Dell Brocade DCX-4S Manuals

Manuals and User Guides for Dell Brocade DCX-4S. We have 1 Dell Brocade DCX-4S manual available for free PDF download: Configuration Manual

Dell Brocade DCX-4S Configuration Manual (1436 pages)

BigIron RX Series Configuration Guide v02.7.02

Brand: Dell | Category: Switch | Size: 14.66 MB

Configuration Guide
1
Table of Contents
3
About this Document
41
- In this Chapter
  41
- Audience
  41
- Supported Hardware and Software
  41
  - List of Supported Features
    42
  - Unsupported Features
    44
- What's New in this Document
  45
- Document Conventions
  69
- Notice to the Reader
  70
- Related Publications
  70
- Getting Technical Help or Reporting Errors
  70
  - Web Access
    71
  - E-Mail Access
    71
  - Telephone Access
    71
Chapter 1 Getting Started with the Command Line Interface

73
- In this Chapter
  73
- Logging on through the CLI
  73
  - On-Line Help
    74
  - Command Completion
    74
  - Scroll Control
    74
  - Line Editing Commands
    75
- EXEC Commands
  75
  - Global Level
    76
- CONFIG Commands
  76
- Accessing the CLI
  79
  - Navigating Among Command Levels
    80
  - CLI Command Structure
    80
- Searching and Filtering Output
  81
Chapter 2 Getting Familiar with the Bigiron RX Series Switch Management Applications

89
Chapter 3 Using a Redundant Management Module

99
- In this Chapter
  99
- How Management Module Redundancy Works
  99
  - Management Module Redundancy Overview
    99
  - Management Module Switchover
    100
  - Switchover Implications
    101
  - Management Sessions
    102
- Management Module Redundancy Configuration
  103
  - Changing the Default Active Chassis Slot
    103
- Managing Management Module Redundancy
  103
- Monitoring Management Module Redundancy
  107
- Flash Memory and PCMCIA Flash Card File Management Commands38
  110
  - Management Focus
    111
  - Flash Memory File System
    111
  - PCMCIA Flash Card File System
    112
  - Wildcards
    113
  - Formatting a Flash Card
    114
  - Determining the Current Management Focus
    114
  - Switching the Management Focus
    115
  - Displaying a Directory of the Files
    115
  - Displaying the Contents of a File
    117
  - Displaying the Hexadecimal Output of a File
    118
  - Creating a Subdirectory
    118
  - Removing a Subdirectory
    120
  - Renaming a File
    121
  - Changing the Read-Write Attribute of a File
    121
  - Deleting a File
    122
  - Recovering ("Undeleting") a File
    123
  - Appending a File to Another File
    124
  - Copying Files Using the Copy Command
    124
  - Copying Files Using the Cp Command
    129
  - Loading the Software
    129
  - Saving Configuration Changes
    131
  - File Management Messages
    132
Chapter 4 Securing Access to Management Functions

133
Chapter 5 Configuring Basic Parameters

185
Chapter 6 Configuring Interface Parameters

205
Chapter 7 Configuring IP

217
- In this Chapter
  217
- Overview of Configuring IP
  217
- The IP Packet Flow
  218
  - ARP Cache Table
    219
  - Static ARP Table
    219
  - IP Route Table
    220
  - IP Forwarding Cache
    221
- Basic IP Parameters and Defaults
  221
  - When Parameter Changes Take Effect
    221
  - IP Global Parameters
    222
  - IP Interface Parameters
    224
- Configuring IP Parameters
  225
- Configuring Packet Parameters
  243
  - Changing the Encapsulation Type
    243
  - Setting Maximum Frame Size Per PPCR
    244
  - Changing the MTU
    245
- Changing the Router ID
  246
- Specifying a Single Source Interface for Telnet, TACACS/TACACS+, or RADIUS Packets
  247
- Configuring an Interface as the Source for Syslog Packets
  249
  - IP Fragmentation Protection
    250
  - IP Option Attack Protection
    250
  - IP Receive Access List
    250
- Configuring ARP Parameters
  251
- Configuring Forwarding Parameters
  258
  - Enabling Forwarding of Directed Broadcasts
    259
  - Disabling ICMP Messages
    260
    
    Disabling Icmp Destination Unreachable Messages
    261
    
    Disabling Replies to Broadcast Ping Requests
    261
  - Disabling ICMP Redirect Messages
    262
  - Configuring Static Routes
    263
  - Static Route Tagging
    268
  - Configuring a Default Network Route
    272
  - Configuring IP Load Sharing
    273
  - Default Route ECMP
    276
  - IP Receive Access List
    277
  - Configuring IRDP
    278
  - Enabling Irdp Globally
    279
  - Configuring UDP Broadcast and IP Helper Parameters
    280
  - Configuring Bootp/Dhcp Forwarding Parameters
    283
- Displaying IP Information
  285
  - Displaying IP Interface Information
    287
  - Displaying Interface Name in Syslog
    288
  - Displaying ARP Entries
    289
  - Displaying the Forwarding Cache
    291
  - Displaying the IP Route Table
    292
  - Clearing IP Routes
    295
  - Displaying IP Traffic Statistics
    295
  - Displaying TCP Traffic Statistics
    298
Chapter 8 Link Aggregation

301
- In this Chapter
  301
- Link Aggregation Overview
  301
- LAG Formation Rules
  302
- LAG Load Sharing
  304
  - Hash Based Load Sharing
    304
- Migration from a Pre-02.6.00 Trunk or LACP Configuration
  305
- Configuration of a LAG
  306
  - Creating a Link Aggregation Group (LAG)
    307
- Deploying a LAG
  309
Chapter 9 Configuring LLDP

319
- In this Chapter
  319
- Terms Used in this Chapter
  319
- LLDP Overview
  320
  - Benefits of LLDP
    320
- General Operating Principles
  321
  - Operating Modes
    321
  - LLDP Packets
    322
  - TLV Support
    322
- MIB Support
  325
- Syslog Messages
  325
- Configuring LLDP
  325
- Resetting LLDP Statistics
  344
Chapter 10 Configuring Uni-Directional Link Detection (UDLD)

345
- In this Chapter
  345
- Configuration Considerations
  346
- Configuring UDLD
  346
  - Changing the Keepalive Interval
    346
  - Changing the Keepalive Retries
    347
- Displaying UDLD Information
  347
- Clearing UDLD Statistics
  350
Chapter 11 Vlans

351
- In this Chapter
  351
- Overview of Virtual Local Area Networks (Vlans)
  351
  - Tagged, Untagged, and Dual-Mode Ports
    351
  - Protocol-Based Vlans
    353
- VLAN Configuration Rules
  354
  - VLAN ID Range
    354
  - Tagged Vlans
    354
  - VLAN Hierarchy
    354
  - Multiple VLAN Membership Rules
    355
  - Layer 2 Control Protocols on Vlans
    355
- Configuring Port-Based Vlans
  355
- Configuring Protocol-Based Vlans
  359
  - Configuring an MSTP Instance
    360
- Configuring Virtual Routing Interfaces
  360
- VLAN Groups
  363
  - Configuring a VLAN Group
    363
- Configuring Super Aggregated Vlans
  365
  - Configuring Aggregated Vlans
    367
  - Complete CLI Examples
    368
- Configuring 802.1Q-In-Q Tagging
  371
  - Configuration Rules
    372
  - Enabling 802.1Q-In-Q Tagging
    372
  - Example Configuration
    374
- Configuring 802.1Q Tag-Type Translation
  374
  - Configuration Rules
    376
  - Enabling 802.1Q Tag-Type Translation
    377
- Private Vlans
  378
  - Implementation Notes
    379
  - Configuration Notes
    379
  - Configuring a Private VLAN
    380
  - Private VLAN
    382
  - CLI Example for Figure 30
    383
- Other VLAN Features
  383
- Displaying VLAN Information
  386
- Transparent Firewall Mode
  389
  - Enabling a Transparent Firewall
    389
Chapter 12 Configuring Spanning Tree Protocol

391
- In this Chapter
  391
- IEEE 802.1D Spanning Tree Protocol (STP)
  391
  - Enabling or Disabling STP
    391
  - Default STP Bridge and Port Parameters
    393
  - Changing STP Bridge Parameters
    394
  - Changing STP Port Parameters
    394
  - STP Root Guard
    394
  - Spanning Tree Protocol (STP) BPDU Guard
    396
  - Displaying STP Information
    396
- IEEE Single Spanning Tree (SSTP)
  402
  - SSTP Defaults
    402
  - Enabling SSTP
    403
  - Displaying SSTP Information
    404
- PVST/PVST+ Compatibility
  404
  - Overview of PVST and PVST
    405
  - VLAN Tags and Dual Mode
    405
  - Enabling PVST+ Support
    406
  - Displaying PVST+ Support Information
    406
  - Configuration Examples
    407
- Superspan
  409
  - Customer ID
    410
  - BPDU Forwarding
    410
  - Configuring Superspan
    415
Chapter 13 Configuring Rapid Spanning Tree Protocol

419
- In this Chapter
  419
- Overview of Rapid Spanning Tree Protocol
  419
  - Bridges and Bridge Port Roles
    419
  - Assignment of Port Roles
    420
  - Ports on Switch 1
    421
  - Ports on Switch 2
    421
  - Ports on Switch 3
    421
  - Ports Switch 4
    422
- Edge Ports and Edge Port Roles
  422
- Point-To-Point Ports
  423
- Bridge Port States
  423
- Edge Port and Non-Edge Port States
  424
- Changes to Port Roles and States
  424
- State Machines
  424
  - Handshake Mechanisms
    425
- Convergence in a Simple Topology
  435
  - Convergence at Start up
    436
  - Convergence after a Link Failure
    438
  - Convergence at Link Restoration
    439
- Convergence in a Complex RSTP Topology
  441
  - Propagation of Topology Change
    443
- Compatibility of RSTP with 802.1D
  446
- Configuring RSTP Parameters
  447
  - Enabling or Disabling RSTP in a Port-Based VLAN
    447
  - Enabling or Disabling RSTP on a Single Spanning Tree
    448
  - Disabling or Enabling RSTP on a Port
    448
  - Changing RSTP Bridge Parameters
    448
  - Changing Port Parameters
    449
  - Fast Port Span
    450
  - Fast Uplink Span
    453
- Displaying RSTP Information
  455
Chapter 14 Metro Ring Protocol (MRP) Phase 1 and 2

459
- In this Chapter
  459
- Metro Ring Protocol (MRP) Phase 1
  459
- MRP Rings Without Shared Interfaces
  461
- Ring Initialization
  462
- How Ring Breaks Are Detected and Healed
  465
- Master Vlans and Customer Vlans in a Topology Group
  466
- Configuring MRP
  467
  - Adding an MRP Ring to a VLAN
    468
  - Changing the Hello and Preforwarding Times
    469
- MRP Phase 2
  469
- Ring Initialization for Shared Interfaces
  471
- Using MRP Diagnostics
  476
  - Enabling MRP Diagnostics
    476
  - Displaying MRP Diagnostics
    476
- Displaying MRP Information
  477
  - Displaying Topology Group Information
    477
  - Displaying Ring Information
    478
- MRP CLI Example
  479
  - Commands on Switch a (Master Node)
    480
  - Commands on Switch B
    480
  - Commands on Switch C
    481
  - Commands on Switch D
    481
Chapter 15 Virtual Switch Redundancy Protocol (VSRP)

483
- Overview of Virtual Switch Redundancy Protocol (VSRP)
  483
  - In this Chapter
    483
  - Layer 2 and Layer 3 Redundancy
    485
  - Master Election and Failover
    485
- Configuring Basic VSRP Parameters
  490
- Enabling Layer 3 VSRP
  491
- Configuring Optional VSRP Parameters
  491
  - Disabling VSRP on a VRID
    491
  - Configuring Authentication
    491
  - Configuring a VRID IP Address
    492
  - VSRP Fast Start
    493
  - Changing the Backup Priority
    494
  - Saving the Timer Values Received from the Master
    494
  - VSRP Slow Start
    495
  - Changing the Time-To-Live (TTL)
    495
  - Changing the Hello Interval
    496
  - Changing the Dead Interval
    496
  - Changing the Backup Hello State and Interval
    496
  - Changing the Hold-Down Interval
    497
  - Changing the Default Track Priority
    497
  - Specifying a Track Port
    498
  - Disabling or Re-Enabling Backup Pre-Emption
    498
  - Port Transition Hold Timer
    498
- Clearing VSRP Information
  499
- VSRP and MRP Signaling
  499
- Displaying VSRP Information
  501
Chapter 16 Topology Groups

507
- Topology Overview
  507
- In this Chapter
  507
- Master VLAN and Member Vlans
  507
- Master Vlans and Customer Vlans in MRP
  508
- Control Ports and Free Ports
  508
- Configuration Considerations
  508
- Configuring a Topology Group
  509
- Displaying Topology Group Information
  510
Chapter 17 Configuring VRRP and VRRPE

511
- Overview of VRRP
  511
  - In this Chapter
    511
  - Standard VRRP
    512
  - Brocade Enhancements of VRRP
    514
- Overview of VRRPE
  516
- VRRP and VRRPE Parameters
  518
- Configuring Parameters Specific to VRRP
  520
  - Configuring the Owner
    520
  - Configuring Basic VRRP Parameters
    521
  - Configuring the Owner
    521
  - Configuring a Backup
    521
  - Configuration Rules for VRRP
    521
- Configuring Parameters Specific to VRRPE
  522
- Configuration Rules for VRRPE
  522
- Configuring Additional VRRP and VRRPE Parameters
  523
  - Authentication Type
    523
  - Up Interface
    524
  - Hello Interval
    524
  - Dead Interval
    525
  - Backup Hello Message State and Interval
    525
  - Track Port
    525
  - Track Priority
    526
  - Backup Preempt
    526
  - Master Router Abdication and Reinstatement
    527
- Displaying VRRP and VRRPE Information
  528
  - Displaying Summary Information
    528
  - Displaying Detailed Information
    529
  - Displaying Statistics
    532
  - Clearing VRRP or VRRPE Statistics
    533
  - Configuration Examples
    533
  - VRRP Example
    534
  - VRRPE Example
    535
Chapter 18 Configuring Quality of Service

537
- Overview of Quality of Service (Qos)
  537
- In this Chapter
  537
- Classification
  537
  - Processing of Classified Traffic
    538
- Marking
  540
  - Configuring DSCP Classification by Interface
    540
  - Configuring Port, MAC, and VLAN-Based Classification
    541
- Configuring Tos-Based Qos
  542
  - Enabling Tos-Based Qos
    542
  - Specifying Trust Level
    542
  - Enabling Marking
    543
- Configuring the Qos Mappings
  543
  - Changing the Cos –> DSCP Mappings
    543
  - Changing the DSCP –> DSCP Mappings
    544
- Displaying Qos Configuration Information
  546
- Determining Packet Drop Priority Using WRED
  547
  - How WRED Operates
    548
  - Calculating Avg-Q-Size
    548
  - Calculating Packets that Are Dropped
    549
  - Using WRED with Rate Limiting
    549
- Configuring Packet Drop Priority Using WRED
  549
  - Enabling WRED
    549
  - Setting the Averaging-Weight (Wq) Parameter
    550
  - Displaying the WRED Configuration
    553
- Scheduling Traffic for Forwarding
  554
  - Configuring Traffic Scheduling
    554
- Configuring Multicast Traffic Engineering
  558
  - Displaying the Multicast Traffic Engineering Configuration
    559
- Qos for the Oversubscribed 16 X 10GE Modules
  560
  - Aggregation NP QOS Modes
    560
  - Port Group Assignments
    560
  - Setting the Server and Storage Modes
    561
  - Switching between Server and Storage Modes
    561
  - Qos Profiles
    561
  - Setting the Group Port Weights
    562
  - Egress Port Shaping
    563
  - Mirroring Ports
    563
  - Supported Acls
    564
  - Configuring Qos for the 16 X 10G Module
    564
Chapter 19 Configuring Traffic Reduction

567
- Traffic Policing on the Bigiron RX Series
  567
- In this Chapter
  567
- Traffic Reduction Parameters and Algorithm
  568
  - Requested Rate
    568
  - Maximum Burst
    568
  - Actual Rate
    568
  - Configuration Considerations
    569
- Configuring Rate Limiting Policies
  570
- Displaying Traffic Reduction
  576
  - Filtering Based on Ethertype
    577
  - In this Chapter
    577
  - Configuration Rules and Notes
    577
Chapter 20 Layer 2 Acls

578
- Configuring Layer 2 Acls
  578
- Viewing Layer 2 Acls
  580
  - Example of Layer 2 ACL Deny by MAC Address
    581
  - In this Chapter
    583
Chapter 21 Access Control List

584
- How the Device Processes Acls
  584
- Default ACL Action
  585
- Types of IP Acls
  585
- ACL Ids and Entries
  585
- Disabling or Re-Enabling Access Control Lists (Acls)
  585
- Enabling Support for Additional ACL Statements
  586
- ACL-Based Inbound Mirroring
  586
- Configuring Numbered and Named Acls
  590
- Displaying ACL Definitions
  605
  - Displaying of TCP/UDP Numbers in Acls
    606
- ACL Logging
  616
  - Enabling the New Logging Method
    617
  - Specifying the Wait Time
    617
- Modifying Acls
  617
  - Adding or Deleting a Comment
    619
- Deleting ACL Entries
  621
  - From Numbered Acls
    621
  - From Named Acls
    622
- Applying Acls to Interfaces
  623
  - Reapplying Modified Acls
    623
  - ACL Automatic Rebind
    623
  - Manually Setting the ACL Rebind
    623
  - Applying Acls to a Virtual Routing Interface
    623
  - Configuring the Layer 4 Session Log Timer
    624
  - Displaying ACL Log Entries
    624
- Qos Options for IP Acls
  625
- Enabling ACL Duplication Check
  626
- ACL Accounting
  626
- Enabling ACL Filtering of Fragmented or Non-Fragmented Packets
  629
- ACL Filtering for Traffic Switched Within a Virtual Routing Interface
  630
- ICMP Filtering for Extended Acls
  630
- Named Acls
  631
- Troubleshooting Acls
  632
Chapter 22 Policy-Based Routing

635
- Policy-Based Routing (PBR)
  635
  - In this Chapter
    635
  - Configuration Considerations
    635
- Configuring a PBR Policy
  636
  - Configure the Acls
    636
  - Configure the Route Map
    638
  - Enabling PBR
    638
  - Basic Example
    639
  - Configuration Examples
    639
  - Setting the Next Hop
    640
  - Setting the Output Interface to the Null Interface
    641
- Trunk Formation
  641
- Overview of IP Multicasting
  643
- In this Chapter
  643
- Multicast Terms
  644
- Changing Global IP Multicast Parameters
  644
  - Defining the Maximum Number of DVMRP Cache Entries
    645
  - Defining the Maximum Number of PIM Cache Entries
    645
- IP Multicast Boundaries
  645
  - Configuring Multicast Boundaries
    646
  - Displaying Multicast Boundaries
    646
  - Passive Multicast Route Insertion (PMRI)
    646
  - Configuring PMRI
    647
  - Displaying Hardware-Drop
    647
- Changing IGMP V1 and V2 Parameters
  647
- Adding an Interface to a Multicast Group
  649
- Igmp V
  649
  - Default IGMP Version
    651
  - Compatibility with IGMP V1 and V2
    651
  - Enabling the IGMP Version Per Interface Setting
    651
    
    Interface
    652
    
    Setting the Query Interval
    653
  - Setting the Group Membership Time
    654
  - Setting the Maximum Response Time
    654
  - Displaying Igmpv3 Information
    654
  - Clearing IGMP Statistics
    658
  - IGMP V3 and Source Specific Multicast Protocols
    658
  - Configuring a Static Multicast Route
    658
  - Next Hop Validation Check
    660
- PIM Dense
  660
  - Initiating PIM Multicasts on a Network
    661
    
    Pruning a Multicast Tree
    661
    
    Grafts to a Multicast Tree
    663
  - PIM DM Versions
    663
  - Configuring PIM DM
    664
  - Failover Time in a Multi-Path Topology
    668
  - Modifying the TTL
    668
- PIM Sparse
  668
  - PIM Sparse Router Types
    669
  - RP Paths and SPT Paths
    670
  - Configuring PIM Sparse
    670
  - Configuring Global Pim Sparse Parameters
    671
- Anycast RP
  675
- PIM-Ssmv4
  692
  - Enabling SSM
    693
- Configuring Multicast Source Discovery Protocol (Msdp)
  693
  - Peer Reverse Path Forwarding (RPF) Flooding
    695
  - Source Active Caching
    695
  - Configuring MSDP
    696
  - Enabling MSDP
    696
  - Configuring MSDP Peers
    696
  - Filtering MSDP Source-Group Pairs
    697
  - Filtering Incoming Source-Active Messages
    697
  - Filtering Advertised Source-Active Messages
    699
  - Are Applied
    700
- Configuring MSDP Mesh Groups
  702
- Clearing MSDP Information
  714
  - Clearing Peer Information
    715
  - Clearing the Source Active Cache
    715
  - Clearing MSDP Statistics
    715
- DVMRP Overview
  715
  - Initiating DVMRP Multicasts on a Network
    716
  - Pruning a Multicast Tree
    716
  - Grafts to a Multicast Tree
    718
- Configuring DVMRP
  719
  - Enabling DVMRP Globally and on an Interface
    719
  - Modifying DVMRP Global Parameters
    719
    
    Modifying Neighbor Timeout
    720
    
    Modifying Route Expires Time
    720
    
    Modifying Route Discard Time
    720
    
    Modifying Prune Age
    720
    
    Modifying Probe Interval
    721
  - Modifying DVMRP Interface Parameters
    722
  - Displaying Information about an Upstream Neighbor Device
    723
- Configuring a Static Multicast Route
  723
- Configuring IP Multicast Traffic Reduction
  724
  - Enabling IP Multicast Traffic Reduction
    725
    
    Modifying the Query Interval
    728
    
    Modifying the Age Interval
    728
    
    Filtering Multicast Groups
    728
    
    Layer 2 Multicast Filters
    729
  - PIM SM Traffic Snooping
    730
    
    Application Examples
    731
    
    Configuration Requirements
    732
    
    Static IGMP Membership
    734
Chapter 24 Configuring RIP

737
- Overview of Routing Information Protocol (RIP)
  737
- In this Chapter
  737
- Configuring RIP Parameters
  737
  - Enabling RIP
    738
  - Configuring Metric Parameters
    738
  - Changing the Administrative Distance
    738
  - Configuring Redistribution
    739
  - Configuring Route Learning and Advertising Parameters
    740
  - Changing the Route Loop Prevention Method
    741
  - Interface
    742
  - Using Prefix Lists and Route Maps as Route Filters
    743
  - Setting RIP Timers
    744
- Displaying RIP Filters
  744
  - Clearing the RIP Routes from the Routing Table
    745
Chapter 25 Configuring OSPF Version 2 (Ipv4)

747
- Overview of OSPF (Open Shortest Path First)
  747
- Configuring OSPF
  753
  - OSPF Parameters
    754
  - Configuration Rules
    754
  - Enable OSPF on the Router
    755
  - Assign OSPF Areas
    755
  - Assigning an Area Range (Optional)
    759
  - Assigning Interfaces to an Area
    760
  - Modify Interface Defaults
    760
  - Ospf Interface Parameters
    761
  - Change the Timer for OSPF Authentication Changes
    763
  - Assign Virtual Links
    764
  - Modify Virtual Link Parameters
    766
  - Configuring an OSPF Non-Broadcast Interface
    767
  - OSPF Point-To-Point Links
    769
  - Define Redistribution Filters
    772
  - Modify Default Metric for Redistribution
    774
  - Enable Route Redistribution
    774
  - Disable or Re-Enable Load Sharing
    776
  - Configure External Route Summarization
    777
  - Configure Default Route Origination
    778
  - Configuring a Default Network Route
    779
  - Modify SPF Timers
    780
  - Modify Redistribution Metric Type
    780
  - Modify Administrative Distance
    781
  - OSPF ABR Type 3 LSA Filtering
    782
  - Displaying the Configured OSPF Area Prefix List
    785
  - Modifing OSPF Traps Generated
    786
  - Modify OSPF Standard Compliance Setting
    788
  - Modify Exit Overflow Interval
    788
  - Specify Types of OSPF Syslog Messages to Log
    788
- Displaying OSPF Information
  789
- Brocade Implementation of BGP4
  815
Chapter 26 Configuring BGP4

816
Chapter 27 Configuring MBGP

928
- Configuration Considerations
  928
- Enabling MBGP
  929
- Adding MBGP Neighbors
  929
- Optional Configuration Tasks
  930
- Displaying MBGP Information
  933
- Memory Considerations
  816
Chapter 28 Configuring Secure Shell

939
- Overview of Secure Shell (SSH)
  939
- In this Chapter
  939
  - SSH Version 2 Support
    939
  - Supported Features
    940
- Configuring SSH
  941
- Displaying SSH Connection Information
  947
- Using Secure Copy
  948
- In this Chapter
  951
Chapter 29 Configuring IS-IS (Ipv4)

952
Chapter 30 Bidirectional Forwarding Detection (BFD)

990
- Configuring BFD Parameters
  990
  - Number of BFD Sessions Supported
    990
  - Disabling BFD Syslog Messages
    990
- Displaying Bidirectional Forwarding Detection Information
  991
  - Displaying BFD Information on a Router
    991
  - Clearing BFD Neighbor Sessions
    995
- Configuring BFD for the Specified Protocol
  995
  - Configuring BFD for Ospfv2
    995
  - Configuring BFD for Ospfv3
    996
  - Configuring BFD for IS-IS
    996
- How Multi-Device Port Authentication Works
  999
  - In this Chapter
    999
  - RADIUS Authentication
    999
  - Authentication-Failure Actions
    1000
  - Dynamic VLAN and ACL Assignments
    1000
  - Supported RADIUS Attributes
    1000
Chapter 31 Configuring Multi-Device Port Authentication

1001
- Interface
  1001
- Configuring an Authentication Method List for 802.1X
  1002
- Enabling Multi-Device Port Authentication
  1002
- Setting RADIUS Parameters
  1002
- Server
  1003
- Specifying the Authentication-Failure Action
  1003
- Configuring Dynamic VLAN Assignment
  1004
- Defining MAC Address Filters
  1004
- VLAN Assignment Expires
  1005
- Clearing Authenticated MAC Addresses
  1006
- Disabling Aging for Authenticated MAC Addresses
  1007
- Displaying Multi-Device Port Authentication Information
  1008
- Specifying the Aging Time for Blocked MAC Addresses
  1008
Chapter 32 Using the MAC Port Security Feature

1015
- Overview of MAC Port Security
  1015
  - In this Chapter
    1015
  - Local and Global Resources
    1015
- Configuring the MAC Port Security Feature
  1016
  - Enabling the MAC Port Security Feature
    1016
  - Interface
    1016
  - Setting the Port Security Age Timer
    1017
  - Specifying Secure MAC Addresses
    1017
  - Autosaving Secure MAC Addresses to the Startup-Config File
    1017
  - Defining Security Violation Actions
    1018
  - Port Security MAC Violation Limit
    1019
  - Transparent Port Flooding
    1020
- Displaying MAC Port Security Information
  1021
Chapter 33 Configuring 802.1X Port Security

1025
- Overview of 802.1X Port Security
  1025
  - IETF RFC Support
    1025
  - In this Chapter
    1025
- How 802.1X Port Security Works
  1025
- X Port Security and Sflow
  1032
- Configuring 802.1X Port Security
  1032
  - Configuring an Authentication Method List for 802.1X
    1033
  - Setting RADIUS Parameters
    1033
  - Configuring Dynamic VLAN Assignment for 802.1X Ports
    1034
  - Assignment
    1035
  - Dynamically Applying Existing Acls or MAC Address Filter
    1036
  - Configuring Per-User IP Acls or MAC Address Filters
    1038
  - Enabling 802.1X Port Security
    1038
  - Setting the Port Control
    1039
  - Configuring Periodic Re-Authentication
    1040
  - Re-Authenticating a Port Manually
    1040
  - Setting the Quiet Period
    1041
  - Frames
    1041
  - Retransmissions
    1041
  - Authentication Server
    1042
  - Client
    1042
  - Initializing 802.1X on a Port
    1042
  - Allowing Multiple 802.1X Clients to Authenticate
    1042
  - Display Commands
    1043
- Displaying 802.1X Information
  1044
  - Displaying 802.1X Configuration Information
    1044
  - Displaying 802.1X Statistics
    1046
  - Clearing 802.1X Statistics
    1047
  - Displaying Dynamically Assigned VLAN Information
    1047
  - Interface
    1048
- Sample 802.1X Configurations
  1051
  - Point-To-Point Configuration
    1052
  - Hub Configuration
    1053
Chapter 34 Protecting against Denial of Service Attacks

1055
- Protecting against Smurf Attacks
  1055
  - In this Chapter
    1055
  - ACL-Based DOS-Attack Prevention
    1056
  - Avoiding Being an Intermediary in a Smurf Attack
    1056
- Protecting against TCP SYN Attacks
  1057
  - TCP Security Enhancement
    1058
- Displaying Statistics Due Dos Attacks
  1060
- Clear Dos Attack Statistics
  1060
- Dynamic ARP Inspection
  1061
  - ARP Attacks
    1061
  - In this Chapter
    1061
  - How DAI Works
    1062
  - Configuring DAI
    1063
  - Limits and Restrictions
    1063
  - Displaying ARP Inspection Status and Ports
    1065
  - Displaying the ARP Table
    1065
- DHCP Snooping
  1066
  - How DHCP Snooping Works
    1067
  - System Reboot and the Binding Database
    1067
  - Configuring DHCP Snooping
    1067
  - Disabling Option 82 Processing
    1069
  - Displaying DHCP Snooping Status and Ports
    1070
  - DHCP Snooping Configuration Example
    1070
- IP Source Guard
  1071
  - Limits and Restrictions
    1071
  - Enabling IP Source Guard
    1071
Chapter 36 Securing SNMP Access

1073
- Establishing SNMP Community Strings
  1073
  - Encryption of SNMP Community Strings
    1073
  - In this Chapter
    1073
  - Adding an SNMP Community String
    1074
  - Displaying the SNMP Community Strings
    1075
- Using the User-Based Security Model
  1075
- Configuring Your NMS
  1075
  - Defining the Engine ID
    1076
  - Defining an SNMP Group
    1077
  - Defining an SNMP User Account
    1078
  - Displaying the Engine ID
    1079
  - Displaying SNMP Groups
    1080
  - Displaying User Information
    1080
  - Interpreting Varbinds in Report Packets
    1080
- Defining SNMP Views
  1081
- SNMP V3 Configuration Examples
  1082
Chapter 37 Enabling the Foundry Discovery Protocol (FDP) and Reading Cisco

1083
- Using FDP
  1083
  - Configuring FDP
    1083
  - In this Chapter
    1083
  - Displaying FDP Information
    1084
  - Clearing FDP and CDP Information
    1087
- Reading CDP Packets
  1087
  - Enabling Interception of CDP Packets Globally
    1088
  - Enabling Interception of CDP Packets on an Interface
    1088
  - Displaying CDP Information
    1088
  - Clearing CDP Information
    1090
Chapter 38 Remote Network Monitoring

1091
- Basic Management
  1091
  - In this Chapter
    1091
  - Viewing Configuration Information
    1091
  - Viewing Port Statistics
    1091
  - Viewing System Information
    1091
  - Clearing Statistics
    1092
  - RMON Support
    1092
  - Viewing STP Statistics
    1092
  - Alarm (RMON Group 3)
    1095
  - History (RMON Group 2)
    1095
  - Configuration Considerations
    1097
Chapter 39 Sflow

1098
- Configuring and Enabling Sflow
  1098
- ACL-Based Inbound Sflow
  1102
  - Displaying Sflow Information
    1105
  - Clearing Sflow Statistics
    1107
Chapter 40 Multiple Spanning Tree Protocol (MSTP) 802.1S

1109
- S Multiple Spanning Tree Protocol
  1109
  - In this Chapter
    1109
  - Multiple Spanning-Tree Regions
    1109
  - Configuring MSTP
    1111
  - Setting the MSTP Name
    1111
  - Setting the MSTP Revision Number
    1111
  - Configuring an MSTP Instance
    1112
  - Configuring Bridge Priority for an MSTP Instance
    1112
  - Configuring Port Priority and Port Path Cost
    1112
  - Setting Ports to be Operational Edge Ports
    1113
  - Setting the MSTP Global Parameters
    1113
  - Disabling MSTP on a Port
    1114
  - Enabling MSTP on a Switch
    1114
  - Forcing Ports to Transmit an MSTP BPDU
    1114
  - Setting Point-To-Point Link
    1114
  - Displaying MSTP Statistics
    1117
  - Displaying MSTP Information for a Specified Instance
    1119
  - Displaying MSTP Information for CIST Instance 0
    1119
    
    In this Chapter
    1121
    
    Enabling IP Multicast Traffic Reduction
    1122
  - Changing the IGMP Mode
    1123
    
    Filtering Multicast Groups
    1124
    
    Modifying the Age Interval
    1124
    
    Modifying the Query Interval
    1124
    
    Static IGMP Membership
    1125
    
    PIM SM Traffic Snooping
    1127
    
    Application Examples
    1128
    
    Configuration Requirements
    1130
  - Enabling PIM SM Traffic Snooping
    1130
  - Multicast Traffic Reduction Per VLAN
    1131
- Displaying IP Multicast Information
  1132
  - Displaying Multicast Information
    1132
  - Displaying IP Multicast Statistics
    1133
  - Clearing IP Multicast Statistics
    1133
  - Clearing IGMP Group Flows
    1133
- Ipv6 Addressing
  1135
  - In this Chapter
    1135
  - Ipv6 Address Types
    1136
  - Ipv6 Stateless Autoconfiguration
    1138
  - In this Chapter
    1139
Chapter 43 Configuring Basic Ipv6 Connectivity

1140
- Enabling Ipv6 Routing
  1140
- Configuring Ipv6 on each Router Interface
  1140
  - Configuring a Global or Site-Local Ipv6 Address
    1140
  - Configuring a Link-Local Ipv6 Address
    1141
  - Configuring Ipv6 Anycast Addresses
    1142
  - Configuration
    1143
- Ipv6 Host Support
  1143
  - Ipv6 Host Supported Features
    1143
  - Ipv6 Unsupported Features
    1143
  - Ipv6 CLI Command Support
    1144
  - Restricting SNMP Access to an Ipv6 Node
    1145
  - Specifying an Ipv6 SNMP Trap Receiver
    1145
    
    Restricting Web Management Access to an Ipv6 Host by Specifying an
    1145
    
    Ipv6 ACL
    1146
  - Restricting Web Management Access to an Ipv6 Host
    1146
  - Configuring an Ipv6 Syslog Server
    1146
  - Viewing Ipv6 SNMP Server Addresses
    1147
  - Disabling Router Advertisement and Solicitation Messages
    1147
  - Disabling Ipv6 on a Layer 2 Switch
    1148
Chapter 42 Address

1149
- Configuring Ipv4 and Ipv6 Protocol Stacks
  1150
- Configuring Ipv6 Domain Name Server (DNS) Resolver
  1151
  - Defining a DNS Entry
    1151
  - ECMP Load Sharing for Ipv6
    1152
  - Disabling or Re-Enabling ECMP Load Sharing for Ipv6
    1153
- DHCP Relay Agent for Ipv6
  1154
  - Configuring DHCP for Ipv6 Relay Agent
    1154
  - Displaying ECMP Load-Sharing Information for Ipv6
    1154
- Configuring Ipv6 ICMP
  1155
  - Configuring ICMP Rate Limiting
    1155
  - Disabling or Reenabling ICMP Redirect Messages
    1156
- Configuring Ipv6 Neighbor Discovery
  1156
- Changing the Ipv6 MTU
  1162
- Configuring Static Neighbor Entries
  1163
- Limiting the Number of Hops an Ipv6 Packet Can Traverse
  1163
- Qos for Ipv6 Traffic
  1163
- Clearing Global Ipv6 Information
  1164
  - Clearing the Ipv6 Cache
    1164
  - Clearing Ipv6 Neighbor Information
    1165
  - Clearing Ipv6 Routes from the Ipv6 Route Table
    1165
  - Clearing Ipv6 Traffic Statistics
    1166
  - Deleting Ipv6 Session Flows
    1166
- Displaying Global Ipv6 Information
  1166
  - Displaying Ipv6 Cache Information
    1166
  - Displaying Ipv6 Interface Information
    1167
  - Displaying Ipv6 Neighbor Information
    1169
  - Displaying the Ipv6 Route Table
    1170
  - Displaying Local Ipv6 Routers
    1171
  - Displaying Ipv6 TCP Information
    1172
  - Displaying Ipv6 Traffic Statistics
    1176
  - Displaying Ipv6 Session Flows
    1179
- Configuring Ripng
  1181
  - In this Chapter
    1181
  - Configuring Ripng Timers
    1182
    
    Enabling Ripng
    1182
    
    Configuring Route Learning and Advertising Parameters
    1183
  - Controlling Distribution of Routes through Ripng
    1185
  - Redistributing Routes into Ripng
    1185
  - Configuring Poison Reverse Parameters
    1186
  - Clearing Ripng Routes from Ipv6 Route Table
    1187
  - Displaying Ripng Information
    1187
    
    Displaying Ripng Configuration
    1187
    
    Displaying Ripng Routing Table
    1188
    
    Address Family Configuration Level
    1191
    
    In this Chapter
    1191
  - Configuring BGP4
    1192
    
    Enabling BGP4
    1193
    
    Addresses
    1193
    
    Adding BGP4+ Neighbors Using Link-Local Addresses
    1194
    
    Configuring a BGP4+ Peer Group
    1196
    
    Advertising the Default BGP4+ Route
    1197
    
    Importing Routes into BGP4
    1198
    
    Redistributing Prefixes into BGP4
    1198
    
    Aggregating Routes Advertised to BGP4 Neighbors
    1199
    
    Using Route Maps
    1200
  - Clearing BGP4+ Information
    1200
    
    Removing Route Flap Dampening
    1200
    
    Clearing BGP4+ Local Route Information
    1201
    
    Clearing BGP4+ Neighbor Information
    1201
    
    Clearing Route Flap Dampening Statistics
    1201
  - Displaying BGP4+ Information
    1205
    
    Displaying the BGP4+ Route Table
    1205
    
    Displaying BGP4+ Route Information
    1211
    
    Displaying BGP4+ Route-Attribute Entries
    1212
    
    Displaying the BGP4+ Running Configuration
    1214
    
    Displaying Dampened BGP4+ Paths
    1214
    
    Displaying Filtered-Out BGP4+ Routes
    1215
    
    Displaying Route Flap Dampening Statistics
    1220
    
    Displaying BGP4+ Neighbor Information
    1221
    
    Displaying BGP4+ Peer Group Configuration Information
    1243
    
    Displaying BGP4+ Summary
    1244
- Configuring Ipv6 MBGP
  1247
  - Configuration Considerations
    1247
  - In this Chapter
    1247
  - Enabling Ipv6 MBGP
    1248
  - Adding Ipv6 MBGP Neighbors
    1249
  - Optional Configuration Tasks
    1249
  - Aggregating Routes Advertised to Ipv6 BGP Neighbors
    1252
  - Displaying Ipv6 MBGP Information
    1252
    
    Displaying Summary MBGP Information
    1253
    
    Displaying MBGP Neighbors
    1254
    
    Displaying the Active MBGP Configuration
    1254
    
    Displaying MBGP Routes
    1256
    
    Displaying the Ipv6 Multicast Route Table
    1256
Chapter 47 Ipv6 Access Control Lists (Acls)

1257
- Ipv6 Acls
  1257
- In this Chapter
  1257
- Using Ipv6 Acls as Input to Other Features
  1258
- Configuring an Ipv6 ACL
  1258
  - Example Configurations
    1259
  - Default and Implicit Ipv6 ACL Action
    1260
  - ACL Syntax
    1261
- Applying an Ipv6 ACL to an Interface
  1267
- Adding TCP Flags to an Ipv6 ACL Entry
  1267
- Adding a Comment to an Ipv6 ACL Entry
  1267
- Displaying Acls
  1269
Chapter 48 Configuring OSPF Version

1271
- In this Chapter
  1271
- OSPF Version 3
  1271
- Link State Advertisement Types for Ospfv3
  1272
  - Configuring Ospfv3
    1272
  - Assigning Ospfv3 Areas
    1273
  - Enabling Ospfv3
    1273
  - Configuring Virtual Links
    1275
  - Modifying Virtual Link Parameters
    1276
  - Redistributing Routes into Ospfv3
    1278
    
    Configuring External Route Summarization
    1281
    
    Filtering Ospfv3 Routes
    1282
  - Configuring Default Route Origination
    1285
  - Modifying Shortest Path First Timers
    1286
  - Modifying Administrative Distance
    1287
  - Configuring the Ospfv3 LSA Pacing Interval
    1288
  - Modifying Exit Overflow Interval
    1288
  - Modifying External Link State Database Limit
    1288
  - Modifying Ospfv3 Interface Defaults
    1289
  - Disabling or Reenabling Event Logging
    1290
- Displaying Ospfv3 Information
  1290
  - Displaying Ospfv3 Area Information
    1290
  - Displaying Ospfv3 Database Information
    1291
  - Displaying Ospfv3 Interface Information
    1296
  - Displaying Ospfv3 Memory Usage
    1299
  - Displaying Ospfv3 Neighbor Information
    1300
  - Displaying Routes Redistributed into Ospfv3
    1302
  - Displaying Ospfv3 Route Information
    1303
  - Displaying Ospfv3 SPF Information
    1305
  - Displaying Ipv6 OSPF Virtual Link Information
    1308
  - Displaying Ospfv3 Virtual Neighbor Information
    1308
Chapter 49 Configuring Ipv6 Multicast Features

1311
- Ipv6 PIM Sparse
  1311
  - In this Chapter
    1311
  - Configuring PIM Sparse
    1312
  - PIM Sparse Router Types
    1312
  - RP Paths and SPT Paths
    1312
  - Configuring Ipv6 PIM-SM on a Virtual Routing Interface
    1313
  - Ipv6 PIM-Sparse Mode
    1313
  - Passive Multicast Route Insertion (PMRI)
    1320
  - Displaying Pim Traffic Statistics
    1329
- Protocols(Mldv2)
  1330
  - MLD Version Distinctions
    1330
  - Enabling Mldv2
    1331
  - Enabling Source Specific Multicast
    1331
  - Setting the Maximum Response Time
    1332
  - Setting the Query Interval
    1332
  - Setting the Last Listener Query Count
    1332
  - Setting the Last Listener Query Interval
    1332
  - Setting the Robustness
    1333
  - Setting the Version
    1333
  - Specifying a Port Version
    1333
  - Specifying a Static Group
    1333
  - Setting the Interface MLD Version
    1334
  - Displaying MLD Information
    1334
  - Displaying MLD Group Information
    1334
  - Displaying MLD Definitions for an Interface
    1335
  - Displaying MLD Traffic
    1336
  - Clearing Ipv6 MLD Traffic
    1336
  - Embedded Rendezvous Point (RP)
    1337
Chapter 50 Configuring Ipv6 Routes

1339
- Configuring a Static Ipv6 Route
  1339
- In this Chapter
  1339
- Configuring a Ipv6 Multicast Route
  1341
Appendix A Using Syslog

1344
- Displaying Syslog Messages
  1344
- Configuring the Syslog Service
  1345
Appendix B Software Specifications

1373
- IEEE Compliance
  1373
- RFC Compliance
  1373
- RFC Compliance - Bgpv4
  1373
- RFC Compliance - IP Multicast
  1374
- RFC Compliance - IS-IS
  1374
- RFC Compliance - OSPF
  1374
- RFC Compliance - RIP
  1374
- RFC Compliance - General Protocols
  1375
- RFC Compliance - Ipv6 Core
  1376
- RFC Compliance - Management
  1376
- RFC Compliance - Ipv6 Management
  1377
- RFC Compliance - Ipv6 Multicast
  1377
- RFC Compliance - Ipv6 Routing
  1377
- RFC Compliance - Ipv6 Transitioning
  1377
- Internet Drafts
  1378
Appendix C NIAP-CCEVS Certification

1379
- Equipment
  1379
- Local User Password Changes
  1380
- Acls (IP)
  1383
  - Numbered ACL
    1383
  - Named ACL
    1384
  - Other ACL Commands
    1384
Appendix D Commands that Require a Reload

1383
Appendix E Index to the CLI Commands

1383
Chapter 45 BGP4

1385
- Fdp/Cdp
  1391
  - Metro Ring Protocol
    1394
  - Ipv6 Bgp4
    1395
- Ipv6 BGP4
  1396
- Ipv6 ACL
  1398
- Ipv6 Basic Connectivity
  1399
- Ipv6 Multicast
  1401
- Ipv6 Ripng
  1401
- Ipv6 Ospfv3
  1402
- Ipv6 Ospfv3
  1403
- Is-Is
  1405
- Metro Ring
  1406
- Mstp
  1407
- Multicast (IP)
  1408
- Multicast (L2)
  1409
- OSPF Version 4
  1410
- Port Parameters
  1411
- Port-Based Routing
  1412
- Quality of Service (Qos)
  1413
- Rate Limiting
  1414
- Rmon
  1416
- Rstp
  1416
  - X Port Security
    1417
- Security/Management
  1418
  - Access
    1419
  - Passwords
    1419
  - Privilege Level
    1419
    
    Radius
    1419
    
    SNMP Access
    1420
  - SSH Access
    1420
  - Tacacs/Tacacs
    1421
  - Telnet Access
    1421
  - TFTP Access
    1421
  - Dos Protection
    1422
  - User Account
    1422
  - Web Management Access
    1422
  - MAC Authentication
    1423
  - MAC Port Security
    1424
- Redundant Management Module
  1425
  - Snmp
    1427
- Sflow
  1428
- System Parameters
  1429
  - Syslog Messages
    1430
  - System Parameters
    1430
- Topology
  1431
- Udld
  1432
- Vlan
  1433
  - Vrrp/Vrrpe
    1434
  - Vsrp
    1435
- Acls (L2)
  1385

Dell Categories

Dell Brocade DCX-4S Manuals

Dell Brocade DCX-4S Configuration Manual (1436 pages)

Table of Contents

Chapter 1 Getting Started with the Command Line Interface

Chapter 2 Getting Familiar with the Bigiron RX Series Switch Management Applications

Chapter 3 Using a Redundant Management Module

Chapter 4 Securing Access to Management Functions

Chapter 5 Configuring Basic Parameters

Chapter 6 Configuring Interface Parameters

Chapter 7 Configuring IP

Chapter 8 Link Aggregation

Chapter 9 Configuring LLDP

Chapter 10 Configuring Uni-Directional Link Detection (UDLD)

Chapter 11 Vlans

Chapter 12 Configuring Spanning Tree Protocol

Chapter 13 Configuring Rapid Spanning Tree Protocol

Chapter 14 Metro Ring Protocol (MRP) Phase 1 and 2

Chapter 15 Virtual Switch Redundancy Protocol (VSRP)

Chapter 16 Topology Groups

Chapter 17 Configuring VRRP and VRRPE

Chapter 18 Configuring Quality of Service

Chapter 19 Configuring Traffic Reduction

Chapter 20 Layer 2 Acls

Chapter 21 Access Control List

Chapter 22 Policy-Based Routing

Chapter 24 Configuring RIP

Chapter 25 Configuring OSPF Version 2 (Ipv4)

Chapter 26 Configuring BGP4

Chapter 27 Configuring MBGP

Chapter 28 Configuring Secure Shell

Chapter 29 Configuring IS-IS (Ipv4)

Chapter 30 Bidirectional Forwarding Detection (BFD)

Chapter 31 Configuring Multi-Device Port Authentication

Chapter 32 Using the MAC Port Security Feature

Chapter 33 Configuring 802.1X Port Security

Chapter 34 Protecting against Denial of Service Attacks

Chapter 36 Securing SNMP Access

Chapter 37 Enabling the Foundry Discovery Protocol (FDP) and Reading Cisco

Chapter 38 Remote Network Monitoring

Chapter 39 Sflow

Chapter 40 Multiple Spanning Tree Protocol (MSTP) 802.1S

Chapter 43 Configuring Basic Ipv6 Connectivity

Chapter 42 Address

Chapter 47 Ipv6 Access Control Lists (Acls)

Chapter 48 Configuring OSPF Version

Chapter 49 Configuring Ipv6 Multicast Features

Chapter 50 Configuring Ipv6 Routes

Appendix A Using Syslog

Appendix B Software Specifications

Appendix C NIAP-CCEVS Certification

Appendix D Commands that Require a Reload

Appendix E Index to the CLI Commands

Chapter 45 BGP4

Related Products

Dell Categories