用户手册 — Riverstone Networks WICT1-12

目录

• Notices

  2
• Contents

  13
• 1 Introduction

  33
  • 1.1 Related Documentation

    33
  • 1.2 Document Conventions

    34
• 2 Maintaining Configuration Files

  35
  • 2.1 Configuration Files

    35
    • 2.1.1 Changing Configuration Information

      36
    • 2.1.2 Displaying Configuration Information

      36
    • 2.1.3 Activating the Configuration Commands in the Scratchpad

      37
    • 2.1.4 Saving the Active Configuration to the Startup Configuration File

      38
    • 2.1.5 Viewing the Current Configuration

      38
    • 2.1.6 Backing Up and Restoring Configuration Files

      39
  • 2.2 Backing Up and Restoring System Image Files

    40
  • 2.3 Configuring System Settings

    41
    • 2.3.1 Setting Daylight Saving Time

      42
    • 2.3.2 Configuring a Log-in Banner

      42
• 3 CLI and RS Basics

  43
  • 3.1 Starting the CLI

    43
  • 3.2 Understanding CLI Command Modes

    44
    • 3.2.1 User Mode

      44
    • 3.2.2 Enable Mode

      44
    • 3.2.3 Configure Mode

      45
    • 3.2.4 BootPROM Mode

      45
  • 3.3 Understanding CLI Commands

    45
  • 3.4 Using Line Editing Commands

    46
  • 3.5 Getting Help with CLI Commands

    48
  • 3.6 Setting CLI Parameters

    49
  • 3.7 Naming RS Ports

    50
    • 3.7.1 Port Type

      51
    • 3.7.2 Slot Number

      51
    • 3.7.3 Port Number

      51
    • 3.7.4 Channel Number

      53
    • 3.7.5 VC

      54
    • 3.7.6 Port Name Example

      54
  • 3.8 CLI and RS Configuration Example

    54
• 4 Hot Swapping Line Cards and Control Modules

  57
  • 4.1 Hot Swapping Overview

    57
  • 4.2 Hot Swapping Line Cards

    57
    • 4.2.1 Deactivating the Line Card

      58
    • 4.2.2 Removing the Line Card

      58
    • 4.2.3 Installing a New Line Card

      59
  • 4.3 Hot Swapping One Type of Line Card With Another

    59
  • 4.4 Hot Swapping a Secondary Control Module

    59
    • 4.4.1 Deactivating the Control Module

      60
    • 4.4.2 Removing the Control Module

      61
    • 4.4.3 Installing a Control Module

      61
  • 4.5 Hot Swapping a Switching Fabric Module (RS8600 only)

    61
    • 4.5.1 Removing the Switching Fabric Module

      62
    • 4.5.2 Installing a Switching Fabric Module

      62
  • 4.6 Hot Swapping A GBIC (RS32000 and RS38000 only)

    63
    • 4.6.1 Removing a GBIC from the Line Card

      63
    • 4.6.2 Installing a GBIC into the Line Card

      64
  • 4.7 Hot Swapping a WIC

    64
• 5 Bridging Configuration Guide

  65
  • 5.1 Spanning Tree (IEEE 802.1d)

    65
  • 5.2 Bridging Modes (Flow-Based and Address-Based)

    65
  • 5.3 VLAN Overview

    66
    • 5.3.1 RS VLAN Support

      67
    • 5.3.2 Configuration Examples

      68
  • 5.4 Access Ports and Trunk Ports (802.1P and 802.1Q support)

    69
  • 5.5 Configuring RS Bridging Functions

    70
    • 5.5.1 Configuring Address-based or Flow-based Bridging

      70
  • 5.6 Configuring Spanning Tree

    71
    • 5.6.1 Using Rapid STP

      71
    • 5.6.2 Adjusting Spanning-Tree Parameters

      72
    • 5.6.3 STP Dampening

      75
  • 5.7 Configuring a Port- or Protocol-Based VLAN

    75
    • 5.7.1 Creating a Port or Protocol Based VLAN

      76
    • 5.7.2 Adding Ports to a VLAN

      76
    • 5.7.3 Configuring VLAN Trunk Ports

      76
  • 5.8 Configuring VLANs for Bridging

    77
  • 5.9 Configuring Layer-2 Filters

    77
  • 5.10 Monitoring Bridging

    78
  • 5.11 GARP/GVRP

    79
    • 5.11.1 Running GARP/GVRP with STP

      79
    • 5.11.2 Configuring GARP/GVRP

      80
    • 5.11.3 Configuration Example

      81
  • 5.12 Tunneling VLAN packets across MANs

    83
    • 5.12.1 Stackable VLAN Components

      83
    • 5.12.2 Configuration Examples

      84
    • 5.12.3 Displaying Stackable VLAN Information

      99
• 6 SmartTRUNK Configuration Guide

  101
  • 6.1 Configuring SmartTRUNKS

    101
    • 6.1.1 Creating a SmartTRUNK

      102
    • 6.1.2 Adding Physical Ports to the SmartTRUNK

      102
    • 6.1.3 Specifying Traffic Load Policy

      103
  • 6.2 SmartTRUNK Example Configuration

    103
  • 6.3 Configuring the Link Aggregation Control Protocol (LACP)

    105
    • 6.3.1 Configuring SmartTRUNKs for LACP

      105
    • 6.3.2 LACP Configuration Example

      106
  • 6.4 SmartTRUNK Load Redistribution

    109
    • 6.4.1 SLR Water-marks

      109
    • 6.4.2 Polling intervals

      109
    • 6.4.3 Additional Controls Provided by SLR

      111
• 7 CMTS Configuration Guide

  113
  • 7.1 HFC Cable Network Architecture

    113
  • 7.2 CMTS Module Description

    113
  • 7.3 Provisioning the Headend

    114
    • 7.3.1 Headend Certification

      115
    • 7.3.2 IF-RF-Upconverter

      115
    • 7.3.3 Diplex Filters

      115
    • 7.3.4 DHCP Servers

      117
    • 7.3.5 DNS and TFTP Servers

      117
  • 7.4 Connecting and Configuring the Downstream

    117
    • 7.4.1 Installing and Configuring the Upconverter

      118
    • 7.4.2 Setting the Upconverter Input Level

      118
    • 7.4.3 Setting the Upconverter Output Level

      118
    • 7.4.4 Setting the Upconverter Output Frequency

      118
    • 7.4.5 Completing the Downstream Configuration

      119
    • 7.4.6 Testing the Downstream Configuration

      119
  • 7.5 Connecting the Upstream to the Laser Receiver

    119
  • 7.6 Configuring the CMTS Module

    120
    • 7.6.1 Configuring the CMTS Module in a Bridged Network

      120
    • 7.6.2 Configuring the CMTS Module in a Routed Network

      121
  • 7.7 CMTS Configuration Examples

    122
    • 7.7.1 Example One: Multiple ISPs Share a Single DHCP Server

      123
    • 7.7.2 Example Two: Multiple ISPs with multiple DHCP servers

      127
    • 7.7.3 Example Three: Overlapping VLANs with Multiple DHCP Servers and Client-VLAN Bindings

      130
  • 7.8 Anti-Spoofing

    132
    • 7.8.1 Anti-DHCP Spoofing

      132
    • 7.8.2 Anti-IP-spoofing

      133
• 8 ATM Configuration Guide

  135
  • 8.1 Configuring ATM Ports

    136
    • 8.1.1 Configuring SONET Parameters

      136
    • 8.1.2 Setting Parameters for the Multi-Rate Line Card

      137
    • 8.1.3 Displaying Port Information

      138
  • 8.2 Configuring Virtual Channels

    139
    • 8.2.1 Gathering Traffic Statistics (OC-12)

      139
  • 8.3 Traffic Shaping

    140
  • 8.4 Traffic Management

    142
    • 8.4.1 Configuring QoS (Multi-Rate Line Card)

      142
    • 8.4.2 Configuring Virtual Channel Groups (OC-12)

      143
    • 8.4.3 Traffic Management Configuration Example

      144
  • 8.5 Bridging ATM Traffic

    149
    • 8.5.1 Enabling Forced Bridging on a Virtual Channel

      151
    • 8.5.2 Configuring Cross-Connects

      151
    • 8.5.3 Limiting MAC Addresses Learned on a VC

      152
  • 8.6 Routing ATM Traffic

    152
    • 8.6.1 Peer Address Mapping

      155
  • 8.7 Configuring PPP (OC-12)

    157
• 9 Packet-over-SONET Configuration Guide

  161
  • 9.1 Configuring IP Interfaces for PoS Links

    161
  • 9.2 Configuring Packet-over-SONET Links

    162
  • 9.3 Configuring Automatic Protection Switching

    163
    • 9.3.1 Configuring Working and Protecting Ports

      164
  • 9.4 Specifying Bit Error Rate Thresholds

    165
  • 9.5 Monitoring PoS Ports

    166
  • 9.6 Example Configurations

    166
    • 9.6.1 APS PoS Links Between RS’s

      167
    • 9.6.2 PoS Link Between the RS and a Cisco Router

      167
    • 9.6.3 PoS Link Between the RS and a Juniper Router

      168
    • 9.6.4 Bridging and Routing Traffic Over a PoS Link

      169
    • 9.6.5 PoS Link Through a Layer 2 Cloud

      169
• 10 DHCP Configuration Guide

  171
  • 10.1 Configuring DHCP

    171
    • 10.1.1 Configuring an IP Address Pool

      172
    • 10.1.2 Configuring Client Parameters

      172
    • 10.1.3 Configuring a Static IP Address

      173
    • 10.1.4 Grouping Scopes with a Common Interface

      173
    • 10.1.5 Configuring DHCP Server Parameters

      173
  • 10.2 Updating the Lease Database

    173
  • 10.3 Monitoring the DHCP Server

    174
  • 10.4 DHCP Configuration Examples

    174
  • 10.5 Configuring Secondary Subnets

    175
  • 10.6 Secondary Subnets and Directly-Connected Clients

    176
  • 10.7 Interacting with Relay Agents

    177
• 11 IP Routing Configuration Guide

  179
  • 11.1 IP Routing Protocols

    179
    • 11.1.1 Unicast Routing Protocols

      179
    • 11.1.2 Multicast Routing Protocols

      179
  • 11.2 Configuring IP Interfaces and Parameters

    180
    • 11.2.1 Configuring IP Interfaces to Ports

      180
    • 11.2.2 Configuring IP Interfaces for a VLAN

      181
    • 11.2.3 Specifying Ethernet Encapsulation Method

      181
    • 11.2.4 Unnumbered Interfaces

      181
  • 11.3 Configuring Jumbo Frames

    182
  • 11.4 Configuring Address Resolution Protocol (ARP)

    183
    • 11.4.1 Configuring ARP Cache Entries

      183
    • 11.4.2 Unresolved MAC Addresses for ARP Entries

      183
    • 11.4.3 Configuring Proxy ARP

      184
  • 11.5 Configuring Reverse Address Resolution Protocol (RARP)

    184
    • 11.5.1 Specifying IP Interfaces for RARP

      184
    • 11.5.2 Defining MAC-to-IP Address Mappings

      185
    • 11.5.3 Monitoring RARP

      185
  • 11.6 Configuring DNS Parameters

    185
  • 11.7 Configuring IP Services (ICMP)

    186
  • 11.8 Configuring IP Helper

    186
  • 11.9 Configuring Direct Broadcast

    187
  • 11.10 Configuring Denial of Service (DOS)

    187
  • 11.11 Monitoring IP Parameters

    187
  • 11.12 Configuring IP Forwarding

    189
  • 11.13 Hardware Routing Table

    189
  • 11.14 Configuring ICMP Redirect

    189
  • 11.15 Forwarding Mode

    190
    • 11.15.1 Configuring Destination-Based and Host-Flow-Based Forwarding

      190
    • 11.15.2 Configuring a Custom Forwarding Profile

      190
    • 11.15.3 Monitoring Custom Forwarding Profiles

      191
    • 11.15.4 Using Custom Forwarding with Other RS Features

      192
  • 11.16 Configuring Router Discovery

    192
  • 11.17 Setting Memory Thresholds

    194
  • 11.18 Configuration Examples

    196
    • 11.18.1 Assigning IP/IPX Interfaces

      196
• 12 VRRP Configuration Guide

  197
  • 12.1 Configuring VRRP

    197
    • 12.1.1 Basic VRRP Configuration

      198
    • 12.1.2 Symmetrical Configuration

      199
    • 12.1.3 Multi-Backup Configuration

      201
  • 12.2 Additional Configuration

    205
    • 12.2.1 Setting the Backup Priority

      205
    • 12.2.2 Setting the Warmup Period

      205
    • 12.2.3 Setting the Advertisement Interval

      205
    • 12.2.4 Setting Pre-empt Mode

      206
    • 12.2.5 Setting an Authentication Key

      206
  • 12.3 Monitoring VRRP

    206
    • 12.3.1 ip-redundancy trace

      207
    • 12.3.2 ip-redundancy show

      207
  • 12.4 VRRP Configuration Notes

    209
• 13 RIP Configuration Guide

  211
  • 13.1 Configuring RIP

    211
    • 13.1.1 Enabling and Disabling RIP

      211
    • 13.1.2 Configuring RIP Interfaces

      211
  • 13.2 Configuring RIP Parameters

    212
    • 13.2.1 Configuring RIP Route Default-Metric

      214
  • 13.3 Monitoring RIP

    214
  • 13.4 Configuration Example

    215
• 14 OSPF Configuration Guide

  217
  • 14.1 OSPF Multipath

    218
  • 14.2 Configuring OSPF

    218
  • 14.3 Setting the Router ID

    218
  • 14.4 Enabling OSPF

    219
  • 14.5 Configuring OSPF Areas

    219
    • 14.5.1 Configuring Summary Ranges

      220
    • 14.5.2 Configuring Stub Areas

      220
    • 14.5.3 Configuring Not-So-Stubby Areas (NSSA)

      221
  • 14.6 Configuring OSPF Interfaces

    222
    • 14.6.1 Configuring Interfaces for NBMA Networks

      222
    • 14.6.2 Configuring Interfaces for Point-to-Multipoint Networks

      223
    • 14.6.3 Configuring Interfaces for Point-to-Point Networks

      223
  • 14.7 Configuring OSPF Interface Parameters

    223
    • 14.7.1 Setting the Interface State

      224
    • 14.7.2 Setting the Default Cost of an OSPF Interface

      224
  • 14.8 Creating Virtual Links

    224
  • 14.9 Configuring OSPF Parameters

    225
    • 14.9.1 Configuring OSPF Global Parameters

      226
  • 14.10 Monitoring OSPF

    228
  • 14.11 OSPF Configuration Examples

    230
    • 14.11.1 Exporting All Interface & Static Routes to OSPF

      231
    • 14.11.2 Exporting All RIP, Interface & Static Routes to OSPF

      231
• 15 IS-IS Configuration Guide

  235
  • 15.1 Defining an IS-IS Area

    235
  • 15.2 Configuring IS-IS Interfaces

    235
  • 15.3 Enabling IS-IS on the RS

    236
  • 15.4 Setting IS-IS Global Parameters

    236
    • 15.4.1 Setting the IS Operating Level

      236
    • 15.4.2 Setting the PSN Interval

      236
    • 15.4.3 Setting the System ID

      237
    • 15.4.4 Setting the SPF Interval

      237
    • 15.4.5 Setting the Overload Bit

      237
    • 15.4.6 Setting IS-IS Authentication

      238
  • 15.5 Setting IS-IS Interface Parameters

    239
    • 15.5.1 Setting the Interface Operating Level

      239
    • 15.5.2 Setting Interface Parameters for a Designated Intermediate System (DIS)

      240
    • 15.5.3 Setting IS-IS Interface Timers

      240
    • 15.5.4 Setting Mesh Group Membership

      240
  • 15.6 Displaying IS-IS Information

    241
    • 15.6.1 IS-IS Sample Configuration

      241
• 16 BGP Configuration Guide

  259
  • 16.1 The RS BGP Implementation

    259
  • 16.2 Basic BGP Tasks

    260
    • 16.2.1 Setting the Autonomous System Number

      260
    • 16.2.2 Setting the Router ID

      260
    • 16.2.3 Configuring a BGP Peer Group

      261
    • 16.2.4 Adding a BGP Peer

      262
    • 16.2.5 Starting BGP

      262
    • 16.2.6 Using AS-Path Regular Expressions

      262
    • 16.2.7 Using the AS Path Prepend Feature

      264
    • 16.2.8 Creating BGP Confederations

      265
    • 16.2.9 Creating Community Lists

      266
    • 16.2.10 Using Route Maps

      267
    • 16.2.11 Using BGP Accounting

      269
  • 16.3 BGP Configuration Examples

    271
    • 16.3.1 BGP Peering Session Example

      272
    • 16.3.2 IBGP Configuration Example

      274
    • 16.3.3 EBGP Multihop Configuration Example

      277
    • 16.3.4 Community Attribute Example

      280
    • 16.3.5 Local Preference Examples

      287
    • 16.3.6 Multi-Exit Discriminator Attribute Example

      290
    • 16.3.7 EBGP Aggregation Example

      291
    • 16.3.8 Route Reflection Example

      292
    • 16.3.9 BGP Confederation Example

      295
    • 16.3.10 Route Map Example

      300
    • 16.3.11 BGP Accounting Examples

      301
• 17 MPLS Configuration

  309
  • 17.1 MPLS Architecture Overview

    310
    • 17.1.1 Labels

      310
    • 17.1.2 Label Binding

      313
    • 17.1.3 Label Distribution and Management

      313
    • 17.1.4 Penultimate Hop Popping

      315
    • 17.1.5 MPLS Tunnels

      315
    • 17.1.6 MPLS Table Information

      316
  • 17.2 Enabling and Starting MPLS on the RS

    319
  • 17.3 RSVP Configuration

    321
    • 17.3.1 Establishing RSVP Sessions

      322
    • 17.3.2 RSVP Refresh Intervals

      323
    • 17.3.3 RSVP Hello Packets

      324
    • 17.3.4 Authentication

      325
    • 17.3.5 Blockade Aging Interval

      326
    • 17.3.6 RSVP Refresh Reduction

      326
    • 17.3.7 Displaying RSVP Information

      328
  • 17.4 LDP Configuration

    329
    • 17.4.1 Establishing LDP Sessions

      329
    • 17.4.2 Monitoring LDP Sessions

      330
    • 17.4.3 Remote Peers

      331
    • 17.4.4 Loop Detection

      331
    • 17.4.5 MD5 Password Protection

      332
    • 17.4.6 Using LDP Filters

      332
    • 17.4.7 Displaying LDP Information

      334
  • 17.5 Configuring L3 Label Switched Paths

    335
    • 17.5.1 Configuring L3 Static LSPs

      335
    • 17.5.2 Configuring L3 Dynamic LSPs

      339
    • 17.5.3 Configuring an Explicit LSP

      340
  • 17.6 Configuring L2 Tunnels

    368
    • 17.6.1 Configuring L2 Static Labels

      368
    • 17.6.2 Configuring Dynamic L2 Labels

      373
  • 17.7 Traffic Engineering

    410
    • 17.7.1 Administrative Groups

      410
    • 17.7.2 Constrained Shortest Path First

      412
    • 17.7.3 IGP Shortcuts

      427
• 18 Routing Policy Configuration

  431
  • 18.1 Preference

    431
    • 18.1.1 Import Policies

      432
    • 18.1.2 Export Policies

      433
    • 18.1.3 Specifying a Route Filter

      434
    • 18.1.4 Aggregates and Generates

      435
    • 18.1.5 Authentication

      436
  • 18.2 Configuring Simple Routing Policies

    437
    • 18.2.1 Redistributing Static Routes

      438
    • 18.2.2 Redistributing Directly Attached Networks

      438
    • 18.2.3 Redistributing RIP into RIP

      439
    • 18.2.4 Redistributing RIP into OSPF

      439
    • 18.2.5 Redistributing OSPF to RIP

      439
    • 18.2.6 Redistributing Aggregate Routes

      440
    • 18.2.7 Simple Route Redistribution Example: Redistribution into RIP

      440
    • 18.2.8 Simple Route Redistribution Example: Redistribution into OSPF

      442
  • 18.3 Configuring Advanced Routing Policies

    443
    • 18.3.1 Export Policies

      444
    • 18.3.2 Creating an Export Destination

      445
    • 18.3.3 Creating an Export Source

      445
    • 18.3.4 Import Policies

      445
    • 18.3.5 Creating an Import Source

      446
    • 18.3.6 Creating a Route Filter

      446
    • 18.3.7 Creating an Aggregate Route

      446
    • 18.3.8 Creating an Aggregate Destination

      447
    • 18.3.9 Creating an Aggregate Source

      448
    • 18.3.10 Import Policies Example: Importing from RIP

      448
    • 18.3.11 Import Policies Example: Importing from OSPF

      451
    • 18.3.12 Export Policies Example: Exporting to RIP

      454
    • 18.3.13 Export Policies Example: Exporting to OSPF

      459
• 19 Multicast Routing Configuration

  465
  • 19.1 IGMP Overview

    465
  • 19.2 DVMRP Overview

    465
  • 19.3 Configuring IGMP

    466
    • 19.3.1 Configuring IGMP on an IP Interface

      466
    • 19.3.2 Configuring IGMP Query Interval

      467
    • 19.3.3 Configuring IGMP Response Wait Time

      467
    • 19.3.4 Configuring Per-Interface Control of IGMP Membership

      467
    • 19.3.5 Configuring Static IGMP Groups

      467
  • 19.4 Configuring DVMRP

    468
    • 19.4.1 Starting and Stopping DVMRP

      468
    • 19.4.2 Configuring DVMRP on an Interface

      468
    • 19.4.3 Configuring DVMRP Parameters

      468
    • 19.4.4 Configuring the DVMRP Routing Metric

      469
    • 19.4.5 Configuring DVMRP TTL & Scope

      469
    • 19.4.6 Configuring a DVMRP Tunnel

      470
  • 19.5 Monitoring IGMP & DVMRP

    470
  • 19.6 Configuration Example

    471
• 20 IP Policy-Based Forwarding Configuration

  473
  • 20.1 Configuring IP Policies

    473
    • 20.1.1 Defining an ACL Profile

      474
    • 20.1.2 Associating the Profile with an IP Policy

      474
    • 20.1.3 Applying an IP Policy to an Interface

      477
  • 20.2 IP Policy Configuration Examples

    477
    • 20.2.1 Routing Traffic to Different ISPs

      478
    • 20.2.2 Prioritizing Service to Customers

      479
    • 20.2.3 Authenticating Users through a Firewall

      480
    • 20.2.4 Firewall Load Balancing

      481
  • 20.3 Monitoring IP Policies

    483
• 21 Network Address Translation Configuration

  487
  • 21.1 Configuring NAT

    487
    • 21.1.1 Setting Inside and Outside Interfaces

      488
    • 21.1.2 Setting NAT Rules

      488
  • 21.2 Forcing Flows through NAT

    488
  • 21.3 Managing Dynamic Bindings

    489
  • 21.4 NAT and DNS

    489
  • 21.5 NAT and ICMP Packets

    490
  • 21.6 NAT and FTP

    490
  • 21.7 Monitoring NAT

    491
  • 21.8 Configuration Examples

    491
    • 21.8.1 Static Configuration

      491
    • 21.8.2 Dynamic Configuration

      493
    • 21.8.3 Dynamic NAT with IP Overload (PAT) Configuration

      494
    • 21.8.4 Dynamic NAT with DNS

      495
    • 21.8.5 Dynamic NAT with Outside Interface Redundancy

      497
• 22 Web Hosting Configuration

  499
  • 22.1 Load Balancing

    499
    • 22.1.1 Creating the Server Group

      500
    • 22.1.2 Adding Servers to the Load Balancing Group

      501
    • 22.1.3 Setting Timeouts for Load Balancing Mappings

      502
    • 22.1.4 Optional Group or Server Operating Parameters

      503
    • 22.1.5 Using Health Check Clusters

      505
    • 22.1.6 Setting Server Status

      505
    • 22.1.7 Load Balancing and FTP

      506
    • 22.1.8 Allowing Load Balancing Servers to Access the Internet

      506
    • 22.1.9 Allowing Access to Load Balancing Servers

      506
    • 22.1.10 Virtual State Replication Protocol (VSRP)

      506
    • 22.1.11 Displaying Load Balancing Information

      508
    • 22.1.12 Configuration Examples

      508
  • 22.2 Web Caching

    515
    • 22.2.1 Configuring Web Caching

      515
    • 22.2.2 Configuration Example

      517
    • 22.2.3 Other Web-Cache Options

      517
    • 22.2.4 Monitoring Web-Caching

      520
• 23 IPX Routing Configuration

  521
  • 23.1 RIP (Routing Information Protocol)

    521
  • 23.2 SAP (Service Advertising Protocol)

    522
  • 23.3 Configuring IPX RIP & SAP

    522
    • 23.3.1 IPX RIP

      522
    • 23.3.2 IPX SAP

      522
    • 23.3.3 Creating IPX Interfaces

      522
    • 23.3.4 IPX Addresses

      523
  • 23.4 Configuring IPX Interfaces and Parameters

    523
    • 23.4.1 Configuring IPX Addresses to Ports

      523
    • 23.4.2 Configuring Secondary Addresses on an IPX Interface

      523
    • 23.4.3 Configuring IPX Interfaces for a VLAN

      524
    • 23.4.4 Specifying IPX Encapsulation Method

      524
  • 23.5 Configuring IPX Routing

    525
    • 23.5.1 Enabling IPX RIP

      525
    • 23.5.2 Enabling SAP

      525
    • 23.5.3 Configuring Static Routes

      525
    • 23.5.4 Configuring Static SAP Table Entries

      525
    • 23.5.5 Controlling Access to IPX Networks

      526
  • 23.6 Monitoring an IPX Network

    528
  • 23.7 Configuration Examples

    528
• 24 Access Control List Configuration

  531
  • 24.1 ACL Basics

    531
    • 24.1.1 Defining Selection Criteria in ACL Rules

      531
    • 24.1.2 How ACL Rules are Evaluated

      533
    • 24.1.3 Implicit Deny Rule

      534
    • 24.1.4 Allowing External Responses to Established TCP Connections

      535
  • 24.2 Creating and Modifying ACLs

    536
    • 24.2.1 Editing ACLs Offline

      536
    • 24.2.2 Maintaining ACLs Using the ACL Editor

      537
  • 24.3 Using ACLs

    538
    • 24.3.1 Applying ACLs to Interfaces

      538
    • 24.3.2 Applying ACLs to Services

      539
    • 24.3.3 Applying ACLs to Layer-4 Bridging Ports

      539
    • 24.3.4 Using ACLs as Profiles

      540
  • 24.4 Enabling ACL Logging

    544
  • 24.5 Monitoring ACLs

    545
• 25 Security Configuration

  547
  • 25.1 Configuring RS Access Security

    547
    • 25.1.1 Configuring RADIUS

      547
    • 25.1.2 Configuring TACACS

      549
    • 25.1.3 Configuring TACACS+

      549
    • 25.1.4 Configuring Passwords

      551
    • 25.1.5 Configuring SSH

      551
  • 25.2 Layer-2 Security Filters

    552
    • 25.2.1 Configuring Layer-2 Address Filters

      553
    • 25.2.2 Configuring Layer-2 Port-to-Address Lock Filters

      553
    • 25.2.3 Configuring Layer-2 Static Entry Filters

      554
    • 25.2.4 Configuring Layer-2 Secure Port Filters

      554
    • 25.2.5 Monitoring Layer-2 Security Filters

      555
    • 25.2.6 Layer-2 Filter Examples

      555
  • 25.3 Layer-3 Access Control Lists (ACLs)

    558
  • 25.4 Layer-4 Bridging and Filtering

    558
    • 25.4.1 Creating an IP or IPX VLAN for Layer-4 Bridging

      559
    • 25.4.2 Placing the Ports on the Same VLAN

      560
    • 25.4.3 Enabling Layer-4 Bridging on the VLAN

      560
    • 25.4.4 Creating ACLs to Specify Selection Criteria for Layer-4 Bridging

      560
    • 25.4.5 Applying a Layer-4 Bridging ACL to a Port

      561
    • 25.4.6 Notes

      561
• 26 QoS Configuration

  563
  • 26.1 Layer-2, Layer-3 and Layer-4 Flow Specification

    564
  • 26.2 Precedence for Layer-3 Flows

    564
  • 26.3 RS Queuing Policies

    565
  • 26.4 Traffic Prioritization for Layer-2 Flows

    565
    • 26.4.1 Configuring Layer-2 QoS

      566
    • 26.4.2 802.1p Class of Service Priority Mapping

      566
  • 26.5 Traffic Prioritization for Layer-3 & Layer-4 Flows

    568
    • 26.5.1 Configuring IP QoS Policies

      568
    • 26.5.2 Configuring IPX QoS Policies

      569
  • 26.6 Configuring RS Queueing Policy

    569
    • 26.6.1 Allocating Bandwidth for a Weighted-Fair Queuing Policy

      570
  • 26.7 Weighted Random Early Detection (WRED)

    570
    • 26.7.1 WRED’s Effect on the Network

      570
    • 26.7.2 Weighting Algorithms in WRED

      570
  • 26.8 ToS Rewrite

    572
    • 26.8.1 Configuring ToS Rewrite for IP Packets

      572
  • 26.9 Monitoring QoS

    574
  • 26.10 Limiting Traffic Rate

    575
    • 26.10.1 Rate Limiting Modes

      576
    • 26.10.2 Per-Flow Rate Limiting

      576
    • 26.10.3 Software-Based Flow-Aggregate Rate Limiting

      577
    • 26.10.4 Port Rate Limiting

      577
    • 26.10.5 Aggregate Rate Limiting

      578
    • 26.10.6 Example Configurations

      580
    • 26.10.7 Displaying Rate Limit Information

      581
• 27 Performance Monitoring

  583
  • 27.1 Configuring the RS for Port Mirroring

    584
  • 27.2 Monitoring Broadcast Traffic

    585
• 28 RMON Configuration

  587
  • 28.1 Configuring and Enabling RMON

    587
    • 28.1.1 Example of RMON Configuration Commands

      588
    • 28.1.2 RMON Groups

      588
    • 28.1.3 Control Tables

      590
  • 28.2 Using RMON

    591
  • 28.3 Configuring RMON Groups

    592
    • 28.3.1 Configuration Examples

      594
  • 28.4 Displaying RMON Information

    595
    • 28.4.1 RMON CLI Filters

      596
  • 28.5 Troubleshooting RMON

    598
  • 28.6 Allocating Memory to RMON

    599
• 29 LFAP Configuration Guide

  601
  • 29.1 Overview

    601
  • 29.2 Requirements

    601
  • 29.3 Traffic Accounting Services

    601
  • 29.4 Configuring the LFAP Agent on the RS

    602
  • 29.5 Monitoring the LFAP Agent on the RS

    603
• 30 WAN Configuration

  605
  • 30.1 High-Speed Serial Interface (HSSI) and Standard Serial Interfaces

    605
  • 30.2 Configuring WAN Interfaces

    606
    • 30.2.1 Primary and Secondary Addresses

      606
    • 30.2.2 Static, Mapped, and Dynamic Peer IP/IPX Addresses

      606
    • 30.2.3 Forcing Bridged Encapsulation

      608
    • 30.2.4 Packet Compression

      608
    • 30.2.5 Packet Encryption

      609
    • 30.2.6 WAN Quality of Service

      609
  • 30.3 Frame Relay Overview

    611
    • 30.3.1 Virtual Circuits

      611
    • 30.3.2 Permanent Virtual Circuits (PVCs)

      612
  • 30.4 Configuring Frame Relay Interfaces for the RS

    612
    • 30.4.1 Defining the Type and Location of a Frame Relay and VC Interface

      612
    • 30.4.2 Setting up a Frame Relay Service Profile

      612
    • 30.4.3 Applying a Service Profile to an Active Frame Relay WAN Port

      613
  • 30.5 Monitoring Frame Relay WAN Ports

    613
  • 30.6 Frame Relay Port Configuration

    614
  • 30.7 Point-to-Point Protocol (PPP) Overview

    614
    • 30.7.1 Use of LCP Magic Numbers

      615
  • 30.8 Configuring PPP Interfaces

    615
    • 30.8.1 Defining the Type and Location of a PPP Interface

      615
    • 30.8.2 Setting up a PPP Service Profile

      615
    • 30.8.3 Applying a Service Profile to an Active PPP Port

      616
    • 30.8.4 Configuring Multilink PPP Bundles

      616
  • 30.9 Monitoring PPP WAN Ports

    617
  • 30.10 PPP Port Configuration

    618
  • 30.11 Cisco HDLC WAN Port Configuration

    619
    • 30.11.1 Setting up a Cisco HDLC Service Profile

      619
    • 30.11.2 Applying a Service Profile to an Active Cisco HDLC WAN Port

      619
    • 30.11.3 Assigning IP Addresses to a Cisco HDLC WAN Port

      620
    • 30.11.4 Monitoring Cisco HDLC Port Configuration

      620
  • 30.12 Cisco HDLC Configuration Example

    620
  • 30.13 WAN Rate Shaping

    621
    • 30.13.1 Configuring WAN Rate Shaping

      621
    • 30.13.2 The WAN Rate Shaping Algorithm

      622
    • 30.13.3 WAN Rate Shaping Example

      624
    • 30.13.4 Using WAN Rate Shaping

      626
  • 30.14 Inverse Multiplexer Overview

    628
    • 30.14.1 Bit Error Rate Testing an IMUX Group

      628
  • 30.15 WAN Configuration Examples

    629
    • 30.15.1 Simple Configuration File

      629
    • 30.15.2 Multi-Router WAN Configuration

      629
  • 30.16 Channelized T1, E1 and T3 Services Overview

    634
    • 30.16.1 T1 and E1 WAN Interface Cards

      634
    • 30.16.2 Channelized T3 Service Interface Module

      635
    • 30.16.3 Configuring Channelized T1, E1 and T3 Interfaces

      636
    • 30.16.4 Bit Error Rate Testing

      639
    • 30.16.5 Configuring a Test using External Test Equipment

      642
  • 30.17 Clear Channel T3 and E3 Services Overview

    643
    • 30.17.1 Clear Channel T3 and E3 Service Interface Module

      643
  • 30.18 Scenarios for Deploying Channelized T1, E1 and T3

    644
    • 30.18.1 Scenario 1: Bridged MSP MTU/MDU Aggregation

      644
    • 30.18.2 Scenario 2: Routed Inter-Office Connections with Only T1 on RS 8x00

      648
    • 30.18.3 Scenario 3: Routed Inter-Office Connections with T1 and T3 on RS 8x00

      654
    • 30.18.4 Scenario 4: Routed Metropolitan Backbone with Only T1 on RS 8x00

      661
    • 30.18.5 Scenario 5: Routed Metropolitan Backbone with T1 and T3 on RS 8x00

      668
    • 30.18.6 Scenario 6: Routed Inter-Office Connections with E1 on RS8x00

      676
    • 30.18.7 Scenario 7: Transatlantic Connection using T1 and E1 on RS 8x00

      680
    • 30.18.8 Scenario 8: Configuring Frame Relay over Channelized T1 Interfaces

      683
  • 30.19 Scenarios for Deploying Clear Channel T3 and E3

    687
    • 30.19.1 Scenario 1: Routed Inter-Office Connections through and ISP

      687
    • 30.19.2 Scenario 2: Routed Metropolitan Backbone

      694
• 31 Service Configuration

  705
  • 31.1 Service Facility Rate Limiting Types

    706
  • 31.2 Creating a Service

    707
    • 31.2.1 Aggregate Rate Limiting Service

      707
    • 31.2.2 Flow-Aggregate Rate Limiting Service

      708
    • 31.2.3 Per-Flow Rate Limiting Service

      709
    • 31.2.4 Burst-Safe Rate Limiting Service

      710
  • 31.3 Applying a Service

    710
    • 31.3.1 Applying Services With ACLs

      710
    • 31.3.2 Applying Services Using the MF-Classifier Command

      711
  • 31.4 Showing a Service

    712
    • 31.4.1 Aggregate, Flow-Aggregate, Per-Flow, and Burst-Safe Show Commands

      712
    • 31.4.2 Show All Command

      713
  • 31.5 Port-level Rate Limiting

    714
  • 31.6 Service Configuration Examples

    714
    • 31.6.1 Applying a Service to Multiple Servers

      714
    • 31.6.2 Applying Burst-Safe Rate Limiting

      715
  • 31.7 Rate Limiting Configuration Examples

    717