Zte ZXR10 5900E Series User manual

ZXR105900ESeries
AllGigabit-PortIntelligentRoutingSwitch
UserManual(EthernetSwitchingVolume)
Version2.8.23.B
ZTECORPORATION
ZTEPlaza,KejiRoadSouth,
Hi-TechIndustrialPark,
NanshanDistrict,Shenzhen,
P .R.China
518057
Tel:[phone]
Fax:[phone]
URL:http://ensupport.zte.com.cn
E-mail:[email protected]

LEGALINFORMATION
Copyright©2006ZTECORPORATION.
Thecontentsofthisdocumentareprotectedbycopyrightlawsandinternationaltreaties.Anyreproductionordistributionof
thisdocumentoranyportionofthisdocument,inanyformbyanymeans,withoutthepriorwrittenconsentofZTECORPO-
RATIONisprohibited.Additionally,thecontentsofthisdocumentareprotectedbycontractualcondentialityobligations.
Allcompany,brandandproductnamesaretradeorservicemarks,orregisteredtradeorservicemarks,ofZTECORPORATION
oroftheirrespectiveowners.
Thisdocumentisprovided“asis” ,andallexpress,implied,orstatutorywarranties,representationsorconditionsaredis-
claimed,includingwithoutlimitationanyimpliedwarrantyofmerchantability,tnessforaparticularpurpose,titleornon-in-
fringement.ZTECORPORATIONanditslicensorsshallnotbeliablefordamagesresultingfromtheuseoforrelianceonthe
informationcontainedherein.
ZTECORPORATIONoritslicensorsmayhavecurrentorpendingintellectualpropertyrightsorapplicationscoveringthesubject
matterofthisdocument.ExceptasexpresslyprovidedinanywrittenlicensebetweenZTECORPORATIONanditslicensee,
theuserofthisdocumentshallnotacquireanylicensetothesubjectmatterherein.
ZTECORPORATIONreservestherighttoupgradeormaketechnicalchangetothisproductwithoutfurthernotice.
UsersmayvisitZTEtechnicalsupportwebsitehttp://ensupport.zte.com.cntoinquirerelatedinformation.
TheultimaterighttointerpretthisproductresidesinZTECORPORATION.
RevisionHistory
RevisionNo.RevisionDateRevisionReason
R1.0Nov.9,2009FirstRelease
SerialNumber:sjzl20096393

Contents
AboutThisManual..............................................i
VLANConguration...........................................1
VLANOverview..............................................................1
VLANType.................................................................1
VLANTag...................................................................2
VLANLinkType..........................................................2
DefaultVLAN.............................................................3
PVLAN.......................................................................3
QinQ.........................................................................4
SubnetVLAN.............................................................4
ProtocolVLAN............................................................5
VLANTranslation........................................................5
SuperVLAN................................................................5
ConguringVLAN...........................................................6
CreatingVLAN............................................................6
CreatingaVLANinVLANDatabase...............................6
SettingVLANName....................................................6
SettingVLANLinkT ypeonEthernetInterface.................7
AddingVLANMemberPort...........................................7
AddingPortstoaVLANinBatches................................8
SettingtheNativeVLANforaTrunkorHybridPort..........8
SettingVLANFilteringonaPort....................................8
SettingFrameFilteringTypeofaPort............................9
CreatingVLANLayer3Interface...................................9
VLANCongurationExample........................................9
ConguringPVLAN.........................................................10
ConguringQinQ...........................................................11
ConguringSubnetVLAN................................................11
ConguringProtocolVLAN..............................................13
ConguringVLANT ranslation..........................................14
ConguringSuperVLAN..................................................14
VLANMaintenanceandDiagnosis.....................................16

SVLANConguration.......................................17
SVLANOverview............................................................17
SVLANConguration......................................................17
SVLANCongurationExample.........................................19
BasicSVLANConguration..........................................19
TransparentTransmissionSVLANConguration..............20
802.1PPriorityConguration.......................................21
SVLANMaintenanceandDiagnosis...................................21
SVLANCOSConguration................................23
SVLANCOSOverview.....................................................23
ConguringSVLANCOS..................................................23
SVLANCOSCongurationExample..................................24
SVLANCOSMaintenanceandDiagnosis............................24
MACAddressTableConguration....................27
IntroductiontoMACAddress...........................................27
CompositionandMeaningofMACAddressT able............27
MACAddressClassication..........................................28
MACAddressT ableEstablishmentandDeletion..............28
ConguringMACAddressT able........................................29
SettingMACAddressAgingTime.................................30
BurningMACAddresses..............................................30
ConguringMACAddressPermanent............................30
BindingMACAddresstoaPort....................................31
EnablingMACAddressLearning...................................32
LimitingMACAddressCount.......................................32
SettingMACAddressLearningProtection......................32
SettingPortUnkownSourceMACAddressFiltering.........33
SettingMACAddressFiltering......................................33
ViewingMACAddressT able.........................................34
MACAddressT ableCongurationExample........................34
STPConguration............................................37
STPOverview...............................................................37
SSTPMode...............................................................37
RSTPMode...............................................................38
MSTPMode...............................................................38
BPDUProtection........................................................40
ConguringSTP............................................................45
Enabling/DisablingSTP...............................................45
ConguringSTPMode................................................45
ConguringSTPParameters........................................45

CreatingInstances.....................................................46
ConguringMSTPNameandVersion............................47
ConguringSwitchandPortPriority.............................47
ExcludingaPortfromSpanningTreeCalculation............48
BPDUProtectionConguration.........................................48
ConguringBPDUProtectiononEdgePort.....................48
ConguringPortLoopbackFunction..............................49
ConguringPortRootProtectionFunction.....................49
STPCongurationExamples............................................49
BPDUProtectionCongurationExample............................52
EdgePortBPDUProtectionCongurationExamples.........52
PortLoopbackProtectionCongurationExample............53
PortRootProtectionCongurationExample...................54
STPMaintenanceandDiagnosis.......................................54
ZESR/ZESR+Conguration.............................57
ZESR/ZESR+Overview..................................................57
ConguringZESR/ZESR+...............................................58
ConguringZESRAreaProtectionInstance...................58
ConguringMajor-levelRingZESR...............................58
ConguringAccessRingZESR.....................................60
ConguringZESRRestart-Time...................................61
ZESR/ZESR+CongurationExample................................61
ZESRCongurationExample.......................................61
ZESRandZESR+HybridCongurationExample............64
ZESSConguration..........................................67
ZESSOverview.............................................................67
ConguringZESS..........................................................68
CreatingZESSDomain...............................................68
ConguringPreupTime..............................................69
ConguringZESSMode..............................................69
ConguringZESSControlVLAN...................................70
ConguringZESSPort................................................70
ClearingZESSreceive-vlanPorts.................................71
ZESSCongurationExample...........................................71
ZESSMaintenance.........................................................74
ZESRandSVLANLinkageNetworking
Conguration..................................................75
ZESRandSVLANLinkageNetworkingOverview.................75
ConguringZESRandSVLANLinkageNetworking.............76

ConguringSVLAN.....................................................76
ConguringPortMACDuplication.................................77
ConguringPortLOOPBACK........................................77
ConguringOne-WayPVLAN.......................................78
ConguringZESR......................................................78
CongurationExample...................................................78
LinkAggregationConguration.......................81
LinkAggregationOverview.............................................81
ConguringLinkAggregation..........................................82
LinkAggregationCongurationExample...........................83
LinkAggregationMaintenanceandDiagnosis.....................84
IGMPSnoopingConguration..........................87
IGMPSnoopingOverview................................................87
MulticastGroupJoin...................................................88
MulticastGroupLeave................................................88
FastLeave................................................................89
ConguringIGMPSnooping.............................................89
EnablingIGMPsnooping.............................................89
Conguringssm-mapping...........................................89
ConguringTopologyDiscoveryConvergence................90
ConguringanAgentQuerier......................................90
ConguringIGMPAgent.............................................90
RestrictingaMulticastGroup.......................................91
LimitingQuantityofUsers...........................................91
ConguringStaticIGMPSNOOPING.............................92
ModifyingDefaultTime...............................................92
IGMPSnoopingCongurationExample.............................92
IGMPSnoopingMaintenanceandDiagnosis.......................93
UDLDConguration.........................................95
UDLDOverview.............................................................95
ConguringUDLD..........................................................96
UDLDGlobalConguration..........................................96
UDLDInterfaceConguration.....................................97
UDLDCongurationNoticationItems.........................97
LLDP................................................................99
LLDPOverview..............................................................99
ConguringLLDP.........................................................100
LLDPCongurationExample.........................................100
L2PTConguration........................................103

L2PTOverview............................................................103
CommandConguration...............................................103
L2PTCongurationExample..........................................104
EthernetOAMConguration..........................107
802.3ahOverview.......................................................107
Overview................................................................107
RemoteDiscovery....................................................108
RemoteLoopback....................................................108
LinkMonitor............................................................109
Conguring802.3ah....................................................109
FunctionConguration.............................................109
EnhancedFunctionConguration...............................110
InstanceConguration.............................................111
CFMConguration.......................................................112
CFMOverview.........................................................112
ConguringCFM......................................................115
BasicCongurationofCFM...............................115
CFMFunctionConguration..............................117
EnhancedFunctionConguration......................120
InstanceConguration.....................................120
SowConguration.......................................123
Overview....................................................................123
SFlowSamplingUnit................................................124
SFlowAgentUnit.....................................................124
SFlowCollector.......................................................124
ConguringsFlow........................................................125
SFlowCongurationExample........................................125
SFlowMaintenanceandDiagnosis..................................126
IPFIXConguration......................................129
IPFIXOverview...........................................................129
IPFIXOverview.......................................................129
Sampling................................................................130
TimeoutManagement...............................................130
DataOutput............................................................131
ConguringIPFIX........................................................131
BasicConguration..................................................131
Enabling/DisablingIPFIXModule.......................131
SettingIPFIXMemoryEntries...........................131
SettingAgingTimeofActiveStream..................131
SettingAgingTimeofInactiveStream...............132

SettingSamplingRate.....................................132
SettingNMServerAddressandL4PortID..........132
SettingSourceAddressforNetworkDevice
SendingPackets..................................132
ConguringTOPN............................................132
TemplateConguration.............................................133
SettingTemplate.............................................133
SettingDataFieldContainedinT emplate
Packet................................................133
DeletingTemplate...........................................133
RunningTemplate...........................................133
IPFIXCongurationExample.........................................133
IPFIXMaintenanceandDiagnosis..................................134
Figures..........................................................137
Glossary........................................................139

AboutThisManual
PurposeThismanualisZXR105900E(V2.8.23.B)SeriesAllGigabit-Port
IntelligentRoutingSwitchUserManual(EthernetSwitchingVol-
ume).ThismanualintroducesEthernetswitchingfunctionssup-
portedbyZXR105900EincludingVLANconguration,STPcong-
uration,ZESScongurationandEthernetOAMconguration.
Intended
AudienceThismanualisintendedforthefollowingengineers:
�on-sitemaintenanceengineers
�networkmonitorengineers
�systemmaintenanceengineer
WhatIsinThis
ManualZXR105900E(V2.8.23.B)SeriesAllGigabit-PortIntelligentRout-
ingSwitchUserManual(EthernetSwitchingVolume)containsthe
followingchapters:
ChapterSummary
Chapter1VLAN
Conguration
ThischapterintroducesVLANconcept,
relatedcongurationcommandand
congurationexample.
Chapter2SVLAN
Conguration
ThischapterintroducesSVLANconcept,
relatedcongurationcommandand
congurationexample.
Chapter3SVLANCOS
Conguration
ThischapterintroducesSVLANCOS
concept,relatedcongurationcommandand
congurationexample.
Chapter4MACT able
Conguration
ThischapterintroducesMACTableconcept,
relatedcongurationcommandand
congurationexample.
Chapter5STP
Conguration
ThischapterintroducesSTPconcept,related
congurationcommandandconguration
example.
Chapter6
ZESR/ZESR+
Conguration
ThischapterintroducesZESR/ZESR+
concept,relatedcongurationcommandand
congurationexample.
Chapter7ZESS
Conguration
ThischapterintroducesZESSconcept,
relatedcongurationcommandand
congurationexample.
Chapter8ZESR
andSVLAN
LinkageNetworking
Conguration
ThischapterintroducesZESRandSVLAN
LinkageNetworkingconcept,related
congurationcommandandconguration
example.
Chapter9Link
Aggregation
Conguration
ThischapterintroducesLinkAggregation
concept,relatedcongurationcommandand
congurationexample.
CondentialandProprietaryInformationofZTECORPORATIONi

ZXR105900ESeriesUserManual(EthernetSwitchingVolume)
ChapterSummary
Chapter10IGMP
SnoopingConguration
ThischapterintroducesIGMPSnooping
concept,relatedcongurationcommandand
congurationexample.
Chapter11UDLD
Conguration
ThischapterintroducesUDLDconcept,
relatedcongurationcommandand
congurationexample.
Chapter12LLDP
Conguration
ThischapterintroducesLLDPconcept,related
congurationcommandandconguration
example.
Chapter13L2PT
Conguration
ThischapterintroducesL2PTconcept,related
congurationcommandandconguration
example.
Chapter14Ethernet
OAMConguration
ThischapterintroducesEthernetOAM
concept,relatedcongurationcommandand
congurationexample.
Chapter15sow
Conguration
Thischapterintroducessowconcept,related
congurationcommandandconguration
example.
Chapter16IPFIX
Conguration
ThischapterintroducesIPFIXconcept,
relatedcongurationcommandand
congurationexample.
Related
Documentation
�ZXR105900E(V2.8.23.B)SeriesAllGigabit-PortIntelligent
RoutingSwitchHardwareManual
�ZXR105900E(V2.8.23.B)SeriesAllGigabit-PortIntelligent
RoutingSwitchUserManual(BasicCongurationVolume)
�ZXR105900E(V2.8.23.B)SeriesAllGigabit-PortIntelligent
RoutingSwitchUserManual(EthernetSwitchingVolume)
�ZXR105900E(V2.8.23.B)SeriesAllGigabit-PortIntelligent
RoutingSwitchUserManual(IPv4RoutingVolume)
�ZXR105900E(V2.8.23.B)SeriesAllGigabit-PortIntelligent
RoutingSwitchUserManual(IPv6RoutingVolume)
iiCondentialandProprietaryInformationofZTECORPORATION

Chapter1
VLANConfiguration
TableofContents
VLANOverview..................................................................1
ConguringVLAN...............................................................6
ConguringPVLAN.............................................................10
ConguringQinQ...............................................................11
ConguringSubnetVLAN....................................................11
ConguringProtocolVLAN..................................................13
ConguringVLANT ranslation..............................................14
ConguringSuperVLAN......................................................14
VLANMaintenanceandDiagnosis.........................................16
VLANOverview
VirtualLocalAreaNetwork(VLAN)isatechnologythatdividesa
physicalnetworkintoseverallogical(virtual)LocalAreaNetworks
(LANs).EachVLANisidentiedbyaVLANID(VID).
VLANtechnologydividesuserswithinaphysicalLANintodifferent
broadcastdomains(VLANs)accordingtorequirements.Userswith
thesamedemandsaregroupedtothesamebroadcastdomain,
whilethosewithdifferentdemandsareseparated.
EachVLAN,likealogicallyindependentLAN,sharesthesameat-
tributesasthosephysicalLANs.Allbroadcastandunicasttrafcs
withinaVLANarelimitedtotheVLANbutarenotforwardedto
anyotherVLAN.DevicesindifferentVLANsmustrelyonL3rout-
ingswitchingforcommunicationbetweenthem.
VLANprovidesthefollowingadvantages:
1.Lowerbroadcasttrafconthenetwork
2.Enhancednetworksecurity
3.Streamlinednetworkmanagement
VLANType
LANtypeofadevicedependsonhowitwilldivideareceivedframe
toaVLAN.ZXR105900Esupportsport-basedVLAN,thesimplest
andmosteffectivemethodofVLANdivision.Itdividesitsvarious
portsintodifferentVLANs,sothatanytrafcreceivedonaport
belongstoitscorrespondingVLAN.
CondentialandProprietaryInformationofZTECORPORATION1

ZXR105900ESeriesUserManual(EthernetSwitchingVolume)
Assumeports1,2and3belongtothesameVLAN,whiletheother
portsbelongtootherVLANs,thenframesreceivedonport1are
broadcasttoports2and3onlywhiletheyarenotpassedtoany
otherport.WhenauserinaVLANmovestoanewlocation,itno
longerbelongstotheoriginalVLANunlesstheuserisassignedto
thatVLANagain.
VLANTag
ItispossibletotransmitservicesofseveralVLANsoverasingle
linkifaframecarriesinformationaboutitsnativeVLANwhilebeing
passedthroughanetwork.IEEE802.1Qimplementsthisfunction
throughattachingaVLANtagtotheEthernetframe.
AVLANtagisafour-bytelongnumber ,anditcomesafterthe
sourceMACaddressandbeforethelength/typeeldinanEthernet
frame.Figure1showstheVLANtagformat.
FIGURE1VLANTAGFORMAT
VLANtagisappliedtocross-switchVLANs,whenthelinkbetween
switchesisusuallycalledatrunk.VLANtagallowsVLANscross
severalswitchestobecreatedthroughoneormoretrunks.When
theportsconnectingtheseswitchesreceiveataggedframe,the
portscanjudgewhichVLANtheframebelongstobasedonthe
VLANtag.
Each802.1QportisallocatedadefaultVLANID,calledPVID.Un-
taggedframesreceivedonaportisconsideredbelongingtothe
defaultVLAN,andthenbroadcastedinthatVLAN.
ZXR105900EsupportsIEEE802.1Qtag.
VLANLinkType
ZXR105900Eportssupportthefollowinglinks:
1.Accesslink
Itconnectsdevices(suchasworkstation)thatcannotiden-
tifyVLANtagstotheVLANswitchport.Ittransmitsuntagged
framesonlytoasingleVLAN.
2.Trunklink
2CondentialandProprietaryInformationofZTECORPORATION

Chapter1VLANConguration
ItconnectstwodevicesthatcanidentifyVLANtagsandcar-
riesseveralVLAN’sservices.Ittransmitstaggedframesonly
toseveralVLANs.Themostcommontrunklinkistheonebe-
tweentwoVLANswitches.
3.HybridLink
Ittransmitsbothtaggedanduntaggedframes.Foragiven
VLAN,however ,itonlytransmitsframesofthesametype.
DefaultVLAN
ZXR105900EhasadefaultVLANinitially,whichhasthefollowing
features:
�VLANIDas1
�VLANnameasVLAN0001
�Allportsincluded
�Untaggedbydefaultonallports
PVLAN
Toimprovenetworksecurity,messagesamongdifferentusersshall
beseparated.ThetraditionalmethodistoassignaVLANtoeach
user .Themethodhasobviouslimitation,whichcanbeseenfrom
thefollowingaspects:
1.Atpresent,IEEE802.1Qstandardsupportsutmost4094
VLANs,whichlimitsthenumberofusersandnetworkexpan-
sion.
2.EachVLANcorrespondstooneIPsubnet,sovastdividedsub-
netswillcausethewasteofIPaddresses.
3.PlanningandmanagementtoamassofVLANsandIPsubnets
isextremelycomplicated.
PVLAN(PrivateVLAN)technologyisdevelopedtosolvetheseprob-
lems.
PVLANdividestheportsinVLANintothreetypes:theportcon-
nectingtotheuseriscalledIsolatePort,theportconnectingtoa
groupofusersthatneedinterconnectionandintercommunication
iscalledCommunityPortandtheportconnectingtotheupstream
routeriscalledPromiscuousPort.Theisolatedportcommunicates
withthepromiscuousportonly,butnotwithanyotherisolated
portorcommunityport.Communityportcancommunicatewith
promiscuousportandanyothercommunityport,butnotwithiso-
latedport.ThusportsinthesameVLANareseparated.Theuser
whoconnectswithisolatedportcanonlycommunicatewithits
defaultgateway,theuserwhoconnectscommunityportcanin-
terconnectandintercommunicate.Networksecurityisensured.
ZXR105900Esupports20PVLANgroups,eachgrouphavingcus-
tomizedisolatedportsandatmost256isolatedports,16commu-
nityportsand8promiscuousports.
CondentialandProprietaryInformationofZTECORPORATION3

ZXR105900ESeriesUserManual(EthernetSwitchingVolume)
QinQ
QinQ,alsoknownasVLANstack,isagraphicnamefortheIEEE
802.1Qbasedtunnelprotocol.QinQtechnologyencapsulatesthe
originalVLANtag(innertag)withanotherVLANtag(outertag)so
thattheinnertagismasked.
QinQimplementssimpleLayer2VPN(L2VPN)withoutprotocol
support,applicabletosmall-sizedLANswithL3switchesastheir
core.
QinQtypicalnetworkingisshowninFigure2.Porttothecus-
tomernetworkiscalledthecustomerport.TheporttotheService
Providernetworkiscalledtheuplinkport,andtheSPedgeaccess
deviceiscalledPoviderEdge(PE).
FIGURE2QINQTYPICALNETWORKING
ThecustomernetworkisusuallyconnectedtothePEthroughtrunk
VLAN.UplinksportsintheSPnetworkareconnectedsymmetri-
callyinthetrunkVLANmode.
Whenapacket(tagged/untagged)fromcustomernetwork1
reachesthecustomerportofswitchA.SwitchAattachesanouter
tag(VLANIDas10)toitsforcibly.WithintheSPnetwork,packet
isforwardedtoallportsinVLAN10.Thispacketnallyarrivesat
switchB.SwitchBrecognizesthattheporttocustomernetwork
2isacustomerport,thendispatchestheoutertagcomplying
withthetraditional802.1Qtorestoretheoriginalpacket.Switch
Bsendsthepackettocustomernetwork2.
Thusdataistransparentlytransmittedbetweencustomernet-
works1and2throughtheSPnetwork.Thisallowsthecustomer
considerableexibilityforPrivateVLANIDplanning,withoutany
conictwiththoseoftheSPnetwork.
SubnetVLAN
Subnet-basedVLANappliestoL2VLANnetworksforexiblecon-
gurationofdataframeforwarding.Subnet-basedVLANforward
adataframetoaVLANbasedonthesourceIPaddress.This
sourceIPaddressbasedVLANcanforwarduserdatafromdiffer-
entsubnetscrossseveralVLANs,whileremaintheoriginalVLAN
membershipunchanged.
4CondentialandProprietaryInformationofZTECORPORATION

Chapter1VLANConguration
SubnetVLANisolatesdataframesfromdifferentsourceIPad-
dressessothatauserhasaccesstodatafromitsownsubnet
only.ThesubnetVLANpriorityinuntaggedframeforwardingis
higherthanthatofprotocolVLANorPVID;thepriorityoftagged
frameforwardinginthetaggedmodeishigherthanthatofsubnet
VLAN.
PortisenabledonSubnetVLANbydefaultandalsocanbedisabled
accordingtoactualdemands.
ZXR105900Esupportsupto256subnetVLANs,thatis,supports
processingdataframesfrom256sourceIPsubnets.
ProtocolVLAN
Protocol-basedVLANappliestoL3networksorthoserunningmany
protocols.Protocol-basedVLANdividespacketsbasedontheir
networklayerencapsulationprotocol.Packetswiththesametag
belongtothesameprotocolVLAN.Thisnetworklayerprotocol
basedVLANcanbroadcastpacketscrossseveralVLANswitches.
Itallowsuserstomovefreelyinthenetworkwhileremaintheir
VLANmembershipunchanged.
ThissolutioneliminatestheneedtoreconguretheVLANwhena
usermovestoanotherphysicallocationinthenetwork.Inaddi-
tion,asVLANsareidentiedbasedontheprotocoltypeinsteadof
attachedframetag,trafcthroughthenetworkreduces.
ProtocolVLANisnotonlyenabledonallphysicalportsbydefault
butalsodisabledonportsaccordingtodemands,whichidenties
thatVLANsarebasedonthepackettagonly.Itseparatespackets
withdifferenttagssothatusershaveaccesstodatafromother
usersinthesameVLANonly.
ZXR105900Esupportsupto16protocolVLANs.Thismeansthat
protocolVLANssupportprocessingpacketswith16kindsoftags.
VLANTranslation
VLANtranslationpermitstheswitchesofdifferentuserstohave
sameVLANID.WithVLANtranslation,coreswitchmodiesthe
sameVLANIDofedgeswitchesintothedifferentVLANID.This
functionisolateuserincoreswitchandsimplythecongurationof
edgeswitch.
ZXR105900Esupport768VLANtranslation.
SuperVLAN
OnatraditionalISPnetwork,oneIPsubnetisallocatedtoeach
user ,whichmeansthattheoccupationofthreeIPaddressesbya
singleuserasitssubnetaddress,broadcastaddressanddefault
gatewayaddress.EvenifthereareanumberofidleIPaddresses
CondentialandProprietaryInformationofZTECORPORATION5

ZXR105900ESeriesUserManual(EthernetSwitchingVolume)
inauser’ssubnet,theycannotbeallocatedtootherusers.This
causeswasteofIPaddresses.
SuperVLANeffectivelyresolvesthisproblem.Itmergesseveral
VLANs(calledsub-VLAN)toaSuperVLANsothattheycanusethe
sameIPsubnetanddefaultgateway.
WiththeSuperVLANtechnology,theISPneedsonlyoneIPsub-
netforitsSuperVLAN.Itcreatesasub-VLANforeachofitsusers.
Thesesub-VLANscanuseexiblytheIPaddressesintheSuper-
VLANsubnetandsharethedefaultgatewayoftheSuperVLAN.
Eachsub-VLANisanindependentbroadcastdomain,ensuringuser
isolation,andcommunicateswithothersub-VLANsthroughSuper-
VLANrouting.
ConfiguringVLAN
CreatingVLAN
CommandFunction
ZXR10(config)#vlan{<vlan-id>|<vlan-name>}ThiscreatesspecicVLANand
entersintoVLANconguration
mode.
CreatingaVLANinVLANDatabase
TocreateaVLANinVLANdatabase,usethefollowingcommand.
CommandFunction
ZXR10(config)#vlanlist<vlan-list>[name<vlan-name>]ThiscreatesaVLANinVLAN
database.
SettingVLANName
TosetVLANname,usethefollowingcommand.
CommandFunction
ZXR10(config-vlanX)#name<vlan-name>ThissetsVLANname.
VLANnameuniquelyidentiesaVLAN.Thiscanbeagroup,de-
partmentandregionname.Bydefault,aVLANnameis“VLAN”
+VLANID.VLANIDincludesfourdigits(0sarepretendedwhen
therearelessthanfourdigits).NameofVLAN4isVLAN0004.
6CondentialandProprietaryInformationofZTECORPORATION

Chapter1VLANConguration
SettingVLANLinkTypeonEthernet
Interface
TosetVLANlinktypeonEthernetport,usethefollowingcommand.
CommandFunction
ZXR10(config-gei_1/x)#switchportmode{access|trunk
|hybrid}
ThissetsVLANlinktypeon
Ethernetport.
TherearethreeVLANlinktypesforEthernetinterfaceofZXR10
5900E:Accessmode,TrunkmodeandHybridmode.Accessmode
isusedbydefault.
�PortsofaccessmodebelongtoonlyoneVLAN,supportun-
taggedframesandareusuallyconnectedtocomputers.
�PortsoftrunkmodecanbelongtoseveralVLANs(re-
ceives/sendspacketsfrom/toseveralVLANs),supporttagged
frames,andareusuallyusedastrunkportsbetweenswitches.
�PortsofhybridmodecanbelongtoseveralVLANs(re-
ceives/sendspacketsfrom/toseveralVLANs),supportboth
taggedanduntaggedframes(customized),andcanbeused
toconnectbothswitchesandcomputers.
Portsofhybridmodearedifferentfromtrunkports.Theysend
bothtaggedanduntaggedframes(trunkportssenduntagged
framesonlywhentheyarefromthedefaultVLAN).
AddingVLANMemberPort
Toaddanaccess,trunkorhybridporttoaspeciedVLAN,use
followingcommands.
AccessportonlycanbeaddedtooneVLAN,TrunkportandHybrid
portcanbeaddedintomultipleVLANs.
�ToaddanaccessportintoaspecicVLAN,usethefollowing
commands.
CommandFunction
ZXR10(config-gei_1/x)#switchportaccessvlan
{<vlan-id>|<vlan-name>}
Thiscommandaddsanaccess
porttoaspeciedVLAN.
�ToaddatrunkporttoaspecicVLAN,usethefollowingcom-
mand.
CommandFunction
ZXR10(config-gei_1/x)#switchporttrunkvlan<vlan-list>Thiscommandaddsatrunkport
toaspeciedVLAN.
CondentialandProprietaryInformationofZTECORPORATION7

ZXR105900ESeriesUserManual(EthernetSwitchingVolume)
�ToaddahybridportintoaspecicVLAN,usethefollowing
commands.
CommandFunction
ZXR10(config-gei_1/x)#switchporthybridvlan
<vlan-list>[tag|untag]
Thiscommandaddsahybrid
porttoaspeciedVLAN.
AddingPortstoaVLANinBatches
ToaddportstoaVLANinbatches,usethefollowingcommand.
CommandFunction
ZXR10(config-vlanX)#switchport{pvid|tag|untag}<por
t-list>
ThisaddsportstoaVLANin
batches.
SettingtheNativeVLANforaTrunk
orHybridPort
AnaccessportbelongstoonlyoneVLAN,itsnativeVLANisthe
VLANtowhichitbelongs.Thisrequiresnoadditionalconguration.
Trunkportandhybridportbelongtomultiplevlansandtheyneed
tosetnativevlan.Ifnativevlanissetonport,whenoneframe
withnovlantagisreceivedonport,itwillbeforwardedtotheport
belongingtothisnativevlan.Nativevlanoftrunkportandhybrid
portisvlan1bydefault.
St-
ep
CommandFunction
1ZXR10(config-gei_1/x)#switchporttrunknativevlan
{<vlan-id>|<vlan-name>}
Thiscommandsetsnative
VLANforatrunkport.
2ZXR10(config-gei_1/x)#switchporthybridnative
vlan{<vlan-id>|<vlan-name>}
Thiscommandsetsnative
VLANforahybridport.
SettingVLANFilteringonaPort
TosetVLANlteringonaport,usethefollowingcommand.
CommandFunction
ZXR10(config-gei_1/x)#ingressfiltering{enable|disab
le}
ThissetsVLANlteringona
port.
8CondentialandProprietaryInformationofZTECORPORATION

Chapter1VLANConguration
Wheningresslteringisenabledonaport,theportdropsare-
ceivedframeiftheVLANtowhichtheframebelongsdoesnot
includetheingress.Bydefault,VLANingresslteringisenable.
SettingFrameFilteringTypeofaPort
Tosetframelteringtypeofaport,usethefollowingcommand.
CommandFunction
ZXR10(config-gei_1/x)#acceptableframetypes{all|tag}Thissetsframelteringtypeof
aport.
Thissetstheframetypeoftheportwhichcanreceivealltypes
offramesincludinguntaggedandtaggedframes.Bydefault,all
framesarereceived.
CreatingVLANLayer3Interface
CommandFunction
ZXR10(config)#interface{vlan<vlan-id>|<vlan-if>}ThiscreatesVLANlayer3
interface.
ItisnecessarytocreatethisVLANbeforecreatingVLANlayer3
interface.
VLANConfigurationExample
Theportsgei_1/1andgei_1/2onSwitchA,andtheportsgei_1/1
andgei_1/2onswitchB,belongtoVLAN10;theportsgei_1/4
andgei_1/5onswitchA,andtheportsgei_1/4andgei_1/5on
switchB,belongtoVLAN20.Thefourportsareallaccessports,
asshowninFigure3.SwitchesAandBareconnectedthrough
portsgei_1/24(twotrunkports)overatrunklink.
FIGURE3VLANNETWORKING
CondentialandProprietaryInformationofZTECORPORATION9

ZXR105900ESeriesUserManual(EthernetSwitchingVolume)
CongurationofSwitchA:
ZXR10_A(config)#vlan10
ZXR10_A(config-vlan10)#switchportpvidgei_1/1-2
ZXR10_A(config-vlan10)#exit
ZXR10_A(config)#vlan20
ZXR10_A(config-vlan20)#switchportpvidgei_1/4-5
ZXR10_A(config-vlan20)#exit
ZXR10_A(config)#interfacegei_1/24
ZXR10_A(config--gei_1/24)#switchportmodetrunk
ZXR10_A(config-gei_1/24)#switchporttrunkvlan10
ZXR10_A(config-gei_1/24)#switchporttrunkvlan20
ZXR10_A(config-gei_1/24)#exit
CongurationofSwitchB:
ZXR10_B(config)#vlan10
ZXR10_B(config-vlan10)#switchportpvidgei_1/1-2
ZXR10_B(config-vlan10)#exit
ZXR10_B(config)#vlan20
ZXR10_B(config-vlan20)#switchportpvidgei_1/4-5
ZXR10_B(config-vlan20)#exit
ZXR10_B(config)#interfacegei_1/24
ZXR10_B(config-gei_1/24)#switchportmodetrunk
ZXR10_B(config-gei_1/24)#switchporttrunkvlan10
ZXR10_B(config-gei_1/24)#switchporttrunkvlan20
ZXR10_B(config-gei_1/24)#exit
ConfiguringPVLAN
St-
ep
CommandFunction
1ZXR10(config)#vlanprivate-mapsession-id<id>[i
solate<port-list>][promis<port-list>][community
<port-list>]
Thisconguresisolated
ports,promiscuousportsand
communityportofPrivate
VLAN.
2ZXR10(config)#showvlanprivate-mapThisdisplaystheconguration
informationofPVLAN.
ExampleThecongurationoftwoisolatedgroupsisshownbelow.
Isolatedgroup1:gei_1/1,gei_1/2,xgei_2/1andxgei_3/1areiso-
latedports,portgei_1/10isapromiscuousport.
Isolatedgroup2:gei_1/3,gei_1/4andgei_4/1areisolatedports,
gei_1/5,gei_1/6andgei_5/1arecommunityports,gei_1/11and
gei_1/12arepromiscuousports.
Thedetailedcongurationisasfollows:
ZXR10(config)#vlanprivate-mapsession-id1isolate
gei_1/1-2,gei_2/1,gei_3/1promisgei_1/10
ZXR10(config)#vlanprivate-mapsession-id2isolate
gei_1/3-4,gei_4/1promisgei_1/11-12communitygei_1/5-6,gei_5/1
ZXR10(config)#showvlanprivate-map
SessionIsolate_PortsPromis_PortsCommunity_portsVlan_CfgVlan
------------------------------------------------------------------
1gei_1/1-2,gei_1/10
_2/1,gei_3/1
2gei_1/3-4,gei_1/11-12gei_1/5-6,gei_5/1
_4/1
ZXR10(config)#
10CondentialandProprietaryInformationofZTECORPORATION