Quanta Cloud Technology QuantaMesh QNOS5 User manual

QuantaMesh
Ethernet Switch
Configuration Guide
QNOS5 NOS Platform

2
REVISIONS
Version
Date
Description
Authors
1.0
15-Nov-2016
1. 1st release
Oliver Wu, James Chu,
WT Chou, and Thomas Lin
1.1
28-Mar-2017
1. New features added including BFD,
VRF Lite, LACP Fallback, and service
prohibit access
James Chu, Oliver and WT
Chou

3
Contents
QuantaMesh Ethernet Switch Configuration Guide.............................................1
1.QuantaMesh QNOS5 Features .......................................................................19
1.1. Switching Features Introduction............................................................................................ 19
1.1.1. VLAN Support ...................................................................................................................................................19
1.1.2. Double VLANs ...................................................................................................................................................19
1.1.3. Switching Modes ..............................................................................................................................................19
1.1.4. Spanning Tree Protocols (STP) ..........................................................................................................................19
1.1.5. Rapid Spanning Tree.........................................................................................................................................19
1.1.6. Multiple Spanning Tree.....................................................................................................................................19
1.1.7. Bridge Protocol Data Unit (BPDU) Guard .........................................................................................................20
1.1.8. BPDU Filtering ..................................................................................................................................................20
1.1.9. Port-channel .....................................................................................................................................................20
1.1.10.Link Aggregate Control Protocol (LACP) ...........................................................................................................20
1.1.11.Multi Chass Link Aggregation Group (MLAG) ...................................................................................................20
1.1.12.Flow Control Support (IEEE 802.3x) ..................................................................................................................20
1.1.13.Asymmetric Flow Control..................................................................................................................................21
1.1.14.Alternate Store and Forward (ASF)...................................................................................................................21
1.1.15.Jumbo Frames Support .....................................................................................................................................21
1.1.16.Auto-MDI/MDIX Support ..................................................................................................................................21
1.1.17.Unidirectional Link Detection (UDLD) ...............................................................................................................21
1.1.18.Expandable Port Configuration ........................................................................................................................21
1.1.19.VLAN-aware MAC-based Switching..................................................................................................................22
1.1.20.Back Pressure Support ......................................................................................................................................22
1.1.21.Auto Negotiation ..............................................................................................................................................22
1.1.22.Storm Control ...................................................................................................................................................22
1.1.23.Port Mirroring...................................................................................................................................................22
1.1.24.sFlow.................................................................................................................................................................23
1.1.25.Static and Dynamic MAC Address Tables .........................................................................................................23
1.1.26.Link Layer Discovery Protocol (LLDP) ................................................................................................................23
1.1.27.Link Layer Discovery Protocol (LLDP) for Media Endpoint Device.....................................................................23
1.1.28.DHCP Layer 2 Relay...........................................................................................................................................23
1.1.29.MAC Multicast Support ....................................................................................................................................24
1.1.30.IGMP Snooping .................................................................................................................................................24
1.1.31.Source Specific Multicasting (SSM)...................................................................................................................24
1.1.32.Control Packet Flooding....................................................................................................................................24

4
1.1.33.Flooding to mRouter Ports................................................................................................................................24
1.1.34.IGMP Snooping Querier ....................................................................................................................................24
1.1.35.Management and Control Plane ACLs ..............................................................................................................25
1.1.36.Remote Switched Port Analyzer (RSPAN) .........................................................................................................25
1.1.37.Link Dependency...............................................................................................................................................25
1.1.38.IPv6 Router Advertisement Guard ....................................................................................................................25
1.1.39.FIP Snooping .....................................................................................................................................................26
1.1.40.ECN Support......................................................................................................................................................26
1.2. Security Features ................................................................................................................... 26
1.2.1. Configurable Access and Authentication Profiles .............................................................................................26
1.2.2. AAA Command Authorization...........................................................................................................................27
1.2.3. Password-protected Management Access .......................................................................................................27
1.2.4. Strong Password Enforcement .........................................................................................................................27
1.2.5. MAC-based Port Security ..................................................................................................................................27
1.2.6. RADIUS Client....................................................................................................................................................27
1.2.7. TACACS+ Client .................................................................................................................................................27
1.2.8. Dot1x Authentication (IEEE 802.1X) .................................................................................................................27
1.2.9. MAC Authentication Bypass .............................................................................................................................28
1.2.10.DHCP Snooping .................................................................................................................................................28
1.2.11.Dynamic ARP Inspection ...................................................................................................................................28
1.2.12.IP Source Address Guard...................................................................................................................................28
1.2.13.Service Prohibit Access .....................................................................................................................................28
1.3. Quality of Service Features .................................................................................................... 28
1.3.1. Access Control Lists (ACL) .................................................................................................................................29
1.3.2. ACL Remarks .....................................................................................................................................................29
1.3.3. ACL Rule Priority ...............................................................................................................................................29
1.3.4. Differentiated Service (DIffServ) .......................................................................................................................29
1.3.5. Class of Service (CoS) ........................................................................................................................................29
1.4. Management Features........................................................................................................... 29
1.4.1. Management Options.......................................................................................................................................29
1.4.2. Management of Basic Network Information....................................................................................................30
1.4.3. Dual Software Images ......................................................................................................................................30
1.4.4. File Management..............................................................................................................................................30
1.4.5. FTP File Management.......................................................................................................................................30
1.4.6. Malicious Code Detection .................................................................................................................................30
1.4.7. Automatic Installation of Firmware and Configuration....................................................................................30
1.4.8. Warm Reboot ...................................................................................................................................................31

5
1.4.9. SNMP Alarms and Trap Logs ............................................................................................................................31
1.4.10.Remote Monitoring (RMON) ............................................................................................................................31
1.4.11.Statistics Application ........................................................................................................................................31
1.4.12.Log Messages ...................................................................................................................................................31
1.4.13.System Time Management...............................................................................................................................32
1.4.14.Source IP Address Configuration ......................................................................................................................32
1.4.15.Multiple Linux Routing Tables ..........................................................................................................................32
1.4.16.Core Dump ........................................................................................................................................................32
1.4.16.1. Core Dump File Handling ..............................................................................................................................32
1.4.17.Open Network Install Environment Support .....................................................................................................32
1.4.18.Interface Error Disable and Auto Recovery.......................................................................................................33
1.5. Routing Features.................................................................................................................... 33
1.5.1. IP Unnumbered.................................................................................................................................................33
1.5.2. Open Shortest Path First (OSPF) .......................................................................................................................33
1.5.3. Border Gateway Partol (BGP) ...........................................................................................................................33
1.5.4. VLAN Routing....................................................................................................................................................34
1.5.5. IP Configuration................................................................................................................................................34
1.5.6. Address Resolution Protocol (ARP) Table Management...................................................................................34
1.5.7. BOOTP/DHCP Relay Agent................................................................................................................................35
1.5.8. IP Helper and UDP Relay...................................................................................................................................35
1.5.9. Routing Table....................................................................................................................................................35
1.5.10.Virtual Router Redundancy Protocol (VRRP) ....................................................................................................35
1.5.11.Algorithmic Longest Prefex Match (ALPM).......................................................................................................35
1.5.12.Bidirectional Forwarding Detection..................................................................................................................35
1.5.13.VRF Lite Operation and Configuration..............................................................................................................36
1.6. Layer 3 Multicast Features..................................................................................................... 36
1.6.1. Internet Group Management Protocol .............................................................................................................36
1.6.2. Protocol Independent Multicast .......................................................................................................................36
1.6.2.1. Dense Mode ((PIM-DM)................................................................................................................................36
1.6.2.2. Spare Mode (PIM-SM) ..................................................................................................................................36
1.6.2.3. Source Specific Multicast (PIM-SSM) ............................................................................................................36
1.6.2.4. PIM IPv6 Support ..........................................................................................................................................37
1.6.3. MLD/MLDv2 (RFC2710/RFC3810) ....................................................................................................................37
1.7. Data Center Features ............................................................................................................. 37
1.7.1. Priority-based Flow Control ..............................................................................................................................37
1.7.2. Data Center Bridging Exchange Protocol..........................................................................................................37
1.7.3. CoS Queuing and Enhanced Transmission Selection.........................................................................................37

6
1.7.4. VXLAN Gateway................................................................................................................................................38
2.Getting Started ..............................................................................................39
2.1. Accessing the switch Command-Line Interface..................................................................... 39
2.1.1. Connecting to the Switch Console ....................................................................................................................39
2.2. Accessing the Switch CLI Through the Network .................................................................... 40
2.2.1. Using the Service Port or Management VLAN Interface for Remote Management .........................................40
2.2.1.1. Configuring Service Port Information ...........................................................................................................41
2.2.1.2. Configuring the In-Band Management Interface .........................................................................................41
2.2.2. DHCP Option 61 ................................................................................................................................................42
2.2.2.1. Configuring DHCP Option 61 ........................................................................................................................42
2.3. Booting the Switch................................................................................................................. 43
2.3.1. Utility Menu Functions......................................................................................................................................44
2.3.1.1. Start QNOS5 Application ..............................................................................................................................45
2.3.1.2. Update Image...............................................................................................................................................45
2.3.1.3. Load Configuration .......................................................................................................................................47
2.3.1.4. Select Serial Speed ........................................................................................................................................48
2.3.1.5. Retrieve Error Log .........................................................................................................................................48
2.3.1.6. Erase Current Configuration .........................................................................................................................49
2.3.1.7. Erase Permanent Storage .............................................................................................................................49
2.3.1.8. Select Boot Method ......................................................................................................................................49
2.3.1.9. Activate Backup Image.................................................................................................................................50
2.3.1.10. Start Diagnostic Application .........................................................................................................................50
2.3.1.11. Reboot ..........................................................................................................................................................50
2.3.1.12. Erase All Configuration Files .........................................................................................................................50
2.4. Understanding the User Interfaces........................................................................................ 50
2.4.1. Using the Command-Line Interface ..................................................................................................................51
2.4.2. Using SNMP ......................................................................................................................................................51
2.4.2.1. SNMPv3 ........................................................................................................................................................52
2.4.2.2. SNMP Configuration example.......................................................................................................................52
3.Configuring L2 Switching Features .................................................................57
3.1. VLANs 57
3.1.1. VLAN Tagging ...................................................................................................................................................58
3.1.2. Double-VLAN Tagging.......................................................................................................................................58
3.1.3. Default VLAN Behavior .....................................................................................................................................59
3.1.4. VLAN Configuration Example ...........................................................................................................................60
3.1.4.1. Configuring the VLANs and Ports on Switch 1 ..............................................................................................62

7
3.1.4.2. Configuring the VLANs and Ports on Switch 2 ..............................................................................................64
3.2. Switchport Modes.................................................................................................................. 64
3.3. Port-channels –Operation and Configuration ...................................................................... 66
3.3.1. Static and Dynamic Port-channel .....................................................................................................................66
3.3.2. Port-channel Hashing .......................................................................................................................................66
3.3.2.1. Resilient Hasing ............................................................................................................................................67
3.3.2.2. Hash Prediction with ECMP and Port-channel..............................................................................................67
3.3.3. Port-channel Interface Overview ......................................................................................................................68
3.3.4. Port-channel Interaction with Other Features..................................................................................................68
3.3.4.1. VLAN .............................................................................................................................................................68
3.3.4.2. STP ................................................................................................................................................................69
3.3.4.3. Statistics .......................................................................................................................................................69
3.3.5. Port-channel Configuration Guidelines.............................................................................................................69
3.3.5.1. Port-channel Configuration Examples ..........................................................................................................69
3.3.5.2. Configuration Dynamic Port-channels..........................................................................................................70
3.3.5.3. Configuration Static Port-channels...............................................................................................................71
3.4. LACP Fallback Configuration .................................................................................................. 72
3.4.1. Configuring Dynamic Port-channels .................................................................................................................72
3.4.2. Configuring Static Port-channels ......................................................................................................................73
3.5. MLAG –Operation and Configuration ................................................................................... 74
3.5.1. Overview...........................................................................................................................................................75
3.5.2. Deployment Scenarios ......................................................................................................................................75
3.5.2.1. Definitions.....................................................................................................................................................76
3.5.2.2. Configuration Consistency ............................................................................................................................77
3.5.3. MLAG Fast Failover...........................................................................................................................................79
3.5.4. MLAG Configuration .........................................................................................................................................79
3.6. Unidirectional Link Detection (UDLD).................................................................................... 82
3.6.1. UDLD Modes .....................................................................................................................................................82
3.6.2. UDLD and Port-channel Interfaces ...................................................................................................................82
3.6.3. Configuring UDLD .............................................................................................................................................82
3.7. Port Mirroring ........................................................................................................................ 84
3.7.1. Configuring Port Mirroring ...............................................................................................................................84
3.7.2. Configuring RSPAN ...........................................................................................................................................85
3.7.2.1. Configuration on the Source Switch (SW1)...................................................................................................85
3.7.2.2. Configuration on the Intermediate Switch (SW2).........................................................................................86
3.7.2.3. Configuration on the Destination Switch (SW3) ...........................................................................................87

8
3.7.3. VLAN-based Mirroring ......................................................................................................................................87
3.7.4. Flow-based Mirroring .......................................................................................................................................87
3.8. Spanning Tree Protocol.......................................................................................................... 88
3.8.1. Classic STP, Multiple STP, and Rapdi STP..........................................................................................................88
3.8.2. STP Operation...................................................................................................................................................88
3.8.3. MSTP in the Network ........................................................................................................................................89
3.8.4. Optional STP Features ......................................................................................................................................92
3.8.4.1. BPDU Flooding ..............................................................................................................................................92
3.8.4.2. Edge Port ......................................................................................................................................................92
3.8.4.3. PDU Filtering.................................................................................................................................................92
3.8.4.4. Root Guard ...................................................................................................................................................93
3.8.4.5. Loop Guard ...................................................................................................................................................93
3.8.4.6. BPDU Protection ...........................................................................................................................................93
3.8.5. STP Configuring Examples ................................................................................................................................94
3.8.5.1. Configuring STP ............................................................................................................................................94
3.8.5.2. Configuring MSTP .........................................................................................................................................95
3.9. IGMP Snooping ...................................................................................................................... 97
3.9.1. IGMP Snooping Querier ....................................................................................................................................97
3.9.2. Configuring IGMP Snooping .............................................................................................................................97
3.9.3. IGMPv3/SSM Snooping...................................................................................................................................100
3.10. MLD Snooping .................................................................................................. 101
3.10.1.MLD Snooping Configuration Example ...........................................................................................................101
3.10.1.1. MLD Snooping Configuration Example .......................................................................................................102
3.10.1.2. MLD Snooping Verification Example ..........................................................................................................103
3.10.2.MLD Snooping First Leave Configuration Example .........................................................................................103
3.10.2.1. MLD Snooping Configuration......................................................................................................................104
3.10.3.MLD Snooping Querier Configuration Example ..............................................................................................104
3.11. LLDP and LLDP-MED ......................................................................................... 106
3.11.1.LLDP and Data Center Application..................................................................................................................106
3.11.2.Configuring LLDP ............................................................................................................................................106
3.12. sFlow................................................................................................................. 108
3.12.1.sFlow Sampling...............................................................................................................................................109
3.12.1.1. Packet Flow Sampling.................................................................................................................................110
3.12.1.2. Counter Sampling .......................................................................................................................................110
3.12.2.Configuring sFlow ...........................................................................................................................................110
3.13. Link Dependency .............................................................................................. 112

9
3.14. AR Guard........................................................................................................... 113
3.15. FIP Snooping ..................................................................................................... 113
3.16. ECN ................................................................................................................... 117
3.16.1.Enabling ECN in Microsoft Windows ..............................................................................................................118
3.16.2.Example 1: SLA Example.................................................................................................................................118
3.16.3.Example 2: Data Cetner TCP (DCTCP) Configuration ......................................................................................121
4.Configuring Security Features ......................................................................123
4.1. Controlling Management Access ......................................................................................... 123
4.1.1. Using RADIUS Servers for Management Security ...........................................................................................123
4.1.1.1. RADIUS Dynamic Authorization ..................................................................................................................124
4.1.2. Using TACACS+ to Control Management Access ............................................................................................126
4.1.3. Configuring and Applying Authentication Profiles..........................................................................................126
4.1.3.1. Configuring Authentication Profiles for Post-based Authentication...........................................................128
4.1.4. Configuring the Primary and Secondary RADIUS Servers ...............................................................................128
4.1.5. Configuring an Authentication Profile ............................................................................................................129
4.2. Configuring DHCP Snooping, DAI, and IPSG......................................................................... 130
4.2.1. DHCP Snooping Overview ...............................................................................................................................130
4.2.1.1. Populating the DHCP Snooping Bindings Database....................................................................................131
4.2.1.2. DHCP Snooping and VLANs.........................................................................................................................131
4.2.1.3. DHCP Snooping Logging and Rate Limits....................................................................................................132
4.2.2. IP Source Guard Overview ..............................................................................................................................132
4.2.2.1. IPSG and Port Security ................................................................................................................................132
4.2.3. Dynamic ARP Inspection Overview .................................................................................................................133
4.2.3.1. Optional DAI Features ................................................................................................................................133
4.2.4. Increasing Security with DHCP Snooping, DAI, and IPSG ................................................................................133
4.2.5. Configuring DHCP Snooping ...........................................................................................................................134
4.2.6. Configuring IPSG.............................................................................................................................................135
4.3. ACLs 136
4.3.1. MAC ACLs........................................................................................................................................................136
4.3.2. IP ACLs ............................................................................................................................................................137
4.3.3. ACL Redirect Function .....................................................................................................................................137
4.3.4. ACL Mirror Function........................................................................................................................................138
4.3.5. ACL Logging ....................................................................................................................................................138
4.3.6. Time-based ACLs.............................................................................................................................................138
4.3.7. ACL Rule Remarks ...........................................................................................................................................139
4.3.8. ACL Rule Priority .............................................................................................................................................139

10
4.3.9. ACL Limitations ...............................................................................................................................................139
4.3.10.ACL Configuration Process..............................................................................................................................140
4.3.11.Preventing False ACL Matches........................................................................................................................140
4.3.12.IPv6 ACL Qualifies ...........................................................................................................................................141
4.3.13.ACL Configuration Examples...........................................................................................................................141
4.3.13.1. Configuring an IP ACL .................................................................................................................................141
4.3.13.2. Configuring a MAC ACL...............................................................................................................................143
4.3.13.3. Configuring a Time-based ACL....................................................................................................................144
4.4. Control Plane Policing (CoPP) .............................................................................................. 145
4.4.1. CoPP Configuration Examples.........................................................................................................................146
4.5. Service Prohibit Access ........................................................................................................ 148
4.5.1. Configuring Service Prohibit ...........................................................................................................................148
5.Configuring Quality of Service......................................................................149
5.1. CoS 149
5.1.1. Trusted and Untrusted Port Modes ................................................................................................................149
5.1.2. Traffic Shaping on Egress Traffic ....................................................................................................................149
5.1.3. Defining Traffic Queues ..................................................................................................................................149
5.1.3.1. Supported Queue Management Methods ..................................................................................................150
5.1.3.2. CoS Configuration Example ........................................................................................................................150
5.2. DiffServ 152
5.2.1. DiffServ Functionality and Switch Roles..........................................................................................................153
5.2.2. Elements of DiffServ Configuration ................................................................................................................153
5.2.3. Configuration DiffServ to Provide Subnets Equal Access to External Network ...............................................153
6.Configuring Switch Management Features...................................................156
6.1. Managing Images and Files.................................................................................................. 156
6.1.1. Supported File Management Methods ...........................................................................................................156
6.1.2. Uploading and Downloading Files ..................................................................................................................157
6.1.3. Managing Switch Software (Images) .............................................................................................................157
6.1.4. Managing Configuration Files ........................................................................................................................157
6.1.4.1. Editing and Downloading Configuration Files ............................................................................................158
6.1.4.2. Creating and Applying Configuration Scripts..............................................................................................158
6.1.4.3. Non-Disruptive Configuration Management ..............................................................................................159
6.1.5. Saving the Running Configuration ..................................................................................................................159
6.1.6. File and Image Management Configuration Examples ..................................................................................159
6.1.7. Upgrading the Firmware ................................................................................................................................159
6.1.7.1. Managing Configuration Scripts.................................................................................................................162