Dell PowerConnect B-RX User manual

53-1001810-01
January 31, 2010
53-1001810-01
*53-1001810-01*
BigIron RX
Configuration Guide
Supporting Multi-Service IronWare v02.7.02

ii BigIron RX Configuration Guide
53-1001810-01
Notes, Cautions, and Warnings
NOTE
A NOTE indicates important information that helps you make better use of your computer.
CAUTION
See the safety and regulatory information that shipped with your system. For additional regulatory
information, see the Regulatory Compliance Homepage on www.dell.com at the following location:
www.dell.com/regulatory_compliance.
CAUTION
A CAUTION indicates potential damage to hardware or loss of data if instructions are not followed.
DANGER
A DANGER indicates a potential for property damage, personal injury, or death.
____________________
Information in this document is subject to change without notice.
© 2009 Dell Inc. All rights reserved.
Reproduction of these materials in any manner whatsoever without the written permission of Dell Inc. is strictly forbidden.
Trademarks used in this text: Dell, the DELL logo, Inspiron, Dell Precision, Dimension, OptiPlex, Latitude, PowerEdge, PowerVault, PowerApp, Dell
OpenManage and the YOURS IS HERE logo are trademarks of Dell Inc.; Intel, Pentium, and Celeron are registered trademarks of Intel Corporation
in the U.S. and other countries; Microsoft, Windows,Windows Server,MS-DOS and Windows Vista are either trademarks or registered trademarks
of Microsoft Corporation in the United States and/or other countries.
Other trademarks and trade names may be used in this document to refer to either the entities claiming the marks and names or their products.
Dell Inc. disclaims any proprietary interest in trademarks and trade names other than its own.
Regulatory Model Codes: Brocade DCX-4S, Brocade DCX

BigIron RX Series Configuration Guide iii
53-1001810-01
Contents
About This Document
In this chapter . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xli
Audience . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xli
Supported hardware and software . . . . . . . . . . . . . . . . . . . . . . . . . . xli
List of supported features . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xlii
Unsupported features . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xliv
What’s new in this document. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . xlv
Enhancements and configuration notes in release 02.7.02 . . xlv
Enhancements and configuration notes in release 02.7.01 . xlvi
Enhancements and configuration notes in release 02.7.00 . xlvi
Enhancements and configuration notes in release 02.6.00 xlviii
Enhancements and configuration notes in patch release 02.5.00cl
Enhancements and configuration notes in patch release 02.5.00bli
Summary of enhancements and configuration notes in release
02.5.00. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . li
Summary of enhancements and configuration notes in patch release
02.4.00c. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .lii
Summary of enhancements and configuration notes in release
02.4.00. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . liii
Summary of enhancements in patch release 02.3.00a. . . . . . lvii
Summary of enhancements and configuration notes in release
02.3.00. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . lviii
Summary of enhancements and configuration notes in 02.2.01lxiii
Summary of enhancements in release 02.2.00g . . . . . . . . . . lxvii
Summary of enhancements and configuration notes in 02.2.00lxviii
Document conventions. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .lxix
Text formatting . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . lxix
Command syntax conventions . . . . . . . . . . . . . . . . . . . . . . . . . lxix
Notes, cautions, and danger notices . . . . . . . . . . . . . . . . . . . . lxix
Notice to the reader . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . lxx
Related publications . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . lxx
Getting technical help or reporting errors . . . . . . . . . . . . . . . . . . . . . lxx
Web access . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . lxxi
E-mail access . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . lxxi
Telephone access . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . lxxi
Chapter 1 Getting Started with the Command Line Interface
In this chapter . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1

iv BigIron RX Series Configuration Guide
53-1001810-01
Logging on through the CLI. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1
On-line help . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2
Command completion . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2
Scroll control. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 2
Line editing commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3
EXEC commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3
Global level . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4
CONFIG commands. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4
Accessing the CLI . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 7
Navigating among command levels . . . . . . . . . . . . . . . . . . . . . . . 8
CLI command structure . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8
Searching and filtering output . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 9
Allowable characters for LAG names . . . . . . . . . . . . . . . . . . . . . 14
Syntax shortcuts . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 14
Saving configuration changes. . . . . . . . . . . . . . . . . . . . . . . . . . . 14
Chapter 2 Getting Familiar With the BigIron RX Series Switch Management
Applications
In this chapter . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17
How to manage BigIron RX Series switch . . . . . . . . . . . . . . . . . . . . . 17
Logging on through the CLI. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17
On-line help . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 18
Command completion . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 18
Scroll control. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 18
Line editing commands . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 19
Searching and filtering output from CLI commands . . . . . . . . . 19
Allowable characters for LAG names . . . . . . . . . . . . . . . . . . . . . 23
Logging on through the Web Management Interface . . . . . . . . . . . . 24
Web Management Interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . 25
Logging on through IronView Network Manager . . . . . . . . . . . . . . . . 26
Chapter 3 Using a Redundant Management Module
In this chapter . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 27
How management module redundancy works . . . . . . . . . . . . . . . . . 27
Management module redundancy overview . . . . . . . . . . . . . . . 27
Management module switchover . . . . . . . . . . . . . . . . . . . . . . . . 28
Switchover implications. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 29
Management module redundancy configuration . . . . . . . . . . . . . . . 31
Changing the default active Chassis slot . . . . . . . . . . . . . . . . . . 31
Managing management module redundancy . . . . . . . . . . . . . . . . . . 31
File synchronization between the active and standby management
modules . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 32
Manually switching over to the standby management module 34
Rebooting the active and standby management modules . . . . 34

BigIron RX Series Configuration Guide v
53-1001810-01
Monitoring management module redundancy . . . . . . . . . . . . . . . . . 35
Determining management module status . . . . . . . . . . . . . . . . . 35
Displaying temperature information . . . . . . . . . . . . . . . . . . . . . . 36
Displaying switchover information . . . . . . . . . . . . . . . . . . . . . . . 36
Flash memory and PCMCIA flash card file management commands38
Management focus . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 39
Flash memory file system . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 39
PCMCIA flash card file system. . . . . . . . . . . . . . . . . . . . . . . . . . . 40
Wildcards . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 41
Formatting a flash card . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 42
Determining the current management focus. . . . . . . . . . . . . . . 42
Switching the management focus . . . . . . . . . . . . . . . . . . . . . . . 43
Displaying a directory of the files . . . . . . . . . . . . . . . . . . . . . . . . 43
Displaying the contents of a file . . . . . . . . . . . . . . . . . . . . . . . . .45
Displaying the hexadecimal output of a file . . . . . . . . . . . . . . . . 46
Creating a subdirectory . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 46
Removing a subdirectory. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 48
Renaming a file . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 49
Changing the read-write attribute of a file . . . . . . . . . . . . . . . . . 49
Deleting a file . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 50
Recovering (“undeleting”) a file . . . . . . . . . . . . . . . . . . . . . . . . . 51
Appending a file to another file. . . . . . . . . . . . . . . . . . . . . . . . . .52
Copying files using the copy command . . . . . . . . . . . . . . . . . . . 52
Copying files using the cp command . . . . . . . . . . . . . . . . . . . . . 57
Loading the software. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 57
Saving configuration changes. . . . . . . . . . . . . . . . . . . . . . . . . . . 59
File management messages. . . . . . . . . . . . . . . . . . . . . . . . . . . . 60
Chapter 4 Securing Access to Management Functions
In this chapter . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 61
Securing access methods . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 61
Restricting remote access to management functions . . . . . . . . . . .63
Using ACLs to restrict remote access . . . . . . . . . . . . . . . . . . . . 63
Restricting remote access to the device to specific IP addresses66
Specifying the maximum number of login attempts for Telnet access
68
Restricting remote access to the device to specific VLAN IDs . 68
Disabling specific access methods. . . . . . . . . . . . . . . . . . . . . . . 69
Setting passwords. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 71
Setting a Telnet password . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 71
Setting passwords for management privilege levels . . . . . . . . . 72
Recovering from a lost password . . . . . . . . . . . . . . . . . . . . . . . . 74
Displaying the SNMP community string . . . . . . . . . . . . . . . . . . . 74
Disabling password encryption . . . . . . . . . . . . . . . . . . . . . . . . . . 74
Specifying a minimum password length. . . . . . . . . . . . . . . . . . . 75
Setting up local user accounts. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 75
Configuring a local user account . . . . . . . . . . . . . . . . . . . . . . . . 76

vi BigIron RX Series Configuration Guide
53-1001810-01
Configuring SSL security for the Web Management Interface. . . . . 78
Enabling the SSL server on the device. . . . . . . . . . . . . . . . . . . . 78
Importing digital certificates and RSA private key files. . . . . . . 79
Generating an SSL certificate . . . . . . . . . . . . . . . . . . . . . . . . . . . 79
Configuring TACACS/TACACS+ security . . . . . . . . . . . . . . . . . . . . . . . 80
How TACACS+ differs from TACACS. . . . . . . . . . . . . . . . . . . . . . . 80
TACACS/TACACS+ authentication, authorization, and accounting80
TACACS/TACACS+ configuration considerations . . . . . . . . . . . . 84
Enabling SNMP to configure TACACS/TACACS . . . . . . . . . . . . . . 85
Identifying the TACACS/TACACS+ servers. . . . . . . . . . . . . . . . . . 85
Specifying different servers for individual AAA functions . . . . .86
Setting optional TACACS/TACACS+ parameters. . . . . . . . . . . . . 86
Configuring authentication-method lists for TACACS/TACACS+ 88
Configuring TACACS+ authorization . . . . . . . . . . . . . . . . . . . . . . 89
Configuring TACACS+ accounting . . . . . . . . . . . . . . . . . . . . . . . . 92
Configuring an interface as the source for all TACACS/TACACS+
packets . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 94
Displaying TACACS/TACACS+ statistics and configuration information
95
Configuring RADIUS security . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 96
RADIUS authentication, authorization, and accounting . . . . . .96
RADIUS configuration considerations. . . . . . . . . . . . . . . . . . . . . 99
RADIUS configuration procedure . . . . . . . . . . . . . . . . . . . . . . . . 99
Configuring Brocade-specific attributes on the RADIUS server100
Enabling SNMP to configure RADIUS . . . . . . . . . . . . . . . . . . . .101
Identifying the RADIUS server to the BigIron RX . . . . . . . . . . .101
Specifying different servers for individual AAA functions . . . .102
Setting RADIUS parameters . . . . . . . . . . . . . . . . . . . . . . . . . . .102
Configuring authentication-method lists for RADIUS. . . . . . . .103
Configuring RADIUS authorization . . . . . . . . . . . . . . . . . . . . . .104
Configuring RADIUS accounting . . . . . . . . . . . . . . . . . . . . . . . .106
Configuring an interface as the source for all RADIUS packets107
Displaying RADIUS configuration information . . . . . . . . . . . . .108
Configuring authentication-method lists . . . . . . . . . . . . . . . . . . . . .109
Configuration considerations for authentication-method lists110
Examples of authentication-method lists. . . . . . . . . . . . . . . . .111
Chapter 5 Configuring Basic Parameters
In this chapter . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .113
Entering system administration information . . . . . . . . . . . . . . . . . .114
Configuring Simple Network Management Protocol(SNMP) traps.114
Specifying an SNMP trap receiver . . . . . . . . . . . . . . . . . . . . . .115
Specifying a Single trap source. . . . . . . . . . . . . . . . . . . . . . . . .115
Setting the SNMP Trap holddown time. . . . . . . . . . . . . . . . . . .116
Disabling SNMP traps . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .116
Disabling Syslog messages and traps for CLI access . . . . . . .117
Configuring an interface as the source for all Telnet packets . . . .118
Cancelling an outbound Telnet session . . . . . . . . . . . . . . . . . .119

BigIron RX Series Configuration Guide vii
53-1001810-01
Configuring an interface as the source for all TFTP packets . . . . .119
Configuring an interface as the source for Syslog packets . . . . . .120
Specifying a Simple Network Time Protocol (SNTP) server . . . . . .121
Setting the system clock. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .122
New Daylight Saving Time (DST) . . . . . . . . . . . . . . . . . . . . . . . .124
Configuring CLI banners . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .124
Setting a message of the day banner. . . . . . . . . . . . . . . . . . . .124
Setting a privileged EXEC CLI level banner . . . . . . . . . . . . . . .125
Displaying a message on the console when an incoming Telnet
session is detected . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .125
Configuring terminal display. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .126
Checking the length of terminal displays . . . . . . . . . . . . . . . . .126
Enabling or disabling routing protocols . . . . . . . . . . . . . . . . . . . . . .126
Displaying and modifying system parameter default settings . . . .127
Enabling or disabling Layer 2 switching . . . . . . . . . . . . . . . . . . .129
CAM partitioning for the BigIron RX . . . . . . . . . . . . . . . . . . . . . . . . .130
Re-distributing CAM allocations . . . . . . . . . . . . . . . . . . . . . . . .130
Nexthop table. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .131
Changing the MAC age time . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .132
Configuring static ARP entries . . . . . . . . . . . . . . . . . . . . . . . . . . . . .132
Chapter 6 Configuring Interface Parameters
In this chapter . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .133
Assigning a port name . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .133
Assigning an IP address to a port . . . . . . . . . . . . . . . . . . . . . . . . . .134
Speed/Duplex negotiation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .134
Disabling or re-enabling a port . . . . . . . . . . . . . . . . . . . . . . . . . . . .135
Changing the default Gigabit negotiation mode . . . . . . . . . . . . . . .136
Changing the negotiation mode . . . . . . . . . . . . . . . . . . . . . . . .136
Disabling or re-enabling flow control . . . . . . . . . . . . . . . . . . . . . . . .136
Specifying threshold values for flow control . . . . . . . . . . . . . .137
Locking a port to restrict addresses . . . . . . . . . . . . . . . . . . . . . . . .137
Wait for all cards feature . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .138
Port transition hold timer . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .138
Port flap dampening . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .138
Modifying port priority (QoS). . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .140
Assigning a mirror port and monitor ports . . . . . . . . . . . . . . . . . . .140
Configuration guidelines for monitoring traffic . . . . . . . . . . . . 141
Configuring port mirroring and monitoring. . . . . . . . . . . . . . . . 141
Monitoring an individual trunk port . . . . . . . . . . . . . . . . . . . . . . . . .142

viii BigIron RX Series Configuration Guide
53-1001810-01
Mirror ports for Policy-Based Routing (PBR) traffic. . . . . . . . . . . . .143
About hardware-based PBR . . . . . . . . . . . . . . . . . . . . . . . . . . .143
Configuring mirror ports for PBR traffic . . . . . . . . . . . . . . . . . .143
Displaying mirror and monitor port configuration. . . . . . . . . . . . . .144
Enabling WAN PHY mode support . . . . . . . . . . . . . . . . . . . . . . . . . .144
Chapter 7 Configuring IP
In this chapter . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .145
Overview of configuring IP . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .145
The IP packet flow . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .146
ARP cache table . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 147
Static ARP table . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 147
IP Route table. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .148
IP forwarding cache . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .149
Basic IP parameters and defaults . . . . . . . . . . . . . . . . . . . . . . . . . .149
When parameter changes take effect . . . . . . . . . . . . . . . . . . .149
IP global parameters . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .150
IP interface parameters. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .152
Configuring IP parameters . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .153
Configuring IP addresses. . . . . . . . . . . . . . . . . . . . . . . . . . . . . .154
Changing the network mask display to prefix format . . . . . . .156
Configuring the default gateway . . . . . . . . . . . . . . . . . . . . . . . .157
GRE IP tunnel . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .157
IPv6 over IPv4 tunnels in hardware . . . . . . . . . . . . . . . . . . . . .162
Configuring Domain Name Server (DNS) resolver. . . . . . . . . .166
Adding host names to the DNS cache table . . . . . . . . . . . . . .167
Configuring packet parameters . . . . . . . . . . . . . . . . . . . . . . . . . . . . 171
Changing the encapsulation type . . . . . . . . . . . . . . . . . . . . . . . 171
Setting maximum frame size per PPCR . . . . . . . . . . . . . . . . . .172
Changing the MTU . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .173
Changing the router ID . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 174
Specifying a single source interface for Telnet, TACACS/TACACS+,
or RADIUS packets . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .175
Configuring an interface as the source for Syslog packets . . . . . .177
IP fragmentation protection . . . . . . . . . . . . . . . . . . . . . . . . . . .178
IP option attack protection . . . . . . . . . . . . . . . . . . . . . . . . . . . .178
IP receive access list . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .178
Configuring ARP parameters . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .179
How ARP works. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .179
Rate limiting ARP packets . . . . . . . . . . . . . . . . . . . . . . . . . . . . .180
Applying a rate limit to ARP packets on an interface. . . . . . . .181
Clearing the rate limit for ARP packets. . . . . . . . . . . . . . . . . . .182
Changing the ARP aging period. . . . . . . . . . . . . . . . . . . . . . . . .182
Creating a floating static ARP entry . . . . . . . . . . . . . . . . . . . . .184
Static route ARP validation check. . . . . . . . . . . . . . . . . . . . . . .185

BigIron RX Series Configuration Guide ix
53-1001810-01
Configuring forwarding parameters . . . . . . . . . . . . . . . . . . . . . . . . .186
Disabling ICMP messages . . . . . . . . . . . . . . . . . . . . . . . . . . . . .188
Disabling ICMP redirect messages . . . . . . . . . . . . . . . . . . . . . .190
Configuring static routes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .191
Static route tagging . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .196
Configuring a default network route . . . . . . . . . . . . . . . . . . . . .200
Configuring IP load sharing . . . . . . . . . . . . . . . . . . . . . . . . . . . .201
Default route ECMP . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .204
IP receive access list . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .205
Configuring IRDP . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .206
Configuring UDP broadcast and IP helper parameters . . . . . .208
Configuring BootP/DHCP forwarding parameters . . . . . . . . . .211
Displaying IP information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .213
Displaying IP interface information. . . . . . . . . . . . . . . . . . . . . .215
Displaying interface name in Syslog. . . . . . . . . . . . . . . . . . . . .216
Displaying ARP entries. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 217
Displaying the forwarding cache. . . . . . . . . . . . . . . . . . . . . . . .219
Displaying the IP route table . . . . . . . . . . . . . . . . . . . . . . . . . . .220
Clearing IP routes. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .223
Displaying IP traffic statistics . . . . . . . . . . . . . . . . . . . . . . . . . .223
Displaying TCP traffic statistics. . . . . . . . . . . . . . . . . . . . . . . . .226
Chapter 8 Link Aggregation
In this chapter . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .229
Link aggregation overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .229
LAG formation rules . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .230
LAG load sharing . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .232
Hash based load sharing. . . . . . . . . . . . . . . . . . . . . . . . . . . . . .232
Migration from a pre-02.6.00 trunk or LACP configuration . . . . . .233
Configuration of a LAG . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .234
Creating a Link Aggregation Group (LAG) . . . . . . . . . . . . . . . .235
Deploying a LAG . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .237
Commands available under LAG once it is deployed . . . . . . .238
Configuring ACL-based mirroring. . . . . . . . . . . . . . . . . . . . . . . .238
Disabling ports within a LAG . . . . . . . . . . . . . . . . . . . . . . . . . . .239
Enabling ports within a LAG . . . . . . . . . . . . . . . . . . . . . . . . . . .239
Monitoring an individual LAG port . . . . . . . . . . . . . . . . . . . . . .239
Assigning a name to a port within a LAG . . . . . . . . . . . . . . . . .240
Enabling sFlow forwarding on a port within a LAG. . . . . . . . . .240
Setting the sFlow sampling rate for a port within a LAG . . . . .240
Displaying LAG information . . . . . . . . . . . . . . . . . . . . . . . . . . . . 241
Displaying LAG statistics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .245
Chapter 9 Configuring LLDP
In this chapter . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 247
Terms used in this chapter . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 247

xBigIron RX Series Configuration Guide
53-1001810-01
LLDP overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .248
Benefits of LLDP . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .248
General operating principles . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .249
Operating modes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .249
LLDP packets . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .250
TLV support. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .250
MIB support. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .253
Syslog messages. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .253
Configuring LLDP. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .253
Configuration notes and considerations . . . . . . . . . . . . . . . . .254
Enabling and disabling LLDP. . . . . . . . . . . . . . . . . . . . . . . . . . .254
Changing a port’s LLDP operating mode . . . . . . . . . . . . . . . . .255
Specifying the maximum number of LLDP neighbors . . . . . . .256
Enabling LLDP SNMP notifications and Syslog messages . . .257
Specifying the minimum time between SNMP traps and Syslog
messages . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .257
Changing the minimum time between LLDP transmissions . .258
Changing the interval between regular LLDP transmissions .258
Changing the holdtime multiplier for transmit TTL . . . . . . . . .259
Changing the minimum time between port reinitializations. .259
LLDP TLVs advertised by the Brocade device . . . . . . . . . . . . .260
Displaying LLDP statistics and configuration settings. . . . . . .266
LLDP configuration summary . . . . . . . . . . . . . . . . . . . . . . . . . .266
LLDP statistics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .267
LLDP neighbors . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .268
LLDP neighbors detail . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .269
LLDP configuration details . . . . . . . . . . . . . . . . . . . . . . . . . . . . 271
Resetting LLDP statistics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .272
Chapter 10 Configuring Uni-Directional Link Detection (UDLD)
In this chapter . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .273
Configuration considerations . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 274
Configuring UDLD . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 274
Changing the keepalive interval . . . . . . . . . . . . . . . . . . . . . . . . 274
Changing the keepalive retries . . . . . . . . . . . . . . . . . . . . . . . . .275
Displaying UDLD information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .275
Displaying information for all ports. . . . . . . . . . . . . . . . . . . . . .275
Displaying link-keepalive information . . . . . . . . . . . . . . . . . . . .275
Displaying information for a single port . . . . . . . . . . . . . . . . . .277
Clearing UDLD statistics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .278
Chapter 11 VLANs
In this chapter . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .279
Overview of Virtual Local Area Networks (VLANs). . . . . . . . . . . . . .279
Tagged, untagged, and dual-mode ports . . . . . . . . . . . . . . . . .279
Protocol-based VLANs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .281

BigIron RX Series Configuration Guide xi
53-1001810-01
VLAN configuration rules . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .282
VLAN ID range . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .282
Tagged VLANs. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .282
VLAN hierarchy . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .282
Multiple VLAN membership rules . . . . . . . . . . . . . . . . . . . . . . .283
Layer 2 control protocols on VLANs . . . . . . . . . . . . . . . . . . . . .283
Configuring port-based VLANs . . . . . . . . . . . . . . . . . . . . . . . . . . . . .283
VLAN byte accounting . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .284
Strictly or explicitly tagging a port . . . . . . . . . . . . . . . . . . . . . . .286
Assigning or changing a VLAN priority . . . . . . . . . . . . . . . . . . .286
Assigning a different ID to the default VLAN . . . . . . . . . . . . . .287
Configuring protocol-based VLANs. . . . . . . . . . . . . . . . . . . . . . . . . .287
Configuring an MSTP instance . . . . . . . . . . . . . . . . . . . . . . . . .288
Configuring virtual routing interfaces . . . . . . . . . . . . . . . . . . . . . . .288
Bridging and routing the same protocol simultaneously on the same
device . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .289
Integrated Switch Routing (ISR) . . . . . . . . . . . . . . . . . . . . . . . .290
VLAN groups . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .291
Configuring a VLAN group . . . . . . . . . . . . . . . . . . . . . . . . . . . . .291
Configuring super aggregated VLANs . . . . . . . . . . . . . . . . . . . . . . .293
Configuring aggregated VLANs . . . . . . . . . . . . . . . . . . . . . . . . .295
Complete CLI examples . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .296
Configuring 802.1q-in-q tagging. . . . . . . . . . . . . . . . . . . . . . . . . . . .299
Configuration rules . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .300
Enabling 802.1Q-in-Q tagging . . . . . . . . . . . . . . . . . . . . . . . . . .300
Example configuration. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .302
Configuring 802.1q tag-type translation . . . . . . . . . . . . . . . . . . . . .302
Configuration rules . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .304
Enabling 802.1q tag-type translation . . . . . . . . . . . . . . . . . . . .305
Private VLANs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .306
Implementation notes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .307
Configuration notes . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .307
Configuring a private VLAN . . . . . . . . . . . . . . . . . . . . . . . . . . . .308
Enabling broadcast, multicast or unknown unicast traffic to the
private VLAN . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 310
CLI example for Figure 30 . . . . . . . . . . . . . . . . . . . . . . . . . . . . .311
Other VLAN features . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .311
Allocating memory for more VLANs or virtual routing interfaces311
Hardware flooding for Layer 2 multicast and broadcast packets311
Unknown unicast flooding on VLAN ports . . . . . . . . . . . . . . . .312
Flow based MAC learning . . . . . . . . . . . . . . . . . . . . . . . . . . . . .313
Configuring uplink ports within a port-based VLAN. . . . . . . . .313
Configuring control protocols in VLANs . . . . . . . . . . . . . . . . . .314
Other configuration options . . . . . . . . . . . . . . . . . . . . . . . . . . . 314

xii BigIron RX Series Configuration Guide
53-1001810-01
Displaying VLAN information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 314
Displaying VLAN information . . . . . . . . . . . . . . . . . . . . . . . . . . . 314
Displaying VLAN information for specific ports . . . . . . . . . . . .315
Displaying VLAN status and port types. . . . . . . . . . . . . . . . . . . 316
Displaying VLAN group information . . . . . . . . . . . . . . . . . . . . . 317
Transparent firewall mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 317
Enabling a transparent firewall . . . . . . . . . . . . . . . . . . . . . . . .317
Chapter 12 Configuring Spanning Tree Protocol
In this chapter . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .319
IEEE 802.1D Spanning Tree Protocol (STP) . . . . . . . . . . . . . . . . . .319
Enabling or disabling STP . . . . . . . . . . . . . . . . . . . . . . . . . . . . .319
Default STP bridge and port parameters . . . . . . . . . . . . . . . . .321
Changing STP bridge parameters . . . . . . . . . . . . . . . . . . . . . . .322
Changing STP port parameters. . . . . . . . . . . . . . . . . . . . . . . . .322
STP root guard . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .322
Spanning Tree Protocol (STP) BPDU guard. . . . . . . . . . . . . . . .324
Displaying STP information . . . . . . . . . . . . . . . . . . . . . . . . . . . .324
IEEE Single Spanning Tree (SSTP) . . . . . . . . . . . . . . . . . . . . . . . . . .330
SSTP defaults . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .330
Enabling SSTP . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .331
Displaying SSTP information . . . . . . . . . . . . . . . . . . . . . . . . . . .332
PVST/PVST+ compatibility . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .332
Overview of PVST and PVST+ . . . . . . . . . . . . . . . . . . . . . . . . . .333
VLAN tags and dual mode . . . . . . . . . . . . . . . . . . . . . . . . . . . . .333
Enabling PVST+ support . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .334
Displaying PVST+ support information. . . . . . . . . . . . . . . . . . .334
Configuration examples. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .335
SuperSpan™ . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .337
Customer ID . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .338
BPDU forwarding . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .338
Configuring SuperSpan . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .343
Chapter 13 Configuring Rapid Spanning Tree Protocol
In this chapter . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .347
Overview of Rapid Spanning Tree Protocol . . . . . . . . . . . . . . . . . . .347
Bridges and bridge port roles . . . . . . . . . . . . . . . . . . . . . . . . . .347
Assignment of port roles . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .348
Ports on Switch 1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .349
Ports on Switch 2 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .349
Ports on Switch 3 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .349
Ports Switch 4 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .350
Edge ports and edge port roles . . . . . . . . . . . . . . . . . . . . . . . . . . . .350
Point-to-point ports . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .351
Bridge port states . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .351
Edge port and non-edge port states . . . . . . . . . . . . . . . . . . . . . . . .352

BigIron RX Series Configuration Guide xiii
53-1001810-01
Changes to port roles and states. . . . . . . . . . . . . . . . . . . . . . . . . . .352
State machines . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .352
Handshake mechanisms. . . . . . . . . . . . . . . . . . . . . . . . . . . . . .353
Convergence in a simple topology . . . . . . . . . . . . . . . . . . . . . . . . . .363
Convergence at start up . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .364
Convergence after a link failure . . . . . . . . . . . . . . . . . . . . . . . .366
Convergence at link restoration . . . . . . . . . . . . . . . . . . . . . . . .367
Convergence in a complex RSTP topology. . . . . . . . . . . . . . . . . . . .369
Propagation of topology change . . . . . . . . . . . . . . . . . . . . . . . . 371
Compatibility of RSTP with 802.1D . . . . . . . . . . . . . . . . . . . . . . . . . 374
Configuring RSTP parameters . . . . . . . . . . . . . . . . . . . . . . . . . . . . .375
Enabling or disabling RSTP in a port-based VLAN . . . . . . . . . .375
Enabling or disabling RSTP on a single spanning tree . . . . . . 376
Disabling or enabling RSTP on a port . . . . . . . . . . . . . . . . . . . . 376
Changing RSTP bridge parameters. . . . . . . . . . . . . . . . . . . . . . 376
Changing port parameters . . . . . . . . . . . . . . . . . . . . . . . . . . . .377
Fast port span . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .378
Fast uplink span. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .381
Displaying RSTP information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .383
Chapter 14 Metro Ring Protocol (MRP) Phase 1 and 2
In this chapter . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .387
Metro Ring Protocol (MRP) phase 1. . . . . . . . . . . . . . . . . . . . . . . . .387
MRP rings without shared interfaces . . . . . . . . . . . . . . . . . . . . . . .389
Ring initialization. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .390
How ring breaks are detected and healed . . . . . . . . . . . . . . . . . . .393
Master VLANs and customer VLANs in a topology group . . . . . . . .394
Configuring MRP . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .395
Adding an MRP ring to a VLAN . . . . . . . . . . . . . . . . . . . . . . . . .396
Changing the hello and preforwarding times. . . . . . . . . . . . . .397
MRP phase 2 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .397
Ring initialization for shared interfaces. . . . . . . . . . . . . . . . . . . . . .399
How ring breaks Are detected and healed between shared interfaces
400
Selection of master node . . . . . . . . . . . . . . . . . . . . . . . . . . . . .400
RHP processing in rings with shared interfaces . . . . . . . . . . .401
Normal flow . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .401
Flow when a link breaks . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .402
Configuring MRP with shared interfaces . . . . . . . . . . . . . . . . .403
Using MRP diagnostics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .404
Enabling MRP diagnostics. . . . . . . . . . . . . . . . . . . . . . . . . . . . .404
Displaying MRP diagnostics . . . . . . . . . . . . . . . . . . . . . . . . . . .404
Displaying MRP information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .405
Displaying topology group information . . . . . . . . . . . . . . . . . . .405
Displaying ring information . . . . . . . . . . . . . . . . . . . . . . . . . . . .406

xiv BigIron RX Series Configuration Guide
53-1001810-01
MRP CLI example . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .407
Commands on switch A (master node). . . . . . . . . . . . . . . . . . .408
Commands on switch B. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .408
Commands on switch C . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .409
Commands on switch D. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .409
Chapter 15 Virtual Switch Redundancy Protocol (VSRP)
In this chapter . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 411
Overview of Virtual Switch Redundancy Protocol (VSRP) . . . . . . . .411
Layer 2 and Layer 3 redundancy . . . . . . . . . . . . . . . . . . . . . . . 413
Master election and failover . . . . . . . . . . . . . . . . . . . . . . . . . . . 413
Configuring basic VSRP parameters . . . . . . . . . . . . . . . . . . . . . . . . 418
Enabling Layer 3 VSRP . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 419
Configuring optional VSRP parameters . . . . . . . . . . . . . . . . . . . . . . 419
Disabling VSRP on a VRID . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 419
Configuring authentication . . . . . . . . . . . . . . . . . . . . . . . . . . . . 419
Configuring a VRID IP address . . . . . . . . . . . . . . . . . . . . . . . . .420
VSRP fast start . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .421
Changing the backup priority . . . . . . . . . . . . . . . . . . . . . . . . . .422
Saving the timer values received from the master . . . . . . . . .422
VSRP slow start . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .423
Changing the Time-To-Live (TTL) . . . . . . . . . . . . . . . . . . . . . . . .423
Changing the hello interval . . . . . . . . . . . . . . . . . . . . . . . . . . . .424
Changing the dead interval . . . . . . . . . . . . . . . . . . . . . . . . . . . .424
Changing the backup hello state and interval . . . . . . . . . . . . .424
Changing the hold-down interval . . . . . . . . . . . . . . . . . . . . . . .425
Changing the default track priority . . . . . . . . . . . . . . . . . . . . . .425
Specifying a track port. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .426
Disabling or re-enabling backup pre-emption . . . . . . . . . . . . .426
Port transition hold timer . . . . . . . . . . . . . . . . . . . . . . . . . . . . .426
Clearing VSRP information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .427
VSRP and MRP signaling . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .427
Displaying VSRP information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .429
Displaying VRID information . . . . . . . . . . . . . . . . . . . . . . . . . . .429
Displaying a summary of VSRP information. . . . . . . . . . . . . . .431
Displaying VSRP packet statistics for VSRP . . . . . . . . . . . . . . .432
Displaying the active interfaces for a VRID . . . . . . . . . . . . . . .433
Chapter 16 Topology Groups
In this chapter . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .435
Topology overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .435
Master VLAN and member VLANs . . . . . . . . . . . . . . . . . . . . . . . . . .435
Master VLANs and customer VLANs in MRP . . . . . . . . . . . . . . . . . .436
Control ports and free ports. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .436
Configuration considerations . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .436

BigIron RX Series Configuration Guide xv
53-1001810-01
Configuring a topology group . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .437
Displaying topology group information . . . . . . . . . . . . . . . . . . . . . .438
Displaying topology group information . . . . . . . . . . . . . . . . . . .438
Chapter 17 Configuring VRRP and VRRPE
In this chapter . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .439
Overview of VRRP . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .439
Standard VRRP. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .440
Brocade enhancements of VRRP . . . . . . . . . . . . . . . . . . . . . . .442
Overview of VRRPE . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .444
VRRP and VRRPE parameters . . . . . . . . . . . . . . . . . . . . . . . . . . . . .446
Configuring parameters specific to VRRP . . . . . . . . . . . . . . . . . . . .448
Configuring the owner . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .448
Configuring basic VRRP parameters. . . . . . . . . . . . . . . . . . . . .449
Configuring the owner . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .449
Configuring a backup. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .449
Configuration rules for VRRP. . . . . . . . . . . . . . . . . . . . . . . . . . .449
Configuring parameters specific to VRRPE . . . . . . . . . . . . . . . . . . .450
Configuration rules for VRRPE . . . . . . . . . . . . . . . . . . . . . . . . .450
Configuring additional VRRP and VRRPE parameters . . . . . . . . . .451
Authentication type . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .451
Suppression of RIP advertisements on backup routers for the backup
up interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .452
Hello interval . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .452
Dead interval . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .453
Backup hello message state and interval . . . . . . . . . . . . . . . .453
Track port . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .453
Track priority. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .454
Backup preempt. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .454
Master router abdication and reinstatement. . . . . . . . . . . . . .455
Displaying VRRP and VRRPE information . . . . . . . . . . . . . . . . . . . .456
Displaying summary information . . . . . . . . . . . . . . . . . . . . . . .456
Displaying detailed information . . . . . . . . . . . . . . . . . . . . . . . .457
Displaying statistics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .460
Clearing VRRP or VRRPE statistics . . . . . . . . . . . . . . . . . . . . . .461
Configuration examples . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .461
VRRP example . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .462
VRRPE example . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .463
Chapter 18 Configuring Quality of Service
In this chapter . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .465
Overview of Quality of Service (QoS) . . . . . . . . . . . . . . . . . . . . . . . .465
Classification . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .465
Processing of classified traffic . . . . . . . . . . . . . . . . . . . . . . . . .466

xvi BigIron RX Series Configuration Guide
53-1001810-01
Marking . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .468
Configuring DSCP classification by interface. . . . . . . . . . . . . .468
Configuring port, MAC, and VLAN-based classification . . . . . .469
Configuring ToS-based QoS . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .470
Enabling ToS-based QoS . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .470
Specifying trust level . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .470
Enabling marking . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 471
Configuring the QoS mappings. . . . . . . . . . . . . . . . . . . . . . . . . . . . . 471
Changing the CoS –> DSCP mappings. . . . . . . . . . . . . . . . . . . 471
Changing the DSCP –> DSCP mappings . . . . . . . . . . . . . . . . .472
Changing the DSCP –> internal forwarding priority mappings472
Changing the CoS –> internal forwarding priority mappings .473
Displaying QoS configuration information . . . . . . . . . . . . . . . . . . . . 474
Determining packet drop priority using WRED . . . . . . . . . . . . . . . .475
How WRED Operates . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 476
Calculating avg-q-size . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 476
Calculating packets that are dropped . . . . . . . . . . . . . . . . . . . 477
Using WRED with rate limiting. . . . . . . . . . . . . . . . . . . . . . . . . . 477
Configuring packet drop priority using WRED . . . . . . . . . . . . . . . . . 477
Enabling WRED . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 477
Setting the averaging-weight (Wq) parameter . . . . . . . . . . . . .478
Displaying the WRED configuration . . . . . . . . . . . . . . . . . . . . .481
Scheduling traffic for forwarding . . . . . . . . . . . . . . . . . . . . . . . . . . .482
Configuring traffic scheduling . . . . . . . . . . . . . . . . . . . . . . . . . .482
Configuring multicast traffic engineering . . . . . . . . . . . . . . . . . . . .486
Displaying the multicast traffic engineering configuration . . .487
QoS for the oversubscribed 16 x 10GE modules . . . . . . . . . . . . . .488
Aggregation NP QOS modes . . . . . . . . . . . . . . . . . . . . . . . . . . .488
Port group assignments . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .488
Setting the server and storage modes . . . . . . . . . . . . . . . . . . .489
Switching between server and storage modes . . . . . . . . . . . .489
Qos profiles. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .489
Setting the group port weights . . . . . . . . . . . . . . . . . . . . . . . . .490
Calculating the values for WFQ storage mode traffic scheduling490
Egress port shaping. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .491
Mirroring ports . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .491
Supported ACLs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .492
Configuring QoS for the 16 x 10G module . . . . . . . . . . . . . . . .492
Chapter 19 Configuring Traffic Reduction
In this chapter . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .495
Traffic policing on the BigIron RX Series . . . . . . . . . . . . . . . . . . . . .495
Traffic reduction parameters and algorithm . . . . . . . . . . . . . . . . . .496
Requested rate. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .496
Maximum burst . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .496
Actual rate . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .496
Configuration considerations . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .497

BigIron RX Series Configuration Guide xvii
53-1001810-01
Configuring rate limiting policies . . . . . . . . . . . . . . . . . . . . . . . . . . .498
Configuring a port-based rate limiting policy . . . . . . . . . . . . . .498
Configuring a port-and-priority-based rate limiting policy . . . .499
Configuring a port-and-VLAN-based rate limiting policy . . . . .499
Configuring a VLAN-group-based rate limiting policy. . . . . . . .500
Configuring a port-and-IPv6 ACL-based traffic reduction . . . .502
NP based multicast, broadcast, and unknown-unicast rate limiting503
Displaying traffic reduction. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .504
Chapter 20 Layer 2 ACLs
In this chapter . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .505
Filtering based on ethertype . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .505
Configuration rules and notes . . . . . . . . . . . . . . . . . . . . . . . . . . . . .505
Configuring Layer 2 ACLs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .506
Creating a Layer 2 ACL table . . . . . . . . . . . . . . . . . . . . . . . . . . .506
Example Layer 2 ACL clauses . . . . . . . . . . . . . . . . . . . . . . . . . .507
Inserting and deleting Layer 2 ACL clauses . . . . . . . . . . . . . . .508
Binding a Layer 2 ACL table to an interface. . . . . . . . . . . . . . .508
Increasing the maximum number of clauses per Layer 2 ACL table
508
Viewing Layer 2 ACLs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .508
Example of Layer 2 ACL deny by MAC address . . . . . . . . . . . .509
Chapter 21 Access Control List
In this chapter . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 511
How the device processes ACLs. . . . . . . . . . . . . . . . . . . . . . . . . . . .512
Disabling or re-enabling Access Control Lists (ACLs) . . . . . . . . . . .513
Default ACL action. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .513
Types of IP ACLs. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .513
ACL IDs and entries. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .513
Enabling support for additional ACL statements . . . . . . . . . . . . . . 514
ACL-based inbound mirroring . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 514
Considerations when configuring ACL-based inbound mirroring514
Configuring ACL-based inbound mirroring . . . . . . . . . . . . . . . .515
Creating an ACL with a mirroring clause . . . . . . . . . . . . . . . . .515
Applying the ACL to an interface . . . . . . . . . . . . . . . . . . . . . . . .515
Specifying the destination mirror port . . . . . . . . . . . . . . . . . . .515
Configuring ACL-based mirroring for ACLs bound to virtual interfaces
517
Configuring numbered and named ACLs. . . . . . . . . . . . . . . . . . . . .518
Configuring standard numbered ACLs . . . . . . . . . . . . . . . . . . .518
Configuring extended numbered ACLs . . . . . . . . . . . . . . . . . . .520
Configuring standard or extended named ACLs . . . . . . . . . . .529
Configuring super ACLs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .531

xviii BigIron RX Series Configuration Guide
53-1001810-01
Displaying ACL definitions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .533
Displaying of TCP/UDP numbers in ACLs . . . . . . . . . . . . . . . . .534
ACL logging . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .544
Enabling the new logging method. . . . . . . . . . . . . . . . . . . . . . .545
Specifying the wait time . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .545
Modifying ACLs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .545
Adding or deleting a comment . . . . . . . . . . . . . . . . . . . . . . . . .547
Deleting ACL entries . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .549
From numbered ACLs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .549
From named ACLs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .550
Applying ACLs to interfaces . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .551
Reapplying modified ACLs. . . . . . . . . . . . . . . . . . . . . . . . . . . . .551
ACL automatic rebind . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .551
Manually setting the ACL rebind . . . . . . . . . . . . . . . . . . . . . . . .551
Applying ACLs to a virtual routing interface . . . . . . . . . . . . . . .551
Configuring the Layer 4 session log timer . . . . . . . . . . . . . . . .552
Displaying ACL log entries . . . . . . . . . . . . . . . . . . . . . . . . . . . . .552
QoS options for IP ACLs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .553
Enabling ACL duplication check . . . . . . . . . . . . . . . . . . . . . . . . . . . .554
ACL accounting . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .554
Displaying accounting statistics for all ACLs . . . . . . . . . . . . . .555
Displaying statistics for an interface . . . . . . . . . . . . . . . . . . . .555
Clearing the ACL statistics. . . . . . . . . . . . . . . . . . . . . . . . . . . . .556
Enabling ACL filtering of fragmented or non-fragmented packets.557
ACL filtering for traffic switched within a virtual routing interface.558
ICMP filtering for extended ACLs . . . . . . . . . . . . . . . . . . . . . . . . . . .558
Troubleshooting ACLs . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .560
Chapter 22 Policy-Based Routing
In this chapter . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .563
Policy-Based Routing (PBR) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .563
Configuration considerations . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .563
Configuring a PBR policy. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .564
Configure the ACLs. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .564
Configure the route map . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .566
Enabling PBR . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .566
Configuration examples . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .567
Basic example . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .567
Setting the next hop. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .568
Setting the output interface to the null interface . . . . . . . . . .569
Trunk formation . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .569
Chapter 23 Configuring IP Multicast Protocols
In this chapter . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 571

BigIron RX Series Configuration Guide xix
53-1001810-01
Overview of IP multicasting . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 571
Multicast terms . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .572
Changing global IP multicast parameters . . . . . . . . . . . . . . . . . . . .572
Defining the maximum number of DVMRP cache entries. . . .573
Defining the maximum number of PIM cache entries. . . . . . .573
IP multicast boundaries . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .573
Configuring multicast boundaries. . . . . . . . . . . . . . . . . . . . . . . 574
Displaying multicast boundaries. . . . . . . . . . . . . . . . . . . . . . . . 574
Passive Multicast Route Insertion (PMRI) . . . . . . . . . . . . . . . . . . . . 574
Configuring PMRI . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .575
Displaying hardware-drop . . . . . . . . . . . . . . . . . . . . . . . . . . . . .575
Changing IGMP V1 and V2 parameters. . . . . . . . . . . . . . . . . . . . . .575
Modifying IGMP (V1 and V2) query interval period . . . . . . . . . 576
Modifying IGMP (V1 and V2) membership time. . . . . . . . . . . . 576
Modifying IGMP (V1 and V2) maximum response time. . . . . . 576
Adding an interface to a multicast group . . . . . . . . . . . . . . . . . . . .577
IGMP v3 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .577
Default IGMP version. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .579
Compatibility with IGMP V1 and V2 . . . . . . . . . . . . . . . . . . . . .579
Enabling the IGMP version per interface setting . . . . . . . . . . .579
Enabling the IGMP version on a physical port within a virtual routing
interface . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .580
Setting the query interval . . . . . . . . . . . . . . . . . . . . . . . . . . . . .581
Setting the group membership time. . . . . . . . . . . . . . . . . . . . .582
Setting the maximum response time . . . . . . . . . . . . . . . . . . . .582
Displaying IGMPv3 information. . . . . . . . . . . . . . . . . . . . . . . . .582
Clearing IGMP statistics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .586
IGMP V3 and source specific multicast protocols . . . . . . . . . .586
Configuring a static multicast route. . . . . . . . . . . . . . . . . . . . . . . . .586
Next hop validation check . . . . . . . . . . . . . . . . . . . . . . . . . . . . .588
PIM dense . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .588
Initiating PIM multicasts on a network . . . . . . . . . . . . . . . . . . .589
Pruning a multicast tree . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .589
Grafts to a multicast tree . . . . . . . . . . . . . . . . . . . . . . . . . . . . .591
PIM DM versions . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .591
Configuring PIM DM . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .592
Failover time in a multi-path topology . . . . . . . . . . . . . . . . . . .596
Modifying the TTL. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .596
PIM Sparse . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .596
PIM Sparse router types . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .597
RP paths and SPT paths . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .598
Configuring PIM Sparse. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .598
Anycast RP . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .603
Route selection precedence for multicast . . . . . . . . . . . . . . . .607
Changing the Shortest Path Tree (SPT) threshold . . . . . . . . . .609
Displaying PIM Sparse configuration information and statistics610

xx BigIron RX Series Configuration Guide
53-1001810-01
PIM-SSMv4 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .620
Enabling SSM . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .621
Configuring Multicast Source Discovery Protocol (MSDP) . . . . . . .621
Peer Reverse Path Forwarding (RPF) flooding . . . . . . . . . . . . .623
Source active caching . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .623
Configuring MSDP . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .624
Enabling MSDP. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .624
Configuring MSDP peers . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .624
Designating an interface’s IP address as the RP’s IP address625
Filtering MSDP source-group pairs . . . . . . . . . . . . . . . . . . . . . .625
Filtering incoming source-active messages . . . . . . . . . . . . . . .625
Filtering advertised source-active messages. . . . . . . . . . . . . .627
Displaying the differences before and after the source active filters
are applied . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .628
Configuring MSDP mesh groups . . . . . . . . . . . . . . . . . . . . . . . . . . .630
Configuring MSDP mesh group. . . . . . . . . . . . . . . . . . . . . . . . .631
Displaying summary information . . . . . . . . . . . . . . . . . . . . . . .638
Displaying peer information . . . . . . . . . . . . . . . . . . . . . . . . . . .639
Displaying source active cache information. . . . . . . . . . . . . . .642
Clearing MSDP information . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .642
Clearing peer information . . . . . . . . . . . . . . . . . . . . . . . . . . . . .643
Clearing the source active cache . . . . . . . . . . . . . . . . . . . . . . .643
Clearing MSDP statistics . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .643
DVMRP overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .643
Initiating DVMRP multicasts on a network . . . . . . . . . . . . . . . .644
Pruning a multicast tree . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .644
Grafts to a multicast tree . . . . . . . . . . . . . . . . . . . . . . . . . . . . .646
Configuring DVMRP. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .647
Enabling DVMRP globally and on an interface. . . . . . . . . . . . .647
Modifying DVMRP global parameters. . . . . . . . . . . . . . . . . . . .647
Modifying DVMRP interface parameters . . . . . . . . . . . . . . . . .650
Displaying information about an upstream neighbor device .651
Configuring a static multicast route. . . . . . . . . . . . . . . . . . . . . . . . .651
Configuring IP multicast traffic reduction. . . . . . . . . . . . . . . . . . . .652
Enabling IP multicast traffic reduction . . . . . . . . . . . . . . . . . . .653
Layer 2 multicast filters. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .657
PIM SM traffic snooping . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .658
Static IGMP membership. . . . . . . . . . . . . . . . . . . . . . . . . . . . . .662
Chapter 24 Configuring RIP
In this chapter . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .665
Overview of Routing Information Protocol (RIP) . . . . . . . . . . . . . . .665