Lenovo RackSwitch G8264CS User guide
LenovoRackSwitchG8264CS
ApplicationGuide
ForLenovoEnterpriseNetworkOperatingSystem8.4
Note:Beforeusingthisinformationandtheproductitsupports,readthegeneralinformationinthe
SafetyinformationandEnvironmentalNoticesandUserGuidedocumentsontheLenovoDocumentationCD
andtheWarrantyInformationdocumentthatcomeswiththeproduct.
FirstEdition(September2016)
©CopyrightLenovo2017
Portions©CopyrightIBMCorporation2014.
LIMITEDANDRESTRICTEDRIGHTSNOTICE:IfdataorsoftwareisdeliveredpursuantaGeneral
ServicesAdministration“GSA”contract,use,reproduction,ordisclosureissubjecttorestrictionsset
forthinContractNo.GS‐35F‐05925.
LenovoandtheLenovologoaretrademarksofLenovointheUnitedStates,othercountries,orboth.
© Copyright Lenovo 2017 3
Contents
Preface . . . . . . . . . . . . . . . . . . . . . . . . . . . . 21
WhoShouldUseThisGuide .......................22
WhatYou’llFindinThisGuide......................23
AdditionalReferences ..........................27
TypographicConventions ........................28
Part 1: Getting Started . . . . . . . . . . . . . . . . . . . . . . 29
Chapter 1. Switch Administration . . . . . . . . . . . . . . . . . 31
AdministrationInterfaces ........................32
CommandLineInterface .......................32
EstablishingaConnection........................33
UsingtheSwitchManagementPorts..................33
UsingtheSwitchDataPorts.....................34
UsingTelnet............................35
UsingSecureShell..........................35
UsingSSHwithPasswordAuthentication.............36
UsingSSHwithPublicKeyAuthentication .............37
UsingaWebBrowser........................38
ConfiguringHTTPAccesstotheBBI................38
ConfiguringHTTPSAccesstotheBBI ...............38
Browser‐BasedInterfaceSummary.................39
UsingSimpleNetworkManagementProtocol..............40
BOOTP/DHCPClientIPAddressServices .................41
DHCPHostNameConfiguration ...................41
DHCPSYSLOGServer........................42
GlobalBOOTPRelayAgentConfiguration ...............42
Domain‐SpecificBOOTPRelayAgentConfiguration...........43
DHCPOption82 ..........................43
DHCPSnooping..........................43
EasyConnectWizard ..........................45
ConfiguringtheEasyConnectWizard.................45
BasicSystemModeConfigurationExample .............46
TransparentModeConfigurationExample.............46
RedundantModeConfigurationExample .............47
SwitchLoginLevels...........................49
Setupvs.theCommandLine .......................51
IdleDisconnect .............................52
BootStrictMode............................53
AcceptableCipherSuites.......................56
ConfiguringStrictMode.......................57
ConfiguringNo‐PromptMode....................57
SSL/TLSVersionLimitation .....................57
Limitations .............................57
Chapter 2. Initial Setup. . . . . . . . . . . . . . . . . . . . . . 59
InformationNeededforSetup ......................60
4 G8264CS Application Guide for ENOS 8.4
DefaultSetupOptions .........................61
StoppingandRestartingSetupManually.................62
StoppingSetup...........................62
RestartingSetup..........................62
SetupPart1:BasicSystemConfiguration.................63
SetupPart2:PortConfiguration.....................65
SetupPart3:VLANs ..........................67
SetupPart4:IPConfiguration......................68
IPInterfaces............................68
LoopbackInterfaces .........................69
UsingLoopbackInterfacesforSourceIPAddresses .........69
LoopbackInterfaceLimitations ..................70
DefaultGateways..........................70
IPRouting.............................70
SetupPart5:FinalSteps .........................72
OptionalSetupforTelnetSupport....................73
Chapter 3. Switch Software Management . . . . . . . . . . . . . . 75
LoadingNewSoftwaretoYourSwitch..................76
LoadingSoftwareviatheISCLI ....................76
LoadingSoftwareviaBBI......................77
USBOptions............................78
USBBoot............................78
USBCopy ...........................79
TheBootManagementMenu ......................80
RecoveringfromaFailedSoftwareUpgrade..............80
RecoveringfromaFailedBootImage...............83
Part 2: Securing the Switch . . . . . . . . . . . . . . . . . . . 85
Chapter 4. Securing Administration . . . . . . . . . . . . . . . . 87
SecureShellandSecureCopy......................88
ConfiguringSSH/SCPFeaturesontheSwitch..............88
ToEnableorDisabletheSSHFeature ...............88
ToEnableorDisableSCPApplyandSave .............89
ConfiguringtheSCPAdministratorPassword .............89
UsingSSHandSCPClientCommands ................89
ToLogIntotheSwitch ......................89
ToCopytheSwitchConfigurationFiletotheSCPHost .......89
ToLoadaSwitchConfigurationFilefromtheSCPHost .......90
ToApplyandSavetheConfiguration...............90
ToCopytheSwitchImageandBootFilestotheSCPHost......90
ToLoadSwitchConfigurationFilesfromtheSCPHost........91
SSHandSCPEncryptionofManagementMessages...........91
GeneratingRSAHostKeyforSSHAccess...............91
SSH/SCPIntegrationwithRadiusAuthentication............91
SSH/SCPIntegrationwithTACACS+Authentication..........92
© Copyright Lenovo 2017 Contents 5
EndUserAccessControl.........................93
ConsiderationsforConfiguringEndUserAccounts...........93
StrongPasswords..........................93
UserAccessControl.........................94
SettingupUserIDs.......................94
DefiningaUser’sAccessLevel..................94
ValidatingaUser’sConfiguration .................94
EnablingorDisablingaUser ...................94
LockingAccounts ........................94
Re‐EnablingLockedAccounts...................95
ListingCurrentUsers ........................95
LoggingintoanEndUserAccount..................95
PasswordFix‐UpMode .......................95
Chapter 5. Authentication & Authorization Protocols . . . . . . . . . 97
RADIUSAuthenticationandAuthorization................98
HowRADIUSAuthenticationWorks.................98
ConfiguringRADIUSontheSwitch ..................98
RADIUSAuthenticationFeaturesinEnterpriseNOS.......... 100
SwitchUserAccounts....................... 100
RADIUSAttributesforEnterpriseNOSUserPrivileges ........ 101
TACACS+Authentication....................... 102
HowTACACS+AuthenticationWorks................ 102
TACACS+AuthenticationFeaturesinEnterpriseNOS......... 103
Authorization ......................... 103
Accounting.......................... 104
CommandAuthorizationandLogging................ 104
TACACS+PasswordChange.................... 105
ConfiguringTACACS+AuthenticationontheSwitch......... 105
LDAPAuthenticationandAuthorization ................ 106
ConfiguringtheLDAPServer.................... 106
ConfiguringLDAPAuthenticationontheSwitch........... 106
Chapter 6. 802.1X Port-Based Network Access Control . . . . . . . .109
ExtensibleAuthenticationProtocoloverLAN .............. 110
EAPoLAuthenticationProcess ..................... 111
EAPoLMessageExchange....................... 112
EAPoLPortStates .......................... 113
GuestVLAN ............................. 113
SupportedRADIUSAttributes ..................... 114
EAPoLConfigurationGuidelines.................... 116
Chapter 7. Access Control Lists . . . . . . . . . . . . . . . . . .117
SummaryofPacketClassifiers..................... 118
SummaryofACLActions....................... 119
AssigningIndividualACLstoaPort.................. 120
ACLOrderofPrecedence....................... 120
ACLMeteringandRe‐Marking..................... 120
Metering ............................. 121
Re‐Marking ........................... 121
6 G8264CS Application Guide for ENOS 8.4
ACLPortMirroring.......................... 122
ViewingACLStatistics........................ 122
ACLLogging............................ 123
EnablingACLLogging...................... 123
LoggedInformation........................ 123
RateLimitingBehavior...................... 124
LogInterval........................... 124
ACLLoggingLimitations ..................... 124
ACLConfigurationExamples ..................... 125
ACLExample1.......................... 125
ACLExample2.......................... 125
ACLExample3.......................... 126
ACLExample4.......................... 126
ACLExample5.......................... 126
ACLExample6.......................... 127
VLANMaps ............................. 128
UsingStormControlFilters ...................... 130
Part 3: Switch Basics . . . . . . . . . . . . . . . . . . . . . . 131
Chapter 8. VLANs. . . . . . . . . . . . . . . . . . . . . . . . 133
VLANsOverview.......................... 134
VLANsandPortVLANIDNumbers .................. 134
VLANNumbers ......................... 134
PVID/NativeVLANNumbers ................... 135
VLANTagging/TrunkMode...................... 136
IngressVLANTagging...................... 139
Limitations............................ 140
VLANTopologiesandDesignConsiderations.............. 141
MultipleVLANswithTagging/TrunkModeAdapters ......... 141
VLANConfigurationExample ................... 144
Protocol‐BasedVLANs........................ 145
Port‐Basedvs.Protocol‐BasedVLANs ................ 145
PVLANPriorityLevels...................... 146
PVLANTagging/TrunkMode ................... 146
PVLANConfigurationGuidelines ................. 146
ConfiguringPVLAN....................... 147
PrivateVLANs............................ 148
PrivateVLANPorts ........................ 148
ConfigurationGuidelines..................... 149
ConfigurationExample ...................... 149
Chapter 9. Ports and Link Aggregation. . . . . . . . . . . . . . . 151
ConfiguringQSFP+Ports ....................... 152
AggregationOverview ........................ 153
StaticLAGs............................. 154
StaticLAGRequirements..................... 154
StaticAggregationConfigurationRules............... 154
ConfiguringaStaticLAG..................... 155
© Copyright Lenovo 2017 Contents 7
LinkAggregationControlProtocol................... 157
StaticLACPLAGs......................... 158
LACPPortModes ......................... 158
LACPIndividual......................... 159
LACPMinimumLinksOption ................... 159
ConfiguringLACP........................ 161
ConfigurableLAGHashAlgorithm................... 162
Chapter 10. Spanning Tree Protocols. . . . . . . . . . . . . . . .165
SpanningTreeProtocolModes..................... 166
GlobalSTPControl .......................... 167
PVRSTMode............................. 167
PortStates............................ 168
BridgeProtocolDataUnits..................... 168
HowBPDUWorks....................... 168
DeterminingthePathforForwardingBPDUs ........... 168
SimpleSTPConfiguration ..................... 170
Per‐VLANSpanningTreeGroups .................. 172
UsingMultipleSTGstoEliminateFalseLoops........... 172
VLANsandSTGAssignment..................173
ManuallyAssigningSTGs................... 174
GuidelinesforCreatingVLANs................. 174
RulesforVLANTagged/TrunkModePorts ............ 174
AddingandRemovingPortsfromSTGs ............. 175
TheSwitch‐CentricModel................... 176
ConfiguringMultipleSTGs..................... 177
RapidSpanningTreeProtocol ..................... 179
PortStates............................ 179
RSTPConfigurationGuidelines ................... 179
RSTPConfigurationExample .................... 180
MultipleSpanningTreeProtocol.................... 181
MSTPRegion ........................... 181
CommonInternalSpanningTree .................. 181
MSTPConfigurationGuidelines .................. 182
MSTPConfigurationExamples ................... 182
MSTPExample1....................... 182
MSTPExample2....................... 183
PortTypeandLinkType ....................... 185
Edge/PortfastPort......................... 185
LinkType ............................ 185
Chapter 11. Virtual Link Aggregation Groups . . . . . . . . . . . .187
VLAGCapacities........................... 190
VLAGsversusPortLAGs....................... 190
8 G8264CS Application Guide for ENOS 8.4
ConfiguringVLAGs ......................... 192
BasicVLAGConfiguration ..................... 193
ConfiguringtheISL ...................... 193
ConfiguringtheVLAG..................... 194
VLAGConfiguration‐VLANsMappedtoMSTI ......... 196
VLAGswithVRRP........................ 200
Task1:ConfigureVLAGPeer1................. 200
Task2:ConfigureVLAGPeer2................. 203
Two‐tiervLAGswithVRRP .................... 206
vLAGPeerGateway ....................... 207
ConfiguringVLAGsinMultipleLayers ............... 207
Task1:ConfigureLayer2/3borderswitches............ 208
Task2:ConfigureswitchesintheLayer2region. ......... 208
VLAGwithPIM........................... 210
TrafficForwarding ........................ 210
HealthCheck........................... 211
Chapter 12. Quality of Service . . . . . . . . . . . . . . . . . . 213
QoSOverview............................ 214
UsingACLFilters.......................... 215
SummaryofACLActions..................... 215
ACLMeteringandRe‐Marking ................... 216
Metering ........................... 216
Re‐Marking ......................... 216
UsingDSCPValuestoProvideQoS ................... 217
DifferentiatedServicesConcepts .................. 217
PerHopBehavior ......................... 219
QoSLevels............................ 220
DSCPRe‐MarkingandMapping.................. 220
DSCPRe‐MarkingConfigurationExamples............. 221
DSCPRe‐MarkingConfigurationExample1........... 221
DSCPRe‐MarkingConfigurationExample2........... 221
Using802.1pPrioritytoProvideQoS.................. 223
QueuingandScheduling....................... 224
ControlPlaneProtection ....................... 224
WREDwithECN........................... 225
HowWRED/ECNworktogether.................. 225
ConfiguringWRED/ECN..................... 226
WRED/ECNConfigurationExample ................ 227
ConfigureGlobalProfileforWRED............... 227
ConfigurePort‐levelProfileforWRED .............. 227
ConfigureGlobalProfileforECN ................ 228
ConfigurePort‐levelProfileforECN............... 229
VerifyWRED/ECN ...................... 229
Part 4: Advanced Switching Features . . . . . . . . . . . . . . . 231
Chapter 13. Virtualization . . . . . . . . . . . . . . . . . . . . 233
Chapter 14. Virtual NICs . . . . . . . . . . . . . . . . . . . . . 235
DefiningServerPorts......................... 236
© Copyright Lenovo 2017 Contents 9
EnablingthevNICFeature....................... 236
vNICIDs.............................. 237
vNICIDsontheSwitch ......................237
vNICInterfaceNamesontheServer ................. 237
vNICBandwidthMetering....................... 238
vNICUplinkModes ......................... 239
LACPLAGs............................. 241
vNICGroups............................. 242
vNICGroupsinDedicatedMode ..................243
vNICGroupsinSharedMode ................... 243
vNICTeamingFailover........................ 245
vNICConfigurationExample ..................... 247
BasicvNICConfiguration..................... 247
vNICsforiSCSIonEmulexEndeavor2............... 250
Chapter 15. Stacking . . . . . . . . . . . . . . . . . . . . . .251
StackingOverview.......................... 252
StackingRequirements....................... 252
StackingLimitations........................ 253
StackMembership.......................... 254
TheMasterSwitch ........................ 254
SplittingandMergingOneStack ................ 254
MergingIndependentStacks .................. 255
BackupSwitchSelection ...................... 256
MasterFailover ........................ 256
SecondaryBackup ....................... 256
MasterRecovery ....................... 256
NoBackup .......................... 257
StackMemberIdentification .................... 257
ConfiguringaStack ..........................258
ConfigurationOverview...................... 258
BestConfigurationPractices .................... 258
StackingVLANs........................ 259
ConfiguringEachSwitchfortheStack................ 259
AdditionalMasterConfiguration.................. 261
ViewingStackConnections................... 261
BindingMemberstotheStack.................. 262
AssigningaStackBackupSwitch................ 262
ManagingtheStack.......................... 263
AccessingtheMasterSwitchCLI .................. 263
RebootingStackedSwitchesviatheMaster.............. 263
UpgradingSoftwareinanExistingStack................. 265
ReplacingorRemovingStackedSwitches................ 267
RemovingaSwitchfromtheStack.................. 267
InstallingtheNewSwitchorHealingtheTopology ..........267
BindingtheNewSwitchtotheStack................. 269
PerformingaRollingReloadorUpgrade ............... 269
StartingaRollingReload.................... 269
StartingaRollingUpgrade................... 270
SavingSyslogMessages........................ 271
10 G8264CS Application Guide for ENOS 8.4
ISCLIStackingCommands ...................... 273
Chapter 16. VMready . . . . . . . . . . . . . . . . . . . . . . 275
VECapacity............................. 276
DefiningServerPorts......................... 276
VMGroupTypes........................... 276
LocalVMGroups .......................... 277
DistributedVMGroups........................ 280
VMProfiles........................... 280
InitializingaDistributedVMGroup................. 281
AssigningMembers ........................ 281
SynchronizingtheConfiguration.................. 282
RemovingMemberVEs...................... 282
VMcheck .............................. 283
VirtualDistributedSwitch ....................... 285
Prerequisites........................... 285
Guidelines............................ 285
MigratingtovDS ......................... 286
VirtualizationManagementServers................... 287
AssigningavCenter........................ 287
vCenterScans.......................... 288
DeletingthevCenter....................... 288
ExportingProfiles......................... 289
VMwareOperationalCommands.................. 289
Pre‐ProvisioningVEs......................... 290
VLANMaps ............................. 291
VMPolicyBandwidthControl..................... 292
VMPolicyBandwidthControlCommands .............. 292
BandwidthPoliciesvs.BandwidthShaping ............. 293
VMreadyInformationDisplays .................... 294
LocalVEInformation....................... 294
vCenterHypervisorHosts ..................... 295
vCenterVEs........................... 296
vCenterVEDetails........................ 296
vCenterSwitchportMappingDetails................ 296
VMreadyConfigurationExample.................... 297
Chapter 17. FCoE and CEE. . . . . . . . . . . . . . . . . . . . 299
FibreChanneloverEthernet...................... 300
TheFCoETopology ........................ 300
FCoERequirements ........................ 301
ConvergedEnhancedEthernet..................... 302
TurningCEEOnorOff...................... 302
EffectsonLinkLayerDiscoveryProtocol............... 302
Effectson802.1pQualityofService ................. 303
EffectsonFlowControl...................... 304
© Copyright Lenovo 2017 Contents 11
FCoEInitializationProtocolSnooping..................305
GlobalFIPSnoopingSettings.................... 305
FIPSnoopingforSpecificPorts................... 305
PortFCFandENodeDetection................... 306
FCoEConnectionTimeout ..................... 306
FCoEACLRules ......................... 307
FCoEVLANs ........................... 307
ViewingFIPSnoopingInformation ................. 307
OperationalCommands......................308
FIPSnoopingConfiguration .................... 308
Priority‐BasedFlowControl......................310
GlobalConfiguration....................... 311
PFCConfigurationExample .................... 312
EnhancedTransmissionSelection .................... 313
802.1pPriorityValues ....................... 313
PriorityGroups ..........................314
PGID ............................ 314
AssigningPriorityValuestoaPriorityGroup........... 315
DeletingaPriorityGroup.................... 315
AllocatingBandwidth..................... 315
ConfiguringETS......................... 316
DataCenterBridgingCapabilityExchange ................ 320
DCBXSettings .......................... 320
EnablingandDisablingDCBX ................. 321
PeerConfigurationNegotiation ................. 321
ConfiguringDCBX........................ 322
FCoEExampleConfiguration ..................... 324
Chapter 18. Fibre Channel . . . . . . . . . . . . . . . . . . . .327
Ethernetvs.FibreChannel....................... 328
SupportedSwitchRoles ........................ 329
FCoEGateway.......................... 329
NPVGateway.......................... 329
Full‐FabricFC/FCoESwitch .................... 329
Limitations ............................ 330
12 G8264CS Application Guide for ENOS 8.4
ImplementingFibreChannel...................... 331
PortModes ........................... 331
FibreChannelVLANs ....................... 332
PortMembership......................... 332
SwitchingMode......................... 333
NPVGateway .......................... 333
NPVPortTrafficMapping................... 333
NPVManualDisruptiveLoad‐Balancing ............. 334
FullFabricZoning........................ 334
Zones............................ 335
Zonesets........................... 336
DefiningZoning ....................... 336
ActivatingaZoneset...................... 338
E_Ports........................... 338
Limitations .......................... 339
OptimizedFCoETrafficFlow .................. 340
StorageManagementInitiativeSpecification(SMI‐S) ........ 341
FibreChannelConfiguration...................... 342
ConfigurationGuidelines..................... 342
Example1:NPVGateway..................... 342
Example2:FullFabricFC/FCoESwitch ............... 343
FibreChannelStandardProtocolsSupported............... 345
Chapter 19. Edge Virtual Bridging . . . . . . . . . . . . . . . . . 347
EVBOperationsOverview....................... 348
VSIDBSynchronization...................... 348
VLANBehavior ......................... 349
DeletingaVLAN......................... 349
ManualReflectiveRelay...................... 349
EVBConfiguration .......................... 350
Limitations............................. 352
Unsupportedfeatures......................... 352
Chapter 20. Static Multicast ARP . . . . . . . . . . . . . . . . . 353
ConfiguringStaticMulticastARP.................... 354
ConfigurationExample ...................... 354
Limitations............................. 356
Chapter 21. Dynamic ARP Inspection . . . . . . . . . . . . . . . 357
UnderstandingARPSpoofingAttacks ................ 357
UnderstandingDAI ........................ 357
InterfaceTrustStatesandNetworkSecurity ............. 358
DAIConfigurationGuidelinesandRestrictions.............. 360
DAIConfigurationExample.................... 360
Part 5: IP Routing. . . . . . . . . . . . . . . . . . . . . . . . 363
Chapter 22. Basic IP Routing . . . . . . . . . . . . . . . . . . . 365
IPRoutingBenefits.......................... 366
RoutingBetweenIPSubnets...................... 366
© Copyright Lenovo 2017 Contents 13
ExampleofSubnetRouting...................... 367
UsingVLANstoSegregateBroadcastDomains ............ 368
ConfigurationExample...................... 368
ECMPStaticRoutes ..........................371
OSPFIntegration......................... 371
ECMPRouteHashing ....................... 371
ConfiguringECMPStaticRoutes .................. 372
DynamicHostConfigurationProtocol .................. 373
DHCPRelayAgent .......................... 374
Chapter 23. Internet Protocol Version 6 . . . . . . . . . . . . . . .375
IPv6Limitations ........................... 376
IPv6AddressFormat......................... 377
IPv6AddressTypes..........................378
UnicastAddress ......................... 378
Multicast............................. 378
Anycast............................. 378
IPv6AddressAutoconfiguration.................... 380
IPv6Interfaces ............................ 381
NeighborDiscovery..........................382
NeighborDiscoveryOverview................... 382
Hostvs.Router.......................... 383
SupportedApplications ........................ 384
ConfigurationGuidelines ....................... 385
IPv6ConfigurationExamples ..................... 386
IPv6Example1.......................... 386
IPv6Example2.......................... 386
Chapter 24. IPsec with IPv6 . . . . . . . . . . . . . . . . . . . .389
IPsecProtocols............................ 390
UsingIPsecwiththeRackSwitchG8264CS................ 391
SettingupAuthentication..................... 391
CreatinganIKEv2Proposal................... 392
ImportinganIKEv2DigitalCertificate .............. 392
GeneratingaCertificateSigningRequest ............. 393
GeneratinganIKEv2DigitalCertificate.............. 396
EnablingIKEv2PresharedKeyAuthentication.......... 396
SettingUpaKeyPolicy...................... 397
UsingaManualKeyPolicy ..................... 398
UsingaDynamicKeyPolicy.................... 400
Chapter 25. Routing Information Protocol . . . . . . . . . . . . . .401
DistanceVectorProtocol........................ 402
Stability............................... 402
RoutingUpdates ........................... 402
RIPv1................................ 403
RIPv2................................ 403
RIPv2inRIPv1CompatibilityMode................... 403
RIPFeatures ............................. 404
RIPConfigurationExample...................... 405
14 G8264CS Application Guide for ENOS 8.4
Chapter 26. Internet Group Management Protocol . . . . . . . . . . 407
IGMPTerms ............................. 408
HowIGMPWorks.......................... 409
IGMPCapacityandDefaultValues................... 410
IGMPSnooping........................... 412
IGMPQuerier.......................... 412
QuerierElection......................... 412
IGMPGroups.......................... 413
IGMPv3Snooping........................ 413
IGMPSnoopingConfigurationGuidelines.............. 415
IGMPSnoopingConfigurationExample............... 416
AdvancedConfigurationExample:IGMPSnooping .......... 417
Prerequisites......................... 418
Configuration......................... 418
TroubleshootingIGMPSnooping.................. 422
IGMPRelay ............................. 425
ConfigurationGuidelines..................... 425
ConfigureIGMPRelay ...................... 426
AdvancedConfigurationExample:IGMPRelay ........... 427
Prerequisites......................... 427
Configuration......................... 428
TroubleshootingIGMPRelay.................... 431
AdditionalIGMPFeatures....................... 434
FastLeave............................ 434
IGMPFiltering .......................... 434
ConfiguringtheRange ..................... 434
ConfiguringtheAction .................... 435
ConfigureIGMPFiltering................... 435
StaticMulticastRouter....................... 435
Chapter 27. Multicast Listener Discovery . . . . . . . . . . . . . . 437
MLDTerms............................. 438
HowMLDWorks .......................... 439
HowFloodingImpactsMLD.................... 440
MLDQuerier........................... 440
QuerierElection......................... 440
DynamicMrouters ........................ 441
MLDCapacityandDefaultValues................... 442
ConfiguringMLD.......................... 443
Chapter 28. Border Gateway Protocol . . . . . . . . . . . . . . . 445
InternalRoutingVersusExternalRouting................ 446
RouteReflector .......................... 447
ConfiguringRouteReflection.................. 449
Restrictions.......................... 450
FormingBGPPeerRouters ...................... 451
StaticPeers............................ 451
DynamicPeers .......................... 452
ConfiguringDynamicPeers .................. 452
RemovingDynamicPeers................... 452
© Copyright Lenovo 2017 Contents 15
LoopbackInterfaces..........................454
WhatisaRouteMap?......................... 454
NextHopPeerIPAddress ..................... 455
IncomingandOutgoingRouteMaps ................ 455
Precedence ............................ 456
ConfigurationOverview...................... 456
AggregatingRoutes ..........................458
RedistributingRoutes......................... 458
BGPCommunities.......................... 459
BGPAttributes............................ 460
LocalPreferenceAttribute..................... 460
Metric(Multi‐ExitDiscriminator)Attribute .............. 460
NextHopAttribute........................ 461
SelectingRoutePathsinBGP ...................... 462
EqualCostMulti‐Path....................... 462
MultipathRelax..........................462
BGPFailoverConfiguration ......................463
DefaultRedistributionandRouteAggregationExample.......... 465
Chapter 29. Open Shortest Path First. . . . . . . . . . . . . . . .467
OSPFv2Overview.......................... 468
TypesofOSPFAreas....................... 468
TypesofOSPFRoutingDevices ................... 469
NeighborsandAdjacencies..................... 470
TheLink‐StateDatabase ...................... 470
TheShortestPathFirstTree .................... 472
InternalVersusExternalRouting .................. 472
OSPFv2ImplementationinEnterpriseNOS............... 473
ConfigurableParameters ...................... 473
DefiningAreas.......................... 474
AssigningtheAreaIndex.................... 474
UsingtheAreaIDtoAssigntheOSPFAreaNumber ........ 475
AttachinganAreatoaNetwork ................. 475
InterfaceCost........................... 476
ElectingtheDesignatedRouterandBackup ............. 476
SummarizingRoutes ....................... 476
DefaultRoutes.......................... 477
VirtualLinks ........................... 477
RouterID............................ 478
Authentication.......................... 479
ConfiguringPlainTextOSPFPasswords............. 480
ConfiguringMD5Authentication................ 480
HostRoutesforLoadBalancing ................... 481
LoopbackInterfacesinOSPF .................... 482
OSPFFeaturesNotSupportedinThisRelease............. 482
16 G8264CS Application Guide for ENOS 8.4
OSPFv2ConfigurationExamples.................... 483
Example 1:SimpleOSPFDomain.................. 484
Example 2:VirtualLinks...................... 486
ConfiguringOSPFforaVirtualLinkonSwitch#1......... 486
ConfiguringOSPFforaVirtualLinkonSwitch#2......... 487
OtherVirtualLinkOptions ................... 489
Example 3:SummarizingRoutes.................. 490
VerifyingOSPFConfiguration ................... 491
OSPFv3ImplementationinEnterpriseNOS............... 492
OSPFv3DifferencesfromOSPFv2.................. 492
OSPFv3RequiresIPv6Interfaces................ 492
OSPFv3UsesIndependentCommandPaths........... 492
OSPFv3IdentifiesNeighborsbyRouterID ............ 493
OtherInternalImprovements .................. 493
OSPFv3Limitations ........................ 493
OSPFv3ConfigurationExample .................. 493
NeighborConfigurationExample .................. 495
Chapter 30. Protocol Independent Multicast. . . . . . . . . . . . . 497
PIMOverview............................ 498
SupportedPIMModesandFeatures.................. 499
BasicPIMSettings .......................... 500
GloballyEnablingorDisablingthePIMFeature............ 500
DefiningaPIMNetworkComponent................ 500
DefininganIPInterfaceforPIMUse ................ 500
PIMNeighborFilters ....................... 501
AdditionalSparseModeSettings.................... 503
SpecifyingtheRendezvousPoint .................. 503
InfluencingtheDesignatedRouterSelection............. 503
SpecifyingaBootstrapRouter................... 504
ConfiguringaLoopbackInterface .................. 504
UsingPIMwithOtherFeatures..................... 506
PIMwithACLsorVMAPs ..................... 506
PIMwithIGMP.......................... 506
PIMConfigurationExamples ..................... 507
Example1:PIM‐SMwithDynamicRP ................ 507
Example2:PIM‐SMwithStaticRP................. 508
Example3:PIM‐DM........................ 508
Part 6: High Availability Fundamentals . . . . . . . . . . . . . . . 511
Chapter 31. Basic Redundancy . . . . . . . . . . . . . . . . . . 513
AggregatingforLinkRedundancy................... 514
VirtualLinkAggregation....................... 514
HotLinks .............................. 515
ForwardDelay.......................... 515
Preemption........................... 515
FDBUpdate........................... 515
ConfigurationGuidelines..................... 515
ConfiguringHotLinks ...................... 516
© Copyright Lenovo 2017 Contents 17
Chapter 32. Layer 2 Failover . . . . . . . . . . . . . . . . . . .517
MonitoringLAGLinks........................ 518
SettingtheFailoverLimit....................... 518
ManuallyMonitoringPortLinks.................... 519
MonitorPortState......................... 519
ControlPortState......................... 519
L2FailoverwithOtherFeatures .................... 520
StaticLAGs ........................... 520
LACP.............................. 520
SpanningTreeProtocol...................... 520
ConfigurationGuidelines ....................... 521
ConfiguringLayer2Failover ...................... 521
Chapter 33. Virtual Router Redundancy Protocol . . . . . . . . . . .523
VRRPOverview ........................... 524
VRRPComponents........................ 524
VirtualRouter......................... 524
VirtualRouterMACAddress..................524
OwnersandRenters...................... 524
MasterandBackupVirtualRouter ................ 525
VirtualInterfaceRouter .................... 525
VRRPOperation......................... 525
SelectingtheMasterVRRPRouter.................. 526
FailoverMethods ........................... 527
Active‐ActiveRedundancy ..................... 527
VirtualRouterGroup ....................... 527
EnterpriseNOSExtensionstoVRRP .................. 528
VirtualRouterDeploymentConsiderations ............... 529
AssigningVRRPVirtualRouterID................. 529
ConfiguringtheSwitchforTracking ................. 529
HighAvailabilityConfigurations.................... 530
VRRPHigh‐AvailabilityUsingMultipleVIRs............. 530
Task1:ConfigureG8264CS1.................. 531
Task2:ConfigureG8264CS2.................. 532
VRRPHigh‐AvailabilityUsingVLAGs................ 534
Part 7: Network Management . . . . . . . . . . . . . . . . . . .535
Chapter 34. Link Layer Discovery Protocol . . . . . . . . . . . . .537
LLDPOverview........................... 538
EnablingorDisablingLLDP......................539
GlobalLLDPSetting........................ 539
TransmitandReceiveControl ................... 539
LLDPTransmitFeatures ........................ 540
ScheduledInterval........................ 540
MinimumInterval......................... 540
Time‐to‐LiveforTransmittedInformation .............. 541
TrapNotifications ......................... 541
ChangingtheLLDPTransmitState ................. 542
TypesofInformationTransmitted .................. 542
18 G8264CS Application Guide for ENOS 8.4
LLDPReceiveFeatures........................ 544
TypesofInformationReceived ................... 544
ViewingRemoteDeviceInformation................ 544
Time‐to‐LiveforReceivedInformation ............... 546
LLDPExampleConfiguration..................... 548
Chapter 35. Simple Network Management Protocol. . . . . . . . . . 549
SNMPVersion1&Version2...................... 549
SNMPVersion3........................... 550
DefaultConfiguration....................... 550
UserConfigurationExample.................... 551
ConfiguringSNMPTrapHosts..................... 552
SNMPv1TrapHost........................ 552
SNMPv2TrapHostConfiguration................. 553
SNMPv3TrapHostConfiguration................. 554
SNMPMIBs ............................. 555
SwitchImagesandConfigurationFiles ................. 561
LoadingaNewSwitchImage ................... 562
LoadingaSavedSwitchConfiguration ............... 562
SavingtheSwitchConfiguration .................. 563
SavingaSwitchDump ...................... 563
Chapter 36. Service Location Protocol . . . . . . . . . . . . . . . 565
ActiveDADiscovery ......................... 566
SLPConfiguration.......................... 567
Chapter 37. Secure Input/Output Module . . . . . . . . . . . . . . 569
SIOMOverview........................... 570
SettinganSIOMSecurityPolicy.................... 571
EnablingandDisablingtheSIOM .................. 571
UsingProtocolsWithSIOM.................... 571
InsecureProtocols ....................... 571
SecureProtocols ....................... 572
InsecureProtocolsUnaffectedbySIOM............. 573
ImplementingSecureLDAP(LDAPS) .................. 574
EnablingLDAPS......................... 574
DisablingLDAPS......................... 575
SyslogsandLDAPS........................ 576
UsingCryptographicMode ...................... 577
Part 8: Monitoring . . . . . . . . . . . . . . . . . . . . . . . 579
Chapter 38. Remote Monitoring . . . . . . . . . . . . . . . . . . 581
RMONOverview........................... 582
RMONGroup1—Statistics...................... 583
RMONGroup2—History....................... 584
HistoryMIBObjectID....................... 584
ConfiguringRMONHistory.................... 584
© Copyright Lenovo 2017 Contents 19
RMONGroup3—Alarms....................... 585
AlarmMIBobjects ........................ 585
ConfiguringRMONAlarms.................... 585
RMONGroup9—Events ....................... 587
Chapter 39. sFlow. . . . . . . . . . . . . . . . . . . . . . . .589
sFlowStatisticalCounters....................... 589
sFlowNetworkSampling ....................... 589
sFlowExampleConfiguration ..................... 590
Chapter 40. Port Mirroring . . . . . . . . . . . . . . . . . . . .591
PortMirroringModel......................... 592
ConfiguringPortMirroring...................... 593
Part 9: Appendices . . . . . . . . . . . . . . . . . . . . . . .595
Appendix A. Glossary . . . . . . . . . . . . . . . . . . . . . .597
Appendix B. VLAN Tagging Changes Since N/OS 7.9 . . . . . . . . .599
ManagingTaggedPortsintheISCLI.................. 600
ManagingTaggedPortsintheBBIandSNMP .............. 603
TaggedPortsinConfigurationOutputs................. 604
TaggedPortsinQBGVLANs...................... 605
TaggedPortsConfigurationScenario.................. 606
Appendix C. Getting help and technical assistance . . . . . . . . . .613
Appendix D. Notices. . . . . . . . . . . . . . . . . . . . . . .615
Trademarks ............................. 617
ImportantNotes ........................... 618
RecyclingInformation ......................... 619
ParticulateContamination....................... 620
TelecommunicationRegulatoryStatement ................ 621
ElectronicEmissionNotices ......................622
FederalCommunicationsCommission(FCC)Statement ........ 622
IndustryCanadaClassAEmissionComplianceStatement....... 622
AvisdeConformitéàlaRéglementationdʹIndustrieCanada ...... 622
AustraliaandNewZealandClassAStatement............ 622
EuropeanUnion‐CompliancetotheElectromagneticCompatibilityDirective
622
GermanyClassAComplianceStatement ............... 623
JapanVCCIClassAStatement ................... 624
JapanElectronicsandInformationTechnologyIndustriesAssociation
(JEITA) Statement ......................... 624
KoreaCommunicationsCommission(KCC)Statement ......... 625
RussiaElectromagneticInterference(EMI)ClassAstatement........ 626
People’sRepublicofChinaClassAelectronicemissionstatement ...... 627
TaiwanClassAcompliancestatement .................. 628
Index . . . . . . . . . . . . . . . . . . . . . . . . . . . . .629
20 G8264CS Application Guide for ENOS 8.4
Other manuals for RackSwitch G8264CS
4
Table of contents
Other Lenovo Switch manuals
Lenovo
Lenovo CE0128T User manual
Lenovo
Lenovo Flex System EN4023 User manual
Lenovo
Lenovo RackSwitch G8296 User manual
Lenovo
Lenovo QLogic 12200 User manual
Lenovo
Lenovo Flex System Fabric CN4093 User manual
Lenovo
Lenovo Flex System Fabric CN4093 User manual
Lenovo
Lenovo RackSwitch G8264 User guide
Lenovo
Lenovo ThinkSystem DB620S User manual
Lenovo
Lenovo ThinkSystem NE2580O RackSwitch User manual
Lenovo
Lenovo RackSwitch G8296 User manual
Lenovo
Lenovo ThinkSystem NE10032 User manual
Lenovo
Lenovo RackSwitch G8296 User manual
Lenovo
Lenovo ThinkSystem NE1072T User manual
Lenovo
Lenovo Flex System EN2092 User manual
Lenovo
Lenovo RackSwitch G8272 User manual
Lenovo
Lenovo Flex System FC5022 User manual
Lenovo
Lenovo Flex System Fabric EN4093R User manual
Lenovo
Lenovo Flex System Fabric CN4093 User guide
Lenovo
Lenovo ThinkSystem NE1064TO RackSwitch User manual
Lenovo
Lenovo ThinkSystem NE1032T User manual
