Nortel Alteon OS 42C4911 User guide

2350 Mission College Blvd.
Suite 600
Santa Clara, CA 95054
www.bladenetwork.net
Alteon OS
Application Guide
Nortel 10Gb Ethernet Switch Module for IBM BladeCenter®
Version 1.0
TM
Part Number: 42C4911, January 2007

Alteon OS Application Guide
242C4911, January 2007
Copyright © 2007 Blade Network Technologies, Inc., 2350 Mission College Blvd., Suite 600, Santa Clara,
California, 95054, USA. All rights reserved. Part Number: 42C4911.
This document is protected by copyright and distributed under licenses restricting its use, copying,
distribution, and decompilation. No part of this document may be reproduced in any form by any means
without prior written authorization of Blade Network Technologies, Inc. Documentation is provided “as
is” without warranty of any kind, either express or implied, including any kind of implied or express
warranty of non-infringement or the implied warranties of merchantability or fitness for a particular
purpose.
U.S. Government End Users: This document is provided with a “commercial item” as defined by FAR
2.101 (Oct. 1995) and contains “commercial technical data”and “commercial software documentation” as
those terms are used in FAR 12.211-12.212 (Oct. 1995). Government End Users are authorized to use this
documentation only in accordance with those rights and restrictions set forth herein, consistent with FAR
12.211- 12.212 (Oct. 1995), DFARS 227.7202(JUN 1995) and DFARS 252.227-7015 (Nov. 1995).
Blade Network Technologies, Inc. reserves the right to change any products described herein at any time,
and without notice. Blade Network Technologies, Inc. assumes no responsibility or liability arising from
the use of products described herein, except as expressly agreed to in writing by Blade Network
Technologies, Inc. The use and purchase of this product does not convey a license under any patent rights,
trademark rights, or any other intellectual property rights of Blade Network Technologies, Inc.
Originated in the USA.
Alteon OS, and Alteon are trademarks of Nortel Networks, Inc. in the United States and certain other
countries. Cisco®and EtherChannel®are registered trademarks of Cisco Systems, Inc. in the United States
and certain other countries. Any other trademarks appearing in this manual are owned by their respective
companies.

42C4911, January 2007 3
Contents
Preface 15
Who Should Use This Guide 15
What You’ll Find in This Guide 16
Typographic Conventions 18
How to Get Help 19
Part 1: Basic Switching 21
Chapter 1: Accessing the Switch 23
Management module setup 24
Factory-Default vs. MM assigned IP Addresses 24
Default Gateway 25
Configuring management module for switch access 25
External management port setup 28
Configuring the external management interface 28
Using Telnet 29
Connect to the Switch via SSH 29
BOOTP Relay Agent 29
DHCP Relay Agent 31
Using the Browser-Based Interface 33
Configuring BBI Access via HTTP 33
Configuring BBI Access via HTTPS 33
Using SNMP 36
SNMP v1.0 36
SNMP v3.0 36
Configuring SNMP Trap Hosts 39
Securing Access to the Switch 43
RADIUS Authentication and Authorization 44
TACACS+ Authentication 48

Alteon OS Application Guide
442C4911, January 2007
LDAP Authentication and Authorization 53
Secure Shell and Secure Copy 55
End User Access Control 61
Chapter 2: Port-based Network Access Control 67
Extensible Authentication Protocol over LAN 68
802.1x Authentication Process 69
802.1x Port States 71
Supported RADIUS Attributes 72
Configuration Guidelines 73
Chapter 3: VLANs 75
Overview 76
VLANs and Port VLAN ID Numbers 77
VLAN Numbers 77
PVID Numbers 77
VLAN Tagging 80
VLAN Topologies and Design Considerations 84
VLAN configuration rules 84
Example 1: Multiple VLANs with Tagging Adapters 85
Protocol-based VLANs 87
Port-based vs. Protocol-based VLANs 88
PVLAN Priority Levels 88
PVLAN Tagging 88
PVLAN Configuration Guidelines 89
Configuring PVLAN 89
Chapter 4: Ports and Trunking 93
Overview 94
Statistical Load Distribution 95
Built-In Fault Tolerance 95
Before you configure static trunks 95
Trunk group configuration rules 96
Port Trunking Example 97
Configurable Trunk Hash Algorithm 100
Link Aggregation Control Protocol 101
Configuring LACP 103

Alteon OS Application Guide
542C4911, January 2007
Chapter 5: Spanning Tree Group 105
Overview 106
Bridge Protocol Data Units (BPDUs) 107
Determining the Path for Forwarding BPDUs 107
Spanning Tree Group configuration guidelines 108
Multiple Spanning Trees 110
Default Spanning Tree configuration 110
Why Do We Need Multiple Spanning Trees? 111
Switch-Centric Spanning Tree Group 111
VLAN Participation in Spanning Tree Groups 112
Configuring Multiple Spanning Tree Groups 113
Port Fast Forwarding 115
Configuring Port Fast Forwarding 115
Fast Uplink Convergence 116
Configuration Guidelines 116
Configuring Fast Uplink Convergence 116
Chapter 6: Rapid Spanning Tree Protocol/Multiple Spanning Tree
Protocol 117
Rapid Spanning Tree Protocol 118
Port State Changes 118
Port Type and Link Type 119
RSTP Configuration Guidelines 119
RSTP Configuration Example 120
Multiple Spanning Tree Protocol 121
MSTP Region 121
Common Internal Spanning Tree 121
MSTP Configuration Guidelines 122
MSTP Configuration Example 122
Chapter 7: Quality of Service 123
Overview 124
Using ACL Filters 126
Summary of packet classifiers 126
Summary of ACL Actions 128
Understanding ACL Precedence 128
Using ACL Groups 129
ACL Metering and Re-marking 130

Alteon OS Application Guide
642C4911, January 2007
Viewing ACL Statistics 131
ACL Configuration Examples 132
Using DSCP Values to Provide QoS 134
Differentiated Services Concepts 134
Using 802.1p Priorities to Provide QoS 139
802.1p Configuration Example 140
Queuing and Scheduling 140
Part 2: IP Routing 141
Chapter 8: Basic IP Routing 143
IP Routing Benefits 144
Routing Between IP Subnets 145
Example of Subnet Routing 148
Dynamic Host Configuration Protocol 152
DHCP Relay Agent 153
DHCP Relay Agent Configuration 154
Chapter 9: Routing Information Protocol 155
Distance Vector Protocol 155
Stability 155
Routing Updates 156
RIPv1 156
RIPv2 156
RIPv2 in RIPv1 compatibility mode 157
RIP Features 157
RIP Configuration Example 158
Chapter 10: IGMP 161
IGMP Snooping 162
IGMP Snooping Configuration Example 163
Static Multicast Router 164
IGMP Relay 165
Configuration Guidelines 165
Configure IGMP Relay 166
Additional IGMP Features 168
FastLeave 168
IGMP Filtering 168

Alteon OS Application Guide
742C4911, January 2007
Chapter 11: Border Gateway Protocol 171
Internal Routing Versus External Routing 172
Forming BGP Peer Routers 173
What is a Route Map? 174
Incoming and Outgoing Route Maps 175
Precedence 176
Configuration Overview 176
Aggregating Routes 178
Redistributing Routes 179
BGP Attributes 180
Local Preference Attribute 180
Metric (Multi-Exit Discriminator) Attribute 180
Selecting Route Paths in BGP 181
BGP Failover Configuration 182
Default Redistribution and Route Aggregation Example 185
Chapter 12: OSPF 187
OSPF Overview 188
Types of OSPF Areas 188
Types of OSPF Routing Devices 190
Neighbors and Adjacencies 191
The Link-State Database 191
The Shortest Path First Tree 192
Internal Versus External Routing 192
OSPF Implementation in Alteon OS 193
Configurable Parameters 193
Defining Areas 194
Interface Cost 196
Electing the Designated Router and Backup 196
Summarizing Routes 196
Default Routes 197
Virtual Links 198
Router ID 199
Authentication 199
Host Routes for Load Balancing 202
OSPF Features Not Supported in This Release 203

Alteon OS Application Guide
842C4911, January 2007
OSPF Configuration Examples 204
Example 1: Simple OSPF Domain 205
Example 2: Virtual Links 207
Example 3: Summarizing Routes 211
Verifying OSPF Configuration 213
Part 3: High Availability
Fundamentals 215
Chapter 13: High Availability 217
Layer 2 Failover 218
VLAN Monitor 218
Setting the Failover Limit 219
L2 Failover with Other Features 219
Configuration Guidelines 220
L2 Failover Configurations 220
Configuring Trunk Failover 223
VRRP Overview 224
VRRP Components 224
VRRP Operation 226
Selecting the Master VRRP Router 226
Failover Methods 227
Active-Active Redundancy 228
Hot-Standby Redundancy 229
Alteon OS extensions to VRRP 230
Tracking VRRP Router Priority 230
Virtual Router Deployment Considerations 231
Assigning VRRP Virtual Router ID 231
Configuring the Switch for Tracking 231
High Availability Configurations 233
Active-Active Configuration 233
Hot-Standby Configuration 238

Alteon OS Application Guide
942C4911, January 2007
Part 4: Appendices 243
Appendix A: Troubleshooting 245
Monitoring Ports 246
Port Mirroring behavior 247
Configuring Port Mirroring 251
Appendix B: RADIUS Server Configuration Notes 253
Glossary 255
Index 257

Alteon OS Application Guide
10 42C4911, January 2007