Brocade TurboIron 24X Series Configuration Guide Bedienungsanleitung

53-1003053-0130 September 2013®Brocade TurboIron 24X SeriesConfiguration GuideSupporting FastIron Software Release 08.0.01

x Brocade TurboIron 24X Series Configuration Guide53-1003053-01Digital optical monitoring . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

66 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Restricting remote access to management functionsTurboIron(config)#access-list 10 deny

966 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Configuring 802.1X port securitySpecifying a timeout for retransmission of messages t

Brocade TurboIron 24X Series Configuration Guide 96753-1003053-01Configuring 802.1X port securityTurboIron(config)#dot1x-enableTurboIron(config-dot1x)

968 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Configuring 802.1X port securityAs a shortcut, use the command [no] mac-session-aging

Brocade TurboIron 24X Series Configuration Guide 96953-1003053-01Displaying 802.1X informationOnce the success timeout action is enabled, use the no f

970 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Displaying 802.1X informationDisplaying 802.1X configuration informationTo display in

Brocade TurboIron 24X Series Configuration Guide 97153-1003053-01Displaying 802.1X informationTo display information about the 802.1X configuration on

972 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Displaying 802.1X informationDisplaying 802.1X statisticsTo display 802.1X statistics

Brocade TurboIron 24X Series Configuration Guide 97353-1003053-01Displaying 802.1X informationClearing 802.1X statisticsYou can clear the 802.1X stati

974 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Displaying 802.1X informationIn this example, the 802.1X-enabled port has been moved

Brocade TurboIron 24X Series Configuration Guide 97553-1003053-01Displaying 802.1X informationSyntax: show dot1x ip-ACLDisplaying dynamically applied

Brocade TurboIron 24X Series Configuration Guide 6753-1003053-01Restricting remote access to management functionsNOTEThe syntax for using ACLs for SNM

976 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Displaying 802.1X information• The number of users connected on each port in a 802.1X

Brocade TurboIron 24X Series Configuration Guide 97753-1003053-01Displaying 802.1X informationSyntax: show dot1x config ethernet <portnum>The &l

978 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Displaying 802.1X informationExample Syntax: show dot1x mac-sessionTable 151 lists th

Brocade TurboIron 24X Series Configuration Guide 97953-1003053-01Sample 802.1X configurations7 0 0 no no

980 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Sample 802.1X configurationsThe following commands configure the device in Figure 120

Brocade TurboIron 24X Series Configuration Guide 98153-1003053-01Sample 802.1X configurationsTurboIron(config)#interface e 3TurboIron(config-if-e10000

982 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Sample 802.1X configurationsThe following commands configure the device in Figure 121

Brocade TurboIron 24X Series Configuration Guide 98353-1003053-01Sample 802.1X configurationsTurboIron(config)#interface e 1TurboIron(config-if-e10000

984 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Using multi-device port authentication and 802.1X security on the same portIn this ex

Brocade TurboIron 24X Series Configuration Guide 98553-1003053-01Using multi-device port authentication and 802.1X security on the same portWhen both

68 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Restricting remote access to management functionsNOTEIn RADIUS, the standard attribute

986 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Using multi-device port authentication and 802.1X security on the same portIf neither

Brocade TurboIron 24X Series Configuration Guide 98753-1003053-01Using multi-device port authentication and 802.1X security on the same portNOTEThis e

988 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Using multi-device port authentication and 802.1X security on the same portWhen the P

Brocade TurboIron 24X Series Configuration Guide 98953-1003053-01Using multi-device port authentication and 802.1X security on the same portMulti-devi

990 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Using multi-device port authentication and 802.1X security on the same port

Brocade TurboIron 24X Series Configuration Guide 99153-1003053-01Chapter31Using the MAC Port Security FeatureIn this chapter•Overview. . . . . . . . .

992 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Configuring the MAC port security featureBesides the maximum of 64 local resources av

Brocade TurboIron 24X Series Configuration Guide 99353-1003053-01Configuring the MAC port security featureTurboIron(config)#port securityTurboIron(con

994 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Configuring the MAC port security featureOn an untagged interfaceTo specify a secure

Brocade TurboIron 24X Series Configuration Guide 99553-1003053-01Configuring the MAC port security featureSpecifying the action taken when a securityv

Brocade TurboIron 24X Series Configuration Guide 6953-1003053-01Restricting remote access to management functionsTurboIron(config)#all-client 10.157.2

996 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Clearing port security statisticsTurboIron(config)#int e 11TurboIron(config-if-e10000

Brocade TurboIron 24X Series Configuration Guide 99753-1003053-01Displaying port security informationDisplaying port security settingsYou can display

998 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Displaying port security informationDisplaying port security statisticsYou can displa

Brocade TurboIron 24X Series Configuration Guide 99953-1003053-01Chapter32Configuring Multi-Device Port AuthenticationIn this chapter•How multi-device

1000 Brocade TurboIron 24X Series Configuration Guide53-1003053-01How multi-device port authentication worksThe RADIUS server is configured with the u

Brocade TurboIron 24X Series Configuration Guide 100153-1003053-01Using multi-device port authentication and 802.1X security on the same portSupport f

1002 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Using multi-device port authentication and 802.1X security on the same port4. If the

Brocade TurboIron 24X Series Configuration Guide 100353-1003053-01Configuring multi-device port authenticationIf neither of these VSAs exist in a devi

1004 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Configuring multi-device port authenticationExample TurboIron(config)#interface e 1T

Brocade TurboIron 24X Series Configuration Guide 100553-1003053-01Configuring multi-device port authenticationNote that the restricted VLAN must alrea

70 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Restricting remote access to management functionsThe following command allows HTTP and

1006 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Configuring multi-device port authenticationConfiguring dynamic VLAN assignmentAn in

Brocade TurboIron 24X Series Configuration Guide 100753-1003053-01Configuring multi-device port authentication• For tagged or dual-mode ports, if the

1008 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Configuring multi-device port authenticationYou can optionally specify an alternate

Brocade TurboIron 24X Series Configuration Guide 100953-1003053-01Configuring multi-device port authenticationThe dynamic IP ACL is active as long as

1010 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Configuring multi-device port authenticationConfiguring the RADIUS server to support

Brocade TurboIron 24X Series Configuration Guide 101153-1003053-01Configuring multi-device port authenticationTurboIron(config)#interface e 1TurboIron

1012 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Configuring multi-device port authenticationYou can optionally disable aging for MAC

Brocade TurboIron 24X Series Configuration Guide 101353-1003053-01Configuring multi-device port authenticationSpecifying the aging time for blocked MA

1014 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Configuring multi-device port authenticationDeny User access to the network after a

Brocade TurboIron 24X Series Configuration Guide 101553-1003053-01Displaying multi-device port authentication informationLimiting the number of authen

Brocade TurboIron 24X Series Configuration Guide 7153-1003053-01Restricting remote access to management functionsSyntax: [no] telnet server enable vla

1016 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Displaying multi-device port authentication informationDisplaying multi-device port

Brocade TurboIron 24X Series Configuration Guide 101753-1003053-01Displaying multi-device port authentication informationThe <portnum> parameter

1018 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Displaying multi-device port authentication informationDisplaying multi-device port

Brocade TurboIron 24X Series Configuration Guide 101953-1003053-01Displaying multi-device port authentication informationThe following table describes

1020 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Displaying multi-device port authentication informationPort VLAN state Indicates the

Brocade TurboIron 24X Series Configuration Guide 102153-1003053-01Displaying multi-device port authentication informationRADIUS Server The IP address

1022 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Displaying multi-device port authentication information

Brocade TurboIron 24X Series Configuration Guide 102353-1003053-01Chapter33Protecting Against Denial of Service AttacksIn this chapter•Protecting agai

1024 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Protecting against Smurf attacksAvoiding being a victim in a Smurf attackYou can con

Brocade TurboIron 24X Series Configuration Guide 102553-1003053-01Protecting against TCP SYN attacksProtecting against TCP SYN attacksTCP SYN attacks

72 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Restricting remote access to management functionsThese commands configure port-based V

1026 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Protecting against TCP SYN attacksThe device supports the following burst-normal, bu

Brocade TurboIron 24X Series Configuration Guide 102753-1003053-01Protecting against TCP SYN attacks• If the RST bit is set and the sequence number is

1028 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Protecting against TCP SYN attacksDisplaying statistics about packets dropped due to

Brocade TurboIron 24X Series Configuration Guide 102953-1003053-01Chapter34Configuring Rate Limiting and Rate Shaping In this chapter•Rate limiting ov

1030 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Rate limiting in hardwareHow Fixed Rate Limiting worksFixed Rate Limiting counts the

Brocade TurboIron 24X Series Configuration Guide 103153-1003053-01Rate limiting in hardwareConfiguring a port-based rate limiting policyTo configure r

1032 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Rate shaping overviewSyntax: show rate-limit fixedThe command lists the ports on whi

Brocade TurboIron 24X Series Configuration Guide 103353-1003053-01Rate shaping overviewConfiguring outbound rate shaping for a portTo configure the ma

1034 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Rate shaping overviewThe display lists the ports on a device, the configured outboun

Brocade TurboIron 24X Series Configuration Guide 103553-1003053-01Chapter35Configuring Quality of ServiceIn this chapter•Classification . . . . . . .

Brocade TurboIron 24X Series Configuration Guide 7353-1003053-01Restricting remote access to management functions• TFTPNOTEIf you disable Telnet acces

1036 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Classification• Layer 3 Differentiated Service codepoint (DSCP) – This is the value

Brocade TurboIron 24X Series Configuration Guide 103753-1003053-01ClassificationAs shown in the figure, the first criteria considered is whether the p

1038 Brocade TurboIron 24X Series Configuration Guide53-1003053-01ClassificationOnce a packet is classified by one of the procedures mentioned, it is

Brocade TurboIron 24X Series Configuration Guide 103953-1003053-01QoS queuesMapping between DSCP value and Forwarding Queue cannot be changed. However

1040 Brocade TurboIron 24X Series Configuration Guide53-1003053-01QoS queuesThe following sections describe how to change the priority for each of the

Brocade TurboIron 24X Series Configuration Guide 104153-1003053-01MarkingBuffer allocation/threshold for QoS queuesBy default, Ironware software alloc

1042 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Configuring the QoS mappingsApplication notes• DSCP-based QoS is not automatically h

Brocade TurboIron 24X Series Configuration Guide 104353-1003053-01Configuring the QoS mappingsNotice that DSCP values range from 0 – 63, whereas the i

1044 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Configuring the QoS mappingsThese commands configure the mappings displayed in the D

Brocade TurboIron 24X Series Configuration Guide 104553-1003053-01Scheduling• qosp3• qosp2• qosp1• qosp0 SchedulingScheduling is the process of mappin

74 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Setting passwordsSetting passwordsPasswords can be used to secure the following access

1046 Brocade TurboIron 24X Series Configuration Guide53-1003053-01SchedulingBy default, when you specify the combined SP and WRR queuing method, the s

Brocade TurboIron 24X Series Configuration Guide 104753-1003053-01SchedulingSyntax: qos name <old-name> <new-name>The <old-name> par

1048 Brocade TurboIron 24X Series Configuration Guide53-1003053-01SchedulingSyntax: [no] qos profile <queue> <percentage> <queue> &l

Brocade TurboIron 24X Series Configuration Guide 104953-1003053-01Viewing QoS settingsNOTEThe percentages must add up to 100. The device does not adj

1050 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Viewing DSCP-based QoS settingsSyntax: show qos-tosThis command shows the following

Brocade TurboIron 24X Series Configuration Guide 105153-1003053-01AppendixASyslog messagesTable 176 lists all of the Syslog messages. Note that some o

1052 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Syslog messagesAlert MAC Authentication failed for <mac-address> on <portnu

Brocade TurboIron 24X Series Configuration Guide 105353-1003053-01Syslog messagesAlert System: No Free Tcam Entry available. System will be unstableTh

1054 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Syslog messagesInformation MAC Filter removed from port <port-id> by <usern

Brocade TurboIron 24X Series Configuration Guide 105553-1003053-01Syslog messagesInformational Bridge topology change, vlan <vlan-id>, interface

Brocade TurboIron 24X Series Configuration Guide 7553-1003053-01Setting passwords• Read Only level – Allows access to the Privileged EXEC mode and CON

1056 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Syslog messagesInformational DOT1X Port <portnum> is unauthorized because syst

Brocade TurboIron 24X Series Configuration Guide 105753-1003053-01Syslog messagesInformational MAC Based Vlan Disabled on port <port id> A MAC B

1058 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Syslog messagesInformational SSH | telnet server enabled | disabled from console | t

Brocade TurboIron 24X Series Configuration Guide 105953-1003053-01Syslog messagesInformational System: Static Mac entry with Mac Address <mac-addre

1060 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Syslog messagesInformational vlan <vlan-id> Bridge is RootBridge <mac-addre

Brocade TurboIron 24X Series Configuration Guide 106153-1003053-01Syslog messagesNotification Authentication Enabled on <portnum> The multi-devi

1062 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Syslog messagesNotification Local ICMP exceeds <burst-max> burst packets, stop

Brocade TurboIron 24X Series Configuration Guide 106353-1003053-01Syslog messagesNotification OSPF intf authen failure, rid <router-id>, intf ad

1064 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Syslog messagesNotification OSPF intf config error, rid <router-id>, intf addr

Brocade TurboIron 24X Series Configuration Guide 106553-1003053-01Syslog messagesNotification OSPF intf rcvd bad pkt: Bad Checksum, rid <ip-addr>

Brocade TurboIron 24X Series Configuration Guide xi53-1003053-01sFlow . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

76 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Setting passwords• All interface configuration levels• Read Only level gives access to

1066 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Syslog messagesNotification OSPF intf retransmit, rid <router-id>, intf addr &

Brocade TurboIron 24X Series Configuration Guide 106753-1003053-01Syslog messagesNotification OSPF nbr state changed, rid <router-id>, nbr addr

1068 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Syslog messagesNotification OSPF virtual intf authen failure,rid <router-id>,

Brocade TurboIron 24X Series Configuration Guide 106953-1003053-01Syslog messagesNotification OSPF virtual intf config error, rid <router-id>, i

1070 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Syslog messagesNotification OSPF virtual intf retransmit, rid <router-id>, int

Brocade TurboIron 24X Series Configuration Guide 107153-1003053-01Syslog messagesNotification OSPF virtual nbr state changed, rid <router-id>, n

1072 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Syslog messagesNotification VRRP intf state changed, intf <portnum>, vrid <

Brocade TurboIron 24X Series Configuration Guide 107353-1003053-01Syslog messagesWarning list <ACL-num> denied <ip-proto> <src-ip-addr&

1074 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Syslog messagesWarning No global IP! cannot send IGMP msg. The device is configured

Brocade TurboIron 24X Series Configuration Guide 107553-1003053-01AppendixBSoftware Specifications In this appendix•IEEE compliance . . . . . . . . .

Brocade TurboIron 24X Series Configuration Guide 7753-1003053-01Setting passwordsThe <command-string> parameter specifies the command you are al

1076 Brocade TurboIron 24X Series Configuration Guide53-1003053-01RFC supportNOTESome devices support only a subset of the RFCs. For example, Layer 2

Brocade TurboIron 24X Series Configuration Guide 107753-1003053-01RFC support1493 Bridge MIB (excluding filtering of objects) Yes1516 Repeater MIB Ye

1078 Brocade TurboIron 24X Series Configuration Guide53-1003053-01RFC support2570 Introduction to version 3 of the Internet-standard Network Managemen

Brocade TurboIron 24X Series Configuration Guide 107953-1003053-01RFC support3413 Simple Network Management Protocol (SNMP) ApplicationsYes3414 User-b

1080 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Internet draftsInternet draftsIn addition to the RFCs listed in “RFC support” on pag

Brocade TurboIron 24X Series Configuration Guide 108153-1003053-01AppendixCNIAP-CCEVS CertificationIn this appendix•NIAP-CCEVS certified TurboIron X S

1082 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Local user password changesLocal user password changesPlease note that if existing u

78 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Setting up local user accountsSetting up local user accountsYou can define up to 16 lo

Brocade TurboIron 24X Series Configuration Guide 7953-1003053-01Setting up local user accounts• A password can now be set to expire.Enabling enhanced

80 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Setting up local user accountsTurboIron(config)#username kelly passwordEnter Password:

Brocade TurboIron 24X Series Configuration Guide 8153-1003053-01Setting up local user accountsEnhanced login lockout The CLI provides up to three logi

82 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Setting up local user accountsNOTEThis requirement is disabled by default, unless conf

Brocade TurboIron 24X Series Configuration Guide 8353-1003053-01Setting up local user accounts• 5 – Read Only level The default privilege level is 0.

84 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Configuring TACACS/TACACS+ securitySyntax: [no] username <user-string> [privileg

Brocade TurboIron 24X Series Configuration Guide 8553-1003053-01Configuring TACACS/TACACS+ security• Access to the Privileged EXEC level and CONFIG le

xii Brocade TurboIron 24X Series Configuration Guide53-1003053-01Chapter 15 Configuring Metro FeaturesTopology groups. . . . . . . . . . . . . . . . .

86 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Configuring TACACS/TACACS+ security1. A user attempts to gain access to the device by

Brocade TurboIron 24X Series Configuration Guide 8753-1003053-01Configuring TACACS/TACACS+ security1. A Telnet or SSH user previously authenticated by

88 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Configuring TACACS/TACACS+ securityAAA security for commands pasted into the running-c

Brocade TurboIron 24X Series Configuration Guide 8953-1003053-01Configuring TACACS/TACACS+ securityTACACS/TACACS+ configuration considerations• You mu

90 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Configuring TACACS/TACACS+ securityIdentifying the TACACS/TACACS+ serversTo use TACACS

Brocade TurboIron 24X Series Configuration Guide 9153-1003053-01Configuring TACACS/TACACS+ securitySyntax: tacacs-server host <ip-addr> | <

92 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Configuring TACACS/TACACS+ securityWhen you display the configuration of the device, t

Brocade TurboIron 24X Series Configuration Guide 9353-1003053-01Configuring TACACS/TACACS+ securityThe commands above cause TACACS/TACACS+ to be the p

94 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Configuring TACACS/TACACS+ securityTurboIron(config)#aaa authentication login privileg

Brocade TurboIron 24X Series Configuration Guide 9553-1003053-01Configuring TACACS/TACACS+ securityA user privilege level is obtained from the TACACS+

Brocade TurboIron 24X Series Configuration Guide xiii53-1003053-01Configuring a trunk group. . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

96 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Configuring TACACS/TACACS+ security service = exec { priv-lvl = 15 }}The

Brocade TurboIron 24X Series Configuration Guide 9753-1003053-01Configuring TACACS/TACACS+ security• 0 – Authorization is performed for commands avail

98 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Configuring TACACS/TACACS+ securityConfiguring TACACS+ accounting for CLI commandsYou

Brocade TurboIron 24X Series Configuration Guide 9953-1003053-01Configuring TACACS/TACACS+ security• If you specify a loopback interface as the single

100 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Configuring RADIUS securityThe following table describes the TACACS/TACACS+ informati

Brocade TurboIron 24X Series Configuration Guide 10153-1003053-01Configuring RADIUS security1. A user attempts to gain access to the device by doing o

102 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Configuring RADIUS securityRADIUS accountingRADIUS accounting works as follows.1. One

Brocade TurboIron 24X Series Configuration Guide 10353-1003053-01Configuring RADIUS securityAAA security for commands pasted Into the running-configIf

104 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Configuring RADIUS security• You can select only one primary authentication method fo

Brocade TurboIron 24X Series Configuration Guide 10553-1003053-01Configuring RADIUS securityEnabling SNMP to configure RADIUSTo enable SNMP access to

xiv Brocade TurboIron 24X Series Configuration Guide53-1003053-01Routing between VLANs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

106 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Configuring RADIUS securityIdentifying the RADIUS server to the deviceTo use a RADIUS

Brocade TurboIron 24X Series Configuration Guide 10753-1003053-01Configuring RADIUS securityConfiguration example and command syntaxThe following show

108 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Configuring RADIUS securityConfiguration example and command syntaxTo map a RADIUS se

Brocade TurboIron 24X Series Configuration Guide 10953-1003053-01Configuring RADIUS securitySetting the retransmission limitThe retransmit parameter s

110 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Configuring RADIUS securityThe command above causes RADIUS to be the primary authenti

Brocade TurboIron 24X Series Configuration Guide 11153-1003053-01Configuring RADIUS securityConfiguring enable authentication to prompt for password o

112 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Configuring RADIUS securityYou enable RADIUS command authorization by specifying a pr

Brocade TurboIron 24X Series Configuration Guide 11353-1003053-01Configuring RADIUS securityConfiguring RADIUS accountingDevices support RADIUS accoun

114 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Configuring RADIUS securityConfiguring an interface as the source for all RADIUS pack

Brocade TurboIron 24X Series Configuration Guide 11553-1003053-01Configuring authentication-method listsExample The following table describes the RADI

Brocade TurboIron 24X Series Configuration Guide xv53-1003053-01Chapter 19 Configuring Port Mirroring and MonitoringMirroring support by platform . .

116 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Configuring authentication-method lists• Local user accounts configured on the device

Brocade TurboIron 24X Series Configuration Guide 11753-1003053-01Configuring authentication-method listsExamples of authentication-method listsThe fol

118 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Configuring authentication-method listsThe snmp-server | web-server | enable | login

Brocade TurboIron 24X Series Configuration Guide 11953-1003053-01Chapter6Configuring SSH2 and SCPIn this chapter•SSH version 2 support . . . . . . .

120 Brocade TurboIron 24X Series Configuration Guide53-1003053-01SSH version 2 support• SSH Fingerprint Format• SSH Protocol Assigned Numbers• SSH Tra

Brocade TurboIron 24X Series Configuration Guide 12153-1003053-01AES encryption for SSH2AES encryption for SSH2Encryption is provided with 3des-cbc, a

122 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Configuring SSH2• Password authentication, where users attempting to gain access to t

Brocade TurboIron 24X Series Configuration Guide 12353-1003053-01Configuring SSH2TurboIron(config)#crypto key zeroizeWhen SSH is disabled, it is delet

124 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Configuring SSH25. The client uses its private key to decrypt the bytes.6. The client

Brocade TurboIron 24X Series Configuration Guide 12553-1003053-01Setting optional parametersSyntax: show ip client-pub-key [begin <expression> |

xvi Brocade TurboIron 24X Series Configuration Guide53-1003053-01Configuring IP parameters – Layer 2 Switches . . . . . . . . . . . . . . . .484Config

126 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Setting optional parametersSetting the number of SSH authentication retriesBy default

Brocade TurboIron 24X Series Configuration Guide 12753-1003053-01Setting optional parametersSetting the SSH port numberBy default, SSH traffic occurs

128 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Filtering SSH access using ACLsExample TurboIron(config)#interface ethernet 4TurboIro

Brocade TurboIron 24X Series Configuration Guide 12953-1003053-01Displaying SSH connection informationSyntax: show ip ssh [begin <expression> |

130 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Using Secure copy with SSH2Using Secure copy with SSH2Secure Copy (SCP) uses security

Brocade TurboIron 24X Series Configuration Guide 13153-1003053-01Using Secure copy with SSH2Copying the running config file to an SCP-enabled clientTo

132 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Using Secure copy with SSH2

Brocade TurboIron 24X Series Configuration Guide 13353-1003053-01Chapter7Configuring IPv6 Connectivity In this chapter•IPv6 addressing overview . . .

134 Brocade TurboIron 24X Series Configuration Guide53-1003053-01IPv6 addressing overview• You can use the two colons (::) only once in the address to

Brocade TurboIron 24X Series Configuration Guide 13553-1003053-01IPv6 addressing overview.A switch automatically configures a link-local unicast addre

Brocade TurboIron 24X Series Configuration Guide xvii53-1003053-01RIP parameters and defaults . . . . . . . . . . . . . . . . . . . . . . . . . . . .

136 Brocade TurboIron 24X Series Configuration Guide53-1003053-01IPv6 CLI command supportIPv6 stateless autoconfigurationTurboIron X Series devices us

Brocade TurboIron 24X Series Configuration Guide 13753-1003053-01Configuring an IPv6 host address on a Layer 2 switchConfiguring an IPv6 host address

138 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Configuring the management port for an IPv6 automatic address configurationEnabling I

Brocade TurboIron 24X Series Configuration Guide 13953-1003053-01Configuring basic IPv6 connectivity on a Layer 3 switch• An automatically computed EU

140 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Configuring basic IPv6 connectivity on a Layer 3 switchTo configure IPv6 address on a

Brocade TurboIron 24X Series Configuration Guide 14153-1003053-01IPv6 management (IPv6 host support)Configuring an IPv6 anycast address on an interfac

142 Brocade TurboIron 24X Series Configuration Guide53-1003053-01IPv6 management (IPv6 host support)SNTP over IPv6To enable the device to send SNTP pa

Brocade TurboIron 24X Series Configuration Guide 14353-1003053-01IPv6 management (IPv6 host support)Establishing a Telnet session from an IPv6 hostTo

144 Brocade TurboIron 24X Series Configuration Guide53-1003053-01IPv6 management (IPv6 host support)• Flash memory.• Running configuration.• Startup c

Brocade TurboIron 24X Series Configuration Guide 14553-1003053-01IPv6 management (IPv6 host support)TurboIron#copy tftp flash 2001:DB8:e0ff:7837::3 te

xviii Brocade TurboIron 24X Series Configuration Guide53-1003053-01Configuring OSPF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

146 Brocade TurboIron 24X Series Configuration Guide53-1003053-01IPv6 management (IPv6 host support)Copying a primary or secondary boot image from fla

Brocade TurboIron 24X Series Configuration Guide 14753-1003053-01IPv6 management (IPv6 host support)This command uploads the primary boot image named

148 Brocade TurboIron 24X Series Configuration Guide53-1003053-01IPv6 management (IPv6 host support)• The source <ipv6-address> parameter specif

Brocade TurboIron 24X Series Configuration Guide 14953-1003053-01IPv6 management (IPv6 host support)Viewing IPv6 SNMP server addressesSome of the show

150 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Clearing global IPv6 informationClearing global IPv6 informationYou can clear the fol

Brocade TurboIron 24X Series Configuration Guide 15153-1003053-01Displaying global IPv6 information• You must specify the <ipv6-prefix> paramete

152 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Displaying global IPv6 informationSyntax: show ipv6 cache [ <index-number> | &l

Brocade TurboIron 24X Series Configuration Guide 15353-1003053-01Displaying global IPv6 information• The <interface> parameter displays detaile

154 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Displaying global IPv6 informationDisplaying IPv6 neighbor informationYou can display

Brocade TurboIron 24X Series Configuration Guide 15553-1003053-01Displaying global IPv6 informationDisplaying IPv6 TCP informationYou can display the

Brocade TurboIron 24X Series Configuration Guide xix53-1003053-01Chapter 24 Configuring BGP4Overview of BGP4 . . . . . . . . . . . . . . . . . . . . .

156 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Displaying global IPv6 informationTo display detailed information about a specified T

Brocade TurboIron 24X Series Configuration Guide 15753-1003053-01Displaying global IPv6 informationSyntax: show ipv6 tcp status <local-ip-address&g

158 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Displaying global IPv6 informationDisplaying IPv6 traffic statisticsTo display IPv6 t

Brocade TurboIron 24X Series Configuration Guide 15953-1003053-01Displaying global IPv6 informationSyntax: show ipv6 trafficThis display shows the fo

160 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Displaying global IPv6 informationbad options The number of IPv6 packets dropped by t

Brocade TurboIron 24X Series Configuration Guide 16153-1003053-01Displaying global IPv6 informationnei soli The number of Neighbor Solicitation messag

162 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Displaying global IPv6 informationactive opens The number of TCP connections opened b

Brocade TurboIron 24X Series Configuration Guide 16353-100305301Chapter8Securing SNMP AccessIn this chapter•SNMP overview . . . . . . . . . . . . . .

164 Brocade TurboIron 24X Series Configuration Guide53-100305301Establishing SNMP community stringsEstablishing SNMP community stringsSNMP versions 1

Brocade TurboIron 24X Series Configuration Guide 16553-100305301Establishing SNMP community stringsNOTEIf you want the software to assume that the val

Copyright © 2013 Brocade Communications Systems, Inc. All Rights Reserved.ADX, AnyIO, Brocade, Brocade Assurance, the B-wing symbol, DCX, Fabric OS, I

xx Brocade TurboIron 24X Series Configuration Guide53-1003053-01Modifying redistribution parameters . . . . . . . . . . . . . . . . . . . . . . . .699

166 Brocade TurboIron 24X Series Configuration Guide53-100305301Establishing SNMP community stringsDisplaying the SNMP community stringsTo display the

Brocade TurboIron 24X Series Configuration Guide 16753-100305301Establishing SNMP community strings3. Configure the SNMP version 3 features in devices

168 Brocade TurboIron 24X Series Configuration Guide53-100305301Establishing SNMP community strings• Octets 1 through 4 represent the agent's SNM

Brocade TurboIron 24X Series Configuration Guide 16953-100305301Establishing SNMP community stringsThe value of <viewstring> is defined using th

170 Brocade TurboIron 24X Series Configuration Guide53-100305301Defining SNMP viewsNOTEThe ACL specified in a user account overrides the ACL assigned

Brocade TurboIron 24X Series Configuration Guide 17153-100305301SNMP version 3 trapsTurboIron(config)#snmp-server view Maynes system includedTurboIron

172 Brocade TurboIron 24X Series Configuration Guide53-100305301SNMP version 3 trapsTo configure an SNMP user group, first configure SNMP v3 views usi

Brocade TurboIron 24X Series Configuration Guide 17353-100305301SNMP version 3 trapsFor SNMP version 2c, enter v2 and the name of the community string

174 Brocade TurboIron 24X Series Configuration Guide53-100305301Displaying SNMP InformationThe <ipv6-address> must be in hexadecimal format usin

Brocade TurboIron 24X Series Configuration Guide 17553-100305301SNMP v3 Configuration examplesSyntax: show snmp userInterpreting varbinds in report pa

Brocade TurboIron 24X Series Configuration Guide xxi53-1003053-01Clearing route flap dampening statistics. . . . . . . . . . . . . . . . . . . . .765R

176 Brocade TurboIron 24X Series Configuration Guide53-100305301SNMP v3 Configuration examplesMore detailed SNMP v3 configurationTurboIron(config)#snm

Brocade TurboIron 24X Series Configuration Guide 17753-1003053-01Chapter9Enabling the Foundry Discovery Protocol and Reading Cisco Discovery Protocol

178 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Using FDPEnabling FDP at the interface levelBy default, FDP is enabled at the interfa

Brocade TurboIron 24X Series Configuration Guide 17953-1003053-01Using FDP• FDP information for an interface on the device you are managing• FDP packe

180 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Using FDPThe show fdp neighbor detail command displays the following information. Dis

Brocade TurboIron 24X Series Configuration Guide 18153-1003053-01Using FDPSyntax: show fdp entry * | <device-id> The * | <device-id> para

182 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Reading CDP packetsClearing FDP and CDP statisticsTo clear FDP and CDP statistics, en

Brocade TurboIron 24X Series Configuration Guide 18353-1003053-01Reading CDP packets• CDP entries for all Cisco neighbors or a specific neighbor• CDP

184 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Reading CDP packetsTo display CDP entries for a specific device, specify the device I

Brocade TurboIron 24X Series Configuration Guide 18553-1003053-01Reading CDP packetsTurboIron#clear fdp countersSyntax: clear fdp counters

xxii Brocade TurboIron 24X Series Configuration Guide53-1003053-01PIM SM snooping show commands. . . . . . . . . . . . . . . . . . . . . . . . .788Dis

186 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Reading CDP packets

Brocade TurboIron 24X Series Configuration Guide 18753-1003053-01Chapter10Configuring LLDP In this chapter•Terms used in this chapter . . . . . . . .

188 Brocade TurboIron 24X Series Configuration Guide53-1003053-01LLDP overviewNetwork connectivity device – A forwarding 802 LAN device, such as a rou

Brocade TurboIron 24X Series Configuration Guide 18953-1003053-01General operating principlesBenefits of LLDPLLDP provides the following benefits:• Ne

190 Brocade TurboIron 24X Series Configuration Guide53-1003053-01General operating principlesAn LLDP agent initiates the transmission of LLDP packets

Brocade TurboIron 24X Series Configuration Guide 19153-1003053-01General operating principlesLLDP TLVsThere are two types of LLDP TLVs, as specified i

192 Brocade TurboIron 24X Series Configuration Guide53-1003053-01General operating principlesChassis IDThe Chassis ID identifies the device that sent

Brocade TurboIron 24X Series Configuration Guide 19353-1003053-01MIB supportPort ID (MAC address): 0000.0033.e2d3The LLDPDU format is shown in “LLDPD

194 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Syslog messagesSyslog messagesSyslog messages for LLDP provide management application

Brocade TurboIron 24X Series Configuration Guide 19553-1003053-01Configuring LLDP• By default, the device limits the number of neighbors per port to f

Brocade TurboIron 24X Series Configuration Guide xxiii53-1003053-01Using ACLs to control multicast features. . . . . . . . . . . . . . . . . . . . .84

196 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Configuring LLDPEnabling and disabling receive only modeWhen LLDP is enabled on a glo

Brocade TurboIron 24X Series Configuration Guide 19753-1003053-01Configuring LLDPPer deviceYou can change the maximum number of neighbors for which LL

198 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Configuring LLDPSpecifying the minimum time between SNMP traps and syslog messagesWhe

Brocade TurboIron 24X Series Configuration Guide 19953-1003053-01Configuring LLDPChanging the interval between regular LLDP transmissionsThe LLDP tran

200 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Configuring LLDPTo set the re-initialization delay timer, enter a command such as the

Brocade TurboIron 24X Series Configuration Guide 20153-1003053-01Configuring LLDPManagement AddressA management address is an IPv4 address that can be

202 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Configuring LLDP• DOCSIS cable device• Station only (devices that implement end stati

Brocade TurboIron 24X Series Configuration Guide 20353-1003053-01Configuring LLDPSyntax: [no] lldp advertise system-name ports ethernet <port-list&

204 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Configuring LLDP• Whether the link is capable of being aggregated• Whether the link i

Brocade TurboIron 24X Series Configuration Guide 20553-1003053-01Configuring LLDPMaximum frame sizeThe maximum frame size TLV provides the maximum 802

xxiv Brocade TurboIron 24X Series Configuration Guide53-1003053-01Configuration examples . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

206 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Configuring LLDPLLDP statisticsThe show lldp statistics command displays an overview

Brocade TurboIron 24X Series Configuration Guide 20753-1003053-01Configuring LLDPNOTEYou can reset LLDP statistics using the CLI command clear LLDP st

208 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Configuring LLDPLLDP neighbors detailThe show lldp neighbors detail command displays

Brocade TurboIron 24X Series Configuration Guide 20953-1003053-01Configuring LLDPA backslash (\) at the end of a line indicates that the text continue

210 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Configuring LLDPLLDP configuration detailsThe show lldp local-info command displays t

Brocade TurboIron 24X Series Configuration Guide 21153-1003053-01Resetting LLDP statisticsNOTEThe contents of the show output will vary depending on w

212 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Clearing cached LLDP neighbor informationIf you do not specify any ports or use the k

Brocade TurboIron 24X Series Configuration Guide 21353-1003053-01Chapter11Monitoring Hardware ComponentsIn this chapter•Hardware support . . . . . . .

214 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Digital optical monitoringMedia not supportedDigital optical monitoring is not suppor

Brocade TurboIron 24X Series Configuration Guide 21553-1003053-01Digital optical monitoringTo enable optical monitoring on a range of ports, use the f

Brocade TurboIron 24X Series Configuration Guide xxv53-1003053-01Using ACLs to control multicast features. . . . . . . . . . . . . . . . . . . . .925E

216 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Digital optical monitoringPort 17: Type : 1G M-CPort 18: Type : 1G M-CPort 19: T

Brocade TurboIron 24X Series Configuration Guide 21753-1003053-01Digital optical monitoringTurboIron> show optic 4Port Temperature Tx Power

218 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Digital optical monitoringViewing optical transceiver thresholdsThe thresholds that d

Brocade TurboIron 24X Series Configuration Guide 21953-1003053-01Digital optical monitoringFor details about the above Syslog messages, refer to Chapt

220 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Digital optical monitoring

Brocade TurboIron 24X Series Configuration Guide 22153-1003053-01Chapter12Using SyslogIn this chapter•Overview. . . . . . . . . . . . . . . . . . . .

222 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Displaying Syslog messagesDisplaying Syslog messagesTo display the Syslog messages in

Brocade TurboIron 24X Series Configuration Guide 22353-1003053-01Configuring the Syslog servicetelnet@TurboIron#terminal monitorSyslog trace was turne

224 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Configuring the Syslog serviceSyntax: show loggingThe Syslog display shows the follow

Brocade TurboIron 24X Series Configuration Guide 22553-1003053-01Configuring the Syslog serviceIn the static log, new messages replace older ones, so

xxvi Brocade TurboIron 24X Series Configuration Guide53-1003053-01Configuring 802.1X port security . . . . . . . . . . . . . . . . . . . . . . . . . .

226 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Configuring the Syslog service• hh – hours• mm – minutes• ss – secondsFor example, “O

Brocade TurboIron 24X Series Configuration Guide 22753-1003053-01Configuring the Syslog serviceDisabling or re-enabling SyslogSyslog is enabled by def

228 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Configuring the Syslog serviceDisabling logging of a message levelTo change the messa

Brocade TurboIron 24X Series Configuration Guide 22953-1003053-01Configuring the Syslog serviceNOTEYou can specify only one facility. If you configure

230 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Configuring the Syslog serviceWhen you display the messages in the Syslog, you see th

Brocade TurboIron 24X Series Configuration Guide 23153-1003053-01Appendix13Network Monitoring In this chapter•Basic management . . . . . . . . . . . .

232 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Basic managementViewing configuration informationYou can view a variety of configurat

Brocade TurboIron 24X Series Configuration Guide 23353-1003053-01Basic managementTABLE 47 Port statisticsThis line... Displays...Port configurationPor

234 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Basic managementViewing STP statisticsYou can view a summary of STP statistics for La

Brocade TurboIron 24X Series Configuration Guide 23553-1003053-01Basic managementTo determine the available clear commands for the system, enter the f

Brocade TurboIron 24X Series Configuration Guide xxvii53-1003053-01Configuring the MAC port security feature . . . . . . . . . . . . . . . . . . .992

236 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Basic managementConfiguration syntaxThis section provides the syntax and configuratio

Brocade TurboIron 24X Series Configuration Guide 23753-1003053-01Basic managementNOTEOnce the enhanced traffic counters are displayed, the counters ar

238 Brocade TurboIron 24X Series Configuration Guide53-1003053-01RMON supportRMON supportThe RMON agent supports the following groups. The group numbe

Brocade TurboIron 24X Series Configuration Guide 23953-1003053-01RMON supportSyntax: show rmon statistics<portnum>The <portnum> parameter

240 Brocade TurboIron 24X Series Configuration Guide53-1003053-01RMON supportHistory (RMON group 2)All active ports by default will generate two histo

Brocade TurboIron 24X Series Configuration Guide 24153-1003053-01sFlowYou can modify the sampling interval and the bucket (number of entries saved bef

242 Brocade TurboIron 24X Series Configuration Guide53-1003053-01sFlow• Combines sFlow samples into UDP packets and forwards them to the sFlow collect

Brocade TurboIron 24X Series Configuration Guide 24353-1003053-01sFlowIPv6 packet samplingIPv6 sampling is performed by the packet processor. The syst

244 Brocade TurboIron 24X Series Configuration Guide53-1003053-01sFlowNOTEIf an IP address is not already configured when you enable sFlow, the featur

Brocade TurboIron 24X Series Configuration Guide 24553-1003053-01sFlowThe sampled sFlow data sent to the collectors includes an agent_address field. T

xxviii Brocade TurboIron 24X Series Configuration Guide53-1003053-01Displaying multi-device port authentication information . . . . . . .1015Displayin

246 Brocade TurboIron 24X Series Configuration Guide53-1003053-01sFlowConfiguration considerationsThe sampling rate is a fraction in the form 1/N, mea

Brocade TurboIron 24X Series Configuration Guide 24753-1003053-01sFlowSampling rate for new portsWhen you enable sFlow on a port, the port's samp

248 Brocade TurboIron 24X Series Configuration Guide53-1003053-01sFlowTo change the sampling rate on an individual port, enter a command such as the f

Brocade TurboIron 24X Series Configuration Guide 24953-1003053-01sFlowCommand syntaxThis section shows how to enable sFlow forwarding.Globally enablin

250 Brocade TurboIron 24X Series Configuration Guide53-1003053-01sFlowSyntax: show sflowThis command shows the following information. TABLE 50 sFlow

Brocade TurboIron 24X Series Configuration Guide 25153-1003053-01Configuring a utilization list for an uplink portClearing sFlow statisticsTo clear th

252 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Configuring a utilization list for an uplink portEach list displays the uplink port a

Brocade TurboIron 24X Series Configuration Guide 25353-1003053-01Configuring a utilization list for an uplink portIn the following example, ports 2 an

254 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Configuring a utilization list for an uplink port

Brocade TurboIron 24X Series Configuration Guide 25553-1003053-01Chapter14Configuring Basic Layer 2 Features In this chapter•Enabling or disabling the

Brocade TurboIron 24X Series Configuration Guide xxix53-1003053-01Configuring DSCP-based QoS. . . . . . . . . . . . . . . . . . . . . . . . . . . . .1

256 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Changing the MAC age time and disabling MAC address learningSTP must be enabled at th

Brocade TurboIron 24X Series Configuration Guide 25753-1003053-01Configuring static MAC entriesSyntax: [no] mac-learn disableUse the no form of the co

258 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Configuring static MAC entriesYou can manually input the MAC address of a device to p

Brocade TurboIron 24X Series Configuration Guide 25953-1003053-01Configuring VLAN-based static MAC entriesSyntax: [no] static-mac-address <mac-addr

260 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Defining MAC address filtersThe <num> parameter specifies the VLAN ID. The val

Brocade TurboIron 24X Series Configuration Guide 26153-1003053-01Defining MAC address filtersYou configure MAC filters globally, then apply them to in

262 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Defining MAC address filtersThe <src-mac> <mask> | any parameter specifie

Brocade TurboIron 24X Series Configuration Guide 26353-1003053-01Defining MAC address filtersEnabling logging of management trafficpermitted by MAC fi

264 Brocade TurboIron 24X Series Configuration Guide53-1003053-01MAC address filter override for 802.1X-enabled portsMAC address filter override for 8

Brocade TurboIron 24X Series Configuration Guide 26553-1003053-01Displaying and modifying system parameter default settingsThe dest-mac mask | any par

Brocade TurboIron 24X Series Configuration Guide iii53-1003053-01ContentsAbout This DocumentIntroduction . . . . . . . . . . . . . . . . . . . . . . .

xxx Brocade TurboIron 24X Series Configuration Guide53-1003053-01

266 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Displaying and modifying system parameter default settingsTable 51 defines the system

Brocade TurboIron 24X Series Configuration Guide 26753-1003053-01Egress buffer thresholds for QoS prioritiesModifying system parameter default valuesI

268 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Egress buffer thresholds for QoS priorities• Egress Buffer Threshold for a given Traf

Brocade TurboIron 24X Series Configuration Guide 26953-1003053-01Egress buffer thresholds for QoS prioritiesFIGURE 6 Egress buffer thresholdsManually

270 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Egress buffer thresholds for QoS prioritiesTurboIron(config)#no enable egress-buffer-

Brocade TurboIron 24X Series Configuration Guide 27153-1003053-01Link Fault Signaling (LFS) for 10GTurboIron(config)#int e 3TurboIron(conf-if-e10000-3

272 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Jumbo frame supportJumbo frame supportEthernet traffic moves in units called frames.

Brocade TurboIron 24X Series Configuration Guide 27353-1003053-01Chapter15Configuring Metro FeaturesIn this chapter•Topology groups. . . . . . . . . .

274 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Topology groups• Member VLANs – The member VLANs are additional VLANs that share port

Brocade TurboIron 24X Series Configuration Guide 27553-1003053-01Topology groups• Once you add a VLAN as a member of a topology group, all the Layer 2

Brocade TurboIron 24X Series Configuration Guide xxxi53-1003053-01About This DocumentIn this chapter•Introduction . . . . . . . . . . . . . . . . . .

276 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Topology groupsNOTEOnce you add a VLAN or VLAN group as a member of a topology group,

Brocade TurboIron 24X Series Configuration Guide 27753-1003053-01Metro Ring Protocol (MRP) Metro Ring Protocol (MRP)Metro Ring Protocol (MRP) was intr

278 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Metro Ring Protocol (MRP)Figure 7 shows an example of an MRP metro ring. FIGURE 7 Met

Brocade TurboIron 24X Series Configuration Guide 27953-1003053-01Metro Ring Protocol (MRP)Configuration notes• When you configure MRP, Brocade recomme

280 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Metro Ring Protocol (MRP)MRP rings with shared interfaces (MRP Phase 2)With MRP Phase

Brocade TurboIron 24X Series Configuration Guide 28153-1003053-01Metro Ring Protocol (MRP)FIGURE 10 Interface IDs and typesFor example, in Figure 10,

282 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Metro Ring Protocol (MRP)Ring initializationThe ring shown in Figure 7 shows the port

Brocade TurboIron 24X Series Configuration Guide 28353-1003053-01Metro Ring Protocol (MRP)RHP processing in MRP Phase 1A ring interface can have one o

284 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Metro Ring Protocol (MRP)FIGURE 12 Metro ring – from preforwarding to forwardingEach

Brocade TurboIron 24X Series Configuration Guide 28553-1003053-01Metro Ring Protocol (MRP)FIGURE 13 Flow of RHP packets on MRP rings with shared inter

xxxii Brocade TurboIron 24X Series Configuration Guide53-1003053-01What’s new in this documentThere are no enhancements in FastIron release 08.0.01 fo

286 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Metro Ring Protocol (MRP)FIGURE 14 Metro ring – ring breakIf a break in the ring occu

Brocade TurboIron 24X Series Configuration Guide 28753-1003053-01Metro Ring Protocol (MRP)When the broken link is repaired, the link interfaces come u

288 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Metro Ring Protocol (MRP)Alarm RHPPreviously, detection of MRP ring breaks was comple

Brocade TurboIron 24X Series Configuration Guide 28953-1003053-01Metro Ring Protocol (MRP)FIGURE 16 A MRP ring under normal operation (A) and after de

290 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Metro Ring Protocol (MRP)FIGURE 17 Metro ring – ring VLAN and customer VLANsNotice th

Brocade TurboIron 24X Series Configuration Guide 29153-1003053-01Metro Ring Protocol (MRP)In Figure 17, VLAN 2 is the master VLAN and contains the MRP

292 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Metro Ring Protocol (MRP)TurboIron(config)#vlan 2TurboIron(config-vlan-2)#metro-ring

Brocade TurboIron 24X Series Configuration Guide 29353-1003053-01Metro Ring Protocol (MRP)Changing the hello and preforwarding timesYou also can chang

294 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Metro Ring Protocol (MRP)Syntax: show metro <ring-id> diagThis display shows th

Brocade TurboIron 24X Series Configuration Guide 29553-1003053-01Metro Ring Protocol (MRP)Syntax: show metro <ring-id>This display shows the fol

Brocade TurboIron 24X Series Configuration Guide xxxiii53-1003053-01Notice to the readerThis document may contain references to the trademarks of the

296 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Metro Ring Protocol (MRP)MRP CLI exampleThe following examples show the CLI commands

Brocade TurboIron 24X Series Configuration Guide 29753-1003053-01Metro Ring Protocol (MRP)Commands on Switch A (master node)The following commands con

298 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Virtual Switch Redundancy Protocol (VSRP)TurboIron(config)#topology-group 1TurboIron(

Brocade TurboIron 24X Series Configuration Guide 29953-1003053-01Virtual Switch Redundancy Protocol (VSRP)The TurboIron X Series device supports full

300 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Virtual Switch Redundancy Protocol (VSRP)Configuration notes• VSRP and 802.1Q-n-Q tag

Brocade TurboIron 24X Series Configuration Guide 30153-1003053-01Virtual Switch Redundancy Protocol (VSRP)Each backup waits for a specific period of t

302 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Virtual Switch Redundancy Protocol (VSRP)FIGURE 19 VSRP priorityHowever, if one of th

Brocade TurboIron 24X Series Configuration Guide 30353-1003053-01Virtual Switch Redundancy Protocol (VSRP)FIGURE 21 VSRP priority biasTrack portsOptio

304 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Virtual Switch Redundancy Protocol (VSRP)FIGURE 22 Track port priorityIn Figure 22, t

Brocade TurboIron 24X Series Configuration Guide 30553-1003053-01Virtual Switch Redundancy Protocol (VSRP)MAC address failover on VSRP-aware devicesVS

xxxiv Brocade TurboIron 24X Series Configuration Guide53-1003053-01Document feedbackQuality is our first concern at Brocade and we have made every eff

306 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Virtual Switch Redundancy Protocol (VSRP)TABLE 55 VSRP parametersParameter Descriptio

Brocade TurboIron 24X Series Configuration Guide 30753-1003053-01Virtual Switch Redundancy Protocol (VSRP)VRID IP address A gateway address you are ba

308 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Virtual Switch Redundancy Protocol (VSRP)NOTETo configure VSRP, ensure that spanning

Brocade TurboIron 24X Series Configuration Guide 30953-1003053-01Virtual Switch Redundancy Protocol (VSRP)• Specify that the device is a backup. Sinc

310 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Virtual Switch Redundancy Protocol (VSRP)Timer scaleThe VSRP hello interval, dead int

Brocade TurboIron 24X Series Configuration Guide 31153-1003053-01Virtual Switch Redundancy Protocol (VSRP)Configuring authenticationIf the interfaces

312 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Virtual Switch Redundancy Protocol (VSRP)Syntax: vsrp-aware vrid <vrid number>

Brocade TurboIron 24X Series Configuration Guide 31353-1003053-01Virtual Switch Redundancy Protocol (VSRP)orSyntax: [no] ip address <ip-addr>Cha

314 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Virtual Switch Redundancy Protocol (VSRP)By default, each backup saves the configured

Brocade TurboIron 24X Series Configuration Guide 31553-1003053-01Virtual Switch Redundancy Protocol (VSRP)NOTEIf you change the timer scale, the chang

Brocade TurboIron 24X Series Configuration Guide 153-1003053-01Chapter1Feature HighlightsIn this chapter•Supported features . . . . . . . . . . . . .

316 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Virtual Switch Redundancy Protocol (VSRP)TurboIron(config-vlan-200-vrid-1)#hold-down-

Brocade TurboIron 24X Series Configuration Guide 31753-1003053-01Virtual Switch Redundancy Protocol (VSRP)Disabling or re-enabling backup pre-emptionB

318 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Virtual Switch Redundancy Protocol (VSRP)Syntax: vsrp-aware vrid <num> tc-vlan-

Brocade TurboIron 24X Series Configuration Guide 31953-1003053-01Virtual Switch Redundancy Protocol (VSRP)TABLE 56 CLI display of VSRP VRID or VLAN in

320 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Virtual Switch Redundancy Protocol (VSRP)Displaying the active interfaces for a VRIDO

Brocade TurboIron 24X Series Configuration Guide 32153-1003053-01Virtual Switch Redundancy Protocol (VSRP)VSRP fast startVSRP fast start allows non-Tu

322 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Virtual Switch Redundancy Protocol (VSRP)The "Restart ports:" line lists th

Brocade TurboIron 24X Series Configuration Guide 32353-1003053-01Virtual Switch Redundancy Protocol (VSRP)If a VSRP failover from master to backup occ

324 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Virtual Switch Redundancy Protocol (VSRP)There are no CLI commands used to configure

Brocade TurboIron 24X Series Configuration Guide 32553-1003053-01Chapter16Configuring Uni-Directional Link Detection (UDLD)In this chapter•UDLD overvi

2 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Supported featuresSupported security featuresTable 4 lists the supported security featu

326 Brocade TurboIron 24X Series Configuration Guide53-1003053-01UDLD overview• To configure UDLD on a trunk group, you must enable and configure the

Brocade TurboIron 24X Series Configuration Guide 32753-1003053-01UDLD overviewSyntax: [no] link-keepalive retries <num>The <num> parameter

328 Brocade TurboIron 24X Series Configuration Guide53-1003053-01UDLD overviewIf a port is disabled by UDLD, the change also is indicated in the outpu

Brocade TurboIron 24X Series Configuration Guide 32953-1003053-01UDLD overviewThe show interface ethernet command also displays the UDLD state for an

330 Brocade TurboIron 24X Series Configuration Guide53-1003053-01UDLD overview

Brocade TurboIron 24X Series Configuration Guide 33153-1003053-01Chapter17Configuring Trunk Groups and Dynamic Link AggregationIn this chapter•Trunk g

332 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Trunk group overviewNOTEThe ports in a trunk group make a single logical link. Theref

Brocade TurboIron 24X Series Configuration Guide 33353-1003053-01Trunk group overviewTrunk group rulesTable 60 lists the maximum number of trunk group

334 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Trunk group overview• Make sure the device on the other end of the trunk link can sup

Brocade TurboIron 24X Series Configuration Guide 33553-1003053-01Trunk group overviewTrunk group load sharingTrunk groups on the devices are not class

Brocade TurboIron 24X Series Configuration Guide 353-1003053-01Supported featuresSupported system-level featuresTable 5 lists the supported system-lev

336 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Configuring a trunk groupConfiguring a trunk groupFollow the steps given below to con

Brocade TurboIron 24X Series Configuration Guide 33753-1003053-01Configuring a trunk groupSyntax: [no] trunk ethernet <primary-portnum> to <

338 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Configuring a trunk groupExample 2: Configuring a trunk group that spanstwo Gbps Ethe

Brocade TurboIron 24X Series Configuration Guide 33953-1003053-01Configuring a trunk groupThe <secondary-portnum> parameter specifies the second

340 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Configuring a trunk groupYou can disable or re-enable individual ports in a trunk gro

Brocade TurboIron 24X Series Configuration Guide 34153-1003053-01Configuring a trunk groupTurboIron(config-trunk-1-4)#enable ethernet 1 to 2 ethernet

342 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Configuring a trunk groupTurboIron(config)#no trunk ethernet 1 to 2 ethernet 3 to 4Sy

Brocade TurboIron 24X Series Configuration Guide 34353-1003053-01Displaying trunk group configuration informationEnabling sFlow forwarding on a trunk

344 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Dynamic link aggregationTable 62 describes the information displayed by the show trun

Brocade TurboIron 24X Series Configuration Guide 34553-1003053-01Dynamic link aggregationNOTEUse the link aggregation feature only if the device at th

4 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Supported featuresACL-Based Rate Limiting:• TurboIron X Series devices support ACL-base

346 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Dynamic link aggregation• The dynamic link aggregation ((802.3ad) implementation on T

Brocade TurboIron 24X Series Configuration Guide 34753-1003053-01Dynamic link aggregation• If the feature places a port into a trunk group as a second

348 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Dynamic link aggregationTable 63 shows examples of the ports from Figure 32 that will

Brocade TurboIron 24X Series Configuration Guide 34953-1003053-01Dynamic link aggregationUsing the default key assigned by the softwareTurboIron(confi

350 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Dynamic link aggregationWhen you change a port VLAN membership, the device searches t

Brocade TurboIron 24X Series Configuration Guide 35153-1003053-01Dynamic link aggregationSystem priorityThe system priority parameter specifies the li

352 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Dynamic link aggregationNOTEIt is recommended to configure a unique key if ports are

Brocade TurboIron 24X Series Configuration Guide 35353-1003053-01Dynamic link aggregationFIGURE 34 Multi-slot aggregate linkBy default, the device por

354 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Dynamic link aggregation17 1 1 481 Yes S Agg Syn Col Dis D

Brocade TurboIron 24X Series Configuration Guide 35553-1003053-01Displaying and determining the status of aggregate linksThe key <num> parameter

Brocade TurboIron 24X Series Configuration Guide 553-1003053-01Supported featuresSupported Layer 2 featuresLayer 2 software images include all of the

356 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Displaying and determining the status of aggregate links• LACP brings the port back u

Brocade TurboIron 24X Series Configuration Guide 35753-1003053-01Displaying and determining the status of aggregate linksAct Indicates the link aggreg

358 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Clearing the negotiated aggregate links tableDisplaying LACP status informationUse th

Brocade TurboIron 24X Series Configuration Guide 35953-1003053-01Configuring single link LACPConfiguration notes• This feature is supported on 1-GbE a

360 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Configuring single link LACP

Brocade TurboIron 24X Series Configuration Guide 36153-1003053-01Chapter18Configuring Virtual LANs (VLANs)In this chapter•VLAN overview . . . . . . .

362 Brocade TurboIron 24X Series Configuration Guide53-1003053-01VLAN overviewYou can configure up to 4094 port-based VLANs on a Layer 2 Switch or Lay

Brocade TurboIron 24X Series Configuration Guide 36353-1003053-01VLAN overviewLayer 3 protocol-based VLANsIf you want some or all of the ports within

364 Brocade TurboIron 24X Series Configuration Guide53-1003053-01VLAN overviewFigure 36 shows an example of Layer 3 protocol VLANs configured within a

Brocade TurboIron 24X Series Configuration Guide 36553-1003053-01VLAN overviewIntegrated Switch Routing (ISR)The Integrated Switch Routing (ISR) featu

iv Brocade TurboIron 24X Series Configuration Guide53-1003053-01Logging on through Brocade Network Advisor . . . . . . . . . . . . . . . . .20Chapter

6 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Supported features802.1s Multiple Spanning Tree Yes802.1W Rapid Spanning Tree (RSTP):•

366 Brocade TurboIron 24X Series Configuration Guide53-1003053-01VLAN overviewNOTEThe Layer 3 Switch routes packets between VLANs of the same protocol

Brocade TurboIron 24X Series Configuration Guide 36753-1003053-01VLAN overviewWhen you configure a port-based VLAN, one of the configuration items you

368 Brocade TurboIron 24X Series Configuration Guide53-1003053-01VLAN overviewFIGURE 38 Packet containing a 802.1Q VLAN tagIf you configure a VLAN tha

Brocade TurboIron 24X Series Configuration Guide 36953-1003053-01VLAN overviewFIGURE 39 VLANs configured across multiple devicesSupport for 802.1Q-in-

370 Brocade TurboIron 24X Series Configuration Guide53-1003053-01VLAN overview• Port-based VLAN – Affects all ports within the specified port-based VL

Brocade TurboIron 24X Series Configuration Guide 37153-1003053-01VLAN overviewFIGURE 40 Use virtual routing interfaces for routing between Layer 3 pro

372 Brocade TurboIron 24X Series Configuration Guide53-1003053-01VLAN overviewDynamic, static, and excluded port membershipWhen you add ports to a pro

Brocade TurboIron 24X Series Configuration Guide 37353-1003053-01VLAN overviewSUBNET Ports in a new protocol VLAN that do not receive traffic for the

374 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Routing between VLANsBroadcast leaksA dynamic port becomes a member of a Layer 3 prot

Brocade TurboIron 24X Series Configuration Guide 37553-1003053-01Routing between VLANsIf you do not need to further partition the port-based VLAN by d

Brocade TurboIron 24X Series Configuration Guide 753-1003053-01Supported featuresSupported Layer 3 features on TurboIron X Series devices• ECMP• RIP V

376 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Routing between VLANsThere is a separate STP domain for each port-based VLAN. Routing

Brocade TurboIron 24X Series Configuration Guide 37753-1003053-01Routing between VLANsNOTEYou must save the configuration (write mem) and reload the s

378 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Routing between VLANsConfiguring port-based VLANsPort-based VLANs allow you to provid

Brocade TurboIron 24X Series Configuration Guide 37953-1003053-01Routing between VLANsExample 2To configure the Port-based VLANs on the Layer 2 Switc

380 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Routing between VLANsTurboIron-A(config-vlan-5)#spanning-treeTurboIron-A(config-vlan-

Brocade TurboIron 24X Series Configuration Guide 38153-1003053-01Routing between VLANsSyntax: spanning-tree [ethernet<portnum> path-cost <val

382 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Routing between VLANsTurboIron-A(config-vlan-4)#TurboIron-A(config-vlan-4)#no untag e

Brocade TurboIron 24X Series Configuration Guide 38353-1003053-01Configuring IP subnet, IPX network andprotocol-based VLANsNOTEYou do not need to conf

384 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Configuring IP subnet, IPX network andprotocol-based VLANsAlso suppose you want a sin

Brocade TurboIron 24X Series Configuration Guide 38553-1003053-01Routing between VLANs using virtual routing interfaces (Layer 3 Switches only)4. To p

8 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Supported IPv6 management features• OSPF V2 (IPv4)• Route-only support (Global and inte

386 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Routing between VLANs using virtual routing interfaces (Layer 3 Switches only)FIGURE

Brocade TurboIron 24X Series Configuration Guide 38753-1003053-01Routing between VLANs using virtual routing interfaces (Layer 3 Switches only)TurboIr

388 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Routing between VLANs using virtual routing interfaces (Layer 3 Switches only)TurboIr

Brocade TurboIron 24X Series Configuration Guide 38953-1003053-01Routing between VLANs using virtual routing interfaces (Layer 3 Switches only)TurboIr

390 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Routing between VLANs using virtual routing interfaces (Layer 3 Switches only)Configu

Brocade TurboIron 24X Series Configuration Guide 39153-1003053-01Configuring uplink ports within a port-based VLANTurboIron-C(config-vif-5)#ip addr 10

392 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Configuring the same IP subnet address on multiple port-based VLANsConfiguring the sa

Brocade TurboIron 24X Series Configuration Guide 39353-1003053-01Configuring the same IP subnet address on multiple port-based VLANsFIGURE 47 Multiple

394 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Configuring the same IP subnet address on multiple port-based VLANs• If the destinati

Brocade TurboIron 24X Series Configuration Guide 39553-1003053-01Configuring VLAN groups and virtual routing interface groupsConfiguring VLAN groups a

Brocade TurboIron 24X Series Configuration Guide 953-1003053-01Unsupported featuresUnsupported featuresTable 8 lists the features that are not support

396 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Configuring VLAN groups and virtual routing interface groupsThe <num> parameter

Brocade TurboIron 24X Series Configuration Guide 39753-1003053-01Configuring VLAN groups and virtual routing interface groupsConfiguring a virtual rou

398 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Configuring VLAN groups and virtual routing interface groupsThe syntax and usage for

Brocade TurboIron 24X Series Configuration Guide 39953-1003053-01Configuring super aggregated VLANsIncreasing the number of VLANs you can configureNOT

400 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Configuring super aggregated VLANsFigure 48 shows a conceptual picture of the service

Brocade TurboIron 24X Series Configuration Guide 40153-1003053-01Configuring super aggregated VLANsFigure 49 shows an example application that uses ag

402 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Configuring super aggregated VLANsFIGURE 49 Example of a super aggregated VLAN applic

Brocade TurboIron 24X Series Configuration Guide 40353-1003053-01Configuring super aggregated VLANsThis example shows a single link between the core d

404 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Configuring super aggregated VLANsTurboIron(config-vlan-104)#tagged ethernet 6TurboIr

Brocade TurboIron 24X Series Configuration Guide 40553-1003053-01Configuring super aggregated VLANsNOTEIn these examples, the configurations of the ed

10 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Unsupported features

406 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Configuring super aggregated VLANsTurboIronB(config)#vlan 105 by portTurboIronB(confi

Brocade TurboIron 24X Series Configuration Guide 40753-1003053-01Configuring 802.1Q-in-Q taggingTurboIronE(config)#vlan 104 by portTurboIronE(config-v

408 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Configuring 802.1Q-in-Q taggingIn Figure 50, the untagged ports (to customer interfac

Brocade TurboIron 24X Series Configuration Guide 40953-1003053-01Configuring 802.1Q-in-Q taggingTurboIron(config)#tag-type 9100 e 11 to 12Syntax: [no]

410 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Configuring 802.1Q-in-Q taggingFIGURE 51 Example 802.1Q-in-Q configuration

Brocade TurboIron 24X Series Configuration Guide 41153-1003053-01Configuring private VLANsConfiguring private VLANsA private VLAN is a VLAN that has t

412 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Configuring private VLANs• Secondary – The secondary private VLAN are secure VLANs th

Brocade TurboIron 24X Series Configuration Guide 41353-1003053-01Configuring private VLANs• The device forwards all known unicast traffic in hardware.

414 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Configuring private VLANsTurboIron(config)#vlan 901TurboIron(config-vlan-901)#untagge

Brocade TurboIron 24X Series Configuration Guide 41553-1003053-01Dual-mode VLAN ports• The ethernet <portnum> parameter specifies the primary VL

Brocade TurboIron 24X Series Configuration Guide 1153-1003053-01Chapter2Getting Familiar with Management ApplicationsIn this chapter•Using the managem

416 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Dual-mode VLAN portsTo enable the dual-mode feature on port 11 in Figure 53,enter the

Brocade TurboIron 24X Series Configuration Guide 41753-1003053-01Dual-mode VLAN portsIn Figure 54, tagged port 11 is a dual-mode port belonging to VLA

418 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Displaying VLAN informationExample Displaying VLAN informationAfter you configure the

Brocade TurboIron 24X Series Configuration Guide 41953-1003053-01Displaying VLAN informationDisplaying system-wide VLAN informationUse the show vlans

420 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Displaying VLAN informationSyntax: show vlans [<vlan-id> | ethernet <portnum

Brocade TurboIron 24X Series Configuration Guide 42153-1003053-01Displaying VLAN information

422 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Displaying VLAN information

Brocade TurboIron 24X Series Configuration Guide 42353-1003053-01Chapter19Configuring Port Mirroring and MonitoringIn this chapter•Mirroring support b

424 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Configuring port mirroring and monitoringConfiguration notesRefer to the following ru

Brocade TurboIron 24X Series Configuration Guide 42553-1003053-01Configuring port mirroring and monitoringTurboIron(config)#mirror ethernet 24TurboIro

12 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Using the management portTurboIron(config-if-mgmt)#ip addr 10.44.9.64/24TurboIron(conf

426 Brocade TurboIron 24X Series Configuration Guide53-1003053-01ACL-based inbound mirroringBy default, when you monitor the primary port in a trunk g

Brocade TurboIron 24X Series Configuration Guide 42753-1003053-01ACL-based inbound mirroringTurboIron(config)#access-list 101 permit ip any any mirror

428 Brocade TurboIron 24X Series Configuration Guide53-1003053-01ACL-based inbound mirroringTurboIron(config)#interface ethernet 1TurboIron(config-if-

Brocade TurboIron 24X Series Configuration Guide 42953-1003053-01ACL-based inbound mirroringNOTEIf you want to add a port configured for ACL-Based Mir

430 Brocade TurboIron 24X Series Configuration Guide53-1003053-01MAC filter-based mirroringIn this configuration, the ACL-mirror-port command is confi

Brocade TurboIron 24X Series Configuration Guide 43153-1003053-01MAC filter-based mirroring1. Configure the mirror port.TurboIron(config)#mirror-port

432 Brocade TurboIron 24X Series Configuration Guide53-1003053-01MAC filter-based mirroring

Brocade TurboIron 24X Series Configuration Guide 43353-1003053-01Chapter20Configuring IPIn this chapter•Basic configuration . . . . . . . . . . . . .

434 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Overview• Route exchange protocols:• Routing Information Protocol (RIP)• Open Shortes

Brocade TurboIron 24X Series Configuration Guide 43553-1003053-01OverviewYou also can specify the default gateway for forwarding traffic to other subn

Brocade TurboIron 24X Series Configuration Guide 1353-1003053-01Logging on through the CLITo display the management interface statistics in brief form

436 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Overview1. When the Layer 3 Switch receives an IP packet, the Layer 3 Switch checks f

Brocade TurboIron 24X Series Configuration Guide 43753-1003053-01OverviewARP cacheThe ARP cache can contain dynamic (learned) entries and static (user

438 Brocade TurboIron 24X Series Configuration Guide53-1003053-01OverviewNOTELayer 2 Switches do not have an IP route table. A Layer 2 Switch sends a

Brocade TurboIron 24X Series Configuration Guide 43953-1003053-01Overview• If the cache contains an entry with the destination IP address, the device

440 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Overview• Open Shortest Path First (OSPF)All these protocols provide routes to the IP

Brocade TurboIron 24X Series Configuration Guide 44153-1003053-01Basic IP parameters and defaults – Layer 3 SwitchesBoth methods allow you to filter p

442 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Basic IP parameters and defaults – Layer 3 SwitchesChanges to memory allocation requi

Brocade TurboIron 24X Series Configuration Guide 44353-1003053-01Basic IP parameters and defaults – Layer 3 SwitchesARP age The amount of time the dev

444 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Basic IP parameters and defaults – Layer 3 SwitchesReverse ARP (RARP)An IP mechanism

Brocade TurboIron 24X Series Configuration Guide 44553-1003053-01Basic IP parameters and defaults – Layer 3 SwitchesIP interface parameters – Layer 3

14 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Logging on through the CLIOn-line helpTo display a list of available commands or comma

446 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Basic IP parameters and defaults – Layer 2 SwitchesBasic IP parameters and defaults –

Brocade TurboIron 24X Series Configuration Guide 44753-1003053-01Configuring IP parameters – Layer 3 SwitchesInterface IP parameters – Layer 2 Switche

448 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Configuring IP parameters – Layer 3 SwitchesNOTEThis section describes how to configu

Brocade TurboIron 24X Series Configuration Guide 44953-1003053-01Configuring IP parameters – Layer 3 SwitchesThe ospf-ignore | ospf-passive parameters

450 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Configuring IP parameters – Layer 3 SwitchesAssigning an IP address to a virtual inte

Brocade TurboIron 24X Series Configuration Guide 45153-1003053-01Configuring IP parameters – Layer 3 SwitchesWith IPv4, four IP addresses with a 30-bi

452 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Configuring IP parameters – Layer 3 SwitchesRouter A is connected to Router B as a po

Brocade TurboIron 24X Series Configuration Guide 45353-1003053-01Configuring IP parameters – Layer 3 SwitchesChanging the encapsulation typeThe Layer

454 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Configuring IP parameters – Layer 3 SwitchesConfiguration considerations for increasi

Brocade TurboIron 24X Series Configuration Guide 45553-1003053-01Configuring IP parameters – Layer 3 SwitchesNOTEThe new command ip-port-mtu replace t

Brocade TurboIron 24X Series Configuration Guide 1553-1003053-01Using and port number with CLI commandsUsing and port number with CLI commandsMany CLI

456 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Configuring IP parameters – Layer 3 SwitchesIf you prefer, you can explicitly set the

Brocade TurboIron 24X Series Configuration Guide 45753-1003053-01Configuring IP parameters – Layer 3 SwitchesTelnet packetsTo specify the lowest-numbe

458 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Configuring IP parameters – Layer 3 SwitchesThe <num> parameter is a loopback i

Brocade TurboIron 24X Series Configuration Guide 45953-1003053-01Configuring IP parameters – Layer 3 Switches• If the ARP cache does not contain an en

460 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Configuring IP parameters – Layer 3 SwitchesNOTEIf you want to change a previously co

Brocade TurboIron 24X Series Configuration Guide 46153-1003053-01Configuring IP parameters – Layer 3 SwitchesProxy ARP is disabled by default on Layer

462 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Configuring IP parameters – Layer 3 SwitchesChanging the maximum number of entries th

Brocade TurboIron 24X Series Configuration Guide 46353-1003053-01Configuring IP parameters – Layer 3 Switches• Strict source routing – requires the pa

464 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Configuring IP parameters – Layer 3 Switches• Administration – The packet was dropped

Brocade TurboIron 24X Series Configuration Guide 46553-1003053-01Configuring IP parameters – Layer 3 SwitchesTurboIron(config)#ip icmp unreachable hos

Brocade TurboIron 24X Series Configuration Guide v53-1003053-01Loading and saving configuration files . . . . . . . . . . . . . . . . . . . . . . .54R

16 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Using and port number with CLI commandsSearching and filtering output from Show comman

466 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Configuring IP parameters – Layer 3 Switches• The metric for the route – The value th

Brocade TurboIron 24X Series Configuration Guide 46753-1003053-01Configuring IP parameters – Layer 3 SwitchesThe following command configures a static

468 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Configuring IP parameters – Layer 3 SwitchesThe <next-hop-ip-addr> is the IP ad

Brocade TurboIron 24X Series Configuration Guide 46953-1003053-01Configuring IP parameters – Layer 3 SwitchesTo display the maximum value for your dev

470 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Configuring IP parameters – Layer 3 SwitchesThe commands in the example above configu

Brocade TurboIron 24X Series Configuration Guide 47153-1003053-01Configuring IP parameters – Layer 3 SwitchesFigure 58 shows an example of two static

472 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Configuring IP parameters – Layer 3 SwitchesTo configure a standard static IP route a

Brocade TurboIron 24X Series Configuration Guide 47353-1003053-01Configuring IP parameters – Layer 3 SwitchesConfiguring a default network routeThe La

474 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Configuring IP parameters – Layer 3 SwitchesTo verify that the route is in the route

Brocade TurboIron 24X Series Configuration Guide 47553-1003053-01Configuring IP parameters – Layer 3 SwitchesAdministrative distanceThe administrative

Brocade TurboIron 24X Series Configuration Guide 1753-1003053-01Using and port number with CLI commands 3 closed 4 closed 5 closedSynta

476 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Configuring IP parameters – Layer 3 Switches• IP static route – The value you assign

Brocade TurboIron 24X Series Configuration Guide 47753-1003053-01Configuring IP parameters – Layer 3 SwitchesResponse to path state changesIf one of t

478 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Configuring IP parameters – Layer 3 SwitchesSome types of hosts use the Router Solici

Brocade TurboIron 24X Series Configuration Guide 47953-1003053-01Configuring IP parameters – Layer 3 SwitchesSyntax: [no] ip irdp [broadcast | multica

480 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Configuring IP parameters – Layer 3 Switches• If the RARP table does not contain an e

Brocade TurboIron 24X Series Configuration Guide 48153-1003053-01Configuring IP parameters – Layer 3 SwitchesThe <number> parameter identifies t

482 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Configuring IP parameters – Layer 3 SwitchesNOTEThe application names are the names f

Brocade TurboIron 24X Series Configuration Guide 48353-1003053-01Configuring IP parameters – Layer 3 Switches• tftp (port 69)In addition, you can spec

484 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Configuring IP parameters – Layer 2 SwitchesNOTEThe BootP/DHCP hop count is not the T

Brocade TurboIron 24X Series Configuration Guide 48553-1003053-01Configuring IP parameters – Layer 2 SwitchesConfiguring the management IP address and

18 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Using and port number with CLI commands undebug Disable debugging functio

486 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Configuring IP parameters – Layer 2 SwitchesConfiguring Domain Name Server (DNS) reso

Brocade TurboIron 24X Series Configuration Guide 48753-1003053-01Configuring IP parameters – Layer 2 SwitchesNOTEIn the above example, 10.157.22.199 i

488 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Configuring IP parameters – Layer 2 SwitchesSyntax: ip ttl <1-255>Configuring D

Brocade TurboIron 24X Series Configuration Guide 48953-1003053-01Configuring IP parameters – Layer 2 SwitchesFor example, in Figure 61, a host from ea

490 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Configuring IP parameters – Layer 2 SwitchesWhen the stamped DHCP discovery packet is

Brocade TurboIron 24X Series Configuration Guide 49153-1003053-01Configuring IP parameters – Layer 2 SwitchesNOTEWhen DHCP Assist is enabled on any po

492 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Displaying IP configuration information and statisticsUp to eight addresses can be de

Brocade TurboIron 24X Series Configuration Guide 49353-1003053-01Displaying IP configuration information and statistics• IP forwarding cache – refer t

494 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Displaying IP configuration information and statisticsbootp-relay-max-hopsThe maximum

Brocade TurboIron 24X Series Configuration Guide 49553-1003053-01Displaying IP configuration information and statisticsDisplaying CPU utilization stat

Brocade TurboIron 24X Series Configuration Guide 1953-1003053-01Using and port number with CLI commandsIf you want to filter for a special character i

496 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Displaying IP configuration information and statisticsWhen you specify how many secon

Brocade TurboIron 24X Series Configuration Guide 49753-1003053-01Displaying IP configuration information and statisticsTo display detailed IP informat

498 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Displaying IP configuration information and statisticsThe <ip-addr> and <ip-

Brocade TurboIron 24X Series Configuration Guide 49953-1003053-01Displaying IP configuration information and statisticsThis example shows two static e

500 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Displaying IP configuration information and statisticsDisplaying the forwarding cache

Brocade TurboIron 24X Series Configuration Guide 50153-1003053-01Displaying IP configuration information and statisticsDisplaying the IP route tableTo

502 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Displaying IP configuration information and statisticsHere is an example of how to us

Brocade TurboIron 24X Series Configuration Guide 50353-1003053-01Displaying IP configuration information and statistics Clearing IP routesIf needed, y

504 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Displaying IP configuration information and statisticsThe show ip traffic command dis

Brocade TurboIron 24X Series Configuration Guide 50553-1003053-01Displaying IP configuration information and statisticsICMP statisticsThe ICMP statist

20 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Logging on through Brocade Network AdvisorAfter the alias is configured, entering shor

506 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Displaying IP configuration information and statisticsDisplaying IP information – Lay

Brocade TurboIron 24X Series Configuration Guide 50753-1003053-01Displaying IP configuration information and statisticsSyntax: show ipThis display sho

508 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Displaying IP configuration information and statistics Displaying IP traffic statisti

Brocade TurboIron 24X Series Configuration Guide 50953-1003053-01Displaying IP configuration information and statisticsTABLE 84 CLI display of IP traf

510 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Displaying IP configuration information and statisticsinput errors This information i

Brocade TurboIron 24X Series Configuration Guide 51153-1003053-01Chapter21Configuring Spanning Tree Protocol (STP) Related FeaturesIn this chapter•STP

512 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Configuring standard STP parametersSTP parameters and defaultsTable 85 lists the defa

Brocade TurboIron 24X Series Configuration Guide 51353-1003053-01Configuring standard STP parametersEnabling or disabling the Spanning Tree Protocol (

514 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Configuring standard STP parametersEnabling or disabling STP in a port-based VLANUse

Brocade TurboIron 24X Series Configuration Guide 51553-1003053-01Configuring standard STP parametersTurboIron(config)#vlan 1TurboIron(config-vlan-1)#s

Brocade TurboIron 24X Series Configuration Guide 2153-1003053-01Chapter3Configuring Basic Software FeaturesIn this chapter•Configuring basic system pa

516 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Configuring standard STP parametersSTP protection enhancement STP protection provides

Brocade TurboIron 24X Series Configuration Guide 51753-1003053-01Configuring standard STP parametersYou can view the STP Protection configuration for

518 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Configuring standard STP parametersSyntax: show span [vlan <vlan-id>] | [pvst-m

Brocade TurboIron 24X Series Configuration Guide 51953-1003053-01Configuring standard STP parametersRoot Cost The cumulative cost from this bridge to

520 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Configuring standard STP parametersDisplaying the STP state of a port-based VLANWhen

Brocade TurboIron 24X Series Configuration Guide 52153-1003053-01Configuring standard STP parametersIf a port is disabled, the only information shown

522 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Configuring standard STP parametersActive global timers The global STP timers that ar

Brocade TurboIron 24X Series Configuration Guide 52353-1003053-01Configuring standard STP parametersDisplaying detailed STP information for a single p

524 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Configuring STP related featuresThe STP information is shown in bold type in this exa

Brocade TurboIron 24X Series Configuration Guide 52553-1003053-01Configuring STP related features802.1W Rapid Spanning Tree (RSTP)Rapid Spanning Tree

22 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Configuring basic system parametersNOTEFor information about the Syslog buffer and mes

526 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Configuring STP related featuresThe 802.1W algorithm uses this information to determi

Brocade TurboIron 24X Series Configuration Guide 52753-1003053-01Configuring STP related featuresThe topology in Figure 64 contains four bridges. Swit

528 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Configuring STP related featuresEdge ports and edge port rolesThe Brocade implementat

Brocade TurboIron 24X Series Configuration Guide 52953-1003053-01Configuring STP related featuresNOTEConfiguring shared media or non-point-to-point li

530 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Configuring STP related featuresA port on a non-root bridge with a Designated role st

Brocade TurboIron 24X Series Configuration Guide 53153-1003053-01Configuring STP related features• Port Protocol Migration – This state machine deals

532 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Configuring STP related features• Proposing – The Designated port on the root bridge

Brocade TurboIron 24X Series Configuration Guide 53353-1003053-01Configuring STP related features• Sync – Once the Root port is elected, it sets a syn

534 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Configuring STP related features• Synced – Once the Designated port changes into a di

Brocade TurboIron 24X Series Configuration Guide 53553-1003053-01Configuring STP related features• Agreed – The Root port sends back an RST BPDU conta

Brocade TurboIron 24X Series Configuration Guide 2353-1003053-01Configuring basic system parametersSpecifying an SNMP trap receiverYou can specify a t

536 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Configuring STP related featuresHandshake when a root port has been electedIf a non-r

Brocade TurboIron 24X Series Configuration Guide 53753-1003053-01Configuring STP related features• Proposing and Proposed – The Designated port on the

538 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Configuring STP related features• Sync and Reroot – The Root port then asserts a sync

Brocade TurboIron 24X Series Configuration Guide 53953-1003053-01Configuring STP related features• Sync and Rerooted – When the ports on Switch 200 ha

540 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Configuring STP related features• Synced and Agree – When all the ports on the bridge

Brocade TurboIron 24X Series Configuration Guide 54153-1003053-01Configuring STP related featuresThe Designated port on Switch 60 goes into a forwardi

542 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Configuring STP related featuresConvergence at start upIn Figure 77, two bridges Swit

Brocade TurboIron 24X Series Configuration Guide 54353-1003053-01Configuring STP related featuresNext, Switch 1 is powered up (Figure 78). FIGURE 78 S

544 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Configuring STP related featuresThe Port2/Switch 2 bridge also sends an RST BPDU with

Brocade TurboIron 24X Series Configuration Guide 54553-1003053-01Configuring STP related featuresFor example, Port2/Switch, which is the port that con

24 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Configuring basic system parametersSpecifying a single trap sourceYou can specify a si

546 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Configuring STP related featuresWhen Port2/Switch 2 receives the RST BPDUs, 802.1W al

Brocade TurboIron 24X Series Configuration Guide 54753-1003053-01Configuring STP related featuresConvergence in a complex 802.1W topologyThe following

548 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Configuring STP related featuresNext Switch 2 sends RST BPDUs with a proposal flag to

Brocade TurboIron 24X Series Configuration Guide 54953-1003053-01Configuring STP related featuresAfter convergence is complete, Figure 82 shows the ac

550 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Configuring STP related featuresFor example, Port3/Switch 2 in Figure 83, fails. Por

Brocade TurboIron 24X Series Configuration Guide 55153-1003053-01Configuring STP related features• Port2/Switch 2 sends the TCN to Port2/Switch 1 FIGU

552 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Configuring STP related featuresThen Switch 1, Switch 5, and Switch 6 send RST BPDUs

Brocade TurboIron 24X Series Configuration Guide 55353-1003053-01Configuring STP related featuresFor example, in Figure 86, Switch 10 and Switch 30 re

554 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Configuring STP related featuresTo enable 802.1W for all ports in a port-based VLAN,

Brocade TurboIron 24X Series Configuration Guide 55553-1003053-01Configuring STP related featuresNOTEIf you change the 802.1W state of the primary por

Brocade TurboIron 24X Series Configuration Guide 2553-1003053-01Configuring basic system parametersTurboIron(config)#snmp-server enable traps holddown

556 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Configuring STP related featuresThe priority <value> parameter specifies the pr

Brocade TurboIron 24X Series Configuration Guide 55753-1003053-01Configuring STP related featuresSet the admin-pt2pt-mac to enabled or disabled. If se

558 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Configuring STP related featuresBridge IEEE 802.1W parametersBridge Identifier The ID

Brocade TurboIron 24X Series Configuration Guide 55953-1003053-01Configuring STP related featuresTo display detailed information about 802-1W, using t

560 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Configuring STP related featuresSyntax: show 802-1w detail [vlan <vlan-id>] The

Brocade TurboIron 24X Series Configuration Guide 56153-1003053-01Configuring STP related featuresState The port current 802.1W state. A port can have

562 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Configuring STP related features802.1W Draft 3As an alternative to full 802.1W, you c

Brocade TurboIron 24X Series Configuration Guide 56353-1003053-01Configuring STP related featuresFIGURE 87 802.1W Draft 3 RSTP ready for failoverIf th

564 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Configuring STP related featuresFIGURE 88 802.1W Draft 3 RSTP failover to alternate r

Brocade TurboIron 24X Series Configuration Guide 56553-1003053-01Configuring STP related featuresOnce a failover occurs, the Switch no longer has an a

vi Brocade TurboIron 24X Series Configuration Guide53-1003053-01Configuring TACACS/TACACS+ security . . . . . . . . . . . . . . . . . . . . . . .84How

26 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Configuring basic system parameters• VRRP-ETo stop link down occurrences from being re

566 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Configuring STP related featuresEnabling 802.1W Draft 3802.1W Draft 3 is disabled by

Brocade TurboIron 24X Series Configuration Guide 56753-1003053-01Configuring STP related featuresSSTP uses the same parameters, with the same value ra

568 Brocade TurboIron 24X Series Configuration Guide53-1003053-01PVST/PVST+ compatibilityTurboIron(config) spanning-tree single ethernet 1 priority 10

Brocade TurboIron 24X Series Configuration Guide 56953-1003053-01PVST/PVST+ compatibilitySupport for Cisco's Per VLAN Spanning Tree plus (PVST+),

570 Brocade TurboIron 24X Series Configuration Guide53-1003053-01PVST/PVST+ compatibilityFIGURE 89 Interaction of IEEE 802.1Q, PVST, and PVST+ regions

Brocade TurboIron 24X Series Configuration Guide 57153-1003053-01PVST/PVST+ compatibilityConfiguring PVST+ supportPVST+ support is automatically enabl

572 Brocade TurboIron 24X Series Configuration Guide53-1003053-01PVST/PVST+ compatibilitySyntax: show span pvst-modeThis command displays the followin

Brocade TurboIron 24X Series Configuration Guide 57353-1003053-01PVST/PVST+ compatibilityCommands on the device TurboIron(config)#vlan-group 1 vlan 2

574 Brocade TurboIron 24X Series Configuration Guide53-1003053-01PVST/PVST+ compatibilityThese commands change the default VLAN ID, configure port 1 a

Brocade TurboIron 24X Series Configuration Guide 57553-1003053-01PVRST compatibilityPVRST compatibilityPVRST, the "rapid" version of per-VLA

Brocade TurboIron 24X Series Configuration Guide 2753-1003053-01Configuring basic system parametersThe first message (the one on the bottom) indicates

576 Brocade TurboIron 24X Series Configuration Guide53-1003053-01BPDU guardRe-enabling ports disabled by BPDU guardWhen a BPSU Guard-enabled port is d

Brocade TurboIron 24X Series Configuration Guide 57753-1003053-01Root guard300 second input rate: 8 bits/sec, 0 packets/sec, 0.00% utilization300 seco

578 Brocade TurboIron 24X Series Configuration Guide53-1003053-01802.1s Multiple Spanning Tree ProtocolNOTERoot guard may prevent network connectivity

Brocade TurboIron 24X Series Configuration Guide 57953-1003053-01802.1s Multiple Spanning Tree ProtocolFor example, in Figure 92 a network is configur

580 Brocade TurboIron 24X Series Configuration Guide53-1003053-01802.1s Multiple Spanning Tree ProtocolMSTP Region – These are clusters of bridges tha

Brocade TurboIron 24X Series Configuration Guide 58153-1003053-01802.1s Multiple Spanning Tree ProtocolNOTEMSTP is not operational however until the m

582 Brocade TurboIron 24X Series Configuration Guide53-1003053-01802.1s Multiple Spanning Tree ProtocolTurboIron(config)#mstp name TurboIron Syntax: [

Brocade TurboIron 24X Series Configuration Guide 58353-1003053-01802.1s Multiple Spanning Tree ProtocolConfiguring bridge priority for an MSTP instanc

584 Brocade TurboIron 24X Series Configuration Guide53-1003053-01802.1s Multiple Spanning Tree ProtocolSetting ports to be operational edge portsYou c

Brocade TurboIron 24X Series Configuration Guide 58553-1003053-01802.1s Multiple Spanning Tree ProtocolForcing ports to transmit an MSTP BPDUTo force

28 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Configuring basic system parametersTurboIron(config)#interface ethernet 4TurboIron(con

586 Brocade TurboIron 24X Series Configuration Guide53-1003053-01802.1s Multiple Spanning Tree ProtocolCore 1 configurationTurboIron(config)#trunk eth

Brocade TurboIron 24X Series Configuration Guide 58753-1003053-01802.1s Multiple Spanning Tree ProtocolTurboIron(config)#exitTurboIron(config)#vlan 21

588 Brocade TurboIron 24X Series Configuration Guide53-1003053-01802.1s Multiple Spanning Tree Protocol TABLE 94 Output from Show MSTPThis field... Di

Brocade TurboIron 24X Series Configuration Guide 58953-1003053-01802.1s Multiple Spanning Tree ProtocolDisplaying MSTP information for a specified ins

590 Brocade TurboIron 24X Series Configuration Guide53-1003053-01802.1s Multiple Spanning Tree ProtocolTo display details about the MSTP that is confi

Brocade TurboIron 24X Series Configuration Guide 59153-1003053-01Chapter22Configuring RIPIn this chapter•RIP overview. . . . . . . . . . . . . . . . .

592 Brocade TurboIron 24X Series Configuration Guide53-1003053-01RIP parameters and defaultsRIP parameters and defaultsThe following tables list the R

Brocade TurboIron 24X Series Configuration Guide 59353-1003053-01Configuring RIP parametersRIP interface parametersTable 96 lists the interface-level

594 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Configuring RIP parametersAfter globally enabling the protocol, you must enable it on

Brocade TurboIron 24X Series Configuration Guide 59553-1003053-01Configuring RIP parameters• The type and number of a specific port to which the offse

Brocade TurboIron 24X Series Configuration Guide 2953-1003053-01Configuring basic system parametersTo display information about NTPv4 status, enter th

596 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Configuring RIP parameters• Change the default redistribution metric (optional). The

Brocade TurboIron 24X Series Configuration Guide 59753-1003053-01Configuring RIP parametersThe following command denies redistribution for all OSPF ro

598 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Configuring RIP parametersConfiguring route learning and advertising parametersBy def

Brocade TurboIron 24X Series Configuration Guide 59953-1003053-01Configuring RIP parametersConfiguring a RIP neighbor filterBy default, a Layer 3 Swit

600 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Configuring RIP parametersSuppressing RIP route advertisement on a VRRP or VRRPE back

Brocade TurboIron 24X Series Configuration Guide 60153-1003053-01Displaying RIP filtersApplying a RIP route filter to an interfaceOnce you define RIP

602 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Displaying CPU utilization statisticsDisplaying CPU utilization statisticsYou can dis

Brocade TurboIron 24X Series Configuration Guide 60353-1003053-01Displaying CPU utilization statisticsTo display utilization statistics for a specific

604 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Displaying CPU utilization statistics

Brocade TurboIron 24X Series Configuration Guide 60553-1003053-01Chapter23Configuring OSPF Version 2 (IPv4)In this chapter•Overview of OSPF. . . . . .

30 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Configuring basic system parametersNOTEYou can synchronize the time counter with your

606 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Overview of OSPFYou can further limit the broadcast area of flooding by defining an a

Brocade TurboIron 24X Series Configuration Guide 60753-1003053-01Overview of OSPFOSPF point-to-point LinksOne important OSPF process is Adjacency. Ad

608 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Overview of OSPFIn an OSPF point-to-point network, where a direct Layer 3 connection

Brocade TurboIron 24X Series Configuration Guide 60953-1003053-01Overview of OSPFNOTEPriority is a configurable option at the interface level. You ca

610 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Overview of OSPFNOTEFor details on how to configure the system to operate with the RF

Brocade TurboIron 24X Series Configuration Guide 61153-1003053-01Overview of OSPFFIGURE 97 AS External LSA reductionNotice that both Router D and Rou

612 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Overview of OSPFAlgorithm for AS External LSA reductionFigure 97 shows an example in

Brocade TurboIron 24X Series Configuration Guide 61353-1003053-01Configuring OSPFWhen appendix E is supported, the router generates the link state ID

614 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Configuring OSPF1. Enable OSPF on the router.2. Assign the areas to which the router

Brocade TurboIron 24X Series Configuration Guide 61553-1003053-01Configuring OSPFInterface parameters:• Assign interfaces to an area.• Define the auth

Brocade TurboIron 24X Series Configuration Guide 3153-1003053-01Configuring basic system parametersNew start and end dates for US daylight saving time

616 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Configuring OSPFIf you are testing an OSPF configuration and are likely to disable an

Brocade TurboIron 24X Series Configuration Guide 61753-1003053-01Configuring OSPFLSA translation for NSSA. OSPF elects the ABR with the highest route

618 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Configuring OSPFThe no-summary parameter applies only to stub areas and disables summ

Brocade TurboIron 24X Series Configuration Guide 61953-1003053-01Configuring OSPFThis example shows two routing domains, a RIP domain and an OSPF doma

620 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Configuring OSPFThe <ip-addr> parameter specifies the IP address portion of the

Brocade TurboIron 24X Series Configuration Guide 62153-1003053-01Configuring OSPF• ip ospf auth-change-wait-time <secs>• ip ospf authentication-

622 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Configuring OSPFHello-interval: Represents the length of time between the transmissio

Brocade TurboIron 24X Series Configuration Guide 62353-1003053-01Configuring OSPFNOTEIf you want the software to assume that the value you enter is th

624 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Configuring OSPFBlock flooding of outbound LSAs on specific OSPF interfacesBy default

Brocade TurboIron 24X Series Configuration Guide 62553-1003053-01Configuring OSPFNOTEWhen you establish an area virtual link, you must configure it on

32 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Configuring basic system parametersOn TurboIron X Series devices, multicast limiting i

626 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Configuring OSPFTurboIronC(config-ospf-router)#area 1 virtual-link 10.0.0.1 TurboIron

Brocade TurboIron 24X Series Configuration Guide 62753-1003053-01Configuring OSPFMD5 Authentication Wait Time: This parameter determines when a newly

628 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Configuring OSPF• 10 Mbps port cost = 10000/10 = 1000• 100 Mbps port cost = 10000/100

Brocade TurboIron 24X Series Configuration Guide 62953-1003053-01Configuring OSPFThe <num> parameter specifies the reference bandwidth and can b

630 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Configuring OSPFNOTEDo not enable redistribution until you have configured the redist

Brocade TurboIron 24X Series Configuration Guide 63153-1003053-01Configuring OSPFExample To redistribute RIP, static, and BGP4 routes into OSPF, enter

632 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Configuring OSPFTo configure an OSPF distribution list:• Configure a standard or exte

Brocade TurboIron 24X Series Configuration Guide 63353-1003053-01Configuring OSPFThe <source-ip> parameter specifies the source address for the

634 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Configuring OSPFThe <ACL-name> | <ACL-id> parameter specifies the ACL nam

Brocade TurboIron 24X Series Configuration Guide 63553-1003053-01Configuring OSPFTurboIron(config)#router ospfTurboIron(config-ospf-router)#default-me

Brocade TurboIron 24X Series Configuration Guide 3353-1003053-01Configuring basic system parametersTurboIron(config)#interface ethernet 8TurboIron(con

636 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Configuring OSPFThe following command shows the result of the redistribution filter.

Brocade TurboIron 24X Series Configuration Guide 63753-1003053-01Configuring OSPFThe router software can use the route information it learns through O

638 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Configuring OSPFWhen you configure an address range, the range takes effect immediate

Brocade TurboIron 24X Series Configuration Guide 63953-1003053-01Configuring OSPFConfigure default route originationWhen the Layer 3 Switch is an OSPF

640 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Configuring OSPFIf you do not use this option, the default redistribution metric type

Brocade TurboIron 24X Series Configuration Guide 64153-1003053-01Configuring OSPFModify administrative distanceLayer 3 Switches can learn about networ

642 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Configuring OSPFConfigure OSPF group Link State Advertisement(LSA) pacingThe Layer 3

Brocade TurboIron 24X Series Configuration Guide 64353-1003053-01Configuring OSPF• virtual-neighbor-state-change-trap – [MIB object: ospfVirtNbrStateC

644 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Clearing OSPF informationSyntax: database-overflow-interval <value>The <valu

Brocade TurboIron 24X Series Configuration Guide 64553-1003053-01Clearing OSPF informationTurboIron#clear ip ospf neighborSyntax: clear ip ospf neighb

34 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Configuring basic port parametersUse the show rate-limit unknown-unicast command to di

646 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Displaying OSPF informationThis command clears all OSPF areas, all OSPF neighbors, an

Brocade TurboIron 24X Series Configuration Guide 64753-1003053-01Displaying OSPF informationSyntax: show ip ospf configDisplaying CPU utilization stat

648 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Displaying OSPF informationIf the software has been running less than 15 minutes (the

Brocade TurboIron 24X Series Configuration Guide 64953-1003053-01Displaying OSPF informationDisplaying OSPF area informationTo display OSPF area infor

650 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Displaying OSPF informationSyntax: show ip ospf neighbor [router-id <ip-addr>]

Brocade TurboIron 24X Series Configuration Guide 65153-1003053-01Displaying OSPF informationDisplaying OSPF interface informationTo display OSPF inter

652 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Displaying OSPF informationSyntax: show ip ospf interface [<ip-addr>]The <ip

Brocade TurboIron 24X Series Configuration Guide 65353-1003053-01Displaying OSPF informationDisplaying OSPF route informationTo display OSPF route inf

654 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Displaying OSPF informationDisplaying the routes that have been redistributed into OS

Brocade TurboIron 24X Series Configuration Guide 65553-1003053-01Displaying OSPF informationDisplaying OSPF external link state informationTo display

Brocade TurboIron 24X Series Configuration Guide 3553-1003053-01Configuring basic port parametersAssigning a port nameA port name can be assigned to h

656 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Displaying OSPF informationDisplaying OSPF link state informationTo display link stat

Brocade TurboIron 24X Series Configuration Guide 65753-1003053-01Displaying OSPF informationSyntax: show ip ospf database external-link-state [adverti

658 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Displaying OSPF informationSyntax: show ip ospf border-routers [<ip-addr>]The &

Brocade TurboIron 24X Series Configuration Guide 65953-1003053-01Chapter24Configuring BGP4In this chapter•Overview of BGP4 . . . . . . . . . . . . .

660 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Overview of BGP4NOTEDevices support up to 12,000 BGP routes. Overview of BGP4BGP4 is

Brocade TurboIron 24X Series Configuration Guide 66153-1003053-01Overview of BGP4Although a Layer 3 Switch BGP4 route table can have multiple routes t

662 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Overview of BGP43. If the weights are the same, prefer the route with the largest loc

Brocade TurboIron 24X Series Configuration Guide 66353-1003053-01Overview of BGP4NOTELayer 3 Switches support BGP4 load sharing among multiple equal-c

664 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Overview of BGP4UPDATE messageAfter BGP4 neighbors establish a BGP4 connection over T

Brocade TurboIron 24X Series Configuration Guide 66553-1003053-01Basic configuration and activation for BGP4Basic configuration and activation for BGP

Brocade TurboIron 24X Series Configuration Guide vii53-1003053-01Setting optional parameters. . . . . . . . . . . . . . . . . . . . . . . . . . . . .

36 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Configuring basic port parameters• 10-half – 10 Mbps, half duplex• 100-full – 100 Mbps

666 Brocade TurboIron 24X Series Configuration Guide53-1003053-01BGP4 parametersNOTETo disable BGP4 without losing the BGP4 configuration information,

Brocade TurboIron 24X Series Configuration Guide 66753-1003053-01BGP4 parameters• Optional – Define neighbor distribute lists.• Optional – Define BGP4

668 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Memory considerations• Add, change, or negate route maps (when used by the network co

Brocade TurboIron 24X Series Configuration Guide 66953-1003053-01Basic configuration tasksMemory configuration options obsoleted by dynamic memoryDevi

670 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Basic configuration tasksNOTELayer 3 Switches use the same router ID for both OSPF an

Brocade TurboIron 24X Series Configuration Guide 67153-1003053-01Basic configuration tasksTurboIron(config-bgp-router)#exitTurboIron(config)#int loopb

672 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Basic configuration tasks[send-community] [soft-reconfiguration inbound][shutdown] [t

Brocade TurboIron 24X Series Configuration Guide 67353-1003053-01Basic configuration tasksNOTEBy default, if a route does not match any of the filters

674 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Basic configuration taskspassword [0 | 1] <string> specifies an MD5 password fo

Brocade TurboIron 24X Series Configuration Guide 67553-1003053-01Basic configuration tasksshutdown administratively shuts down the session with this n

Brocade TurboIron 24X Series Configuration Guide 3753-1003053-01Configuring basic port parametersTurboIron(config)#interface e 8TurboIron(config-if-e1

676 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Basic configuration tasksEncryption exampleThe following commands configure a BGP4 ne

Brocade TurboIron 24X Series Configuration Guide 67753-1003053-01Basic configuration tasksof the password or authentication string. In this case, the

678 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Basic configuration tasks• If you remove a parameter from a peer group, the value for

Brocade TurboIron 24X Series Configuration Guide 67953-1003053-01Basic configuration tasks• If you do not specify a parameter for an individual neighb

680 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Basic configuration tasks[remote-as <as-number>] [remove-private-as] [route-map

Brocade TurboIron 24X Series Configuration Guide 68153-1003053-01Optional configuration tasksWhen you apply the new option to shut down a neighbor, th

682 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Optional configuration tasksFor each keyword, <num> indicates the number of sec

Brocade TurboIron 24X Series Configuration Guide 68353-1003053-01Optional configuration tasksChanging the maximum number of paths forBGP4 load sharing

684 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Optional configuration tasksIf an IGP path used by a BGP4 next-hop route path install

Brocade TurboIron 24X Series Configuration Guide 68553-1003053-01Optional configuration tasks• multi-as – Load sharing is enabled for paths from diffe

38 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Configuring basic port parametersCommands may be entered in IF (single port) or MIF (m

686 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Optional configuration tasksTo configure a route map, and use it to set or change rou

Brocade TurboIron 24X Series Configuration Guide 68753-1003053-01Optional configuration tasksUsing the IP default route as a valid next hop fora BGP4

688 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Optional configuration tasksEnabling next-hop recursionFor each BGP4 route a Layer 3

Brocade TurboIron 24X Series Configuration Guide 68953-1003053-01Optional configuration tasksIn this example, the Layer 3 Switch cannot reach 10.240.0

690 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Optional configuration tasksThe first lookup results in an IBGP route, to network 10.

Brocade TurboIron 24X Series Configuration Guide 69153-1003053-01Optional configuration tasksThis Layer 3 Switch can use this route because the Layer

692 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Optional configuration tasksLower administrative distances are preferred over higher

Brocade TurboIron 24X Series Configuration Guide 69353-1003053-01Optional configuration tasksThis command disables comparison of the AS-Path lengths o

694 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Optional configuration tasksYou can enable the Layer 3 Switch to always compare the M

Brocade TurboIron 24X Series Configuration Guide 69553-1003053-01Optional configuration tasks• A cluster is a group of IGP routers organized into rout

Brocade TurboIron 24X Series Configuration Guide 3953-1003053-01Configuring basic port parametersConfiguring IPG on a 10 Gbps Ethernet interfaceTo con

696 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Optional configuration tasksAS1 contains a cluster with two route reflectors and two

Brocade TurboIron 24X Series Configuration Guide 69753-1003053-01Optional configuration tasks• The Layer 3 Switch adds the attributes only if it is a

698 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Optional configuration tasksBy default, the clients of a route reflector are not requ

Brocade TurboIron 24X Series Configuration Guide 69953-1003053-01Modifying redistribution parametersThe attribute-map <map-name> parameter confi

700 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Modifying redistribution parametersThe metric <num> parameter changes the metri

Brocade TurboIron 24X Series Configuration Guide 70153-1003053-01Modifying redistribution parametersNOTEThe route map you specify must already be conf

702 Brocade TurboIron 24X Series Configuration Guide53-1003053-01FilteringTo enable the Layer 3 Switch to redistribute BGP4 routes into OSPF and RIP,

Brocade TurboIron 24X Series Configuration Guide 70353-1003053-01FilteringTurboIron(config-bgp-router)#address-filter 1 deny 10.157.0.0 255.255.0.0Syn

704 Brocade TurboIron 24X Series Configuration Guide53-1003053-01FilteringNOTEThe Layer 3 Switch cannot actively support AS-path filters and AS-path A

Brocade TurboIron 24X Series Configuration Guide 70553-1003053-01FilteringThe seq <seq-value> parameter is optional and specifies the AS-path li

40 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Configuring basic port parametersIf the port link state toggles from up to down for a

706 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Filtering+ The plus sign matches on one or more sequences of a pattern. For example,

Brocade TurboIron 24X Series Configuration Guide 70753-1003053-01FilteringIf you want to filter for a special character instead of using the special c

708 Brocade TurboIron 24X Series Configuration Guide53-1003053-01FilteringNOTEIf the filter is referred to by a route map match statement, the filter

Brocade TurboIron 24X Series Configuration Guide 70953-1003053-01FilteringThe seq <seq-value> parameter is optional and specifies the community

710 Brocade TurboIron 24X Series Configuration Guide53-1003053-01FilteringThe seq <seq-value> parameter is optional and specifies the IP prefix

Brocade TurboIron 24X Series Configuration Guide 71153-1003053-01FilteringDefining route mapsA route map is a named set of match conditions and parame

712 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Filtering• Set the MED (metric).• Set the IP address of the next hop router.• Set the

Brocade TurboIron 24X Series Configuration Guide 71353-1003053-01FilteringSpecifying the match conditionsUse the following command to define the match

714 Brocade TurboIron 24X Series Configuration Guide53-1003053-01FilteringNOTEBy default, route maps apply to both unicast and multicast traffic.The r

Brocade TurboIron 24X Series Configuration Guide 71553-1003053-01FilteringMatching based on next-hop routerTo construct match statements for a route m

Brocade TurboIron 24X Series Configuration Guide 4153-1003053-01Configuring basic port parametersTurboIron(config)#interface ethernet 1TurboIron(confi

716 Brocade TurboIron 24X Series Configuration Guide53-1003053-01FilteringSyntax: match community <ACL> exact-matchThe <ACL> parameter spe

Brocade TurboIron 24X Series Configuration Guide 71753-1003053-01FilteringThe [default] interface null0 parameter redirects the traffic to the specifi

718 Brocade TurboIron 24X Series Configuration Guide53-1003053-01FilteringThe weight <num> parameter sets the weight for the route. You can sp

Brocade TurboIron 24X Series Configuration Guide 71953-1003053-01FilteringThe first command configures a community ACL containing community numbers 12

720 Brocade TurboIron 24X Series Configuration Guide53-1003053-01FilteringWhen you enable cooperative filtering, the Layer 3 Switch advertises this ca

Brocade TurboIron 24X Series Configuration Guide 72153-1003053-01FilteringIf you do not specify the capability, both capabilities are enabled. The pre

722 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Configuring route flap dampeningSyntax: show ip bgp neighbor <ip-addr>To displa

Brocade TurboIron 24X Series Configuration Guide 72353-1003053-01Configuring route flap dampeningThe route flap dampening mechanism is based on penalt

724 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Configuring route flap dampeningThe <max-suppress-time> parameter specifies the

Brocade TurboIron 24X Series Configuration Guide 72553-1003053-01Configuring route flap dampeningUsing a route map to configure route flap dampening f

42 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Configuring basic port parametersThe line “Link Error Dampening” displays “Enabled” if

726 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Configuring route flap dampeningRemoving route dampening from a routeYou can un-suppr

Brocade TurboIron 24X Series Configuration Guide 72753-1003053-01Configuring route flap dampeningIf you want to override the summary-only parameter an

728 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Configuring route flap dampeningThe regular-expression <regular-expression> par

Brocade TurboIron 24X Series Configuration Guide 72953-1003053-01Generating traps for BGPThe parameters are the same as those for the show ip bgp flap

730 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Displaying BGP4 informationThis display shows the following information.TABLE 105 BGP

Brocade TurboIron 24X Series Configuration Guide 73153-1003053-01Displaying BGP4 informationDisplaying the active BGP4 configurationTo view the active

732 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Displaying BGP4 informationSyntax: show ip bgp configDisplaying CPU utilization stati

Brocade TurboIron 24X Series Configuration Guide 73353-1003053-01Displaying BGP4 informationTo display utilization statistics for a specific number of

734 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Displaying BGP4 informationSyntax: show ip bgp neighbors [<ip-addr>] | [route-s

Brocade TurboIron 24X Series Configuration Guide 73553-1003053-01Displaying BGP4 informationDisplaying BGP4 neighbor informationTo view BGP4 neighbor

Brocade TurboIron 24X Series Configuration Guide 4353-1003053-01Configuring basic port parameters• The device automatically re-enables the port. To s

736 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Displaying BGP4 informationThis example shows how to display information for a specif

Brocade TurboIron 24X Series Configuration Guide 73753-1003053-01Displaying BGP4 informationThe attribute-entries option shows the attribute-entries a

738 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Displaying BGP4 informationRouterID The neighbor router ID.Description The descriptio

Brocade TurboIron 24X Series Configuration Guide 73953-1003053-01Displaying BGP4 informationRemovePrivateAs Whether this option is enabled for the nei

740 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Displaying BGP4 informationLast Connection Reset ReasonThe reason the previous sessio

Brocade TurboIron 24X Series Configuration Guide 74153-1003053-01Displaying BGP4 informationNotification Sent If the router receives a NOTIFICATION me

742 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Displaying BGP4 informationTCP Connection state The state of the connection with the

Brocade TurboIron 24X Series Configuration Guide 74353-1003053-01Displaying BGP4 informationDisplaying route information for a neighborYou can display

744 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Displaying BGP4 informationTABLE 108 BGP4 route summary information for a neighborThi

Brocade TurboIron 24X Series Configuration Guide 74553-1003053-01Displaying BGP4 informationDisplaying advertised routesTo display the routes the Laye

44 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Configuring basic port parametersConfiguring a global loop detection intervalThe loop

746 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Displaying BGP4 informationDisplaying the best routes that were nonetheless not insta

Brocade TurboIron 24X Series Configuration Guide 74753-1003053-01Displaying BGP4 informationSyntax: show ip bgp peer-group [<peer-group-name>]On

748 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Displaying BGP4 informationDisplaying the BGP4 route tableBGP4 uses filters you defin

Brocade TurboIron 24X Series Configuration Guide 74953-1003053-01Displaying BGP4 informationThe community option lets you display routes for a specifi

750 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Displaying BGP4 informationFor information about the fields in this display, refer to

Brocade TurboIron 24X Series Configuration Guide 75153-1003053-01Displaying BGP4 informationDisplaying information for a specific routeTo display BGP4

752 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Displaying BGP4 informationDisplaying route detailsHere is an example of the informat

Brocade TurboIron 24X Series Configuration Guide 75353-1003053-01Displaying BGP4 informationThese displays show the following information.TABLE 111 BG

754 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Displaying BGP4 informationDisplaying BGP4 route-attribute entriesThe route-attribute

Brocade TurboIron 24X Series Configuration Guide 75553-1003053-01Displaying BGP4 informationDisplaying the routes BGP4 has placed in theIP route table

Brocade TurboIron 24X Series Configuration Guide 4553-1003053-01Configuring basic port parametersSyntax: [no] errdisable recovery interval <seconds

756 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Displaying BGP4 informationDisplaying route flap dampening statisticsTo display route

Brocade TurboIron 24X Series Configuration Guide 75753-1003053-01Displaying BGP4 informationYou also can display all the dampened routes by entering t

758 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Updating route information and resetting a neighbor sessionThis example shows the act

Brocade TurboIron 24X Series Configuration Guide 75953-1003053-01Updating route information and resetting a neighbor sessionUse the following CLI meth

760 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Updating route information and resetting a neighbor sessionThe routes displayed by th

Brocade TurboIron 24X Series Configuration Guide 76153-1003053-01Updating route information and resetting a neighbor sessionThe detail parameter displ

762 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Updating route information and resetting a neighbor sessionTurboIron(config-bgp-route

Brocade TurboIron 24X Series Configuration Guide 76353-1003053-01Updating route information and resetting a neighbor sessionTo place a new or changed

764 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Updating route information and resetting a neighbor sessionClosing or resetting a nei

Brocade TurboIron 24X Series Configuration Guide 76553-1003053-01Clearing traffic countersClearing traffic countersYou can clear the counters (reset t

viii Brocade TurboIron 24X Series Configuration Guide53-1003053-01Clearing global IPv6 information . . . . . . . . . . . . . . . . . . . . . . . . .

46 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Configuring basic port parametersSyslog messageThe following message is logged when a

766 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Clearing diagnostic buffersTo un-suppress all the suppressed routes, enter the follow

Brocade TurboIron 24X Series Configuration Guide 76753-1003053-01Chapter25Configuring IP Multicast Traffic ReductionIn this chapter•IGMP snooping over

768 Brocade TurboIron 24X Series Configuration Guide53-1003053-01IGMP snooping overview• Filter-mode-change record. If the interface state changes fro

Brocade TurboIron 24X Series Configuration Guide 76953-1003053-01IGMP snooping overviewdevices are configured as queriers, after these devices exchang

770 Brocade TurboIron 24X Series Configuration Guide53-1003053-01IGMP snooping overview• Hardware resource is installed only when there is data traffi

Brocade TurboIron 24X Series Configuration Guide 77153-1003053-01PIM SM traffic snooping overviewPIM SM traffic snooping overviewWhen multiple PIM spa

772 Brocade TurboIron 24X Series Configuration Guide53-1003053-01PIM SM traffic snooping overviewThe device stops forwarding IP multicast traffic on a

Brocade TurboIron 24X Series Configuration Guide 77353-1003053-01Configuring IGMP snoopingConfiguration notes and limitations• PIM SM snooping applies

774 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Configuring IGMP snooping• “Modifying the maximum response time”• “Configuring report

Brocade TurboIron 24X Series Configuration Guide 77553-1003053-01Configuring IGMP snoopingSetting the maximum number of IGMP group addressesWhen IGMP

Brocade TurboIron 24X Series Configuration Guide 4753-1003053-01Chapter4Operations, Administration, and MaintenanceIn this chapter•Overview. . . . . .

776 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Configuring IGMP snoopingConfiguring the IGMP mode for a VLANIf you specify an IGMP m

Brocade TurboIron 24X Series Configuration Guide 77753-1003053-01Configuring IGMP snoopingSyntax: [no] multicast disable-multicast-snoop Disabling tra

778 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Configuring IGMP snoopingThe <interval> parameter specifies the time between qu

Brocade TurboIron 24X Series Configuration Guide 77953-1003053-01Configuring IGMP snoopingModifying the multicast cache age timeYou can set the time f

780 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Configuring IGMP snoopingIGMP V3 membership tracking and fast leaveIGMP V3 gives clie

Brocade TurboIron 24X Series Configuration Guide 78153-1003053-01Configuring PIM SM snoopingSyntax: [no] multicast fast-leave-v2Fast convergence In ad

782 Brocade TurboIron 24X Series Configuration Guide53-1003053-01IGMP snooping show commandsNOTEThe device must be in passive mode before it can be co

Brocade TurboIron 24X Series Configuration Guide 78353-1003053-01IGMP snooping show commandsTo display the IGMP snooping information for a specific VL

784 Brocade TurboIron 24X Series Configuration Guide53-1003053-01IGMP snooping show commandsSyntax: show ip multicast errorThe following table describ

Brocade TurboIron 24X Series Configuration Guide 78553-1003053-01IGMP snooping show commandsIf you want a report for a specific multicast group, enter

48 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Determining the software versions installed and running on a deviceNOTEIf you are atte

786 Brocade TurboIron 24X Series Configuration Guide53-1003053-01IGMP snooping show commandsDisplaying software resource usage for VLANsTo display inf

Brocade TurboIron 24X Series Configuration Guide 78753-1003053-01IGMP snooping show commandsDisplaying the status of IGMP snooping trafficTo display s

788 Brocade TurboIron 24X Series Configuration Guide53-1003053-01PIM SM snooping show commandsPIM SM snooping show commandsThis section shows how to d

Brocade TurboIron 24X Series Configuration Guide 78953-1003053-01PIM SM snooping show commandsSyntax: show ip multicast pimsm-snooping vlan <vlan-i

790 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Clear commands for IGMP snoopingTo display PIM SM snooping information for a specific

Brocade TurboIron 24X Series Configuration Guide 79153-1003053-01Clear commands for IGMP snoopingThe <vlan-id> parameter specifies the specific

792 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Clear commands for IGMP snooping

Brocade TurboIron 24X Series Configuration Guide 79353-1003053-01Chapter26Configuring IP Multicast ProtocolsIn this chapter•Overview of IP multicastin

794 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Overview of IP multicastingIPv4 multicast group addressesIn IPv4 Multicast, host grou

Brocade TurboIron 24X Series Configuration Guide 79553-1003053-01Changing global IP multicast parameters• Root Node: The node that initiates the tree

Brocade TurboIron 24X Series Configuration Guide 4953-1003053-01Determining the software versions installed and running on a device• The “Compressed P

796 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Changing global IP multicast parametersDefining the maximum number of PIM cache entri

Brocade TurboIron 24X Series Configuration Guide 79753-1003053-01Changing global IP multicast parametersModifying IGMP (V1 and V2) membership timeGrou

798 Brocade TurboIron 24X Series Configuration Guide53-1003053-01PIM DenseThe ethernet <portnum> parameter specifies the port number. Use this

Brocade TurboIron 24X Series Configuration Guide 79953-1003053-01PIM DensePruning a multicast treeAs multicast packets reach these leaf routers, the r

800 Brocade TurboIron 24X Series Configuration Guide53-1003053-01PIM DenseFIGURE 104 Transmission of multicast packets from the source to host group

Brocade TurboIron 24X Series Configuration Guide 80153-1003053-01PIM DenseFIGURE 105 Pruning leaf nodes from a multicast treeGrafts to a multicast Tr

802 Brocade TurboIron 24X Series Configuration Guide53-1003053-01PIM DensePIM DM versionsDevices support PIM DM V1 and V2. The default is V2. You can

Brocade TurboIron 24X Series Configuration Guide 80353-1003053-01PIM DenseGlobally enabling and disabling PIMTo globally enable PIM, enter the followi

804 Brocade TurboIron 24X Series Configuration Guide53-1003053-01PIM Dense• Graft retransmit timer• Inactivity timerModifying neighbor timeoutNeighbor

Brocade TurboIron 24X Series Configuration Guide 80553-1003053-01PIM DenseA prune wait value of zero causes the PIM router to stop traffic immediately

50 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Image file typesTurboIron#verify md5 secondary 01c410d6d153189a4a5d36c955653861TurboIr

806 Brocade TurboIron 24X Series Configuration Guide53-1003053-01PIM SparseFailover time in a multi-path topologyWhen a port in a multi-path topology

Brocade TurboIron 24X Series Configuration Guide 80753-1003053-01PIM SparsePIM Sparse switch typesSwitches that are configured with PIM Sparse interfa

808 Brocade TurboIron 24X Series Configuration Guide53-1003053-01PIM SparseTo enhance overall network performance, Layer 3 Switches use the RP to forw

Brocade TurboIron 24X Series Configuration Guide 80953-1003053-01PIM SparseNOTEBrocade recommends that you configure the same Layer 3 Switch as both t

810 Brocade TurboIron 24X Series Configuration Guide53-1003053-01PIM SparseTo enable PIM Sparse mode on an interface, enter commands such as the follo

Brocade TurboIron 24X Series Configuration Guide 81153-1003053-01PIM SparseNOTEBrocade recommends you specify 30 for IP version 4 (IPv4) networks.The

812 Brocade TurboIron 24X Series Configuration Guide53-1003053-01PIM SparseThe clear pim rp-map command allows you to update the entries in the static

Brocade TurboIron 24X Series Configuration Guide 81353-1003053-01PIM SparseAfter the Layer 3 Switch receives a packet for a given source-group pair, t

814 Brocade TurboIron 24X Series Configuration Guide53-1003053-01PIM SparseRP1(config-lbif-1)#ip ospf passiveRP1(config-lbif-1)#ip address 10.0.0.1/32

Brocade TurboIron 24X Series Configuration Guide 81553-1003053-01PIM SparseRP2(config-pim-router)#rp-candidate loopback 1RP2(config-pim-router)#exitRP

Brocade TurboIron 24X Series Configuration Guide 5153-1003053-01Upgrading softwareNOTEUse the copy tftp flash command to copy the boot code to the dev

816 Brocade TurboIron 24X Series Configuration Guide53-1003053-01PIM SparseRP1(config-lbif-1)#ip ospf area 0RP1(config-lbif-1)#ip ospf passiveRP1(conf

Brocade TurboIron 24X Series Configuration Guide 81753-1003053-01PIM SparseRP2(config-pim-router)#rp-address 10.2.1.1RP2(config-pim-router)#exitRP2(co

818 Brocade TurboIron 24X Series Configuration Guide53-1003053-01PIM Sparse• Group information• BSR information• Candidate RP information• RP-to-group

Brocade TurboIron 24X Series Configuration Guide 81953-1003053-01PIM SparseDisplaying a list of multicast groupsTo display a list of the IP multicast

820 Brocade TurboIron 24X Series Configuration Guide53-1003053-01PIM SparseThis display shows the following information. Displaying BSR informationTo

Brocade TurboIron 24X Series Configuration Guide 82153-1003053-01PIM SparseDisplaying Pim resourcesTo display the hardware resource information such a

822 Brocade TurboIron 24X Series Configuration Guide53-1003053-01PIM SparseSyntax: show ip pim resourceThe number of Hardware (Hw) resources available

Brocade TurboIron 24X Series Configuration Guide 82353-1003053-01PIM SparseDisplaying candidate RP informationTo display candidate RP information, ent

824 Brocade TurboIron 24X Series Configuration Guide53-1003053-01PIM SparseTurboIron#show ip pim rp-mapNumber of group-to-RP mappings: 6Group address

Brocade TurboIron 24X Series Configuration Guide 82553-1003053-01PIM SparseSyntax: show ip pim rp-setThis display shows the following information. Dis

52 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Using SNMP to upgrade softwareThe system responds with the following message.TurboIron

826 Brocade TurboIron 24X Series Configuration Guide53-1003053-01PIM SparseDisplaying information about an upstream neighbor deviceYou can view inform

Brocade TurboIron 24X Series Configuration Guide 82753-1003053-01PIM SparseDisplaying the PIM multicast cacheTo display the PIM multicast cache, enter

828 Brocade TurboIron 24X Series Configuration Guide53-1003053-01PIM SparseDisplaying PIM traffic statisticsTo display PIM traffic statistics, use the

Brocade TurboIron 24X Series Configuration Guide 82953-1003053-01PIM SparseSyntax: show ip pim trafficNOTEIf you have configured interfaces for standa

830 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Passive multicast route insertionThis command displays the number of warnings and non

Brocade TurboIron 24X Series Configuration Guide 83153-1003053-01Multicast Source Discovery Protocol (MSDP)PIM Sparse routers use MSDP to register PIM

832 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Multicast Source Discovery Protocol (MSDP)The RP sends the source information to each

Brocade TurboIron 24X Series Configuration Guide 83353-1003053-01Multicast Source Discovery Protocol (MSDP)Some MSDP routers that are also RPs can cac

834 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Multicast Source Discovery Protocol (MSDP)The connect-source loopback <num> par

Brocade TurboIron 24X Series Configuration Guide 83553-1003053-01Multicast Source Discovery Protocol (MSDP)Filtering MSDP source-group pairsThe follow

Brocade TurboIron 24X Series Configuration Guide 5353-1003053-01RebootingTurboIron(config)#flash 2047set flash copy block size to 2048Syntax: [no] fla

836 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Multicast Source Discovery Protocol (MSDP)The following commands configure the Source

Brocade TurboIron 24X Series Configuration Guide 83753-1003053-01Multicast Source Discovery Protocol (MSDP)Example The following commands configure an

838 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Multicast Source Discovery Protocol (MSDP)MSDP mesh groups A PIM Sparse domain can ha

Brocade TurboIron 24X Series Configuration Guide 83953-1003053-01Multicast Source Discovery Protocol (MSDP)Example configurationIn Figure 109, devices

840 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Multicast Source Discovery Protocol (MSDP)TurboIron(config)#interface loopback 1Turbo

Brocade TurboIron 24X Series Configuration Guide 84153-1003053-01Multicast Source Discovery Protocol (MSDP)TurboIron(config)#router msdpTurboIron(conf

842 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Multicast Source Discovery Protocol (MSDP)Configuration for Device CThe following set

Brocade TurboIron 24X Series Configuration Guide 84353-1003053-01Multicast Source Discovery Protocol (MSDP)TurboIron(config-router-bsr)#neighbor 10.32

844 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Multicast Source Discovery Protocol (MSDP)TurboIron(config)#router pimTurboIron(confi

Brocade TurboIron 24X Series Configuration Guide 84553-1003053-01Multicast Source Discovery Protocol (MSDP)Displaying peer informationTo display summa

54 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Loading and saving configuration filesTurboIron#show boot-preferenceBoot system prefer

846 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Multicast Source Discovery Protocol (MSDP)This display shows the following informatio

Brocade TurboIron 24X Series Configuration Guide 84753-1003053-01Multicast Source Discovery Protocol (MSDP)Notification Message Error SubCode Transmit

848 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Multicast Source Discovery Protocol (MSDP)Displaying source active cache informationT

Brocade TurboIron 24X Series Configuration Guide 84953-1003053-01Using ACLs to control multicast featuresClearing peer informationTo clear MSDP peer i

850 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Using ACLs to control multicast featuresTo configure an RP that covers multicast grou

Brocade TurboIron 24X Series Configuration Guide 85153-1003053-01Using ACLs to control multicast featuresThe display shows the multicast group address

852 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Tracing a multicast routeTurboIron(config)#router pimTurboIron(config-pim-router)#bsr

Brocade TurboIron 24X Series Configuration Guide 85353-1003053-01Displaying the multicast configuration for another multicast routerThe command exampl

854 Brocade TurboIron 24X Series Configuration Guide53-1003053-01IGMP V3NOTEThis display shows the PIM interface configuration information, but does n

Brocade TurboIron 24X Series Configuration Guide 85553-1003053-01IGMP V3• Source-List-Change Record. If the interface wants to add or remove traffic s

Brocade TurboIron 24X Series Configuration Guide 5553-1003053-01Loading and saving configuration filesReplacing the startup configuration with therunn

856 Brocade TurboIron 24X Series Configuration Guide53-1003053-01IGMP V3Globally enabling the IGMP version Using the CLITo globally identify the IGMP

Brocade TurboIron 24X Series Configuration Guide 85753-1003053-01IGMP V3Enabling membership tracking and fast leaveIGMP V3 provides membership trackin

858 Brocade TurboIron 24X Series Configuration Guide53-1003053-01IGMP V3Setting the group membership timeGroup membership time defines how long a grou

Brocade TurboIron 24X Series Configuration Guide 85953-1003053-01IGMP V3If the tracking and fast leave feature is enabled, you can display the list of

860 Brocade TurboIron 24X Series Configuration Guide53-1003053-01IGMP V3Displaying the IGMP status of an interfaceYou can display the status of a mult

Brocade TurboIron 24X Series Configuration Guide 86153-1003053-01IGMP V3Displaying IGMP traffic statusTo display the traffic status on each virtual ro

862 Brocade TurboIron 24X Series Configuration Guide53-1003053-01IGMP V3Clearing IGMP statisticsTo clear statistics for IGMP traffic, enter the follow

Brocade TurboIron 24X Series Configuration Guide 86353-1003053-01Chapter27Configuring VRRP and VRRPEIn this chapter•Overview. . . . . . . . . . . . .

864 Brocade TurboIron 24X Series Configuration Guide53-1003053-01OverviewOverview of VRRPNOTEVRRP support in the base Layer 3 code is the same as in t

Brocade TurboIron 24X Series Configuration Guide 86553-1003053-01OverviewThe dashed box in Figure 112 represents a VRRP virtual router. When you conf

Brocade TurboIron 24X Series Configuration Guide ix53-1003053-01Reading CDP packets . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

56 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Loading and saving configuration filesTo copy the startup-config or running-config fil

866 Brocade TurboIron 24X Series Configuration Guide53-1003053-01OverviewWhen you configure a VRID, the software automatically assigns its MAC address

Brocade TurboIron 24X Series Configuration Guide 86753-1003053-01OverviewHello messagesVRRP routers use Hello messages for negotiation to determine th

868 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Overviewthe track priorities are always lower than the VRRP priorities. The default

Brocade TurboIron 24X Series Configuration Guide 86953-1003053-01Overview• VRRPE does not use Owners. All routers are Backups for a given VRID. The

870 Brocade TurboIron 24X Series Configuration Guide53-1003053-01OverviewIn this example, Switch 1 and Switch 2 use VRRPE to load share as well as pro

Brocade TurboIron 24X Series Configuration Guide 87153-1003053-01Comparison of VRRP and VRRPEConfiguration noteVRRP-E is supported in the full Layer 3

872 Brocade TurboIron 24X Series Configuration Guide53-1003053-01VRRP and VRRPE parametersVirtual router IP address (the address you are backing up)•

Brocade TurboIron 24X Series Configuration Guide 87353-1003053-01VRRP and VRRPE parametersVRID MAC addressThe source MAC address in VRRP or VRRPE pack

874 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Configuring basic VRRP parametersConfiguring basic VRRP parametersTo implement a simp

Brocade TurboIron 24X Series Configuration Guide 87553-1003053-01Configuring basic VRRPE parametersConfiguring the OwnerRouter1(config)#router vrrpRou

Brocade TurboIron 24X Series Configuration Guide 5753-1003053-01Loading and saving configuration files• The software retains the running-config that i

876 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Note regarding disabling VRRP or VRRPEConfiguration rules for VRRPE• The interfaces o

Brocade TurboIron 24X Series Configuration Guide 87753-1003053-01Configuring additional VRRP and VRRPE parameters• Backup Hello messages and message t

878 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Configuring additional VRRP and VRRPE parametersRouter typeA VRRP interface is either

Brocade TurboIron 24X Series Configuration Guide 87953-1003053-01Configuring additional VRRP and VRRPE parametersThe priority <value> parameter

880 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Configuring additional VRRP and VRRPE parametersDead intervalThe Dead interval is the

Brocade TurboIron 24X Series Configuration Guide 88153-1003053-01Configuring additional VRRP and VRRPE parametersSyntax: track-port ethernet <portn

882 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Configuring additional VRRP and VRRPE parametersTo disable preemption on a Backup, en

Brocade TurboIron 24X Series Configuration Guide 88353-1003053-01Forcing a Master router to abdicate to a standby routerVRRP-E slow start timerIn a VR

884 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Displaying VRRP and VRRPE informationWhen you press Enter, the software changes the p

Brocade TurboIron 24X Series Configuration Guide 88553-1003053-01Displaying VRRP and VRRPE informationSyntax: show ip vrrp brief | ethernet <portnu

58 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Loading and saving configuration filesThe running-config already has a command to add

886 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Displaying VRRP and VRRPE informationDisplaying detailed informationTo display detail

Brocade TurboIron 24X Series Configuration Guide 88753-1003053-01Displaying VRRP and VRRPE informationSyntax: show ip vrrp brief | ethernet <portnu

888 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Displaying VRRP and VRRPE informationstate This Layer 3 Switch VRRP or VRRPE state fo

Brocade TurboIron 24X Series Configuration Guide 88953-1003053-01Displaying VRRP and VRRPE informationDisplaying detailed information for an individua

890 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Displaying VRRP and VRRPE informationSyntax: show ip vrrp vrid <num> [ethernet

Brocade TurboIron 24X Series Configuration Guide 89153-1003053-01Displaying VRRP and VRRPE informationDisplaying statisticsTo display statistics on mo

892 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Displaying VRRP and VRRPE informationClearing VRRP or VRRPE statisticsUse the followi

Brocade TurboIron 24X Series Configuration Guide 89353-1003053-01Displaying VRRP and VRRPE informationIf the software has been running less than 15 mi

894 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Configuration examplesConfiguration examplesThe following sections contain the CLI co

Brocade TurboIron 24X Series Configuration Guide 89553-1003053-01Configuration examplesNOTEWhen you configure a Backup router, the router interface on

Brocade TurboIron 24X Series Configuration Guide 5953-1003053-01Scheduling a system reload• ncopy running-config tftp <ip-addr> <from-name>

896 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Configuration examplesConfiguring Router2 To configure Router2, enter the following c

Brocade TurboIron 24X Series Configuration Guide 89753-1003053-01Chapter28Configuring Rule-Based IP Access Control Lists In this chapter•ACL overview

898 Brocade TurboIron 24X Series Configuration Guide53-1003053-01ACL overviewRule-based ACLs program the ACL entries you assign to an interface into C

Brocade TurboIron 24X Series Configuration Guide 89953-1003053-01How hardware-based ACLs workYou configure ACLs on a global basis, then apply them to

900 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Configuration considerations• The first fragment of a packet is permitted or denied u

Brocade TurboIron 24X Series Configuration Guide 90153-1003053-01Configuring standard numbered ACLs• Devices support MAC filters instead of Layer 2 AC

902 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Configuring standard numbered ACLsIf you prefer to specify the wildcard (mask value)

Brocade TurboIron 24X Series Configuration Guide 90353-1003053-01Configuring standard named ACLsConfiguring standard named ACLsThis section describes

904 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Configuring standard named ACLsNOTETo specify the host name instead of the IP address

Brocade TurboIron 24X Series Configuration Guide 90553-1003053-01Configuring extended numbered ACLsThe commands in this example configure a standard A

60 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Diagnostic error codes and remedies for TFTP transfersDisplaying the amount of time re

906 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Configuring extended numbered ACLsExtended numbered ACL syntaxSyntax: [no] access-lis

Brocade TurboIron 24X Series Configuration Guide 90753-1003053-01Configuring extended numbered ACLsThe <icmp-type>| <icmp-num> parameter s

908 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Configuring extended numbered ACLs• range – The policy applies to all TCP or UDP port

Brocade TurboIron 24X Series Configuration Guide 90953-1003053-01Configuring extended numbered ACLsNOTEThis value is not supported on 10 Gbps Ethernet

910 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Configuring extended numbered ACLsThe second entry denies IGMP traffic from the host

Brocade TurboIron 24X Series Configuration Guide 91153-1003053-01Configuring extended named ACLsConfiguring extended named ACLs The commands for confi

912 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Configuring extended named ACLsThe <ip-protocol> parameter indicates the type o

Brocade TurboIron 24X Series Configuration Guide 91353-1003053-01Configuring extended named ACLs• mask-request• parameter-problem• redirect• source-qu

914 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Configuring extended named ACLsThe precedence <name> | <num> parameter of

Brocade TurboIron 24X Series Configuration Guide 91553-1003053-01Preserving user input for ACL TCP/UDP port numbers• You can enable logging on ACLs an

Brocade TurboIron 24X Series Configuration Guide 6153-1003053-01Diagnostic error codes and remedies for TFTP transfers16 TFTP remote - general error.

916 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Managing ACL comment textManaging ACL comment textACL comment text describes entries

Brocade TurboIron 24X Series Configuration Guide 91753-1003053-01Applying an ACL to a virtual interface in a protocol- or subnet-based VLANApplying an

918 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Enabling ACL loggingIf no ACL entries explicitly deny packets during an entire five-m

Brocade TurboIron 24X Series Configuration Guide 91953-1003053-01Enabling strict control of ACL filtering of fragmented packetsDisplaying ACL Log Entr

920 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Enabling ACL support for switched traffic in the router imageThe fragments are forwar

Brocade TurboIron 24X Series Configuration Guide 92153-1003053-01Enabling ACL filtering based on VLAN membership or VE port membershipBy default, this

922 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Filtering on IP precedence and ToS valuesThe <ACL ID> parameter is the access

Brocade TurboIron 24X Series Configuration Guide 92353-1003053-01QoS options for IP ACLsThe second entry denies all FTP traffic from the 10.157.21.x n

924 Brocade TurboIron 24X Series Configuration Guide53-1003053-01QoS options for IP ACLsTurboIron(config)#acc 104 per ip any any 802.1p-and-internal-m

Brocade TurboIron 24X Series Configuration Guide 92553-1003053-01ACL-based rate limitingTo configure an ACL that matches on a packet with DSCP value 2

62 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Diagnostic error codes and remedies for TFTP transfers

926 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Displaying ACL information• If the ACL contains filters with Layer 4 source or destin

Brocade TurboIron 24X Series Configuration Guide 92753-1003053-01Troubleshooting ACLsIf you are using another feature that requires ACLs, either use t

928 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Troubleshooting ACLs

Brocade TurboIron 24X Series Configuration Guide 92953-1003053-01Chapter29Configuring Traffic PoliciesIn this chapter•About traffic policies . . . . .

930 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Configuration notes and feature limitationsConfiguration notes and feature limitation

Brocade TurboIron 24X Series Configuration Guide 93153-1003053-01Maximum number of traffic policies supported on a deviceMaximum number of traffic pol

932 Brocade TurboIron 24X Series Configuration Guide53-1003053-01ACL-based rate limiting using traffic policiesYou can configure ACL-based rate limiti

Brocade TurboIron 24X Series Configuration Guide 93353-1003053-01ACL-based rate limiting using traffic policiesThe above commands configure a fixed ra

934 Brocade TurboIron 24X Series Configuration Guide53-1003053-01ACL-based rate limiting using traffic policiesIf a port receives more than the config

Brocade TurboIron 24X Series Configuration Guide 93553-1003053-01ACL-based rate limiting using traffic policies<TPD name> is the name of the tra

Brocade TurboIron 24X Series Configuration Guide 6353-1003053-01Chapter5Securing Access to Management FunctionsIn this chapter•Securing access methods

936 Brocade TurboIron 24X Series Configuration Guide53-1003053-01ACL and rate limit countingSyntax: traffic-policy rate-limit adaptive cir <cir val

Brocade TurboIron 24X Series Configuration Guide 93753-1003053-01ACL and rate limit countingEnabling ACL statisticsNOTEACL statistics and ACL counting

938 Brocade TurboIron 24X Series Configuration Guide53-1003053-01ACL and rate limit countingEnabling ACL statistics with rate limiting traffic policie

Brocade TurboIron 24X Series Configuration Guide 93953-1003053-01Viewing traffic policiesSyntax: show statistics traffic-policy [<TPD name>]Tabl

940 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Viewing traffic policiesSyntax: show traffic-policy [<TPD name>]To display all

Brocade TurboIron 24X Series Configuration Guide 94153-1003053-01Chapter30Configuring 802.1X Port SecurityIn this chapter•IETF RFC support . . . . . .

942 Brocade TurboIron 24X Series Configuration Guide53-1003053-01How 802.1X port security worksFigure 114 illustrates these roles.FIGURE 114 Authenti

Brocade TurboIron 24X Series Configuration Guide 94353-1003053-01How 802.1X port security worksEAPOL messages are passed between the Port Access Entit

944 Brocade TurboIron 24X Series Configuration Guide53-1003053-01How 802.1X port security worksControlled and uncontrolled portsA physical port on the

Brocade TurboIron 24X Series Configuration Guide 94553-1003053-01How 802.1X port security worksMessage exchange during authenticationFigure 117 illust

64 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Securing access methodsTelnet access Not secured Regulate Telnet access using ACLs pag

946 Brocade TurboIron 24X Series Configuration Guide53-1003053-01How 802.1X port security works• EAP-TLS (RFC 2716) – EAP Transport Level Security (TL

Brocade TurboIron 24X Series Configuration Guide 94753-1003053-01How 802.1X port security worksAuthenticating multiple hosts connected to the same por

948 Brocade TurboIron 24X Series Configuration Guide53-1003053-01How 802.1X port security worksHow 802.1X Multiple-host authentication works When mult

Brocade TurboIron 24X Series Configuration Guide 94953-1003053-01How 802.1X port security works• When a Client has been denied access to the network,

950 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Configuring 802.1X port security802.1X port security and sFlowsFlow is a standards-ba

Brocade TurboIron 24X Series Configuration Guide 95153-1003053-01Configuring 802.1X port securityFor the <method-list>, enter at least one of th

952 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Configuring 802.1X port security• Tunnel-Type (64) – RFC 2868 • Tunnel-Medium-Type (6

Brocade TurboIron 24X Series Configuration Guide 95353-1003053-01Configuring 802.1X port securitySyntax: [no] dot1x auth-timeout-action failureOnce th

954 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Configuring 802.1X port securitySyntax: auth-fail-force-restrictFIGURE 119 Redirecti

Brocade TurboIron 24X Series Configuration Guide 95553-1003053-01Configuring 802.1X port securityEnable 802.1X VLAN ID support by adding the following

Brocade TurboIron 24X Series Configuration Guide 6553-1003053-01Restricting remote access to management functionsRestricting remote access to manageme

956 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Configuring 802.1X port securityWhen the RADIUS server specifies an untagged VLAN ID,

Brocade TurboIron 24X Series Configuration Guide 95753-1003053-01Configuring 802.1X port securityBy default, the dynamic VLAN assignments are not save

958 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Configuring 802.1X port securityExample TurboIron(config)#int e 2TurboIron(config-if-

Brocade TurboIron 24X Series Configuration Guide 95953-1003053-01Configuring 802.1X port securityDisabling and enabling strict security mode for dynam

960 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Configuring 802.1X port securitySyntax: [no] dot1x disable-filter-strict-securityThe

Brocade TurboIron 24X Series Configuration Guide 96153-1003053-01Configuring 802.1X port security• Dynamically assigned IP ACLs and MAC address filter

962 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Configuring 802.1X port securityFor example, to enable 802.1X port security on all in

Brocade TurboIron 24X Series Configuration Guide 96353-1003053-01Configuring 802.1X port securityauto – The controlled port is unauthorized until auth

964 Brocade TurboIron 24X Series Configuration Guide53-1003053-01Configuring 802.1X port securitySetting the quiet periodIf the device is unable to au

Brocade TurboIron 24X Series Configuration Guide 96553-1003053-01Configuring 802.1X port securitySyntax: auth-max <value><value> is a numb