Blade ICE G8000 User Manual

2350 Mission College Blvd.Suite 600Santa Clara, CA 95054www.bladenetwork.netRackSwitch G8000Application GuideVersion 1.0 TMPart Number: BMD00041, Nov

RackSwitch G8000 Application Guide10 BMD00041, November 2008

RackSwitch G8000 Application Guide100  Chapter 6: Quality of Service BMD00041, November 2008ACL configuration examplesExample 1Use this configura

RackSwitch G8000 Application GuideChapter 6: Quality of Service  101BMD00041, November 2008Example 2Use this configuration to block traffic from

RackSwitch G8000 Application Guide102  Chapter 6: Quality of Service BMD00041, November 2008Example 3Use this configuration to block traffic from

RackSwitch G8000 Application GuideChapter 6: Quality of Service  103BMD00041, November 2008Example 5Use this configuration to block all traffic e

RackSwitch G8000 Application Guide104  Chapter 6: Quality of Service BMD00041, November 20085. Assign the ACLs to a port. RS G8000 (config)# int

RackSwitch G8000 Application GuideChapter 6: Quality of Service  105BMD00041, November 2008Using Storm Control FiltersThe G8000 provides filters

RackSwitch G8000 Application Guide106  Chapter 6: Quality of Service BMD00041, November 2008Using DSCP Values to Provide QoSThe switch uses the D

RackSwitch G8000 Application GuideChapter 6: Quality of Service  107BMD00041, November 2008The switch can perform the following actions to the DS

RackSwitch G8000 Application Guide108  Chapter 6: Quality of Service BMD00041, November 2008Per Hop BehaviorThe DSCP value determines the Per Hop

RackSwitch G8000 Application GuideChapter 6: Quality of Service  109BMD00041, November 2008QoS LevelsTable 6-3 shows the default service levels p

BMD00041, November 2008 11PrefaceThe RackSwitch G8000 Application Guide describes how to configure and use the software on the RackSwitch G8000 switch

RackSwitch G8000 Application Guide110  Chapter 6: Quality of Service BMD00041, November 2008DSCP-to-802.1p mappingThe switch can use the DSCP val

RackSwitch G8000 Application GuideChapter 6: Quality of Service  111BMD00041, November 2008Using 802.1p Priority to Provide QoSThe G8000 provides

RackSwitch G8000 Application Guide112  Chapter 6: Quality of Service BMD00041, November 2008802.1p configuration example1. Configure a port’s def

BMD00041, November 2008 113CHAPTER 7Remote MonitoringRemote Monitoring (RMON) allows network devices to exchange network monitoring data.RMON allows t

RackSwitch G8000 Application Guide114  Chapter 7: Remote Monitoring BMD00041, November 2008RMON group 1—StatisticsThe switch supports collection

RackSwitch G8000 Application GuideChapter 7: Remote Monitoring  115BMD00041, November 2008RMON group 2—HistoryThe RMON History group allows you t

RackSwitch G8000 Application Guide116  Chapter 7: Remote Monitoring BMD00041, November 2008Configuring RMON HistoryPerform the following steps to

RackSwitch G8000 Application GuideChapter 7: Remote Monitoring  117BMD00041, November 2008Use one of the following commands to correlate an Alarm

RackSwitch G8000 Application Guide118  Chapter 7: Remote Monitoring BMD00041, November 2008Example 21. Configure the RMON Alarm parameters to tra

BMD00041, November 2008 119CHAPTER 8Basic IP RoutingThis chapter provides configuration background and examples for using the G8000 to perform IP rout

RackSwitch G8000 Application Guide12  Preface BMD00041, November 2008What You’ll Find in This GuideThis guide will help you plan, implement, and

RackSwitch G8000 Application Guide120  Chapter 8: Basic IP Routing BMD00041, November 2008IP Routing BenefitsThe switch uses a combination of con

RackSwitch G8000 Application GuideChapter 8: Basic IP Routing  121BMD00041, November 2008Routing Between IP SubnetsThe physical layout of most co

RackSwitch G8000 Application Guide122  Chapter 8: Basic IP Routing BMD00041, November 2008This is a situation that switching alone cannot cure. I

RackSwitch G8000 Application GuideChapter 8: Basic IP Routing  123BMD00041, November 2008Example of Subnet RoutingConsider the role of the G8000

RackSwitch G8000 Application Guide124  Chapter 8: Basic IP Routing BMD00041, November 2008Using VLANs to segregate Broadcast DomainsIf you want t

RackSwitch G8000 Application GuideChapter 8: Basic IP Routing  125BMD00041, November 20083. Determine which switch ports and IP interfaces belong

RackSwitch G8000 Application Guide126  Chapter 8: Basic IP Routing BMD00041, November 20085. Assign a VLAN to each IP interface. Now that the por

RackSwitch G8000 Application GuideChapter 8: Basic IP Routing  127BMD00041, November 2008Dynamic Host Configuration ProtocolDynamic Host Configur

RackSwitch G8000 Application Guide128  Chapter 8: Basic IP Routing BMD00041, November 2008

BMD00041, November 2008 129CHAPTER 9IGMPInternet Group Management Protocol (IGMP) is used by IP Multicast routers to learn about the existence of host

RackSwitch G8000 Application GuidePreface  13BMD00041, November 2008Typographic ConventionsThe following table describes the typographic styles us

RackSwitch G8000 Application Guide130  Chapter 9: IGMP BMD00041, November 2008IGMP SnoopingIGMP Snooping allows the switch to forward multicast t

RackSwitch G8000 Application GuideChapter 9: IGMP  131BMD00041, November 2008FastLeaveIn normal IGMP operation, when the switch receives an IGMPv

RackSwitch G8000 Application Guide132  Chapter 9: IGMP BMD00041, November 2008The switch supports the following IGMPv3 filter modes:  INCLUDE mo

RackSwitch G8000 Application GuideChapter 9: IGMP  133BMD00041, November 20085. View dynamic IGMP information. These commands display information

RackSwitch G8000 Application Guide134  Chapter 9: IGMP BMD00041, November 2008Static Multicast RouterA static multicast router (Mrouter) can be c

BMD00041, November 2008 135CHAPTER 10High AvailabilityThe RackSwitch G8000 supports high-availability network topologies. The following topics are dis

RackSwitch G8000 Application Guide136  Chapter 10: High Availability BMD00041, November 2008Uplink Failure DetectionUplink Failure Detection (UFD

RackSwitch G8000 Application GuideChapter 10: High Availability  137BMD00041, November 2008Failure Detection PairTo use UFD, you must configure a

RackSwitch G8000 Application Guide138  Chapter 10: High Availability BMD00041, November 2008Configuring UFDFigure 10-1 shows a basic UFD configur

BMD00041, November 2008 139APPENDIX ATroubleshootingThis section discusses some tools to help you troubleshoot common problems on the RackSwitch G8000

RackSwitch G8000 Application Guide14  Preface BMD00041, November 2008How to Get HelpIf you need help, service, or technical assistance, call Blad

RackSwitch G8000 Application Guide140  Appendix A: Troubleshooting BMD00041, November 2008Monitoring PortsThe port mirroring feature in the G8000

RackSwitch G8000 Application GuideAppendix A: Troubleshooting  141BMD00041, November 2008Port Mirroring behaviorThis section describes the compos

RackSwitch G8000 Application Guide142  Appendix A: Troubleshooting BMD00041, November 2008

BMD00041, November 2008 143IndexSymbols... 129[ ]...

RackSwitch G8000 Application Guide144  Index BMD00041, November 2008IIBM Director...20ICMP...

RackSwitch G8000 Application GuideIndex  145BMD00041, November 2008RSA keys... 35RSTP ...

BMD00041, November 2008 15CHAPTER 1Accessing the SwitchThe Blade OS software provides means for accessing, configuring, and viewing information and st

RackSwitch G8000 Application Guide16  Chapter 1: Accessing the Switch BMD00041, November 2008Configuring an IP InterfaceTo manage the switch usin

RackSwitch G8000 Application GuideChapter 1: Accessing the Switch  17BMD00041, November 2008Using TelnetA Telnet connection offers the convenienc

RackSwitch G8000 Application Guide18  Chapter 1: Accessing the Switch BMD00041, November 2008Using the Browser-Based InterfaceThe Browser-Based

RackSwitch G8000 Application GuideChapter 1: Accessing the Switch  19BMD00041, November 2008Accessing the BBI via HTTPS requires a SSL certificat

RackSwitch G8000 Application Guide2 BMD00041, November 2008Copyright © 2009 Blade Network Technologies, Inc., 2350 Mission College Blvd., Suite 600,

RackSwitch G8000 Application Guide20  Chapter 1: Accessing the Switch BMD00041, November 2008Using SNMPBlade OS provides SNMP v1.0 and SNMP v3.0

RackSwitch G8000 Application GuideChapter 1: Accessing the Switch  21BMD00041, November 2008To configure an SNMP user name, enter the following c

RackSwitch G8000 Application Guide22  Chapter 1: Accessing the Switch BMD00041, November 20083. Assign the user to the user group. Use the group

RackSwitch G8000 Application GuideChapter 1: Accessing the Switch  23BMD00041, November 2008Configuring SNMP Trap HostsSNMPv1 trap host 1. Config

RackSwitch G8000 Application Guide24  Chapter 1: Accessing the Switch BMD00041, November 2008SNMPv3 trap host configurationTo configure a user fo

RackSwitch G8000 Application GuideChapter 1: Accessing the Switch  25BMD00041, November 2008Securing Access to the SwitchSecure switch management

RackSwitch G8000 Application Guide26  Chapter 1: Accessing the Switch BMD00041, November 2008RADIUS Authentication and AuthorizationBlade OS supp

RackSwitch G8000 Application GuideChapter 1: Accessing the Switch  27BMD00041, November 2008Configuring RADIUS Use the following procedure to con

RackSwitch G8000 Application Guide28  Chapter 1: Accessing the Switch BMD00041, November 2008RADIUS authentication features in Blade OSBlade OS s

RackSwitch G8000 Application GuideChapter 1: Accessing the Switch  29BMD00041, November 2008Switch User AccountsThe user accounts listed in Table

BMD00041, November 2008 3ContentsPreface 11Who Should Use This Guide 11What You’ll Find in This Guide 12Typographic Conventions 13How to Get Help 14Ch

RackSwitch G8000 Application Guide30  Chapter 1: Accessing the Switch BMD00041, November 2008TACACS+ AuthenticationBlade OS supports authenticati

RackSwitch G8000 Application GuideChapter 1: Accessing the Switch  31BMD00041, November 2008TACACS+ authentication features in Blade OSAuthentica

RackSwitch G8000 Application Guide32  Chapter 1: Accessing the Switch BMD00041, November 2008If the remote user is successfully authenticated by

RackSwitch G8000 Application GuideChapter 1: Accessing the Switch  33BMD00041, November 2008When TACACS+ Command Logging is enabled, Blade OS con

RackSwitch G8000 Application Guide34  Chapter 1: Accessing the Switch BMD00041, November 2008Secure Shell Secure Shell (SSH) use secure tunnels t

RackSwitch G8000 Application GuideChapter 1: Accessing the Switch  35BMD00041, November 2008Generating RSA Host and Server Keys for SSH accessTo

RackSwitch G8000 Application Guide36  Chapter 1: Accessing the Switch BMD00041, November 2008End User Access ControlBlade OS allows an administra

RackSwitch G8000 Application GuideChapter 1: Accessing the Switch  37BMD00041, November 2008Defining a User’s access level The end user is by def

RackSwitch G8000 Application Guide38  Chapter 1: Accessing the Switch BMD00041, November 2008

BMD00041, November 2008 39CHAPTER 2Port-based Network Access ControlPort-Based Network Access control provides a means of authenticating and authorizi

RackSwitch G8000 Application Guide4 BMD00041, November 2008Chapter 3: VLANs 47Overview 48VLANs and Port VLAN ID Numbers 49VLAN numbers 49PVID numbers

RackSwitch G8000 Application Guide40  Chapter 2: Port-based Network Access Control BMD00041, November 2008Extensible Authentication Protocol over

RackSwitch G8000 Application GuideChapter 2: Port-based Network Access Control  41BMD00041, November 2008802.1X authentication processThe clients

RackSwitch G8000 Application Guide42  Chapter 2: Port-based Network Access Control BMD00041, November 2008EAPoL message exchangeDuring authentica

RackSwitch G8000 Application GuideChapter 2: Port-based Network Access Control  43BMD00041, November 2008802.1X port statesThe state of the port

RackSwitch G8000 Application Guide44  Chapter 2: Port-based Network Access Control BMD00041, November 2008Supported RADIUS attributesThe G8000 80

RackSwitch G8000 Application GuideChapter 2: Port-based Network Access Control  45BMD00041, November 2008Configuration guidelinesWhen configuring

RackSwitch G8000 Application Guide46  Chapter 2: Port-based Network Access Control BMD00041, November 2008

BMD00041, November 2008 47CHAPTER 3VLANsThis chapter describes network design and topology considerations for using Virtual Local Area Networks (VLANs

RackSwitch G8000 Application Guide48  Chapter 3: VLANs BMD00041, November 2008OverviewSetting up virtual LANs (VLANs) is a way to segment network

RackSwitch G8000 Application GuideChapter 3: VLANs  49BMD00041, November 2008VLANs and Port VLAN ID NumbersVLAN numbersThe G8000 supports up to 1

RackSwitch G8000 Application Guide5BMD00041, November 2008Why do we need multiple Spanning Trees? 84PVRST configuration guidelines 85Configuring PVRS

RackSwitch G8000 Application Guide50  Chapter 3: VLANs BMD00041, November 2008PVID numbersEach port in the switch has a configurable default VLAN

RackSwitch G8000 Application GuideChapter 3: VLANs  51BMD00041, November 2008VLAN TaggingBlade OS software supports IEEE 802.1Q VLAN tagging, pro

RackSwitch G8000 Application Guide52  Chapter 3: VLANs BMD00041, November 2008NOTE – If a 802.1Q tagged frame is received by a port that has VLAN

RackSwitch G8000 Application GuideChapter 3: VLANs  53BMD00041, November 2008Figure 3-2 through Figure 3-5 illustrate generic examples of VLAN ta

RackSwitch G8000 Application Guide54  Chapter 3: VLANs BMD00041, November 2008In Figure 3-4, tagged incoming packets are assigned directly to VLA

RackSwitch G8000 Application GuideChapter 3: VLANs  55BMD00041, November 2008VLAN Topologies and Design Considerations By default, the G8000 sof

RackSwitch G8000 Application Guide56  Chapter 3: VLANs BMD00041, November 2008Multiple VLANs with Tagging Adapters Figure 3-6 Example 1: Multipl

RackSwitch G8000 Application GuideChapter 3: VLANs  57BMD00041, November 2008NOTE – VLAN tagging is required only on ports that are connected to

RackSwitch G8000 Application Guide58  Chapter 3: VLANs BMD00041, November 2008VLAN configuration example Use the following procedure to configure

RackSwitch G8000 Application GuideChapter 3: VLANs  59BMD00041, November 2008Private VLANsPrivate VLANs provide Layer 2 isolation between the por

RackSwitch G8000 Application Guide6 BMD00041, November 2008Chapter 8: Basic IP Routing 119IP Routing Benefits 120Routing Between IP Subnets 121Exampl

RackSwitch G8000 Application Guide60  Chapter 3: VLANs BMD00041, November 2008 Community—A community port is a host port that belongs to a commu

RackSwitch G8000 Application GuideChapter 3: VLANs  61BMD00041, November 20082. Configure a secondary VLAN and map it to the primary VLAN. 3.

RackSwitch G8000 Application Guide62  Chapter 3: VLANs BMD00041, November 2008

BMD00041, November 2008 63CHAPTER 4Ports and TrunkingTrunk groups can provide super-bandwidth, multi-link connections between switches or other trunk-

RackSwitch G8000 Application Guide64  Chapter 4: Ports and Trunking BMD00041, November 2008OverviewWhen using port trunk groups between two switc

RackSwitch G8000 Application GuideChapter 4: Ports and Trunking  65BMD00041, November 2008Before you configure static trunksWhen you create and e

RackSwitch G8000 Application Guide66  Chapter 4: Ports and Trunking BMD00041, November 2008 All trunk members must be in the same Spanning Tree

RackSwitch G8000 Application GuideChapter 4: Ports and Trunking  67BMD00041, November 2008Port Trunking ExampleIn the example below, three ports

RackSwitch G8000 Application Guide68  Chapter 4: Ports and Trunking BMD00041, November 20082. Repeat the process on the other switch.3. Connect t

RackSwitch G8000 Application GuideChapter 4: Ports and Trunking  69BMD00041, November 2008Configurable Trunk Hash AlgorithmThis feature allows yo

BMD00041, November 2008 7FiguresFigure 2-1:Authenticating a Port Using EAPoL 41Figure 3-1:Default VLAN settings 52Figure 3-2:Port-based VLAN assignmen

RackSwitch G8000 Application Guide70  Chapter 4: Ports and Trunking BMD00041, November 2008Link Aggregation Control ProtocolLink Aggregation Cont

RackSwitch G8000 Application GuideChapter 4: Ports and Trunking  71BMD00041, November 2008LACP automatically determines which member links can be

RackSwitch G8000 Application Guide72  Chapter 4: Ports and Trunking BMD00041, November 2008LACP configuration guidelinesConsider the following gu

BMD00041, November 2008 73CHAPTER 5Spanning TreeWhen multiple paths exist on a network, Spanning Tree Protocol configures the network so that a switch

RackSwitch G8000 Application Guide74  Chapter 5: Spanning Tree BMD00041, November 2008OverviewSpanning Tree Protocol detects and eliminates logic

RackSwitch G8000 Application GuideChapter 5: Spanning Tree  75BMD00041, November 2008Bridge Protocol Data Units (BPDUs)To create a Spanning Tree,

RackSwitch G8000 Application Guide76  Chapter 5: Spanning Tree BMD00041, November 2008Port PriorityThe port priority helps determine which bridge

RackSwitch G8000 Application GuideChapter 5: Spanning Tree  77BMD00041, November 2008Assigning a VLAN to a Spanning Tree Group If no VLANs exist

RackSwitch G8000 Application Guide78  Chapter 5: Spanning Tree BMD00041, November 2008Creating a VLANWhen you create a VLAN, that VLAN automatica

RackSwitch G8000 Application GuideChapter 5: Spanning Tree  79BMD00041, November 2008As an example, assume that port 1 belongs to VLAN 2, and VLA

RackSwitch G8000 Application Guide8 BMD00041, November 2008

RackSwitch G8000 Application Guide80  Chapter 5: Spanning Tree BMD00041, November 2008Rapid Spanning Tree ProtocolRapid Spanning Tree Protocol (R

RackSwitch G8000 Application GuideChapter 5: Spanning Tree  81BMD00041, November 2008Port Type and Link TypeSpanning Tree configuration includes

RackSwitch G8000 Application Guide82  Chapter 5: Spanning Tree BMD00041, November 2008RSTP configuration exampleThis section provides steps to co

RackSwitch G8000 Application GuideChapter 5: Spanning Tree  83BMD00041, November 2008Per VLAN Rapid Spanning TreePer VLAN Rapid Spanning Tree Plu

RackSwitch G8000 Application Guide84  Chapter 5: Spanning Tree BMD00041, November 2008Why do we need multiple Spanning Trees?The following exampl

RackSwitch G8000 Application GuideChapter 5: Spanning Tree  85BMD00041, November 2008PVRST configuration guidelinesThis section provides importan

RackSwitch G8000 Application Guide86  Chapter 5: Spanning Tree BMD00041, November 2008Multiple Spanning Tree ProtocolMultiple Spanning Tree exten

RackSwitch G8000 Application GuideChapter 5: Spanning Tree  87BMD00041, November 2008MSTP configuration guidelinesThis section provides important

RackSwitch G8000 Application Guide88  Chapter 5: Spanning Tree BMD00041, November 2008 Figure 5-3 Implementing Multiple Spanning Tree GroupsServ

RackSwitch G8000 Application GuideChapter 5: Spanning Tree  89BMD00041, November 2008Configuring Multiple Spanning Tree GroupsThis configuration

BMD00041, November 2008 9TablesTable 1-1: User Access Levels 29Table 1-2: Blade OS-proprietary Attributes for RADIUS 29Table 1-3: Default TACACS+ Aut

RackSwitch G8000 Application Guide90  Chapter 5: Spanning Tree BMD00041, November 20083. Configure port membership and define the Spanning Tree g

RackSwitch G8000 Application GuideChapter 5: Spanning Tree  91BMD00041, November 2008Fast Uplink ConvergenceFast Uplink Convergence enables the G

RackSwitch G8000 Application Guide92  Chapter 5: Spanning Tree BMD00041, November 2008

BMD00041, November 2008 93CHAPTER 6Quality of ServiceQuality of Service features allow you to allocate network resources to mission-critical applica-t

RackSwitch G8000 Application Guide94  Chapter 6: Quality of Service BMD00041, November 2008Overview QoS helps you allocate guaranteed bandwidth t

RackSwitch G8000 Application GuideChapter 6: Quality of Service  95BMD00041, November 2008Using ACL FiltersAccess Control Lists are filters that

RackSwitch G8000 Application Guide96  Chapter 6: Quality of Service BMD00041, November 2008IP Standard ACLsThe switch supports up to 127 IP ACLs

RackSwitch G8000 Application GuideChapter 6: Quality of Service  97BMD00041, November 2008 To create an IP Extended ACL: To delete an IP Extend

RackSwitch G8000 Application Guide98  Chapter 6: Quality of Service BMD00041, November 2008Understanding ACL priorityEach ACL has a unique priori

RackSwitch G8000 Application GuideChapter 6: Quality of Service  99BMD00041, November 2008NOTE – To ensure your ACLs function properly, do not as