Foundry Networks FESX User manual

Foundry FastIron X-Series
Configuration Guide
FastIron Edge Switch X-Series
FastIron Workgroup Switch X-Series
FastIron SuperX Switch
2100 Gold Street
P.O. Box 649100
San Jose, CA 95164-9100
Tel [phone]
Fax [phone]
December 2005
™

Copyright © Foundry Networks, Inc. All rights reserved.
No part of this work may be reproduced in any form or by any means – graphic, electronic or mechanical, including
photocopying, recording, taping or storage in an information retrieval system – without prior written permission of the
copyright owner.
The trademarks, logos and service marks ("Marks") displayed herein are the property of Foundry or other third parties.
You are not permitted to use these Marks without the prior written consent of Foundry or such appropriate third party.
Foundry Networks, BigIron, FastIron, IronView, JetCore, NetIron, ServerIron, TurboIron, IronWare, EdgeIron, IronPoint,
the Iron family of marks and the Foundry Logo are trademarks or registered trademarks of Foundry Networks, Inc. in
the United States and other countries.
F-Secure is a trademark of F-Secure Corporation. All other trademarks mentioned in this document are the property of
their respective owners.

December 2005 © Foundry Networks, Inc. iii
Contents
CHAPTER 1
ABOUT THIS GUIDE..................................................................................... 1-1
INTRODUCTION ...........................................................................................................................................1-1
WHAT’SINCLUDED IN THIS EDITION? ...........................................................................................................1-2
AUDIENCE ..................................................................................................................................................1-3
NOMENCLATURE .........................................................................................................................................1-3
RELATED PUBLICATIONS .............................................................................................................................1-3
HOW TO GET HELP .....................................................................................................................................1-4
WEB ACCESS .......................................................................................................................................1-4
EMAIL ACCESS .....................................................................................................................................1-4
TELEPHONE ACCESS ............................................................................................................................1-4
WARRANTY COVERAGE ...............................................................................................................................1-4
CHAPTER 2
GETTING FAMILIAR WITH MANAGEMENT APPLICATIONS................................ 2-1
LOGGING ON THROUGH THE CLI .................................................................................................................2-1
ON-LINE HELP .....................................................................................................................................2-2
COMMAND COMPLETION .......................................................................................................................2-2
SCROLL CONTROL ................................................................................................................................2-2
LINE EDITING COMMANDS .....................................................................................................................2-3
USING SLOT AND PORT NUMBERS WITH CLI COMMANDS ......................................................................2-3
SEARCHING AND FILTERING OUTPUT FROM CLI COMMANDS ..................................................................2-4
USING SPECIAL CHARACTERS IN REGULAR EXPRESSIONS .....................................................................2-6
LOGGING ONTHROUGH THE WEB MANAGEMENT INTERFACE .......................................................................2-8
NAVIGATING THE WEB MANAGEMENT INTERFACE ..................................................................................2-9
LOGGING ON THROUGH IRONVIEW NETWORK MANAGER ............................................................................2-11
CHAPTER 3
CONFIGURING BASIC SOFTWARE FEATURES................................................ 3-1
CONFIGURING BASIC SYSTEM PARAMETERS ................................................................................................3-2

Foundry Configuration Guide for the FESX, FSX, and FWSX
iv © Foundry Networks, Inc. December 2005
ENTERING SYSTEM ADMINISTRATION INFORMATION ...............................................................................3-2
CONFIGURING SIMPLE NETWORK MANAGEMENT PROTOCOL (SNMP) PARAMETERS ...............................3-3
CONFIGURING AN INTERFACE AS THE SOURCE FOR ALL TELNET PACKETS .............................................3-7
CANCELLING AN OUTBOUND TELNET SESSION ......................................................................................3-7
CONFIGURING AN INTERFACE AS THE SOURCE FOR ALL TFTP PACKETS ................................................3-7
SPECIFYING ASIMPLE NETWORK TIME PROTOCOL (SNTP) SERVER ......................................................3-8
SETTING THE SYSTEM CLOCK .............................................................................................................3-10
LIMITING BROADCAST, MULTICAST, AND UNKNOWN UNICAST TRAFFIC .................................................3-11
CONFIGURING CLI BANNERS ..............................................................................................................3-11
CONFIGURING BASIC PORT PARAMETERS ..................................................................................................3-13
ASSIGNING APORT NAME ..................................................................................................................3-13
MODIFYING PORT SPEED ...................................................................................................................3-13
ENABLING AUTO-NEGOTIATION MAXIMUM PORT SPEED ADVERTISEMENT AND
PORT SPEED DOWN-SHIFT ...........................................................................................................3-14
MODIFYING PORT DUPLEX MODE .......................................................................................................3-15
CONFIGURING MDI/MDIX ...................................................................................................................3-16
DISABLING OR RE-ENABLING APORT ..................................................................................................3-16
DISABLING OR RE-ENABLING FLOW CONTROL .....................................................................................3-17
CHANGING THE GIGABIT FIBER NEGOTIATION MODE ............................................................................3-17
MODIFYING PORT PRIORITY (QOS) .....................................................................................................3-17
ENABLING DYNAMIC CONFIGURATION OF VOICE OVER IP (VOIP) PHONES ............................................3-17
CHAPTER 4
CONFIGURING BASIC LAYER 2 FEATURES ................................................... 4-1
ABOUT PORT REGIONS ...............................................................................................................................4-2
ENABLING OR DISABLING THE SPANNING TREE PROTOCOL (STP) ................................................................4-2
MODIFYING STP BRIDGE AND PORT PARAMETERS ................................................................................4-3
CHANGING THE MAC AGE TIME ..................................................................................................................4-3
CONFIGURING STATIC MAC ENTRIES ..........................................................................................................4-3
ENABLING PORT-BASED VLANS.................................................................................................................4-4
ASSIGNING IEEE 802.1Q TAGGING TO APORT .....................................................................................4-5
DEFINING MAC ADDRESS FILTERS ..............................................................................................................4-5
CONFIGURATION NOTES .......................................................................................................................4-5
COMMAND SYNTAX ..............................................................................................................................4-6
ENABLING LOGGING OF PACKETS DENIED BY MAC FILTERS ..................................................................4-7
LOCKING APORT TORESTRICT ADDRESSES ...............................................................................................4-7
CONFIGURATION NOTES .......................................................................................................................4-7
COMMAND SYNTAX ..............................................................................................................................4-8
DISPLAYING AND MODIFYING SYSTEM PARAMETER DEFAULT SETTINGS ........................................................4-8
CONFIGURING PORT MIRRORING AND MONITORING ...................................................................................4-12
CONFIGURATION CONSIDERATIONS .....................................................................................................4-12
COMMAND SYNTAX ............................................................................................................................4-12

Contents
December 2005 © Foundry Networks, Inc. v
CHAPTER 5
CONFIGURING BASE LAYER 3
AND ENABLING ROUTING PROTOCOLS......................................................... 5-1
ADDING ASTATIC IP ROUTE .......................................................................................................................5-2
ADDING ASTATIC ARP ENTRY ....................................................................................................................5-2
MODIFYING AND DISPLAYING LAYER 3 SYSTEM PARAMETER LIMITS ..............................................................5-3
CONFIGURATION NOTE .........................................................................................................................5-3
MODIFYING LAYER 3 SYSTEM PARAMETER LIMITS .................................................................................5-3
DISPLAYING LAYER 3 SYSTEM PARAMETER LIMITS ................................................................................5-4
CONFIGURING RIP ......................................................................................................................................5-4
ENABLING RIP .....................................................................................................................................5-4
ENABLING REDISTRIBUTION OF IP STATIC ROUTES INTO RIP .................................................................5-5
ENABLING REDISTRIBUTION ..................................................................................................................5-6
ENABLING LEARNING OF DEFAULT ROUTES ...........................................................................................5-6
CHANGING THE ROUTE LOOP PREVENTION METHOD .............................................................................5-6
OTHER LAYER 3 PROTOCOLS ......................................................................................................................5-7
ENABLING OR DISABLING ROUTING PROTOCOLS ..........................................................................................5-7
ENABLING OR DISABLING LAYER 2 SWITCHING .............................................................................................5-7
CONFIGURATION NOTES .......................................................................................................................5-7
COMMAND SYNTAX ..............................................................................................................................5-8
CHAPTER 6
CONFIGURING POWER OVER ETHERNET ...................................................... 6-1
POWER OVER ETHERNET OVERVIEW ...........................................................................................................6-1
TERMS USED IN THIS SECTION .............................................................................................................6-2
METHODS FOR DELIVERING POE .........................................................................................................6-2
AUTODISCOVERY ..................................................................................................................................6-4
POWER CLASS .....................................................................................................................................6-4
POWER SPECIFICATIONS ......................................................................................................................6-4
CABLING REQUIREMENTS .....................................................................................................................6-5
SUPPORTED POWERED DEVICES ..........................................................................................................6-5
ENABLING OR DISABLING POWER OVER ETHERNET ......................................................................................6-5
ENABLING THE DETECTION OF POE POWER REQUIREMENTS
ADVERTISED VIA CDP ..........................................................................................................................6-6
CONFIGURATION CONSIDERATIONS .......................................................................................................6-6
COMMAND SYNTAX ..............................................................................................................................6-6
SETTING THE MAXIMUM POWER LEVEL FOR APOE POWER CONSUMING DEVICE .........................................6-6
CONFIGURATION NOTES .......................................................................................................................6-6
COMMAND SYNTAX ..............................................................................................................................6-7
SETTING THE POWER CLASS FOR APOE POWER CONSUMING DEVICE ........................................................6-7
CONFIGURATION NOTES .......................................................................................................................6-7
COMMAND SYNTAX ..............................................................................................................................6-8
SETTING THE IN-LINE POWER PRIORITY FOR APOE PORT ...........................................................................6-8
COMMAND SYNTAX ..............................................................................................................................6-9
RESETTING POE PARAMETERS ...................................................................................................................6-9

Foundry Configuration Guide for the FESX, FSX, and FWSX
vi © Foundry Networks, Inc. December 2005
DISPLAYING POWER OVER ETHERNET INFORMATION ..................................................................................6-10
DISPLAYING POE OPERATIONAL STATUS ............................................................................................6-10
DISPLAYING DETAILED INFORMATION ABOUT POE POWER SUPPLIES ..................................................6-13
CHAPTER 7
CONFIGURING SPANNING TREE PROTOCOL (STP)
AND IRONSPAN FEATURES ......................................................................... 7-1
CHAPTER CONTENTS ..................................................................................................................................7-1
STP OVERVIEW ..........................................................................................................................................7-2
CONFIGURING STANDARD STP PARAMETERS ..............................................................................................7-2
STP PARAMETERS AND DEFAULTS .......................................................................................................7-2
ENABLING OR DISABLING THE SPANNING TREE PROTOCOL (STP) .........................................................7-4
CHANGING STP BRIDGE AND PORT PARAMETERS .................................................................................7-5
STP PROTECTION ENHANCEMENT ........................................................................................................7-6
DISPLAYING STP INFORMATION ............................................................................................................7-8
CONFIGURING IRONSPAN FEATURES .........................................................................................................7-16
FAST PORT SPAN ...............................................................................................................................7-16
802.1W RAPID SPANNING TREE (RSTP) ............................................................................................7-18
802.1W DRAFT 3 ...............................................................................................................................7-53
SINGLE SPANNING TREE (SSTP) ........................................................................................................7-56
STP PER VLAN GROUP .....................................................................................................................7-58
PVST/PVST+ COMPATIBILITY ..................................................................................................................7-61
OVERVIEW OF PVST AND PVST+ ......................................................................................................7-62
VLAN TAGS AND DUAL MODE ............................................................................................................7-62
CONFIGURING PVST+ SUPPORT ........................................................................................................7-63
DISPLAYING PVST+ SUPPORT INFORMATION ......................................................................................7-64
CONFIGURATION EXAMPLES ...............................................................................................................7-64
CHAPTER 8
CONFIGURING METRO FEATURES ................................................................ 8-1
TOPOLOGY GROUPS ...................................................................................................................................8-1
MASTER VLAN AND MEMBER VLANS...................................................................................................8-2
CONTROL PORTS AND FREE PORTS ......................................................................................................8-2
CONFIGURATION CONSIDERATIONS .......................................................................................................8-2
CONFIGURING ATOPOLOGY GROUP ......................................................................................................8-3
DISPLAYING TOPOLOGY GROUP INFORMATION ......................................................................................8-3
METRO RING PROTOCOL (MRP) .................................................................................................................8-5
CONFIGURATION NOTES .......................................................................................................................8-6
MRP RINGS WITHOUT SHARED INTERFACES (MRP PHASE 1) ...............................................................8-6
RING INITIALIZATION ............................................................................................................................8-7
HOW RING BREAKS ARE DETECTED AND HEALED .................................................................................8-8
MASTER VLANSAND CUSTOMER VLANS.............................................................................................8-9
CONFIGURING MRP ...........................................................................................................................8-11
USING MRP DIAGNOSTICS .................................................................................................................8-12
DISPLAYING MRP INFORMATION .........................................................................................................8-13

Contents
December 2005 © Foundry Networks, Inc. vii
MRP CLI EXAMPLE ...........................................................................................................................8-16
VIRTUAL SWITCH REDUNDANCY PROTOCOL (VSRP) .................................................................................8-18
LAYER 2 AND LAYER 3 REDUNDANCY ..................................................................................................8-19
MASTER ELECTION AND FAILOVER ......................................................................................................8-20
VSRP-AWARE SECURITY FEATURES ..................................................................................................8-24
VSRP PARAMETERS ..........................................................................................................................8-24
CONFIGURING BASIC VSRP PARAMETERS ..........................................................................................8-27
CONFIGURING OPTIONAL VSRP PARAMETERS ....................................................................................8-28
DISPLAYING VSRP INFORMATION .......................................................................................................8-34
CHAPTER 9
CONFIGURING UNI-DIRECTIONAL LINK DETECTION (UDLD) ......................... 9-1
UDLD OVERVIEW .......................................................................................................................................9-1
CONFIGURATION CONSIDERATIONS ..............................................................................................................9-2
ENABLING UDLD ........................................................................................................................................9-2
CHANGING THE KEEPALIVE INTERVAL ..........................................................................................................9-3
CHANGING THE KEEPALIVE RETRIES ...........................................................................................................9-3
UDLD FOR TAGGED PORTS ........................................................................................................................9-3
DISPLAYING UDLD INFORMATION ................................................................................................................9-4
DISPLAYING INFORMATION FOR ALL PORTS ...........................................................................................9-4
DISPLAYING INFORMATION FOR ASINGLE PORT ....................................................................................9-5
CLEARING UDLD STATISTICS .....................................................................................................................9-6
CHAPTER 10
CONFIGURING TRUNK GROUPS
AND DYNAMIC LINK AGGREGATION .......................................................... 10-1
TRUNK GROUP OVERVIEW ........................................................................................................................10-1
TRUNK GROUP CONNECTIVITY TO ASERVER ......................................................................................10-2
TRUNK GROUP RULES ........................................................................................................................10-3
TRUNK GROUP CONFIGURATION EXAMPLES ........................................................................................10-4
TRUNK GROUP LOAD SHARING ...........................................................................................................10-6
CONFIGURING ATRUNK GROUP ................................................................................................................10-7
EXAMPLE 1: CONFIGURING THE TRUNK GROUPS SHOWN IN FIGURE 10.1 ...........................................10-8
EXAMPLE 2: CONFIGURING ATRUNK GROUP THAT SPANS MULTIPLE
GIGABIT ETHERNET MODULES IN ACHASSIS DEVICE ....................................................................10-8
CLI SYNTAX .......................................................................................................................................10-9
ADDITIONAL TRUNKING OPTIONS ........................................................................................................10-9
DISPLAYING TRUNK GROUP CONFIGURATION INFORMATION .....................................................................10-11
DYNAMIC LINK AGGREGATION .................................................................................................................10-13
CONFIGURATION EXAMPLE ...............................................................................................................10-13
CONFIGURATION NOTES ...................................................................................................................10-15
ADAPTATION TO TRUNK DISAPPEARANCE ..........................................................................................10-15
FLEXIBLE TRUNK ELIGIBILITY ............................................................................................................10-16
COMMAND SYNTAX ..........................................................................................................................10-17
LINK AGGREGATION PARAMETERS ....................................................................................................10-18

Foundry Configuration Guide for the FESX, FSX, and FWSX
viii © Foundry Networks, Inc. December 2005
DISPLAYING AND DETERMINING THE STATUS OF AGGREGATE LINKS .........................................................10-22
ABOUT BLOCKED PORTS ..................................................................................................................10-23
DISPLAYING LINK AGGREGATION AND PORT STATUS INFORMATION ....................................................10-23
DISPLAYING TRUNK GROUP AND LACP STATUS INFORMATION ..........................................................10-26
CLEARING THE NEGOTIATED AGGREGATE LINKS TABLE ...........................................................................10-26
CHAPTER 11
CONFIGURING VIRTUAL LANS(VLANS).................................................... 11-1
VLAN OVERVIEW ....................................................................................................................................11-2
TYPES OF VLANS..............................................................................................................................11-2
DEFAULT VLAN .................................................................................................................................11-6
802.1Q TAGGING ...............................................................................................................................11-7
SPANNING TREE PROTOCOL (STP) ....................................................................................................11-8
VIRTUAL ROUTING INTERFACES ..........................................................................................................11-9
VLAN AND VIRTUAL ROUTING INTERFACE GROUPS ...........................................................................11-10
DYNAMIC, STATIC, AND EXCLUDED PORT MEMBERSHIP .....................................................................11-10
SUPER AGGREGATED VLANS...........................................................................................................11-13
TRUNK GROUP PORTS AND VLAN MEMBERSHIP ...............................................................................11-13
SUMMARY OF VLAN CONFIGURATION RULES ....................................................................................11-13
ROUTING BETWEEN VLANS....................................................................................................................11-14
VIRTUAL ROUTING INTERFACES (LAYER 3 SWITCHES ONLY) ..............................................................11-14
BRIDGING AND ROUTING THE SAME PROTOCOL SIMULTANEOUSLY
ON THE SAME DEVICE (LAYER 3 SWITCHES ONLY) .....................................................................11-14
ROUTING BETWEEN VLANSUSING VIRTUAL ROUTING INTERFACES (LAYER 3 SWITCHES ONLY) .........11-14
DYNAMIC PORT ASSIGNMENT (LAYER 2 SWITCHES AND LAYER 3 SWITCHES) .....................................11-15
ASSIGNING ADIFFERENT VLAN ID TO THE DEFAULT VLAN ..............................................................11-15
ASSIGNING TRUNK GROUP PORTS ....................................................................................................11-15
CONFIGURING PORT-BASED VLANS.................................................................................................11-15
MODIFYING APORT-BASED VLAN ....................................................................................................11-18
CONFIGURING IP SUB-NET, IPX NETWORK AND PROTOCOL-BASED VLANS.............................................11-21
CONFIGURATION EXAMPLE ...............................................................................................................11-21
CONFIGURING IP SUB-NET, IPX NETWORK, AND
PROTOCOL-BASED VLANSWITHIN PORT-BASED VLANS..................................................................11-23
CONFIGURING AN IPV6 PROTOCOL VLAN ...............................................................................................11-26
ROUTING BETWEEN VLANSUSING VIRTUAL ROUTING INTERFACES (LAYER 3 SWITCHES ONLY) ...............11-27
CONFIGURING PROTOCOL VLANSWITH DYNAMIC PORTS .......................................................................11-33
AGING OF DYNAMIC PORTS ..............................................................................................................11-33
CONFIGURATION GUIDELINES ...........................................................................................................11-33
CONFIGURING AN IP, IPX, OR APPLETALK PROTOCOL VLAN WITH DYNAMIC PORTS ..........................11-33
CONFIGURING AN IP SUB-NET VLAN WITH DYNAMIC PORTS .............................................................11-34
CONFIGURING AN IPX NETWORK VLAN WITH DYNAMIC PORTS .........................................................11-34
CONFIGURING UPLINK PORTS WITHIN APORT-BASED VLAN ...................................................................11-35
CONFIGURING THE SAME IP SUB-NET ADDRESS ON MULTIPLE PORT-BASED VLANS...............................11-35
USING SEPARATE ACLSON IP FOLLOWER VIRTUAL ROUTING INTERFACES ........................................11-39
CONFIGURING VLAN GROUPS AND VIRTUAL ROUTING INTERFACE GROUPS .............................................11-40
CONFIGURING AVLAN GROUP .........................................................................................................11-40

Contents
December 2005 © Foundry Networks, Inc. ix
CONFIGURING AVIRTUAL ROUTING INTERFACE GROUP .....................................................................11-41
DISPLAYING THE VLAN GROUP AND VIRTUAL ROUTING INTERFACE GROUP INFORMATION ..................11-42
ALLOCATING MEMORY FOR MORE VLANSOR VIRTUAL ROUTING INTERFACES ...................................11-42
CONFIGURING SUPER AGGREGATED VLANS...........................................................................................11-43
CONFIGURING AGGREGATED VLANS................................................................................................11-45
VERIFYING THE CONFIGURATION .......................................................................................................11-47
COMPLETE CLI EXAMPLES ...............................................................................................................11-47
CONFIGURING 802.1Q-IN-Q TAGGING .....................................................................................................11-49
CONFIGURATION RULES ...................................................................................................................11-51
ENABLING 802.1Q-IN-Q TAGGING ....................................................................................................11-51
EXAMPLE CONFIGURATION ...............................................................................................................11-52
CONFIGURING PRIVATE VLANS..............................................................................................................11-52
IMPLEMENTATION NOTES ..................................................................................................................11-54
COMMAND SYNTAX ..........................................................................................................................11-54
ENABLING BROADCAST OR UNKNOWN UNICAST TRAFFIC TO THE PRIVATE VLAN ...............................11-55
CLI EXAMPLE FOR FIGURE 11.21 .....................................................................................................11-56
DUAL-MODE VLAN PORTS .....................................................................................................................11-56
DISPLAYING VLAN INFORMATION ............................................................................................................11-59
DISPLAYING SYSTEM-WIDE VLAN INFORMATION ...............................................................................11-59
DISPLAYING VLAN INFORMATION FOR SPECIFIC PORTS ....................................................................11-60
CHAPTER 12
RULE-BASED IP ACCESS CONTROL LISTS (ACLS).................................... 12-1
ACL OVERVIEW ........................................................................................................................................12-2
TYPES OF IP ACLS............................................................................................................................12-2
ACL IDSAND ENTRIES .......................................................................................................................12-2
NUMBERED AND NAMED ACLS...........................................................................................................12-3
DEFAULT ACL ACTION .......................................................................................................................12-3
HOW HARDWARE-BASED ACLSWORK ......................................................................................................12-3
HOW FRAGMENTED PACKETS ARE PROCESSED ...................................................................................12-3
HARDWARE AGING OF LAYER 4 CAM ENTRIES ...................................................................................12-4
CONFIGURATION CONSIDERATIONS ............................................................................................................12-4
CONFIGURING STANDARD NUMBERED ACLS.............................................................................................12-4
STANDARD NUMBERED ACL SYNTAX ..................................................................................................12-5
CONFIGURATION EXAMPLE FOR STANDARD NUMBERED ACLS.............................................................12-6
CONFIGURING STANDARD NAMED ACLS...................................................................................................12-6
STANDARD NAMED ACL SYNTAX ........................................................................................................12-6
CONFIGURATION EXAMPLE FOR STANDARD NAMED ACLS...................................................................12-8
CONFIGURING EXTENDED NUMBERED ACLS..............................................................................................12-8
EXTENDED NUMBERED ACL SYNTAX ..................................................................................................12-8
CONFIGURATION EXAMPLES FOR EXTENDED NUMBERED ACLS.........................................................12-12
CONFIGURING EXTENDED NAMED ACLS..................................................................................................12-13
EXTENDED NAMED ACL SYNTAX ......................................................................................................12-15
CONFIGURATION EXAMPLE FOR EXTENDED NAMED ACLS.................................................................12-18
ADDING ACOMMENT TO AN ACL ENTRY .................................................................................................12-18
ENABLING STRICT CONTROL OF ACL FILTERING OF FRAGMENTED PACKETS ............................................12-20

Foundry Configuration Guide for the FESX, FSX, and FWSX
x © Foundry Networks, Inc. December 2005
ENABLING ACL FILTERING BASED ON VLAN MEMBERSHIP OR
VE PORT MEMBERSHIP ....................................................................................................................12-20
APPLYING AN ACL TO SPECIFIC VLAN MEMBERS ON APORT (LAYER 2 DEVICES ONLY) ...................12-21
APPLYING AN ACL TO ASUBSET OF PORTS ON AVIRTUAL INTERFACE (LAYER 3 DEVICES ONLY) .......12-21
FILTERING ON IP PRECEDENCE AND TOS VALUES ...................................................................................12-22
QOS OPTIONS FOR IP ACLS..................................................................................................................12-23
USING AN ACL TO MAP THE DSCP VALUE (DSCP COS MAPPING) ..................................................12-23
USING AN IP ACL TO MARK DSCP VALUES (DSCP MARKING) .........................................................12-23
DSCP MATCHING ............................................................................................................................12-24
ACL-BASED RATE LIMITING ....................................................................................................................12-24
ACL COUNTING ......................................................................................................................................12-25
USING ACLSTO CONTROL MULTICAST FEATURES ...................................................................................12-25
DISPLAYING ACL INFORMATION ..............................................................................................................12-25
TROUBLESHOOTING ACLS......................................................................................................................12-25
CHAPTER 13
CONFIGURING QUALITY OF SERVICE.......................................................... 13-1
CLASSIFICATION .......................................................................................................................................13-1
PROCESSING OF CLASSIFIED TRAFFIC .................................................................................................13-2
QOS QUEUES ..........................................................................................................................................13-6
ASSIGNING QOS PRIORITIES TO TRAFFIC ............................................................................................13-7
MARKING ..................................................................................................................................................13-8
CONFIGURING DSCP-BASED QOS ............................................................................................................13-8
APPLICATION NOTES ..........................................................................................................................13-8
USING ACLSTO HONOR DSCP-BASED QOS ......................................................................................13-8
CONFIGURING THE QOS MAPPINGS ...........................................................................................................13-8
DEFAULT DSCP –> INTERNAL FORWARDING PRIORITY MAPPINGS .......................................................13-9
CHANGING THE DSCP –> INTERNAL FORWARDING PRIORITY MAPPINGS ............................................13-10
CHANGING THE INTERNAL FORWARDING PRIORITY –> HARDWARE FORWARDING QUEUE MAPPINGS ...13-10
SCHEDULING ..........................................................................................................................................13-11
QOS QUEUING METHODS .................................................................................................................13-11
SELECTING THE QOS QUEUING METHOD ..........................................................................................13-12
CONFIGURING THE QOS QUEUES .....................................................................................................13-12
VIEWING QOS SETTINGS ........................................................................................................................13-15
VIEWING DSCP-BASED QOS SETTINGS ..................................................................................................13-16
CHAPTER 14
CONFIGURING RATE LIMITING.................................................................... 14-1
OVERVIEW ................................................................................................................................................14-1
RATE LIMITING IN HARDWARE .............................................................................................................14-1
HOW FIXED RATE LIMITING WORKS ....................................................................................................14-2
CONFIGURATION NOTES .....................................................................................................................14-2
CONFIGURING APORT-BASED RATE LIMITING POLICY ................................................................................14-3
CONFIGURING AN ACL-BASED RATE LIMITING POLICY ...............................................................................14-3
OPTIMIZING RATE LIMITING .......................................................................................................................14-3
DISPLAYING THE FIXED RATE LIMITING CONFIGURATION ............................................................................14-4