HP 5500 Ei 5500 Si Switch Series Configuration Guide
Have a look at the manual HP 5500 Ei 5500 Si Switch Series Configuration Guide online for free. It’s possible to download the document as PDF or print. UserManuals.tech offer 1114 HP manuals and user’s guides for free. Share the user manual or guide on Facebook, Twitter or Google+.
265 # Enable IPv6 multicast routing, enable IPv6 PIM-DM on each interface, and enable MLDv1 on GigabitEthernet 1/0/1. system-view [RouterA] multicast ipv6 routing-enable [RouterA] interface gigabitethernet 1/0/1 [RouterA-GigabitEthernet1/0/1] mld enable [RouterA-GigabitEthernet1/0/1] pim ipv6 dm [RouterA-GigabitEthernet1/0/1] quit [RouterA] interface gigabitethernet 1/0/2 [RouterA-GigabitEthernet1/0/2] pim ipv6 dm [RouterA-GigabitEthernet1/0/2] quit 3. Configure Switch A: # Enable MLD snooping globally. system-view [SwitchA] mld-snooping [SwitchA-mld-snooping] quit # Create VLAN 100, assign GigabitEthernet 1/0/1 through GigabitEthernet 1/0/4 to this VLAN, and enable MLD snooping and the function of dropping IPv6 unknown multicast traffic in the VLAN. [SwitchA] vlan 100 [SwitchA-vlan100] port gigabitethernet 1/0/1 to gigabitethernet 1/0/4 [SwitchA-vlan100] mld-snooping enable [SwitchA-vlan100] mld-snooping drop-unknown [SwitchA-vlan100] quit # Configure an IPv6 multicast group filter so that the hosts in VLAN 100 can join only the IPv6 multicast group FF1E::101. [SwitchA] acl ipv6 number 2001 [SwitchA-acl6-basic-2001] rule permit source ff1e::101 128 [SwitchA-acl6-basic-2001] quit [SwitchA] mld-snooping [SwitchA–mld-snooping] group-policy 2001 vlan 100 [SwitchA–mld-snooping] quit # Configure GigabitEthernet 1/0/3 and GigabitE thernet 1/0/4 as simulated hosts for IPv6 multicast group FF1E::101. [SwitchA] interface gigabitethernet 1/0/3 [SwitchA-GigabitEthernet1/0/3] mld-snooping host-join ff1e::101 vlan 100\ [SwitchA-GigabitEthernet1/0/3] quit [SwitchA] interface gigabitethernet 1/0/4 [SwitchA-GigabitEthernet1/0/4] mld-snooping host-join ff1e::101 vlan 100\ [SwitchA-GigabitEthernet1/0/4] quit 4. Verify the configuration: # Display detailed MLD snooping group in formation in VLAN 100 on Switch A. [SwitchA] display mld-snooping group vlan 100 verbose Total 1 IP Group(s). Total 1 IP Source(s). Total 1 MAC Group(s).
266 Port flags: D-Dynamic port, S-Static port, C-Copy port, P-PIM port Subvlan flags: R-Real VLAN, C-Copy VLAN Vlan(id):100. Total 1 IP Group(s). Total 1 IP Source(s). Total 1 MAC Group(s). Router port(s):total 1 port(s). GE1/0/1 (D) ( 00:01:30 ) IP group(s):the following ip group(s) match to one mac group. IP group address:FF1E::101 (::, FF1E::101): Attribute: Host Port Host port(s):total 2 port(s). GE1/0/3 (D) ( 00:03:23 ) GE1/0/4 (D) ( 00:04:10 ) MAC group(s): MAC group address:3333-0000-0101 Host port(s):total 2 port(s). GE1/0/3 GE1/0/4 The output shows that GigabitEthernet 1/0/3 and GigabitEthernet 1/0/4 of Switch A have joined IPv6 multicast group FF1E::101. Static port configuration example Network requirements As shown in Figure 69, MLDv1 runs on Router A, and MLDv1 snooping runs on Switch A, Switch B and Switch C. Router A acts as the MLD querier. Host A and Host C are permanent receivers of IPv6 multicast group FF1E::101. GigabitEthernet 1/0/3 and GigabitEthernet 1/0/5 on Switch C are required to be configured as static member ports for multicast group FF1E::101 to enhance the reliability of multicast traffic transmission. Suppose STP runs on the network. To avoid data loop s, the forwarding path from Switch A to Switch C is blocked under normal conditions, and IPv6 multicast traffic flows to the receivers attached to Switch C only along the path of Switch A—Switch B—Switch C. Configure GigabitEthernet 1/0/3 on Switch C as a static router port, so that IPv6 multicast traffic can flow to the receivers nearly uninterruptedly along the path of Switch A—Switch C in the case that the path of Switch A—Switch B—Switch C becomes blocked. NOTE: If no static router port is configured, when the path of Switch A—Switch B—Switch C becomes blocked, a t least one MLD query-response cycle must be complete d before the IPv6 multicast data can flow to the receivers along the new path of Switch A—Switch C. Namely, IPv6 multicast delivery will be interrupted during this process. For more information about the Spanning Tree Protocol (STP), see Layer 2—LAN Switching Configuration Guide.
267 Figure 69 Network diagram Configuration procedure 1. Enable IPv6 forwarding and configure IPv6 addresses: Enable IPv6 forwarding and configure an IPv6 addr ess and prefix length for each interface as per Figure 69 . 2. Configure Router A: # Enable IPv6 multicast routing, enable IPv6 PIM-DM on each interface, and enable MLD on GigabitEthernet 1/0/1. system-view [RouterA] multicast ipv6 routing-enable [RouterA] interface gigabitethernet 1/0/1 [RouterA-GigabitEthernet1/0/1] mld enable [RouterA-GigabitEthernet1/0/1] pim ipv6 dm [RouterA-GigabitEthernet1/0/1] quit [RouterA] interface gigabitethernet 1/0/2 [RouterA-GigabitEthernet1/0/2] pim ipv6 dm [RouterA-GigabitEthernet1/0/2] quit 3. Configure Switch A: # Enable MLD snooping globally. system-view [SwitchA] mld-snooping [SwitchA-mld-snooping] quit # Create VLAN 100, assign GigabitEthernet 1/0/1 through GigabitEthernet 1/0/3 to this VLAN, and enable MLD snooping in the VLAN. [SwitchA] vlan 100 [SwitchA-vlan100] port gigabitethernet 1/0/1 to gigabitethernet 1/0/3 [SwitchA-vlan100] mld-snooping enable
268 [SwitchA-vlan100] quit # Configure GigabitEthernet 1/0/3 to be a static router port. [SwitchA] interface gigabitethernet 1/0/3 [SwitchA-GigabitEthernet1/0/3] mld-snooping static-router-port vlan 100 \ [SwitchA-GigabitEthernet1/0/3] quit 4. Configure Switch B: # Enable MLD snooping globally. system-view [SwitchB] mld-snooping [SwitchB-mld-snooping] quit # Create VLAN 100, assign GigabitEthernet 1/0/1 and GigabitEthernet 1/0/2 to this VLAN, and enable MLD snooping in the VLAN. [SwitchB] vlan 100 [SwitchB-vlan100] port gigabitethernet 1/0/1 gigabitethernet 1/0/2 [SwitchB-vlan100] mld-snooping enable [SwitchB-vlan100] quit 5. Configure Switch C: # Enable MLD snooping globally. system-view [SwitchC] mld-snooping [SwitchC-mld-snooping] quit # Create VLAN 100, assign GigabitEthernet 1/0/1 through GigabitEthernet 1/0/5 to this VLAN, and enable MLD snooping in the VLAN. [SwitchC] vlan 100 [SwitchC-vlan100] port gigabitethernet 1/0/1 to gigabitethernet 1/0/5 [SwitchC-vlan100] mld-snooping enable [SwitchC-vlan100] quit # Configure GigabitEthernet 1/0/3 and GigabitEthernet 1/0/5 as static member ports for IPv6 multicast group FF1E::101. [SwitchC] interface GigabitEthernet 1/0/3 [SwitchC-GigabitEthernet1/0/3] mld-snooping static-group ff1e::101 vlan \ 100 [SwitchC-GigabitEthernet1/0/3] quit [SwitchC] interface GigabitEthernet 1/0/5 [SwitchC-GigabitEthernet1/0/5] mld-snooping static-group ff1e::101 vlan \ 100 [SwitchC-GigabitEthernet1/0/5] quit 6. Verify the configuration: # Display detailed MLD snooping group in formation in VLAN 100 on Switch A. [SwitchA] display mld-snooping group vlan 100 verbose Total 1 IP Group(s). Total 1 IP Source(s). Total 1 MAC Group(s). Port flags: D-Dynamic port, S-Static port, C-Copy port, P-PIM port Subvlan flags: R-Real VLAN, C-Copy VLAN Vlan(id):100. Total 1 IP Group(s).
269 Total 1 IP Source(s). Total 1 MAC Group(s). Router port(s):total 2 port(s). GE1/0/1 (D) ( 00:01:30 ) GE1/0/3 (S) IP group(s):the following ip group(s) match to one mac group. IP group address:FF1E::101 (::, FF1E::101): Attribute: Host Port Host port(s):total 1 port(s). GE1/0/2 (D) ( 00:03:23 ) MAC group(s): MAC group address:3333-0000-0101 Host port(s):total 1 port(s). GE1/0/2 The output shows that GigabitEthernet 1/0/3 of Switch A has become a static router port. # Display detailed MLD snooping group in formation in VLAN 100 on Switch C. [SwitchC] display mld-snooping group vlan 100 verbose Total 1 IP Group(s). Total 1 IP Source(s). Total 1 MAC Group(s). Port flags: D-Dynamic port, S-Static port, C-Copy port, P-PIM port Subvlan flags: R-Real VLAN, C-Copy VLAN Vlan(id):100. Total 1 IP Group(s). Total 1 IP Source(s). Total 1 MAC Group(s). Router port(s):total 1 port(s). GE1/0/2 (D) ( 00:01:23 ) IP group(s):the following ip group(s) match to one mac group. IP group address:FF1E::101 (::, FF1E::101): Attribute: Host Port Host port(s):total 2 port(s). GE1/0/3 (S) GE1/0/5 (S) MAC group(s): MAC group address:3333-0000-0101 Host port(s):total 2 port(s). GE1/0/3 GE1/0/5 The output shows that GigabitEthernet 1/0/3 and GigabitEthernet 1/0/5 on Switch C have become static member ports for IPv6 multicast group FF1E::101.
270 MLD snooping querier configuration example Network requirements As shown in Figure 70, in a Layer-2-only network environment, two multicast sources (Source 1 and Source 2) send IPv6 multicast data to multicast groups FF1E::101 and FF1E::102 respectively, Host A and Host C are receivers of multicast group FF1E::101 and Host B and Host D are receivers of multicast group FF1E::102. MLDv1 runs on all the receivers and MLDv1 snooping runs on all the switches. Switch A, which is close to the multicast sources, is chosen as the MLD snooping querier. To prevent flooding of unknown multicast traffic within the VLAN, configure all the switches to drop unknown multicast data packets. Figure 70 Network diagram Configuration procedure 1. Configure Switch A: # Enable IPv6 forwarding and enable MLD snooping globally. system-view [SwitchA] ipv6 [SwitchA] mld-snooping [SwitchA-mld-snooping] quit # Create VLAN 100 and assign GigabitEthernet 1/0/1 through GigabitEthernet 1/0/3 to VLAN 100. [SwitchA] vlan 100 [SwitchA-vlan100] port gigabitethernet 1/0/1 to gigabitethernet 1/0/3 # Enable MLD snooping and the function of dro pping unknown IPv6 multicast data packets in VLAN 100. [SwitchA-vlan100] mld-snooping enable [SwitchA-vlan100] mld-snooping drop-unknown # Configure MLD snooping querier feature in VLAN 100. [SwitchA-vlan100] mld-snooping querier
271 [SwitchA-vlan100] quit 2. Configure Switch B: # Enable IPv6 forwarding and enable MLD snooping globally. system-view [SwitchB] ipv6 [SwitchB] mld-snooping [SwitchB-mld-snooping] quit # Create VLAN 100, add GigabitEthernet 1/0/1 through GigabitEthernet 1/0/4 into VLAN 100. [SwitchB] vlan 100 [SwitchB-vlan100] port gigabitethernet 1/0/1 to gigabitethernet 1/0/4 # Enable the MLD snooping feature and the function of dropping unknown IPv6 multicast data packets in VLAN 100. [SwitchB-vlan100] mld-snooping enable [SwitchB-vlan100] mld-snooping drop-unknown [SwitchB-vlan100] quit Configurations of Switch C and Switch D are similar to the configuration of Switch B. 3. Verify the configuration: When the MLD snooping querier starts to work, all the switches but the querier receive MLD general queries. Use the display mld-snooping statistics command to view the statistics information of these MLD messages received. # Display the MLD message statistics on Switch B. [SwitchB-vlan100] display mld-snooping statistics Received MLD general queries:3. Received MLDv1 specific queries:0. Received MLDv1 reports:12. Received MLD dones:0. Sent MLDv1 specific queries:0. Received MLDv2 reports:0. Received MLDv2 reports with right and wrong records:0. Received MLDv2 specific queries:0. Received MLDv2 specific sg queries:0. Sent MLDv2 specific queries:0. Sent MLDv2 specific sg queries:0. Received error MLD messages:0. MLD snooping proxying configuration example Network requirements As shown in Figure 71 , MLDv1 runs on Router A and MLDv1 snooping runs on Switch A. Router A acts as the MLD querier. Configure MLD snooping proxying on Switch A. This enables the switch to forward MLD reports and done messages on behalf of the attached hosts and to respond to MLD queries from Router A and then forward the queries to the hosts on behalf of Router A.
272 Figure 71 Network diagram Configuration procedure 1. Configure IPv6 addresses for interfaces: Configure an IP address and prefix length for each interface as per Figure 71. (Details not shown.) 2. Configure Router A: # Enable IPv6 multicast routing, enable IPv6 PIM- DM on each interface, and enable MLD on port GigabitEthernet 1/0/1. system-view [RouterA] multicast ipv6 routing-enable [RouterA] interface gigabitethernet 1/0/1 [RouterA-GigabitEthernet1/0/1] mld enable [RouterA-GigabitEthernet1/0/1] pim ipv6 dm [RouterA-GigabitEthernet1/0/1] quit [RouterA] interface gigabitethernet 1/0/2 [RouterA-GigabitEthernet1/0/2] pim ipv6 dm [RouterA-GigabitEthernet1/0/2] quit 3. Configure Switch A: # Enable MLD snooping globally. system-view [SwitchA] mld-snooping [SwitchA-mld-snooping] quit # Create VLAN 100, assign ports GigabitEthernet 1/0/1 through GigabitEthernet 1/0/4 to this VLAN, and enable MLD snooping and MLD snooping proxying in the VLAN. [SwitchA] vlan 100 [SwitchA-vlan100] port gigabitethernet 1/0/1 to gigabitethernet 1/0/4 [SwitchA-vlan100] mld-snooping enable [SwitchA-vlan100] mld-snooping proxying enable [SwitchA-vlan100] quit 4. Verify the configuration:
273 After the configuration is completed, Host A and Host B send MLD join messages addressed to group FF1E::101. When receiving the messages, Switch A sends a join message for the group out of port GigabitEthernet 1/0/1 (a router port) to Router A. Use the display mld-snooping group command and the display mld group command to display information about MLD snooping groups and MLD multicast groups. For example: # Display information about MLD snooping groups on Switch A. [SwitchA] display mld-snooping group Total 1 IP Group(s). Total 1 IP Source(s). Total 1 MAC Group(s). Port flags: D-Dynamic port, S-Static port, C-Copy port, P-PIM port Subvlan flags: R-Real VLAN, C-Copy VLAN Vlan(id):100. Total 1 IP Group(s). Total 1 IP Source(s). Total 1 MAC Group(s). Router port(s):total 1 port(s). GE1/0/1 (D) IP group(s):the following ip group(s) match to one mac group. IP group address:FF1E::101 (::, FF1E::101): Host port(s):total 2 port(s). GE1/0/3 (D) GE1/0/4 (D) MAC group(s): MAC group address:3333-0000-0101 Host port(s):total 2 port(s). GE1/0/3 GE1/0/4 # Display information about MLD multicast groups on Router A. [RouterA] display mld group Total 1 MLD Group(s). Interface group report information GigabitEthernet1/0/1(2001::1): Total 1 MLD Group reported Group Address: FF1E::1 Last Reporter: FE80::2FF:FFFF:FE00:1 Uptime: 00:00:03 Expires: 00:04:17 When Host A leaves the IPv6 multicast group, it sends an MLD done message to Switch A. Receiving the message, Switch A removes port GigabitEthernet 1/0/4 from the member port list of the forwarding entry for the group; however, it does not remove the group or forward the done message to Router A because Host B is still in the group. Use the display mld-snooping group command to display information about MLD snooping groups. For example: # Display information about MLD snooping groups on Switch A. [SwitchA] display mld-snooping group Total 1 IP Group(s).
274 Total 1 IP Source(s). Total 1 MAC Group(s). Port flags: D-Dynamic port, S-Static port, C-Copy port, P-PIM port Subvlan flags: R-Real VLAN, C-Copy VLAN Vlan(id):100. Total 1 IP Group(s). Total 1 IP Source(s). Total 1 MAC Group(s). Router port(s):total 1 port(s). GE1/0/1 (D) IP group(s):the following ip group(s) match to one mac group. IP group address:FF1E::101 (::, FF1E::101): Host port(s):total 1 port(s). GE1/0/3 (D) MAC group(s): MAC group address:3333-0000-0101 Host port(s):total 1 port(s). GE1/0/3 IPv6 multicast source and user control policy configuration example Network requirements As shown in Figure 72, S witch A is a Layer-3 switch. MLDv1 runs on Switch A and MLDv1 snooping runs on Switch B. Multicast sources and hosts run 802.1X client. An IPv6 multicast source control policy is configured on Switch A to block multicast flows from Source 2 to FF1E::101. An IPv6 multicast user control policy is configured on Switch B so that Host A can join or leave only multicast group FF1E::101. Figure 72 Network diagram