Brocade Communications Systems Converged Enhanced Ethernet 8000 Скачать руководство пользователя страница 123 | Manualshive

Страница: 123 / 168

background image

Converged Enhanced Ethernet Administrator’s Guide

101

53-1002163-02

DRAFT: BROCADE CONFIDENTIAL

Chapter

10

Configuring ACLs

In this chapter

•

ACL overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 101

•

Default ACL configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 102

•

ACL configuration guidelines and restrictions . . . . . . . . . . . . . . . . . . . . . . . 102

•

ACL configuration and management . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 102

ACL overview

ACLs filter traffic for the Brocade FCoE hardware and permit or deny

incoming

frames from passing

through interfaces that have the ACLs applied to them. You can apply ACLs on VLANs and on Layer
2 interfaces. Each ACL is a unique collection of permit and deny statements (rules) that apply to
frames. When a frame is received on an interface, the switch compares the fields in the frame
against any ACLs applied to the interface to verify that the frame has the required permissions to
be forwarded. The switch compares the frame, sequentially, against each rule in the ACL and either
forwards the frame or drops the frame.

NOTE

In the Brocade Fabric OS v7.0.0 release, only Layer 2 MAC access control lists (ACLs) are supported.

The switch examines ACLs associated with options configured on a given interface. As frames enter
the switch on an interface, ACLs associated with all inbound options configured on that interface
are examined. With MAC ACLs you can identify and filter traffic based on the MAC address, and
EtherType.

The primary benefits of ACLs are as follows:

•

Provide a measure of security.

•

Save network resources by reducing traffic.

•

Block unwanted traffic or users.

•

Reduce the chance of denial of service (DOS) attacks.

There are two types of MAC ACLs:

•

Standard ACLs—Permit and deny traffic according to the source MAC address in the incoming
frame. Use standard MAC ACLs if you only need to filter traffic based on source addresses.

•

Extended ACLs—Permit and deny traffic according to the source and destination MAC
addresses in the incoming frame, as well as EtherType.

«
...
121
122
123
124
125
...
»

Содержание Converged Enhanced Ethernet 8000

Страница 1: ...53 1002163 02 30 June 2011 DRAFT BROCADE CONFIDENTIAL Converged Enhanced Ethernet Administrator s Guide Supporting Fabric OS v7 0 0 ...

Страница 2: ...mputer programs that accompany it The product described by this document may contain open source software covered by the GNU General Public License or other open source license agreements To find out which open source software is included in Brocade products view the licensing terms applicable to the open source software and obtain a copy of the programming source code please visit http www brocad...

Страница 3: ... IGMP March 2010 Converged Enhanced Ethernet Administrator s Guide 53 1002061 01 Updated to support iSCSI TLV configuration October 2010 Converged Enhanced Ethernet Administrator s Guide 53 1002163 01 Updated for Fabric OS v7 0 0 April 2011 Converged Enhanced Ethernet Administrator s Guide 53 1002163 02 Updated Appendix A Brocade 8000 Replacement June 2011 Title Publication number Summary of chang...

Страница 4: ...iv Converged Enhanced Ethernet Administrator s Guide 53 1002163 02 DRAFT BROCADE CONFIDENTIAL ...

Страница 5: ... conventions xix Notes cautions and warnings xix Key terms xx Notice to the reader xx Additional information xx Brocade resources xxi Other industry resources xxi Getting technical help xxi Document feedback xxii Chapter 1 Introducing FCoE In this chapter 1 FCoE terminology 1 FCoE overview 1 FCoE hardware 2 Layer 2 Ethernet overview 3 Layer 2 forwarding 3 VLAN tagging 4 Loop free network environme...

Страница 6: ... command modes 15 CEE CLI keyboard shortcuts 17 Using the do command as a shortcut 18 Displaying CEE CLI commands and command syntax 18 CEE CLI command completion 19 CEE CLI command output modifiers 19 Chapter 3 Configuration management In this chapter 21 Configuration management tasks 21 CEE configuration guidelines and restrictions 21 Display the running configuration file 22 Saving the running ...

Страница 7: ...oE login group 29 Chapter 5 Initial FCoE and CEE Configuration In this chapter 31 Overview 31 End to End FCoE using FC ISLs 31 FCoE Logical Port Numbering 32 FCoE port to front end TenGigabit port mapping 32 High availability 33 Hot plug 33 Control Processor failover 33 High availability reference 34 Configuring the FCoE interfaces 35 Configuring the FCoE VLAN 35 Assigning an FCoE map onto an inte...

Страница 8: ...erface 51 Disabling a VLAN on a converged interface 52 Configuring protocol based VLAN classifier rules 52 Configuring a VLAN classifier rule 53 Configuring MAC address based VLAN classifier rules 53 Deleting a VLAN classifier rule 53 Creating a VLAN classifier group and adding rules 53 Activating a VLAN classifier group with an interface port 54 Clearing VLAN counter statistics 54 Displaying VLAN...

Страница 9: ...nfiguration 70 Flushing MAC addresses RSTP and MSTP 71 Clearing spanning tree counters 71 Clearing spanning tree detected protocols 71 Displaying STP RSTP and MSTP related information 72 Configuring STP RSTP or MSTP on CEE interface ports 72 Enabling automatic edge detection 72 Configuring the path cost 72 Enabling a port interface as an edge port 73 Enabling the guard root 73 Specifying the MSTP ...

Страница 10: ...dor devices 91 LLDP configuration guidelines and restrictions 91 Default LLDP configuration 91 LLDP configuration and management 92 Enabling LLDP globally 92 Disabling and resetting LLDP globally 92 Configuring LLDP global command options 92 Configuring LLDP interface level command options 98 Clearing LLDP related information 98 Displaying LLDP related information 98 Chapter 10 Configuring ACLs In...

Страница 11: ...er 123 802 1x protocol overview 123 802 1x configuration guidelines and restrictions 123 802 1x authentication configuration tasks 124 Configure authentication between the switch and CNA or NIC 124 Interface specific administrative tasks for 802 1x 124 Configuring 802 1x on specific interface ports 124 Configuring 802 1x timeouts on specific interface ports 125 Configuring 802 1x re authentication...

Страница 12: ...NFIDENTIAL RMON overview 131 RMON configuration and management 131 Default RMON configuration 131 Configuring RMON group statistics collection 131 Configuring RMON settings 132 Configuring RMON events 132 Configuring RMON history collection 133 Appendix A Brocade 8000 Replacement Index ...

Страница 13: ... Deploying FCoE across multiple hops of FC ISLs 32 Figure 4 Ingress VLAN filtering 46 Figure 5 Configuring LAGs for a top of the rack CEE switch Example 1 81 Figure 6 Configuring LAGs for a top of the rack CEE switch Example 2 81 Figure 7 Queue depth 114 Figure 8 Strict priority schedule two queues 117 Figure 9 WRR schedule two queues 117 Figure 10 Strict priority and Weighted Round Robin schedule...

Страница 14: ...xiv Converged Enhanced Ethernet Administrator s Guide 53 1002163 02 DRAFT BROCADE CONFIDENTIAL ...

Страница 15: ...14 Default VLAN configuration 47 Table 15 STP versus RSTP state comparison 59 Table 16 Default STP RSTP and MSTP configuration 63 Table 17 Default MSTP configuration 64 Table 18 Default 10 Gigabit Ethernet CEE interface specific configuration 64 Table 19 Default LACP configuration 83 Table 20 ETS priority grouping of IPC LAN and SAN traffic 90 Table 21 Default LLDP configuration 91 Table 22 Defaul...

Страница 16: ...xvi Converged Enhanced Ethernet Administrator s Guide 53 1002163 02 DRAFT BROCADE CONFIDENTIAL ...

Страница 17: ...ion management describes how to perform the administrative tasks required by the Brocade FCoE hardware Chapter 4 FCoE Configuration Management describes how to configure FCoE using the Fabric OS CLI Chapter 5 Initial FCoE and CEE Configuration describes some basic switch configurations for command SAN and LAN environments Chapter 6 Configuring VLANs describes how to configure VLANs Chapter 7 Confi...

Страница 18: ...ade FCOE10 24 blade Within this manual any appearance of the term Brocade FCoE hardware is referring to Brocade 8000 Brocade FCOE10 24 port blade Although many different software and hardware configurations are tested and supported by Brocade Communications Systems Inc for Fabric OS v7 0 0 documenting all possible configurations and scenarios is beyond the scope of this document To obtain informat...

Страница 19: ...n mixed lettercase for example switchShow In actual examples command lettercase is often all lowercase Otherwise this manual specifically notes those cases in which a command is case sensitive Command syntax conventions Command syntax in this manual follows these conventions Notes cautions and warnings The following notices and statements are used in this manual They are listed below in order of i...

Страница 20: ...or situations Key terms For definitions specific to Brocade and Fibre Channel see the technical glossaries on MyBrocade See Brocade resources on page xxi for instructions on accessing MyBrocade For terminology specific to this document see FCoE terminology on page 1 For definitions of SAN specific terms visit the Storage Networking Industry Association online dictionary at http www snia org educat...

Страница 21: ...s for high performance and mass storage applications for Fibre Channel storage management and other applications http www t11 org For information about the Fibre Channel industry visit the Fibre Channel Industry Association website http www fibrechannel org Getting technical help Contact your switch support supplier for hardware firmware and software support including product repairs and part orde...

Страница 22: ...can get the WWN from the same place as the serial number except for the Brocade DCX For the Brocade DCX access the numbers on the WWN cards by removing the Brocade logo plate at the top of the nonport side of the chassis Document feedback Quality is our first concern at Brocade and we have made every effort to ensure the accuracy and completeness of this document However if you find an error or an...

Страница 23: ...et FCoE enables you to transport FC protocols and frames over Converged Enhanced Ethernet CEE networks CEE is an enhanced Ethernet that enables the convergence of various applications in data centers LAN SAN and HPC onto a single interconnect technology TABLE 2 FCoE terminology Term Description FCoE Fibre Channel over Ethernet CEE Converged Enhanced Ethernet VN_port FCoE equivalent of an FC N_port...

Страница 24: ...parent to the applications The underlying CEE fabric is highly reliable and high performing the same as the FC SAN In FCoE ENodes discover FCFs and initialize the FCoE connection through the FCoE Initialization Protocol FIP The FIP has a separate EtherType from FCoE The FIP includes a discovery phase in which ENodes solicit FCFs and FCFs respond to the solicitations with advertisements of their ow...

Страница 25: ... are forwarded on the CEE ports 802 1Q VLAN support is used to tag incoming frames to specific VLANs and 802 3ac VLAN tagging support is used to accept VLAN tagged frames from external devices The 802 1D Spanning Tree Protocol STP Rapid Spanning Tree Protocol RSTP and Multiple Spanning Tree Protocol MSTP are used as the bridging protocols between Layer 2 switches The Brocade FCoE hardware handles ...

Страница 26: ...t replacing older entries when the lookup table reaches 90 percent of its 32k capacity VLAN tagging The Brocade FCoE hardware handles VLAN tagging as follows If the CEE port is configured to tag incoming frames with a single VLAN ID then incoming frames that are untagged are tagged with the VLAN ID If the CEE port is configured to tag incoming frames with multiple VLAN IDs then incoming frames tha...

Страница 27: ...ID and the Layer 2 CoS by the physical port number on the Brocade FCoE hardware VLAN ID and Layer 2 CoS by LAG virtual port number With this option the port is set to classify incoming frames to a preset VLAN ID and Layer 2 CoS by the Link Aggregation Group LAG virtual port number Layer 2 CoS mutation With this option the port is set to change the Layer 2 CoS setting by enabling the QoS mutation f...

Страница 28: ...limiting example is where several ports carry multicast inbound traffic that is tagged with several priority values Traffic with different priority settings is switched to different outbound ports The multicast rate limit is set so that the total multicast traffic rate on output ports is less than the specified set rate limit Multicast input queuing A typical multicast input queuing example is whe...

Страница 29: ...all frames LAG ACLs apply to all ports in the LAG A standard Ethernet ACL configured on a VLAN is used to permit or deny frames based on the source MAC address The default is to permit all frames VLAN ACLs apply to the Switch Vertical Interface SVI for the VLAN An extended Ethernet ACL configured on a VLAN is used to permit or deny frames based on the source MAC address destination MAC address and...

Страница 30: ... This software version supports the October 8 2008 REV 1 03 of the ANSI FC Backbone Specification with priority tagged FIP VLAN discovery protocol and FIP version 0 This release supports FIP Keep Alive The Brocade FCoE hardware FIP discovery phase operates as follows The Brocade FCoE hardware uses the FCoE Initialization Protocol FIP Enodes discover FCFs and initialize the FCoE connection through ...

Страница 31: ...the Brocade FCoE hardware The FIP FDISC request is rejected if the ENode MAC address or WWN does not match The ENode login is added to the VN_port table FPMA is supported Maximum logins per VF_port The Brocade FCoE hardware supports a maximum of 255 logins per VF_port The VF_port rejects further logins after the maximum is reached Maximum logins per switch The Brocade FCoE hardware accepts a maxim...

Страница 32: ...ade FCoE hardware using the FCoE encapsulated FC ELS frame Brocade FCoE hardware in the fabric updates the MAC address to WWN PID mappings upon logout The Brocade FCoE hardware also handles scenarios of implicit logout where the ENode has left the fabric without explicitly logging out FCoE LOGO The Brocade FCoE hardware accepts the FCoE LOGO from the ENode The FCoE LOGO ACC is sent to the ENode if...

Страница 33: ...ess FIP login parameters for each login from the same ENode and WWN PID mappings on the FC side You can display the VN_port table with the fcoe loginshow port command FC zoning The Brocade FCoE hardware FC zoning operates as follows The virtual devices created by the Brocade FCoE hardware on behalf of the ENodes are subject to FC zoning An ENode is only allowed to access devices in the same zones ...

Страница 34: ...ic distribution to update The priority group and bandwidth are updated Changing the priority table for a port causes the FCoE traffic distribution to be updated The COS to priority group mapping is updated Changing the class map for a port causes the FCoE traffic distribution to be updated Changing the policy map for a port causes FCoE traffic distribution to be updated Changing the CEE map for a ...

Страница 35: ...s CEE Command Line Interface The Brocade CEE CLI is designed to support the management of CEE and Layer 2 Ethernet switching functionality The CEE CLI uses an industry standard hierarchical shell familiar to Ethernet IP networking administrators All conventional port related Fabric OS CLI commands are only applicable to Fibre Channel These commands have no knowledge of the Ethernet ports The CEE f...

Страница 36: ...iguration changes with the write memory command Perform this task from privileged EXEC mode Enter the write memory command to save the running config file to the startup config file switch write memory Overwrite the startup config file y n y Building configuration CEE CLI RBAC permissions Role Based Action Control RBAC defines the capabilities that a user account has based on the role the account ...

Страница 37: ...ivileged EXEC mode Accessing the CEE CLI from the Fabric OS shell To enter the CEE CLI from the Fabric OS shell enter the following command switch admin cmsh switch To return to the Fabric OS shell enter the following command switch exit switch admin CEE CLI command modes Figure 2 displays the CEE CLI command mode hierarchy FIGURE 2 CEE CLI command mode hierarchy Table 4 lists the CEE CLI command ...

Страница 38: ... enable command Display and change system parameters Note that this is the administrative mode and also includes EXEC mode commands Global configuration switch config From the EXEC mode enter the configure terminal EXEC command Configure features that affect the entire switch Interface configuration Port channel switch conf if po 63 10 Gigabit Ethernet CEE port switch conf if te 0 1 VLAN switch co...

Страница 39: ...n mode configure a terminal connected through the console port by entering the line console command Configure a terminal connected through a Telnet session by entering the line vty command Configure a terminal connected through the console port or a terminal connected through a Telnet session After you apply the access list to an interface a Virtual Teletype VTY or through a command using the acce...

Страница 40: ...3 2009 rmon_configuration rw r 1276 Wed Feb 4 10 48 59 2009 starup config Displaying CEE CLI commands and command syntax Enter a question mark in any command mode to display the list of commands available in that mode switch Exec commands enable Turn on privileged mode command exit End current mode and down to previous mode help Description of the interactive help system logout Exit from the EXEC ...

Страница 41: ...f commands or keywords begin typing the command or keyword and then press Tab For example at the CLI command prompt type te and press Tab switch te The CLI displays switch terminal If there is more than one command or keyword associated with the characters typed the CEE CLI displays all choices For example at the CLI command prompt type show l and press Tab switch show l The CLI displays switch sh...

Страница 42: ...DE CONFIDENTIAL last Displays only the last few lines of the command output tee Redirects the command output to the specified file Note that this modifier also displays the command output FLASH Redirects the output to flash memory TABLE 6 CEE CLI command output modifiers Continued Output modifier Description ...

Страница 43: ...ypical configuration management tasks are as follows Saving the startup config and running config files to Flash Uploading the startup config and running config files to a remote location Uploading any configuration file saved and stored in Flash to a remote location Downloading a configuration file from a remote location to the switch to serve as the startup config file or the running config file...

Страница 44: ...To load the default configuration perform the following command from privileged EXEC mode switch copy startup config running config Erasing the startup configuration file NOTE This task does not affect the running configuration file To erase the startup configuration perform the following command from privileged EXEC mode switch write erase Archiving the running configuration file This tasks allow...

Страница 45: ...anced Ethernet Command Reference contains complete information on all available CLI commands NOTE Use of the flash prefix is optional The tasks listed in Table 7 are performed from privileged EXEC mode Debugging and logging commands Table 8 describes the tasks related to debugging and logging commands The Converged Enhanced Ethernet Command Reference contains complete information on all available ...

Страница 46: ...XEC mode TABLE 8 Debugging and logging commands Task Command Display debugging information for CEE components switch show debug Display logging information for CEE components switch show logging Display the collection of information needed for technical support switch show tech support NOTE The supportsave command in Fabric OS includes the debugging data provided by the above commands ...

Страница 47: ... is maintained in a file separate from the Fabric OS configuration database Fabric OS configuration management procedures remain unchanged FCoE to FCoE traffic across two FCOE10 24 blades can only reach 68 line rate using a port based routing policy Using an exchange based routing policy can avoid the performance drop Only the WWN zoning of FCoE VF ports is supported Port based zoning of the FCoE ...

Страница 48: ...he following tasks to toggle the availability of FCoE login configuration management Task Command Clear the logins that occurred through a front end port or from a device specified by the ENode s VN_port WWN Syntax is as follows teport slot port Specifies the slot or port number device wwn Specifies the device WWN switch admin fcoe resetlogin teport slot port device wwn Task Command Display the em...

Страница 49: ...coelogincfg transabort Task Command Perform a cleanup of all conflicting login groups and VN_port mappings from the effective configuration This purges not only the conflicting login groups but also the non existing switches switch admin fcoelogincfg purge conflicting nonexisting Perform a cleanup of all conflicting login groups and conflicting VN_port mappings from the effective configuration swi...

Страница 50: ...ve configuration fabric wide switch admin fcoelogincfg save Task Command Syntax is as follows create Create a login group lgname Specify the name of the login group for this switch The maximum length is a 64 byte string switch swwn Specify the WWN of the switch for which the login group is being created self Specify the WWN of the current switch allowall Allow all VN_port devices to log in to the ...

Страница 51: ...ex as xx xx xx xx xx xx xx xx Only specified members are allowed to log in to the switch switch admin fcoelogingroup add lgname member member Remove VN_port devices from the FCoE login group Syntax is as follows lgname Specify the name of the login group from which VN_port devices are to be removed member Identify the WWN of the VN_port The WWN must be specified in hex as xx xx xx xx xx xx xx xx O...

Страница 52: ...30 Converged Enhanced Ethernet Administrator s Guide 53 1002163 02 Creating an FCoE login group 4 DRAFT BROCADE CONFIDENTIAL ...

Страница 53: ... Overview This chapter describes how to configure Fibre Channel over Ethernet FCoE and Converged Enhanced Ethernet CEE properties on the switch using CLI commands For detailed information about all the CEE CLI commands refer to the Converged Enhanced Ethernet Command Reference Supporting Fabric OS v6 4 0 53 1001762 01 All of the CLI commands are entered using the Telnet or console interface on the...

Страница 54: ... through 11 12 through 15 16 through 19 and 20 through 23 For example the FCoE ports on a 24 port blade in the 4th slot is 4 0 through 4 23 NOTE This grouping is relevant only for bridging bandwidth considerations A group of four ports that is arranged in a bank has 10Gb of bridging bandwidth FCoE port to front end TenGigabit port mapping Each of the FCoE logical ports in VF port mode is mapped to...

Страница 55: ... increases the congestion but the switch continues to operate in an over subscribed mode When both the core blades are removed then all the blades in the chassis are disabled Control Processor failover When the active CP in a DCX or DCX 4S fails over the FCoE storage traffic going through the FCOE10 24 blades are not disrupted Critical protocol components are brought online quickly to ensure that ...

Страница 56: ...erved during failover MAC learning process MAC learning entries that are in the ASIC queue but yet to be processed by software is flushed MAC ageing timer The timer is restarted after the failover Station moves during failover Station moves are not detected Interface state Preserved as long as the interfaces are either in a shut or no shut state Any interface which is not fully initialized is rese...

Страница 57: ... the FCoE map is FCoE VLAN 1002 and the CEE map associated is the default CEE map also called default Configuring the FCoE VLAN The contents of the default running configuration file are displayed with the show running config command switch show running config no protocol spanning tree cee map default priority group table 1 weight 40 pfc priority group table 2 weight 60 priority table 2 2 2 1 2 2 ...

Страница 58: ... the new VLAN ID can be created and the old VLAN ID can be deleted The FCoE VLAN cannot be changed if the fcoeport profile is already applied to an interface switch conf fcoe map fcoe vlan 5 3 Use the do show vlan fcoe command to confirm the VLAN ID change switch conf fcoe map do show vlan fcoe VLAN Name State Ports F FCoE u Untagged t Tagged 5 F VLAN0005 ACTIVE 4 Use the do show fcoe map command ...

Страница 59: ... Discovery Protocol LLDP The primary goal of DCBX is to allow the discovery of CEE capable hosts and switches and allow CEE specific parameters such as those for Enhanced Transmission Selection ETS and Priority Flow Control PFC to be sent before the link is shared DCBX parameters use a type length value TLV format By default DCBX is turned on and the two TLVs are enabled The available TLVS are dcb...

Страница 60: ...igure the switch for RSTP switch config protocol spanning tree rstp 2 Set the bridge priority to the highest value so it does not become the root switch in an existing LAN switch conf rstp bridge priority 61440 3 Enter the copy command to save the running config file to the startup config file switch conf rstp do copy running config startup config Configuring VLAN membership IEEE 802 1q Virtual LA...

Страница 61: ...vice QoS covers frame classification priority and traffic class queue mapping congestion control and scheduling Under the CEE Provisioning model all of these features are configured utilizing two configuration tables the Priority Group Table and the Priority Table The CEE Priority Group Table defines each Priority Group ID PGID and its scheduling policy Strict Priority versus Deficit Weighted Roun...

Страница 62: ...rol because the set of priorities mapped to the PGID is not known The CEE Priority Table defines each CoS mapping to a PGID and completes the PFC configuration There are eight rows in the CEE Priority Table Table 12 details the default CEE Priority Table configuration Defining a Priority Group Table map To define a priority group table map perform the following steps from privileged EXEC mode 1 En...

Страница 63: ...rtup config file switch config do copy running config startup config Applying a CEE provisioning map to an interface To apply a CEE provisioning map perform the following steps from privileged EXEC mode 1 Enter global configuration mode switch configure terminal 2 Specify the 10 Gigabit Ethernet interface In this example 0 2 is used switch config interface tengigabitethernet 0 2 3 Apply the CEE ma...

Страница 64: ...c OS command shell 1 CEE audit logging is disabled by default It must be enabled explicitly by using the auditcfg command from the Fabric OS shell See the Fabric OS Command Reference Manual Supporting Fabric OS v6 4 0 for details switch auditcfg enable 2 The CEE audit logs belong to the CONFIGURATION class of audit logs The filter for this class must be enabled by using the auditcfg command from t...

Страница 65: ... audit logs using the show accounting logs command switch show accounting logs 2009 06 24 02 15 54 UTC root root NONE console CLI EL34 config rmon event 12 2009 06 24 02 21 13 UTC root root NONE console CLI EL34 config rmon event 7 2009 06 24 02 21 29 UTC root root NONE console CLI EL34 conf if te 0 0 rmon collection stats 100 ...

Страница 66: ...44 Converged Enhanced Ethernet Administrator s Guide 53 1002163 02 CEE audit logs 5 DRAFT BROCADE CONFIDENTIAL ...

Страница 67: ...cally located in the same LAN segment VLANs are typically associated with IP subnetworks and all the end stations in a particular IP subnet belong to the same VLAN Traffic between VLANs must be routed VLAN membership is configurable on a per interface basis The VLAN used for carrying FCoE traffic needs to be explicitly designated as the FCoE VLAN FCoE VLANs are configured through the CEE CLI see C...

Страница 68: ...c for an incoming frame FIGURE 4 Ingress VLAN filtering There are important facts you should know about Ingress VLAN filtering Ingress VLAN filtering is based on port VLAN membership Port VLAN membership is configured through the CEE CLI Dynamic VLAN registration is not supported The Brocade FCoE hardware does VLAN filtering at both the ingress and egress ports The VLAN filtering behavior on logic...

Страница 69: ...Static entries are not aged out A static FDB entry does not overwrite a new or pre existing dynamic entry Static entries do not disable the learning of dynamic entries NOTE For more information on frame handling for Brocade FCoE hardware see Layer 2 Ethernet overview on page 3 VLAN configuration guidelines and restrictions Follow these VLAN configuration guidelines and restrictions when configurin...

Страница 70: ...ter the shutdown command to toggle the availability of the interface To enable the CEE interface switch conf if te 0 1 no shutdown To disable the CEE interface switch conf if te 0 1 shutdown Configuring the MTU on an interface port To configure the maximum transmission unit MTU on an interface port perform the following steps from privileged EXEC mode 1 Enter the configure terminal command to acce...

Страница 71: ...e protocol spanning tree command to select the type of STP for the VLAN switch config protocol spanning tree mstp 3 Enter the interface command to select the VLAN interface number switch config interface vlan 100 4 Enter the no spanning tree shutdown command to enable spanning tree on VLAN 100 STP is active by default but enter the command to ensure activation switch conf if vl 100 no spanning tre...

Страница 72: ...ts only untagged and priority tagged frames To configure the interface as an access interface perform the following steps from privileged EXEC mode 1 Enter the configure terminal command to access global configuration mode 2 Enter the interface command to specify the CEE interface type and slot port number switch config interface tengigabitethernet 0 1 3 Enter the no shutdown command to enable the...

Страница 73: ...ify the CEE interface type and slot port number switch config interface tengigabitethernet 0 10 3 Enter the no shutdown command to enable the CEE interface 4 Enter the switchport command to place the CEE interface into trunk mode switch conf if te 0 10 switchport mode trunk none 5 Enter the switchport trunk allowed vlan remove vlan_id command to disable a vlan on a trunk interface switch conf if t...

Страница 74: ...hport mode converged none 5 Enter the switchport trunk allowed vlan remove vlan_id command to disable a VLAN on a converged interface switch conf if te 0 10 switchport trunk allowed vlan remove 300 Configuring protocol based VLAN classifier rules You can configure VLAN classifier rules to define specific rules for classifying frames to selected VLANs based on protocol and MAC addresses Sets of rul...

Страница 75: ...s based VLAN classifier rule perform the following steps from privileged EXEC mode 1 Enter the configure terminal command to access global configuration mode 2 Enter the vlan classifier rule command to configure a MAC address based VLAN classifier rule switch config vlan classifier rule 5 mac 0008 744c 7fid Deleting a VLAN classifier rule VLAN classifier groups 1 through 16 can contain any number ...

Страница 76: ...nter the clear command to clear the VLAN counter statistics for the specified VLAN The vlan_ID value can be 1 through 3583 For example to clear the counter for VLAN 20 switch clear counter interface vlan 20 Displaying VLAN information To display VLAN information perform the following steps from privileged EXEC mode 1 Enter the show interface command to display the configuration and status of the s...

Страница 77: ...e aging time for MAC addresses perform the following steps from privileged EXEC mode 1 Enter the configure terminal command to access global configuration mode 2 Enter the appropriate command based on whether you want to specify an aging time or disable the aging time for MAC addresses switch config mac address table aging time 600 Adding static addresses to the MAC address table To add a static a...

Страница 78: ...56 Converged Enhanced Ethernet Administrator s Guide 53 1002163 02 Configuring the MAC address table 6 DRAFT BROCADE CONFIDENTIAL ...

Страница 79: ... a change to the network topology For each LAN the switches that attach to the LAN choose a designated switch that is the closest switch to the root switch This designated switch is responsible for forwarding all traffic to and from the LAN The port on the designated switch that connects to the LAN is called the designated port The switches decide which of their ports will be part of the spanning ...

Страница 80: ...ing tree stp 2 Designate the root switch using the bridge priority command For details see Specifying the bridge priority on page 65 The range is 0 through 61440 and the priority values can be set only in increments of 4096 switch conf stp bridge priority 28672 3 Enable PortFast on switch ports using the spanning tree portfast command For details see Enabling port fast STP on page 75 Note that thi...

Страница 81: ...apid Spanning Tree Protocol RSTP standard is an evolution of the 802 1D STP standard It provides rapid reconvergence following the failure of a switch a switch port or a LAN It provides rapid reconvergence of edge ports new root ports and ports connected through point to point links The RSTP interface states for every Layer 2 interface running RSTP are as follows Learning The interface prepares to...

Страница 82: ... management on page 64 Configuring RSTP To configure RSTP perform the following steps from global configuration mode 1 Enable RSTP using the global protocol spanning tree command For details see Enabling STP RSTP or MSTP on page 64 switch config protocol spanning tree rstp 2 Designate the root switch using the bridge priority command For details see Specifying the bridge priority on page 65 The ra...

Страница 83: ... For detailed information refer to Enabling the guard root on page 73 Note that this step is optional Switch ports that recieve superior BPDUs are automatically placed in blocking mode This does not apply to ports connected to workstations or PCs these ports remain in the forwarding state 13 Enter the copy command to save the running config file to the startup config file switch conf if te 0 1 do ...

Страница 84: ... the switches across the regions support RSTP However if any of the switches operate using 802 1D STP the CIST instance reverts to 802 1D Each region is viewed logically as a single STP RSTP bridge to other regions Configuring MSTP To configure MSTP perform the following steps from global configuration mode 1 Enable MSTP using the global protocol spanning tree command For more details see Enabling...

Страница 85: ...all VLAN to instance mapping assignments must match otherwise all traffic flows on a single link When you enable MSTP by using the global protocol spanning tree mstp command RSTP is automatically enabled For two or more switches to be in the same MSTP region they must have the same VLAN to instance map the same configuration revision number and the same name Spanning Tree topologies must not be en...

Страница 86: ...orm of STP before turning on another form By default STP RSTP and MSTP are not enabled To enable xSTP perform the following steps from privileged EXEC mode 1 Enter the configure terminal command to access global configuration mode 2 Enter the protocol command to enable STP RSTP or MSTP TABLE 17 Default MSTP configuration Parameter Default setting Cisco interoperability Disabled Switch priority whe...

Страница 87: ...cify the priority of the switch After you decide on the root switch set the appropriate values to designate the switch as the root switch If a switch has a bridge priority that is lower than all the other switches the other switches automatically select the switch as the root switch The root switch should be centrally located and not in a disruptive location Backbone switches typically serve as th...

Страница 88: ...ange is 4 through 30 seconds The default is 15 seconds The following relationship should be kept 2 forward_delay 1 max_age 2 hello_time 1 To specify the bridge forward delay perform the following steps from privileged EXEC mode 1 Enter the configure terminal command to access global configuration mode 2 Enter the protocol command to enable STP RSTP or MSTP switch config protocol spanning tree stp ...

Страница 89: ...igure terminal command to access global configuration mode 2 Enter the protocol command to enable STP RSTP or MSTP switch config protocol spanning tree stp 3 Enable the error disable timeout timer switch conf stp error disable timeout enable Specifying the error disable timeout interval In any mode STP RSTP or MSTP use this command to specify the time in seconds it takes for an interface to time o...

Страница 90: ...fault is 2 seconds When configuring the hello time the max age setting must be greater than the hello time setting The following relationship should be kept 2 forward_delay 1 max_age 2 hello_time 1 To specify the bridge hello time perform the following steps from privileged EXEC mode 1 Enter the configure terminal command to access global configuration mode 2 Enter the protocol command to enable S...

Страница 91: ...ble the ability of Brocade FCoE hardware to interoperate with certain legacy Cisco switches switch conf mstp cisco interoperability enable Disabling Cisco interoperability MSTP To disable Cisco interopreability perform the following steps from global configuration mode 1 Enter the protocol command to enable MSTP switch config protocol spanning tree mstp 2 Disable the ability of Brocade FCoE hardwa...

Страница 92: ...onf mstp max hops hop_count Specifying a name for an MSTP region In MSTP mode use this command to assign a name to an MSTP region The region name has a maximum length of 32 characters and is case sensitive To assign a name to an MSTP region perform the following steps from privileged EXEC mode 1 Enter the configure terminal command to access global configuration mode 2 Enter the protocol command t...

Страница 93: ...method causes less flushing To flush the MAC addresses from the VLAN FDB perform the following steps 1 Enter the configure terminal command to access global configuration mode 2 Enter the appropriate form of the spanning tree command based on how you want to flush the address To flush the MAC address using the standard method switch config spanning tree tc flush standard To flush the MAC addresses...

Страница 94: ...ls the commands for enabling and configuring STP RSTP or MSTP on individual 10 Gigabit Ethernet CEE interface ports on Brocade FCoE hardware Enabling automatic edge detection From the CEE interface use this command to automatically identify the edge port The port can become an edge port if no BPDU is received By default automatic edge detection is disabled To enable automatic edge detection on the...

Страница 95: ...an edge port Because ports that are directly connected to end stations cannot create bridging loops in the network edge ports transition directly to the forwarding state and skip the listening and learning states This command is only for RSTP and MSTP Use the spanning tree portfast command for STP see Enabling port fast STP on page 75 To enable the CEE interface as an edge port perform the followi...

Страница 96: ...me interval between BPDUs sent by the root switch Changing the hello time affects all spanning tree instances The max age setting must be greater than the hello time setting see Specifying the bridge maximum aging time on page 66 The range is 1 through 10 seconds The default is 2 seconds To specify the MSTP hello time on a CEE interface perform the following steps from privileged EXEC mode 1 Enter...

Страница 97: ...E interface switch conf if te 0 1 spanning tree link type shared Enabling port fast STP From the CEE interface use this command to enable port fast on an interface to allow the interface to quickly transition to the forwarding state Port fast immediately puts the interface into the forwarding state without having to wait for the standard forward time NOTE If you enable the portfast bpdu guard opti...

Страница 98: ...CEE interface type and slot port number switch config interface tengigabitethernet 0 1 3 Enter the no shutdown command to enable the CEE interface 4 Enter the spanning tree command to restrict the CEE interface from becoming a root port switch conf if te 0 1 spanning tree restricted role Restricting the topology change notification From the CEE interface use this command to restrict the topology c...

Страница 99: ...e spanning tree command to enable spanning tree on the CEE interface switch conf if te 0 1 no spanning tree shutdown Disabling spanning tree By default spanning tree is enabled on all switch ports when spanning tree is enabled globally To enable spanning tree on the CEE interface perform the following steps from privileged EXEC mode 1 Enter the configure terminal command to access global configura...

Страница 100: ...78 Converged Enhanced Ethernet Administrator s Guide 53 1002163 02 Configuring STP RSTP or MSTP on CEE interface ports 7 DRAFT BROCADE CONFIDENTIAL ...

Страница 101: ...me speed and all links must go to the same neighboring device Link aggregation can be done by manually configuring the LAG or by dynamically configuring the LAG using the IEEE 802 3ad Link Aggregation Control Protocol LACP NOTE The LAG or LAG interface is also referred to as a port channel The benefits of link aggregation are summarized as follows Increased bandwidth The logical bandwidth can be d...

Страница 102: ...ndividual member links An interface index for each link to identify the link to neighboring devices An administrative key for each link Only links having the same administrative key value can be aggregated into a LAG On each link configured to use LACP LACP automatically configures an administrative key value equal to the port channel identification number Figure 5 and Figure 6 show typical IP SAN...

Страница 103: ...e 1 FIGURE 6 Configuring LAGs for a top of the rack CEE switch Example 2 Data Center Core Brocade 8000 Switch Brocade 8000 Switch Data Center Network Core Layer Data Center Network Aggregation Layer Data Center Network Access Layer Brocade 8000s Data Center Database Server Layer Servers Servers Router Router Data Center Core Brocade 8000 Switch Brocade 8000 Switch Data Center Network Core Layer Da...

Страница 104: ... Brocade trunk is present then it can also use the full bandwidth Dynamic link aggregation Dynamic link aggregation uses LACP to negotiate which links can be added and removed from a LAG Typically two partner systems sharing multiple physical Ethernet links can aggregate a number of those physical links using LACP LACP creates a LAG on both partner systems and identifies the LAG by the LAG ID All ...

Страница 105: ...e QoS commands for a LAG need to be specified on each LAG member link instead of on the logical LAG interface port group Additionally the QoS commands specified on each LAG member link need to be the same on each link Brocade proprietary LAGs only All LAG member links need to be part of the same port group Switchport interfaces Interfaces configured as switchport interfaces cannot be aggregated in...

Страница 106: ...l 4 3 Enter the switchport command to set the interface into Layer 2 mode switch conf if po 4 switchport 4 Enter the switchport mode command to set the mode switch conf if po 4 switchport mode access 5 Enter the no shutdown command to enable the interface switch config if no shutdown Configuring the LACP system priority You configure an LACP system priority on each switch running LACP LACP uses th...

Страница 107: ...EC mode Enter the clear command to clear the LACP counter statistics for all LAG groups switch clear lacp counters Displaying LACP information Use the show command to display LACP statistics and configuration information See the Converged Enhanced Ethernet Command Reference for information LACP troubleshooting tips To troubleshoot problems with your LACP configuration use the following troubleshoo...

Страница 108: ...nk is unique This can be verified by entering the show lacp sys id command on both switches Make sure that LACPDUs are being received and transmitted on both ends of the link and there are no error PDUs This can be verified by entering the show lacp port channel num counters command and looking at the rx and tx statistics The statistics should be incrementing and should not be at zero or a fixed v...

Страница 109: ...inistrator to statically monitor and configure each device in the network Using LLDP network devices such as routers and switches advertise information about themselves to other network devices and store the information they discover Details such as device configuration device capabilities and device identification are advertised LLDP defines the following A common set of advertisement messages A ...

Страница 110: ...LLDP standard currently supports three categories of TLVs Brocade s LLDP implementation adds a proprietary Brocade extension TLV set The four TLV sets are described as follows Basic management TLV set This set provides information to map the Layer 2 topology and includes the following TLVs Chassis ID TLV Provides the ID for the switch or router where the port resides This is a mandatory TLV Option...

Страница 111: ...shes to advertise the spanning tree protocol includes at least eight octets 802 3 length two octets LLC addresses two octets 802 3 control one octet protocol ID two octets and the protocol version one octet IEEE 802 3 organizational TLV set This is an optional TLV set This set includes the following TLVs MAC PHY configuration status TLV Indicates duplex and bit rate capabilities and the current du...

Страница 112: ...ity Flow Control PFC Enhanced Transmission Selection ETS In a converged network different traffic types affect the network bandwidth differently The purpose of ETS is to allocate bandwidth based on the different priority settings of the converged traffic For example Inter process communications IPC traffic can use as much bandwidth as needed and there is no bandwidth check LAN and SAN traffic shar...

Страница 113: ... automatically switches between the CEE version and the pre CEE version CEE version Forces the use of the CEE version for the link auto sense is off Pre CEE version Forces the use of the pre CEE version for the link auto sense is off LLDP configuration guidelines and restrictions Follow these LLDP configuration guidelines and restrictions when configuring LLDP Brocade s implementation of LLDP supp...

Страница 114: ...conf lldp no disable Disabling and resetting LLDP globally The protocol lldp command returns all configuration settings made using the protocol lldp commands to their default settings LLDP is globally enabled by default To disable and reset LLDP globally perform the following steps from global configuration mode 1 Enter the protocol lldp command to enter LLDP configuration mode switch config proto...

Страница 115: ...tch conf lldp system name Brocade_Alpha Brocade_Alpha conf lldp Specifying an LLDP system description for the Brocade FCoE hardware NOTE Brocade recommends you use the operating system version for the description or use the description from the chassis entity MIB To specify an LLDP system description for the Brocade FCoE hardware perform the following steps from privileged EXEC mode The system des...

Страница 116: ...cy of LLDP frames perform the following steps from privileged EXEC mode The default is 30 seconds 1 Enter the configure terminal command to access global configuration mode 2 Enter LLDP configuration mode switch config protocol lldp 3 Configure the transmit frequency of LLDP frames switch conf lldp hello 45 Configuring the hold time for receiving devices To configure the hold time for receiving de...

Страница 117: ...lldp advertise dcbx fcoe app tlv switch conf lldp advertise dcbx fcoe logical link tlv switch conf lldp advertise dcbx tlv switch conf lldp advertise dot1 tlv switch conf lldp advertise dot3 tlv Configuring FCoE priority bits The FCoE priority bit setting is a bitmap setting where each bit position stands for a priority When you set a bit for a particular priority that priority setting is applied ...

Страница 118: ...nter LLDP configuration mode switch config protocol lldp 3 Configure the iSCSI priority bits switch conf lldp iscsi priority bits list 2 3 4 Advertise the TLV switch conf lldp advertise dcbx isci app tlv Configuring LLDP profiles You can configure up to 64 profiles on a switch but the best practice is to limit this to one profile for each port Using the no profile name command deletes the entire p...

Страница 119: ... command deletes the entire profile To configure iSCSI profiles perform the following steps from privileged EXEC mode 1 Use the cee map command to create the cee profile if it has not already been created switch config cee map switch conf ceemap priority group table 1 weight 50 switch conf ceemap priority group table 2 weight 30 pfc switch conf ceemap priority group table 3 weight 20 pfc switch co...

Страница 120: ...onfigure the DCBX version for an interface for CEE For detailed information on these version command keywords see DCBX interaction with other vendor devices on page 91 The default option is to automatically detect the DCBX version switch conf if te 0 10 lldp dcbx version cee 5 Enter the copy command to save the running config file to the startup config file switch conf if te 0 10 do copy running c...

Страница 121: ...ail information switch show lldp neighbors detail Display LLDP interface related information switch show lldp interface tengigabitethernet 0 1 Display LLDP neighbor related information for a particular interface switch show lldp neighbors interface tengigabitethernet 0 1 detail Display all LLDP statistics switch show lldp statistics and show lldp statistics interface tengigabitethernet 0 1 ...

Страница 122: ...100 Converged Enhanced Ethernet Administrator s Guide 53 1002163 02 LLDP configuration and management 9 DRAFT BROCADE CONFIDENTIAL ...

Страница 123: ... against each rule in the ACL and either forwards the frame or drops the frame NOTE In the Brocade Fabric OS v7 0 0 release only Layer 2 MAC access control lists ACLs are supported The switch examines ACLs associated with options configured on a given interface As frames enter the switch on an interface ACLs associated with all inbound options configured on that interface are examined With MAC ACL...

Страница 124: ...py running config startup config command or the write memory command to save your configuration changes to Flash so that they are not lost if there is a system reload or power outage Creating a standard MAC ACL and adding rules NOTE You can use the resequence command to change all the sequence numbers assigned to the rules in a MAC ACL For detailed information see Reordering the sequence numbers i...

Страница 125: ...d EXEC mode 1 Enter the configure terminal command to access global configuration mode 2 Create an extended MAC ACL and enter ACL configuration mode switch config mac access list extended test_02 3 Create a rule in the MAC ACL to permit traffic with the source MAC address and the destination MAC address switch conf macl ext permit 0022 3333 4444 0022 3333 5555 4 Use the seq command to insert the r...

Страница 126: ...l configuration mode 2 Enter the mac command to specify and delete the ACL that you want to remove In this example the extended MAC ACL name is test_02 switch config no mac access list extended test_02 Reordering the sequence numbers in a MAC ACL You can reorder the sequence numbers assigned to rules in a MAC ACL Reordering the sequence numbers is useful when you need to insert rules into an ACL a...

Страница 127: ...he interface as a Layer 2 switch port 4 Enter the mac access group command to specify the MAC ACL that is to be applied to the Layer 2 CEE interface in the ingress direction switch conf if te 0 1 mac access group test_02 in Applying a MAC ACL to a VLAN interface Ensure that the ACL that you want to apply exists and is configured to filter traffic in the manner that you need for this VLAN interface...

Страница 128: ...106 Converged Enhanced Ethernet Administrator s Guide 53 1002163 02 ACL configuration and management 10 DRAFT BROCADE CONFIDENTIAL ...

Страница 129: ...on egress port and priority level of the CoS QoS can also be set on interfaces where the end station knows how to mark traffic with QoS and it lies with the same trusted interfaces An untrusted interface is when the end station is untrusted and is at the administrative boundaries The QoS features are Queueing Queueing provides temporary storage for frames while waiting for transmission Queues are ...

Страница 130: ...e user priority mapping derived for each frame as described later in the queueing section Queueing Queue selection begins by mapping an incoming frame to a configured user priority then each user priority mapping is assigned to one of the switch s eight unicast traffic class queues or one of the four multicast traffic class queues NOTE You need to enter the copy running config startup config comma...

Страница 131: ...to change mutate the COS value Configuring the QoS trust mode The QoS trust mode controls user priority mapping of incoming traffic The Class of Service CoS mode sets the user priority based on the incoming CoS value If the incoming packet is not priority tagged then fallback is to the Interface Default CoS value NOTE When a CEE map is applied on an interface the qos trust command is not allowed T...

Страница 132: ...tch config interface tengigabitethernet 0 2 3 Set the interface mode to 3 switch conf if te 0 2 qos cos 3 4 Enter the copy command to save the running config file to the startup config file switch conf if te 0 2 do copy running config startup config Creating a CoS to CoS mutation QoS map To create a CoS to CoS mutation perform the following steps from privileged EXEC mode 1 Enter global configurat...

Страница 133: ...ng config startup config Traffic class mapping Fabric OS v7 0 0 supports eight unicast traffic classes for isolation and to control servicing for different priorities of application data Traffic classes are numbered from 0 through 7 with higher values designating higher priority The traffic class mapping stage provides some flexibility in queue selection The mapping may be many to one such as mapp...

Страница 134: ...raffic Class To map a CoS to Traffic Class perform the following steps from privileged EXEC mode 1 Enter global configuration mode switch configure terminal 2 Create the CoS Traffic Class mapping by specifying a name and the mapping switch config qos map cos traffic class test 1 0 2 3 4 5 6 7 3 Enter the copy command to save the running config file to the startup config file switch config do copy ...

Страница 135: ...buildups generally indicate congestion in the network and can affect application performance through increased queueing delays and frame loss Congestion control covers features that define how the system responds when congestion occurs or active measures taken to prevent the network from entering a congested state Tail drop Tail drop queueing is the most basic form of congestion control Frames are...

Страница 136: ...onally if the sum of the thresholds for a port is set below 100 percent of the buffer memory then you can also ensure that a single CoS does not monopolize the entire shared memory pool allocated to the port Changing the Tail Drop threshold To change the Tail Drop threshold perform the following steps from privileged EXEC mode 1 Enter global configuration mode switch configure terminal 2 Change th...

Страница 137: ...et Pause perform the following steps from privileged EXEC mode 1 Enter global configuration mode switch configure terminal 2 Specify the 10 gigabit Ethernet interface switch config interface tengigabitethernet 0 2 3 Enable Ethernet Pause on the interface for both TX and RX traffic switch conf if te 0 2 qos flowcontrol tx on rx on 4 Enter the copy command to save the running config file to the star...

Страница 138: ...qually to ingress receive queueing first level expansion and egress receive queueing second level expansion since the same physical receive queues are utilized You can set policies to limit the maximum multicast frame rate differently for each traffic class level and cap the total multicast egress rate out of the system Multicast rate limiting includes the following features All configuration para...

Страница 139: ... order for an SP scheduler servicing two SP queues The higher numbered queue SP2 has a higher priority FIGURE 8 Strict priority schedule two queues Deficit weighted round robin scheduling Weighted Round Robin WRR scheduling is used to facilitate controlled sharing of the network bandwidth WRR assigns a weight to each queue that value is then used to determine the amount of bandwidth allocated to t...

Страница 140: ... SP4 then traffic class 7 will use SP4 traffic class 6 will use SP3 and so on down the list You use the strict priority mappings to control how the different traffic classes will be routed in the queue Figure 10 shows that extending the frame scheduler to a hybrid SP WRR system is fairly straightforward All SP queues are considered strictly higher priority than WRR so they are serviced first Once ...

Страница 141: ... and egress queueing utilizes a hybrid scheduler that simultaneously supports SP WRR service and multiple physical queues with the same service level Multicast adds additional multicast expansion queues Since multicast traffic classes are equivalent to unicast service levels they re treated exactly as their equivalent unicast service policies Scheduling the QoS multicast queue To schedule the QoS ...

Страница 142: ...s applied and the interface is connected to the CNA only one strict priority PGID PGID 15 0 to PGID 15 7 is allowed Strict Priority versus DWRR is derived directly from the PGID value All PGIDs with prefix 15 receive Strict Priority scheduling policy and all PGIDs in the range 0 through 7 receive DWRR scheduling policy Relative priority between Priority Group is exactly the ordering of entries lis...

Страница 143: ...ch config ceemap priority group table 0 weight 50 pfc 4 Define the CEE map for PGID 1 switch config ceemap priority group table 1 weight 50 5 Enter the copy command to save the running config file to the startup config file switch config do copy running config startup config Defining a priority table map To define a priority table map perform the following steps from privileged EXEC mode 1 Enter g...

Страница 144: ...net interface In this example 0 2 is used switch config interface tengigabitethernet 0 2 3 Apply the CEE map on the interface switch conf if te 0 2 cee default 4 Enter the copy command to save the running config file to the startup config file switch config do copy running config startup config Verifying the CEE maps To verify the CEE map perform the following steps from privileged EXEC mode 1 Ent...

Страница 145: ...lowed All other traffic such as DHCP and HTTP is blocked The Brocade FCoE hardware transmits an EAP request to the supplicant which responds with the EAP response packet The Brocade FCoE hardware which then forwards the EAP response packet to the RADIUS authentication server If the credentials are validated by the RADIUS server database the supplicant may access the protected network resources NOT...

Страница 146: ...to the admin role 2 Add the RADIUS to the switch as the authentication server This Fabric OS CLI command moves the new RADIUS server to the top of the access list switch admin aaaconfig add 10 2 2 147 conf radius 1 3 Enter global configuration mode switch admin cmsh switch configure t 4 Enable 802 1x authentication globally switch config dot1x enable 5 Enter the copy command to save the running co...

Страница 147: ...command to select the interface port to modify switch config interface tengigabitethernet 1 12 3 Configure the timeout interval switch conf if te 1 12 dot1x timeout supp timeout 40 Configuring 802 1x re authentication on specific interface ports To configure 802 1x port re authentication on a specific interface port perform the following steps from privileged EXEC mode Repeat this task for each in...

Страница 148: ...OCADE CONFIDENTIAL switch config interface tengigabitethernet 1 12 3 Use the no dot1x port control command to disable 802 1x Authentication switch conf if te 1 12 no dot1x authentication 4 Enter the copy command to save the running config file to the startup config file switch conf if te 1 12 do copy running config startup config ...

Страница 149: ...fectively address this issue of inefficient Multicast Forwarding to VLAN port members Snooping involves learning forwarding states for Multicast Data traffic on VLAN port members from the IGMP control Join Leave packets received on them The Layer 2 switch also provides for a way to configure forwarding states statically through the CLI NOTE Brocade Fabric OS 7 0 0 supports IGMPv1 and IGMPv2 Active...

Страница 150: ...er multicast group and forwards this one join message to the multicast router The switch forwards multicast traffic for the specified multicast group to the interfaces where the join messages were received Configuring IGMP By default IGMP snooping is globally disabled on all VLAN interfaces Refer to the CEE Command Reference for complete information about the commands in this section To configure ...

Страница 151: ...ace vlan 25 2 Activate the default IGMP querier functionality for the VLAN switch conf if vl 25 ip igmp snooping querier enable 3 Return to privileged EXEC mode switch conf if vl 25 exit 4 Set the IGMP querier interval for the VLAN The valid range is from 1 through 18000 seconds The default value is 125 seconds switch config ip igmp query interval 125 5 Set the last member query interval The valid...

Страница 152: ...information on IGMP multicast groups for the switch Use this command to display the IGMP database including configured entries for either all groups on all interfaces or all groups on specific interfaces or specific groups on specific interfaces switch show ip igmp groups 2 Use the show ip igmp statistics command to display the IGMP statistics for a VLAN or interface switch show ip igmp statistics...

Страница 153: ... management information base MIB object for a specified interval triggers an alarm at a specified value rising threshold and resets the alarm at another value falling threshold Alarms can be used with events the alarm triggers an event which can generate a log entry or an SNMP trap Events Determines the action to take when an event is triggered by an alarm The action can be to generate a log entry...

Страница 154: ...ettings To configure RMON alarms and events perform the following steps from privileged EXEC mode 1 Enter the configure terminal command to access global configuration mode switch configure terminal 2 Configure the RMON alarms Example of an alarm that tests every sample for a rising threshold switch config rmon alarm 1 1 3 6 1 2 1 16 1 1 1 5 65535 interval 10 absolute rising threshold 10 event 1 f...

Страница 155: ...s sampled To enable collection history perform the following steps from privileged EXEC mode 1 Enter the configure terminal command to access global configuration mode switch configure terminal 2 Enter the interface command to specify the CEE interface type and slot port number switch config interface tengigabitethernet 0 1 3 Enable the CEE interface switch conf if te 0 1 no shutdown 4 Activate RM...

Страница 156: ...134 Converged Enhanced Ethernet Administrator s Guide 53 1002163 02 RMON configuration and management 14 DRAFT BROCADE CONFIDENTIAL ...

Страница 157: ... both the original and replacement Brocade 8000s being active on the network at the same time NOTE Before you begin this procedure obtain all non factory installed licenses on the original switch that are required on the replacement switch To replace a Brocade 8000 perform the following steps 1 Use the firmwareshow command to determine the firmware version of a given switch Refer to the Fabric OS ...

Страница 158: ...yRzXfSARr Performance Monitor license SeR9Qz9yRzbfSARv Trunking license SeR9Qz9yRzVfSARp Fabric Watch license R9A4fF9ZfttXDWgXM9HX3gRHa4rG9NRaBAgXD Enhanced Group Management license fLTJNCKgmGY3rB743A34GaYCR4YZfgYMB7P9M FCoE Base license Z3LE7M3MNHPQ4JDHfgESH9T9ZT77HATrBJf4A Enhanced Group Management license new_switch admin licenseshow RFFZf49B3MLmQJWEYCRRN4rZNEJt9aJWBJaJM Enhanced Group Manageme...

Страница 159: ...ownloading a configuration file which was uploaded from a different type of switch may cause this switch to fail A switch reboot might be required for some parameter changes to take effect configDownload operation may take several minutes to complete for large files Do you want to continue y n y Password Doing configDownload on switch Activating configDownload without disabling switch NOTE Not all...

Страница 160: ...figuration 14 Upload the startup config file to the new switch new_switch admin cmsh new_switch copy ftp admin 10 10 10 10 file1 startup config 15 Upload the running config file to the new switch new_switch copy ftp admin 10 10 10 10 file2 running config Source password Building configuration NOTE In the examples above the IP address of the FTP server is listed as 10 10 10 10 you must enter the co...

Страница 161: ...ted until the next user login new_switch admin switchname original_switch original_switch 19 Remove the Ethernet cable from the original switch 20 If a temporary IP address was being used on the new switch during the replacement process use the ipaddrset command to set the replacement Brocade 8000 s IP address to match the original Brocade 8000 s IP address new_switch admin ipaddrset Ethernet IP A...

Страница 162: ...140 Converged Enhanced Ethernet Administrator s Guide 53 1002163 02 Brocade 8000 Replacement A ...

Страница 163: ...ding delay configuring for STP RSTP MSTP 66 hello time configuring for STP RSTP 68 maximum aging time configuring for STP RSTP MSTP 66 priority configuring for STP RSTP MSTP 65 Brocade Brocade Connect xxi extension TLV set 89 proprietary aggregation 82 website xxi Brocade FCoE hardware 2 C CEE audit log 42 CEE interface applying a MAC ACL 105 configuring for STP RSTP MSTP 72 configuring the hello ...

Страница 164: ...mand syntax 18 configuration management saving changes 14 configure FCoE VLAN 35 VLAN membership 38 congestion control QoS 113 queuing 5 console interface 14 control processors 33 converged mode 45 counters clearing 54 D Data Center Bridging DCB Capability Exchange Protocol See DCBX DCBX Enhanced Transmission Selection 90 interaction with other vendor devices 91 overview Priority Flow Control 90 T...

Страница 165: ...e for STP RSTP MSTP 73 H hello time configuring for MSTP 74 high availability 33 hops configuring for MSTP 70 I IEEE 802 1 organizational TLV set 89 IEEE 802 3 organizational TLV set 89 IGMP interface 128 interval 129 mrouter 128 MRT 129 passive 127 querier 129 query interval 128 tcn 128 timer 128 vlan 128 incoming frame classification 5 ingress VLAN filtering 45 instance MSTP mapping a VLAN to 69...

Страница 166: ... sets 88 login FCoE 10 FIP 9 logincfg 10 logout FCoE 10 FIP 9 loop free network environment 4 M MAC addresses configuration guidelines and restrictions 47 flush from the VLAN FDB 71 map 36 MSTP 38 configuration procedures 64 default configuration 63 displaying MSTP related information 72 overview 61 MTU configuring 48 multicast rate limiting QoS 116 Multiple Spanning Tree Protocol See MSTP N name ...

Страница 167: ...RSTP MSTP 76 RSTP 38 configuration guidelines and restrictions MSTP configuration guidelines and restrictions 63 configuration procedures 64 default configuration 63 displaying RSTP related information 72 overview 59 S saving configuration 14 scheduling QoS 117 Spanning Tree Protocol See STP spanning tree defaults 64 speed negotiation FC ports 25 standby 33 static link aggregation 82 STP 38 config...

Страница 168: ...elines and restrictions 47 configuration procedures clearing VLAN counters 54 configuring a CEE interface as a Layer 2 switch port 50 configuring a CEE interface as an access or trunk interface 50 configuring the MTU on an interface 48 displaying VLAN information 54 enabling and disabling a CEE interface 48 important notes 48 VLAN classifier groups 53 VLAN classifier rules 52 default configuration...

Отзывы:

Нет отзывов

Похожие инструкции для Converged Enhanced Ethernet 8000

PCMCIA WIRELESS ASAPTER DWL-650

Бренд: D-Link Страницы: 5

PowerLine DHP-W611AV

Бренд: D-Link Страницы: 78

OfficeConnect 1600

Бренд: 3Com Страницы: 8

Бренд: 3Com Страницы: 8

Бренд: DAQ system Страницы: 41

Бренд: DAQ system Страницы: 19

DM/IP601-CPCI-100BT

Бренд: Dialogic Страницы: 2

Бренд: Altera Страницы: 42

RabbitCore RCM4400W

Бренд: Rabbit Страницы: 126

ControlPoint 2000

Бренд: 4Home Страницы: 20

NetIron MLXe Series

Бренд: Brocade Communications Systems Страницы: 305

Бренд: ADTRAN Страницы: 2

Бренд: NKE Страницы: 15

Бренд: Tenda Страницы: 120

Бренд: Keysight Technologies Страницы: 106

Бренд: VIA Technologies Страницы: 2

7798 I/SITE LAN

Бренд: CSI Страницы: 56

Linktropy MINI-G

Бренд: Apposite Technologies Страницы: 57

Бренды по названию

0 1 2 3 4 5 6 7 8 9 A B C D E F G H I J K L M N O P Q R S T U V W X Y Z

Популярные бренды

Загрузить еще бренды