 248
- BigIron RX B 248
- • Ethernet II 249
- Defining a domain list 254
- Dynamic cache entries 256
- Static cache entries 256
- Clearing the DNS cache table 256
- Defining the polling interval 257
- Displaying the server list 258
- Debugging the DNS feature 258
- Configuring packet parameters 259
- Changing the MTU 261
- Globally changing the IP MTU 262
- Changing the router ID 263
- TACACS+, or RADIUS packets 264
- TACACS and TACACS+ packets 265
- IP fragmentation protection 266
- IP option attack protection 266
- IP receive access list 266
- Configuring ARP parameters 267
- Rate limiting ARP packets 268
- Configuration notes 269
- Changing the ARP aging period 270
- Enabling proxy ARP 271
- Creating static ARP entries 271
- • Default maximum: 8192 272
- • Configurable maximum: 65536 272
- Displaying ARP 274
- Changing the TTL threshold 275
- Disabling ICMP messages 277
- Configuring static routes 279
- Configuring a static IP route 281
- Configuring a “null” route 282
- Static route tagging 284
- Configuring IP load sharing 289
- How IP load sharing works 291
- Default route ECMP 292
- Configuring IRDP 294
- BigIron RX(config)# ip irdp 295
- Displaying IP information 300
- Global settings 301
- Static routes 301
- Displaying ARP entries 304
- Displaying the IP route table 307
- Clearing IP routes 310
- Syntax: show ip traffic 311
- Syntax: show ip tcp traffic 313
- Link Aggregation 315
- LAG load sharing 318
- Configuration of a LAG 319
- Adding ports to a LAG 320
- Configuring an LACP timeout 321
- Deploying a LAG 322
- Disabling ports within a LAG 323
- Enabling ports within a LAG 324
- Displaying LAG information 325
- TABLE 61 Show LAG information 327
- Displaying LAG statistics 329
- Configuring LLDP 331
- LLDP overview 332
- General operating principles 333
- LLDP packets 334
- TLV support 334
- Mandatory TLVs 335
- TABLE 63 Port ID subtypes 336
- MIB support 337
- Web Management 338
- Enabling and disabling LLDP 339
- Per device 341
- Per port 341
- • Chassis ID 344
- General system information 345
- • Loopback interface 346
- • Other physical interface 346
- 802.1 capabilities 349
- 802.3 capabilities 350
- LLDP configuration summary 352
- LLDP statistics 353
- Syntax: show lldp statistics 354
- LLDP neighbors 355
- LLDP neighbors detail 356
- LLDP configuration details 357
- Resetting LLDP statistics 358
- Configuring UDLD 360
- Displaying UDLD information 361
- Clearing UDLD statistics 364
- Untagged Packet Format 366
- 802.1q Tagged Packet Format 366
- VLAN ID (12 bits) 366
- Protocol-based VLANs 367
- VLAN configuration rules 368
- Configuring port-based VLANs 369
- VLAN byte accounting 370
- Clearing counters 372
- BigIron RX(config)# vlan 2 373
- VLAN groups 377
- Configuring aggregated VLANs 381
- Complete CLI examples 383
- Commands for device B 384
- Commands for device C 384
- Commands for device D 385
- Commands for device E 385
- Commands for device F 385
- Configuration rules 387
- Enabling 802.1Q-in-Q tagging 387
- Example configuration 388
- Private VLANs 392
- Implementation notes 393
- Configuring a private VLAN 394
- Configuring the primary VLAN 395
- Other VLAN features 397
- Flow based MAC learning 398
- Other configuration options 399
- Displaying VLAN information 400
- Transparent firewall mode 403
- BigIron RX(config)# vlan 10 406
- Changing STP port parameters 408
- Root guard 408
- Enabling STP root guard 409
- Displaying the STP root guard 409
- Displaying STP information 411
- Global STP parameters 413
- Bridge parameters 413
- Root bridge parameters 413
- Port STP parameters 413
- <vlan-id> is 416
- STP port parameters 417
- <slot/port> 419
- <slot/port>” 419
- • Blocking 420
- • Forwarding 420
- • Listening 420
- • Learning 420
- SSTP defaults 421
- Enabling SSTP 421
- Displaying SSTP information 422
- PVST/PVST+ compatibility 423
- Enabling PVST+ support 424
- Configuration examples 425
- SuperSpan™ 427
- Customer ID 428
- BPDU forwarding 428
- Preforwarding state 429
- Configuring SuperSpan 433
- Assignment of port roles 438
- Ports on Switch 1 439
- Ports on Switch 2 439
- Ports on Switch 3 439
- Ports Switch 4 440
- Point-to-point ports 441
- Bridge port states 441
- State machines 442
- Handshake mechanisms 443
- FIGURE 44 Sync stage 445
- FIGURE 45 Synced stage 446
- FIGURE 46 Agree stage 447
- Switch 100 448
- Switch 60 448
- Switch 200 448
- Switch 300 448
- Switch 400 448
- FIGURE 49 Sync and reroot 450
- FIGURE 50 Sync and rerooted 451
- Convergence at start up 454
- FIGURE 55 Active Layer 2 path 456
- Indicates direction of TCN 462
- Configuring RSTP parameters 465
- Changing port parameters 467
- Fast port span 468
- Fast uplink span 470
- Displaying RSTP information 472
- Bridge IEEE RSTP parameters 473
- Root bridge parameters: 473
- Ring initialization 485
- Configuring MRP 492
- Adding an MRP ring to a VLAN 493
- MRP phase 2 494
- Example 1 Example 2 495
- Selection of master node 497
- Normal flow 498
- Flow when a link breaks 499
- Using MRP diagnostics 500
- Displaying MRP information 501
- Displaying ring information 502
- MRP CLI example 503
- Commands on switch B 504
- Commands on switch C 505
- Commands on switch D 505
- Master election and failover 509
- Configured priority = 100 510
- Configured priority = 150 511
- FIGURE 79 Track port priority 512
- BigIron RX(config)# vlan 200 513
- Enabling Layer 3 VSRP 514
- Configuring a VRID IP address 515
- VSRP fast start 516
- Changing the backup priority 517
- VSRP slow start 518
- Changing the dead interval 519
- Specifying a track port 521
- Clearing VSRP information 522
- VSRP and MRP signaling 522
- Displaying VSRP information 524
- Syntax: show vsrp brief 527
- Topology Groups 529
- Control ports and free ports 530
- Configuring a topology group 531
- Configuring VRRP and VRRPE 533
- Master router election 535
- Brocade enhancements of VRRP 536
- Authentication 537
- Overview of VRRPE 538
- VRRP and VRRPE parameters 540
- Configuring the owner 542
- Configuring a backup 543
- Configuration rules for VRRP 543
- Configuration rules for VRRPE 544
- Authentication type 545
- Hello interval 546
- Dead interval 547
- Track port 547
- Track priority 548
- Backup preempt 548
- • VRRP and VRRPE Statistics 550
- Interface parameters 552
- Virtual router parameters 552
- Displaying statistics 554
- Configuring Router1 556
- Configuring Router2 556
- VRRPE example 557
- Classification 559
- FIGURE 87 Priority resolution 560
- Changing a port’s priority 563
- Configuring ToS-based QoS 564
- Configuring the QoS mappings 565
- Syntax: show qos-maps 570
- QoS mapping information 570
- • Weight-based scheduler 571
- • Rate-based scheduler 571
- How WRED Operates 572
- Calculating avg-q-size 573
- Using WRED with rate limiting 574
- Enabling WRED 574
- Averaging weight 575
- Wq value as a percentage 575
- Qos profiles 585
- Egress port shaping 586
- Mirroring ports 587
- Supported ACLs 587
- Configuring Traffic Reduction 589
- Requested rate 590
- Maximum burst 590
- Actual rate 590
- 650000000 650000000 593
- 500000000 750000000 595
- Displaying traffic reduction 598
- Benefits of MCT 602
- How MCT works 602
- MCT components 603
- Dynamic LAGs 605
- MCT peers 605
- ICL traffic handling 606
- STP and RSTP 607
- MCT feature interaction 608
- Configuring MCT 609
- MCT logical 611
- switch 611
- CT logical 611
- Optional MCT cluster commands 623
- MCT configuration examples 627
- Client #1 629
- Client #2 629
- Single-level MCT extension 630
- Client #3 633
- Two-level MCT example 634
- Router C 636
- Router D 637
- MRP integration with MCT 639
- Switch A 639
- Switch B 640
- Disabling port shutdown 642
- Setting the syslog interval 642
- Setting the disable duration 643
- Cluster MAC entry types 645
- MAC entry aging 645
- Flushing MAC entries 645
- MAC entry movement 646
- Flooding support on VLANs 646
- Displaying MAC entries 646
- • CCL: Cluster Client Local 647
- • CCR: Cluster Client Remote 647
- • CL: Local 647
- • CR: Remote 647
- Syntax: show mac mdup-stats 650
- Clearing MAC entries 651
- MCT failover scenarios 652
- Syslogs and debugging 653
- Sample configuration 654
- MCT debug commands 655
- MCT for VRRP or VRRP-E 660
- ARP broadcast resolution 661
- Advanced MCT scenario 662
- Layer 2 ACLs 665
- Configuration rules and notes 666
- Configuring Layer 2 ACLs 666
- Example Layer 2 ACL clauses 667
- Layer 2 ACL table 668
- Viewing Layer 2 ACLs 669
- Access Control List 671
- Access Control List overview 671
- Default ACL action 673
- Types of IP ACLs 673
- ACL IDs and entries 673
- ACL-based inbound mirroring 674
- Standard ACL syntax 679
- Extended ACL syntax 682
- <number>] 683
- Configuring super ACLs 691
- Super ACL syntax 692
- Displaying ACL definitions 693
- Port service 694
- Port name Description 694
- ACL logging 704
- Modifying ACLs 705
- Adding or deleting a comment 707
- Deleting ACL entries 709
- From named ACLs 710
- Applying ACLs to interfaces 711
- QoS options for IP ACLs 713
- ACL accounting 714
- Clearing the ACL statistics 716
- Numbered ACLs 717
- Named ACLs 717
- ICMP message type Type Code 720
- Troubleshooting ACLs 721
- Policy-Based Routing 723
- Configuring a PBR policy 724
- Configure the route map 726
- Setting the next hop 728
- Trunk formation 730
- Overview of IP multicasting 731
- Multicast terms 732
- IP multicast boundaries 733
- • The route has no OIF and 734
- Configuring PMRI 735
- Displaying hardware-drop 735
- • show ip igmp group 737
- • show ip pim group 737
- Default IGMP version 739
- Displaying IGMPv3 information 742
- This field Displays 743
- • The multicast group address 744
- • The mode of the group 744
- • The ID of the interface 745
- Clearing IGMP statistics 746
- PIM dense 748
- Pruning a multicast tree 749
- Grafts to a multicast tree 751
- PIM DM versions 751
- Configuring PIM DM 752
- PIM Sparse 756
- PIM Sparse router types 757
- Configuring PIM Sparse 758
- Current limitations 759
- • Default route from the mRTM 764
- • Default route from the uRTM 764
- MLL optimization 766
- PIM-SSMv4 776
- Enabling SSM 777
- • Group address: 232.1.0.95 778
- • RP address: 206.251.17.41 778
- Source active caching 779
- Configuring MSDP 779
- Enabling MSDP 780
- Configuring MSDP peers 780
- IP address 781
- Configuring MSDP mesh groups 786
- Source for Group 787
- 232.1.0.95 787
- Displaying MSDP information 793
- Displaying peer information 794
- Clearing MSDP information 797
- DVMRP overview 798
- Configuring DVMRP 802
- Modifying neighbor timeout 803
- Modifying route expires time 803
- Modifying route discard time 803
- Modifying prune age 803
- Modifying probe interval 804
- Modifying report interval 804
- Modifying trigger interval 804
- Modifying default route 804
- Modifying the TTL 805
- Modifying the metric 805
- Enabling advertising 805
- (config)# vlan 2 809
- Layer 2 multicast filters 812
- Configuration requirements 815
- Configuring RIP 821
- Enabling RIP 822
- Configuring metric parameters 822
- Configuring redistribution 823
- Displaying RIP filters 828
- Configuring OSPF 837
- OSPF parameters 838
- Enable OSPF on the router 839
- Assign OSPF areas 839
- Assign a totally stubby area 840
- Modify interface defaults 843
- OSPF interface parameters 844
- Assign virtual links 847
- OSPF Area 0 848
- OSPF Area 1 848
- “transit area” 848
- OSPF Area 2 848
- OSPF point-to-point links 852
- Define redistribution filters 855
- RIP Domain 856
- OSPF Domain 856
- Enable route redistribution 857
- • set tag <tag-value> 859
- • BigIron RX ->R3 859
- • BigIron RX ->R4 859
- • BigIron RX ->R5 859
- • BigIron RX ->R6 860
- Modify SPF timers 863
- Usage guidelines 865
- Trap name default 869
- Modify exit overflow interval 871
- Displaying OSPF information 872
- Syntax: show tasks 874
- • normal 875
- • 1 = point-to-point link 876
- Displaying OSPF trap status 884
- OSPF graceful restart 886
- Restarting Router 888
- Overview of BGP4 892
- FIGURE 121 Example BGP4 ASs 893
- • IGP is lowest 894
- • INCOMPLETE is highest 894
- BGP4 message types 895
- OPEN message 896
- UPDATE message 896
- KEEPALIVE message 897
- NOTIFICATION message 897
- REFRESH message 897
- Memory considerations 898
- Configuring BGP4 898
- Immediately 902
- Activating and disabling BGP4 903
- Note regarding disabling BGP4 904
- Defining an AS-path filter 906
- Defining a community filter 907
- BGP Null0 routing 908
- Configuration steps 909
- BigIron RX(config) router bgp 913
- Redistributing IBGP routes 914
- Configuring a route reflector 915
- Configuring confederations 915
- Originating the default route 919
- Neighbor local-AS 922
- Setting the local AS number 923
- Customizing BGP4 load sharing 924
- Configuring BGP4 neighbors 924
- Encryption example 930
- Configuring a BGP4 peer group 932
- Configuring a peer group 933
- BGP4 route 936
- Enabling next-hop recursion 936
- Redistributing RIP routes 940
- Redistributing ISIS 941
- Redistributing static routes 942
- Adding a loopback interface 944
- BGP4 load sharing 945
- Support for RFC 2796 946
- Configuration procedures 947
- Filtering 948
- Using regular expressions 949
- Special characters 949
- Filtering communities 951
- Defining a community ACL 952
- Defining route maps 954
- Matching based on AS-path ACL 957
- • Configure the filter 962
- Sending and receiving ORFs 963
- Generating traps for BGP 970
- Using soft reconfiguration 971
- Clearing traffic counters 976
- BGP4 network information 999
- Displaying route details 1000
- Displaying BGP4 information 1001
- BGP4 route information 1001
- This field... Displays 1002
- Graceful restart in BGP 1006
- BGP graceful restart example 1007
- Router 1 1008
- Router 2 1008
- Router 3 1008
- Configuring MBGP 1011
- Configuration considerations 1012
- Enabling MBGP 1013
- Adding MBGP neighbors 1013
- Optional configuration tasks 1014
- Displaying MBGP information 1018
- Displaying MBGP neighbors 1019
- Displaying MBGP routes 1020
- Configuring IS-IS (IPv4) 1023
- IS-IS Routing Domain 1025
- Neighbors and adjacencies 1026
- Designated IS 1026
- Broadcast pseudonode 1027
- IS-IS CLI levels 1028
- Configuring IPv4 IS-IS 1029
- Setting the overload bit 1030
- Configuring authentication 1031
- Configuring a domain password 1032
- Configuring an area password 1032
- • show isis database 1033
- • show isis interface 1033
- • show isis neighbor 1033
- Changing the SPF timer 1035
- Logging adjacency changes 1036
- Changing the metric style 1036
- Configuring summary addresses 1039
- Changing the hello interval 1045
- Changing the hello multiplier 1045
- Displaying the name mappings 1047
- • LEVEL-1 1050
- • LEVEL-2 1050
- • LEVEL-1-2 1050
- Displaying route information 1052
- Displaying traffic statistics 1056
- Displaying error statistics 1057
- Clearing IS-IS information 1058
- In this chapter 1061
- BFD overview 1061
- Configuring BFD parameters 1062
- Configuring BFD for OSPFv2 1067
- Configuring BFD for OSPFv3 1068
- Configuring BFD for IS-IS 1068
- Configuring Secure Shell 1071
- Configuring SSH 1072
- Generating a host key pair 1073
- Setting the SSH port number 1077
- Disabling 3-DES 1079
- Using secure copy 1080
- Supported RADIUS attributes 1084
- Attribute name Type Value 1085
- Setting RADIUS parameters 1086
- RADIUS server 1087
- Defining MAC address filters 1088
- Example configurations 1099
- Tunnel-Private-Group-ID: 1100
- Example 1 1102
- dot1x port-control auto 1103
- mac-authentication enable 1103
- Example 2 1104
- Local and global resources 1108
- Shutdown the interface 1112
- Restricting interface access 1112
- Logging denied packets 1113
- Denying a MAC address 1114
- Re-enabling an interface 1116
- Transparent port flooding 1121
- Client/Supplicant 1124
- RADIUS Server 1124
- (Authentication Server) 1124
- BigIron Device 1124
- (Authenticator) 1124
- Value Description 1135
- Setting the port control 1137
- Setting the quiet period 1139
- Initializing 802.1x on a port 1141
- Displaying 802.1x information 1142
- Syntax: show dot1x 1143
- Displaying 802.1x statistics 1145
- Clearing 802.1x statistics 1146
- Sample 802.1x configurations 1150
- Hub configuration 1152
- 14.14.14.1(), 1 event(s) 1157
- TCP security enhancement 1158
- Clear DoS attack statistics 1160
- Tracking of DHCP assignments 1161
- Dynamic ARP inspection 1161
- ARP attacks 1162
- How DAI works 1162
- Brocade Device 1163
- Untrusted 1163
- Configuring DAI 1164
- Displaying the ARP table 1165
- DHCP snooping 1166
- Enabling trust on a port 1168
- Snooping 1169
- IP source guard 1171
- Securing SNMP Access 1173
- Configuring your NMS 1175
- Defining the engine ID 1176
- Defining an SNMP group 1177
- Defining an SNMP user account 1178
- Displaying the engine ID 1179
- Displaying SNMP groups 1179
- Displaying user information 1180
- Defining SNMP views 1181
- Simple SNMP v3 configuration 1182
- FDP overview 1183
- Using FDP 1183
- Enabling FDP globally 1184
- Changing the FDP update timer 1184
- Changing the FDP hold time 1184
- Displaying FDP information 1185
- Displaying FDP entries 1186
- • FDP and CDP statistics 1187
- Reading CDP packets 1188
- Displaying neighbors 1189
- Clearing CDP information 1190
- Syntax: clear fdp table 1191
- Syntax: clear fdp counters 1191
- Remote Network Monitoring 1193
- Basic management 1195
- RMON support 1197
- Statistics (RMON group 1) 1198
- History (RMON group 2) 1200
- Alarm (RMON group 3) 1201
- Event (RMON group 9) 1201
- Configuring sFlow 1203
- Sampling rate 1204
- Inbound port monitoring 1204
- Specifying the collector 1205
- Changing the polling interval 1205
- Changing the sampling rate 1206
- Enabling sFlow forwarding 1207
- ACL-based inbound sFlow 1208
- Displaying sFlow information 1211
- Displaying sFlow counters 1212
- Clearing sFlow statistics 1213
- Setting the MSTP name 1217
- Configuring an MSTP instance 1217
- Setting point-to-point link 1219
- Disabling MSTP on a port 1219
- Region 1 1220
- Region 2 1220
- Core 1 configuration 1221
- Core2 configuration 1221
- Displaying MSTP statistics 1222
- Output from Show MSTP 1223
- Changing the IGMP mode 1231
- Modifying the query interval 1232
- Modifying the age interval 1232
- Filtering multicast groups 1233
- Static IGMP membership 1233
- per VLAN 1234
- PIM SM traffic snooping 1235
- Syntax: show ip multicast 1240
- Clearing IGMP group flows 1241
- IPv6 Addressing 1243
- IPv6 address types 1244
- TABLE 187 IPv6 address types 1245
- IPv6 connectivity overview 1247
- Enabling IPv6 routing 1248
- EUI-64 interface ID 1249
- IPv6 host support 1251
- Defining a DNS entry 1255
- ECMP load sharing for IPv6 1256
- DHCP relay agent for IPv6 1258
- Configuring IPv6 ICMP 1260
- Neighbor redirect messages 1263
- Changing the IPv6 MTU 1267
- QoS for IPv6 traffic 1268
- Clearing the IPv6 cache 1269
- • IPv6 prefix 1270
- • IPv6 address 1270
- • Interface type 1270
- Displaying local IPv6 routers 1276
- Syntax: show ipv6 traffic 1282
- Configuring RIPng 1287
- Enabling RIPng 1288
- Configuring RIPng timers 1288
- Timer Description Default 1289
- • IPv6 static routes 1291
- • IPv6 IS-IS 1291
- • OSPFv3 1291
- Displaying RIPng information 1293
- Configuring BGP4+ 1297
- Enabling BGP4+ 1299
- IPv6 addresses 1300
- Configuring a route map 1301
- Creating a BGP4+ peer group 1302
- Importing routes into BGP4+ 1304
- • RIPng 1305
- Clearing BGP4+ information 1306
- Removing route flap dampening 1307
- Displaying BGP4+ information 1311
- Summary of BGP4+ routes 1312
- Message Header Error 1331
- Displaying BGP4+ summary 1352
- Configuring IPv6 MBGP 1355
- Enabling IPv6 MBGP 1356
- Adding IPv6 MBGP neighbors 1357
- Command Description 1361
- IPv6 ACLs 1365
- Configuring an IPv6 ACL 1366
- ACL syntax 1369
- For ICMP 1370
- • AHP – Authentication Header 1371
- Arguments... Description 1372
- • router-solicitation 1375
- • sequence 1375
- • time-exceeded 1375
- • unreachable 1375
- Displaying ACLs 1377
- Configuring OSPF Version 3 1379
- Configuring OSPFv3 1380
- Assigning OSPFv3 areas 1381
- Configuring virtual links 1383
- Filtering OSPFv3 routes 1390
- • 1 – Type 1 external route 1393
- • 2 – Type 2 external route 1394
- • Intra-area routes 1395
- • Inter-area routes 1395
- • External routes 1395
- Displaying OSPFv3 information 1398
- Syntax: show ipv6 ospf memory 1407
- Field Description 1408
- This Field... Displays 1411
- TABLE 236 OSPFv3 SPF Table 1415
- • DOWN – The link is down 1416
- IPv6 PIM sparse 1419
- PIM sparse router types 1420
- RP paths and SPT paths 1420
- Configuring PIM sparse 1420
- IPv6 PIM-sparse mode 1421
- Configuring BSRs 1422
- Configuring RPs 1422
- Statically specifying the RP 1423
- ACL based RP assignment 1424
- Displaying the static RP 1424
- Setting the inactivity timer 1427
- Changing the hello timer 1427
- • Ethernet 1429
- • Disabled 1429
- • Enabled 1429
- Displaying BSR information 1430
- Displaying the RP set list 1433
- Syntax: show ipv6 pim mcache 1435
- MLD version distinctions 1437
- Enabling MLDv2 1438
- Setting the query interval 1439
- Setting the robustness 1440
- Setting the version 1440
- Specifying a port version 1440
- Specifying a static group 1440
- Displaying MLD information 1441
- Displaying MLD traffic 1442
- Clearing IPv6 MLD traffic 1443
- Enabling the embedded RP 1444
- Configuring IPv6 Routes 1445
- Continuous System Monitor 1449
- Event Type 1450
- TM_Q_SCANNER 1451
- TCAM_SCAN 1451
- PKT_PATH_SCAN 1451
- DRAM_CRC 1452
- TX_BUFFER 1452
- Display Commands 1453
- Using Syslog 1457
- Static and dynamic buffers 1460
- Clearing log entries 1461
- Time stamps 1461
- Specifying a Syslog server 1463
- Changing the log facility 1465
- Syslog messages 1467
- • 1 – Router 1468
- • 2 – Network 1468
- • 3 – Summary 1468
- • 4 – Summary 1468
- • 5 – External 1468
- • master 1481
- • backup 1481
- • unknown 1481
- TABLE 243 BFD Syslog messages 1486
- Software Specifications 1487
- RFC compliance - OSPF 1488
- RFC compliance - IS-IS 1488
- RFC compliance - RIP 1488
- RFC compliance - IP Multicast 1488
- RFC compliance - management 1490
- RFC compliance - IPv6 core 1490
- Internet drafts 1491
- • Draft-ietf-idr-route-filter 1492
- NIAP-CCEVS Certification 1493
- Local user password changes 1494
- Appendix 1495
- Index to the CLI Commands 1497
- Named ACL 1498
- Other ACL commands 1498
- ACLs (L2) 1499
- Commands See 1500
- IPv6 BGP4+ 1508
- IPv6 ACL 1511
- IPv6 basic connectivity 1512
- IPv6 multicast 1514
- IPv6 RIPng 1514
- IPv6 OSPFv3 1515
- Metro Ring 1519
- Metro Ring protocol 1519
- Multi-Chassis Trunking 1521
- Multicast (IP) 1523
- Multicast (L2) 1525
- OSPF version 4 1525
- Port parameters 1527
- Port-based routing 1528
- Quality of Service (QoS) 1528
- Rate limiting 1529
- Security/Management 1532
- Authentication method list 1534
- Passwords 1534
- Privilege level 1534
- SNMP access 1535
- SSH access 1535
- TACACS and TACACS+ 1536
- TFTP access 1537
- User account 1537
- Web management access 1537
- DoS Protection 1537
- MAC authentication 1538
- MAC port security 1539
- Redundant management module 1540
- SysLog messages 1544
- System parameters 1545
- Topology 1546
- VRRP/VRRPE 1549
Inhaltsverzeichnis
53-1002484-0419 March 2013®BigIron RX SeriesConfiguration GuideSupporting Multi-Service IronWare v02.9.00a
x BigIron RX Series Configuration Guide53-1002484-04Deploying a LAG . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .24
22 BigIron RX Series Configuration Guide53-1002484-04Managing management module redundancy2• Perform a manual switchover to the standby module.• Reboo
922 BigIron RX Series Configuration Guide53-1002484-04Displaying BGP4 information27Displaying route detailsHere is an example of the information displ
BigIron RX Series Configuration Guide 92353-1002484-04Displaying BGP4 information27TABLE 142 BGP4 route informationThis field... Displays...Total numb
924 BigIron RX Series Configuration Guide53-1002484-04Displaying BGP4 information27Displaying BGP4 route-attribute entriesThe route-attribute entries
BigIron RX Series Configuration Guide 92553-1002484-04Displaying BGP4 information27This display shows the following information.TABLE 143 BGP4 route-a
926 BigIron RX Series Configuration Guide53-1002484-04Displaying BGP4 information27Displaying the routes BGP4 has placed in the IP route tableThe IP r
BigIron RX Series Configuration Guide 92753-1002484-04Displaying BGP4 information27The <address> <mask> parameter specifies a particular r
928 BigIron RX Series Configuration Guide53-1002484-04Displaying BGP4 information27match address-filters 11 set community 11:12 no-export route-map pe
BigIron RX Series Configuration Guide 92953-1002484-04Displaying BGP4 information27NOTEAfter configuring BGP Graceful Restart, you need to reset neigh
930 BigIron RX Series Configuration Guide53-1002484-04Displaying BGP4 information27Router 1BigIron RX(config)#router bgpBigIron RX(config-bgp)#local-a
BigIron RX Series Configuration Guide 93153-1002484-04Generalized TTL security mechanism support27Syntax: show ip bgp neighbor <address>Generali
BigIron RX Series Configuration Guide 2353-1002484-04Managing management module redundancy2FIGURE 1 Active and standby management module file synchron
932 BigIron RX Series Configuration Guide53-1002484-04Generalized TTL security mechanism support27Syntax: [no] neighbor <ip-addr> | <peer-gro
BigIron RX Series Configuration Guide 93353-1002484-04Chapter28Configuring MBGPIn this chapter•Overview of MBGP . . . . . . . . . . . . . . . . . . .
934 BigIron RX Series Configuration Guide53-1002484-04Configuration considerations28An MBGP router learns MBGP routes from its neighbors in other ASs.
BigIron RX Series Configuration Guide 93553-1002484-04Configuring MBGP28To increase the maximum number of multicast routes supported on the device, en
936 BigIron RX Series Configuration Guide53-1002484-04Configuring MBGP28NOTEIf the BigIron RX has multiple neighbors with similar attributes, you can
BigIron RX Series Configuration Guide 93753-1002484-04Configuring MBGP28NOTEThis section shows some of the more common optional tasks, including all t
938 BigIron RX Series Configuration Guide53-1002484-04Configuring MBGP28Enabling redistribution of directly-connected multicast routes into MBGPTo red
BigIron RX Series Configuration Guide 93953-1002484-04Configuring MBGP28The ve <num> parameter specifies a virtual interface.The null0 parameter
940 BigIron RX Series Configuration Guide53-1002484-04Displaying MBGP information28Displaying MBGP informationAll of the BGP show commands have MBGP e
BigIron RX Series Configuration Guide 94153-1002484-04Displaying MBGP information28Displaying the active MBGP configurationTo display the active MBGP
24 BigIron RX Series Configuration Guide53-1002484-04Managing management module redundancy2To compare and immediately synchronize files between the ac
942 BigIron RX Series Configuration Guide53-1002484-04Displaying MBGP information28This example shows how to display information for a specific neighb
BigIron RX Series Configuration Guide 94353-1002484-04Displaying MBGP information28Syntax: show ip mbgp routesDisplaying the IP multicast route tableT
944 BigIron RX Series Configuration Guide53-1002484-04Displaying MBGP information28
BigIron RX Series Configuration Guide 94553-1002484-04Chapter29Configuring IS-IS (IPv4)In this chapter•IS-IS overview. . . . . . . . . . . . . . . . .
946 BigIron RX Series Configuration Guide53-1002484-04IS-IS overview29• Portions of the Internet Draft “IS-IS extensions for Traffic Engineering” draf
BigIron RX Series Configuration Guide 94753-1002484-04IS-IS overview29FIGURE 127 An IS-IS network contains Intermediate Systems (ISs) and host systems
948 BigIron RX Series Configuration Guide53-1002484-04IS-IS overview29Neighbors and adjacenciesA device configured for IS-IS forms an adjacency with e
BigIron RX Series Configuration Guide 94953-1002484-04IS-IS overview29FIGURE 128 Each broadcast network has a Level-1 designated IS and a Level-2 de
950 BigIron RX Series Configuration Guide53-1002484-04IS-IS CLI levels29IS-IS CLI levelsThe CLI includes various levels of commands for IS-IS. Figure
BigIron RX Series Configuration Guide 95153-1002484-04Configuring IPv4 IS-IS29Syntax: address-family ipv4 unicastThe (config-isis-router-ipv4u)# promp
BigIron RX Series Configuration Guide 2553-1002484-04Monitoring management module redundancy2BigIron RX# boot system flash primarySyntax: boot system
952 BigIron RX Series Configuration Guide53-1002484-04Globally configuring IS-IS on a device29Syntax: [no] net <area-id>.<system-id>.<s
BigIron RX Series Configuration Guide 95353-1002484-04Globally configuring IS-IS on a device29• If an IS is in the overload state for Level-1, other L
954 BigIron RX Series Configuration Guide53-1002484-04Globally configuring IS-IS on a device29If you configure a password, the device checks for the p
BigIron RX Series Configuration Guide 95553-1002484-04Globally configuring IS-IS on a device29Disabling or re-enabling display of hostnameBrocade’s im
956 BigIron RX Series Configuration Guide53-1002484-04Globally configuring IS-IS on a device29Changing the maximum LSP lifetimeThe maximum LSP lifetim
BigIron RX Series Configuration Guide 95753-1002484-04Globally configuring IS-IS on a device29Syntax: [no] lsp-interval <milliseconds> Enter 1 –
958 BigIron RX Series Configuration Guide53-1002484-04Configuring IPv4 address family route parameters29This command disables all hello PDU padding on
BigIron RX Series Configuration Guide 95953-1002484-04Configuring IPv4 address family route parameters29Changing the maximum number of load sharing pa
960 BigIron RX Series Configuration Guide53-1002484-04Configuring IPv4 address family route parameters29BigIron RX(config)# route-map default_level1 p
BigIron RX Series Configuration Guide 96153-1002484-04Configuring IPv4 address family route parameters29This command changes the administrative distan
26 BigIron RX Series Configuration Guide53-1002484-04Monitoring management module redundancy2You can also observe the Pwr LED on each module. If this
962 BigIron RX Series Configuration Guide53-1002484-04Configuring IPv4 address family route parameters29The device automatically redistributes Level-1
BigIron RX Series Configuration Guide 96353-1002484-04Configuring IPv4 address family route parameters29The route-map <name> parameter restricts
964 BigIron RX Series Configuration Guide53-1002484-04Configuring ISIS properties on an interface29Most of the parameters are the same as the paramete
BigIron RX Series Configuration Guide 96553-1002484-04Configuring ISIS properties on an interface29Disabling and enabling IS-IS on an interfaceIn addi
966 BigIron RX Series Configuration Guide53-1002484-04Configuring ISIS properties on an interface29NOTEYou can set the IS-IS priority on an individual
BigIron RX Series Configuration Guide 96753-1002484-04Configuring ISIS properties on an interface29Disabling and enabling hello padding on an interfac
968 BigIron RX Series Configuration Guide53-1002484-04Displaying IPv4 IS-IS information29Changing the metric added to advertised routesWhen the device
BigIron RX Series Configuration Guide 96953-1002484-04Displaying IPv4 IS-IS information29Displaying the IS-IS configuration in the running-configYou c
970 BigIron RX Series Configuration Guide53-1002484-04Displaying IPv4 IS-IS information29Syntax: show isis neighbor [detail] The detail option display
BigIron RX Series Configuration Guide 97153-1002484-04Displaying IPv4 IS-IS information29The messages in this example indicate that the software has b
BigIron RX Series Configuration Guide 2753-1002484-04Monitoring management module redundancy2• Redundancy parameter settings and statistics, which inc
972 BigIron RX Series Configuration Guide53-1002484-04Displaying IPv4 IS-IS information29Displaying interface informationTo display information about
BigIron RX Series Configuration Guide 97353-1002484-04Displaying IPv4 IS-IS information29Circuit State The state of the circuit, which can be one of t
974 BigIron RX Series Configuration Guide53-1002484-04Displaying IPv4 IS-IS information29Displaying route informationTo display the routes in the devi
BigIron RX Series Configuration Guide 97553-1002484-04Displaying IPv4 IS-IS information29Displaying LSP database entriesUse the following methods to d
976 BigIron RX Series Configuration Guide53-1002484-04Displaying IPv4 IS-IS information29The l1 and level1 parameters display the Level-1 LSPs only.
BigIron RX Series Configuration Guide 97753-1002484-04Displaying IPv4 IS-IS information29TABLE 152 IS-IS detailed LSP database informationThis field..
978 BigIron RX Series Configuration Guide53-1002484-04Displaying IPv4 IS-IS information29Displaying traffic statisticsThe device maintains statistics
BigIron RX Series Configuration Guide 97953-1002484-04Displaying IPv4 IS-IS information29Displaying error statisticsTo display IS-IS error statistics,
980 BigIron RX Series Configuration Guide53-1002484-04Clearing IS-IS information29Clearing IS-IS informationTo clear the IS-IS information that the de
BigIron RX Series Configuration Guide 98153-1002484-04Clearing IS-IS information29The neighbor parameter closes the device’s adjacencies with its IS-I
28 BigIron RX Series Configuration Guide53-1002484-04Flash memory and PCMCIA flash card file management commands2This output displays that one switcho
982 BigIron RX Series Configuration Guide53-1002484-04Clearing IS-IS information29
BigIron RX Series Configuration Guide 98353-1002484-04Chapter30BiDirectional Forwarding Detection (BFD)In this chapter•BFD overview . . . . . . . . .
984 BigIron RX Series Configuration Guide53-1002484-04Configuring BFD parameters30NOTEBFD supports multi-slot trunks in cases where all BFD packet are
BigIron RX Series Configuration Guide 98553-1002484-04Displaying Bidirectional Forwarding Detection information30Syntax: [no] logging enable bfd BFD l
986 BigIron RX Series Configuration Guide53-1002484-04Displaying Bidirectional Forwarding Detection information30Displaying BFD application informatio
BigIron RX Series Configuration Guide 98753-1002484-04Displaying Bidirectional Forwarding Detection information30The interface ve option displays BFD
988 BigIron RX Series Configuration Guide53-1002484-04Displaying Bidirectional Forwarding Detection information30Interface The logical port on which t
BigIron RX Series Configuration Guide 98953-1002484-04Configuring BFD for the specified protocol30Clearing BFD neighbor sessionsYou can clear all BFD
990 BigIron RX Series Configuration Guide53-1002484-04Configuring BFD for the specified protocol30While this command configures BFD for OSPFv2 on all
BigIron RX Series Configuration Guide 99153-1002484-04Configuring BFD for the specified protocol30Syntax: [no] bfd all-interfacesWhile this command co
BigIron RX Series Configuration Guide 2953-1002484-04Flash memory and PCMCIA flash card file management commands2• Create a subdirectory.• Remove a su
992 BigIron RX Series Configuration Guide53-1002484-04Configuring BFD for the specified protocol30
BigIron RX Series Configuration Guide 99353-1002484-04Chapter31Configuring Secure Shell In this chapter•Overview of Secure Shell (SSH) . . . . . . .
994 BigIron RX Series Configuration Guide53-1002484-04Configuring SSH31• SCP/SFTP/SSH URI Format If you are using redundant management modules, you ca
BigIron RX Series Configuration Guide 99553-1002484-04Configuring SSH31• DSA challenge-response authentication, where a collection of public keys are
996 BigIron RX Series Configuration Guide53-1002484-04Configuring SSH31By default, public keys are hidden in the running configuration. You can option
BigIron RX Series Configuration Guide 99753-1002484-04Configuring SSH311. Importing authorized public keys into the device.2. Enabling DSA challenge r
998 BigIron RX Series Configuration Guide53-1002484-04Configuring SSH31Syntax: show ip client-pub-key [| begin<expression> | exclude <express
BigIron RX Series Configuration Guide 99953-1002484-04Configuring SSH31With DSA challenge-response authentication, a collection of clients’ public key
1000 BigIron RX Series Configuration Guide53-1002484-04Configuring SSH31Setting the SSH login timeout valueWhen the SSH server attempts to negotiate a
BigIron RX Series Configuration Guide 100153-1002484-04Displaying SSH connection information31Filtering SSH access using ACLsYou can permit or deny SS
30 BigIron RX Series Configuration Guide53-1002484-04Flash memory and PCMCIA flash card file management commands2For example, if you want to display a
1002 BigIron RX Series Configuration Guide53-1002484-04Using secure copy31Syntax: show who [| begin< expression> | exclude< expression> |
BigIron RX Series Configuration Guide 100353-1002484-04Using secure copy31NOTEWhen using SCP, you enter the scp commands on the SCP-enabled client, ra
1004 BigIron RX Series Configuration Guide53-1002484-04Using secure copy31
BigIron RX Series Configuration Guide 100553-1002484-04Chapter32Configuring Multi-Device Port AuthenticationIn this chapter•How multi-device port auth
1006 BigIron RX Series Configuration Guide53-1002484-04How multi-device port authentication works32traffic from this MAC address is encountered on a M
BigIron RX Series Configuration Guide 100753-1002484-04Configuring multi-device port authentication32To enable dynamic VLAN assignment for authenticat
1008 BigIron RX Series Configuration Guide53-1002484-04Configuring multi-device port authentication32• Disabling aging for authenticated MAC addresses
BigIron RX Series Configuration Guide 100953-1002484-04Configuring multi-device port authentication32The dot1x parameter indicates that this RADIUS se
1010 BigIron RX Series Configuration Guide53-1002484-04Configuring multi-device port authentication32BigIron RX(config)# interface e 3/1BigIron RX(con
BigIron RX Series Configuration Guide 101153-1002484-04Configuring multi-device port authentication32Configuring dynamic VLAN assignmentAn interface c
BigIron RX Series Configuration Guide 3153-1002484-04Flash memory and PCMCIA flash card file management commands2PCMCIA flash card file systemThe PCMC
1012 BigIron RX Series Configuration Guide53-1002484-04Configuring multi-device port authentication32In this example, the port is added to VLANs 12 or
BigIron RX Series Configuration Guide 101353-1002484-04Configuring multi-device port authentication32• If the <vlan-name> string does not match
1014 BigIron RX Series Configuration Guide53-1002484-04Configuring multi-device port authentication32Specifying to which VLAN a port is moved after it
BigIron RX Series Configuration Guide 101553-1002484-04Configuring multi-device port authentication32Clearing authenticated MAC addressesThe device ma
1016 BigIron RX Series Configuration Guide53-1002484-04Displaying multi-device port authentication information32denied-mac-only disables aging of deni
BigIron RX Series Configuration Guide 101753-1002484-04Displaying multi-device port authentication information32Displaying authenticated MAC address i
1018 BigIron RX Series Configuration Guide53-1002484-04Displaying multi-device port authentication information32The following table describes the info
BigIron RX Series Configuration Guide 101953-1002484-04Displaying multi-device port authentication information32Syntax: show auth-mac-address configur
1020 BigIron RX Series Configuration Guide53-1002484-04Displaying multi-device port authentication information32Syntax: show auth-mac-address detailDi
BigIron RX Series Configuration Guide 102153-1002484-04Example configurations32Displaying the authenticated MAC addressesTo display the MAC addresses
BigIron RX Series Configuration Guide xi53-1002484-04Chapter 10 Configuring Uni-Directional Link DetectionUni-Directional Link Detection overview . .
32 BigIron RX Series Configuration Guide53-1002484-04Flash memory and PCMCIA flash card file management commands2• }• ^• #• &You can use spaces in
1022 BigIron RX Series Configuration Guide53-1002484-04Example configurations32Multi-device port authentication with dynamicVLAN assignment Figure 130
BigIron RX Series Configuration Guide 102353-1002484-04Example configurations32The mac-authentication disable-ingress-filtering command enables tagged
1024 BigIron RX Series Configuration Guide53-1002484-04Example configurations32The part of the running-config related to multi-device port authenticat
BigIron RX Series Configuration Guide 102553-1002484-04Example configurations32FIGURE 132 Using multi-device port authentication and 802.1X authentic
1026 BigIron RX Series Configuration Guide53-1002484-04Example configurations32When the PC is authenticated using multi-device port authentication, th
BigIron RX Series Configuration Guide 102753-1002484-04Example configurations32Since there is no profile for the PC MAC address on the RADIUS server,
1028 BigIron RX Series Configuration Guide53-1002484-04Example configurations32
BigIron RX Series Configuration Guide 102953-1002484-04Chapter33Using the MAC Port Security Feature and Transparent Port FloodingIn this chapter•Overv
1030 BigIron RX Series Configuration Guide53-1002484-04Configuring the MAC Port Security feature33The secure MAC addresses are not flushed when an int
BigIron RX Series Configuration Guide 103153-1002484-04Configuring the MAC Port Security feature33Globally enabling MAC Port SecurityTo enable the fea
BigIron RX Series Configuration Guide 3353-1002484-04Flash memory and PCMCIA flash card file management commands2For example, to reformat a flash card
1032 BigIron RX Series Configuration Guide53-1002484-04Configuring the MAC Port Security feature33NOTEIf static and dynamic MAC addresses are used and
BigIron RX Series Configuration Guide 103353-1002484-04Configuring the MAC Port Security feature33Autosaving secure MAC addresses to the startup-confi
1034 BigIron RX Series Configuration Guide53-1002484-04Defining security violation actions33Defining security violation actionsA MAC Port Security vio
BigIron RX Series Configuration Guide 103553-1002484-04Defining security violation actions33Entering the force parameter forces the interface to shutd
1036 BigIron RX Series Configuration Guide53-1002484-04Defining security violation actions33The logged message contains the packet’s IP address and th
BigIron RX Series Configuration Guide 103753-1002484-04Understanding the rules for violation action configuration33Syntax: [no] violation deny [force]
1038 BigIron RX Series Configuration Guide53-1002484-04Re-enabling an interface33• Interfaces that are configured with deny violation action will cont
BigIron RX Series Configuration Guide 103953-1002484-04Displaying MAC Port Security information33BigIron RX(config)# interface ethernet 7/11BigIron RX
1040 BigIron RX Series Configuration Guide53-1002484-04Displaying MAC Port Security information33Displaying the secure MAC addresses list on the devic
BigIron RX Series Configuration Guide 104153-1002484-04Displaying MAC Port Security information33BigIron RX# show port security statistics 7Module 7:
34 BigIron RX Series Configuration Guide53-1002484-04Flash memory and PCMCIA flash card file management commands2When you enter this command, the soft
1042 BigIron RX Series Configuration Guide53-1002484-04Displaying MAC Port Security information33Syntax: show port security mac [ethernet <slot>
BigIron RX Series Configuration Guide 104353-1002484-04Transparent port flooding33Displaying information when violation action is denyTo determine wha
1044 BigIron RX Series Configuration Guide53-1002484-04Transparent port flooding33SA learning is disabledmirror disabled, monitor disabledNot member o
BigIron RX Series Configuration Guide 104553-1002484-04Chapter34Configuring 802.1x Port SecurityIn this chapter•Overview of 802.1x port security . . .
1046 BigIron RX Series Configuration Guide53-1002484-04How 802.1x port security works34Device roles in an 802.1x configurationThe 802.1x standard defi
BigIron RX Series Configuration Guide 104753-1002484-04How 802.1x port security works34Communication between the devicesFor communication between the
1048 BigIron RX Series Configuration Guide53-1002484-04How 802.1x port security works34Controlled and uncontrolled portsA physical port on the device
BigIron RX Series Configuration Guide 104953-1002484-04How 802.1x port security works34Message exchange during authenticationFigure 137 illustrates a
1050 BigIron RX Series Configuration Guide53-1002484-04How 802.1x port security works34When a Client that supports 802.1x attempts to gain access thro
BigIron RX Series Configuration Guide 105153-1002484-04How 802.1x port security works34By default, traffic from clients that cannot be authenticated b
BigIron RX Series Configuration Guide 3553-1002484-04Flash memory and PCMCIA flash card file management commands2Syntax: dir | ls [<path-name>]
1052 BigIron RX Series Configuration Guide53-1002484-04802.1x port security and sFlow34• If a Client has been denied access to the network (that is, t
BigIron RX Series Configuration Guide 105353-1002484-04Configuring 802.1x port security34NOTE Multi-Device Port Authentication and 802.1x authenticati
1054 BigIron RX Series Configuration Guide53-1002484-04Configuring 802.1x port security34Supported RADIUS attributesMany IEEE 802.1x Authenticators wi
BigIron RX Series Configuration Guide 105553-1002484-04Configuring 802.1x port security34• If the Tunnel-Type or the Tunnel-Medium-Type attributes in
1056 BigIron RX Series Configuration Guide53-1002484-04Configuring 802.1x port security34Disabling and enabling strict security mode for dynamic filte
BigIron RX Series Configuration Guide 105753-1002484-04Configuring 802.1x port security34To re-enable strict security mode for an interface, enter the
1058 BigIron RX Series Configuration Guide53-1002484-04Configuring 802.1x port security34• Dynamic ACL filters are supported only for the inbound dire
BigIron RX Series Configuration Guide 105953-1002484-04Configuring 802.1x port security34Enabling 802.1x port security By default, 802.1x port securit
1060 BigIron RX Series Configuration Guide53-1002484-04Configuring 802.1x port security34When an interface’s control type is set to auto, its controll
BigIron RX Series Configuration Guide 106153-1002484-04Configuring 802.1x port security34The re-authentication interval is a global setting, applicabl
36 BigIron RX Series Configuration Guide53-1002484-04Flash memory and PCMCIA flash card file management commands2The following information is displaye
1062 BigIron RX Series Configuration Guide53-1002484-04Configuring 802.1x port security34Specifying the number of EAP-request/identity frame retransmi
BigIron RX Series Configuration Guide 106353-1002484-04Configuring 802.1x port security34Initializing 802.1x on a portTo initialize 802.1x port securi
1064 BigIron RX Series Configuration Guide53-1002484-04Displaying 802.1x information34BigIron RX(config-dot1x)# auth-fail-max-attempts 2Syntax: [no] a
BigIron RX Series Configuration Guide 106553-1002484-04Displaying 802.1x information34Syntax: show dot1xThe following table describes the information
1066 BigIron RX Series Configuration Guide53-1002484-04Displaying 802.1x information34To display information about the 802.1x configuration on an indi
BigIron RX Series Configuration Guide 106753-1002484-04Displaying 802.1x information34Displaying 802.1x statisticsTo display 802.1x statistics for an
1068 BigIron RX Series Configuration Guide53-1002484-04Displaying 802.1x information34Clearing 802.1x statisticsYou can clear the 802.1x statistics co
BigIron RX Series Configuration Guide 106953-1002484-04Displaying 802.1x information34In this example, the 802.1x-enabled port has been moved from VLA
1070 BigIron RX Series Configuration Guide53-1002484-04Displaying 802.1x information34BigIron RX#show dot1x mac-address ethernet 1/1Port 1/1 MAC Addre
BigIron RX Series Configuration Guide 107153-1002484-04Displaying 802.1x information34Syntax: show dot1x mac-session [brief | [begin <expression>
BigIron RX Series Configuration Guide 3753-1002484-04Flash memory and PCMCIA flash card file management commands2For example, to display the contents
1072 BigIron RX Series Configuration Guide53-1002484-04Sample 802.1x configurations34Syntax: show dot1x mac-session brief [ | begin <expression>
BigIron RX Series Configuration Guide 107353-1002484-04Sample 802.1x configurations34FIGURE 139 Sample point-to-point 802.1x configurationThe followi
1074 BigIron RX Series Configuration Guide53-1002484-04Sample 802.1x configurations34Hub configuration Figure 140 illustrates a configuration where th
BigIron RX Series Configuration Guide 107553-1002484-04Sample 802.1x configurations34802.1X Authentication with dynamic VLAN assignmentFigure 141 illu
1076 BigIron RX Series Configuration Guide53-1002484-04Using multi-device port authentication and 802.1X security on the same port34!interface etherne
BigIron RX Series Configuration Guide 107753-1002484-04Chapter35Protecting Against Denial of Service AttacksIn this chapter•Protecting against Smurf a
1078 BigIron RX Series Configuration Guide53-1002484-04Protecting against Smurf attacks35For each ICMP echo request packet sent by the attacker, a num
BigIron RX Series Configuration Guide 107953-1002484-04Protecting against TCP SYN attacks35The burst-max value, 1 – 100000, is specified as number of
1080 BigIron RX Series Configuration Guide53-1002484-04Protecting against TCP SYN attacks35In a TCP SYN attack, an attacker floods a host with TCP SYN
BigIron RX Series Configuration Guide 108153-1002484-04Displaying statistics due DoS attacks35Protecting against a blind TCP reset attack using the SY
38 BigIron RX Series Configuration Guide53-1002484-04Flash memory and PCMCIA flash card file management commands2The software attempts to create a sub
1082 BigIron RX Series Configuration Guide53-1002484-04Clear DoS attack statistics35The display shows the following.Syntax: show statistics dos-attack
BigIron RX Series Configuration Guide 108353-1002484-04Chapter36Inspecting and Tracking DHCP PacketsIn this chapter•Tracking of DHCP assignments. . .
1084 BigIron RX Series Configuration Guide53-1002484-04Dynamic ARP inspection36ARP attacksARP provides IP communication within a Layer 2 broadcast dom
BigIron RX Series Configuration Guide 108553-1002484-04Dynamic ARP inspection36FIGURE 143 Dynamic ARP Inspection at workARP entriesDAI uses the IP/MA
1086 BigIron RX Series Configuration Guide53-1002484-04Dynamic ARP inspection36Configuring DAIConfiguring DAI consists of the following steps.1. Confi
BigIron RX Series Configuration Guide 108753-1002484-04Dynamic ARP inspection36Enabling trust on a portThe default trust setting for a port is untrust
1088 BigIron RX Series Configuration Guide53-1002484-04DHCP snooping36DHCP snoopingNOTEThis feature is only supported on Layer 3 code.Dynamic Host Con
BigIron RX Series Configuration Guide 108953-1002484-04DHCP snooping36How DHCP snooping worksWhen enabled on a VLAN, DHCP snooping stands between untr
1090 BigIron RX Series Configuration Guide53-1002484-04DHCP relay agent information (DHCP option 82)361. Enable DHCP snooping on a VLAN. Refer to “Ena
BigIron RX Series Configuration Guide 109153-1002484-04DHCP relay agent information (DHCP option 82)36FIGURE 146 DHCP option 82 is added to the packe
BigIron RX Series Configuration Guide 3953-1002484-04Flash memory and PCMCIA flash card file management commands2A subdirectory name can be a maximum
1092 BigIron RX Series Configuration Guide53-1002484-04DHCP relay agent information (DHCP option 82)36Displaying DHCP snooping status and portsTo disp
BigIron RX Series Configuration Guide 109353-1002484-04IP source guard36IP source guardYou can use IP Source Guard together with Dynamic ARP Inspectio
1094 BigIron RX Series Configuration Guide53-1002484-04IP source guard36Syntax: show ip source guard ethernet <port-num>BigIron RX#show ip sourc
BigIron RX Series Configuration Guide 109553-1002484-04Chapter37Securing SNMP AccessIn this chapter•SNMP overview . . . . . . . . . . . . . . . . . .
1096 BigIron RX Series Configuration Guide53-1002484-04Establishing SNMP community strings37Encryption is enabled by default. You can disable encrypt
BigIron RX Series Configuration Guide 109753-1002484-04Using the user-based security model37The command in the first example indicates that ACL group
1098 BigIron RX Series Configuration Guide53-1002484-04Configuring your NMS37Configuring SNMP version 3 on the BigIron RXTo configure SNMP version 3 o
BigIron RX Series Configuration Guide 109953-1002484-04Configuring your NMS37• Octets 6 through 11 form the MAC address of the lowest port in the mana
1100 BigIron RX Series Configuration Guide53-1002484-04Configuring your NMS37NOTEIf you will be using a view other than the "all" view, that
BigIron RX Series Configuration Guide 110153-1002484-04Configuring your NMS37The encrypted parameter means that the MD5 or SHA password will be a dige
40 BigIron RX Series Configuration Guide53-1002484-04Flash memory and PCMCIA flash card file management commands2Renaming a fileYou can rename a file
1102 BigIron RX Series Configuration Guide53-1002484-04Configuring your NMS37BigIron RX(config)# show snmp groupgroupname = exceptifgrpsecurity model
BigIron RX Series Configuration Guide 110353-1002484-04Defining SNMP views37Defining SNMP viewsSNMP views are named groups of MIB objects that can be
1104 BigIron RX Series Configuration Guide53-1002484-04Defining SNMP views37“admin” view will allow access to the Brocade MIBs objects that begin with
BigIron RX Series Configuration Guide 110553-1002484-04Chapter38Enabling the Foundry Discovery Protocol (FDP) and Reading Cisco Discovery Protocol (CD
1106 BigIron RX Series Configuration Guide53-1002484-04Using FDP38Enabling FDP globallyTo enable a Brocade device to globally send FDP packets, enter
BigIron RX Series Configuration Guide 110753-1002484-04Using FDP38Displaying FDP informationYou can display the following FDP information:• FDP entrie
1108 BigIron RX Series Configuration Guide53-1002484-04Using FDP38The show fdp neighbor detail command displays the following information.Displaying F
BigIron RX Series Configuration Guide 110953-1002484-04Using FDP38The * | <device-id> parameter specifies the device ID. If you enter *, the det
1110 BigIron RX Series Configuration Guide53-1002484-04Reading CDP packets38Clearing FDP and CDP statisticsTo clear FDP and CDP statistics, enter the
BigIron RX Series Configuration Guide 111153-1002484-04Reading CDP packets38• CDP entries for all Cisco neighbors or a specific neighbor• CDP packet s
BigIron RX Series Configuration Guide 4153-1002484-04Flash memory and PCMCIA flash card file management commands2For example, to change the attribute
1112 BigIron RX Series Configuration Guide53-1002484-04Reading CDP packets38Displaying CDP entriesTo display CDP entries for all neighbors, enter the
BigIron RX Series Configuration Guide 111353-1002484-04Reading CDP packets38BigIron RX# clear fdp tableSyntax: clear fdp tableTo clear CDP statistics,
1114 BigIron RX Series Configuration Guide53-1002484-04Reading CDP packets38
BigIron RX Series Configuration Guide 111553-1002484-04Chapter39Remote Network MonitoringIn this chapter•Basic management . . . . . . . . . . . . . .
1116 BigIron RX Series Configuration Guide53-1002484-04Basic management39The output of the show interfaces command has been enhanced to display the fo
BigIron RX Series Configuration Guide 111753-1002484-04Basic management39Hardware is <module type> The <module type> variable specifies a
1118 BigIron RX Series Configuration Guide53-1002484-04Basic management39<value> packets input, <value> bytes, <value> no buffer• Th
BigIron RX Series Configuration Guide 111953-1002484-04RMON support39Viewing STP statisticsYou can view a summary of STP statistics for the device. ST
1120 BigIron RX Series Configuration Guide53-1002484-04RMON support39Statistics (RMON group 1)Count information on multicast and broadcast packets, to
BigIron RX Series Configuration Guide 112153-1002484-04RMON support39Broadcast pkts The total number of good packets received that were directed to th
xii BigIron RX Series Configuration Guide53-1002484-04Private VLANs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
42 BigIron RX Series Configuration Guide53-1002484-04Flash memory and PCMCIA flash card file management commands2For example, to delete all files with
1122 BigIron RX Series Configuration Guide53-1002484-04RMON support39NOTEThe number of entries in a RMON statistics table directly corresponds to the
BigIron RX Series Configuration Guide 112353-1002484-04RMON support39Alarm (RMON group 3)Alarm is designed to monitor configured thresholds for any SN
1124 BigIron RX Series Configuration Guide53-1002484-04RMON support39
BigIron RX Series Configuration Guide 112553-1002484-04Chapter40Configuring sFlowIn this chapter•sFlow overview. . . . . . . . . . . . . . . . . . . .
1126 BigIron RX Series Configuration Guide53-1002484-04sFlow overview40NOTEThe device uses the router ID only if the device also has an IP interface w
BigIron RX Series Configuration Guide 112753-1002484-04sFlow overview40NOTEAS communities and local preferences are not included in the sampled packet
1128 BigIron RX Series Configuration Guide53-1002484-04sFlow overview40The default polling interval is 20 seconds. You can change the interval to a va
BigIron RX Series Configuration Guide 112953-1002484-04sFlow overview40Sampling rate for new portsWhen you enable sFlow on a port, the port's sam
1130 BigIron RX Series Configuration Guide53-1002484-04sFlow overview40NOTEWhen you enable sFlow forwarding on an 802.1x-enabled interface, the sample
BigIron RX Series Configuration Guide 113153-1002484-04sFlow overview40ACL-based sFlow sample (which contains the Type 1 sample) is followed by an une
BigIron RX Series Configuration Guide 4353-1002484-04Flash memory and PCMCIA flash card file management commands2Appending a file to another fileYou c
1132 BigIron RX Series Configuration Guide53-1002484-04sFlow overview40• Port-based monitoring: Port-based monitoring and ACL-based sFlow can co-exist
BigIron RX Series Configuration Guide 113353-1002484-04Displaying sFlow information40Only inbound traffic is selected using sFlow. This applies to bot
1134 BigIron RX Series Configuration Guide53-1002484-04Displaying sFlow information40Displaying sFlow counterssFlow counters are included in the outpu
BigIron RX Series Configuration Guide 113553-1002484-04Clearing sFlow statistics40Clearing sFlow statisticsTo clear the UDP packet and sFlow sample co
1136 BigIron RX Series Configuration Guide53-1002484-04Clearing sFlow statistics40
BigIron RX Series Configuration Guide 113753-1002484-04Chapter41Multiple Spanning Tree Protocol (MSTP) 802.1sIn this chapter•802.1s Multiple Spanning
1138 BigIron RX Series Configuration Guide53-1002484-04802.1s Multiple Spanning Tree Protocol41FIGURE 149 MSTP configured networkThe following defini
BigIron RX Series Configuration Guide 113953-1002484-04802.1s Multiple Spanning Tree Protocol41Each of the commands used to configure and operate MSTP
1140 BigIron RX Series Configuration Guide53-1002484-04802.1s Multiple Spanning Tree Protocol41Syntax: [no] mstp instance <instance-number> [ vl
BigIron RX Series Configuration Guide 114153-1002484-04802.1s Multiple Spanning Tree Protocol41Syntax: [no] mstp force-version <mode-number> fo
44 BigIron RX Series Configuration Guide53-1002484-04Flash memory and PCMCIA flash card file management commands2• Load a running-config from a flash
1142 BigIron RX Series Configuration Guide53-1002484-04802.1s Multiple Spanning Tree Protocol41Syntax: [no] mstp disable ethernet <slot/port> Th
BigIron RX Series Configuration Guide 114353-1002484-04802.1s Multiple Spanning Tree Protocol41BigIron RX(config)mstp instance 0 vlan 4089BigIron RX(c
1144 BigIron RX Series Configuration Guide53-1002484-04802.1s Multiple Spanning Tree Protocol41BigIron RX(config)mstp admin-pt2pt-mac ethernet 3/10Big
BigIron RX Series Configuration Guide 114553-1002484-04802.1s Multiple Spanning Tree Protocol41Syntax: show mstp <instance-number>The <instan
1146 BigIron RX Series Configuration Guide53-1002484-04802.1s Multiple Spanning Tree Protocol41Displaying MSTP information for a specified instanceThe
BigIron RX Series Configuration Guide 114753-1002484-04802.1s Multiple Spanning Tree Protocol41Refer to Table 185 for details about the display parame
1148 BigIron RX Series Configuration Guide53-1002484-04802.1s Multiple Spanning Tree Protocol41Refer to Table 185 for explanation about the parameters
BigIron RX Series Configuration Guide 114953-1002484-04802.1s Multiple Spanning Tree Protocol41The ethernet <slot/port> parameter displays the m
1150 BigIron RX Series Configuration Guide53-1002484-04802.1s Multiple Spanning Tree Protocol41
BigIron RX Series Configuration Guide 115153-1002484-04Chapter42Configuring IP Multicast Traffic ReductionIn this chapter•IP multicast traffic reducti
BigIron RX Series Configuration Guide 4553-1002484-04Flash memory and PCMCIA flash card file management commands2Copying software images between activ
1152 BigIron RX Series Configuration Guide53-1002484-04Enabling IP multicast traffic reduction42NOTEIP multicast traffic reduction and PIM SM Traffic
BigIron RX Series Configuration Guide 115353-1002484-04Enabling IP multicast traffic reduction42NOTEIf the route-only feature is enabled on the device
1154 BigIron RX Series Configuration Guide53-1002484-04Enabling IP multicast traffic reduction42BigIron RX(config)# vlan 2BigIron RX(config-vlan-2)# m
BigIron RX Series Configuration Guide 115553-1002484-04Enabling IP multicast traffic reduction42Filtering multicast groupsBy default, the BigIron RX f
1156 BigIron RX Series Configuration Guide53-1002484-04Enabling IP multicast traffic reduction42Configuring a multicast static group uplink per VLANWh
BigIron RX Series Configuration Guide 115753-1002484-04PIM SM traffic snooping42To configure the physical interface ethernet 3/4 to statically join a
1158 BigIron RX Series Configuration Guide53-1002484-04PIM SM traffic snooping42PIM SM traffic snooping requires IP multicast traffic reduction to be
BigIron RX Series Configuration Guide 115953-1002484-04PIM SM traffic snooping42The IP multicast traffic reduction feature and the PIM SM traffic snoo
1160 BigIron RX Series Configuration Guide53-1002484-04PIM SM traffic snooping42NOTEUse the passive mode of IP multicast traffic reduction instead of
BigIron RX Series Configuration Guide 116153-1002484-04Displaying IP multicast information42To disable the feature, enter the following command.BigIro
46 BigIron RX Series Configuration Guide53-1002484-04Flash memory and PCMCIA flash card file management commands2BigIron RX# copy flash tftp 10.10.10.
1162 BigIron RX Series Configuration Guide53-1002484-04Displaying IP multicast information42Syntax: show ip multicastThis display shows the following
BigIron RX Series Configuration Guide 116353-1002484-04Displaying IP multicast information42Reports Received: 34Leaves Received: 21General Queries R
1164 BigIron RX Series Configuration Guide53-1002484-04Displaying IP multicast information42To clear the learned IGMP flows for a specific IP multicas
BigIron RX Series Configuration Guide 116553-1002484-04Chapter43IPv6 AddressingIn this chapter•IPv6 addressing overview . . . . . . . . . . . . . . .
1166 BigIron RX Series Configuration Guide53-1002484-04IPv6 addressing43• Compress the successive groups of zeros at the beginning, middle, or end of
BigIron RX Series Configuration Guide 116753-1002484-04IPv6 addressing43A switch automatically configures a link-local unicast address for an interfac
1168 BigIron RX Series Configuration Guide53-1002484-04IPv6 stateless autoconfiguration43IPv6 stateless autoconfigurationBrocade routers use the IPv6
BigIron RX Series Configuration Guide 116953-1002484-04Chapter44Configuring Basic IPv6 ConnectivityIn this chapter•IPv6 connectivity overview . . . .
1170 BigIron RX Series Configuration Guide53-1002484-04Enabling IPv6 routing44• Configure the IPv6 neighbor discovery feature.• Change the IPv6 MTU.•
BigIron RX Series Configuration Guide 117153-1002484-04Configuring IPv6 on each router interface44Additionally, the configured interface automatically
BigIron RX Series Configuration Guide 4753-1002484-04Flash memory and PCMCIA flash card file management commands2This command copies the startup confi
1172 BigIron RX Series Configuration Guide53-1002484-04Configuring IPv6 on each router interface44Configuring a link-local IPv6 addressTo explicitly e
BigIron RX Series Configuration Guide 117353-1002484-04Configuring the management port for an IPv6 automatic address configuration44Configuring the ma
1174 BigIron RX Series Configuration Guide53-1002484-04Configuring an IPv6 host address for a BigIron RX running a switch image44Syntax: web access-gr
BigIron RX Series Configuration Guide 117553-1002484-04Configuring an IPv6 host address for a BigIron RX running a switch image44The process for defin
1176 BigIron RX Series Configuration Guide53-1002484-04Configuring IPv4 and IPv6 protocol stacks44Configuring a link-local IPv6 address as the switch’
BigIron RX Series Configuration Guide 117753-1002484-04Configuring IPv6 Domain Name Server (DNS) resolver44You can specify the <sub-net-mask> pa
1178 BigIron RX Series Configuration Guide53-1002484-04ECMP load sharing for IPv644In this example, the first IP address in the ip dns server-address.
BigIron RX Series Configuration Guide 117953-1002484-04ECMP load sharing for IPv644Brocade devices support the following ECMP load-sharing methods for
1180 BigIron RX Series Configuration Guide53-1002484-04DHCP relay agent for IPv644Syntax: [no] ipv6 load-sharing [<num> | default-route]This com
BigIron RX Series Configuration Guide 118153-1002484-04DHCP relay agent for IPv644Enabling support for network-based ECMP load sharing for IPv6Network
48 BigIron RX Series Configuration Guide53-1002484-04Flash memory and PCMCIA flash card file management commands2Syntax: ncopy slot1 | slot2 [\<fro
1182 BigIron RX Series Configuration Guide53-1002484-04Configuring IPv6 ICMP44Configuring IPv6 ICMPAs with the Internet Control Message Protocol (ICMP
BigIron RX Series Configuration Guide 118353-1002484-04Configuring IPv6 neighbor discovery44Disabling or reenabling ICMP redirect messagesYou can disa
1184 BigIron RX Series Configuration Guide53-1002484-04Configuring IPv6 neighbor discovery44• Amount of time during which an IPv6 node considers a rem
BigIron RX Series Configuration Guide 118553-1002484-04Configuring IPv6 neighbor discovery44Because a host at system startup typically does not have a
1186 BigIron RX Series Configuration Guide53-1002484-04Configuring IPv6 neighbor discovery44BigIron RX(config)# interface ethernet 3/1BigIron RX(confi
BigIron RX Series Configuration Guide 118753-1002484-04Configuring IPv6 neighbor discovery44• Valid lifetime—(Mandatory) The time interval (in seconds
1188 BigIron RX Series Configuration Guide53-1002484-04Configuring IPv6 neighbor discovery44NOTEWhen determining if hosts can use stateful autoconfigu
BigIron RX Series Configuration Guide 118953-1002484-04Changing the IPv6 MTU44Brocade does not recommend configuring a short reachable time duration,
1190 BigIron RX Series Configuration Guide53-1002484-04Configuring static neighbor entries44Configuring static neighbor entriesIn some special cases,
BigIron RX Series Configuration Guide 119153-1002484-04Clearing global IPv6 information44To enable QoS for IPv6 traffic, enter the following commands.
BigIron RX Series Configuration Guide 4953-1002484-04Flash memory and PCMCIA flash card file management commands2Loading the softwareBy default, the m
1192 BigIron RX Series Configuration Guide53-1002484-04Clearing global IPv6 information44You must specify the <ipv6-address> parameter in hexade
BigIron RX Series Configuration Guide 119353-1002484-04Displaying global IPv6 information44Clearing IPv6 traffic statisticsTo clear all IPv6 traffic s
1194 BigIron RX Series Configuration Guide53-1002484-04Displaying global IPv6 information44The <ipv6-prefix>/<prefix-length> parameter res
BigIron RX Series Configuration Guide 119553-1002484-04Displaying global IPv6 information44To display detailed information for a specific interface, e
1196 BigIron RX Series Configuration Guide53-1002484-04Displaying global IPv6 information44Displaying IPv6 neighbor informationYou can display the IPv
BigIron RX Series Configuration Guide 119753-1002484-04Displaying global IPv6 information44Displaying the IPv6 route table To display the IPv6 route t
1198 BigIron RX Series Configuration Guide53-1002484-04Displaying global IPv6 information44The isis keyword restricts the display to entries for IPv6
BigIron RX Series Configuration Guide 119953-1002484-04Displaying global IPv6 information44From the IPv6 host, you can display information about IPv6
1200 BigIron RX Series Configuration Guide53-1002484-04Displaying global IPv6 information44• Detailed information about a specified TCP connection.To
BigIron RX Series Configuration Guide 120153-1002484-04Displaying global IPv6 information44To display detailed information about a specified TCP conne
50 BigIron RX Series Configuration Guide53-1002484-04Flash memory and PCMCIA flash card file management commands2To reboot the system from a BOOTP ser
1202 BigIron RX Series Configuration Guide53-1002484-04Displaying global IPv6 information44Syntax: show ipv6 tcp status <local-ip-address> <l
BigIron RX Series Configuration Guide 120353-1002484-04Displaying global IPv6 information44Displaying IPv6 traffic statisticsTo display IPv6 traffic s
1204 BigIron RX Series Configuration Guide53-1002484-04Displaying global IPv6 information44Syntax: show ipv6 trafficThis display shows the following
BigIron RX Series Configuration Guide 120553-1002484-04Displaying global IPv6 information44bad options The number of IPv6 packets dropped by the route
1206 BigIron RX Series Configuration Guide53-1002484-04Displaying global IPv6 information44nei soli The number of Neighbor Solicitation messages sent
BigIron RX Series Configuration Guide 120753-1002484-04Displaying global IPv6 information44active opens The number of TCP connections opened by the ro
1208 BigIron RX Series Configuration Guide53-1002484-04Displaying global IPv6 information44
BigIron RX Series Configuration Guide 120953-1002484-04Chapter45Configuring RIPngIn this chapter•RIPng overview. . . . . . . . . . . . . . . . . . . .
1210 BigIron RX Series Configuration Guide53-1002484-04Configuring RIPng45• Configure poison reverse parametersEnabling RIPngBefore configuring the Br
BigIron RX Series Configuration Guide 121153-1002484-04Configuring RIPng45You can adjust these timers for RIPng. Before doing so, keep the following c
BigIron RX Series Configuration Guide 5153-1002484-04Flash memory and PCMCIA flash card file management commands2BigIron RX# locate startup-config slo
1212 BigIron RX Series Configuration Guide53-1002484-04Configuring RIPng45Configuring default route learning and advertisingBy default, the Brocade de
BigIron RX Series Configuration Guide 121353-1002484-04Configuring RIPng45Changing the metric of routes learned and advertised on an interfaceA router
1214 BigIron RX Series Configuration Guide53-1002484-04Configuring RIPng45For example, to permit the inclusion of routes with the prefix 209.1.44.0/24
BigIron RX Series Configuration Guide 121553-1002484-04Clearing RIPng routes from IPv6 route table45BigIron RX(config)# ipv6 router ripBigIron RX(conf
1216 BigIron RX Series Configuration Guide53-1002484-04Displaying RIPng information45Displaying RIPng routing tableTo display the RIPng routing table,
BigIron RX Series Configuration Guide 121753-1002484-04Displaying RIPng information45TABLE 200 RIPng routing table fieldsThis field... Displays...RIPn
1218 BigIron RX Series Configuration Guide53-1002484-04Displaying RIPng information45
BigIron RX Series Configuration Guide 121953-1002484-04Chapter46Configuring BGP4+In this chapter•BGP4+ overview . . . . . . . . . . . . . . . . . . .
1220 BigIron RX Series Configuration Guide53-1002484-04Address family configuration level46Address family configuration levelBrocade’s implementation
BigIron RX Series Configuration Guide 122153-1002484-04Configuring BGP4+46• Create a peer group and add neighbors individually.The following configura
BigIron RX Series Configuration Guide xiii53-1002484-04Chapter 13 Configuring Rapid Spanning Tree ProtocolOverview of Rapid Spanning Tree Protocol . .
52 BigIron RX Series Configuration Guide53-1002484-04Flash memory and PCMCIA flash card file management commands2Invalid DOS file name A filename you
1222 BigIron RX Series Configuration Guide53-1002484-04Configuring BGP4+46Configuring BGP4+ neighbors using global or site-local IPv6 addressesTo conf
BigIron RX Series Configuration Guide 122353-1002484-04Configuring BGP4+46NOTEThe example above adds an IPv6 neighbor at the BGP4+ unicast address fam
1224 BigIron RX Series Configuration Guide53-1002484-04Configuring BGP4+46Syntax: neighbor <ipv6-address> route-map [in | out] <name>The &
BigIron RX Series Configuration Guide 122553-1002484-04Configuring BGP4+46Specify a name for the peer group.To delete the peer group, enter the no for
1226 BigIron RX Series Configuration Guide53-1002484-04Configuring BGP4+46To enable the BGP4+ switch to advertise the default route, enter the followi
BigIron RX Series Configuration Guide 122753-1002484-04Configuring BGP4+46• OSPFv3.• RIPng. You can redistribute routes in the following ways:• By rou
1228 BigIron RX Series Configuration Guide53-1002484-04Clearing BGP4+ information46The suppress-map <map-name> parameter prevents the more speci
BigIron RX Series Configuration Guide 122953-1002484-04Clearing BGP4+ information46Removing route flap dampeningYou can un-suppress routes by removing
1230 BigIron RX Series Configuration Guide53-1002484-04Clearing BGP4+ information46BigIron RX# clear ipv6 bgp local routesSyntax: clear ipv6 bgp local
BigIron RX Series Configuration Guide 123153-1002484-04Clearing BGP4+ information46To perform a hard reset of a neighbor session and send ORFs to the
BigIron RX Series Configuration Guide 5353-1002484-04Chapter3Securing Access to Management FunctionsIn this chapter•Securing access methods. . . . . .
1232 BigIron RX Series Configuration Guide53-1002484-04Clearing BGP4+ information46Use the soft-outbound keyword to perform a soft reset of a neighbor
BigIron RX Series Configuration Guide 123353-1002484-04Displaying BGP4+ information46For example, to clear all BGP4+ routes and reset them, enter the
1234 BigIron RX Series Configuration Guide53-1002484-04Displaying BGP4+ information46This display shows the following information.TABLE 201 Summary of
BigIron RX Series Configuration Guide 123553-1002484-04Displaying BGP4+ information46Syntax: show ipv6 bgp routes [<ipv6-prefix>/<prefix-leng
1236 BigIron RX Series Configuration Guide53-1002484-04Displaying BGP4+ information46The best keyword displays the routes received from neighbors that
BigIron RX Series Configuration Guide 123753-1002484-04Displaying BGP4+ information46This display shows the following information.TABLE 202 Detailed B
1238 BigIron RX Series Configuration Guide53-1002484-04Displaying BGP4+ information46Syntax: show ipv6 bgp routes detail [<ipv6-prefix>/<pref
BigIron RX Series Configuration Guide 123953-1002484-04Displaying BGP4+ information46The <table-entry-number> parameter specifies the table entr
1240 BigIron RX Series Configuration Guide53-1002484-04Displaying BGP4+ information46Displaying BGP4+ route informationYou can display all BGP4+ route
BigIron RX Series Configuration Guide 124153-1002484-04Displaying BGP4+ information46Displaying BGP4+ route-attribute entriesThe route-attribute entri
54 BigIron RX Series Configuration Guide53-1002484-04Securing access methods3Telnet access Not secured Regulate Telnet access using ACLs page 56Allow
1242 BigIron RX Series Configuration Guide53-1002484-04Displaying BGP4+ information46Syntax: show ipv6 bgp attribute-entriesFor information about disp
BigIron RX Series Configuration Guide 124353-1002484-04Displaying BGP4+ information46Displaying the BGP4+ running configurationTo view the active BGP4
1244 BigIron RX Series Configuration Guide53-1002484-04Displaying BGP4+ information46Displaying filtered-out BGP4+ routesWhen you enable the soft reco
BigIron RX Series Configuration Guide 124553-1002484-04Displaying BGP4+ information46The longer-prefixes keyword allows you to display routes that mat
1246 BigIron RX Series Configuration Guide53-1002484-04Displaying BGP4+ information46To display detailed information about the routes that have been f
BigIron RX Series Configuration Guide 124753-1002484-04Displaying BGP4+ information46Syntax: show ipv6 bgp filtered-routes detail [<ipv6-prefix>
1248 BigIron RX Series Configuration Guide53-1002484-04Displaying BGP4+ information46Displaying route flap dampening statisticsTo display route dampen
BigIron RX Series Configuration Guide 124953-1002484-04Displaying BGP4+ information46Syntax: show ipv6 bgp flap-statistics [<ipv6-prefix>/<pr
1250 BigIron RX Series Configuration Guide53-1002484-04Displaying BGP4+ information46You also can display all the dampened routes by using the show ip
BigIron RX Series Configuration Guide 125153-1002484-04Displaying BGP4+ information46NOTEPortions of this display are truncated for brevity. The purpo
BigIron RX Series Configuration Guide 5553-1002484-04Restricting remote access to management functions3Restricting remote access to management functio
1252 BigIron RX Series Configuration Guide53-1002484-04Displaying BGP4+ information46EBGP/IBGP Whether the neighbor session is an IBGP session, an EBG
BigIron RX Series Configuration Guide 125353-1002484-04Displaying BGP4+ information46Messages Sent and Received The number of messages this switch has
1254 BigIron RX Series Configuration Guide53-1002484-04Displaying BGP4+ information46Last Connection Reset Reason (cont.) • Reasons specific to the Br
BigIron RX Series Configuration Guide 125553-1002484-04Displaying BGP4+ information46Notification Sent If the switch receives a NOTIFICATION message f
1256 BigIron RX Series Configuration Guide53-1002484-04Displaying BGP4+ information46TCP Connection state The state of the connection with the neighbo
BigIron RX Series Configuration Guide 125753-1002484-04Displaying BGP4+ information46Displaying routes advertised to a BGP4+ neighborYou can display a
1258 BigIron RX Series Configuration Guide53-1002484-04Displaying BGP4+ information46For example, to display details about all routes a switch has adv
BigIron RX Series Configuration Guide 125953-1002484-04Displaying BGP4+ information46Displaying BGP4+ neighbor route-attribute entriesThe route-attrib
1260 BigIron RX Series Configuration Guide53-1002484-04Displaying BGP4+ information46Syntax: show ipv6 bgp neighbor <ipv6-address> attribute-ent
BigIron RX Series Configuration Guide 126153-1002484-04Displaying BGP4+ information46Displaying route flap dampening statistics for a BGP4+ neighborTo
56 BigIron RX Series Configuration Guide53-1002484-04Restricting remote access to management functions3• Specifically disabling Telnet, Web management
1262 BigIron RX Series Configuration Guide53-1002484-04Displaying BGP4+ information46Displaying last error packet from a BGP4+ neighborYou can display
BigIron RX Series Configuration Guide 126353-1002484-04Displaying BGP4+ information46Syntax: show ipv6 bgp neighbor <ipv6-address> received-rout
1264 BigIron RX Series Configuration Guide53-1002484-04Displaying BGP4+ information46For example, to display details about routes received from neighb
BigIron RX Series Configuration Guide 126553-1002484-04Displaying BGP4+ information46This display shows the following information:TABLE 216 Detailed r
1266 BigIron RX Series Configuration Guide53-1002484-04Displaying BGP4+ information46Displaying the adj-RIB-out for a BGP4+ neighborYou can display a
BigIron RX Series Configuration Guide 126753-1002484-04Displaying BGP4+ information46The detail <ipv6-prefix>/<prefix-length> <network-
1268 BigIron RX Series Configuration Guide53-1002484-04Displaying BGP4+ information46This display shows the following information:Displaying the best
BigIron RX Series Configuration Guide 126953-1002484-04Displaying BGP4+ information46• Best routes – The “best” routes to their destinations, which ar
1270 BigIron RX Series Configuration Guide53-1002484-04Displaying BGP4+ information46For example, to display detailed information about the best route
BigIron RX Series Configuration Guide 127153-1002484-04Displaying BGP4+ information46Displaying IPv6 neighbor route summary informationYou can display
BigIron RX Series Configuration Guide 5753-1002484-04Restricting remote access to management functions3The ACL in the example permits Telnet access on
1272 BigIron RX Series Configuration Guide53-1002484-04Displaying BGP4+ information46Syntax: show ipv6 bgp neighbor [<ipv6-address>] routes-summ
BigIron RX Series Configuration Guide 127353-1002484-04Displaying BGP4+ information46Displaying BGP4+ peer group configuration informationYou can disp
1274 BigIron RX Series Configuration Guide53-1002484-04Displaying BGP4+ information46Syntax: show ipv6 bgp peer-group [<peer-group-name>]The dis
BigIron RX Series Configuration Guide 127553-1002484-04Displaying BGP4+ information46Confederation Peers The numbers of the local ASs contained in the
1276 BigIron RX Series Configuration Guide53-1002484-04Displaying BGP4+ information46State The state of this switch neighbor session with each neighbo
BigIron RX Series Configuration Guide 127753-1002484-04Chapter47Configuring IPv6 MBGPIn this chapter•IPv6 MBGP overview . . . . . . . . . . . . . . .
1278 BigIron RX Series Configuration Guide53-1002484-04Configuring IPv6 MBGP473. Identify the neighboring IPv6 MBGP routers.4. Optional – Configure an
BigIron RX Series Configuration Guide 127953-1002484-04Configuring IPv6 MBGP47Once MBGP is enabled, MBGP parameters are configured under the IPv6 mult
1280 BigIron RX Series Configuration Guide53-1002484-04Configuring IPv6 MBGP47The remote-as <as-number> parameter specifies the AS the MBGP neig
BigIron RX Series Configuration Guide 128153-1002484-04Configuring IPv6 MBGP47The backdoor parameter changes the administrative distance of the route
58 BigIron RX Series Configuration Guide53-1002484-04Restricting remote access to management functions3Using ACLs to restrict SNMP access To restrict
1282 BigIron RX Series Configuration Guide53-1002484-04Displaying IPv6 MBGP information47The ve <num> parameter specifies a virtual interface.Th
BigIron RX Series Configuration Guide 128353-1002484-04Displaying IPv6 MBGP information47Displaying summary MBGP informationTo display summary MBGP in
1284 BigIron RX Series Configuration Guide53-1002484-04Displaying IPv6 MBGP information47Syntax: show ipv6 mbgp configNOTEThis command displays exactl
BigIron RX Series Configuration Guide 128553-1002484-04Displaying IPv6 MBGP information47This example shows how to display information for a specific
1286 BigIron RX Series Configuration Guide53-1002484-04Displaying IPv6 MBGP information47Syntax: show ipv6 mbgp routesDisplaying the IPv6 multicast ro
BigIron RX Series Configuration Guide 128753-1002484-04Chapter48IPv6 Access Control Lists (ACLs)In this chapter•IPv6 ACLs . . . . . . . . . . . . . .
1288 BigIron RX Series Configuration Guide53-1002484-04Using IPv6 ACLs as input to other features48• Destination TCP or UDP port (if the IPv6 protocol
BigIron RX Series Configuration Guide 128953-1002484-04Configuring an IPv6 ACL48Here is another example of commands for configuring an ACL and applyin
1290 BigIron RX Series Configuration Guide53-1002484-04Configuring an IPv6 ACL48The third condition permits all packets containing source and destinat
BigIron RX Series Configuration Guide 129153-1002484-04Configuring an IPv6 ACL48For example, if you want to deny ICMP neighbor discovery acknowledgeme
BigIron RX Series Configuration Guide 5953-1002484-04Restricting remote access to management functions3BigIron RX(config)# access-list 10 permit host
1292 BigIron RX Series Configuration Guide53-1002484-04Configuring an IPv6 ACL48For ICMPSyntax: [no] ipv6 access-list <acl name>Syntax: permit |
BigIron RX Series Configuration Guide 129353-1002484-04Configuring an IPv6 ACL48TABLE 224 Syntax descriptionsArguments... Description...ipv6 access-li
1294 BigIron RX Series Configuration Guide53-1002484-04Configuring an IPv6 ACL48<ipv6-source-prefix>/<prefix-length>The <ipv6-source-pr
BigIron RX Series Configuration Guide 129553-1002484-04Configuring an IPv6 ACL48ipv6-operator Allows you to filter the packets further by using one o
1296 BigIron RX Series Configuration Guide53-1002484-04Configuring an IPv6 ACL48ICMP message configurationsIf you want to specify an ICMP message, you
BigIron RX Series Configuration Guide 129753-1002484-04Applying an IPv6 ACL to an interface48• router-solicitation• sequence• time-exceeded• unreachab
1298 BigIron RX Series Configuration Guide53-1002484-04Adding a comment to an IPv6 ACL entry48Adding a comment to an IPv6 ACL entryYou can optionally
BigIron RX Series Configuration Guide 129953-1002484-04Displaying ACLs48Syntax: show running-configThe following example shows the comment text for th
1300 BigIron RX Series Configuration Guide53-1002484-04Displaying ACLs48
BigIron RX Series Configuration Guide 130153-1002484-04Chapter49Configuring OSPF Version 3In this chapter•OSPF version 3 . . . . . . . . . . . . . .
60 BigIron RX Series Configuration Guide53-1002484-04Restricting remote access to management functions3Restricting Web Management access to a specific
1302 BigIron RX Series Configuration Guide53-1002484-04Link state advertisement types for OSPFv349NOTEYou are required to configure a router ID when r
BigIron RX Series Configuration Guide 130353-1002484-04Configuring OSPFv349• Enable the forwarding of IPv6 traffic on the Brocade device using the ipv
1304 BigIron RX Series Configuration Guide53-1002484-04Configuring OSPFv349For example, to set up OSPFv3 areas 0.0.0.0, 200.5.0.0, 192.5.1.0, and 195.
BigIron RX Series Configuration Guide 130553-1002484-04Configuring OSPFv349Assigning interfaces to an areaAfter you define OSPFv3 areas, you must assi
1306 BigIron RX Series Configuration Guide53-1002484-04Configuring OSPFv349BigIron RX(config-ospf6-router)# area 1 virtual-link 10.0.0.1Syntax: area &
BigIron RX Series Configuration Guide 130753-1002484-04Configuring OSPFv349For example, to change the dead interval to 60 seconds on the virtual links
1308 BigIron RX Series Configuration Guide53-1002484-04Configuring OSPFv349NOTEIf you specify the cost for an individual interface, the cost you speci
BigIron RX Series Configuration Guide 130953-1002484-04Configuring OSPFv349• IPv6 IS-IS• RIPngYou can redistribute routes in the following ways:• By r
1310 BigIron RX Series Configuration Guide53-1002484-04Configuring OSPFv349The redistribution command configures the redistribution of static IPv6 rou
BigIron RX Series Configuration Guide 131153-1002484-04Configuring OSPFv349To assign a default metric of 4 to all routes imported into OSPFv3, enter t
BigIron RX Series Configuration Guide 6153-1002484-04Restricting remote access to management functions3• TFTP accessBy default, access is allowed for
1312 BigIron RX Series Configuration Guide53-1002484-04Configuring OSPFv349NOTEIf you disable redistribution, all the aggregate routes are flushed, al
BigIron RX Series Configuration Guide 131353-1002484-04Configuring OSPFv349Configuring an OSPFv3 distribution list using an IPv6 prefix list as inputT
1314 BigIron RX Series Configuration Guide53-1002484-04Configuring OSPFv349The following commands specify an IPv6 prefix list called filterOspfRoutesV
BigIron RX Series Configuration Guide 131553-1002484-04Configuring OSPFv349Configuring default route originationWhen the Brocade device is an OSPF Aut
1316 BigIron RX Series Configuration Guide53-1002484-04Configuring OSPFv349• 2 – Type 2 external routeIf you do not use this option, the default redis
BigIron RX Series Configuration Guide 131753-1002484-04Configuring OSPFv349The device selects one route over another based on the source of the route
1318 BigIron RX Series Configuration Guide53-1002484-04Configuring OSPFv349The pacing interval is inversely proportional to the number of LSAs the Bro
BigIron RX Series Configuration Guide 131953-1002484-04Configuring OSPFv349Modifying OSPFv3 interface defaultsOSPFv3 has interface parameters that you
1320 BigIron RX Series Configuration Guide53-1002484-04Displaying OSPFv3 information49To disable the logging of events, enter the following command.Bi
BigIron RX Series Configuration Guide 132153-1002484-04Displaying OSPFv3 information49Displaying OSPFv3 database InformationYou can display a summary
xiv BigIron RX Series Configuration Guide53-1002484-04Ring initialization for shared interfaces. . . . . . . . . . . . . . . . . . . . . .418How ring
62 BigIron RX Series Configuration Guide53-1002484-04Restricting remote access to management functions3The command in this example configures the devi
1322 BigIron RX Series Configuration Guide53-1002484-04Displaying OSPFv3 information49The intra-prefix keyword displays detailed information about the
BigIron RX Series Configuration Guide 132353-1002484-04Displaying OSPFv3 information49NOTEPortions of this display are truncated for brevity. The purp
1324 BigIron RX Series Configuration Guide53-1002484-04Displaying OSPFv3 information49TABLE 227 OSPFv3 detailed database information fieldsThis field.
BigIron RX Series Configuration Guide 132553-1002484-04Displaying OSPFv3 information49Network LSA (Type 2) (Net) fieldsOptions A 24-bit field that ena
1326 BigIron RX Series Configuration Guide53-1002484-04Displaying OSPFv3 information49Displaying OSPFv3 interface informationYou can display a summary
BigIron RX Series Configuration Guide 132753-1002484-04Displaying OSPFv3 information49For example, to display detailed information about Ethernet inte
1328 BigIron RX Series Configuration Guide53-1002484-04Displaying OSPFv3 information49TABLE 229 Detailed OSPFv3 interface informationThis field... Dis
BigIron RX Series Configuration Guide 132953-1002484-04Displaying OSPFv3 information49Displaying OSPFv3 memory usageTo display information about OSPFv
1330 BigIron RX Series Configuration Guide53-1002484-04Displaying OSPFv3 information49This display shows the following information.Displaying OSPFv3 n
BigIron RX Series Configuration Guide 133153-1002484-04Displaying OSPFv3 information49For example, to display detailed information about a neighbor wi
BigIron RX Series Configuration Guide 6353-1002484-04Setting passwords3Disabling Web management access by HP ProCurve ManagerBy default, TCP ports 80
1332 BigIron RX Series Configuration Guide53-1002484-04Displaying OSPFv3 information49Displaying routes redistributed into OSPFv3You can display all I
BigIron RX Series Configuration Guide 133353-1002484-04Displaying OSPFv3 information49Syntax: show ipv6 ospf redistribute route [<ipv6-prefix>]
1334 BigIron RX Series Configuration Guide53-1002484-04Displaying OSPFv3 information49Syntax: show ipv6 ospf routes [<ipv6-prefix>] The <ipv6
BigIron RX Series Configuration Guide 133553-1002484-04Displaying OSPFv3 information49Displaying OSPFv3 SPF informationYou can display the following O
1336 BigIron RX Series Configuration Guide53-1002484-04Displaying OSPFv3 information49• As an IPv4 address; for example, 192.168.1.1• As a numerical v
BigIron RX Series Configuration Guide 133753-1002484-04Displaying OSPFv3 information49For example, to display the SPF tree for area 0, enter the follo
1338 BigIron RX Series Configuration Guide53-1002484-04Displaying OSPFv3 information49Displaying IPv6 OSPF virtual link informationTo display OSPFv3 v
BigIron RX Series Configuration Guide 133953-1002484-04Displaying OSPFv3 information49State The state between the Brocade device and the virtual neigh
1340 BigIron RX Series Configuration Guide53-1002484-04Displaying OSPFv3 information49
BigIron RX Series Configuration Guide 134153-1002484-04Chapter50Configuring IPv6 Multicast FeaturesIn this chapter•IPv6 PIM sparse. . . . . . . . . .
64 BigIron RX Series Configuration Guide53-1002484-04Setting passwords3To set the password “letmein” for Telnet access to the CLI, enter the following
1342 BigIron RX Series Configuration Guide53-1002484-04IPv6 PIM sparse50PIM sparse router typesRouters that are configured with PIM Sparse interfaces
BigIron RX Series Configuration Guide 134353-1002484-04IPv6 PIM sparse50• Enable the IPv6 PIM Sparse mode of multicast routing• Enable the IPv6 unicas
1344 BigIron RX Series Configuration Guide53-1002484-04IPv6 PIM sparse50Configuring BSRsIn addition to the global and interface parameters in the sect
BigIron RX Series Configuration Guide 134553-1002484-04IPv6 PIM sparse50BigIron RX(config)#ipv6 router pimBigIron RX(config-ipv6-pim-router)# rp-candi
1346 BigIron RX Series Configuration Guide53-1002484-04IPv6 PIM sparse50ACL based RP assignmentThe rp-address command allows multiple static RP config
BigIron RX Series Configuration Guide 134753-1002484-04IPv6 PIM sparse50BigIron RX(config-ipv6-pim-router)#sho ipv6 pim rp-mapStatic RP and associated
1348 BigIron RX Series Configuration Guide53-1002484-04IPv6 PIM sparse50• Shortest Path – Each IPv6 PIM Sparse router that is a DR for an IPv6 receive
BigIron RX Series Configuration Guide 134953-1002484-04IPv6 PIM sparse50Syntax: [no] message-interval <seconds>The <seconds> parameter spe
1350 BigIron RX Series Configuration Guide53-1002484-04IPv6 PIM sparse50Syntax: [no] ssm-enableDisplaying IPv6 PIM-sparse configuration informationTo
BigIron RX Series Configuration Guide 135153-1002484-04IPv6 PIM sparse50Displaying IPv6 PIM inteface informationYou also can display IPv6 multicast in
BigIron RX Series Configuration Guide 6553-1002484-04Setting passwords33. Enter the following command to set the Super User level password.BigIron RX(
1352 BigIron RX Series Configuration Guide53-1002484-04IPv6 PIM sparse50Displaying a list of multicast groupsTo display IPv6 PIM group information, e
BigIron RX Series Configuration Guide 135353-1002484-04IPv6 PIM sparse50 group prefixes: ff00:: / 8 Candidate-RP-advertisement period: 60 Bi
1354 BigIron RX Series Configuration Guide53-1002484-04IPv6 PIM sparse50This example show information displayed on a device that is a candidate RP. T
BigIron RX Series Configuration Guide 135553-1002484-04IPv6 PIM sparse50Displaying RP information for a PIM sparse groupTo display RP information for
1356 BigIron RX Series Configuration Guide53-1002484-04IPv6 PIM sparse50Displaying multicast neighbor informationTo display information about the devi
BigIron RX Series Configuration Guide 135753-1002484-04IPv6 PIM sparse50Syntax: show ipv6 pim mcacheDisplaying the IPv6 PIM ResourceTo display the har
1358 BigIron RX Series Configuration Guide53-1002484-04IPv6 PIM sparse50 phy-ports 1024 0 1024 0 no-limit exist-
BigIron RX Series Configuration Guide 135953-1002484-04Multicast Listener Discovery and source specific multicast protocols (MLDv2)50Multicast Listene
1360 BigIron RX Series Configuration Guide53-1002484-04Multicast Listener Discovery and source specific multicast protocols (MLDv2)50• General Query,
BigIron RX Series Configuration Guide 136153-1002484-04Multicast Listener Discovery and source specific multicast protocols (MLDv2)50Enter the ssm-ena
66 BigIron RX Series Configuration Guide53-1002484-04Setting passwords3Syntax: [no] privilege <cli-level> level <privilege-level> <comm
1362 BigIron RX Series Configuration Guide53-1002484-04Multicast Listener Discovery and source specific multicast protocols (MLDv2)50Setting the robus
BigIron RX Series Configuration Guide 136353-1002484-04Multicast Listener Discovery and source specific multicast protocols (MLDv2)50Setting the inter
1364 BigIron RX Series Configuration Guide53-1002484-04Multicast Listener Discovery and source specific multicast protocols (MLDv2)50Displaying MLD de
BigIron RX Series Configuration Guide 136553-1002484-04Multicast Listener Discovery and source specific multicast protocols (MLDv2)50The report has a
1366 BigIron RX Series Configuration Guide53-1002484-04Multicast Listener Discovery and source specific multicast protocols (MLDv2)50Embedded Rendezvo
BigIron RX Series Configuration Guide 136753-1002484-04Chapter51Configuring IPv6 RoutesIn this chapter•Configuring a static IPv6 route . . . . . . . .
1368 BigIron RX Series Configuration Guide53-1002484-04Configuring a static IPv6 route51Table 240 describes the parameters associated with this comman
BigIron RX Series Configuration Guide 136953-1002484-04Configuring a IPv6 multicast route51The administrative distance is a value that the router uses
1370 BigIron RX Series Configuration Guide53-1002484-04Configuring a IPv6 multicast route51NOTERegardless of the administrative distances, the switch
BigIron RX Series Configuration Guide 137153-1002484-04Chapter52Continuous System MonitorIn this chapter•Continuous system monitor overview . . . . .
BigIron RX Series Configuration Guide 6753-1002484-04Setting up local user accounts3Displaying the SNMP community stringIf you want to display the SNM
1372 BigIron RX Series Configuration Guide53-1002484-04Continuous system monitor overview52• TM_ECC - Monitoring TM memory ECC errors.• TM_CLOCK_SYNC
BigIron RX Series Configuration Guide 137353-1002484-04Continuous system monitor overview52TM_REGThis event type is a special type of event. Instead o
1374 BigIron RX Series Configuration Guide53-1002484-04Continuous system monitor overview52NOTEIf the count of tx_err or rx_data_err is greater than z
BigIron RX Series Configuration Guide 137553-1002484-04Continuous system monitor overview52MBridge FPGAThe event MBRIDGE FPGA is monitoring the MP MBr
1376 BigIron RX Series Configuration Guide53-1002484-04Continuous system monitor overview52--- Event TM Reg (Enabled) ---Threshold: 1 / 10, FAP Shutdo
BigIron RX Series Configuration Guide 137753-1002484-04Continuous system monitor overview52------------------------------------- Event FE Write-Read T
1378 BigIron RX Series Configuration Guide53-1002484-04Continuous system monitor overview52
BigIron RX Series Configuration Guide 137953-1002484-04AppendixAUsing Syslog This appendix describes how to display Syslog messages and how to configu
1380 BigIron RX Series Configuration Guide53-1002484-04Displaying Syslog messagesAFor information about the Syslog configuration information, time sta
BigIron RX Series Configuration Guide 138153-1002484-04Configuring the Syslog serviceAHere is an example of how the Syslog messages are displayed.teln
68 BigIron RX Series Configuration Guide53-1002484-04Setting up local user accounts3Local user accounts provide greater flexibility for controlling ma
1382 BigIron RX Series Configuration Guide53-1002484-04Configuring the Syslog serviceAStatic and dynamic buffersThe software provides two separate buf
BigIron RX Series Configuration Guide 138353-1002484-04Configuring the Syslog serviceANotice that the static buffer contains two separate messages for
1384 BigIron RX Series Configuration Guide53-1002484-04Configuring the Syslog serviceA• ss – secondsFor example, “Oct 15 17:38:03” means October 15 at
BigIron RX Series Configuration Guide 138553-1002484-04Configuring the Syslog serviceADisabling or re-enabling SyslogSyslog is enabled by default. To
1386 BigIron RX Series Configuration Guide53-1002484-04Configuring the Syslog serviceABigIron RX(config)# logging host 10.0.0.99 For backward compatib
BigIron RX Series Configuration Guide 138753-1002484-04Configuring the Syslog serviceAIn the next example, a console session configures router bgp and
1388 BigIron RX Series Configuration Guide53-1002484-04Configuring the Syslog serviceA• sys10 – reserved for system use• sys11 – reserved for system u
BigIron RX Series Configuration Guide 138953-1002484-04Syslog messagesASyslog messagesTable 242 lists all of the Syslog messages. The messages are lis
1390 BigIron RX Series Configuration Guide53-1002484-04Syslog messagesAAlert OSPF LSA Overflow, LSA Type = <lsa-type>Indicates an LSA database o
BigIron RX Series Configuration Guide 139153-1002484-04Syslog messagesACritical Authentication shut down <portnum> due to DOS attackDenial of Se
BigIron RX Series Configuration Guide 6953-1002484-04Setting up local user accounts3• 4 – Port Configuration level• 5 – Read Only level The default pr
1392 BigIron RX Series Configuration Guide53-1002484-04Syslog messagesAWarning list <acl-num> denied <ip-proto> <src-ip-addr> (<s
BigIron RX Series Configuration Guide 139353-1002484-04Syslog messagesANotification Module was inserted to slot <slot-num> Indicates that a modu
1394 BigIron RX Series Configuration Guide53-1002484-04Syslog messagesANotification OSPF interface state changed,rid <router-id>, intf addr <
BigIron RX Series Configuration Guide 139553-1002484-04Syslog messagesANotification OSPF nbr state changed, rid <router-id>, nbr addr <ip-add
1396 BigIron RX Series Configuration Guide53-1002484-04Syslog messagesANotification OSPF intf config error, rid <router-id>, intf addr <ip-ad
BigIron RX Series Configuration Guide 139753-1002484-04Syslog messagesANotification OSPF virtual intf config error, rid <router-id>, intf addr &
1398 BigIron RX Series Configuration Guide53-1002484-04Syslog messagesANotification OSPF intf authen failure, rid <router-id>, intf addr <ip-
BigIron RX Series Configuration Guide 139953-1002484-04Syslog messagesANotification OSPF virtual intf authen failure,rid <router-id>, intf addr
1400 BigIron RX Series Configuration Guide53-1002484-04Syslog messagesANotification OSPF virtual intf rcvd bad pkt, rid <router-id>, intf addr &
BigIron RX Series Configuration Guide 140153-1002484-04Syslog messagesANotification OSPF virtual intf retransmit, rid <router-id>, intf addr <
70 BigIron RX Series Configuration Guide53-1002484-04Setting up local user accounts3NOTEBefore you can change a local user account using the Web Manag
1402 BigIron RX Series Configuration Guide53-1002484-04Syslog messagesANotification OSPF intf rcvd bad pkt: Bad Checksum, rid <ip-addr>, intf ad
BigIron RX Series Configuration Guide 140353-1002484-04Syslog messagesANotification VRRP intf state changed, intf <portnum>, vrid <virtual-ro
1404 BigIron RX Series Configuration Guide53-1002484-04Syslog messagesANotification Local TCP exceeds <num> burst packets, stopping for <num&
BigIron RX Series Configuration Guide 140553-1002484-04Syslog messagesANotification DOT1X issues software but not physical port up indication of Port
1406 BigIron RX Series Configuration Guide53-1002484-04Syslog messagesAInformational Trunk group (<ports>) created by 802.3ad link-aggregation m
BigIron RX Series Configuration Guide 140753-1002484-04Syslog messagesAInformational vlan <vlan-id> Bridge is RootBridge <mac-address> (Mg
1408 BigIron RX Series Configuration Guide53-1002484-04Syslog messagesAInformational ACL <acl id> added | deleted | modified from console | teln
BigIron RX Series Configuration Guide 140953-1002484-04AppendixBSoftware SpecificationsThis appendix lists the following information for the BigIron R
1410 BigIron RX Series Configuration Guide53-1002484-04RFC complianceB• 1269 — Managed Objects for BGP• 1657 — Managed Objects for BGP-4 using SMIv2•
BigIron RX Series Configuration Guide 141153-1002484-04RFC complianceB• 3973 — PIM-DM• 1075 — DVMRP v2• 4541 — Considerations for Internet Group Manag
BigIron RX Series Configuration Guide 7153-1002484-04Setting up local user accounts3• The last 15 passwords are stored in the CLI.• A password can be
1412 BigIron RX Series Configuration Guide53-1002484-04RFC complianceBRFC compliance - management• 1757 — RMON Groups Partial 1, full for 2, 3, 9• 20
BigIron RX Series Configuration Guide 141353-1002484-04Internet draftsB• 3513 — IPv6 Addressing Architecture • 1981 — IPv6 Path MTU Discovery • 3587
1414 BigIron RX Series Configuration Guide53-1002484-04Internet draftsB• Draft-ietf-idr-route-filter• Draft-holbrook-idmr-igmpv3-ssm - IGMPv3 & ML
BigIron RX Series Configuration Guide 141553-1002484-04AppendixCNIAP-CCEVS CertificationSome Brocade devices have passed the Common Criteria (CC) cert
1416 BigIron RX Series Configuration Guide53-1002484-04Local user password changesCLocal user password changesPlease note that if existing usernames a
BigIron RX Series Configuration Guide 141753-1002484-04AppendixDCommands That Require a ReloadMost CLI commands take effect as soon as you enter them.
1418 BigIron RX Series Configuration Guide53-1002484-04Commands That Require a ReloadD
BigIron RX Series Configuration Guide 141953-1002484-04AppendixEIndex to the CLI CommandsThis appendix lists the CLI commands discussed in this config
1420 BigIron RX Series Configuration Guide53-1002484-04ACLs (IP)ENamed ACLOther ACL commandsCommands See ...ip access-list extended I standard <acl
BigIron RX Series Configuration Guide 142153-1002484-04ACLs (L2)EACLs (L2)BGP4ip access-group <num> I <name> in “Configuring standard numb
BigIron RX Series Configuration Guide xv53-1002484-04Displaying VSRP information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .446Displa
72 BigIron RX Series Configuration Guide53-1002484-04Setting up local user accounts3Once the enable strict-password-enforcement command is enabled, yo
1422 BigIron RX Series Configuration Guide53-1002484-04BGP4Ealways-compare-med “Configuring the device to always compare MEDs” on page 835as-path-filt
BigIron RX Series Configuration Guide 142353-1002484-04BGP4Edefault-metric <num> “Changing the default metric used for redistribution” on page 8
1424 BigIron RX Series Configuration Guide53-1002484-04BGP4Emaximum-paths <num> “Changing the maximum number of shared BGP4 paths” on page 845me
BigIron RX Series Configuration Guide 142553-1002484-04BGP4Enext-hop-enable-default “Using the IP default route as a valid next hop for a BGP4 route”
1426 BigIron RX Series Configuration Guide53-1002484-04BGP4Eshow ip bgp flap-statistics [regular-expression <regular-expression> | <address&g
BigIron RX Series Configuration Guide 142753-1002484-04FDP/CDPEFDP/CDPIPsnmp-server enable traps bgp “Generating traps for BGP” on page 892timers keep
1428 BigIron RX Series Configuration Guide53-1002484-04IPEinterface ethernet <slot/port> I loopback <num> “Assigning an IP address to an E
BigIron RX Series Configuration Guide 142953-1002484-04IPEip mtu <num> “Changing the maximum transmission unit on an individual interface” on pa
1430 BigIron RX Series Configuration Guide53-1002484-04IPv6 BGP4+EIPv6 BGP4+show ip route summary “Displaying the IP route table” on page 229show ip s
BigIron RX Series Configuration Guide 143153-1002484-04IPv6 BGP4+Elocal-as <number> “Enabling BGP4+” on page 1221match ipv6 address prefix-list
BigIron RX Series Configuration Guide 7353-1002484-04Configuring SSL security for the Web Management Interface3NOTEThe enable strict-password-enforcem
1432 BigIron RX Series Configuration Guide53-1002484-04IPv6 BGP4+Eshow ipv6 bgp neighbor <ipv6-address> advertised-routes [detail] <ipv6-pref
BigIron RX Series Configuration Guide 143353-1002484-04IPv6 ACLEIPv6 ACLCommands See ...ipv6 access-list <acl name> “For ICMP” on page 1292“For
1434 BigIron RX Series Configuration Guide53-1002484-04IPv6 basic connectivityEIPv6 basic connectivityCommands See ...ipv6 enable “Configuring a link
BigIron RX Series Configuration Guide 143553-1002484-04IPv6 basic connectivityEipv6 nd other-config-flag “Setting flags in IPv6 router advertisement
1436 BigIron RX Series Configuration Guide53-1002484-04IPv6 multicastEIPv6 multicastIPv6 RIPngCommands See ...ipv6 router pim “Enabling MLDv2” on page
BigIron RX Series Configuration Guide 143753-1002484-04IPv6 OSPFv3EIPv6 OSPFv3poison-local-routes “Configuring poison reverse parameters” on page 121
1438 BigIron RX Series Configuration Guide53-1002484-04IPv6 OSPFv3Epv6 router ospf “Enabling OSPFv3” on page 1302log-status-change “Disabling or reen
BigIron RX Series Configuration Guide 143953-1002484-04IS-ISEIS-ISCommands See ...address-family ipv4 unicast “Address family configuration level” on
1440 BigIron RX Series Configuration Guide53-1002484-04IS-ISEmaximum-paths <number> “Changing the maximum number of load sharing paths” on page
BigIron RX Series Configuration Guide 144153-1002484-04Metro RingEMetro RingMetro Ring protocolshow isis traffic “Displaying traffic statistics” on pa
74 BigIron RX Series Configuration Guide53-1002484-04Configuring SSL security for the Web Management Interface3Enabling the SSL server on the deviceTo
1442 BigIron RX Series Configuration Guide53-1002484-04MSTPEMSTPhello-time <ms> “Changing the hello and preforwarding times” on page 416preforwa
BigIron RX Series Configuration Guide 144353-1002484-04Multi-Chassis TrunkingEMulti-Chassis TrunkingCommands See ... lag <name> [static | dynami
1444 BigIron RX Series Configuration Guide53-1002484-04Multi-Chassis TrunkingEshow cluster [<name> | <id>] peer <peer-ip> “Displayin
BigIron RX Series Configuration Guide 144553-1002484-04Multicast (IP)EMulticast (IP)Commands See ...bsr-candidate ethernet <portnum> | loopback
1446 BigIron RX Series Configuration Guide53-1002484-04Multicast (IP)Ereport-interval <10-2000> “Enabling DVMRP on an interface” on page 724rout
BigIron RX Series Configuration Guide 144753-1002484-04Multicast (L2)EMulticast (L2)OSPF version 4Commands See ...clear ip multicast all | group <g
1448 BigIron RX Series Configuration Guide53-1002484-04OSPF version 4Edefault-information-originate [always] [metric <value>] [metric-type <t
BigIron RX Series Configuration Guide 144953-1002484-04Port parametersEPort parametersshow ip ospf virtual neighbor [<num>] “Displaying OSPF vir
1450 BigIron RX Series Configuration Guide53-1002484-04Port-based routingEPort-based routingQuality of Service (QoS)Commands See ...access-list <nu
BigIron RX Series Configuration Guide 145153-1002484-04Rate limitingERate limitingqos scheduler destination-weighted <queue0-weight> <queue1-
BigIron RX Series Configuration Guide 7553-1002484-04Configuring TACACS and TACACS+ security3Generating an SSL certificateIf you did not already impor
1452 BigIron RX Series Configuration Guide53-1002484-04RIPERIPrate-limit in group <group-number> <average-rate> <maximum-burst>“Conf
BigIron RX Series Configuration Guide 145353-1002484-04RMONERMONlearn-default “Configuring route learning and advertising parameters” on page 746neigh
1454 BigIron RX Series Configuration Guide53-1002484-04RSTPERSTPSecurity/Management802.1x Port SecurityCommands See ...rstp [admin-edge-port] | [admin
BigIron RX Series Configuration Guide 145553-1002484-04Security/ManagementEAccessdot1x re-authenticate <portnum> “Re-authenticating a port manu
1456 BigIron RX Series Configuration Guide53-1002484-04Security/ManagementEAuthentication method listPasswordsPrivilege levelRADIUSCommands See ...aaa
BigIron RX Series Configuration Guide 145753-1002484-04Security/ManagementESNMP accessSSH accessSSL aaa authorization commands <privilege-level>
1458 BigIron RX Series Configuration Guide53-1002484-04Security/ManagementETACACS and TACACS+ Telnet accessip ssl port <port-number> “Specifying
BigIron RX Series Configuration Guide 145953-1002484-04Security/ManagementETFTP accessUser accountWeb management accessDoS Protectiontelnet server ena
1460 BigIron RX Series Configuration Guide53-1002484-04Security/ManagementEMAC authenticationip tcp tcp-security “Disabling the TCP security enhancem
BigIron RX Series Configuration Guide 146153-1002484-04Security/ManagementEMAC port securityshow auth-mac-address detail “Displaying multi-device port
76 BigIron RX Series Configuration Guide53-1002484-04Configuring TACACS and TACACS+ security3TACACS and TACACS+ authentication, authorization, and acc
1462 BigIron RX Series Configuration Guide53-1002484-04Redundant management moduleERedundant management moduleCommands See ...active-management <mg
BigIron RX Series Configuration Guide 146353-1002484-04Redundant management moduleEcopy slot1 | slot2 flash [/<from-dir-path>/]<from-name>
1464 BigIron RX Series Configuration Guide53-1002484-04SNMPESNMPSSHlocate startup-config “Displaying the current location for saving configuration cha
BigIron RX Series Configuration Guide 146553-1002484-04sFlowEsFlowip ssh password-authentication no | yes “Deactivating user authentication” on page 9
1466 BigIron RX Series Configuration Guide53-1002484-04STPESTPSysLog messagesCommands See ...show spanning-tree [vlan <vlan-id>] | [pvst-mode] |
BigIron RX Series Configuration Guide 146753-1002484-04System parametersESystem parametersshow logging “Displaying the Syslog configuration” on page
1468 BigIron RX Series Configuration Guide53-1002484-04TopologyETopologysnmp-server enable traps <trap-type>“Disabling SNMP traps” on page 122sn
BigIron RX Series Configuration Guide 146953-1002484-04LAGELAGUDLDCommands See ...lag <lag-name> static | dynamic | keep-alive “Creating a Link
1470 BigIron RX Series Configuration Guide53-1002484-04VLANEVLANshow link-keepalive [ethernet <portnum>] “Displaying information for all ports”
BigIron RX Series Configuration Guide 147153-1002484-04VRRP/VRRPEEVRRP/VRRPECommands See ...activate “Configuring the owner” on page 464“Configuring p
BigIron RX Series Configuration Guide 7753-1002484-04Configuring TACACS and TACACS+ security35. The user is prompted for a password.6. The user enters
1472 BigIron RX Series Configuration Guide53-1002484-04VSRPEVSRPCommands See ...backup [priority <value>] [track-priority <value>] “Config
78 BigIron RX Series Configuration Guide53-1002484-04Configuring TACACS and TACACS+ security35. The TACACS+ accounting server records information abou
BigIron RX Series Configuration Guide 7953-1002484-04Configuring TACACS and TACACS+ security3AAA security for commands pasted Into the running configu
80 BigIron RX Series Configuration Guide53-1002484-04Configuring TACACS and TACACS+ security33. Configure authentication-method lists. Refer to “Confi
BigIron RX Series Configuration Guide 8153-1002484-04Configuring TACACS and TACACS+ security3If you add multiple TACACS and TACACS+ authentication ser
xvi BigIron RX Series Configuration Guide53-1002484-04Displaying VRRP and VRRPE information . . . . . . . . . . . . . . . . . . . . 471Displaying summ
82 BigIron RX Series Configuration Guide53-1002484-04Configuring TACACS and TACACS+ security3• Retransmit interval – This parameter specifies how many
BigIron RX Series Configuration Guide 8353-1002484-04Configuring TACACS and TACACS+ security3Setting the dead time parameterThe dead-time parameter sp
84 BigIron RX Series Configuration Guide53-1002484-04Configuring TACACS and TACACS+ security3The command above causes TACACS and TACACS+ to be the pri
BigIron RX Series Configuration Guide 8553-1002484-04Configuring TACACS and TACACS+ security3Configuring TACACS+ authorizationThe device supports TACA
86 BigIron RX Series Configuration Guide53-1002484-04Configuring TACACS and TACACS+ security3 service = exec { foundry-privlvl = 0 }}In t
BigIron RX Series Configuration Guide 8753-1002484-04Configuring TACACS and TACACS+ security3In this example, the user would be granted a privilege le
88 BigIron RX Series Configuration Guide53-1002484-04Configuring TACACS and TACACS+ security3Configuring TACACS+ accountingThe device supports TACACS+
BigIron RX Series Configuration Guide 8953-1002484-04Configuring TACACS and TACACS+ security3Syntax: aaa accounting system default start-stop radius |
90 BigIron RX Series Configuration Guide53-1002484-04Configuring TACACS and TACACS+ security3Syntax: show aaaThe following table describes the TACACS
BigIron RX Series Configuration Guide 9153-1002484-04Configuring RADIUS security3Configuring RADIUS securityYou can use a Remote Authentication Dial I
BigIron RX Series Configuration Guide xvii53-1002484-04Configuring multicast traffic engineering . . . . . . . . . . . . . . . . . . . .505Displaying
92 BigIron RX Series Configuration Guide53-1002484-04Configuring RADIUS security3• A list of commands• Whether the user is allowed or denied usage of
BigIron RX Series Configuration Guide 9353-1002484-04Configuring RADIUS security3AAA operations for RADIUSThe following table lists the sequence of au
94 BigIron RX Series Configuration Guide53-1002484-04Configuring RADIUS security3AAA security for commands pasted into the running configurationIf AAA
BigIron RX Series Configuration Guide 9553-1002484-04Configuring RADIUS security3Configuring Brocade-specific attributes on the RADIUS serverNOTEFor t
96 BigIron RX Series Configuration Guide53-1002484-04Configuring RADIUS security3Enabling SNMP to configure RADIUS RADIUS is disabled by default. To e
BigIron RX Series Configuration Guide 9753-1002484-04Configuring RADIUS security3Specifying different servers for individual AAA functionsIn a RADIUS
98 BigIron RX Series Configuration Guide53-1002484-04Configuring RADIUS security3BigIron RX(config)# radius-server key 1 abcBigIron RX(config)# write
BigIron RX Series Configuration Guide 9953-1002484-04Configuring RADIUS security3The commands above cause RADIUS to be the primary authentication meth
100 BigIron RX Series Configuration Guide53-1002484-04Configuring RADIUS security3Configuring Exec authorizationNOTEBefore you configure RADIUS exec a
BigIron RX Series Configuration Guide 10153-1002484-04Configuring RADIUS security3NOTERADIUS command authorization can be performed only for commands
xviii BigIron RX Series Configuration Guide53-1002484-04Port loop detection support in MCT . . . . . . . . . . . . . . . . . . . . . . . . .563Configu
102 BigIron RX Series Configuration Guide53-1002484-04Configuring RADIUS security3Configuring RADIUS accounting for CLI commandsYou can configure RADI
BigIron RX Series Configuration Guide 10353-1002484-04Configuring RADIUS security3• If you specify a loopback interface as the single source for RADIU
104 BigIron RX Series Configuration Guide53-1002484-04Configuring authentication-method lists3The show web command displays the privilege level of Web
BigIron RX Series Configuration Guide 10553-1002484-04Configuring authentication-method lists3NOTETo authenticate Telnet access to the CLI, you also m
106 BigIron RX Series Configuration Guide53-1002484-04Configuring authentication-method lists3• If you configure an authentication-method list for Web
BigIron RX Series Configuration Guide 10753-1002484-04Configuring authentication-method lists3The snmp-server | web-server | enable | login | dot1x p
108 BigIron RX Series Configuration Guide53-1002484-04Configuring authentication-method lists3
BigIron RX Series Configuration Guide 10953-1002484-04Chapter4Getting Familiar With the BigIron RX Series Switch Management ApplicationsIn this chapte
110 BigIron RX Series Configuration Guide53-1002484-04Logging on through the CLI4• CONFIG – Lets you make configuration changes to the device. To save
BigIron RX Series Configuration Guide 11153-1002484-04Logging on through the CLI4The software provides the following scrolling options:• Press the Spa
BigIron RX Series Configuration Guide xix53-1002484-04ACL-based inbound mirroring . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .596Consid
112 BigIron RX Series Configuration Guide53-1002484-04Logging on through the CLI4Displaying lines containing a specified stringThe following command f
BigIron RX Series Configuration Guide 11353-1002484-04Logging on through the CLI4Searching and filtering output at the --More-- promptThe --More-- pro
114 BigIron RX Series Configuration Guide53-1002484-04Logging on through the CLI4To display lines that do not contain a specified search string (simil
BigIron RX Series Configuration Guide 11553-1002484-04Logging on through the CLI4If you want to filter for a special character instead of using the sp
116 BigIron RX Series Configuration Guide53-1002484-04Logging on through the Web Management Interface4Allowable characters for LAG names When creating
BigIron RX Series Configuration Guide 11753-1002484-04Logging on through the Web Management Interface4NOTEIf you are unable to connect with the device
118 BigIron RX Series Configuration Guide53-1002484-04Logging on through the Web Management Interface4FIGURE 4 Panel for Layer 3 Switch featuresThe le
BigIron RX Series Configuration Guide 11953-1002484-04Chapter5Configuring Basic ParametersIn this chapter•Configuring basic system parameters . . . .
120 BigIron RX Series Configuration Guide53-1002484-04Entering system administration information5Entering system administration informationYou can con
BigIron RX Series Configuration Guide 12153-1002484-04Configuring Simple Network Management Protocol traps5Specifying an SNMP trap receiverYou can spe
Copyright © 2011-2013 Brocade Communications Systems, Inc. All Rights ReservedADX, AnyIO, Brocade, Brocade Assurance, the B-wing symbol, DCX, Fabric O
xx BigIron RX Series Configuration Guide53-1002484-04Chapter 23 Policy-Based RoutingPolicy-Based Routing (PBR) . . . . . . . . . . . . . . . . . . . .
122 BigIron RX Series Configuration Guide53-1002484-04Configuring Simple Network Management Protocol traps5• If you specify a loopback interface as th
BigIron RX Series Configuration Guide 12353-1002484-04Configuring Simple Network Management Protocol traps5NOTEBy default, all SNMP traps are enabled
124 BigIron RX Series Configuration Guide53-1002484-04Configuring Simple Network Management Protocol traps5• Whether the user logged in or out• The CL
BigIron RX Series Configuration Guide 12553-1002484-04Configuring an interface as source for all Telnet packets5Configuring an interface as source for
126 BigIron RX Series Configuration Guide53-1002484-04Configuring an interface as the source for all TFTP packets5Configuring an interface as the sour
BigIron RX Series Configuration Guide 12753-1002484-04Specifying a Simple Network Time Protocol (SNTP) server5Specifying a Simple Network Time Protoco
128 BigIron RX Series Configuration Guide53-1002484-04Setting the system clock5To display information about SNTP status, enter the following command.S
BigIron RX Series Configuration Guide 12953-1002484-04Setting the system clock5By default, the device does not change the system time for daylight sav
130 BigIron RX Series Configuration Guide53-1002484-04Configuring CLI banners5• GMT time zones (gmt): gmt+12, gmt+11, gmt+10...gmt+01, gmt+00, gmt-01.
BigIron RX Series Configuration Guide 13153-1002484-04Configuring CLI banners5NOTEThe banner <delimiting-character> command is equivalent to the
BigIron RX Series Configuration Guide xxi53-1002484-04PIM dense . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
132 BigIron RX Series Configuration Guide53-1002484-04Configuring terminal display5To remove the banner, enter the no banner incoming command.Configur
BigIron RX Series Configuration Guide 13353-1002484-04Displaying and modifying system parameter default settings5• VRRPEBy default, IP routing is enab
134 BigIron RX Series Configuration Guide53-1002484-04Displaying and modifying system parameter default settings5Syntax: show default valuesBigIron RX
BigIron RX Series Configuration Guide 13553-1002484-04Displaying the full port name for an interface5Information for the configurable tables appears u
136 BigIron RX Series Configuration Guide53-1002484-04Displaying the full port name for an interface51/9 Disabled None None No 001b.ed24.3a
BigIron RX Series Configuration Guide 13753-1002484-04Enabling or disabling Layer 2 switching5Enabling or disabling Layer 2 switching By default, dev
138 BigIron RX Series Configuration Guide53-1002484-04CAM partitioning for the BigIron RX5Re-distributing CAM allocationsDepending on the needs of you
BigIron RX Series Configuration Guide 13953-1002484-04Changing the MAC age time5The Nexthop table is partitioned as follows:• One-path partition: 2816
140 BigIron RX Series Configuration Guide53-1002484-04Pinging an IPv4 address5Pinging an IPv4 addressTo verify that a BigIron RX device can reach anot
BigIron RX Series Configuration Guide 14153-1002484-04Pinging an IPv4 address5U = Indicates that a destination unreachable error PDU was received. I =
xxii BigIron RX Series Configuration Guide53-1002484-04Configuring MSDP mesh groups . . . . . . . . . . . . . . . . . . . . . . . . . . .708Configuri
142 BigIron RX Series Configuration Guide53-1002484-04Pinging an IPv4 address5
BigIron RX Series Configuration Guide 14353-1002484-04Chapter6Configuring Interface ParametersIn this chapter•Assigning a port name . . . . . . . . .
144 BigIron RX Series Configuration Guide53-1002484-04Assigning an IP address to a port6The <text> parameter is an alphanumeric string. The nam
BigIron RX Series Configuration Guide 14553-1002484-04Disabling or re-enabling a port6The following example configures the interface to 1000 Mbps, and
146 BigIron RX Series Configuration Guide53-1002484-04Changing the default Gigabit negotiation mode6Syntax: enableChanging the default Gigabit negotia
BigIron RX Series Configuration Guide 14753-1002484-04Changing the load interval time6Specifying threshold values for flow controlThe 802.3x flow cont
148 BigIron RX Series Configuration Guide53-1002484-04Port transition hold timer6BigIron RX(config)# wait-for-all-cards Syntax: [no] wait-for-all-card
BigIron RX Series Configuration Guide 14953-1002484-04Port transition hold timer6• The Brocade device counts the number of times a port’s link state t
150 BigIron RX Series Configuration Guide53-1002484-04Modifying port priority (QoS)6Modifying port priority (QoS)You can give preference to the inboun
BigIron RX Series Configuration Guide 15153-1002484-04Mirror ports for Policy-Based Routing (PBR) traffic6NOTEYou cannot monitor outbound traffic from
BigIron RX Series Configuration Guide xxiii53-1002484-04Chapter 26 Configuring OSPF Version 2 (IPv4)Overview of OSPF (Open Shortest Path First) . . .
152 BigIron RX Series Configuration Guide53-1002484-04Mirror ports for Policy-Based Routing (PBR) traffic6The PBR mirror interface feature allows cont
BigIron RX Series Configuration Guide 15353-1002484-04Displaying mirror and monitor port configuration6You can specify up to 4 mirror ports for each P
154 BigIron RX Series Configuration Guide53-1002484-04Enabling WAN PHY mode support6
BigIron RX Series Configuration Guide 15553-1002484-04Chapter7Configuring IPIn this chapter•Overview of configuring IP. . . . . . . . . . . . . . . .
156 BigIron RX Series Configuration Guide53-1002484-04The IP packet flow7FIGURE 5 IP Packet flow through a device Figure 5 Shows the following packe
BigIron RX Series Configuration Guide 15753-1002484-04The IP packet flow7ARP cache tableThe Address Resolution Protocol (ARP) is supported on the devi
158 BigIron RX Series Configuration Guide53-1002484-04The IP packet flow7IP Route tableThe IP route table contains paths to IP destinations. The IP r
BigIron RX Series Configuration Guide 15953-1002484-04Basic IP parameters and defaults7There are two types of IP cache entries.1. Directly connected h
160 BigIron RX Series Configuration Guide53-1002484-04Basic IP parameters and defaults7 TABLE 46 IP global parameters Parameter Description Default
BigIron RX Series Configuration Guide 16153-1002484-04Basic IP parameters and defaults7Directed broadcast forwardingA directed broadcast is a packet c
xxiv BigIron RX Series Configuration Guide53-1002484-04Displaying OSPF information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .794Disp
162 BigIron RX Series Configuration Guide53-1002484-04Basic IP parameters and defaults7IP interface parametersTable 47 lists the interface-level IP pa
BigIron RX Series Configuration Guide 16353-1002484-04Configuring IP parameters7Configuring IP parametersSome parameters can be configured globally wh
164 BigIron RX Series Configuration Guide53-1002484-04Configuring IP parameters7Configuring IP addressesYou can configure an IP address on the followi
BigIron RX Series Configuration Guide 16553-1002484-04Configuring IP parameters7• ospf-passive – Disables adjacency formation with OSPF neighbors (bu
166 BigIron RX Series Configuration Guide53-1002484-04Configuring IP parameters7To add a virtual interface to a VLAN and configure an IP address on th
BigIron RX Series Configuration Guide 16753-1002484-04Configuring IP parameters7Configuring the default gatewayTo manage a device using Telnet or Secu
168 BigIron RX Series Configuration Guide53-1002484-04Configuring IP parameters7NOTEThe encapsulated packets sent on a GRE tunnel have the DF bit set.
BigIron RX Series Configuration Guide 16953-1002484-04Configuring IP parameters7NOTEEnsure a route to the tunnel destination exist on the tunnel sourc
170 BigIron RX Series Configuration Guide53-1002484-04Configuring IP parameters7Example of a GRE IP tunnel configurationIn this example, a GRE IP Tunn
BigIron RX Series Configuration Guide 17153-1002484-04Configuring IP parameters7BigIron RX(config-tnif-1)# ip address 10.10.3.2/24BigIron RX(config-tn
BigIron RX Series Configuration Guide xxv53-1002484-04Changing the default local preference . . . . . . . . . . . . . . . . . . . . . .841Changing th
172 BigIron RX Series Configuration Guide53-1002484-04Configuring IP parameters74 45.4.1.0/24 80.8.1.2 tunnel 2 0/0 D5 63.148.1.0/
BigIron RX Series Configuration Guide 17353-1002484-04Configuring IP parameters7• Manual tunnels provide static point-point connectivtyNOTEIPV6 over I
174 BigIron RX Series Configuration Guide53-1002484-04Configuring IP parameters7Clearing IPv6 tunnel statisticsYou can clear all IPv6 tunnel statistic
BigIron RX Series Configuration Guide 17553-1002484-04Configuring IP parameters7The <number> parameter indicates the tunnel interface number for
176 BigIron RX Series Configuration Guide53-1002484-04Configuring IP parameters7!interface tunnel 1 port-name ManualTunnel1 tunnel mode ipv6ip tunnel
BigIron RX Series Configuration Guide 17753-1002484-04Configuring IP parameters7BigIron RX(config)# ip dns domain-list company.com BigIron RX(config)#
178 BigIron RX Series Configuration Guide53-1002484-04Configuring IP parameters7Adding host names to the DNS cache tableDynamic cache entriesThe entri
BigIron RX Series Configuration Guide 17953-1002484-04Configuring IP parameters7Host Flag Address border2.pc0-0-b
180 BigIron RX Series Configuration Guide53-1002484-04Configuring IP parameters7 Displaying the polling intervalTo display the current polling interva
BigIron RX Series Configuration Guide 18153-1002484-04Configuring packet parameters7BigIron RX# traceroute nyc02 Syntax: traceroute <host-ip-addr&g
xxvi BigIron RX Series Configuration Guide53-1002484-04Filtering . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
182 BigIron RX Series Configuration Guide53-1002484-04Configuring packet parameters7• An Ethernet broadcast address.The entire IP packet, including th
BigIron RX Series Configuration Guide 18353-1002484-04Configuring packet parameters7BigIron RX(config)# interface ethernet 6/1BigIron RX(config-if-e10
184 BigIron RX Series Configuration Guide53-1002484-04Configuring packet parameters7• Use the same IP MTU size on all ports that will be supporting ju
BigIron RX Series Configuration Guide 18553-1002484-04Changing the router ID7Changing the router IDIn most configurations, a device has multiple IP ad
186 BigIron RX Series Configuration Guide53-1002484-04Specifying a single source interface for Telnet, TACACS, TACACS+, or RADIUS packets7Specifying a
BigIron RX Series Configuration Guide 18753-1002484-04Configuring an interface as the source for Syslog packets7BigIron RX(config)# interface ethernet
188 BigIron RX Series Configuration Guide53-1002484-04Configuring an interface as the source for Syslog packets7Syntax: [no] ip syslog source-interfac
BigIron RX Series Configuration Guide 18953-1002484-04Configuring ARP parameters7BigIron RX(config)# ip receive access-list 10 Syntax: [no] ip receive
190 BigIron RX Series Configuration Guide53-1002484-04Configuring ARP parameters7is reset to zero each time the device receives an ARP reply or ARP re
BigIron RX Series Configuration Guide 19153-1002484-04Configuring ARP parameters7BigIron RX(config)# arp-port-rate-limit 100This command configures th
BigIron RX Series Configuration Guide xxvii53-1002484-04Chapter 29 Configuring IS-IS (IPv4)IS-IS overview . . . . . . . . . . . . . . . . . . . . . .
192 BigIron RX Series Configuration Guide53-1002484-04Configuring ARP parameters7The example above displays the LP processed 50 packets every second a
BigIron RX Series Configuration Guide 19353-1002484-04Configuring ARP parameters7Enabling proxy ARPProxy ARP allows the device to answer ARP requests
194 BigIron RX Series Configuration Guide53-1002484-04Configuring ARP parameters7The <ip-addr> command specifies the IP address of the device th
BigIron RX Series Configuration Guide 19553-1002484-04Configuring ARP parameters7When a floating static ARP entry (Static ARP entry without the outgoi
196 BigIron RX Series Configuration Guide53-1002484-04Configuring forwarding parameters7The value parameter speocifies the amount of time before a nex
BigIron RX Series Configuration Guide 19753-1002484-04Configuring forwarding parameters7Changing the TTL thresholdThe TTL threshold prevents routing l
198 BigIron RX Series Configuration Guide53-1002484-04Configuring forwarding parameters7• Strict source routing – requires the packet to pass through
BigIron RX Series Configuration Guide 19953-1002484-04Configuring forwarding parameters7Disabling ICMP messagesThe device is enabled to reply to ICMP
200 BigIron RX Series Configuration Guide53-1002484-04Configuring forwarding parameters7NOTEDisabling an ICMP unreachable message type does not change
BigIron RX Series Configuration Guide 20153-1002484-04Configuring forwarding parameters7NOTEThe device forwards misdirected traffic to the appropriate
xxviii BigIron RX Series Configuration Guide53-1002484-04Configuring ISIS properties on an interface . . . . . . . . . . . . . . . . . .964Disabling
202 BigIron RX Series Configuration Guide53-1002484-04Configuring forwarding parameters7• The IP address and network mask for the route’s destination
BigIron RX Series Configuration Guide 20353-1002484-04Configuring forwarding parameters7This feature allows the device to adjust to changes in network
204 BigIron RX Series Configuration Guide53-1002484-04Configuring forwarding parameters7Syntax: ip route <dest-ip-addr> <dest-mask> | <
BigIron RX Series Configuration Guide 20553-1002484-04Configuring forwarding parameters7Syntax: ip route <ip-addr> <ip-mask> | <dest-i
206 BigIron RX Series Configuration Guide53-1002484-04Configuring forwarding parameters7Static route taggingStatic routes can be configured with a tag
BigIron RX Series Configuration Guide 20753-1002484-04Configuring forwarding parameters7• IP load sharing – If you configure more than one static rout
208 BigIron RX Series Configuration Guide53-1002484-04Configuring forwarding parameters7When the device has multiple routes to the same destination, t
BigIron RX Series Configuration Guide 20953-1002484-04Configuring forwarding parameters7FIGURE 11 Standard and null static routes to the same destinat
210 BigIron RX Series Configuration Guide53-1002484-04Configuring forwarding parameters7FIGURE 12 Standard and interface routes to the same destinatio
BigIron RX Series Configuration Guide 21153-1002484-04Configuring forwarding parameters7Configuring IP load sharingThe IP route table can contain more
BigIron RX Series Configuration Guide xxix53-1002484-04Chapter 32 Configuring Multi-Device Port AuthenticationHow multi-device port authentication wor
212 BigIron RX Series Configuration Guide53-1002484-04Configuring forwarding parameters7• Static IP route – 1 (applies to all static routes, including
BigIron RX Series Configuration Guide 21353-1002484-04Configuring forwarding parameters7Table 53 lists the default and configurable maximum numbers of
214 BigIron RX Series Configuration Guide53-1002484-04Configuring forwarding parameters7Response to path state changesIf one of the load-balanced path
BigIron RX Series Configuration Guide 21553-1002484-04Configuring forwarding parameters71 0.0.0.0/0 100.1.1.2 eth 7/1 1/1 S 0.0.0.0/0 100.1.2.2 eth 7/
216 BigIron RX Series Configuration Guide53-1002484-04Configuring forwarding parameters7Configuring IRDPThe device uses ICMP Router Discovery Protocol
BigIron RX Series Configuration Guide 21753-1002484-04Configuring forwarding parameters7BigIron RX(config)# ip irdpThis command enables IRDP on the IP
218 BigIron RX Series Configuration Guide53-1002484-04Configuring forwarding parameters7Configuring UDP broadcast and IP helper parametersSome applica
BigIron RX Series Configuration Guide 21953-1002484-04Configuring forwarding parameters7Enabling forwarding for a UDP applicationIf you want the devic
220 BigIron RX Series Configuration Guide53-1002484-04Configuring forwarding parameters7Configuring an IP helper addressTo forward a client’s broadcas
BigIron RX Series Configuration Guide 22153-1002484-04Configuring forwarding parameters7• Gateway address – The device places the IP address of the in
BigIron RX Series Configuration Guide iii53-1002484-04ContentsAbout This DocumentSupported hardware and software . . . . . . . . . . . . . . . . . .
xxx BigIron RX Series Configuration Guide53-1002484-04Configuring the MAC Port Security feature . . . . . . . . . . . . . . . . . 1030Enabling the MA
222 BigIron RX Series Configuration Guide53-1002484-04Displaying IP information7• If the hop count value is equal to or less than the maximum hop coun
BigIron RX Series Configuration Guide 22353-1002484-04Displaying IP information7Syntax: show ipNOTEThis command has additional options, which are expl
224 BigIron RX Series Configuration Guide53-1002484-04Displaying IP information7Displaying IP interface informationTo display IP interface information
BigIron RX Series Configuration Guide 22553-1002484-04Displaying IP information7To display detailed IP information for a specific interface, enter a c
226 BigIron RX Series Configuration Guide53-1002484-04Displaying IP information7Displaying ARP entriesYou can display the ARP cache and the static ARP
BigIron RX Series Configuration Guide 22753-1002484-04Displaying IP information7NOTEThe <ip-mask> parameter and <mask> parameter perform d
228 BigIron RX Series Configuration Guide53-1002484-04Displaying IP information7For information on the command syntax, refer to the syntax of the show
BigIron RX Series Configuration Guide 22953-1002484-04Displaying IP information7The show ip cache and show ip network commands entered on the rconsole
230 BigIron RX Series Configuration Guide53-1002484-04Displaying IP information7The show ip route command has been enhanced to include the elapse time
BigIron RX Series Configuration Guide 23153-1002484-04Displaying IP information7Notice that the route displayed in this example has “D” in the Type fi
BigIron RX Series Configuration Guide xxxi53-1002484-04Configuring 802.1x port security . . . . . . . . . . . . . . . . . . . . . . . . . 1052Configu
232 BigIron RX Series Configuration Guide53-1002484-04Displaying IP information7The following table lists the information displayed by the show ip ro
BigIron RX Series Configuration Guide 23353-1002484-04Displaying IP information7Syntax: show ip trafficThe show ip traffic command displays the follow
234 BigIron RX Series Configuration Guide53-1002484-04Displaying IP information7ICMP statisticsThe ICMP statistics are derived from RFC 792, “Internet
BigIron RX Series Configuration Guide 23553-1002484-04Displaying IP information7Displaying TCP traffic statisticsYou can use the show ip tcp traffic c
236 BigIron RX Series Configuration Guide53-1002484-04Displaying IP information7This field... Displays...active opens Number of TCP connection request
BigIron RX Series Configuration Guide 23753-1002484-04Chapter8Link AggregationIn this chapter•Link aggregation overview . . . . . . . . . . . . . . .
238 BigIron RX Series Configuration Guide53-1002484-04LAG formation rules8NOTEThe maximum number of trunk groups supported is 31.• A LAG must have its
BigIron RX Series Configuration Guide 23953-1002484-04LAG formation rules8• Make sure the device on the other end of the trunk link can support the sa
240 BigIron RX Series Configuration Guide53-1002484-04LAG load sharing8FIGURE 15 Examples of multi-slot, multi-port LAGLAG load sharingTraffic on BigI
BigIron RX Series Configuration Guide 24153-1002484-04Configuration of a LAG8• IPv4 UDP packets: source MAC address and destination MAC address, sourc
xxxii BigIron RX Series Configuration Guide53-1002484-04Chapter 36 Inspecting and Tracking DHCP PacketsTracking of DHCP assignments . . . . . . . . .
242 BigIron RX Series Configuration Guide53-1002484-04Configuration of a LAG8The keep-alive option specifies that the LAG with the name specified by t
BigIron RX Series Configuration Guide 24353-1002484-04Configuration of a LAG8Specifying the trunk threshold for a trunk GroupYou can configure the Big
244 BigIron RX Series Configuration Guide53-1002484-04Deploying a LAG8BigIron RX(config)# lag blue dynamicBigIron RX(config-lag-blue)# lacp-timeout sh
BigIron RX Series Configuration Guide 24553-1002484-04Deploying a LAG8Commands available under LAG once it is deployedOnce a LAG has been deployed, th
246 BigIron RX Series Configuration Guide53-1002484-04Deploying a LAG8Enabling ports within a LAGYou can enable an individual port within a trunk usin
BigIron RX Series Configuration Guide 24753-1002484-04Deploying a LAG8BigIron RX(config)# lag blue staticBigIron RX(config-lag-blue)# deployBigIron RX
248 BigIron RX Series Configuration Guide53-1002484-04Deploying a LAG8BigIron RX# show lag briefTotal number of LAGs: 4Total number of deploy
BigIron RX Series Configuration Guide 24953-1002484-04Deploying a LAG8TABLE 61 Show LAG informationThis field... Displays...Total number of LAGS The t
250 BigIron RX Series Configuration Guide53-1002484-04Deploying a LAG8Priori Indicates the Quality of Service (QoS) priority of the ports. The priori
BigIron RX Series Configuration Guide 25153-1002484-04Deploying a LAG8Displaying LAG statisticsYou can display LAG statistics for a BigIron RX switch
BigIron RX Series Configuration Guide xxxiii53-1002484-04Using FDP . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
252 BigIron RX Series Configuration Guide53-1002484-04Deploying a LAG8 GiantPkts 0 ShortPkts 0
BigIron RX Series Configuration Guide 25353-1002484-04Chapter9Configuring LLDPIn this chapter•Terms used in this chapter . . . . . . . . . . . . . . .
254 BigIron RX Series Configuration Guide53-1002484-04LLDP overview9LLDP overviewLLDP enables a station attached to an IEEE 802 LAN or MAN to advertis
BigIron RX Series Configuration Guide 25553-1002484-04General operating principles9• Ensures proper aging so only valid network device data is present
256 BigIron RX Series Configuration Guide53-1002484-04General operating principles9When an LLDP agent receives LLDP packets, it checks to ensure that
BigIron RX Series Configuration Guide 25753-1002484-04General operating principles9Brocade devices support the following Basic Management TLVs:• Chass
258 BigIron RX Series Configuration Guide53-1002484-04General operating principles9Brocade devices use Chassis ID subtype 4, the base MAC address of t
BigIron RX Series Configuration Guide 25953-1002484-04MIB support9The Port ID TLV format is shown below.FIGURE 18 Port ID TLV packet formatTTL valueTh
260 BigIron RX Series Configuration Guide53-1002484-04Syslog messages9Syslog messagesSyslog messages for LLDP provide management applications with inf
BigIron RX Series Configuration Guide 26153-1002484-04Configuring LLDP9• Cisco Discovery Protocol (CDP) and Foundry Discovery Protocol (FDP) run indep
xxxiv BigIron RX Series Configuration Guide53-1002484-04Chapter 41 Multiple Spanning Tree Protocol (MSTP) 802.1s802.1s Multiple Spanning Tree Protocol
262 BigIron RX Series Configuration Guide53-1002484-04Configuring LLDP9Use the [no] form of the command to disable the receipt and transmission of LLD
BigIron RX Series Configuration Guide 26353-1002484-04Configuring LLDP9The above commands change the LLDP operating mode on ports 2/7 and 2/8 from rec
264 BigIron RX Series Configuration Guide53-1002484-04Configuring LLDP9Use the show lldp command to view the configuration.Enabling LLDP SNMP notifica
BigIron RX Series Configuration Guide 26553-1002484-04Configuring LLDP9Changing the minimum time between LLDP transmissionsThe LLDP transmit delay tim
266 BigIron RX Series Configuration Guide53-1002484-04Configuring LLDP9Changing the holdtime multiplier for transmit TTLThe holdtime multiplier for tr
BigIron RX Series Configuration Guide 26753-1002484-04Configuring LLDP9• Port ID• TTLThe above are mandatory TLVs. For more information, see “Mandato
268 BigIron RX Series Configuration Guide53-1002484-04Configuring LLDP9Management addressThe management address is an IPv4 address that can be used to
BigIron RX Series Configuration Guide 26953-1002484-04Configuring LLDP9You can list all of the ports individually, use the keyword to to specify range
270 BigIron RX Series Configuration Guide53-1002484-04Configuring LLDP9The system description will appear similar to the following on the remote devic
BigIron RX Series Configuration Guide 27153-1002484-04Configuring LLDP9802.1 capabilitiesExcept for the VLAN name, the Brocade device will advertise t
BigIron RX Series Configuration Guide xxxv53-1002484-04Enabling IPv6 routing . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .1170
272 BigIron RX Series Configuration Guide53-1002484-04Configuring LLDP9Untagged VLAN ID The port VLAN ID TLV advertises the Port VLAN Identifier (PVID
BigIron RX Series Configuration Guide 27353-1002484-04Configuring LLDP9Syntax: [no] lldp advertise link-aggregation ports ethernet <slotnum/portnum
274 BigIron RX Series Configuration Guide53-1002484-04Configuring LLDP9You can list all of the ports individually, use the keyword to to specify range
BigIron RX Series Configuration Guide 27553-1002484-04Configuring LLDP9The following shows an example report.Syntax: show lldpThe following table desc
276 BigIron RX Series Configuration Guide53-1002484-04Configuring LLDP9Syntax: show lldp statisticsNOTEYou can reset LLDP statistics using the CLI com
BigIron RX Series Configuration Guide 27753-1002484-04Configuring LLDP9LLDP neighborsThe show lldp neighbors command displays a list of the current LL
278 BigIron RX Series Configuration Guide53-1002484-04Configuring LLDP9LLDP neighbors detailThe show lldp neighbors detail command displays the LLDP a
BigIron RX Series Configuration Guide 27953-1002484-04Configuring LLDP9Syntax: show lldp neighbors detail [ports ethernet <slotnum/portnum> | a
280 BigIron RX Series Configuration Guide53-1002484-04Resetting LLDP statistics9Resetting LLDP statisticsTo reset LLDP statistics, enter the clear lld
BigIron RX Series Configuration Guide 28153-1002484-04Chapter10Configuring Uni-Directional Link DetectionIn this chapter•Uni-Directional Link Detectio
xxxvi BigIron RX Series Configuration Guide53-1002484-04Configuring IPv6 neighbor discovery . . . . . . . . . . . . . . . . . . . . . . 1183Neighbor
282 BigIron RX Series Configuration Guide53-1002484-04Configuration considerations10first keep-alive message from the other end. In the active state,
BigIron RX Series Configuration Guide 28353-1002484-04Displaying UDLD information10Changing the keepalive retriesYou can change the maximum number of
284 BigIron RX Series Configuration Guide53-1002484-04Displaying UDLD information10BigIron RX(config)#sh link-keepaliveTotal link-keepalive enabled po
BigIron RX Series Configuration Guide 28553-1002484-04Displaying UDLD information10Syntax: show link-keepalive ethernet <slot/port>Displaying in
286 BigIron RX Series Configuration Guide53-1002484-04Clearing UDLD statistics10 Not member of any configured trunks No port name MTU 1522 bytes, e
BigIron RX Series Configuration Guide 28753-1002484-04Chapter11VLANsIn this chapter•Overview of Virtual Local Area Networks (VLANs) . . . . . . . . .
288 BigIron RX Series Configuration Guide53-1002484-04Overview of Virtual Local Area Networks (VLANs)11Tagged ports allow the device to add a four-byt
BigIron RX Series Configuration Guide 28953-1002484-04Overview of Virtual Local Area Networks (VLANs)11Protocol-based VLANsInterfaces that belong to a
290 BigIron RX Series Configuration Guide53-1002484-04VLAN configuration rules11VLAN configuration rulesTo create any type of VLAN on a device, Layer
BigIron RX Series Configuration Guide 29153-1002484-04Configuring port-based VLANs11• When both port and protocol-based VLANs are configured on a give
BigIron RX Series Configuration Guide xxxvii53-1002484-04Address family configuration level . . . . . . . . . . . . . . . . . . . . . . . . 1220Confi
292 BigIron RX Series Configuration Guide53-1002484-04Configuring port-based VLANs11The <vlan-name> variable specifies the VLAN name and can be
BigIron RX Series Configuration Guide 29353-1002484-04Configuring port-based VLANs11Considerations when configuring VLAN byte accounting• VLAN byte ac
294 BigIron RX Series Configuration Guide53-1002484-04Configuring port-based VLANs11Maximum number of rate limiting policies and VLANs with byte accou
BigIron RX Series Configuration Guide 29553-1002484-04Configuring protocol-based VLANs11Assigning a different ID to the default VLANAs stated above, b
296 BigIron RX Series Configuration Guide53-1002484-04Configuring virtual routing interfaces11BigIron RX(config-vlan-group-ipv6-proto)# static e 1/1 e
BigIron RX Series Configuration Guide 29753-1002484-04Configuring virtual routing interfaces11The device can locally route IP packets between VLANs th
298 BigIron RX Series Configuration Guide53-1002484-04Configuring virtual routing interfaces11BigIron RX(config-vlan-3)# exitBigIron RX(config)# inter
BigIron RX Series Configuration Guide 29953-1002484-04VLAN groups11When designing an ISR network, pay attention to your use of virtual routing interfa
300 BigIron RX Series Configuration Guide53-1002484-04VLAN groups11Use 1 – 32 for <num> parameter with the vlan-group command specifies the VLAN
BigIron RX Series Configuration Guide 30153-1002484-04Configuring super aggregated VLANs11BigIron RX# show vlan-group 10Configured VLAN-Group entries
xxxviii BigIron RX Series Configuration Guide53-1002484-04Chapter 48 IPv6 Access Control Lists (ACLs)IPv6 ACLs . . . . . . . . . . . . . . . . . . . .
302 BigIron RX Series Configuration Guide53-1002484-04Configuring super aggregated VLANs11FIGURE 23 Conceptual model of the super aggregated VLAN appl
BigIron RX Series Configuration Guide 30353-1002484-04Configuring super aggregated VLANs11FIGURE 24 Example super aggregated VLAN applicationFigure 22
304 BigIron RX Series Configuration Guide53-1002484-04Configuring super aggregated VLANs11To configure aggregated VLANs, configure tagged and untagged
BigIron RX Series Configuration Guide 30553-1002484-04Configuring super aggregated VLANs11• Configure a VLAN tag type (tag ID) that is different than
306 BigIron RX Series Configuration Guide53-1002484-04Configuring super aggregated VLANs11BigIron RX-A(config-vlan-102)# untagged ethernet 1/2BigIron
BigIron RX Series Configuration Guide 30753-1002484-04Configuring super aggregated VLANs11BigIron RX-C(config-vlan-102)# tagged ethernet 4/1BigIron RX
308 BigIron RX Series Configuration Guide53-1002484-04Configuring 802.1q-in-q tagging11BigIron RX-F(config)# vlan 101 BigIron RX-F(config-vlan-101)# t
BigIron RX Series Configuration Guide 30953-1002484-04Configuring 802.1q-in-q tagging11Figure 26 shows an example application of the 802.1Q-in-Q enhan
310 BigIron RX Series Configuration Guide53-1002484-04Configuring 802.1q-in-q tagging11Note that since ports 11 and 12 belong to the port region 1 – 1
BigIron RX Series Configuration Guide 31153-1002484-04Configuring 802.1q tag-type translation11Configuring 802.1q tag-type translationThe introduction
BigIron RX Series Configuration Guide xxxix53-1002484-04Chapter 50 Configuring IPv6 Multicast FeaturesIPv6 PIM sparse . . . . . . . . . . . . . . . .
312 BigIron RX Series Configuration Guide53-1002484-04Configuring 802.1q tag-type translation11FIGURE 29 802.1q tag-type translation configuration exa
BigIron RX Series Configuration Guide 31353-1002484-04Configuring 802.1q tag-type translation11• If you configure a port with an 802.1q tag-type, the
314 BigIron RX Series Configuration Guide53-1002484-04Private VLANs11Private VLANsA private VLAN is a VLAN that has the properties of standard Layer 2
BigIron RX Series Configuration Guide 31553-1002484-04Private VLANs11• Isolated – Broadcasts and unknown unicasts received on isolated ports are sent
316 BigIron RX Series Configuration Guide53-1002484-04Private VLANs11• A primary VLAN can have multiple ports. All these ports are active, but the por
BigIron RX Series Configuration Guide 31753-1002484-04Private VLANs11BigIron RX(config)# vlan 901BigIron RX(config-vlan-901)# untagged ethernet 3/5 to
318 BigIron RX Series Configuration Guide53-1002484-04Private VLANs11Enabling broadcast, multicast or unknown unicast traffic to the private VLANTo en
BigIron RX Series Configuration Guide 31953-1002484-04Other VLAN features11Other VLAN featuresAllocating memory for more VLANs or virtual routing inte
320 BigIron RX Series Configuration Guide53-1002484-04Other VLAN features11• You cannot enable this feature on the designated management VLAN for the
BigIron RX Series Configuration Guide 32153-1002484-04Other VLAN features11Use the multicast parameter to specify CPU flooding for broadcast and multi
iv BigIron RX Series Configuration Guide53-1002484-04Accessing the CLI . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
xl BigIron RX Series Configuration Guide53-1002484-04Configuring the Syslog service . . . . . . . . . . . . . . . . . . . . . . . . . . . 1381Display
322 BigIron RX Series Configuration Guide53-1002484-04Displaying VLAN information11Displaying VLAN informationAfter you configure the VLANs, you can v
BigIron RX Series Configuration Guide 32353-1002484-04Displaying VLAN information11Syntax: show vlan ethernet <slot-number>/<port-number>
324 BigIron RX Series Configuration Guide53-1002484-04Displaying VLAN information11The output shows the following information.Displaying VLAN group in
BigIron RX Series Configuration Guide 32553-1002484-04Transparent firewall mode11Transparent firewall modeThe Transparent Firewall mode allows the dev
326 BigIron RX Series Configuration Guide53-1002484-04Transparent firewall mode11
BigIron RX Series Configuration Guide 32753-1002484-04Chapter12Configuring Spanning Tree ProtocolIn this chapter•IEEE 802.1D Spanning Tree Protocol (S
328 BigIron RX Series Configuration Guide53-1002484-04IEEE 802.1D Spanning Tree Protocol (STP)12• Individual VLAN – Affects all ports within the speci
BigIron RX Series Configuration Guide 32953-1002484-04IEEE 802.1D Spanning Tree Protocol (STP)12Default STP bridge and port parametersTable 75 lists t
330 BigIron RX Series Configuration Guide53-1002484-04IEEE 802.1D Spanning Tree Protocol (STP)12BigIron RX(config)# vlan 20BigIron RX(config-vlan-20)#
BigIron RX Series Configuration Guide 33153-1002484-04IEEE 802.1D Spanning Tree Protocol (STP)12Once the port stops receiving superior BPDUs, root pro
BigIron RX Series Configuration Guide xli53-1002484-04FDP/CDP . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
332 BigIron RX Series Configuration Guide53-1002484-04IEEE 802.1D Spanning Tree Protocol (STP)12Reconfiguring the timeout periodThe timeout period tim
BigIron RX Series Configuration Guide 33353-1002484-04IEEE 802.1D Spanning Tree Protocol (STP)12The spanning-tree protocol detects and eliminates logi
334 BigIron RX Series Configuration Guide53-1002484-04IEEE 802.1D Spanning Tree Protocol (STP)12• All the global and interface STP settings• Detailed
BigIron RX Series Configuration Guide 33553-1002484-04IEEE 802.1D Spanning Tree Protocol (STP)12TABLE 77 CLI display of STP informationThis field... D
336 BigIron RX Series Configuration Guide53-1002484-04IEEE 802.1D Spanning Tree Protocol (STP)12Displaying detailed STP information for each interface
BigIron RX Series Configuration Guide 33753-1002484-04IEEE 802.1D Spanning Tree Protocol (STP)12If a port is disabled, the only information shown by t
338 BigIron RX Series Configuration Guide53-1002484-04IEEE 802.1D Spanning Tree Protocol (STP)12TABLE 78 CLI display of detailed STP information for p
BigIron RX Series Configuration Guide 33953-1002484-04IEEE 802.1D Spanning Tree Protocol (STP)12Displaying STP information for the specified Ethernet
340 BigIron RX Series Configuration Guide53-1002484-04IEEE 802.1D Spanning Tree Protocol (STP)12Syntax: show xstp ethernet <slot/port>The ethern
BigIron RX Series Configuration Guide 34153-1002484-04IEEE 802.1D Spanning Tree Protocol (STP)12TABLE 79 CLI display of STP information for the specif
xlii BigIron RX Series Configuration Guide53-1002484-04SNMP . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
342 BigIron RX Series Configuration Guide53-1002484-04IEEE Single Spanning Tree (SSTP)12--------------------------------------------------------------
BigIron RX Series Configuration Guide 34353-1002484-04IEEE Single Spanning Tree (SSTP)12SSTP defaultsSSTP is disabled by default. When you enable the
344 BigIron RX Series Configuration Guide53-1002484-04IEEE Single Spanning Tree (SSTP)12Here is the syntax for the global STP parameters.Syntax: [no]
BigIron RX Series Configuration Guide 34553-1002484-04PVST/PVST+ compatibility12PVST/PVST+ compatibilityBrocade’s support for Cisco's Per VLAN Sp
346 BigIron RX Series Configuration Guide53-1002484-04PVST/PVST+ compatibility12For the port to also support the other VLANs (the PVST+ VLANs) in tagg
BigIron RX Series Configuration Guide 34753-1002484-04PVST/PVST+ compatibility12Syntax: show span pvst-modeThis command displays the following informa
348 BigIron RX Series Configuration Guide53-1002484-04PVST/PVST+ compatibility12These commands configure a VLAN group containing VLANs 2, 3, and 4, ad
BigIron RX Series Configuration Guide 34953-1002484-04SuperSpan™12Note that when VLAN 1 is not the default VLAN, the ports must have an untagged VLAN
350 BigIron RX Series Configuration Guide53-1002484-04SuperSpan™12In this example, the SP network contains two devices that are running SuperSpan. Th
BigIron RX Series Configuration Guide 35153-1002484-04SuperSpan™12Each Brocade device that is configured for SuperSpan forwards the BPDU using the cha
BigIron RX Series Configuration Guide xliii53-1002484-04About This DocumentIn this chapter•Supported hardware and software. . . . . . . . . . . . . .
352 BigIron RX Series Configuration Guide53-1002484-04SuperSpan™12Mixing single STP and multiple spanning treesYou can use SuperSpan in any of the fol
BigIron RX Series Configuration Guide 35353-1002484-04SuperSpan™12In the above example, STP in VLAN 10 will select R10 as the root bridge and make 1/1
354 BigIron RX Series Configuration Guide53-1002484-04SuperSpan™12Customer uses single STP but SP uses multiple spanning treesFigure 38 shows an examp
BigIron RX Series Configuration Guide 35553-1002484-04SuperSpan™12FIGURE 39 Customer and SP using single STPIn this setup, both the customer and SP ne
356 BigIron RX Series Configuration Guide53-1002484-04SuperSpan™12These commands configure two interfaces on the Brocade device as SuperSpan boundary
BigIron RX Series Configuration Guide 35753-1002484-04SuperSpan™12In this example, the device has two SuperSpan customer IDs.Syntax: show superspan [c
358 BigIron RX Series Configuration Guide53-1002484-04SuperSpan™12
BigIron RX Series Configuration Guide 35953-1002484-04Chapter13Configuring Rapid Spanning Tree ProtocolIn this chapter•Overview of Rapid Spanning Tree
360 BigIron RX Series Configuration Guide53-1002484-04Overview of Rapid Spanning Tree Protocol13RSTP algorithm uses this information to determine if t
BigIron RX Series Configuration Guide 36153-1002484-04Overview of Rapid Spanning Tree Protocol13The topology in Figure 40 contains four bridges. Switc
xliv BigIron RX Series Configuration Guide53-1002484-04Foundry Discovery Protocol (FDP) Enables Brocade devices to advertise themselves to other Broca
362 BigIron RX Series Configuration Guide53-1002484-04Edge ports and edge port roles13Ports Switch 4Switch 4 is not directly connected to the root bri
BigIron RX Series Configuration Guide 36353-1002484-04Point-to-point ports13Point-to-point portsTo take advantage of the RSTP features, ports on an RS
364 BigIron RX Series Configuration Guide53-1002484-04Edge port and non-edge port states13If a port on one bridge has a Designated role and that port
BigIron RX Series Configuration Guide 36553-1002484-04State machines13• Topology Change – This state machine detects, generates, and propagates topolo
366 BigIron RX Series Configuration Guide53-1002484-04State machines13• Proposing – The Designated port on the root bridge sends an RST BPDU packet to
BigIron RX Series Configuration Guide 36753-1002484-04State machines13FIGURE 44 Sync stage• Synced – Once the Designated port changes into a discardin
368 BigIron RX Series Configuration Guide53-1002484-04State machines13FIGURE 45 Synced stage• Agreed – The Root port sends back an RST BPDU containing
BigIron RX Series Configuration Guide 36953-1002484-04State machines13FIGURE 46 Agree stageAt this point, the handshake mechanism is complete between
370 BigIron RX Series Configuration Guide53-1002484-04State machines13FIGURE 47 Addition of a new root bridgeThe handshake that occurs between Switch
BigIron RX Series Configuration Guide 37153-1002484-04State machines13FIGURE 48 New root bridge sending a proposal flag• Sync and Reroot – The Root p
BigIron RX Series Configuration Guide xlv53-1002484-04Layer 2 Hitless failover Provides automatic failover from the active management module to the s
372 BigIron RX Series Configuration Guide53-1002484-04State machines13FIGURE 49 Sync and reroot• Sync and Rerooted – When the ports on Switch 200 have
BigIron RX Series Configuration Guide 37353-1002484-04State machines13FIGURE 50 Sync and rerooted• Synced and Agree – When all the ports on the bridge
374 BigIron RX Series Configuration Guide53-1002484-04State machines13FIGURE 51 Rerooted,synced, and agreedThe old Root port on Switch 200 becomes an
BigIron RX Series Configuration Guide 37553-1002484-04Convergence in a simple topology13FIGURE 52 Handshake completed after election of new root portR
376 BigIron RX Series Configuration Guide53-1002484-04Convergence in a simple topology13NOTEThe rapid convergence will not occur on ports connected to
BigIron RX Series Configuration Guide 37753-1002484-04Convergence in a simple topology13FIGURE 54 Simple Layer 2 topology The point-to-point connectio
378 BigIron RX Series Configuration Guide53-1002484-04Convergence in a simple topology13The Port2/Switch 2 bridge also sends an RST BPDU with an agree
BigIron RX Series Configuration Guide 37953-1002484-04Convergence in a simple topology13FIGURE 56 Link failure in the topologySwitch 1 sets its Port2
380 BigIron RX Series Configuration Guide53-1002484-04Convergence in a simple topology13When Port2/Switch 2 receives the RST BPDUs, RSTP algorithm det
BigIron RX Series Configuration Guide 38153-1002484-04Convergence in a complex RSTP topology13Convergence in a complex RSTP topologyThe following is a
xlvi BigIron RX Series Configuration Guide53-1002484-04Unsupported featuresThe following features are not supported in release 02.9.00:• AppleTalk• IP
382 BigIron RX Series Configuration Guide53-1002484-04Convergence in a complex RSTP topology13Next Switch 2 sends RST BPDUs with a proposal flag to Po
BigIron RX Series Configuration Guide 38353-1002484-04Convergence in a complex RSTP topology13FIGURE 58 Active Layer 2 path in complex topologyPropaga
384 BigIron RX Series Configuration Guide53-1002484-04Convergence in a complex RSTP topology13FIGURE 59 Beginning of topology change noticeSwitch 2 th
BigIron RX Series Configuration Guide 38553-1002484-04Convergence in a complex RSTP topology13FIGURE 60 Sending TCN to bridges connected to Switch 2Th
386 BigIron RX Series Configuration Guide53-1002484-04Compatibility of RSTP with 802.1D13FIGURE 61 Completing the TCN propagationCompatibility of RSTP
BigIron RX Series Configuration Guide 38753-1002484-04Configuring RSTP parameters13For example, in Figure 62, Switch 10 and Switch 30 receive legacy B
388 BigIron RX Series Configuration Guide53-1002484-04Configuring RSTP parameters13BigIron RX(config)# vlan 10BigIron RX(config-vlan-10)# rstpSyntax:
BigIron RX Series Configuration Guide 38953-1002484-04Configuring RSTP parameters13The max-age <value> parameter specifies the amount of time th
390 BigIron RX Series Configuration Guide53-1002484-04Configuring RSTP parameters13The priority <value> parameter specifies the preference that
BigIron RX Series Configuration Guide 39153-1002484-04Configuring RSTP parameters13In addition, Fast Port Span enhances overall network performance in
BigIron RX Series Configuration Guide xlvii53-1002484-04• MPLS• NAT• RARP• VLAN translation• Subnet VLANs• Source IP Port SecurityWhat’s new in this d
392 BigIron RX Series Configuration Guide53-1002484-04Configuring RSTP parameters13BigIron RX(config)# fast port-spanBigIron RX(config)# write memoryE
BigIron RX Series Configuration Guide 39353-1002484-04Configuring RSTP parameters13You can use the Fast Uplink feature on a Brocade device deployed as
394 BigIron RX Series Configuration Guide53-1002484-04Displaying RSTP information13Using the CLITo configure a group of ports for Fast Uplink Span, en
BigIron RX Series Configuration Guide 39553-1002484-04Displaying RSTP information13Syntax: show rstp [vlan <vlan-id>]The vlan <vlan-id> pa
396 BigIron RX Series Configuration Guide53-1002484-04Displaying RSTP information13Designated Bridge Identifier The bridge from where the root informa
BigIron RX Series Configuration Guide 39753-1002484-04Displaying RSTP information13To display detailed information about RSTP, enter the following com
398 BigIron RX Series Configuration Guide53-1002484-04Displaying RSTP information13forceVersion the configured version of the bridge:• 0 – The bridge
BigIron RX Series Configuration Guide 39953-1002484-04Displaying RSTP information13Displaying RSTP information for the specified Ethernet interfaceTo
400 BigIron RX Series Configuration Guide53-1002484-04Displaying RSTP information13Syntax: show xstp ethernet <slot/port>The ethernet <slot/p
BigIron RX Series Configuration Guide 40153-1002484-04Displaying RSTP information13Role The current role of the port:• Root • Designated • Alternate
xlviii BigIron RX Series Configuration Guide53-1002484-04Enhancements in release 02.9.00Enhancements in release 02.8.00Counter support to identify por
402 BigIron RX Series Configuration Guide53-1002484-04Displaying RSTP information for the blocked interfaces13Displaying RSTP information for the bloc
BigIron RX Series Configuration Guide 40353-1002484-04Displaying RSTP information for the blocked interfaces13Role The current role of the port:• Root
404 BigIron RX Series Configuration Guide53-1002484-04Displaying RSTP information for the blocked interfaces13
BigIron RX Series Configuration Guide 40553-1002484-04Chapter14Metro Ring Protocol (MRP) Phase 1 and 2In this chapter•Metro Ring Protocol (MRP) phase
406 BigIron RX Series Configuration Guide53-1002484-04Metro Ring Protocol (MRP) phase 114FIGURE 63 Metro ring – normal stateThe ring in this example c
BigIron RX Series Configuration Guide 40753-1002484-04MRP rings without shared interfaces14MRP rings without shared interfacesMRP Phase 1 allows you t
408 BigIron RX Series Configuration Guide53-1002484-04Ring initialization14FIGURE 65 Metro ring – initial stateMRP uses Ring Health Packets (RHPs) to
BigIron RX Series Configuration Guide 40953-1002484-04Ring initialization14When MRP is enabled, all ports begin in the Preforwarding state. The prima
410 BigIron RX Series Configuration Guide53-1002484-04How ring breaks are detected and healed14How ring breaks are detected and healedFigure 67 Shows
BigIron RX Series Configuration Guide 41153-1002484-04How ring breaks are detected and healed14When the broken link is repaired, the link’s interfaces
BigIron RX Series Configuration Guide xlix53-1002484-04Enhanced command to display stp/rstp/mstp information for a particular Ethernet interfaceThe sh
412 BigIron RX Series Configuration Guide53-1002484-04Master VLANs and customer VLANs in a topology group145. RHP packets continue to be sent on the p
BigIron RX Series Configuration Guide 41353-1002484-04Master VLANs and customer VLANs in a topology group14FIGURE 69 Metro ring – ring VLAN and custom
414 BigIron RX Series Configuration Guide53-1002484-04Configuring MRP14• The master VLAN must contain the ring interfaces. The ports must be tagged,
BigIron RX Series Configuration Guide 41553-1002484-04Configuring MRP14Adding an MRP ring to a VLANNOTEIf you plan to use a topology group to add VLAN
416 BigIron RX Series Configuration Guide53-1002484-04MRP phase 214Changing the hello and preforwarding timesYou also can change the RHP hello time an
BigIron RX Series Configuration Guide 41753-1002484-04MRP phase 214In MRP Phase 1, a node can have multiple MRP rings, but the rings cannot share the
418 BigIron RX Series Configuration Guide53-1002484-04Ring initialization for shared interfaces14On each node that will participate in the ring, you s
BigIron RX Series Configuration Guide 41953-1002484-04Ring initialization for shared interfaces14How ring breaks are detected and healed between share
420 BigIron RX Series Configuration Guide53-1002484-04Ring initialization for shared interfaces14If the port is a tunnel port, MRP checks the priority
BigIron RX Series Configuration Guide 42153-1002484-04Ring initialization for shared interfaces14When the RHP packet from Ring 2 reached S2, it was al
BigIron RX Series Configuration Guide v53-1002484-04Flash memory and PCMCIA flash card file management commands. . . . . . . . . . . . . . . . . . . .
l BigIron RX Series Configuration Guide53-1002484-04Enhancements in release 02.7.03TABLE 5 Summary of enhancements in release 02.7.03Enhancement Descr
422 BigIron RX Series Configuration Guide53-1002484-04Using MRP diagnostics14Configuring MRP with shared interfacesMRP Phase 2 allows you to enter com
BigIron RX Series Configuration Guide 42353-1002484-04Displaying MRP information14NOTEThis command is valid only on the master node.Displaying MRP dia
424 BigIron RX Series Configuration Guide53-1002484-04Displaying MRP information14Displaying topology group informationTo display topology group infor
BigIron RX Series Configuration Guide 42553-1002484-04MRP CLI example14MRP CLI exampleThe following examples show the CLI commands required to impleme
426 BigIron RX Series Configuration Guide53-1002484-04MRP CLI example14Commands on switch A (master node)The following commands configure a VLAN for t
BigIron RX Series Configuration Guide 42753-1002484-04MRP CLI example14BigIron RX(config)# vlan 40BigIron RX(config-vlan-40)# tag ethernet 1/1 to 1/2B
428 BigIron RX Series Configuration Guide53-1002484-04MRP CLI example14
BigIron RX Series Configuration Guide 42953-1002484-04Chapter15Virtual Switch Redundancy Protocol (VSRP)In this chapter•Overview of Virtual Switch Red
430 BigIron RX Series Configuration Guide53-1002484-04Overview of Virtual Switch Redundancy Protocol (VSRP)15FIGURE 75 VSRP mesh – redundant paths for
BigIron RX Series Configuration Guide 43153-1002484-04Overview of Virtual Switch Redundancy Protocol (VSRP)15Layer 2 and Layer 3 redundancyYou can con
BigIron RX Series Configuration Guide li53-1002484-04Enhancements in release 02.7.02MAC Port Security The MAC Port Security feature has been updated
432 BigIron RX Series Configuration Guide53-1002484-04Overview of Virtual Switch Redundancy Protocol (VSRP)15FIGURE 76 VSRP priorityHowever, if one of
BigIron RX Series Configuration Guide 43353-1002484-04Overview of Virtual Switch Redundancy Protocol (VSRP)15You can reduce the sensitivity of a VSRP
434 BigIron RX Series Configuration Guide53-1002484-04Overview of Virtual Switch Redundancy Protocol (VSRP)15FIGURE 79 Track port priorityIn Figure 79
BigIron RX Series Configuration Guide 43553-1002484-04Configuring basic VSRP parameters15• If the port number is the same as the port that previously
436 BigIron RX Series Configuration Guide53-1002484-04Enabling Layer 3 VSRP15BigIron RX(config-vlan-200-vrid-1)# enableSyntax: [no] enableorSyntax: [n
BigIron RX Series Configuration Guide 43753-1002484-04Configuring optional VSRP parameters15Syntax: [no] vsrp auth-type no-auth | simple-text-auth <
438 BigIron RX Series Configuration Guide53-1002484-04Configuring optional VSRP parameters15BigIron RX(config-vlan-200-vrid-1)# ip-address 10.10.10.1S
BigIron RX Series Configuration Guide 43953-1002484-04Configuring optional VSRP parameters15The "fast-start ports:" line lists the ports tha
440 BigIron RX Series Configuration Guide53-1002484-04Configuring optional VSRP parameters15• Backup Hello interval• Hold-down intervalEach Backup sav
BigIron RX Series Configuration Guide 44153-1002484-04Configuring optional VSRP parameters15The <num> parameter specifies the TTL and can be fro
lii BigIron RX Series Configuration Guide53-1002484-04Enhancements in release 02.7.00Limited/Fixed Boot Code Book: Foundry BigIron RX Configuration Gu
442 BigIron RX Series Configuration Guide53-1002484-04Configuring optional VSRP parameters15To change the Backup Hello interval, enter a command such
BigIron RX Series Configuration Guide 44353-1002484-04Configuring optional VSRP parameters15Specifying a track portYou can configure the VRID on one i
444 BigIron RX Series Configuration Guide53-1002484-04Clearing VSRP information15NOTEAll trunk ports must have the same delayed-link-down-event config
BigIron RX Series Configuration Guide 44553-1002484-04VSRP and MRP signaling15If a VSRP failover from master to backup occurs, VSRP needs to inform MR
446 BigIron RX Series Configuration Guide53-1002484-04Displaying VSRP information15FIGURE 83 New path established There are no CLI commands used to co
BigIron RX Series Configuration Guide 44753-1002484-04Displaying VSRP information15This display shows the following information when you use the vrid
448 BigIron RX Series Configuration Guide53-1002484-04Displaying VSRP information15Displaying a summary of VSRP informationTo obtain a summary of VSRP
BigIron RX Series Configuration Guide 44953-1002484-04Displaying VSRP information15BigIron RX# show vsrp briefVLAN VRID ConfPri CurPri P State PeerM
450 BigIron RX Series Configuration Guide53-1002484-04Displaying VSRP information15Displaying the active interfaces for a VRIDOn a VSRP-aware device,
BigIron RX Series Configuration Guide 45153-1002484-04Chapter16Topology GroupsIn this chapter•Topology overview . . . . . . . . . . . . . . . . . . .
BigIron RX Series Configuration Guide liii53-1002484-04True Remote Console The new rconsole feature provides a true connection to the MP/LP console p
452 BigIron RX Series Configuration Guide53-1002484-04Master VLANs and customer VLANs in MRP16• Member VLANs – The member VLANs are additional VLANs t
BigIron RX Series Configuration Guide 45353-1002484-04Configuring a topology group16• If you add a new master VLAN to a topology group that already ha
454 BigIron RX Series Configuration Guide53-1002484-04Displaying topology group information16Displaying topology group informationThe following sectio
BigIron RX Series Configuration Guide 45553-1002484-04Chapter17Configuring VRRP and VRRPEIn this chapter•Overview of VRRP . . . . . . . . . . . . . .
456 BigIron RX Series Configuration Guide53-1002484-04Overview of VRRP17FIGURE 84 Router1 is Host1’s default gateway but is a single point of failureA
BigIron RX Series Configuration Guide 45753-1002484-04Overview of VRRP17FIGURE 85 Router1 and Router2 are configured as a VRRP virtual router to provi
458 BigIron RX Series Configuration Guide53-1002484-04Overview of VRRP17Virtual routers use VRID Hello messages to determine if a Master router is ava
BigIron RX Series Configuration Guide 45953-1002484-04Overview of VRRP17Figure 85 on page 457, Router1’s priority changes from 255 to 20. One of the p
460 BigIron RX Series Configuration Guide53-1002484-04Overview of VRRPE17Overview of VRRPEVRRPE is Brocade’s proprietary version of VRRP that overcome
BigIron RX Series Configuration Guide 46153-1002484-04Overview of VRRPE17• VRRPE reduces the priority of a VRRPE interface by the amount of a tracked
liv BigIron RX Series Configuration Guide53-1002484-04Enhancements in release 02.6.00SNMP MIBs for Layer 2 ACLs and FiltersThe following MIB tables ha
462 BigIron RX Series Configuration Guide53-1002484-04VRRP and VRRPE parameters17Similarly, Router2 is the master for VRID 2 (backup priority = 110) a
BigIron RX Series Configuration Guide 46353-1002484-04VRRP and VRRPE parameters17Authentication type The type of authentication the VRRP or VRRPE rout
464 BigIron RX Series Configuration Guide53-1002484-04Configuring parameters specific to VRRP17Configuring parameters specific to VRRPVRRP is configur
BigIron RX Series Configuration Guide 46553-1002484-04Configuring parameters specific to VRRP17Configuring basic VRRP parametersTo implement a simple
466 BigIron RX Series Configuration Guide53-1002484-04Configuring parameters specific to VRRPE17• The Dead interval must be set to the same value on b
BigIron RX Series Configuration Guide 46753-1002484-04Configuring additional VRRP and VRRPE parameters17Configuring additional VRRP and VRRPE paramete
468 BigIron RX Series Configuration Guide53-1002484-04Configuring additional VRRP and VRRPE parameters17The auth-type simple-text-auth <auth-data&g
BigIron RX Series Configuration Guide 46953-1002484-04Configuring additional VRRP and VRRPE parameters17Dead intervalThe Dead interval is the number o
470 BigIron RX Series Configuration Guide53-1002484-04Configuring additional VRRP and VRRPE parameters17Router1(config)# interface ethernet 1/6Router1
BigIron RX Series Configuration Guide 47153-1002484-04Displaying VRRP and VRRPE information17To disable preemption on a Backup, enter commands such as
BigIron RX Series Configuration Guide lv53-1002484-04Rate Limiting ARP Packets This new feature allows you to rate-limit ARP traffic that is destined
472 BigIron RX Series Configuration Guide53-1002484-04Displaying VRRP and VRRPE information17• Summary configuration and status information• Detailed
BigIron RX Series Configuration Guide 47353-1002484-04Displaying VRRP and VRRPE information17Displaying detailed informationTo display detailed inform
474 BigIron RX Series Configuration Guide53-1002484-04Displaying VRRP and VRRPE information17Syntax: show ip vrrp-extended [brief | ethernet <slot&
BigIron RX Series Configuration Guide 47553-1002484-04Displaying VRRP and VRRPE information17virtual MAC The virtual IP MAC address that this virtual
476 BigIron RX Series Configuration Guide53-1002484-04Displaying VRRP and VRRPE information17Displaying statisticsTo display VRRP statistics, enter th
BigIron RX Series Configuration Guide 47753-1002484-04Configuration examples17 . received packets dropped by owner = 0 . received packets with ip tt
478 BigIron RX Series Configuration Guide53-1002484-04Configuration examples17Configuring Router1 To configure VRRP Router1, enter the following comma
BigIron RX Series Configuration Guide 47953-1002484-04Configuration examples17The activate command activates the virtual router configuration on this
480 BigIron RX Series Configuration Guide53-1002484-04Configuration examples17Router1(config-if-e10000-5/1-vrid-1)# track-port ethernet 3/2Router1(con
BigIron RX Series Configuration Guide 48153-1002484-04Chapter18Configuring Quality of ServiceIn this chapter•Overview of Quality of Service (QoS) . .
lvi BigIron RX Series Configuration Guide53-1002484-04Multicast Listening Discovery (MLD)Release 02.6.00 adds support for MLD Snooping (MLDv1 and MLDv
482 BigIron RX Series Configuration Guide53-1002484-04Classification18• Packet priority – Depending on the Trust level set, a packet can be classified
BigIron RX Series Configuration Guide 48353-1002484-04Classification18The mapping between the internal forwarding priority and values received and for
484 BigIron RX Series Configuration Guide53-1002484-04Marking18• COS to DSCP Mapping – You can change the mapping between 802.1p (COS) values from the
BigIron RX Series Configuration Guide 48553-1002484-04Marking18• Incoming port (sometimes called the ingress port)• Port-based VLAN membership• Static
486 BigIron RX Series Configuration Guide53-1002484-04Configuring ToS-based QoS18To configure a static MAC entry and assign the entry to the premium q
BigIron RX Series Configuration Guide 48753-1002484-04Configuring the QoS mappings18Enabling markingThis command enables marking of the 802.1p field o
488 BigIron RX Series Configuration Guide53-1002484-04Configuring the QoS mappings18COS-DSCP map: COS: 0 1 2 3 4 5 6 7 --------------
BigIron RX Series Configuration Guide 48953-1002484-04Configuring the QoS mappings18DSCP-Priority map: (dscp = d1d2) d2| 0 1 2 3 4 5 6 7 8 9 d1 | ---
490 BigIron RX Series Configuration Guide53-1002484-04Displaying QoS configuration information18The <prio0> through <prio7> parameters spe
BigIron RX Series Configuration Guide 49153-1002484-04Displaying QoS mapping information18Displaying QoS mapping informationTo display Quality of Serv
BigIron RX Series Configuration Guide lvii53-1002484-04Enhancements in patch release 02.5.00cEnhancements in patch release 02.5.00bAutomatic ACL Rebin
492 BigIron RX Series Configuration Guide53-1002484-04Displaying queueing statistics18 -----+---------------------------------------- 0 | 0 0
BigIron RX Series Configuration Guide 49353-1002484-04Displaying queueing statistics18 1/3 | destination-weighted Weight 10 20
494 BigIron RX Series Configuration Guide53-1002484-04Determining packet drop priority using WRED18Determining packet drop priority using WREDYou can
BigIron RX Series Configuration Guide 49553-1002484-04Determining packet drop priority using WRED18is accepted. If the average queue size is above the
496 BigIron RX Series Configuration Guide53-1002484-04Configuring packet drop priority using WRED18Using WRED with rate limitingWhen rate limiting is
BigIron RX Series Configuration Guide 49753-1002484-04Configuring packet drop priority using WRED18To set the wq parameter for queues with a queue typ
498 BigIron RX Series Configuration Guide53-1002484-04Configuring packet drop priority using WRED18Syntax: [no] qos queue-type <queue-number> wr
BigIron RX Series Configuration Guide 49953-1002484-04Configuring packet drop priority using WRED18The <min-size> variable is the average queue
500 BigIron RX Series Configuration Guide53-1002484-04Scheduling traffic for forwarding18Displaying the WRED configurationTo view a WRED configuration
BigIron RX Series Configuration Guide 50153-1002484-04Scheduling traffic for forwarding18• Strict priority-based scheduling – This scheme guarantees t
lviii BigIron RX Series Configuration Guide53-1002484-04Enhancements in release 02.5.00Limited/Fixed Boot Code Book: Foundry BigIron RX Configuration
502 BigIron RX Series Configuration Guide53-1002484-04Scheduling traffic for forwarding18Configuring enhanced strict priority-based traffic scheduling
BigIron RX Series Configuration Guide 50353-1002484-04Scheduling traffic for forwarding18BigIron RX(config)# interface ethernet 1/1BigIron RX(config-i
504 BigIron RX Series Configuration Guide53-1002484-04Scheduling traffic for forwarding18The <Queue2-rate> variable defines the maximum bandwidt
BigIron RX Series Configuration Guide 50553-1002484-04Configuring multicast traffic engineering18Syntax: show qos schedulerConfiguring multicast traff
506 BigIron RX Series Configuration Guide53-1002484-04Configuring multicast traffic engineering18To limit the multicast traffic through the packet pro
BigIron RX Series Configuration Guide 50753-1002484-04Configuring multicast traffic engineering18• Virtual interface subsets are not supported for eng
508 BigIron RX Series Configuration Guide53-1002484-04Configuring multicast traffic engineering18Setting the averaging-fair-weight (wfq) parameterThe
BigIron RX Series Configuration Guide 50953-1002484-04Configuring multicast traffic engineering18Table 106 identifies the profile used for network con
510 BigIron RX Series Configuration Guide53-1002484-04Configuring multicast traffic engineering18NOTEThe configurations for group port 1 will now be a
BigIron RX Series Configuration Guide 51153-1002484-04Chapter19Configuring Traffic ReductionIn this chapter•Traffic policing on the BigIron RX Series
BigIron RX Series Configuration Guide lix53-1002484-04Enhancements in patch release 02.4.00cMulticast Mll Sharing In Release 02.5.00, the multicast
512 BigIron RX Series Configuration Guide53-1002484-04Traffic reduction parameters and algorithm19Traffic reduction parameters and algorithmA rate lim
BigIron RX Series Configuration Guide 51353-1002484-04Configuration considerations19Credits and credit totalEach rate limiting policy is assigned a cl
514 BigIron RX Series Configuration Guide53-1002484-04Configuring rate limiting policies19• Certain features such as FDP, CDP, UDLD and LACP that make
BigIron RX Series Configuration Guide 51553-1002484-04Configuring rate limiting policies19Syntax: [no] rate-limit input | output <requested-rate>
516 BigIron RX Series Configuration Guide53-1002484-04Configuring rate limiting policies19BigIron RX(config)# interface ethernet 1/3BigIron RX(config-
BigIron RX Series Configuration Guide 51753-1002484-04Configuring rate limiting policies19The command configures a rate limiting policy on port 1/4 th
518 BigIron RX Series Configuration Guide53-1002484-04Configuring rate limiting policies19• You can apply an ACL ID to a port-and-ACL-based rate limit
BigIron RX Series Configuration Guide 51953-1002484-04NP based multicast, broadcast, and unknown-unicast rate limiting19BigIron RX(config)# ipv6 acces
520 BigIron RX Series Configuration Guide53-1002484-04Displaying traffic reduction19 The <max-burst> parameter specifies the total number bits t
BigIron RX Series Configuration Guide 52153-1002484-04Displaying traffic reduction19To display rate-limit VLAN groups, enter the following.Syntax: sho
vi BigIron RX Series Configuration Guide53-1002484-04Configuring SSL security for the Web Management Interface. . . . .73Enabling the SSL server on th
lx BigIron RX Series Configuration Guide53-1002484-04Enhancements in release 02.4.00TABLE 14 Summary of enhancements in release 02.4.00Enhancement Des
522 BigIron RX Series Configuration Guide53-1002484-04Displaying traffic reduction19
BigIron RX Series Configuration Guide 52353-1002484-04Chapter20Multi-Chassis TrunkingIn this chapter•Multi-Chassis Trunking overview . . . . . . . .
524 BigIron RX Series Configuration Guide53-1002484-04Multi-Chassis Trunking overview20Benefits of MCTThe benefits of MCT are as follows:• Provides li
BigIron RX Series Configuration Guide 52553-1002484-04Multi-Chassis Trunking overview20NOTEOn the BigIron RX devices, Layer 2 multicast snooping is no
526 BigIron RX Series Configuration Guide53-1002484-04Multi-Chassis Trunking overview20• MCT client - The MCT client is the device that connects with
BigIron RX Series Configuration Guide 52753-1002484-04Multi-Chassis Trunking overview20• Cluster Client RBridge Reachability (CCRR) - The CCRR message
528 BigIron RX Series Configuration Guide53-1002484-04Multi-Chassis Trunking overview20ICL traffic handlingAn ICL link on the BigIron RX device can be
BigIron RX Series Configuration Guide 52953-1002484-04Multi-Chassis Trunking overview20Rate limiting multicast traffic in MCT VLANsTo configure the mu
530 BigIron RX Series Configuration Guide53-1002484-04Multi-Chassis Trunking overview20• BLK_BY_ICL state indicates that the superior BPDUs are being
BigIron RX Series Configuration Guide 53153-1002484-04Configuring MCT20• Hitless upgrade. If the operation is performed with the cluster configuration
BigIron RX Series Configuration Guide lxi53-1002484-04Increase Global Static ARP EntriesThe system max value for ip-static-arp can be configured to va
532 BigIron RX Series Configuration Guide53-1002484-04Configuring MCT20• On the BigIron RX devices, the ICL ports can be a part of only MCT member VLA
BigIron RX Series Configuration Guide 53353-1002484-04Configuring MCT20On TOR-A, ports 1/3-1/4 and 1/5 are CCEPs, and port 1/7 is a CEP. On TOR-B, por
534 BigIron RX Series Configuration Guide53-1002484-04Configuring MCT20Syntax: [no] lag <name> [static | dynamic] [id <number>]The static
BigIron RX Series Configuration Guide 53553-1002484-04Configuring MCT20If the no deploy command is executed, then the LAG is removed. For dynamic LAGs
536 BigIron RX Series Configuration Guide53-1002484-04Configuring MCT20BigIron RX(config-lag-3)# deploy5. Assign a name to an individual port within L
BigIron RX Series Configuration Guide 53753-1002484-04Configuring MCT20The <vlan id> variable specifies the VLAN ID. The value can be from 1 thr
538 BigIron RX Series Configuration Guide53-1002484-04Configuring MCT20Syntax: [no] port-name <text>The <text> variable is an alphanumeric
BigIron RX Series Configuration Guide 53953-1002484-04Configuring MCT20NOTEThe ICL ports must be tagged within the session VLAN. 4. Specify the VLAN r
540 BigIron RX Series Configuration Guide53-1002484-04Configuring MCT20Cluster client 11. Create a cluster client instance and change the mode to the
BigIron RX Series Configuration Guide 54153-1002484-04Configuring MCT20BigIron RX(config-cluster-TOR-client-2)# client-interface ethernet 1/54. Deploy
lxii BigIron RX Series Configuration Guide53-1002484-04IPv6 Load Sharing over ECMP and TrunksWhen the device receives traffic for a destination, and t
542 BigIron RX Series Configuration Guide53-1002484-04Configuring MCT20Creating LAG 3To create LAG 3, perform the following steps.1. Create a LAG with
BigIron RX Series Configuration Guide 54353-1002484-04Configuring MCT20Assigning the host name (optional)Configure a host name for the device and save
544 BigIron RX Series Configuration Guide53-1002484-04Configuring MCT20BigIron RX(config-cluster-TOR)# peer 1.1.1.1 rbridge-id 1 icl TOR7. Deploy the
BigIron RX Series Configuration Guide 54553-1002484-04Configuring MCT201. Create a cluster client instance by entering the following command.BigIron R
546 BigIron RX Series Configuration Guide53-1002484-04Configuring MCT20If the keepalive VLAN is not configured, both the cluster nodes become the mast
BigIron RX Series Configuration Guide 54753-1002484-04Configuring MCT20• If the keepalive VLAN is not configured and both the peers are up, then both
548 BigIron RX Series Configuration Guide53-1002484-04Configuring MCT20 ------------ Name Rbridge-id Config Port Trunk FSM-State
BigIron RX Series Configuration Guide 54953-1002484-04Configuring MCT20The <name> variable specifies the name of the cluster.The <id> vari
550 BigIron RX Series Configuration Guide53-1002484-04Configuring MCT20vlan 4090 name Session-VLAN
BigIron RX Series Configuration Guide 55153-1002484-04Configuring MCT20vlan 1 name DEFAULT-VLAN no untagged ethe 1/1 to 1/2 !vlan 2 name client-VLAN
BigIron RX Series Configuration Guide lxiii53-1002484-04IP Source Guard IP source guard is used on client ports to prevent IP source address spoofing
552 BigIron RX Series Configuration Guide53-1002484-04Configuring MCT20 deploy port-name "lag-to TOR-A" ethernet 1/1 port-name "lag-to
BigIron RX Series Configuration Guide 55353-1002484-04Configuring MCT20lag "4" dynamic id 4 ports ethernet 1/5 primary-port 1/5 deploy port
554 BigIron RX Series Configuration Guide53-1002484-04Configuring MCT20lag "2" dynamic id 2 ports ethernet 1/7 primary-port 1/7 deploy port-
BigIron RX Series Configuration Guide 55553-1002484-04Configuring MCT20Client #1!lag "1" dynamic id 1 ports ethernet 1/1 to 1/2 primary-port
556 BigIron RX Series Configuration Guide53-1002484-04Configuring MCT20 ip address 10.10.10.2/24 ip ospf area 0!endTwo-level MCT exampleFigure 95 show
BigIron RX Series Configuration Guide 55753-1002484-04Configuring MCT20no route-only!vlan 1 name DEFAULT-VLAN no untagged ethe 1/1 to 1/2 !vlan 2 nam
558 BigIron RX Series Configuration Guide53-1002484-04Configuring MCT20!vlan 2 name client-VLAN untagged ethe 1/3 to 1/5 tagged ethe 1/1 to 1/2!vlan 4
BigIron RX Series Configuration Guide 55953-1002484-04Configuring MCT20vlan 4090 name Session-VLAN
560 BigIron RX Series Configuration Guide53-1002484-04Configuring MCT20vlan 2 name client-VLAN untagged ethe 1/3 to 1/5 tagged ethe 1/1 to 1/2!vlan 40
BigIron RX Series Configuration Guide 56153-1002484-04Configuring MCT20MRP integration with MCT exampleFigure 96 shows the MRP integration with the MC
lxiv BigIron RX Series Configuration Guide53-1002484-04Enhancements in patch release 02.3.00aSyslog Source Interface You can configure the BigIron RX
562 BigIron RX Series Configuration Guide53-1002484-04Configuring MCT20interface ethernet 1/5 port-name MRP-from-Master enable!interface ve 100 ip add
BigIron RX Series Configuration Guide 56353-1002484-04Port loop detection support in MCT20interface ve 100 ip address 1.1.1.2/24!!cluster MRPRing 1 r
564 BigIron RX Series Configuration Guide53-1002484-04Port loop detection support in MCT20BigIron RX(config)# interface ethernet 1/1BigIron RX(config-
BigIron RX Series Configuration Guide 56553-1002484-04Port loop detection support in MCT20The <mins> variable specifies the configurable syslog
566 BigIron RX Series Configuration Guide53-1002484-04MAC Database Update over cluster control protocol20Clearing port loop detection informationTo cl
BigIron RX Series Configuration Guide 56753-1002484-04MAC Database Update over cluster control protocol20Cluster MAC entry typesThe following types of
568 BigIron RX Series Configuration Guide53-1002484-04MAC Database Update over cluster control protocol20NOTEEvery MAC entry deletion triggers the res
BigIron RX Series Configuration Guide 56953-1002484-04MAC Database Update over cluster control protocol20Displaying cluster-specific MAC entriesTo dis
570 BigIron RX Series Configuration Guide53-1002484-04MAC Database Update over cluster control protocol200000.0000.0001 4/3 0 400 CC
BigIron RX Series Configuration Guide 57153-1002484-04MAC Database Update over cluster control protocol200000.0000.0002 4/6 0 400 CL
BigIron RX Series Configuration Guide lxv53-1002484-04Enhancements in release 02.3.00System enhancementsTABLE 16 System enhancementsEnhancement Descri
572 BigIron RX Series Configuration Guide53-1002484-04MAC Database Update over cluster control protocol20 Add Intf Mac sent: 9 Del Mac sent: 1 Del
BigIron RX Series Configuration Guide 57353-1002484-04MAC Database Update over cluster control protocol20Clearing MAC entriesTo clear all the MAC entr
574 BigIron RX Series Configuration Guide53-1002484-04MCT failover scenarios20Syntax: clear mac vlan <vlan-id>The <vlan-id> variable speci
BigIron RX Series Configuration Guide 57553-1002484-04Syslogs and debugging20When an ICL or CCP goes down, the keepalive VLAN is used to find the clus
576 BigIron RX Series Configuration Guide53-1002484-04Syslogs and debugging20Sample configurationThe following show run command output is a sample con
BigIron RX Series Configuration Guide 57753-1002484-04Syslogs and debugging20client c1 rbridge-id 300 client-interface ethernet 3/11 !MCT debug co
578 BigIron RX Series Configuration Guide53-1002484-04Syslogs and debugging20The debug cluster ccp packet command displays information specific to the
BigIron RX Series Configuration Guide 57953-1002484-04Syslogs and debugging20Jun 1 18:06:50 CLUSTER FSM: cluster id 1, peer rbridge id 2, old state:
580 BigIron RX Series Configuration Guide53-1002484-04Syslogs and debugging20Nov 23 08:40:29 CLUSTER FSM: CCRR message sent for client for multiple cl
BigIron RX Series Configuration Guide 58153-1002484-04Syslogs and debugging20SYSLOG: <44>Dec 5 15:55:50 Brocade LACP: ethernet 3/13 state chang
lxvi BigIron RX Series Configuration Guide53-1002484-04Layer 2 enhancements Enhanced Digital Optical Monitoring You can configure the BigIron RX to mo
582 BigIron RX Series Configuration Guide53-1002484-04MCT for VRRP or VRRP-E20BigIron RX# Dec 5 16:04:35 CLUSTER MDUP: Received MAC FLUSH message, op
BigIron RX Series Configuration Guide 58353-1002484-04MCT for VRRP or VRRP-E20FIGURE 97 Two-node MCT scenarioLayer 3 traffic forwarding from an end st
584 BigIron RX Series Configuration Guide53-1002484-04MCT for VRRP or VRRP-E20Advanced MCT scenarioFigure 98 shows the advanced MCT scenario. In this
BigIron RX Series Configuration Guide 58553-1002484-04MCT for VRRP or VRRP-E20• The VRRP-E virtual MAC address must be synced and learned on the ICL p
586 BigIron RX Series Configuration Guide53-1002484-04MCT for VRRP or VRRP-E20
BigIron RX Series Configuration Guide 58753-1002484-04Chapter21Layer 2 ACLsIn this chapter•Layer 2 ACLs overview. . . . . . . . . . . . . . . . . . .
588 BigIron RX Series Configuration Guide53-1002484-04Configuration rules and notes21Configuration rules and notes• You cannot bind Layer 2 ACLs and I
BigIron RX Series Configuration Guide 58953-1002484-04Configuring Layer 2 ACLs21For more examples of valid Layer 2 ACL clauses, refer to “Example Laye
590 BigIron RX Series Configuration Guide53-1002484-04Configuring Layer 2 ACLs21BigIron RX(config)# access-list 400 permit any anyBigIron RX(config)#
BigIron RX Series Configuration Guide 59153-1002484-04Viewing Layer 2 ACLs21Viewing Layer 2 ACLsUse the show access-list command to monitor configurat
BigIron RX Series Configuration Guide lxvii53-1002484-04Layer 3 enhancementsVSRP Slow-Start This feature allows for a hold down time before the backup
592 BigIron RX Series Configuration Guide53-1002484-04Viewing Layer 2 ACLs21
BigIron RX Series Configuration Guide 59353-1002484-04Chapter22Access Control ListIn this chapter•Access Control List overview. . . . . . . . . . . .
594 BigIron RX Series Configuration Guide53-1002484-04How the BigIron RX processes ACLs22You can use IP ACLs to provide input to other features such a
BigIron RX Series Configuration Guide 59553-1002484-04Disabling or re-enabling Access Control Lists (ACLs)22• ACLs that specify spi, .tos min monrtary
596 BigIron RX Series Configuration Guide53-1002484-04Enabling support for additional ACL statements22• ACL ID – An ACL ID is a number from 1 – 99 (st
BigIron RX Series Configuration Guide 59753-1002484-04ACL-based inbound mirroring22Considerations when configuring ACL-based inbound mirroringThe foll
598 BigIron RX Series Configuration Guide53-1002484-04ACL-based inbound mirroring22Applying the ACL to an interfaceYou must apply the ACL to an interf
BigIron RX Series Configuration Guide 59953-1002484-04ACL-based inbound mirroring22The following considerations apply when configuring ACL-based mirro
600 BigIron RX Series Configuration Guide53-1002484-04Configuring numbered and named ACLs22BigIron RX(config)# vlan 10 BigIron RX(config-vlan-10)# tag
BigIron RX Series Configuration Guide 60153-1002484-04Configuring numbered and named ACLs22BigIron RX(config)# access-list 1 deny host 209.157.22.26 l
lxviii BigIron RX Series Configuration Guide53-1002484-04OSPF v3 IPv6 supports OSPF version 3 (OSPFv3), which functions similarly to OSPF version 2.Bo
602 BigIron RX Series Configuration Guide53-1002484-04Configuring numbered and named ACLs22Parameters to bind standard ACLs to an interfaceUse the ip
BigIron RX Series Configuration Guide 60353-1002484-04Configuring numbered and named ACLs22• Destination TCP or UDP port (if the IP protocol is TCP or
604 BigIron RX Series Configuration Guide53-1002484-04Configuring numbered and named ACLs22The sixth entry permits all packets that are not explicitly
BigIron RX Series Configuration Guide 60553-1002484-04Configuring numbered and named ACLs22Syntax: [no] access-list <num> deny | permit <ip-p
606 BigIron RX Series Configuration Guide53-1002484-04Configuring numbered and named ACLs22Parameters to filter TCP or UDP packetsUse the parameters b
BigIron RX Series Configuration Guide 60753-1002484-04Configuring numbered and named ACLs22Filtering traffic with ICMP packetsUse the following parame
608 BigIron RX Series Configuration Guide53-1002484-04Configuring numbered and named ACLs22Parameter to filter packets with AHP or ESP protocolsIf you
BigIron RX Series Configuration Guide 60953-1002484-04Configuring numbered and named ACLs22Parameters to alter a packet’s QoS valueThe parameters disc
610 BigIron RX Series Configuration Guide53-1002484-04Configuring numbered and named ACLs22• Enter 0 – 63 for the dscp-marking <number> paramete
BigIron RX Series Configuration Guide 61153-1002484-04Configuring numbered and named ACLs22Configuring standard or extended named ACLs The commands fo
BigIron RX Series Configuration Guide lxix53-1002484-04IP multicast enhancementsDefault Route ECMP This feature allows for load distribution of traffi
612 BigIron RX Series Configuration Guide53-1002484-04Configuring numbered and named ACLs22The <string> parameter is the ACL name. You can spec
BigIron RX Series Configuration Guide 61353-1002484-04Configuring numbered and named ACLs22[<operator> <destination-tcp/udp-port>][match-a
614 BigIron RX Series Configuration Guide53-1002484-04Configuring numbered and named ACLs22Super ACL syntaxSyntax: [no] access-list <num> deny |
BigIron RX Series Configuration Guide 61553-1002484-04Displaying ACL definitions22Parameters to bind super ACLs to an interfaceSuper ACLs can be appli
616 BigIron RX Series Configuration Guide53-1002484-04Displaying ACL definitions22Enter all to display all of the ACLs configured on the device.Named
BigIron RX Series Configuration Guide 61753-1002484-04Displaying ACL definitions2229 msg-icp MSG ICP31 msg-auth MSG Authentication33 dsp Display Suppo
618 BigIron RX Series Configuration Guide53-1002484-04Displaying ACL definitions2281 hosts2-ns HOSTS2 Name Server82 xfer XFER Utility83 mit-ml-dev1 MI
BigIron RX Series Configuration Guide 61953-1002484-04Displaying ACL definitions22117 uucp-path UUCP Path Service118 sqlserv SQL Services119 nntp Netw
620 BigIron RX Series Configuration Guide53-1002484-04Displaying ACL definitions22155 netsc-dev NETSC156 sqlsrv SQL Service157 knet-cmp KNET/VM Comman
BigIron RX Series Configuration Guide 62153-1002484-04Displaying ACL definitions22192 osu-nms OSU Network Monitoring System193 srmp Spider Remote Moni
BigIron RX Series Configuration Guide vii53-1002484-04Logging on through the CLI. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .109On-l
lxx BigIron RX Series Configuration Guide53-1002484-04IP service, security, and Layer 4 enhancements IGMP v2/v3 Fast Leave IGMP Fast leave allows cli
622 BigIron RX Series Configuration Guide53-1002484-04Displaying ACL definitions22344 pdap Prospero Data Access Protocol345 pawserv Perf Analysis Work
BigIron RX Series Configuration Guide 62353-1002484-04Displaying ACL definitions22402 genie Genie Protocol403 decap decap404 nced nced405 ncld ncld406
624 BigIron RX Series Configuration Guide53-1002484-04Displaying ACL definitions22438 dsfgw dsfgw439 dasp dasp Thomas Obermair440 sgcp sgcp441 decvms-
BigIron RX Series Configuration Guide 62553-1002484-04Displaying ACL definitions22561 monitor monitor562 chshell chcmd564 9pfs plan 9 file service565
626 BigIron RX Series Configuration Guide53-1002484-04ACL logging22ACL loggingIn previous releases, if the logging is enabled on an interface and the
BigIron RX Series Configuration Guide 62753-1002484-04Modifying ACLs22sent to the CPU for logging. Then for a certain period of time, the next packets
628 BigIron RX Series Configuration Guide53-1002484-04Modifying ACLs22Thus, if a packet matches the first entry in this ACL and is therefore denied, t
BigIron RX Series Configuration Guide 62953-1002484-04Modifying ACLs224. Enter the command “end” on a separate line at the end of the file. This comma
630 BigIron RX Series Configuration Guide53-1002484-04Modifying ACLs22Simply entering access-list <acl-num> remark <comment-text> adds a r
BigIron RX Series Configuration Guide 63153-1002484-04Deleting ACL entries22• <acl-name> - ACL name. You can specify a string of up to 255 alpha
BigIron RX Series Configuration Guide lxxi53-1002484-04Network management Enhancements in release 02.2.01Hardware enhancementsPort Security MAC Violat
632 BigIron RX Series Configuration Guide53-1002484-04Deleting ACL entries22BigIron RX(config)# show access-list 99 Standard IP access-list 99deny hos
BigIron RX Series Configuration Guide 63353-1002484-04Applying ACLs to interfaces22Applying ACLs to interfacesConfiguration examples in the section “C
634 BigIron RX Series Configuration Guide53-1002484-04Applying ACLs to interfaces22NOTEApplying an ACL to a subset of physical interfaces under a virt
BigIron RX Series Configuration Guide 63553-1002484-04QoS options for IP ACLs22Displaying ACL log entriesThe first time an entry in an ACL denies a pa
636 BigIron RX Series Configuration Guide53-1002484-04Enabling ACL duplication check22For a list of supported QoS ACL options refer to “Using ACL QoS
BigIron RX Series Configuration Guide 63753-1002484-04ACL accounting22The display shows the following information.Syntax: show access-list accounting
638 BigIron RX Series Configuration Guide53-1002484-04ACL accounting22Syntax: show access-list accounting ethernet [<slot>/<port> | ve <
BigIron RX Series Configuration Guide 63953-1002484-04Enabling ACL filtering of fragmented or non-fragmented packets22Enabling ACL filtering of fragme
640 BigIron RX Series Configuration Guide53-1002484-04ACL filtering for traffic switched within a virtual routing interface22The <acl-name> | &l
BigIron RX Series Configuration Guide 64153-1002484-04ICMP filtering for extended ACLs22The deny | permit parameter indicates whether packets that mat
lxxii BigIron RX Series Configuration Guide53-1002484-04Layer 2 enhancementsLayer 3 enhancementsTABLE 23 Layer 2 enhancementsEnhancement Description S
642 BigIron RX Series Configuration Guide53-1002484-04ICMP filtering for extended ACLs22host-redirect 5 1host-tos-redirect 5 3host-tos-unreachable 3 1
BigIron RX Series Configuration Guide 64353-1002484-04Disabling internal ACLs for BGP and BFD22Disabling internal ACLs for BGP and BFDTo disable inter
644 BigIron RX Series Configuration Guide53-1002484-04Troubleshooting ACLs22
BigIron RX Series Configuration Guide 64553-1002484-04Chapter23Policy-Based RoutingIn this chapter•Policy-Based Routing (PBR) . . . . . . . . . . . .
646 BigIron RX Series Configuration Guide53-1002484-04Configuring a PBR policy23• PBR ignores explicit or implicit deny ip any any ACL entries, to ens
BigIron RX Series Configuration Guide 64753-1002484-04Configuring a PBR policy23Syntax: [no] access-list <num> deny | permit host <source-ip&
648 BigIron RX Series Configuration Guide53-1002484-04Configuring a PBR policy23Configure the route mapAfter you configure the ACLs, you can configure
BigIron RX Series Configuration Guide 64953-1002484-04Configuration examples23Enabling PBRAfter you configure the ACLs and route map entries, you can
650 BigIron RX Series Configuration Guide53-1002484-04Configuration examples23Syntax: [no]route-map <map-name> permit l deny <num> route-m
BigIron RX Series Configuration Guide 65153-1002484-04Configuration examples23BigIron RX(config)# route-map test-route permit 51BigIron RX(config-rout
BigIron RX Series Configuration Guide lxxiii53-1002484-04Multicast enhancementOSPF point-to-point OSPF point-to-point eliminates the need for Designat
652 BigIron RX Series Configuration Guide53-1002484-04Trunk formation23Trunk formationWhen a trunk is formed, the PBR policy on the primary port appli
BigIron RX Series Configuration Guide 65353-1002484-04Chapter24Configuring IP Multicast ProtocolsIn this chapter•Overview of IP multicasting. . . . .
654 BigIron RX Series Configuration Guide53-1002484-04Multicast terms24PIM and DVMRP are broadcast and pruning multicast protocols that deliver IP mul
BigIron RX Series Configuration Guide 65553-1002484-04IP multicast boundaries24Defining the maximum number of DVMRP cache entriesThe DVMRP cache syste
656 BigIron RX Series Configuration Guide53-1002484-04Passive Multicast Route Insertion (PMRI)24Configuring multicast boundariesTo define boundaries f
BigIron RX Series Configuration Guide 65753-1002484-04Changing IGMP V1 and V2 parameters24• If directly connected source passed source RPF check and c
658 BigIron RX Series Configuration Guide53-1002484-04Changing IGMP V1 and V2 parameters24• IGMP group membership time – Specifies how many seconds an
BigIron RX Series Configuration Guide 65953-1002484-04Adding an interface to a multicast group24Adding an interface to a multicast groupYou can manual
660 BigIron RX Series Configuration Guide53-1002484-04IGMP v324In contrast, IGMP V3 provides selective filtering of traffic based on traffic source. A
BigIron RX Series Configuration Guide 66153-1002484-04IGMP v324Default IGMP versionIGMP V3 is available for BigIron RX Switches; however, these device
lxxiv BigIron RX Series Configuration Guide53-1002484-04Security enhancementsTABLE 26 Security enhancementsEnhancement Description See pageMulti-devic
662 BigIron RX Series Configuration Guide53-1002484-04IGMP v324Syntax: [no] ip igmp version <version-number>Enter 1, 2, or 3 for <version-num
BigIron RX Series Configuration Guide 66353-1002484-04IGMP v324If a client sends a leave message, the client is immediately removed from the group. If
664 BigIron RX Series Configuration Guide53-1002484-04IGMP v324To modify the default value for the IGMP query interval, enter the following.BigIron RX
BigIron RX Series Configuration Guide 66553-1002484-04IGMP v324If the tracking and fast leave feature is enabled, you can display the list of clients
666 BigIron RX Series Configuration Guide53-1002484-04IGMP v324Displaying the IGMP status of an interfaceYou can display the status of a multicast ena
BigIron RX Series Configuration Guide 66753-1002484-04IGMP v324Displaying IGMP traffic statusTo display the traffic status on each virtual routing int
668 BigIron RX Series Configuration Guide53-1002484-04Configuring a static multicast route24Clearing IGMP statistics To clear statistics for IGMP traf
BigIron RX Series Configuration Guide 66953-1002484-04Configuring a static multicast route24NOTEIn IP multicasting, a route is handled in terms of its
670 BigIron RX Series Configuration Guide53-1002484-04PIM dense24Next hop validation check You can configure the BigIron RX to perform multicast valid
BigIron RX Series Configuration Guide 67153-1002484-04PIM dense24PIM was introduced to simplify some of the complexity of the routing protocol at the
BigIron RX Series Configuration Guide lxxv53-1002484-04System enhancementsEnhancements in release 02.2.00gEnhancements to passwords The following have
672 BigIron RX Series Configuration Guide53-1002484-04PIM dense24FIGURE 100 Transmission of multicast packets from the source to host group members...
BigIron RX Series Configuration Guide 67353-1002484-04PIM dense24FIGURE 101 Pruning leaf nodes from a multicast treeGrafts to a multicast treeA PIM ro
674 BigIron RX Series Configuration Guide53-1002484-04PIM dense24The primary difference between PIM DM V1 and V2 is the methods the protocols use for
BigIron RX Series Configuration Guide 67553-1002484-04PIM dense24The behavior of the [no] router pim command was as follows:• Entering router pim comm
676 BigIron RX Series Configuration Guide53-1002484-04PIM dense24The default is 180 seconds.Modifying hello timerThis parameter defines the interval a
BigIron RX Series Configuration Guide 67753-1002484-04PIM dense24BigIron RX(config)#show ip pim denseGlobal PIM Dense Mode SettingsHello interval: 60,
678 BigIron RX Series Configuration Guide53-1002484-04PIM Sparse24Failover time in a multi-path topologyPreviously, when a port in a multi-path topolo
BigIron RX Series Configuration Guide 67953-1002484-04PIM Sparse24FIGURE 102 Example PIM Sparse domainPIM Sparse router typesRouters that are configur
680 BigIron RX Series Configuration Guide53-1002484-04PIM Sparse24from a group source to the group’s receivers. After the first packet, the BigIron RX
BigIron RX Series Configuration Guide 68153-1002484-04PIM Sparse24NOTEBrocade recommends that you configure the same BigIron RX as both the BSR and th
lxxvi BigIron RX Series Configuration Guide53-1002484-04Enhancements in release 02.2.00TABLE 29 Summary of emhancements in 02.2.00Enhancement Descript
682 BigIron RX Series Configuration Guide53-1002484-04PIM Sparse24If the interface is on the border of the PIM Sparse domain, you also must enter the
BigIron RX Series Configuration Guide 68353-1002484-04PIM Sparse24Syntax: [no] rp-candidate ethernet <slot>/<portnum> | loopback <num&g
684 BigIron RX Series Configuration Guide53-1002484-04PIM Sparse24Statically specifying the RPBrocade recommends that you use the PIM Sparse protocol’
BigIron RX Series Configuration Guide 68553-1002484-04Route selection precedence for multicast24Syntax: rp-address <ip_address> [<acl_name_or
686 BigIron RX Series Configuration Guide53-1002484-04Route selection precedence for multicast24• Non-default route from the mRTM• Default route from
BigIron RX Series Configuration Guide 68753-1002484-04Changing the Shortest Path Tree (SPT) threshold24 v125 125.0.0.1 SM V2 Itself
688 BigIron RX Series Configuration Guide53-1002484-04Displaying PIM Sparse configuration information and statistics24You can change the number of pac
BigIron RX Series Configuration Guide 68953-1002484-04Displaying PIM Sparse configuration information and statistics24• Group information• BSR informa
690 BigIron RX Series Configuration Guide53-1002484-04Displaying PIM Sparse configuration information and statistics24Displaying a list of multicast g
BigIron RX Series Configuration Guide 69153-1002484-04Displaying PIM Sparse configuration information and statistics24Displaying BSR informationTo dis
BigIron RX Series Configuration Guide lxxvii53-1002484-04Document conventionsThis section describes text formatting conventions and important notice f
692 BigIron RX Series Configuration Guide53-1002484-04Displaying PIM Sparse configuration information and statistics24Displaying candidate RP informat
BigIron RX Series Configuration Guide 69353-1002484-04Displaying PIM Sparse configuration information and statistics24Displaying RP-to-group mappingsT
694 BigIron RX Series Configuration Guide53-1002484-04Displaying PIM Sparse configuration information and statistics24Displaying the RP set listTo dis
BigIron RX Series Configuration Guide 69553-1002484-04Displaying PIM Sparse configuration information and statistics24Syntax: show ip pim nbrThis disp
696 BigIron RX Series Configuration Guide53-1002484-04Displaying PIM Sparse configuration information and statistics24BigIron RX# show ip pim rpf 1.2.
BigIron RX Series Configuration Guide 69753-1002484-04Displaying PIM Sparse configuration information and statistics24This field... Displays...(<so
698 BigIron RX Series Configuration Guide53-1002484-04PIM-SSMv424Displaying PIM traffic statisticsTo display PIM traffic statistics, enter the followi
BigIron RX Series Configuration Guide 69953-1002484-04Configuring Multicast Source Discovery Protocol (MSDP)24The amount of unwanted traffic in the ne
700 BigIron RX Series Configuration Guide53-1002484-04Configuring Multicast Source Discovery Protocol (MSDP)24FIGURE 103 PIM Sparse domains joined by
BigIron RX Series Configuration Guide 70153-1002484-04Configuring Multicast Source Discovery Protocol (MSDP)24Peer Reverse Path Forwarding (RPF) flood
lxxviii BigIron RX Series Configuration Guide53-1002484-04Trademark referencesThis document may contain references to the trademarks of the following
702 BigIron RX Series Configuration Guide53-1002484-04Configuring Multicast Source Discovery Protocol (MSDP)24• Configure the MSDP peersNOTEThe PIM Sp
BigIron RX Series Configuration Guide 70353-1002484-04Configuring Multicast Source Discovery Protocol (MSDP)24Designating an interface’s IP address as
704 BigIron RX Series Configuration Guide53-1002484-04Configuring Multicast Source Discovery Protocol (MSDP)24The following commands configure an IP a
BigIron RX Series Configuration Guide 70553-1002484-04Configuring Multicast Source Discovery Protocol (MSDP)24NOTEThe default action is to deny all so
706 BigIron RX Series Configuration Guide53-1002484-04Configuring Multicast Source Discovery Protocol (MSDP)24The following commands configure a route
BigIron RX Series Configuration Guide 70753-1002484-04Configuring Multicast Source Discovery Protocol (MSDP)2414 (117.1.0.36, 224.200.1.16), RP:2.2.2.
708 BigIron RX Series Configuration Guide53-1002484-04Configuring MSDP mesh groups24Configuring MSDP mesh groups A PIM Sparse domain can have several
BigIron RX Series Configuration Guide 70953-1002484-04Configuring MSDP mesh groups24FIGURE 104 Example of MSDP mesh groupPIM Sparse Domain 1 in Figure
710 BigIron RX Series Configuration Guide53-1002484-04Configuring MSDP mesh groups24Syntax: [no] mesh-group <group-name> <peer-address> Th
BigIron RX Series Configuration Guide 71153-1002484-04Configuring MSDP mesh groups24Configuration for Device A The following set of commands configure
BigIron RX Series Configuration Guide 153-1002484-04Chapter1Getting Started with the Command Line Interface In this chapter•Logging on through the CLI
712 BigIron RX Series Configuration Guide53-1002484-04Configuring MSDP mesh groups24The following set of commands configure the MSDP peers of Device B
BigIron RX Series Configuration Guide 71353-1002484-04Configuring MSDP mesh groups24BigIron RX(config)# router pimBigIron RX(config)# router msdpBigIr
714 BigIron RX Series Configuration Guide53-1002484-04Configuring MSDP mesh groups24BigIron RX(config)# router pimBigIron RX(config)# router msdpBigIr
BigIron RX Series Configuration Guide 71553-1002484-04Configuring MSDP mesh groups24Displaying MSDP informationYou can display the following MSDP info
716 BigIron RX Series Configuration Guide53-1002484-04Configuring MSDP mesh groups24Displaying peer informationTo display MSDP peer information, use t
BigIron RX Series Configuration Guide 71753-1002484-04Configuring MSDP mesh groups24Keep Alive Message Received The number of Keep Alive messages the
718 BigIron RX Series Configuration Guide53-1002484-04Configuring MSDP mesh groups24TCP connection state The state of the connection with the neighbor
BigIron RX Series Configuration Guide 71953-1002484-04Clearing MSDP information24Displaying source active cache informationTo display the Source Activ
720 BigIron RX Series Configuration Guide53-1002484-04DVMRP overview24BigIron RX# clear ip msdp peer 205.216.162.1Remote connection closedSyntax: clea
BigIron RX Series Configuration Guide 72153-1002484-04DVMRP overview24Initiating DVMRP multicasts on a network Once DVMRP is enabled on each router, a
viii BigIron RX Series Configuration Guide53-1002484-04Chapter 6 Configuring Interface ParametersAssigning a port name . . . . . . . . . . . . . . .
2 BigIron RX Series Configuration Guide53-1002484-04Logging on through the CLI1On-line helpTo display a list of available commands or command options,
722 BigIron RX Series Configuration Guide53-1002484-04DVMRP overview24FIGURE 106 Downstream broadcast of IP multicast packets from source host...
BigIron RX Series Configuration Guide 72353-1002484-04DVMRP overview24FIGURE 107 Pruning leaf nodes from a multicast treeGrafts to a multicast treeA D
724 BigIron RX Series Configuration Guide53-1002484-04Configuring DVMRP24Configuring DVMRPEnabling DVMRP globally and on an interfaceSuppose you want
BigIron RX Series Configuration Guide 72553-1002484-04Configuring DVMRP24• Route expire time• Route discard time• Prune age• Graft retransmit time• Pr
726 BigIron RX Series Configuration Guide53-1002484-04Configuring DVMRP24Modifying graft retransmit timeThe Graft Retransmit Time defines the initial
BigIron RX Series Configuration Guide 72753-1002484-04Configuring DVMRP24BigIron RX(config-dvmrp-router)# default-gateway 192.35.4.1Syntax: default-ga
728 BigIron RX Series Configuration Guide53-1002484-04Configuring a static multicast route24Displaying information about an upstream neighbor deviceYo
BigIron RX Series Configuration Guide 72953-1002484-04Configuring IP multicast traffic reduction24NOTERegardless of the administrative distances, the
730 BigIron RX Series Configuration Guide53-1002484-04Configuring IP multicast traffic reduction24When you enable IP Multicast Traffic Reduction, you
BigIron RX Series Configuration Guide 73153-1002484-04Configuring IP multicast traffic reduction24NOTEWhen one or more BigIron RX devices are running
BigIron RX Series Configuration Guide 353-1002484-04EXEC commands1Line editing commandsThe CLI supports the following line editing commands. To enter
732 BigIron RX Series Configuration Guide53-1002484-04Configuring IP multicast traffic reduction24• Passive – When passive IGMP mode is enabled, the s
BigIron RX Series Configuration Guide 73353-1002484-04Configuring IP multicast traffic reduction24• Passive – When passive IGMP mode is enabled, the d
734 BigIron RX Series Configuration Guide53-1002484-04Configuring IP multicast traffic reduction24When the device starts up, it forwards all multicast
BigIron RX Series Configuration Guide 73553-1002484-04Configuring IP multicast traffic reduction24Use the acl-spec parameter to define the number or n
736 BigIron RX Series Configuration Guide53-1002484-04Configuring IP multicast traffic reduction24FIGURE 109 PIM SM traffic reduction in enterprise ne
BigIron RX Series Configuration Guide 73753-1002484-04Configuring IP multicast traffic reduction24Figure 110 shows another example application for PIM
738 BigIron RX Series Configuration Guide53-1002484-04Configuring IP multicast traffic reduction24• The PIM SM snooping feature assumes that the group
BigIron RX Series Configuration Guide 73953-1002484-04Configuring IP multicast traffic reduction24Syntax: [no] multicast pimsm-snoopingConfiguring PIM
740 BigIron RX Series Configuration Guide53-1002484-04Configuring IP multicast traffic reduction24To configure the snooping device to statically join
BigIron RX Series Configuration Guide 74153-1002484-04Configuring IP multicast traffic reduction24The source-address parameter specifies the IP addres
4 BigIron RX Series Configuration Guide53-1002484-04CONFIG commands1You reach this level by entering the enable [<password>] or enable <usern
742 BigIron RX Series Configuration Guide53-1002484-04Configuring IP multicast traffic reduction24
BigIron RX Series Configuration Guide 74353-1002484-04Chapter25Configuring RIPIn this chapter•Overview of Routing Information Protocol (RIP). . . . .
744 BigIron RX Series Configuration Guide53-1002484-04Configuring RIP parameters25Enabling RIPRIP is disabled by default. To enable RIP, you must enab
BigIron RX Series Configuration Guide 74553-1002484-04Configuring RIP parameters25Changing the administrative distanceBy default, the device assigns t
746 BigIron RX Series Configuration Guide53-1002484-04Configuring RIP parameters25• If the route map contains a permit action, a route that matches a
BigIron RX Series Configuration Guide 74753-1002484-04Configuring RIP parameters25• Learning and advertising of RIP default routes – The device learns
748 BigIron RX Series Configuration Guide53-1002484-04Configuring RIP parameters25• Poison reverse – The device assigns a cost of 16 (“infinite” or “u
BigIron RX Series Configuration Guide 74953-1002484-04Configuring RIP parameters25Router2(config)# router ripRouter2(config-rip-router)# use-vrrp-path
750 BigIron RX Series Configuration Guide53-1002484-04Displaying RIP filters25BigIron RX(config)# router ripBigIron RX(config)# interface ethernet 1/2
BigIron RX Series Configuration Guide 75153-1002484-04Displaying RIP filters25Syntax: show ip ripThis display shows the following information.Clearing
BigIron RX Series Configuration Guide 553-1002484-04CONFIG commands1• interface group-ve <vlan_group_id> Trunk levelThe trunk level allows you t
752 BigIron RX Series Configuration Guide53-1002484-04Displaying RIP filters25
BigIron RX Series Configuration Guide 75353-1002484-04Chapter26Configuring OSPF Version 2 (IPv4)In this chapter•Overview of OSPF (Open Shortest Path F
754 BigIron RX Series Configuration Guide53-1002484-04Overview of OSPF (Open Shortest Path First)26An Autonomous System Boundary Router (ASBR) is a ro
BigIron RX Series Configuration Guide 75553-1002484-04Overview of OSPF (Open Shortest Path First)26Designated router election in multi-access networks
756 BigIron RX Series Configuration Guide53-1002484-04Overview of OSPF (Open Shortest Path First)26NOTEBy default, the Brocade router ID is the IP add
BigIron RX Series Configuration Guide 75753-1002484-04Overview of OSPF (Open Shortest Path First)26FIGURE 114 AS external LSA reductionNotice that bot
758 BigIron RX Series Configuration Guide53-1002484-04Overview of OSPF (Open Shortest Path First)26• A second ASBR comes on-line • A second ASBR that
BigIron RX Series Configuration Guide 75953-1002484-04Configuring OSPF262. Compare the networks that have the same network address, to determine which
760 BigIron RX Series Configuration Guide53-1002484-04Configuring OSPF26Configuration rules• If a router is to operate as an ASBR, you must enable the
BigIron RX Series Configuration Guide 76153-1002484-04Configuring OSPF26NOTEYou set global level parameters at the OSPF CONFIG Level of the CLI. To re
6 BigIron RX Series Configuration Guide53-1002484-04CONFIG commands1Route Map level The Route Map level allows you to configure parameters for a BGP4
762 BigIron RX Series Configuration Guide53-1002484-04Configuring OSPF26• ASBRs redistribute (import) external routes into the NSSA as type 7 LSAs. Ty
BigIron RX Series Configuration Guide 76353-1002484-04Configuring OSPF26The stub <cost> parameter specifies an additional cost for using a route
764 BigIron RX Series Configuration Guide53-1002484-04Configuring OSPF26The ABR translates the Type-7 LSAs into Type-5 LSAs. If an area range is confi
BigIron RX Series Configuration Guide 76553-1002484-04Configuring OSPF26The advertise | not-advertise parameter specifies whether you want the device
766 BigIron RX Series Configuration Guide53-1002484-04Configuring OSPF26• ip ospf hello-interval <value>• ip ospf md5-authentication key-activat
BigIron RX Series Configuration Guide 76753-1002484-04Configuring OSPF26Encrypted display of the authentication string or MD5 authentication keyThe Br
768 BigIron RX Series Configuration Guide53-1002484-04Configuring OSPF26NOTEIf you want the software to assume that the value you enter is the clear-t
BigIron RX Series Configuration Guide 76953-1002484-04Configuring OSPF26Block flooding of outbound LSAs on specific OSPF interfacesBy default, the dev
770 BigIron RX Series Configuration Guide53-1002484-04Configuring OSPF26NOTEBy default, the Brocade router ID is the IP address configured on the lowe
BigIron RX Series Configuration Guide 77153-1002484-04Configuring OSPF26BigIron RXC(config)#router ospfBigIron RXC(config-ospf-router)# area 0BigIron
BigIron RX Series Configuration Guide 753-1002484-04Accessing the CLI1MAC port security level The MAC port security level allows you to configure the
772 BigIron RX Series Configuration Guide53-1002484-04Configuring OSPF26Configuring an OSPF non-broadcast interfaceOSPF routers generally use broadcas
BigIron RX Series Configuration Guide 77353-1002484-04Configuring OSPF261. Create an OSPF area on an interface, then enable NBMA on that interface.Big
774 BigIron RX Series Configuration Guide53-1002484-04Configuring OSPF26OSPF point-to-point linksIn an OSPF point-to-point network, where a direct Lay
BigIron RX Series Configuration Guide 77553-1002484-04Configuring OSPF26The following table defines the highlighted fields shown in the above example
776 BigIron RX Series Configuration Guide53-1002484-04Configuring OSPF26When encryption of the passwords or authentication strings is enabled, they ar
BigIron RX Series Configuration Guide 77753-1002484-04Configuring OSPF26• Virtual interface – The combined bandwidth of all the ports in the port-base
778 BigIron RX Series Configuration Guide53-1002484-04Configuring OSPF26NOTEThe BigIron RX advertises the default route into OSPF even if redistributi
BigIron RX Series Configuration Guide 77953-1002484-04Configuring OSPF26For example, to enable redistribution of RIP and static IP routes into OSPF, e
780 BigIron RX Series Configuration Guide53-1002484-04Configuring OSPF26The commands in this example configure some static IP routes, then configure a
BigIron RX Series Configuration Guide 78153-1002484-04Configuring OSPF26• set tag <tag-value>NOTEYou must configure the route map before you con
8 BigIron RX Series Configuration Guide53-1002484-04Accessing the CLI1NOTEThe CLI prompt at the interface level includes the port speed. The speed is
782 BigIron RX Series Configuration Guide53-1002484-04Configuring OSPF26• BigIron RX ->R6Normally, the BigIron RX will choose the path to the R1 wi
BigIron RX Series Configuration Guide 78353-1002484-04Configuring OSPF26NOTEThis option affects only imported, type 5 external routes. A single type 5
784 BigIron RX Series Configuration Guide53-1002484-04Configuring OSPF26If default route origination is enabled and you disable it, the default route
BigIron RX Series Configuration Guide 78553-1002484-04Configuring OSPF26For example, if you configure 10.10.10.0/24 as a candidate default network rou
786 BigIron RX Series Configuration Guide53-1002484-04Configuring OSPF26To change the SPF delay and hold time, enter commands such as the following.Bi
BigIron RX Series Configuration Guide 78753-1002484-04Configuring OSPF26• External routesThe default for all these OSPF route types is 110.NOTEThis fe
788 BigIron RX Series Configuration Guide53-1002484-04Configuring OSPF26The <secs> parameter specifies the number of seconds and can be from 10
BigIron RX Series Configuration Guide 78953-1002484-04Configuring OSPF26Configuring an OSPF area prefix list To filter prefixes advertised in type 3 l
790 BigIron RX Series Configuration Guide53-1002484-04Configuring OSPF26The <name> parameter specifies the prefix list name. You use this name w
BigIron RX Series Configuration Guide 79153-1002484-04Configuring OSPF26Originate LSA Trap: DisabledOriginate MaxAge LSA Tr
BigIron RX Series Configuration Guide 953-1002484-04Searching and filtering output1Optional fieldsWhen two or more options are separated by a vertical
792 BigIron RX Series Configuration Guide53-1002484-04Configuring OSPF26Disabling and enabling SNMP traps for OSPFBy default, most SNMP trap generatio
BigIron RX Series Configuration Guide 79353-1002484-04Configuring OSPF26To reinstate the trap, enter the following command.BigIron RX(config-ospf-rout
794 BigIron RX Series Configuration Guide53-1002484-04Displaying OSPF information26Specify types of OSPF Syslog messages to logYou can specify which k
BigIron RX Series Configuration Guide 79553-1002484-04Displaying OSPF information26• ABR and ASBR information – refer to “Displaying OSPF ABR and ASBR
796 BigIron RX Series Configuration Guide53-1002484-04Displaying OSPF information26Displaying CPU utilization and other OSPF tasksYou can display CPU
BigIron RX Series Configuration Guide 79753-1002484-04Displaying OSPF information26Displaying OSPF area informationTo display OSPF area information, e
798 BigIron RX Series Configuration Guide53-1002484-04Displaying OSPF information26Displaying OSPF neighbor informationTo display OSPF neighbor inform
BigIron RX Series Configuration Guide 79953-1002484-04Displaying OSPF information26Displaying OSPF interface informationTo display OSPF interface info
800 BigIron RX Series Configuration Guide53-1002484-04Displaying OSPF information26Syntax: show ip ospf interface [<ip-addr>]The <ip-addr>
BigIron RX Series Configuration Guide 80153-1002484-04Displaying OSPF information26Displaying OSPF route informationTo display OSPF route information,
10 BigIron RX Series Configuration Guide53-1002484-04Searching and filtering output1Displaying lines containing a specified stringThe following comman
802 BigIron RX Series Configuration Guide53-1002484-04Displaying OSPF information26Syntax: show ip ospf routes [<ip-addr>]The <ip-addr> pa
BigIron RX Series Configuration Guide 80353-1002484-04Displaying OSPF information26BigIron RX# show ip ospf redistribute route 4.3.0.0 255.255.0.0 st
804 BigIron RX Series Configuration Guide53-1002484-04Displaying OSPF information26Displaying OSPF database link state informationTo display database
BigIron RX Series Configuration Guide 80553-1002484-04Displaying OSPF information26NOTEYou cannot use the extensive option in combination with other d
806 BigIron RX Series Configuration Guide53-1002484-04Displaying OSPF information26Displaying OSPF trap statusAll traps are enabled by default when yo
BigIron RX Series Configuration Guide 80753-1002484-04Displaying OSPF information26vlan 1 name DEFAULT-VLAN!!clock summer-timeclock timezone us Pacifi
808 BigIron RX Series Configuration Guide53-1002484-04Displaying OSPF information26Displaying OSPF virtual link informationUse the show ip ospf virtua
BigIron RX Series Configuration Guide 80953-1002484-04Displaying OSPF information26Configuring OSPF graceful restart timerThe OSPF graceful restart ti
810 BigIron RX Series Configuration Guide53-1002484-04Displaying OSPF information26OSPF Graceful Restart requires at least three routers as shown in F
BigIron RX Series Configuration Guide 81153-1002484-04Displaying OSPF information26Note the "<in graceful restart state...>" entry app
BigIron RX Series Configuration Guide 1153-1002484-04Searching and filtering output1At the --More-- prompt, you can press the forward slash key ( / )
812 BigIron RX Series Configuration Guide53-1002484-04Displaying OSPF information26
BigIron RX Series Configuration Guide 81353-1002484-04Chapter27Configuring BGP4 (IPv4 and IPv6)In this chapter•Overview of BGP4 . . . . . . . . . . .
814 BigIron RX Series Configuration Guide53-1002484-04Overview of BGP427•Using the IP default route as a valid next hop for a BGP4 route . . . . . .
BigIron RX Series Configuration Guide 81553-1002484-04Overview of BGP427Figure 121 on page 815 shows a simple example of two BGP4 ASs. Each AS contain
816 BigIron RX Series Configuration Guide53-1002484-04Overview of BGP427NOTEThe device re-advertises a learned best BGP4 route to the device’s neighbo
BigIron RX Series Configuration Guide 81753-1002484-04Overview of BGP427• The device compares the MEDs of two otherwise equivalent paths if and only i
818 BigIron RX Series Configuration Guide53-1002484-04Overview of BGP427• KEEPALIVE• NOTIFICATION• ROUTE REFRESHOPEN messageAfter a BGP4 router establ
BigIron RX Series Configuration Guide 81953-1002484-04Brocade implementation of BGP427• Path attributes – Parameters that indicate route-specific info
820 BigIron RX Series Configuration Guide53-1002484-04Memory considerations27• RFC 2439 (Route Flap Dampening)• RFC 2796 (Route Reflection)• RFC 2842
BigIron RX Series Configuration Guide 82153-1002484-04Configuring BGP427The address family command also requires you to select a sub-address family, w
BigIron RX Series Configuration Guide ix53-1002484-04Configuring packet parameters . . . . . . . . . . . . . . . . . . . . . . . . . . . .181Changing
12 BigIron RX Series Configuration Guide53-1002484-04Searching and filtering output1To display lines that do not contain a specified search string (si
822 BigIron RX Series Configuration Guide53-1002484-04Configuring BGP427default-local-preference x “Changing the default local preference” on page 841
BigIron RX Series Configuration Guide 82353-1002484-04Configuring BGP427TABLE 133 IPv4 and IPv6 BGP Commands at Different Configuration Levels Comman
824 BigIron RX Series Configuration Guide53-1002484-04Configuring BGP427When parameter changes take effectSome parameter changes take effect immediate
BigIron RX Series Configuration Guide 82553-1002484-04Activating and disabling BGP427• Enable next-hop recursion.• Change the default metric.• Disable
826 BigIron RX Series Configuration Guide53-1002484-04Entering and exiting the address family configuration level27BigIron RX> enableBigIron RX# co
BigIron RX Series Configuration Guide 82753-1002484-04Filtering specific IP addresses27BigIron RX(config-bgp)# address-family ipv4 unicastBigIron RX(c
828 BigIron RX Series Configuration Guide53-1002484-04Defining an AS-path filter27The permit | deny parameter indicates the action the device takes if
BigIron RX Series Configuration Guide 82953-1002484-04Defining a community filter27NOTEIf the filter is referred to by a route map’s match statement,
830 BigIron RX Series Configuration Guide53-1002484-04Configuring a switch to allow routes with its own AS number27The no-export keyword filters for r
BigIron RX Series Configuration Guide 83153-1002484-04BGP Null0 routing27FIGURE 123 Sample Null0 routing applicationThe following steps configure a nu
BigIron RX Series Configuration Guide 1353-1002484-04Searching and filtering output1If you want to filter for a special character instead of using the
832 BigIron RX Series Configuration Guide53-1002484-04BGP Null0 routing27Configuration examplesRouter 6The following configuration defines specific pr
BigIron RX Series Configuration Guide 83353-1002484-04BGP Null0 routing27BigIron RX(config-bgp-router)#neighbor <router4_int_ip address> remote-
834 BigIron RX Series Configuration Guide53-1002484-04Aggregating routes advertised to BGP4 neighbors27Issuing a show ip route on Router 1 and Router
BigIron RX Series Configuration Guide 83553-1002484-04Configuring the device to always compare MEDs27The advertise-map <map-name> parameter conf
836 BigIron RX Series Configuration Guide53-1002484-04Redistributing IBGP routes27Syntax: [no] compare-med-empty-aspathDisabling or re-enabling compar
BigIron RX Series Configuration Guide 83753-1002484-04Configuring a route reflector27Configuring a route reflectorYou can configure one cluster ID on
838 BigIron RX Series Configuration Guide53-1002484-04Configuring confederations27The Brocade implementation of this feature is based on RFC 3065.Norm
BigIron RX Series Configuration Guide 83953-1002484-04Configuring confederations27In this example, four routers are configured into two sub-ASs, each
840 BigIron RX Series Configuration Guide53-1002484-04Configuring route flap dampening27Syntax: confederation peers <num> [<num> …]The <
BigIron RX Series Configuration Guide 84153-1002484-04Originating the default route27The <suppress> parameter specifies how high a route’s penal
14 BigIron RX Series Configuration Guide53-1002484-04Searching and filtering output1The following characters are valid in file names:• All upper and l
842 BigIron RX Series Configuration Guide53-1002484-04Changing the default metric used for redistribution27NOTETo set the local preference for individ
BigIron RX Series Configuration Guide 84353-1002484-04Requiring the first AS to be the neighbor’s AS27Here are the default administrative distances on
844 BigIron RX Series Configuration Guide53-1002484-04Enabling fast external fallover27BigIron RX(config-bgp)# enforce-first-asSyntax: [no] enforce-fi
BigIron RX Series Configuration Guide 84553-1002484-04Setting the local AS number27Setting the local AS numberThe local AS number identifies the AS th
846 BigIron RX Series Configuration Guide53-1002484-04Customizing BGP4 load sharing27NOTEThis command affects route selection only when route paths ar
BigIron RX Series Configuration Guide 84753-1002484-04Configuring BGP4 neighbors27NOTEThe BigIron RX attempts to establish a BGP4 session with a neigh
848 BigIron RX Series Configuration Guide53-1002484-04Configuring BGP4 neighbors27NOTEThe advertisement-interval parameter is not supported in BigIron
BigIron RX Series Configuration Guide 84953-1002484-04Configuring BGP4 neighbors27Alternatively, you can specify filter-list <acl-num> in | out
850 BigIron RX Series Configuration Guide53-1002484-04Configuring BGP4 neighbors27prefix-list <string> in | out specifies an IP prefix list. You
BigIron RX Series Configuration Guide 85153-1002484-04Configuring BGP4 neighbors27Removing route dampening from suppressed neighbor routesYou can sele
BigIron RX Series Configuration Guide 1553-1002484-04Searching and filtering output1NOTEMost configuration changes are dynamic and thus do not require
852 BigIron RX Series Configuration Guide53-1002484-04Configuring BGP4 neighbors27The following command verifies that the route has been unsuppressed.
BigIron RX Series Configuration Guide 85353-1002484-04Configuring BGP4 neighbors27Notice that the software has converted the commands that specify an
854 BigIron RX Series Configuration Guide53-1002484-04Configuring a BGP4 peer group27NOTEThe command also displays SNMP community strings in clear tex
BigIron RX Series Configuration Guide 85553-1002484-04Configuring a BGP4 peer group27• If you do not specify a parameter for an individual neighbor, t
856 BigIron RX Series Configuration Guide53-1002484-04Configuring a BGP4 peer group27[route-reflector-client][send-community] [soft-reconfiguration in
BigIron RX Series Configuration Guide 85753-1002484-04Specifying a list of networks to advertise27NOTEThe software also contains an option to end the
858 BigIron RX Series Configuration Guide53-1002484-04Using the IP default route as a valid next hop for a BGP4 route27NOTEYou must configure the rout
BigIron RX Series Configuration Guide 85953-1002484-04Enabling next-hop recursion27By default, the software performs only one lookup for a BGP route’s
860 BigIron RX Series Configuration Guide53-1002484-04Enabling next-hop recursion27The route to the next-hop gateway is a BGP route, not an IGP route,
BigIron RX Series Configuration Guide 86153-1002484-04Modifying redistribution parameters27The next-hop IP address for 102.0.0.1 is not an IGP route,
16 BigIron RX Series Configuration Guide53-1002484-04Searching and filtering output1
862 BigIron RX Series Configuration Guide53-1002484-04Modifying redistribution parameters27NOTEEntering redistribute ospf simply redistributes interna
BigIron RX Series Configuration Guide 86353-1002484-04Modifying redistribution parameters27NOTEThe route map you specify must already be configured on
864 BigIron RX Series Configuration Guide53-1002484-04Using a table map to set the tag value27The route-map <map-name> parameter specifies a rou
BigIron RX Series Configuration Guide 86553-1002484-04Changing the keep alive time and hold time27Changing the keep alive time and hold timeThe Keep A
866 BigIron RX Series Configuration Guide53-1002484-04Adding a loopback interface27• If the router has loopback interfaces, the default router ID is t
BigIron RX Series Configuration Guide 86753-1002484-04Changing the maximum number of paths for BGP4 load sharing27Changing the maximum number of paths
868 BigIron RX Series Configuration Guide53-1002484-04Configuring route reflection parameters27NOTEIf the cluster contains more than one route reflect
BigIron RX Series Configuration Guide 86953-1002484-04Configuring route reflection parameters27• The device adds the route reflection attributes only
870 BigIron RX Series Configuration Guide53-1002484-04Filtering27FilteringThis section describes the following:• “Filtering AS-paths” on page 870• “Fi
BigIron RX Series Configuration Guide 87153-1002484-04Filtering27The seq <seq-value> parameter is optional and specifies the AS-path list’s sequ
BigIron RX Series Configuration Guide 1753-1002484-04Chapter2Using a Redundant Management ModuleIn this chapter•How management module redundancy works
872 BigIron RX Series Configuration Guide53-1002484-04Filtering27+ The plus sign matches on one or more sequences of a pattern. For example, the foll
BigIron RX Series Configuration Guide 87353-1002484-04Filtering27If you want to filter for a special character instead of using the special character
874 BigIron RX Series Configuration Guide53-1002484-04Filtering27Defining a community ACLTo configure community ACL 1, enter a command such as the fol
BigIron RX Series Configuration Guide 87553-1002484-04Filtering27Defining and applying IP prefix listsAn IP prefix list specifies a list of networks.
876 BigIron RX Series Configuration Guide53-1002484-04Filtering27Defining neighbor distribute listsA neighbor distribute list is a list of BGP4 addres
BigIron RX Series Configuration Guide 87753-1002484-04Filtering27• A sequence of community filters• A sequence of address filters• The IP address of t
878 BigIron RX Series Configuration Guide53-1002484-04Filtering27The permit | deny parameter specifies the action the router will take if a route matc
BigIron RX Series Configuration Guide 87953-1002484-04Filtering27NOTEThe filters must already be configured.The community <num> parameter specif
880 BigIron RX Series Configuration Guide53-1002484-04Filtering27Syntax: match community <string>The <string> parameter specifies a commun
BigIron RX Series Configuration Guide 88153-1002484-04Filtering27The first command configures an IP ACL that matches on routes received from 192.168.6
18 BigIron RX Series Configuration Guide53-1002484-04How management module redundancy works2After the modules boot, the active module compares the sta
882 BigIron RX Series Configuration Guide53-1002484-04Filtering27Syntax: set [as-path [prepend <as-num,as-num,...>]] | [automatic-tag] | [comm-l
BigIron RX Series Configuration Guide 88353-1002484-04Filtering27The metric-type type-1 | type-2 parameter changes the metric type of a route redistri
884 BigIron RX Series Configuration Guide53-1002484-04Filtering27The value that the software substitutes for peer-address depends on whether the route
BigIron RX Series Configuration Guide 88553-1002484-04Filtering27• Enable the cooperative route filtering feature on the device. You can enable the de
886 BigIron RX Series Configuration Guide53-1002484-04Filtering27To activate cooperative filtering, reset the session with the neighbor. This is requ
BigIron RX Series Configuration Guide 88753-1002484-04Filtering27Syntax: show ip bgp neighbor <ip-addr>To display the ORFs received from a neigh
888 BigIron RX Series Configuration Guide53-1002484-04Filtering27The route flap dampening mechanism is based on penalties. When a route exceeds a conf
BigIron RX Series Configuration Guide 88953-1002484-04Filtering27The address-filter commands in this example configure two BGP4 address filters, for n
890 BigIron RX Series Configuration Guide53-1002484-04Filtering27BigIron RX(config-routemap DAMPENING_MAP_NEIGHBOR_A)# exitBigIron RX(config)# router
BigIron RX Series Configuration Guide 89153-1002484-04Filtering27Syntax: show ip bgp flap-statistics [regular-expression <regular-expression> |
BigIron RX Series Configuration Guide 1953-1002484-04How management module redundancy works2Manual switchoverIn some situations, you may want to manua
892 BigIron RX Series Configuration Guide53-1002484-04Filtering27Clearing route flap dampening statisticsNOTEClearing the dampening statistics for a r
BigIron RX Series Configuration Guide 89353-1002484-04Filtering27Using soft reconfigurationThe soft reconfiguration feature places policy changes into
894 BigIron RX Series Configuration Guide53-1002484-04Filtering27NOTEThe syntax related to soft reconfiguration is shown. For complete command syntax,
BigIron RX Series Configuration Guide 89553-1002484-04Filtering27Syntax: show ip bgp neighbors <ip-addr> received-routes [detail]The detail para
896 BigIron RX Series Configuration Guide53-1002484-04Filtering27To request a dynamic refresh of all routes from a neighbor, enter a command such as t
BigIron RX Series Configuration Guide 89753-1002484-04Filtering27To place a new or changed outbound policy or filter into effect, you must enter a cle
898 BigIron RX Series Configuration Guide53-1002484-04Filtering27If you make changes to filters or route maps and the neighbor does not support dynami
BigIron RX Series Configuration Guide 89953-1002484-04Filtering27BigIron RX# clear ip bgp neighbor 10.0.0.1 trafficTo clear the BGP4 message counter f
900 BigIron RX Series Configuration Guide53-1002484-04Displaying BGP4 information27Clearing diagnostic buffersThe BigIron RX stores the following BGP4
BigIron RX Series Configuration Guide 90153-1002484-04Displaying BGP4 information27Displaying summary BGP4 informationYou can display the local AS num
20 BigIron RX Series Configuration Guide53-1002484-04How management module redundancy works2The following sections explain the implications for these
902 BigIron RX Series Configuration Guide53-1002484-04Displaying BGP4 information27Number of Attribute Entries Installed The number of BGP4 route-attr
BigIron RX Series Configuration Guide 90353-1002484-04Displaying BGP4 information27Displaying the active BGP4 configurationTo view the active BGP4 con
904 BigIron RX Series Configuration Guide53-1002484-04Displaying BGP4 information27Syntax: show ip bgp neighbors [<ip-addr>] | [route-summary] T
BigIron RX Series Configuration Guide 90553-1002484-04Displaying BGP4 information27Displaying BGP4 neighbor informationYou can display configuration i
906 BigIron RX Series Configuration Guide53-1002484-04Displaying BGP4 information27This example shows how to display information for a specific neighb
BigIron RX Series Configuration Guide 90753-1002484-04Displaying BGP4 information27The attribute-entries option shows the attribute-entries associated
908 BigIron RX Series Configuration Guide53-1002484-04Displaying BGP4 information27RouterID The neighbor’s router ID.Description The description you g
BigIron RX Series Configuration Guide 90953-1002484-04Displaying BGP4 information27NextHopSelf Whether this option is enabled for the neighbor. Defaul
910 BigIron RX Series Configuration Guide53-1002484-04Displaying BGP4 information27Last Connection Reset Reason The reason the previous session with t
BigIron RX Series Configuration Guide 91153-1002484-04Displaying BGP4 information27Notification Sent If the router receives a NOTIFICATION message fro
BigIron RX Series Configuration Guide 2153-1002484-04Management module redundancy configuration2Once booted, the redundant management module keeps up-
912 BigIron RX Series Configuration Guide53-1002484-04Displaying BGP4 information27TCP Connection state The state of the connection with the neighbor.
BigIron RX Series Configuration Guide 91353-1002484-04Displaying BGP4 information27Displaying route information for a neighborYou can display routes b
914 BigIron RX Series Configuration Guide53-1002484-04Displaying BGP4 information27This display shows the following information.TABLE 139 BGP4 route s
BigIron RX Series Configuration Guide 91553-1002484-04Displaying BGP4 information27Displaying advertised routesTo display the routes the device has ad
916 BigIron RX Series Configuration Guide53-1002484-04Displaying BGP4 information27For information about the fields in this display, refer to Table 14
BigIron RX Series Configuration Guide 91753-1002484-04Displaying BGP4 information27Syntax: show ip bgp routes summaryThis display shows the following
918 BigIron RX Series Configuration Guide53-1002484-04Displaying BGP4 information27Syntax: show ip bgp routes [[network] <ip-addr>] | <num>
BigIron RX Series Configuration Guide 91953-1002484-04Displaying BGP4 information27The no-best option displays the routes for which none of the routes
920 BigIron RX Series Configuration Guide53-1002484-04Displaying BGP4 information27Syntax: show ip bgp routes unreachableFor information about the fie
BigIron RX Series Configuration Guide 92153-1002484-04Displaying BGP4 information27TABLE 141 BGP4 network informationThis field... Displays...Number o
Verwandte Produkte und Handbücher für Computerzubehör Brocade BigIron RX Series Configuration Guide
(40 Seiten)
(135 Seiten)
(42 Seiten)
(52 Seiten)
(101 Seiten)
(65 Seiten)
(607 Seiten)
(428 Seiten)
(68 Seiten)
(593 Seiten)
(520 Seiten)
(63 Seiten)
(854 Seiten)
(158 Seiten)
(374 Seiten)
(180 Seiten)
(30 Seiten)
(132 Seiten)
© 2020, manymanuals.de. Alle Rechte vorbehalten. | 0.072 s |
Manymanuals.com
Manymanuals.de
Manymanuals.fr
Manymanuals.it
Manymanuals.pl
Manymanuals.cz
Manymanuals.es
Manymanuals-pt.com
Kommentare zu diesen Handbüchern