HP 5500 Ei 5500 Si Switch Series Configuration Guide
Have a look at the manual HP 5500 Ei 5500 Si Switch Series Configuration Guide online for free. It’s possible to download the document as PDF or print. UserManuals.tech offer 1114 HP manuals and user’s guides for free. Share the user manual or guide on Facebook, Twitter or Google+.
![Page 1558
422
Step Command Remarks
4. Allow the local AS number to
appear in the as-path of
routes from a peer or a peer
group and specify the number
of times that the local AS
number can appear in the
as-path of routes from the peer
or the peer group. peer { ipv6-group-name
|
ipv6-address } allow-as-loop
[ number ]
Optional.
Not allowed by default.
5. Disable IPv6 MBGP from
considering the as_path
during best route selection. bestroute as-path-neglect
Optional.
Enabled by default....](http://img.usermanuals.tech/thumb/36/58909/w64_hp-5500-ei-5500-si-switch-series-configuration-guide-1557.png "Page 1558
422
Step Command Remarks
4. Allow the local AS number to
appear in the as-path of
routes from a peer or a peer
group and specify the number
of times that the local AS
number can appear in the
as-path of routes from the peer
or the peer group. peer { ipv6-group-name
|
ipv6-address } allow-as-loop
[ number ]
Optional.
Not allowed by default.
5. Disable IPv6 MBGP from
considering the as_path
during best route selection. bestroute as-path-neglect
Optional.
Enabled by default....")
![Page 1563
427
Step Command Remarks
6. Configure the cluster ID of the
route reflector. reflector cluster-id
cluster-id
Optional.
By default, a route reflector uses its
router ID as the cluster ID.
Displaying and maintaining IPv6 MBGP
Displaying IPv6 MBGP
Task Command Remarks
Display IPv6 MBGP peer group
information.
display bgp ipv6 multicast group
[ ipv6-group-name ] [ |
{ begin | exclude | include } regular-expression ] Available in
any view
Display IPv6 MBGP routing...](http://img.usermanuals.tech/thumb/36/58909/w64_hp-5500-ei-5500-si-switch-series-configuration-guide-1562.png "Page 1563
427
Step Command Remarks
6. Configure the cluster ID of the
route reflector. reflector cluster-id
cluster-id
Optional.
By default, a route reflector uses its
router ID as the cluster ID.
Displaying and maintaining IPv6 MBGP
Displaying IPv6 MBGP
Task Command Remarks
Display IPv6 MBGP peer group
information.
display bgp ipv6 multicast group
[ ipv6-group-name ] [ |
{ begin | exclude | include } regular-expression ] Available in
any view
Display IPv6 MBGP routing...")
![Page 1564
428
Task Command Remarks
Display IPv6 MBGP routing flap
statistics.
display bgp ipv6 multicast
routing-table flap-info
[ regular-expression as-regular-expression |
[ as-path-acl as-path-acl-number | ipv6-address
prefix-length [ longer-match ] ] [ | { begin | exclude |
include } regular-expression ] ]
Available in
any view
Display the IPv6 MBGP routes
received from or advertised to the
IPv6 MBGP peer or peer group.
display bgp ipv6 multicast routing-table peer
ipv6-address...](http://img.usermanuals.tech/thumb/36/58909/w64_hp-5500-ei-5500-si-switch-series-configuration-guide-1563.png "Page 1564
428
Task Command Remarks
Display IPv6 MBGP routing flap
statistics.
display bgp ipv6 multicast
routing-table flap-info
[ regular-expression as-regular-expression |
[ as-path-acl as-path-acl-number | ipv6-address
prefix-length [ longer-match ] ] [ | { begin | exclude |
include } regular-expression ] ]
Available in
any view
Display the IPv6 MBGP routes
received from or advertised to the
IPv6 MBGP peer or peer group.
display bgp ipv6 multicast routing-table peer
ipv6-address...")
![Page 1566
430
[SwitchA-Vlan-interface101] pim ipv6 sm
[SwitchA-Vlan-interface101] quit
The configuration on Switch B and Switch D is similar to the configuration on Switch A.
# Enable IPv6 multicast routing on Switch C, enable IPv6 PIM-SM on each interface, and enable
MLD on the host-side interface VLAN-interface 200.
system-view
[SwitchC] multicast ipv6 routing-enable
[SwitchC] interface vlan-interface 102
[SwitchC-Vlan-interface102] pim ipv6 sm
[SwitchC-Vlan-interface102] quit
[SwitchC] interface...](http://img.usermanuals.tech/thumb/36/58909/w64_hp-5500-ei-5500-si-switch-series-configuration-guide-1565.png "Page 1566
430
[SwitchA-Vlan-interface101] pim ipv6 sm
[SwitchA-Vlan-interface101] quit
The configuration on Switch B and Switch D is similar to the configuration on Switch A.
# Enable IPv6 multicast routing on Switch C, enable IPv6 PIM-SM on each interface, and enable
MLD on the host-side interface VLAN-interface 200.
system-view
[SwitchC] multicast ipv6 routing-enable
[SwitchC] interface vlan-interface 102
[SwitchC-Vlan-interface102] pim ipv6 sm
[SwitchC-Vlan-interface102] quit
[SwitchC] interface...")
425 Configuring a large scale IPv6 MBGP network Configuration prerequisites Before you configure the following tasks, you must configure basic IPv6 MBGP functions. Configuring an IPv6 MBGP peer group For easy management and configuration, you can organize some IPv6 MBGP peers that have the same route update policy into a peer group. A policy configured for a peer group applies to all the members in the group. To c re a t e a n I P v 6 M B G P p e e r g ro u p, yo u m u s t e n a b l e a n exi s t i n g I P v 6 u n i c a s t p e e r g ro u p i n I P v 6 M B G P address family view. Before adding an IPv6 MBGP peer to the IPv6 MBGP peer group, you must add the corresponding IPv6 BGP unicast peer to the corresponding IPv6 BGP unicast peer group. To configure an IPv6 MBGP peer group: Step Command Remarks 1. Enter system view. system-view N/A 2. Enter BGP view. bgp as-number N/A 3. Enter IPv6 address family view. ipv6-family N/A 4. Create an IPv6 BGP peer group. group ipv6-group-name [ external | internal ] N/A 5. Add a peer to the peer group. peer ipv6-address group ipv6-group-name [ as-number as-number ] By default, no peer is added. 6. Enter IPv6 MBGP address family view. ipv6-family multicast N/A 7. Enable the configured IPv6 unicast BGP peer group to create the IPv6 MBGP peer group. peer ipv6-group-name enable N/A 8. Add the IPv6 MBGP peer into the peer group. peer ipv6-address group ipv6-group-name By default, no peer is added. Configuring IPv6 MBGP community A peer group enables a group of peers to share the same policy, and a community enables a group of IPv6 MBGP routers in multiple ASs to share the same policy. The community attribute is propagated among IPv6 MBGP peers and not restricted to AS boundaries. You can reference a routing policy to modify the community attribute for routes sent to a peer. In addition, you can define extended community attributes as required. For more information about rout ing policy configuration, see Layer 3—IP Routing Configuration Guide . To advertise the community attribute to an IPv6 MBGP peer or a peer group:
426
Step Command Remarks
1. Enter system view. system-view N/A
2. Enter BGP view.
bgp as-number N/A
3. Enter IPv6 MBGP address
family view. ipv6-family multicast
N/A
4. Advertise the community
attribute to an IPv6 MBGP
peer or a peer group. peer {
ipv6-group-name |
ipv6-address }
advertise-community By default, no community attribute
is advertised to any peer
group/peer.
5. Advertise the extended
community attribute to an IPv6
MBGP peer or a peer group. peer {
ipv6-group-name |
ipv6-address }
advertise-ext-community By default, no extended community
attribute is advertised to any peer
or peer group.
6. Apply a routing policy to
routes sent to an IPv6 MBGP
peer or a peer group. peer {
ipv6-group-name |
ipv6-address } route-policy
route-policy-name export
Not configured by default.
NOTE:
You must configure a routing policy to define th e community attribute, and apply the policy to out
going
routes.
Configuring an IPv6 MBGP route reflector
To guarantee connectivity between IPv6 multicast IBGP peers, you must make them fully meshed.
However, this becomes unpractical when too many IPv6 multicast IBGP peers exist. Using route reflectors
can solve the problem.
The clients of a route reflector should not be fully meshed, and the route reflector reflects the routes of a
client to the other clients. If the clients are fully meshed, you must disable route reflection between clients
to reduce routing costs.
If a cluster has multiple route reflectors, you must specify the same cluster ID for these route reflectors to
avoid routing loops.
To configure an IPv6 BGP route reflector:
Step Command Remarks
1. Enter system view.
system-view N/A
2. Enter BGP view. bgp as-number N/A
3. Enter IPv6 MBGP address
family view. ipv6-family multicast
N/A
4. Configure the router as a route
reflector and specify an IPv6
MBGP peer or a peer group
as its client. peer { ipv6-group-name
|
ipv6-address } reflect-client Not configured by default.
5. Enable route reflection
between clients. reflect between-clients Optional.
Enabled by default.
427
Step Command Remarks
6. Configure the cluster ID of the
route reflector. reflector cluster-id
cluster-id
Optional.
By default, a route reflector uses its
router ID as the cluster ID.
Displaying and maintaining IPv6 MBGP
Displaying IPv6 MBGP
Task Command Remarks
Display IPv6 MBGP peer group
information.
display bgp ipv6 multicast group
[ ipv6-group-name ] [ |
{ begin | exclude | include } regular-expression ] Available in
any view
Display IPv6 MBGP routing
information injected with the
network
command.
display bgp ipv6 multicast network
[ | { begin | exclude
| include } regular-expression ]
Available in
any view
Display the IPv6 MBGP AS path
information of routes.
display bgp ipv6 multicast
paths [ as-regular-expression
| | { begin | exclude | include } regular-expression ]
Available in
any view
Display IPv6 MBGP peer
information or peer group
information.
display bgp ipv6 multicast peer
[ [ ipv6-address ]
verbose ] [ | { begin | exclude | include }
regular-expression ]
Available in
any view
Display the prefix entries in the
ORF information of the specified
BGP peer. display bgp ipv6 multicast peer
ipv6-address received
ipv6-prefix [ | { begin | exclude | include }
regular-expression ] Available in
any view
Display IPv6 MBGP routing table
information.
display bgp ipv6 multicast routing-table
[ ipv6-address
prefix-length ] [ | { begin | exclude | include }
regular-expression ]
Available in
any view
Display IPv6 MBGP routing
information that matches an AS
path ACL.
display bgp ipv6 multicast routing-table as-path-acl
as-path-acl-number
[ | { begin | exclude | include }
regular-expression ]
Available in
any view
Display IPv6 MBGP routing
information with the specified
community attribute.
display bgp ipv6 multicast routing-table community
[
aa:nn ] [ no-advertise | no-export |
no-export-subconfed ]* [ whole-match ] [ | { begin |
exclude | include } regular-expression ]
Available in
any view
Display routing information
matching an IPv6 MBGP
community list.
display
bgp ipv6 multicast routing-table community-list
{ { basic-community-list-number | comm-list-name }
[ whole-match ] | adv-community-list-number } [ | { begin
| exclude | include } regular-expression ] Available in
any view
Display IPv6 MBGP dampened
routing information.
display bgp ipv6
multicast routing-table dampened [ |
{ begin | exclude | include } regular-expression ]
Available in
any view
Display IPv6 MBGP dampening
parameter information. display bgp ipv6 multicast routing-table dampening
parameter
[ | { begin | exclude | include }
regular-expression ] Available in
any view
Display IPv6 MBGP routing
information originated from
different ASs.
display bgp ipv6 multicast routing-table
different-origin-as
[ | { begin | exclude | include }
regular-expression ]
Available in
any view
428
Task Command Remarks
Display IPv6 MBGP routing flap
statistics.
display bgp ipv6 multicast
routing-table flap-info
[ regular-expression as-regular-expression |
[ as-path-acl as-path-acl-number | ipv6-address
prefix-length [ longer-match ] ] [ | { begin | exclude |
include } regular-expression ] ]
Available in
any view
Display the IPv6 MBGP routes
received from or advertised to the
IPv6 MBGP peer or peer group.
display bgp ipv6 multicast routing-table peer
ipv6-address { advertised-routes
| received-routes }
[ network-address prefix-length | statistic ] [ | { begin |
exclude | include } regular-expression ]
Available in
any view
Display IPv6 multicast routing
information matching an AS
regular expression.
display bgp ipv6 multicast routing-table
regular-expression
as-regular-expression
Available in
any view
Display IPv6 MBGP routing
statistics.
display bgp
ipv6 multicast routing-table statistic [ |
{ begin | exclude | include } regular-expression ] Available in
any view
Display the IPv6 MBGP routing
table information. display ipv6 multicast routing-table
[ verbose ] [ |
{ begin | exclude | include } regular-expression ] Available in
any view
Display the multicast routing
information of the specified
destination address. display ipv6 multicast routing-table
ipv6-address
prefix-length [ longer-match ] [ verbose ] [ | { begin |
exclude | include } regular-expression ] Available in
any view
Resetting IPv6 MBGP connections
When you change an IPv6 MBGP routing policy,
you can make the new configuration effective by
resetting the IPv6 MBGP connections.
Task Command Remarks
Reset the specified IPv6
MBGP connections.
reset bgp ipv6 multicast
{ as-number |
ipv6-address | all | group
ipv6-group-name | external | internal }
Available in user view
Clearing IPv6 MBGP information
Task Command Remarks
Clear dampened IPv6 MBGP
routing information and release
suppressed routes.
reset bgp ipv6 multicast dampening
[ ipv6-address
prefix-length ]
Available in user view
Clear IPv6 MBGP route flap
statistics.
reset bgp ipv6 multicast flap-info
[ ipv6-address/prefix-length | regexp
as-path-regexp | as-path-acl
as-path-acl-number ]
Available in user view
429 IPv6 MBGP configuration example Network requirements As shown in the following figure: • IPv6 PIM-SM 1 is in AS 100, and IPv6 PIM-SM 2 is in AS 200. OSPFv3 is the IGP in the two ASs, and IPv6 MBGP runs between the two ASs to exchange IPv6 multicast route information. • The IPv6 multicast source belongs to IPv6 PIM-SM 1 and the receiver belongs to IPv6 PIM-SM 2. • The VLAN-interface 101 of Switch A and Switch B mu st be configured as the C-BSR and C-RP of the IPv6 PIM-SM domains, respectively. Figure 108 Network diagram Device Interface IP address Device Interface IP address Source N/A 1002::100/64 Switch C Vlan-int200 3002::1/64 Switch A Vlan-int100 1002::1/64 Vlan-int102 2001::2/64 Vlan-int101 1001::1/64 Vlan-int104 3001::1/64 Switch B Vlan-int101 1001::2/64 Switch D Vlan-int103 2002::2/64 Vlan-int102 2001::1/64 Vlan-int104 3001::2/64 Vlan-int103 2002::1/64 Configuration procedure 1. Configure IPv6 addresses for interfaces as shown in Figure 108. (D etails not shown.) 2. Configure OSPFv3. (Details not shown.) 3. Enable IPv6 multicast routing, IPv6 PIM-SM an d MLD, and configure an IPv6 PIM-SM domain border: # Enable IPv6 multicast routing on Switch A, and enable IPv6 PIM-SM on each interface. system-view [SwitchA] multicast ipv6 routing-enable [SwitchA] interface vlan-interface 100 [SwitchA-Vlan-interface100] pim ipv6 sm [SwitchA-Vlan-interface100] quit [SwitchA] interface vlan-interface 101 V l a n -i n t1 0 2 V la n- in t 1 03 V l a n-i n t1 03V la n -i n t 1 0 2 V la n- in t2 0 0
430 [SwitchA-Vlan-interface101] pim ipv6 sm [SwitchA-Vlan-interface101] quit The configuration on Switch B and Switch D is similar to the configuration on Switch A. # Enable IPv6 multicast routing on Switch C, enable IPv6 PIM-SM on each interface, and enable MLD on the host-side interface VLAN-interface 200. system-view [SwitchC] multicast ipv6 routing-enable [SwitchC] interface vlan-interface 102 [SwitchC-Vlan-interface102] pim ipv6 sm [SwitchC-Vlan-interface102] quit [SwitchC] interface vlan-interface 104 [SwitchC-Vlan-interface104] pim ipv6 sm [SwitchC-Vlan-interface104] quit [SwitchC] interface vlan-interface 200 [SwitchC-Vlan-interface200] pim ipv6 sm [SwitchC-Vlan-interface200] mld enable [SwitchC-Vlan-interface200] quit # Configure an IPv6 PIM domain border on Switch A. [SwitchA] interface vlan-interface 101 [SwitchA-Vlan-interface101] pim ipv6 bsr-boundary [SwitchA-Vlan-interface101] quit # Configure an IPv6 PIM domain border on Switch B. [SwitchB] interface vlan-interface 101 [SwitchB-Vlan-interface101] pim ipv6 bsr-boundary [SwitchB-Vlan-interface101] quit 4. Configure the position of C-BSR and C-RP: # Configure the position of C- BSR and C-RP on Switch A. [SwitchA] pim ipv6 [SwitchA-pim6] c-bsr 1001::1 [SwitchA-pim6] c-rp 1001::1 [SwitchA-pim6] quit # Configure the position of C-BSR and C-RP on Switch B. [SwitchB] pim ipv6 [SwitchB-pim6] c-bsr 1001::2 [SwitchB-pim6] c-rp 1001::2 [SwitchB-pim6] quit 5. Configure BGP, specify the IPv6 MBGP peer and enable direct route redistribution: # On Switch A, configure the IPv6 MBGP peer and enable direct route redistribution. [SwitchA] ipv6 [SwitchA] bgp 100 [SwitchA-bgp] router-id 1.1.1.1 [SwitchA-bgp] ipv6-family [SwitchA-bgp-af-ipv6] peer 1001::2 as-number 200 [SwitchA-bgp-af-ipv6] import-route direct [SwitchA-bgp-af-ipv6] quit [SwitchA-bgp] ipv6-family multicast
431 [SwitchA-bgp-af-ipv6-mul] peer 1001::2 enable [SwitchA-bgp-af-ipv6-mul] import-route direct [SwitchA-bgp-af-ipv6-mul] quit [SwitchA-bgp] quit # On Switch B, configure the IPv6 MBGP peers and redistribute OSPF routes. [SwitchB] ipv6 [SwitchB] bgp 200 [SwitchB-bgp] router-id 2.2.2.2 [SwitchB-bgp] ipv6-family [SwitchB-bgp-af-ipv6] peer 1001::1 as-number 100 [SwitchB-bgp-af-ipv6] import-route ospfv3 1 [SwitchB-bgp-af-ipv6] quit [SwitchB-bgp] ipv6-family multicast [SwitchB-bgp-af-ipv6-mul] peer 1001::1 enable [SwitchB-bgp-af-ipv6-mul] import-route ospfv3 1 [SwitchB-bgp-af-ipv6-mul] quit [SwitchB-bgp] quit 6. Verify the configuration: You can use the display bgp ipv6 multicast peer c o m m a n d t o d i s p l a y I P v 6 M B G P p e e r s o n a s w i t c h . For example, display IPv6 MBGP peers on Switch B. [SwitchB] display bgp ipv6 multicast peer BGP local router ID : 2.2.2.2 Local AS number : 200 Total number of peers : 3 Peers in established state : \ 3 Peer AS MsgRcvd MsgSent OutQ PrefRcv Up/Down State 1001::1 100 56 56 0 0 00:40:54 Established
432 Index A C D E I M O P T A Adjusting IGMP performance, 98 A djusting MLD performance, 319 A ppendix, 279 A ppendix, 51 C C onfiguration examples, 82 Co nfiguration task list, 76 Co nfiguration task list, 302 C onfiguring a large scale IPv6 MBGP network, 425 C onfiguring a large scale MBGP network, 233 C onfiguring a port-based IPv6 multicast VLAN, 290 C onfiguring a port-based multicast VLAN, 62 C onfiguring a sub-VLAN-based IPv6 multicast VLAN, 289 C onfiguring a sub-VLAN-based multicast VLAN, 61 C onfiguring an IGMP snooping policy, 28 C onfiguring an MLD snooping policy, 256 C onfiguring an MSDP peer connection, 19 7 Co nfiguring basic IGMP functions, 95 C onfiguring basic IGMP snooping functions, 19 C onfiguring basic IPv6 MBGP functions,415 C onfiguring basic MBGP functions, 222 C onfiguring basic MLD functions, 316 C onfiguring basic MLD snooping functions, 247 C onfiguring basic MSDP functions, 19 5 Co nfiguring BIDIR-PIM, 14 7 Co nfiguring IGMP proxying, 10 4 C onfiguring IGMP snooping port functions, 21 C onfiguring IGMP snooping proxying, 27 C onfiguring IGMP snooping querier, 25 C onfiguring IGMP SSM mapping, 10 3 Co nfiguring IPv6 BIDIR-PIM, 366 C onfiguring IPv6 MBGP route attributes, 419 C onfiguring IPv6 multicast routing and forwarding, 303 C onfiguring IPv6 PIM common features, 375 C onfiguring IPv6 PIM snooping, 282 Co nfiguring IPv6 PIM-DM, 353 Co nfiguring IPv6 PIM-SM, 356 C onfiguring IPv6 PIM-SSM, 373 C onfiguring MBGP route attributes, 228 C onfiguring MLD proxying, 325 C onfiguring MLD snooping port functions, 249 C onfiguring MLD snooping proxying, 255 C onfiguring MLD snooping querier, 253 C onfiguring MLD SSM mapping,324 C onfiguring multicast routing and forwarding, 77 C onfiguring PIM common features, 15 6 C onfiguring PIM snooping, 54 Co nfiguring PIM-DM, 13 2 Co nfiguring PIM-SM, 13 5 Co nfiguring PIM-SSM, 15 4 C onfiguring SA messages related parameters, 19 9 C ontrolling route advertisement and reception, 223 C ontrolling route distribution and reception,416 D Displa ying and maintaining IGMP, 10 5 Displa ying and maintaining IGMP snooping, 35 Displa ying and maintaining IPv6 MBGP, 427 Displa ying and maintaining IPv6 multicast routing and forwarding, 305 Displa ying and maintaining IPv6 multicast VLAN, 292 Displa ying and maintaining IPv6 PIM, 381 Displa ying and maintaining IPv6 PIM snooping, 283 Displa ying and maintaining MBGP, 235 Displa ying and maintaining MLD, 326 Displa ying and maintaining MLD snooping, 263 Displa ying and maintaining MSDP, 202 Displa ying and maintaining multicast routing and forwarding, 81 Displa ying and maintaining multicast VLAN, 64 Displa ying and maintaining PIM, 16 3 Displa ying and maintaining PIM snooping, 55 E
433 Enabling IP multicast routing, 77 Ena bling IPv6 multicast routing, 303 I I GMP configuration examples, 10 8 I GMP configuration task list, 94 I GMP snooping configuration examples,36 I GMP snooping configuration task list, 18 In troduction to multicast, 1 I Pv6 MBGP configuration example,429 IP v6 MBGP overview, 414 I Pv6 multicast VLAN configuration examples, 292 I Pv6 multicast VLAN configuration task list, 289 I Pv6 PIM configuration examples, 383 I Pv6 PIM snooping configuration example,283 M MB GP configuration example, 237 MB GP configuration task list, 221 MB GP overview, 221 MLD conf iguration examples, 328 MLD conf iguration task list, 316 MLD snoop ing configuration examples, 26 4 MLD sn ooping configuration task list, 246 M SDP configuration examples, 203 M SDP configuration task list, 19 4 Multi cast architecture, 5 Multi cast models, 5 Mu lticast packet forwarding mechanism, 11 Multi cast support for VPNs, 11 Mu lticast VLAN configuration examples,64 M ulticast VLAN configuration task list, 61 O Ov erview, 300 Ov erview, 241 Ov erview, 281 Ov erview, 287 Ov erview, 337 Ov erview, 13 Ov erview, 88 Ov erview, 53 Ov erview, 59 Ov erview, 308 Ov erview, 72 Ov erview, 18 9 P PI M configuration examples, 16 5 PI M overview, 116 P IM snooping configuration example, 55 Pr otocols and standards, 221 T Tr ou b l es ho o ti n g I GM P, 114 T roubleshooting IGMP snooping, 51 T roubleshooting IPv6 multicast policy configuration, 306 T roubleshooting IPv6 PIM configuration, 410 T roubleshooting IPv6 PIM snooping, 286 T roubleshooting MLD, 335 T roubleshooting MLD snooping, 279 Tr ou b l es ho o ti n g MS D P, 219 T roubleshooting multicast routing and forwarding, 86 Tr ou b l es ho o ti n g PI M , 18 6 T roubleshooting PIM snooping, 58 T uning and optimizing IPv6 MBGP networks, 422 T uning and optimizing MBGP networks, 230
i Contents Configuring ACLs ··················\ ··················\ ··················\ ··················\ ··················\ ··················\ ·· ··················\ ··················\ ······· 1 Overview ··················\ ··················\ ··················\ ··················\ ··················\ ··················\ ··················\ ···················\ ··················\ ········· 1 Applications on the switch ··················\ ··················\ ··················\ ··················\ ··················\ ····························\ ················ 1 ACL categories ··················\ ··················\ ··················\ ··················\ ··················\ ··················\ ···· ··················\ ··················\ ····· 1 Numbering and naming ACLs ··················\ ··················\ ··················\ ··················\ ··················\ ··········· ··················\ ········· 2 Match order ··················\ ··················\ ··················\ ··················\ ··················\ ··················\ ······· ··················\ ··················\ ······· 2 ACL rule comments and rule range remarks ··················\ ··················\ ··················\ ··················\ ·············· ··················\ · 3 ACL rule numbering ··················\ ··················\ ··················\ ··················\ ··················\ ··················\ ··················\ ··················\ · 3 Fragments filtering with ACLs ··················\ ··················\ ··················\ ··················\ ··················\ ··················\ ··················\ ···· 4 ACL configuration task list ··················\ ··················\ ··················\ ··················\ ··················\ ··················\ ··················\ ·················· 4 Configuring a time range ··················\ ··················\ ··················\ ··················\ ··················\ ··················\ ··················\ ···················\ 4 Configuring a basic ACL ··················\ ··················\ ··················\ ··················\ ··················\ ··················\ ··················\ ···················\ · 5 Configuring an IPv4 basic ACL ··················\ ··················\ ··················\ ··················\ ··················\ ······· ··················\ ··········· 5 Configuring an IP v6 basic ACL ··················\ ··················\ ··················\ ··················\ ··················\ ······· ··················\ ··········· 6 Configuring an advanced ACL ··················\ ··················\ ··················\ ··················\ ··················\ ··················\ ··················\ ·········· 6 Configuring an IPv4 advanced ACL··················\ ··················\ ··················\ ··················\ ··················\ ····· ··················\ ······ 6 Configuring an IP v6 advanced ACL··················\ ··················\ ··················\ ··················\ ··················\ ····· ··················\ ······ 7 Configuring an Ethernet frame header ACL ··················\ ··················\ ··················\ ··················\ ··················\ ··················\ ······· 9 Copying an ACL ··················\ ··················\ ··················\ ··················\ ··················\ ··················\ ···· ··················\ ··················\ ··········· 9 Copying an IPv4 ACL ··················\ ··················\ ··················\ ··················\ ··················\ ················· ··················\ ·············· 10 Copying an IPv6 ACL ··················\ ··················\ ··················\ ··················\ ··················\ ················· ··················\ ·············· 10 Packet filtering with ACLs ··················\ ··················\ ··················\ ··················\ ··················\ ·········· ··················\ ··················\ ······ 10 Applying an IPv4 or Ethernet fram e header ACL for packet filtering ··················\ ··················\ ··················\ ······ ·· 10 Applying an IPv6 ACL for packet filtering ··················\ ··················\ ··················\ ··················\ ············· ··················\ ··· 11 Displaying and maintaining ACLs ··················\ ··················\ ··················\ ··················\ ··················\ ····· ··················\ ··············· 11 Configuration example of using ACL for device management ··················\ ··················\ ··················\ ················ ··········· 12 Network requirements ··················\ ··················\ ··················\ ··················\ ··················\ ··················\ ··················\ ············· 12 Configuration procedure ··················\ ··················\ ··················\ ··················\ ··················\ ············· ··················\ ············· 12 IPv4 packet filtering configuration example ··················\ ··················\ ··················\ ··················\ ··········· ··················\ ··········· 13 Network requirements ··················\ ··················\ ··················\ ··················\ ··················\ ··················\ ··················\ ············· 13 Configuration procedure ··················\ ··················\ ··················\ ··················\ ··················\ ············· ··················\ ············· 14 IPv6 packet filtering configuration example ··················\ ··················\ ··················\ ··················\ ··········· ··················\ ··········· 14 Network requirements ··················\ ··················\ ··················\ ··················\ ··················\ ··················\ ··················\ ············· 14 Configuration procedure ··················\ ··················\ ··················\ ··················\ ··················\ ············· ··················\ ············· 14 QoS overview ··················\ ··················\ ··················\ ··················\ ··················\ ··················\ ··················\ ···················\ ············ 16 QoS service models ··················\ ··················\ ··················\ ··················\ ··················\ ··················\ ··················\ ··················\ ······· 16 Best-effort service model ··················\ ··················\ ··················\ ··················\ ··················\ ··········· ··················\ ················ 16 IntServ model ··················\ ··················\ ··················\ ··················\ ··················\ ··················\ ····· ··················\ ··················\ ···· 16 DiffServ model ··················\ ··················\ ··················\ ··················\ ··················\ ··················\ ···· ··················\ ··················\ ··· 16 QoS techniques ··················\ ··················\ ··················\ ··················\ ··················\ ··················\ ···· ··················\ ··················\ ·········· 17 QoS configuration approaches·················\ ··················\ ··················\ ··················\ ··················\ ·········· ··················\ ············ 18 MQC approach ··················\ ··················\ ··················\ ··················\ ··················\ ··················\ ······ ··················\ ··················\ ······· 18 Non-MQC approach ··················\ ··················\ ··················\ ··················\ ··················\ ··················\ ·· ··················\ ··················\ ··· 18 Configuring a QoS policy ··················\ ··················\ ··················\ ··················\ ··················\ ············ ··················\ ················· 19 Overview ··················\ ··················\ ··················\ ··················\ ··················\ ··················\ ··················\ ···················\ ··················\ ······ 19 Defining a class ··················\ ··················\ ··················\ ··················\ ··················\ ··················\ ····················\ ··················\ ············ 19 Configuration restrictions and guidelines ··················\ ··················\ ··················\ ··················\ ············· ··················\ ···· 20