Home

ZXR10 5900E Series All Gigabit-Port Intelligent Routing Switch

1. ceseeeeeeeeee eee eeeeeeeeeee tana 89 Configuring SSM MaPPING ceeeee ee eee eee ee teeta teeta eee ees 89 Configuring Topology Discovery Convergence seses 90 Configuring an Agent Querier cceeeeeeee cette eee ee ee eee ees 90 Configuring IGMP Agent ccceeeeeee cette eee e neta eeeeeeeaees 90 Restricting a Multicast Group c eceeeeeeee eee e estan eeeees 91 Limiting Quantity Of USEIrS ce cceccecee eee teeters eaeeeeeenees 91 Configuring Static IGMP SNOOPING sceeeeeee eee 92 Modifying Default Time cceceeeee eee ee teeta seen eeee eee eees 92 IGMP Snooping Configuration Example sceeeeeeeeee es 92 IGMP Snooping Maintenance and DiagnosSis 60 93 UDLD Configuration ccccscseescceesseeeeseeeesensseees 95 UDLD Overview isinen rece E a e A AAA eth A aA 95 Configuring UDLD ssa ea a a E a 96 UDLD Global Configuration ssssssssrssssrrrssrrrresrrrrssrrrns 96 UDLD Interface Configuration ceeceeeeeeee este eee ee es 97 UDLD Configuration Notification Items eeeeeee 97 LLDP OVErViCW mstnin e ee ee E E a a a E ena 99 Configuring LEDP ronie a A aA 100 LLDP Configuration Example ssssssssssssrrsrssrrrserrrrrsrerrnses 100 L2PT Configuration cccssecesscceeeseeseserseeeseeses LOS LE2PT OVERVICW aii edaveeww odin seni A E ets edule a cay 103 Command Configuration ccceeeeeeee eee ee tene
2. ecceeeeeeeeeeee eee eeeeeeeaeees 71 ZESS Maintenance inier enc eaten te aa enews 74 ZESR and SVLAN Linkage Networking Configuration BER BRR RRR RRR RR RRR eee eee 75 ZESR and SVLAN Linkage Networking Overview 75 Configuring ZESR and SVLAN Linkage Networking 76 Configuring SVEAN sereen cele dd dadcewcaualence 76 Configuring Port MAC Duplication ceeceeeeeeee eee 77 Configuring Port LOOPBACK ceceeeeeeee teste eeeeeeeeees 77 Configuring One Way PVLAN cc eeeee eens teste eeeeeeeaees 78 Configuring ZESR eae deaan a Ena EAEan EEEE NNa eee enaees 78 Configuration Example ssioreoti crkava aa ii 78 Link Aggregation Configuration ssssssss2 S1 Link Aggregation OvervieW ssssssssrsssrrrnssrrrrererrnnrrnnnneren 81 Configuring Link Aggregation sssssssssrssssserrsrrrrrrsrrrrserrrns 82 Link Aggregation Configuration Example ceseeeeeees 83 Link Aggregation Maintenance and Diagnosis 65 84 IGMP Snooping Configuration ccccsssseessseeesses 87 IGMP Snooping OVEFVICW ccceececee eee nee eee neat 87 Multicast Group JoiN ssssrssrsssrussenrenrrnnrunsensnnrrannannane 88 Multicast Group Leave i cceeceececee sees tees eee eeeeeaeeaeenenenees 88 FaSt LG AVC 0 cis cece scved cere ties A idee tvavervrecie tid 89 Configuring IGMP SnOOPiNG sceeeee eee ee teeta eee eeeeeeeaeaes 89 Enabling IGMP SNOOPING
3. ZXR10 config vlan private map unidirectional session id 1 source gei 1 3 4 destination gei 1 2 ZXR10 config vlan private map unidirectional session id 2 source gei_1 2 destination gei_1 1 Configuring ZESR Refer to ZESR configuration chapter Configuration Example 1 Configure gei_1 1 as customer port on the switch the CVID which receives data packet is VLAN 10 configure gei_1 3 and gei_1 4 as uplink port the SPVID which forwards data packet is VLAN 100 configure SVLAN based on ACL and configure Confidential and Proprietary Information of ZTE CORPORATION ZTEDH Chapter 8 ZESR and SVLAN Linkage Networking Configuration gei_1 2 as auxiliary loopback port The detailed configuration is as follows ZXR10 config vlan qinq extend session no 1 customer port gei_1 1 uplink port gei_1 2 in vlan 10 ovlan 100 unredirect ZXR10 config interface gei_1 1 ZXR10 config gei_1 1 switchport ging customer ZXR10 config gei_1 1 switchport mode hybrid ZXR10 config gei_1 1 switchport hybrid native vlan 10 ZXR10 config gei_1 1 switchport hybrid vlan 10 100 untag ZXR10 config gei_ 1 1 exit ZXR10 config interface gei_1 2 ZXR10 config gei_1 2 switchport mode trunk ZXR10 config gei_1 2 switchport trunk native vlan 100 ZXR10 config gei_1 2 switchport trunk vlan 100 ZXR10 config gei_ 1 2 exit ZXR10 config interface gei_1 3 ZXR10 config gei_1 3 switchport mode trunk ZXR10 config gei_1
4. dmip mac lt xxxx xxxx xxxx gt ttl lt 1 64 gt timeout lt 5 10 gt i LT can be used only when MD MA MP and RMEP establish successfully and global enabled is opened ii When using LT function destination MP parameter can use established RMEP ID RMEP MAC address or middle MIP MAC address LT function supports middle and both ends configured SG ports iv Ttl parameter can t exceed 64 hops If the middle MIP exceeds 64 hops even if arrives at the destination MP will consider that is not arrived 3 To read one time LTR route information use the following com mand 118 Confidential and Proprietary Information of ZTE CORPORATION ZTEDHY Chapter 14 Ethernet OAM Configuration ZXR10 Cfm Itr read trans id lt 1 4294967295 gt This reads one time LTR route information If read one time arriving a certain MP route this route must be discovered successfully 4 To set ais enabled function use the following command ZXR10 config md ma mep lt 1 8191 gt ais enable This sets ais enabled function disable If client level command is configured successfully enabling ais will send ais message backward 5 To set LCK function use the following command ZXR10 config md ma mep lt 1 8191 gt Ick enable This set LCK function If disable cient level is configured correctly after LCK is enabled LCK message will be sent backward After LCK message is received mep will lock t
5. Example sasasi oian 78 ZESR and SVLAN Linkage Networking Overview ZESR and SVLAN linkage networking is applicable for multi ring multi domain network SVLAN can switch ports quickly according to ring s connectivity status when fault occurs on the node of ring When configuring SVLAN each configuration data only can des ignate a customer port as an uplink port Meanwhile a group of in vlan and customer port only can configure a SVLAN data Therefore it is necessary to configure vlan attribute of another port same as that of uplink port for designating multiple uplink ports for SVLAN Configure SVLAN and VLAN two different uplink ports one is active and another is standby But only one port can be active at one time maintain only one logically connective route between any two nodes controlled by ZESR configuration Confidential and Proprietary Information of ZTE CORPORATION 75 ZXR10 5900E Series User Manual Ethernet Switching Volume ZTERH Configuring ZESR and SVLAN Linkage Networking Configuring SVLAN To configure SVLAN refer to SVLAN configuration To configure other uplink ports refer to VLAN configuration wd Note 1 2 When configuring SVLAN based on ACL configure downlink data flow is not redirection The designated uplink port when configuring SVLAN is totally equivalent to the ordinary port that has the same VLAN at tribute The packet with double layer tag will be broadcast in VLAN that outer
6. Ports can learn MAC addresses freely The device can bind MAC addresses to a port configure these addresses manually when these devices will always be connected to that port Disable MAC address learning so that the port will no longer learn MAC ad dresses To enable MAC Address learning on a port use the following com mand ZXR10 config mac learning enable disable interface This enables MAC address lt port name gt enable disable learning on a port Limiting MAC Address Count When there are too may users online and MAC address table size is near its upper limit the count of MAC addresses learned by low priority user ports can be limited Limiting the MAC address count of a port is a good countermeasure against MAC address flood attacks For limiting MAC Address count on a port perform the following steps ZXR10 config mac limit num interface lt port name This limits MAC address count gt lt max number gt on a port MAC address count is unlimited by default To cancel MAC address count limit set the limit to 0 setting MAC Address Learning Protection ZXR10 5900E supports MAC address learning protection function for ports When a port is detected to be learning MAC addresses abnormally its address learning will be suspended for some time A port in protection state cannot learn new addresses It recovers learning when the protect time is due For setting MAC Address learning protection on
7. The configuration such as interface instance of node 4 is the same as that of node 2 Configure ZESR low level main node ZXR10_S4 config zesr ctrl vlan 4000 protect instance 1 ZXR10 s4 config zesr ctrl vlan 4000 level 1 seg 1 role master gei_4 2 gei_4 1 configure ordinary ZESR master role Confidential and Proprietary Information of ZTE CORPORATION 65 ZXR10 5900E Series User Manual Ethernet Switching Volume ZTERHY This page is intentionally blank 66 Confidential and Proprietary Information of ZTE CORPORATION Chapter T ZESS Configuration Table of Contents LESS OVETVIEW caciixiicisintarctniniaeeiidienciantahendeaataerasemeudeneces 67 CONMCUMMG ZEGG samianiicie e ENEE 68 ZESS Configuration Example siiccsisissactiadinracerceaeraesanaanbanudians 7i ZSS MAIME NaC E a ictceanceinindvaceesneebaneieieorenks 74 ZESS Overview ZESS is ZTE Ethernet Smart Switch technology It is efficient link switch mechanism When fault occurs main link can switch to standby link automatically and quickly to ensure service data nor mal transmission Function description is as follows As shown in Figure 20 node 1 supports ZESS function of which port 1 is primary port and port 2 is secondary port When node 1 detects that both primary port and secondary port are up blocks protection service VLAN forwarding function of secondary port When node 1 detects that primary port is DOWN blocks that of primary port and open that of secondary po
8. This sets MA CCM sending fast and slow mode The default is slow slow fast set MA allowed CCM sending packet fast or slow Confidential and Proprietary Information of ZTE CORPORATION 115 ZXR10 5900E Series User Manual Ethernet Switching Volume ZTEDH See LE O O ZXR10 config md ma ccm timer interval lt 1 7 gt This sets MA CCM sending time interval representing CCM sending time interval as 3 33ms 10ms 100ms 1s 10s imin 10min respectively When MA configures as fast only set the value of 1 3 When MA configures as slow only set the value of 4 7 ZXR10 config md ma create mep session This creates MEP at MA mode MEP of down type and up type are supported The whole device supports 8K MEPs 13 ZXR10 config md ma create mip session lt 1 64 gt This creates MIP at MA mode name lt mMipname gt 14 ZXR10 config md ma create rmep session This creates remote mep The lt 1 64 gt lt 1 8191 gt remote mac lt xxXX XXXX XXXX gt MAC address of remote MEP the format is 12 hexadecimal numbers every four is lt 1 64 gt lt 1 8191 gt direction down up separated by The MAC address can neither be all 0 nor be multicast address and broadcast address Creat at most 64 rmeps in one MA the whole device supports 8K remps 15 ZXR10 config md ma delete mep lt 1 8191 gt session This deletes MEP LMEP or lt 1 64 gt all RMEP Delete mep command can delete a designat
9. ZXR10_S2 config smartgroup1 exit ZXR10_S2 config interface gei_1 1 ZXR10_S2 config gei_1 1 switchport mode trunk ZXR10_S2 config gei_1 1 switchport trunk vlan 100 200 ZXR10_S2 config gei_1 1 switchport trunk vlan 4000 ZXR10_S2 config gei_1 1 exit ZXR10_S2 config interface gei_1 2 ZXR10_S2 config gei_1 2 switchport mode trunk ZXR10_S2 config gei_1 2 switchport trunk vlan 100 200 ZXR10_S2 config gei_1 2 switchport trunk vlan 4000 ZXR10_S2 config gei_1 2 exit ZXR10_S2 config interface gei_1 3 ZXR10_S2 config gei_1 3 negotiation auto ZXR10_S2 config gei_1 3 switchport mode trunk ZXR10_S2 config gei_1 3 switchport trunk vlan 100 200 ZXR 0 S2 config gei_1 3 switchport trunk vlan 4000 ZXR10_S2 config gei_1 3 smartgroup 1 mode active ZXR10_S2 config gei_1 3 spanning tree disable ZXR10_S2 config gei_1 3 exit ZXR10_S2 config interface gei_1 4 ZXR10_S2 config gei_1 4 negotiation auto ZXR10_S2 config gei_1 4 switchport mode trunk ZXR10_S2 config gei_1 4 switchport trunk vlan 100 200 ZXR10_S2 config gei_1 4 switchport trunk vlan 4000 ZXR10_S2 config gei_1 4 smartgroup 1 mode active ZXR10_S2 config gei_1 4 spanning tree disable ZXR10_S2 config gei_1 4 exit ZXR10 S2 config zesr ctrl vlan 4000 protect instance 1 ZXR10_S2 config zesr ctrl vlan 4000 major level role transit smartgroupl gei_ 1 1 ZXR10_S2 config zesr ctrl vlan 4000 level 1 seg 1 role edge assistant gei_1 2 SW3 Configuration Interface instance configuration is Z
10. access trunk This sets VLAN link type on Ethernet port hybrid There are three VLAN link types for Ethernet interface of ZXR10 5900E Access mode Trunk mode and Hybrid mode Access mode is used by default Ports of access mode belong to only one VLAN support un tagged frames and are usually connected to computers Ports of trunk mode can belong to several VLANs re ceives sends packets from to several VLANs support tagged frames and are usually used as trunk ports between switches Ports of hybrid mode can belong to several VLANs re ceives sends packets from to several VLANs support both tagged and untagged frames customized and can be used to connect both switches and computers Ports of hybrid mode are different from trunk ports They send both tagged and untagged frames trunk ports send untagged frames only when they are from the default VLAN Adding VLAN Member Port To add an access trunk or hybrid port to a specified VLAN use following commands Access port only can be added to one VLAN Trunk port and Hybrid port can be added into multiple VLANs To add an access port into a specific VLAN use the following commands ZXR10 config gei_1 x switchport access vlan This command adds an access lt vlan id gt lt vlan name gt port to a specified VLAN To add a trunk port to a specific VLAN use the following com mand ZXR10 config gei_1 x switchport trunk vlan lt vian list gt
11. lt 7 90 gt lt port list gt This sets protocol packet sending interval XR10 Z config no udld message time lt port list gt This recovers default protocol packet sending time ZXR10 config udld recovery enable disenable This recovers interface up lt port list gt automatically for the reason that UDLD causes interface down the default is not recovery ZXR10 config udld recovery timer lt port list gt This sets the time when the interface is recoverd as up automatically for the reason that UDLD causes interface down the default is 30s ZXR10 config no udld recovery timer lt port list gt This sets 30s to recover interface up automatically for the reason that UDLD causes interface down Confidential and Proprietary Information of ZTE CORPORATION ZTEDX Chapter 11 UDLD Configuration ZXR10 config udld reset lt port list gt This resets interface manually for the reason that UDLD causes interface down ZXR10 config Debug udld event This prints UDLD related information ZXR10 config Debug udld packet This prints UDLD related information UDLD Interface Configuration The configuration in the interface mode is the same as that in global configuration mode UDLD Configuration Notification ltems 1 UDLD doesn t support optical electrical mixed port 2 The interface configuration can cover global configuration The global configuration also can cover interface conf
12. of users that port allows to access 2 3 2 3 4 ZXR10 config 4ip igmp snooping max host limit This configures max number vlan lt vian id gt limit num lt 1 4096 gt of users that VLAN allows to access ZXR10 config ip igmp snooping max host limit This configures max number group lt A 8 C D gt limit num lt 1 4096 gt of users that multicast group allows to access ZXR10 config no ip igmp snooping max host limit This deletes user number limit interface lt port name gt of port 5 ZXR10 config no ip igmp snooping max host limit This deletes user number limit vlan lt vian id gt of VLAN ZXR10 config no ip igmp snooping max host limit This deletes user number limit group lt A B C D gt of multicast group Confidential and Proprietary Information of ZTE CORPORATION 91 ZXR10 5900E Series User Manual Ethernet Switching Volume ZTERH Configuring Static IGMP SNOOPING The static configuration is not aging but deleted statically ZXR10 config vlanx igmp snooping static This configures static user lt ip address gt interface lt port name gt in VLAN If a user needs to join a multicast group without IGMP IGMP snooping cannot monitor the request In this case static configuration can be made ZXR10 config vlanx 4igmp Snooping mrouter This configures multicast interface lt port name gt route port in the VLAN This command is used when PIM Snooping is not configured or connecting mu
13. switch stops sending packets from it until it is restored to normal Link aggregation is quite impor tant in increasing link bandwidth and implementing transmission elasticity and redundancy ZXR10 5900E supports two link aggregation modes Static trunk directly adds multiple physical ports to the trunk group thus forming a logic port This mode is not suitable for observing the state of the link aggregation port Link Aggregation Control Protocol LACP follows IEEE 802 3ad standards It converge multiple physical ports into the trunk group to form a logic port It automatically generates aggregation to ob tain the maximum bandwidth It is necessary to observe the following rules to configure the link aggregation function for ZXR10 5900E Configuration is done for at most 32 trunk groups with at most eight ports in each trunk group Cross interface board aggregation is supported Member port can be located on any interface board Selected member ports must operate in full duplex mode and have the same working rate Mode of the member port must be consistent and can be ac cess trunk or hybrid Confidential and Proprietary Information of ZTE CORPORATION 81 ZXR10 5900E Series User Manual Ethernet Switching Volume ZTEDH The logic port formed by link aggregation on the ZXR10 5900E is called smartgroup which can be used as a common port Configuring Link Aggregation 1 To create a trunk group use the following
14. 20 preup 4 This example shows how to configure control vlan as 4000 role as master hello as 2s fail as 4s ZXR10 config zesr ctrl vlan 4000 major level hello 2 fail 4 Confidential and Proprietary Information of ZTE CORPORATION 59 20 ZXR10 5900E Series User Manual Ethernet Switching Volume ZTEDH Configuring Access Ring ZESR ZXR10 config router zesr ctrl vlan lt 1 4094 gt level This configures access ring lt 1 2 gt seg lt 1 4 gt preforward lt 1 600 gt preup ZESR lt 0 500 gt role master transit lt primary interface name gt lt secondary interface name gt edge assist ant edge control lt edge interface name gt hello lt 1 6 gt fail lt 3 18 gt ZXR10 config no zesr ctrl vlan lt 1 4094 gt level This cancels the configuration lt 1 2 gt seg lt 1 4 gt of access ring ZESR Parameter description lt 1 4094 gt Area control vlan indicating zesr area lt 1 2 gt Level of access ring lt 1 4 gt access ring SN at most 4 access rings in each level lt 1 600 gt Preforward value the unit is second After the discon nected port reconnecting unless ZESR protocol is set or after wait ing for preforward time open automatically and the default is 10s lt 0 500 gt Preup value the unit is second After Master or edge control detects that loop is up the status is switched until delaying preup time The default value is 0 lt primary interface name gt lt secondary
15. Diagram cecseeee eee eeeee renee 104 Figure 27 OAM sub layer in ISO IEC OSI Reference Module RelatiONSHi Psi sisikereids itivila a ER 107 Figure 28 802 3ah Instance Configuration seceeeeeee es 111 Figure 29 Maintenance Domain FiQure cccessesseeee eee eeeeeeeees 113 Figure 30 Ethernet Network Maintenance Domain Inclusion Relationship Figure ccceceeeeeeeeee eee eeeeeeee eae 114 Figure 31 LT Function Configuration cccceceeeeeee seen ee ee ee enee 120 Confidential and Proprietary Information of ZTE CORPORATION 137 ZXR10 5900E Series User Manual Ethernet Switching Volume Figure 32 SFlow Configuration Example Figure 33 IPFIX Configuration Example 138 Confidential and Proprietary Information of ZTE CORPORATION ZTEDH Glossary BPDU Bridge Protocol Data Unit CIST Common and Internal Spanning Tree CST Common Spanning Tree HMAC MD5 Hashed Message Authentication Code with MD5 IGMP Internet Group Management Protocol ISP Internet Service Provider IST Internal Spanning Tree LACP Link Aggregation Control Protocol MAC Medium Access Control MD5 Message Digest 5 Algorithm MSTP Multiple Spanning Tree Protocol OAM Operation Administration and Maintenance PE Provider Edge PVLAN Private Virtual Local Area Network RSTP Rapid Spanning Tree Protocol STP Spanning Tree Protocol UDLD UniDirectional Link Detection VID
16. Point Local Intrfce Device ID Holdtime Capability Platform Port ID gei_1 48 0000d0000100 91 BS ZXR10 ROS Version gei_2 1 V4 08 23 ZX gei_1 47 000011110000 296 BS ZXR10 ROS Version gei_1 24 V4 08 23 ZX View LLDP interface neighbor information Zxrl0 show lldp neighbor interface gei_ 1 1 Capability Codes R Router T Trans Bridge B Source Route Bridge S Switch H Host I IGMP r Repeater P Phone wWw W LAN Access Point Local Intrfce Device ID Holdtime Capability Platform Port ID gei_1 48 0000d0000100 92 BS ZXR10 ROS Version gei_2 1 V4 08 23 ZX Confidential and Proprietary Information of ZTE CORPORATION Chapter 13 L2PT Configuration Table of Contents EZPT RIVEIVICUE soraicdp sxdenieerdee rider E EE 103 Command COnMGMTAUON cox 2 cts censeceiaiasscininieapnieieianeateteiessst 103 CAPT Configuration Exam pltiiccsscccciiaids REE 104 L2PT Overview In the VPN mode of QinQ if the VPN users in different locations want to run their layer 2 protocol core network need to transpar ently transmit these layer 2 protocol packets These packets can t be transparently transmitted L2PT is used to transparently trans mit client network layer 2 protocol packet in QinQ VPN network environment The fullname of L2PT is layer 2 protocol tunnel which is a layer 2 protocol tunnel technology The principle is that the receiving layer 2 protocol packet is encapsulated by a multicast address on tunnled port of e
17. Private VLAN technology is developed to solve these prob lems PVLAN divides the ports in VLAN into three types the port con necting to the user is called Isolate Port the port connecting to a group of users that need interconnection and intercommunication is called Community Port and the port connecting to the upstream router is called Promiscuous Port The isolated port communicates with the promiscuous port only but not with any other isolated port or community port Community port can communicate with promiscuous port and any other community port but not with iso lated port Thus ports in the same VLAN are separated The user who connects with isolated port can only communicate with its default gateway the user who connects community port can in terconnect and intercommunicate Network security is ensured ZXR10 5900E supports 20 PVLAN groups each group having cus tomized isolated ports and at most 256 isolated ports 16 commu nity ports and 8 promiscuous ports Confidential and Proprietary Information of ZTE CORPORATION 3 ZXR10 5900E Series User Manual Ethernet Switching Volume ZTERH QinQ QinQ also known as VLAN stack is a graphic name for the IEEE 802 1Q based tunnel protocol QinQ technology encapsulates the original VLAN tag inner tag with another VLAN tag outer tag so that the inner tag is masked QinQ implements simple Layer 2 VPN L2VPN without protocol support applicable to small sized LANs with L3
18. Show vlan private map This displays the configuration information of PVLAN Example The configuration of two isolated groups is shown below Isolated group 1 gei_1 1 gei_1 2 xgei_2 1 and xgei_3 1 are iso lated ports port gei_1 10 is a promiscuous port Isolated group 2 gei_1 3 gei_1 4 and gei_4 1 are isolated ports gei_1 5 gei_1 6 and gei_5 1 are community ports gei_1 11 and gei_1 12 are promiscuous ports The detailed configuration is as follows ZXR10 config vlan private map session id 1 isolate gei_1 1 2 gei_2 1 gei_3 1 promis gei_1 10 ZXR10 config vlan private map session id 2 isolate gei_1 3 4 gei_4 1 promis gei_1 11 12 community gei_1 5 6 gei_5 1 ZXR10 config show vlan private map Session Isolate Ports Promis Ports Community ports Vlan_Cfg Vlan 1 gei_1 1 2 gei_1 10 _2 1 gei_3 1 2 gei_1 3 4 gei_1 11 12 gei_1 5 6 gei_5 1 4 1 ZXR10 config 10 Confidential and Proprietary Information of ZTE CORPORATION ZTEDY Chapter 1 VLAN Configuration Configuring QinQ ZXR10 config if switchport lt port list gt qing When configuring QinQ it normal uplink customer tpid lt tpid gt needs to set customer port of SPVLAN to untagged port and uplink port to tagged port ZXR10 config Show qinq This views configuration information of QinQ Example In figure QINQ TYPICAL NETWORKING assume switch A s cus tomer port is gei_1 1 its uplink port is gei_1 24 switch B s cus tomer port is gei_1 1 and
19. This command adds a trunk port to a specified VLAN Confidential and Proprietary Information of ZTE CORPORATION 7 ZXR10 5900E Series User Manual Ethernet Switching Volume ZTERH To add a hybrid port into a specific VLAN use the following commands ZXR10 config gei_1 x switchport hybrid vlan This command adds a hybrid lt vian list gt tag untag port to a specified VLAN Adding Ports to a VLAN in Batches To add ports to a VLAN in batches use the following command ZXR10 config vlanx switchport pvid tag untag lt por This adds ports to a VLAN in t list gt batches Setting the Native VLAN for a Trunk or Hybrid Port An access port belongs to only one VLAN its native VLAN is the VLAN to which it belongs This requires no additional configuration Trunk port and hybrid port belong to multiple vlans and they need to set native vlan If native vlan is set on port when one frame with no vlan tag is received on port it will be forwarded to the port belonging to this native vlan Native vlan of trunk port and hybrid port is vlan 1 by default ZXR10 config gei_1 x switchport trunk native vlan This command sets native lt vlan id gt lt vlan name gt VLAN for a trunk port ZXR10 config gei_1 x switchport hybrid native This command sets native vlan lt vlan id gt lt vlan name gt VLAN for a hybrid port Setting VLAN Filtering on a Port To set VLAN filtering on a port use the following
20. ZXR10_S2 config gei_2 3 negotiation auto ZXR10_S2 config gei_2 3 switchport mode trunk ZXR10_S2 config gei_2 3 switchport trunk vlan 100 200 ZXR10_S2 config gei_2 3 switchport trunk vlan 4000 ZXR10_S2 config gei_2 3 exit ZXR10_S2 config zesr ctrl vlan 4000 protect instance 1 ZXR10_S2 config zesr ctrl vlan 4000 major level role zess master gei_2 2 gei_ 2 1 configure zess master node Note Secondary interface decides blocking location therefore therefore Secondary interface can t be configured on corresponding interface of link between ZXR10 2 and ZXR10 3 or blocking interface faulty will occur ZXR10_S2 config zesr ctrl vlan 4000 level 1 seg 1 role edge assistant gei_ 2 3 configure ordinary ZESR border node role Node 3 configuration The configuration such as interface instance of node 3 is the same as that of node 2 Configure ZESR Tansit node ZXR10_S3 config zesr ctrl vlan 4000 protect instance 1 ZXR10 s3 config zesr ctrl vlan 4000 major level role zess transit gei_ 3 2 gei_3 1 configure zess transit node When configuring zess transit role note that Primary interface decides the direction that node sends hello frame therefor Primary interface must be configured the corresponding interface of link between ZXR10 2 and ZXR10 3 or configuration error will occur ZXR10 s3 config zesr ctrl vlan 4000 level 1 seg 1 role edge assistant gei_3 3 configure ordinary ZESR border node role Node 4 configuration
21. a port perform the following steps 1 Set port MAC address learning count limit 2 Open port MAC address learning protection enabled switch 3 Set the protected port protection time 32 Confidential and Proprietary Information of ZTE CORPORATION ZTERHY Chapter 4 MAC Address Table Configuration The detailed configuration is as follows ZXR10 config mac protect interface lt port name This sets port MAC address gt disable enable learning protection ZXR10 config mac protect time lt time gt This sets port MAC address learning protection time MAC address learning protection is disabled on all switch ports by default To enable this function it is recommended to set a smaller MAC address count limit Setting Port Unkown Source MAC Address Filtering By default the port unkown source MAC address filtering function is closed A port does not filter unkown source MAC address If one port enables unkown source MAC address filtering function the corresponding port will discard the unkown source MAC address packets from this port To set port unkown source MAC address filtering on a port use the following command ZXR10 config mac unknowsource filter interface This sets port unkown source lt port name gt disable enable MAC address filtering on a port setting MAC Address Filtering To prevent unauthorized access ZXR10 5900E support filtering data frames according to MAC addresses There are thr
22. change of Root Bridge also brings some problem BPDU protection overcomes these problems If a port is set as an edge port BPDU protection function will shut down this port when the edge port receives a BPDU packet It outputs alarm information to monitor terminal BPDU protection of edge port maintains the stable of network topology Device which connects to edge port can not influence the spanning tree It can implement by setting port DOWN and outputing alarm information at terminal when receiving BPDU packet at the edge port The example is shown as Figure 7 FIGURE 7 BPDU PROTECTION OF EDGE PORT 1 2 m gt L yg a Z y a Cia Conan eine a 1 l gt BPDUPacket xX Blocked Port See the first status in the figure priority of switch A is 8192 Switch A is a root switch Priority of switch B is 16384 Link be tween Switch A and Switch B is 1000M and other link is 100M Switch A and Switch B are both core switches Switch C is a edge switch Port of switch C connects to switch D edge port spanning tree is enabled in switches except switch D After switches calcu late spanning tree the port of switch C which connects to switch B is blocked Switch D doesn t take part in calculating spanning tree Direction of arrow represents the direction of BPDU See the second status in the figure spanning tree is enabled in switch D Its priority is smaller than switch A which is root switch Switch D will become a roo
23. command ZXR10 config gei_1 x Ingress filtering enable disab This sets VLAN filtering on a le port 8 Confidential and Proprietary Information of ZTE CORPORATION ZTEDH Chapter 1 VLAN Configuration When ingress filtering is enabled on a port the port drops a re ceived frame if the VLAN to which the frame belongs does not include the ingress By default VLAN ingress filtering is enable Setting Frame Filtering Type of a Port To set frame filtering type of a port use the following command ZXR10 config gei_1 x acceptable frame types all tag This sets frame filtering type of a port This sets the frame type of the port which can receive all types of frames including untagged and tagged frames By default all frames are received Creating VLAN Layer 3 Interface ZXR10 config interface vlan lt vian id gt lt vlan if gt This creates VLAN layer 3 interface It is necessary to create this VLAN before creating VLAN layer 3 interface VLAN Configuration Example The ports gei_1 1 and gei_1 2 on Switch A and the ports gei_i 1 and gei_1 2 on switch B belong to VLAN 10 the ports gei_1 4 and gei_1 5 on switch A and the ports gei_1 4 and gei_1 5 on switch B belong to VLAN 20 The four ports are all access ports as shown in Figure 3 Switches A and B are connected through ports gei_1 24 two trunk ports over a trunk link FIGURE 3 VLAN NETWORKING Switch A Switch B TF gei_1 24
24. duplication 2 ZXR10 config gei_1 x no mac duplicate lt 0 4 gt This cancels port MAC duplication al Note Port is configured as customer port of SVLAN based on ACL The learning L2 entry on port is vlan id of inner tag need to enable MAC duplication for customer port CPU duplicates a L2 entry of outer tag vlan id downlink packet can get customer port informa tion according to outer vlan id L2 entry Configuring Port LOOPBACK Configure uplink port of SVLAN based on ACL to implement loop back At this time the port doesn t send packet All packets are loopback on this port and forwarded to other ports in the same vlan In one vlan at least two ports should exist to send packets as SVLAN uplink port ZXR10 config gei_1 x loopback enable disable This configures port to implement loopback on the interface mode aid Note When loopback enable is configured port learning function will be closed automatically whereas port learning function is opened au tomatically when loopback disable is configured Loopback port as uplink port of SVLAN only receives packet that SVLAN cus tomer port redirects after adding tags and loopbacks to uplink port which doesn t receive packet forwarded by uplink port Therefore it needn t port learning function If port learning function is not disabled port learns L2 entry when loopbacking message which causes L2 entry set by MAC duplication function on customer port
25. information If the update information from transmitter is not received in the period the receiver will discard all related information IEEE has defined a suggesting update frequency that is transmit one time every 30s Optional TLV includes basic management TLV set such as port description TLV special TLV set organized IEEE 802 1 and special TLV set organized IEEE 802 3 The occurrence of LLDPDU end TLV indicates LLDPDU is over Configuring LLDP LLDP configuration includes global configuration and interface con figuration Only finishes these two parts of configuration can this protocol take effect ZXR10 config lldp enable This enables LLDP ZXR10 config lldp hellotime lt seconds gt This sets LLDP packet sending interval The range of Ildp hellotime is lt 5 32768 gt the default is 30 ZXR10 config lldp holdtime lt multiple gt This sets LLDP packet aging time the product of hellotime and parameter is aging time The range of Ildp holdtime is lt 2 10 gt the default is 4 ZXR10 config Ildp enable rxdisable txdisable This configures LLDP global or rxenable txenable disabled interface gei_1 1 interface management status LLDP Configuration Example Connect the two devices to implement LLDP protocol discovery as shown in Figure 25 100 Confidential and Proprietary Information of ZTE CORPORATION ZTE Chapter 12 LLDP FIGURE 25 LLDP CONFIGURATION EXAMPLE K Con
26. instead of attached frame tag traffic through the network reduces Protocol VLAN is not only enabled on all physical ports by default but also disabled on ports according to demands which identifies that VLANs are based on the packet tag only It separates packets with different tags so that users have access to data from other users in the same VLAN only ZXR10 5900E supports up to 16 protocol VLANs This means that protocol VLANs support processing packets with 16 kinds of tags VLAN Translation VLAN translation permits the switches of different users to have same VLAN ID With VLAN translation core switch modifies the same VLAN ID of edge switches into the different VLAN ID This function isolate user in core switch and simply the configuration of edge switch ZXR10 5900E support 768 VLAN translation SuperVLAN On a traditional ISP network one IP subnet is allocated to each user which means that the occupation of three IP addresses by a single user as its subnet address broadcast address and default gateway address Even if there are a number of idle IP addresses Confidential and Proprietary Information of ZTE CORPORATION 5 ZXR10 5900E Series User Manual Ethernet Switching Volume ZTEDH in a user s subnet they cannot be allocated to other users This causes waste of IP addresses SuperVLAN effectively resolves this problem It merges several VLANs called sub VLAN to a SuperVLAN so that they can use the sam
27. interface name gt access ring two interfaces lt 1 6 gt Hello value the unit is second The default is 1s lt 3 18 gt The maximum time dalay that master or edge control hasn t received hello packet The unit is second The default value is 3s lt edge interface name gt edge node interface Switch could be in the entry that major ring and access ring con nect At that time it can be in major ring or access ring There are two interfaces in major ring and one interface in access ring Switch is named as entry node The entry node could be edge as sistant and edge control in access ring and edge control plays a general node master role Example 1 This example shows how to configure control vlan as 4000 role as master level as 1 seg as 1 ports as gei_2 10 gei_2 10 ZXR10 config zesr ctrl vlan 4000 level 1 seg 1 role master gei_ 2 10 gei_2 20 2 This example shows how to configure control vlan as 4000 role as edge assistant level as 1 seg as 1 ports as gei_2 1 10 ZXR10 config zesr ctrl vlan 4000 level 1 seg 1 role edge assistant gei 2 1 10 3 This example shows how to configure control vlan as 4000 level as 1 seg as 1 preforward as 20s preup as 20s ZXR10 config zesr ctrl vlan 4000 level 1 seg 1 preforward 20 preup 20 60 Confidential and Proprietary Information of ZTE CORPORATION ZTEDHY Chapter 6 ZESR ZESR Configuration 4 This example shows how to configure control vian as 4000 level as 1
28. its uplink port is gei_1 24 Configuration of Switch A ZXR10_A config vlan 10 ZXR10_A config vlan exit ZXR10_A config interface gei_1 1 ZXR10 A config if switchport qinq customer ZXR10_A config if switchport access vlan 10 ZXR10 A config if exit ZXR10_ A config interface gei_1 24 ZXR10_ A config if switchport qinq uplink ZXR10_A config if switchport mode trunk ZXR10_A config if switchport trunk vlan 10 ZXR10_A config if exit Configuration of Switch B ZXR10_B config vlan 10 ZXR10 B config vlan exit ZXR10_B config interface gei 1 1 ZXR10 B config if switchport qinq customer ZXR10_B config if switchport access vlan 10 ZXR10 B config if exit ZXR10_B config interface gei_1 24 ZXR10 B config if switchport qinq uplink ZXR10 B config if switchport mode trunk ZXR10 B config if switchport trunk vlan 10 ZXR 0 B config if exit Configuring Subnet VLAN 1 ZXR10 config vlan subnet map session no lt session This creates a subnet VLAN no gt lt ipaddr gt lt mask gt vlan lt vlanid gt lt name gt Confidential and Proprietary Information of ZTE CORPORATION 11 ZXR10 5900E Series User Manual Ethernet Switching Volume ZTE ZXR10 config Show vlan subnet map This displays configuration of subnet VLAN Example As shown in Figure 4 configure VLAN data on the switch Config ure VLAN20 and VLAN30 Port gei_1 1 belongs to VLAN20 port gei_1 2 belongs to VLAN30 po
29. many protection instances on the same ring suitable to different service vlan Their logic routes are different and independent ZESR in double nodes double uplinks networking improves the current ZESR to meet redundancy protection for uplink and node at the same time in double nodes double uplinks networking Confidential and Proprietary Information of ZTE CORPORATION 57 58 ZXR10 5900E Series User Manual Ethernet Switching Volume ZTERH Configuring ZESR ZESR Configuring ZESR Area Protection Instance ZXR10 config zesr ctri vlan lt 1 4094 gt lt 1 4094 gt area control protect instance lt lt 0 16 gt vlan indicates zesr area lt 0 16 gt the protected instance ID samed as stp instance ZXR10 config no zesr ctrl vlan lt 1 4094 gt lt 1 4094 gt area control vlan protect instance indicates zesr area ZESR protection instance is same as STP Service vlan is put into protection instance so generally enabling STP to cooperate with ZESR Control vian should use vlan except service and shouldn t conflict with service and network management Note that pvid of the port shouldn t be selected as control vlan Outside port shouldn t be put into control vian Example 1 This example shows how to configure control vlan as 4000 pro tection instance as 1 ZXR10 config zesr ctrl vlan 4000 protect instance 1 2 This example shows how to delete control vlan as 4000 pro tection instance ZXR10 config
30. no zesr ctrl vlan 4000 protect instance Configuring Major level Ring ZESR To configure ZESR ZESR on major level ring use the following commands Major level ring is the highest level ring others are access rings ZXR10 config zesr ctrl vlan lt 1 4094 gt major level This configures major level preforward lt 1 600 gt preup lt 0 500 gt role ring ZESR master transit zess master zess transit ZXR10 config no zesr ctrl vlan lt 1 4094 gt This cancels the configuration major level of major level ring ZESR Parameter Description Confidential and Proprietary Information of ZTE CORPORATION ZTEDHY Chapter 6 ZESR ZESR Configuration lt 1 4094 gt Area control vlan indicating zesr area lt 1 600 gt Preforward value the unit is second After the disconnected port reconnecting unless ZESR protocol is set or after waiting for preforward time open automatically and the default is 10s lt 0 500 gt Preup value the unit is second After Master detects that loop is up the status is switched until delaying preup time The default value is 0 lt primary interface name gt major ring two interfaces To master secondary interface is lt secondary interface name gt blocked to ensure ring is disconnected and no storm lt 1 6 gt Hello value the unit is second the time of master zess transit major interface sending hello protocol message the default is Is lt 3 18 gt The maximum time daley t
31. point to multi point VLAN transparent transportation service and simple Layer 2 VPN tunnel by means of adding a VLAN tag outside original 802 1Q tag and getting rid of outside VLAN tag when the packet is transported to edge switch SVLAN has the function of providing SPVLAN tag according to traf fic which is different from that ordinary QinQ adds SPVLAN tag based on ports That is in the same Customer port according to difference between traffic carried CVLAN tags provide corre sponding SPVLAN tag based on user demands SVLAN can modify outer tag value according to inner tag outer tag or the combination of the former tages Also it can control if downlink stream need to be redirected from uplink port to cus tomer port With SVLAN function User can implement map from QOS to SPVLAN of CVLAN tag SVLAN Configuration 1 To configure SVLAN use the following command Confidential and Proprietary Information of ZTE CORPORATION 17 ZXR10 5900E Series User Manual Ethernet Switching Volume ZTEDH ZXR10 config vlan qinq session no lt session_id gt This command configures customer port lt interface name gt uplink port SVLAN lt interface name gt in vlan lt vian list gt ovlan lt vilanId gt lt name gt priority lt priority id gt untag t ZXR10 config vlan qinq extend session no This command configures lt session_id gt customer port lt interface name SVLAN gt uplink port lt jinterface name gt i
32. ren ra a 6 Creating VLAN iresirvasrnim nininini ori ar a ia 6 Creating a VLAN in VLAN Database c eeeeee seers 6 Setting VLAN NaMe seisseto a a 6 Setting VLAN Link Type on Ethernet Interface 005 7 Adding VLAN Member Port ssssssssssssrssrssnrrsrrrrrerrrrersrrs 7 Adding Ports to a VLAN in Batches ceeeeeeeeee cere ees 8 Setting the Native VLAN for a Trunk or Hybrid Port 8 Setting VLAN Filtering on a POrt ccceeeeeeeeeeee eee eaten ee 8 Setting Frame Filtering Type of a Port cceeeeeeeeee es 9 Creating VLAN Layer 3 Interface cceeeeeeeeee teeta ees 9 VLAN Configuration Example cc ccceeeeeeeeeeee teen eeeeees 9 Configuring PVLAN wicseaductesenmierereevetavnebersiiesaiea taveabeweiars 10 Configuring QIN reiiese ieee oat eli pert 11 Configuring Subnet VLAN ssssssssrsssrrrsssrrrrsrrrrnrsrrresurrrns 11 Configuring Protocol VLAN ssssssssrssssrrsssrrrrsrnrrrrsrrressrrrns 13 Configuring VLAN Translation ssssssssrsssssrrrsserrrrrrrressrrrns 14 Configuring SUPerVLAN 20 c cece ee cece e eee eens teen eee ee eee eaeees 14 VLAN Maintenance and DiagnoSis ceeeeeeeeeeee eee eees 16 SVLAN Configuration cscccsscceeeseesesesseeeeseeeenees L7 SV LAN OVVIE W a hanina an E Vaaa NUENEAN TANANA ARETA 17 SVEAN COnfGQUFAtI ON a enre anda E EANTA A 17 SVLAN Configuration Example ssssssssssssrsrrssrrrsrsrerrsrrrrrers 19 B
33. some ports which don t need protocol vlan ZXR10 config interface gei_1 5 ZXR10 config gei_1 5 vlan protocol map disable ZXR10 config gei_1 5 exit Confidential and Proprietary Information of ZTE CORPORATION 13 ZXR10 5900E Series User Manual Ethernet Switching Volume ZTEDH Configuring VLAN Translation ZXR10 config vlan translate session no This configures VLAN lt session_id gt ingress port lt interface name gt Translation ingress vlan lt vian list gt egress vlan lt vianId gt 2 ZXR10 config Show vlan translate This views the configuration of VLAN Translation ZXR10 config vlan egr translate session no This configures VLAN lt session_id gt egress port lt interface name gt egr translation egress vlian lt vian list gt ingress vlan lt vianId gt Example Port gei_1 1 receives a packet which belongs to vlan100 This packet is to be sent to xgei_2 1 Port xgei_2 1 belongs to VLAN 200 As for the downlink data users hope that VLAN 200 for warded from xgei_2 1 is converted to VLAN 100 The detailed configuration is as follows Configuration of switch ZXR10 config vlan translate session no 1 ingress port gei_1 1 ingress vlan 100 egress vlan 200 ZXR10 config vlan egr translate session no 1 egress port gei 1 1 egress vlan 200 ingress vlan 100 ZXR 0 config interface gei_1 1 ZXR10 config gei_1 1 ingress filtering disable ZX config gei_1 1 switchport mode hybrid ZX config gei 1 1
34. tag VLAN Link Type ZXR10 5900E ports support the following links 1 Access link It connects devices such as workstation that cannot iden tify VLAN tags to the VLAN switch port It transmits untagged frames only to a single VLAN 2 Trunk link Confidential and Proprietary Information of ZTE CORPORATION ZTEDH Chapter 1 VLAN Configuration It connects two devices that can identify VLAN tags and car ries several VLAN s services It transmits tagged frames only to several VLANs The most common trunk link is the one be tween two VLAN switches 3 Hybrid Link It transmits both tagged and untagged frames For a given VLAN however it only transmits frames of the same type Default VLAN ZXR10 5900E has a default VLAN initially which has the following features VLAN ID as 1 VLAN name as VLANOOO1 All ports included Untagged by default on all ports PVLAN To improve network security messages among different users shall be separated The traditional method is to assign a VLAN to each user The method has obvious limitation which can be seen from the following aspects 1 At present IEEE 802 1Q standard supports utmost 4094 VLANs which limits the number of users and network expan sion 2 Each VLAN corresponds to one IP subnet so vast divided sub nets will cause the waste of IP addresses 3 Planning and management to a mass of VLANs and IP subnets is extremely complicated PVLAN
35. tag designates Example The example shows how to configure SVLAN ZX gei ZX ZX ZX ZX ZX ZX ZX ZX ZX ZX ZX ZX ZX ZX ZX ZX ZX ZX ZX ZX ZX R R AHANADAAADAAAAADAAADADAADAD 0 config vlan qing extend session no 1 customer port 1 1 uplink port gei_1 2 in vlan 10 ovlan 100 unredirect O config interface gei_1 1 0 config gei_1 1 switchport qinq customer 0 config gei_1 1 switchport mode hybrid 0 config gei_1 1 switchport hybrid native vlan 10 0 config gei_1 1 switchport hybrid vlan 10 100 untag 0 config gei_1 1 exit 0 config interface gei_1 2 0 config gei_1 2 switchport mode trunk 0 config gei_1 2 switchport trunk native vlan 100 0 config gei_1 2 switchport trunk vlan 100 0 config gei_1 2 exit 0 config interface gei_ 1 3 0 config gei_1 3 switchport mode trunk 0 config gei_1 3 switchport trunk native vlan 100 0 config gei_1 3 switchport trunk vlan 100 0 config gei_1 3 exit O config interface gei_1 4 0 config gei_1 4 switchport mode trunk 0 config gei_1 4 switchport trunk native vlan 100 0 config gei_1 4 switchport trunk vlan 100 0 config gei_1 4 exit 76 Confidential and Proprietary Information of ZTE CORPORATION ZTEDHY Chapter 8 ZESR and SVLAN Linkage Networking Configuration Configuring Port MAC Duplication ZXR10 config gei_1 x mac duplicate lt 0 4 gt This configures port MAC src vian lt vian list gt dest vlan lt vian list gt
36. when the switch is powered off MAC Address Table Establishment and Deletion The MAC address table of a switch is null initially It is created for fast forwarding As the size of the MAC address table is limited and network device changes are frequent invalid MAC address table entries should be deleted from the switch in time 1 Dynamic Learning Dynamic MAC addresses in the MAC address table are learned by the switch The procedure of switch learning MAC address is as follows Confidential and Proprietary Information of ZTE CORPORATION ZTEDH Chapter 4 MAC Address Table Configuration Switch analyzes the source MAC address and VLANID for ex ample MACi VID1 once it receives a data frame on a port If judging the MAC address to be valid and learnable the switch checks MACi VID1 in its MAC address table If the entry is not found the address is added to the MAC address table other wise the entry is updated Note i MAC address learning is to learn the source MAC address of received data frames not the destination MAC address ii MAC address learning applies to unicast addresses only not to broadcast or multicast addresses 2 MAC Address Aging The size of the MAC address table is limited so a MAC address aging mechanism is provided for effective resource utility of the MAC address table A switch considers a device that has got offline or is not in communication when it fails to receive any d
37. 0 config vlan ging extend session no 2 customer port gei_1 1 uplink port gei_1 2 outer vlan 101 ovlan 201 unredirect The SVLAN example of viewing configuration ZXR10 config show vlan ging extend session Session Customer Uplink In Vlan Outer vlan Ovlan Helpvlan Priority unredirect 1 gei_1 1 gei_1 2 10 100 200 2 gei_1 1 gei_1 2 101 201 Transparent Transmission SVLAN Configuration Example 1 single tag transparent transmission port 1 is customer port Port 2 is uplink port for the message from port 1 when CVLAN is 10 transmitted transparently helper vlan is 100 ZXR10 config switchport gei_1 1 ging customer ZXR10 config interface gei_1 2 ZXR10 config if switchport mode hybrid ZXR10 config if switchport hybrid vlan 100 untag ZXR10 config if exit Z ZXR10 config vlan ging extend session no 1 customer port gei_1 1 uplink port gei_1 2 in vlan 10 helpvlan 100 The SVLAN example of viewing configuration is as follows ZXR10 config show vlan ging extend session 1 Session Customer Uplink In Vlan Outer vlan Ovlan Helpvlan Priority unredirect 1 gei_1 1 gei_1 2 10 100 Example 2 double tags transparent transmission port 1 is cus tomer port port 2 is uplink port for the message from port 1 when CVLAN is 10 and outer tag is 100 transmitted transparently helper vian is 100 ZXR10 config interface gei_1 2 ZXR10 config if switchport mode hybrid ZXR10 config if switchport hybrid vlan 100 ta
38. 1 configuration ZXR10_S1 config spanning tree enable ZXR10_S1 config spanning tree mst configuration ZXR10 config mstp instance 1 vlan 100 200 ZXR10 config mstp exit ZXR10_S1 config interface smartgroupl ZXR10_S1 config smartgroup1 switchport mode trunk ZXR10_S1 config smartgroupl1 smartgroup mode 802 3ad ZXR10 S1 config smartgroupl switchport trunk vlan 100 200 ZXR 0 sS config smartgroupl switchport trunk vlan 4000 ZXR10_S1 config smartgroup1 exit ZXR10_S1 config interface smartgroup2 ZXR10_S1 config smartgroup2 switchport mode trunk ZXR10_S1 config smartgroup2 smartgroup mode 802 3ad ZXR10_S1 config smartgroup2 switchport trunk vlan 100 200 ZXR 0 sS config smartgroup2 switchport trunk vlan 4000 ZXR10_S1 config smartgroup2 exit ZXR10_S1 config interface gei_1 1 ZXR10_S1 config gei_1 1 negotiation auto ZXR10_S1 config gei_1 1 switchport mode trunk ZXR10_S1 config gei_1 1 switchport trunk vlan 100 200 ZXR10_S1 config gei_1 1 switchport trunk vlan 4000 ZXR10_S1 config gei_1 1 smartgroup 1 mode active ZXR10_S1 config gei_1 1 spanning tree disable ZXR10_S1 config gei_ 1 1 exit ZXR10_S1 config interface gei_1 2 ZXR10_S1 config gei_1 2 negotiation auto ZXR10_S1 config gei_1 2 switchport mode trunk ZXR10_S1 config gei_1 2 switchport trunk vlan 100 200 ZXR10_S1 config gei_1 2 switchport trunk vlan 4000 ZXR10_S1 config gei_1 2 smartgroup 1 mode active ZXR10_S1 config gei_1 2 spa
39. 10 seconds lt primary interface name gt lt s Two ports of ZESS In normal cases secondary port is block econdary interface name gt which avoids forming storm Example 1 Create zess node that domain is 1 protect instance is 1 ports are gei_1 10 and gei_1 20 ZXR10 config zess domain 1 protect instance 1 primary gei_1 10 secondary gei_1 20 2 This deletes zess that domain is 1 ZXR10 config no zess domain 1 Configuring Preup Time To configure preup time of zess node use the following command ZXR10 config zess domain lt 1 4 gt preup lt 1 600 gt The default preup time is 5 seconds Paramters Description lt 1 600 gt Preup value the unit is second After ZESS detects that link recovers it doesn t switch state quickly until delaying preup time The default value is 5 seconds Example This example shows how to configure domain 1 preup time as 10 seconds ZXR10 config zess domain 1 preup 10 Configuring ZESS Mode To configure ZESS mode as inversion or non inversion mode use the following command ZXR10 config zess domain lt 1 4 gt mode revertive This configures ZESS mode non_revertive as inversion or non inversion mode Confidential and Proprietary Information of ZTE CORPORATION 69 ZXR10 5900E Series User Manual Ethernet Switching Volume ZTERH Paramters Description lt 1 4 gt Domain ID it indicates ZESS domain revertive non_revertive inversion or non in
40. 24 GConfiguring SFlOW wins cassette ccs a a a 125 SFlow Configuration Example ceeeeeeeeee eee eeeeeeneees 125 SFlow Maintenance and DiagnoOSiS sceeeeeeee ee eee ees 126 IPFIX Configuration cccscceeecceeeseesnseeseeeeseesees 129 IPEIX OVERVIEW inci casa aa deveined eee eta dreie hates 129 IPFIX Overview secutive e a ecard eileen te Cecsh eee 129 Sampling weer etic cris dle wet weee eat lett es ues ee 130 TIMEOUT MANAGEMENL cc ceccceeee cece e eee eeeeeeeeeeeeeeeee ena 130 Data Output cs ec A Ae A 131 Configuring IPFIX aerar enan iniaa aAA ENAA eee eee ee nets eae neeees 131 Basic Configuration cccceee eee ee eee eee eats eee eaeee need 131 Enabling Disabling IPFIX Module 0 eee 131 Setting IPFIX Memory Entries ccceceeeeee seer eae 131 Setting Aging Time of Active Stream 131 Setting Aging Time of Inactive Stream 06 132 Setting Sampling Rate cceeeeeeee sees ee eee eee 132 Setting NM Server Address and L4 Port ID 132 Setting Source Address for Network Device Sending Packets ssai aeaaaee 132 Configuring TOPN cceeeeee scene eens eee eeeeeeneees 132 Template Configuration ccceceeeeeeeeee teens teeta eee tenes 133 Setting Template eienenn ienaa ina 133 Setting Data Field Contained in Template Packet inmi wiitiduvninanccmeneiae a tee 133 Deleting Template arrier anion 133 Running Templates irris iindaa a
41. 3 switchport trunk native vlan 100 ZXR10 config gei_1 3 switchport trunk vlan 100 ZXR10 config gei_ 1 3 exit ZXR10 config interface gei_1 4 ZXR10 config gei_1 4 switchport mode trunk ZXR10 config gei_1 4 switchport trunk native vlan 100 ZXR10 config gei_1 4 switchport trunk vlan 100 ZXR10 config gei_ 1 4 exit ZXR10 config interface gei_1 1 ZXR10 config gei_1 1 mac duplicate 0 src vlan 10 dest vlan 100 ZXR10 config gei_ 1 1 exit ZXR10 config interface gei_1 2 ZXR10 config gei_1 2 loopback enable ZXR10 config gei_ 1 2 exit ZXR10 config vlan private map unidirectional session id 1 source gei_1 3 4 destination gei_1 2 ZXR10 config vlan private map unidirectional session id 2 source gei_1 2 destination gei_1 1 Configure gei_1 1 as customer port on the switch the CVID which receives data packet is VLAN 10 configure gei_1 3and gei_1 4 as uplink port the SPVID which forwards data packet is VLAN 100 configure SVLAN based on VLAN translation The detailed configuration is as follows ZX gei ZX ZX ZX ZX ZX ZX ZX ZX ZX ZX ZX ZX ZX ZX ZX ZX R R AHDAADAAAAAADAAAADA 0 config vlan qinq session no 1 customer port 1 1 uplink port gei_1 3 in vlan 10 ovlan 100 0 config interface gei_1 1 0 config gei_ 1 1 switchport 0 config gei_ 1 1 switchport 0 config gei_ 1 1 switchport 0 config gei_ 1 1 switchport 0 config gei_ 1 1 exit O0
42. 55 255 vlan 30 disable subnet VLAN in some ports which don t need subnet VLAN ZXR10 config interface gei_1 5 ZXR10 config gei_1 5 vlan subnet map disable ZXR10 config gei_ 1 5 exit Configuring Protocol VLAN ZXR10 config vlan protocol map session no This configures protocol lt session no gt ethernet2 Ilc snap lt OxHHHH gt vlan VLAN lt vianId gt lt name gt ZXR10 config Show vlan protocol map This views the configuration of protocol VLAN Example Customer port gei_1 1 of a switch receives 0X1000 packets and 0X1001 packets These packets with different tags can be ob served on the other two ports gei_1 2 and gei_1 3 respectively The detailed configuration is as follows Configuration of switch create protocol vlan data ZXR10 config vlan protocol map session no 1 ethernet2 0x1000 vlan 10 ZXR10 config vlan protocol map session no 2 ethernet2 0x1001 vlan 20 put port into corresponding VLAN ZXR10 config interface gei_1 1 ZXR10 config if switchport mode trunk ZXR10 config if switchport trunk vlan 10 20 ZXR10 config if exit ZXR10 config interface gei_1 2 ZXR10 config if switchport mode trunk ZXR10 config if switchport trunk vlan 10 ZXR10 config if exit ZXR10 config int gei_1 3 ZXR10 config if switchport mode trunk ZXR10 config if switchport trunk vlan 20 ZXR10 config if exit disable protocol vlan in
43. By default load balance mode is based on source and destination MAC addresses 4 To delete sm use the following command Confidential and Proprietary Information of ZTE CORPORATION ZTEDHY Chapter 9 Link Aggregation Configuration ZXR10 config no interface lt smartgroup id gt This deletes sm 5 To delete port from sm use the following command ZXR10 config gei_1 x no smartgroup This deletes port from sm Link Aggregation Configuration Example Switches A and B are connected through the smartgroup port which is converged by four physical ports The smartgroup op erates in trunk mode with VLANs 10 and 20 borne This is shown in Figure 22 FIGURE 22 LINK AGGREGATION CONFIGURATION Switch B Smartgroup1 Gei_1 5 8 Trunk Vian10 20 Smartgroupl Gei_1 1 4 Switch A Switch A configuration Create a trunk group ZXR10 A config interface smartgroupl ZXR10_A config smartgroup1 exit bind ports to Trunk group ZXR10_A config interface gei_1 1 ZXR10_A config gei_1 1 smartgroup mode active ZXR10_A config gei_1 1 exit ZXR10_A config interface gei_1 2 ZXR10_A config gei_1 2 smartgroup 1 mode active ZXR10_A config gei_1 2 exit ZXR10_A config interface gei_1 3 ZXR10_A config gei_ 1 3 smartgroup mode active ZXR10_A config gei_ 1 3 exit ZXR10_A config interface gei_1 4 ZXR10_A config gei_1 4 smartgroup mode active ZXR10_A config gei_ 1 4 exit Modify
44. CST of each MST area jointly con stitute Common and Internal Spanning Tree CIST It means that CIST is same as IST inside the MST area and CST outside the MST area IST Region Root Each MST area has an IST Region Root switch which has min imum overhead from the CST Root path When CIST Root is in a certain MST area the CIST Root is the IST Region Root of this MST area After the IST Region Root is selected other ports towards the CIST Root in the area will be blocked MST BPDU MSTI inside the MST area does not communicate with the out side while the IST exchanges BPDU packets with the outside Inside the area MSTI does not send BPDU packets indepen dently MST BPDU packets are sent by the IST includes MSTI information MSTI uses a flag to show there is need to send the MST BPDU packet IST is responsible for sending packets All MSTIs that need to send BPDU packets place their informa tion in the M record structure which is sent as part of the IST BPDU Confidential and Proprietary Information of ZTE CORPORATION 39 40 BPDU Overview BPDU Protection of Edge Port ZXR10 5900E Series User Manual Ethernet Switching Volume ZTERH BPDU Protection Switches calculating spanning tree according to the content of BPDU packet Network topology once changes spanning tree will be calculated again If the network is large the calculation will be very frequent This influence switches to transmit packet At the same time the
45. N j ccescnsiacastxiarenes aa 14 Configuring SuperVLAN wccecnseccsrevesorasesvineresetraxeriebrenecsnatensss 14 VLAN Maintenance and DidQnosis c ccccceccissseseceteccesmestecsanns 16 VLAN Overview Virtual Local Area Network VLAN is a technology that divides a physical network into several logical virtual Local Area Networks LANs Each VLAN is identified by a VLAN ID VID VLAN technology divides users within a physical LAN into different broadcast domains VLANs according to requirements Users with the same demands are grouped to the same broadcast domain while those with different demands are separated Each VLAN like a logically independent LAN shares the same at tributes as those physical LANs All broadcast and unicast traffics within a VLAN are limited to the VLAN but are not forwarded to any other VLAN Devices in different VLANs must rely on L3 rout ing switching for communication between them VLAN provides the following advantages 1 Lower broadcast traffic on the network 2 Enhanced network security 3 Streamlined network management VLAN Type LAN type of a device depends on how it will divide a received frame to a VLAN ZXR10 5900E supports port based VLAN the simplest and most effective method of VLAN division It divides its various ports into different VLANs so that any traffic received on a port belongs to its corresponding VLAN Confidential and Proprietary Information of ZTE CORPORATION 1
46. OS concept related configuration command and configuration example This chapter introduces MAC Table concept related configuration command and configuration example This chapter introduces STP concept related configuration command and configuration example This chapter introduces ZESR ZESR concept related configuration command and configuration example This chapter introduces ZESS concept related configuration command and configuration example This chapter introduces ZESR and SVLAN Linkage Networking concept related configuration command and configuration example This chapter introduces Link Aggregation concept related configuration command and configuration example Confidential and Proprietary Information of ZTE CORPORATION ZXR10 5900E Series User Manual Ethernet Switching Volume ZTEDH chapter Summary S Chapter 10 IGMP Snooping Configuration Chapter 11 UDLD Configuration Chapter 12 LLDP Configuration Chapter 13 L2PT Configuration Chapter 14 Ethernet OAM Configuration Chapter 15 sflow Configuration Chapter 16 IPFIX Configuration Related Documentation This chapter introduces IGMP Snooping concept related configuration command and configuration example This chapter introduces UDLD concept related configuration command and configuration example This chapter introduces LLDP concept related configuration command and configuration example This chapter intr
47. Ry 192 168 1 1 24 10 2 0 1 16 Configuration of remote discovery Configuration of R1 ZXR10 config set ethernet oam en ZXR10 config interface gei_1 1 ZXR10 config gei_1 1 set ethernet oam enable ZXR10 config gei_1 1 set ethernet oam period 10 timeout 3 mode passive Configuration of R2 ZXR10 config set ethernet oam enable ZXR10 config interface gei_1 2 ZXR10 config gei_1 2 set ethernet oam enable ZXR10 config gei_1 2 set ethernet oam period 10 timeout 3 mode active When discovering sucess prompt ETH OAM gei_i 2 discovery process is successful When failing prompt ETH OAM gei_1 2 is informed of remote link fault ETH OAM gei_1 2 is informed of remote unrecoverable failure When discovering sucess the discovery information showed by R2 is as follows ZXR10 config show ethernet oam gei_1 2 discovery PortId 2 ethernet oam enabled Local DTE Config Mode active Period 10 100 ms Link TimeOut 3 s Unidirection nonsupport Confidential and Proprietary Information of ZTE CORPORATION 111 ZXR10 5900E Series User Manual Ethernet Switching Volume ZTERHY PDU max size 1518 Status Parser forward Multiplexer forward Stable yes Discovery done Loopback HOLE PDU Revision 0 Remote DTE Config Mode passive Link Monitor support Unidirection nonsupport Remote Loopback support Mib Retrieval nonsupport PDU max size s 1518 Status Parser forward Multipl
48. Source MAC Address Filtering 33 Setting MAC Address Filtering csceeeeeeeeeeeeeeeeeeees 33 Viewing MAC Address Table cceeceeeeeeeeeeeeeeeeeaeeees 34 MAC Address Table Configuration Example eeeeee 34 STP COnfiQuration viccisiciiciisieiiesiiieiieradeinatien oF STP Oye View aa ienna nnna ran ANNAA ENAA ANNEER ARANAS 37 SSTP ModE annie tn eea a e E N eaa 37 peAa NEA A ATS 38 MSTP MOd ereke ean a aA ENa aE OAA EEN ERTA a SENNA ERE 38 BPDU Protection v4 cits cciessveceeveeiee ccs ns ties neveecie sees a 40 Configuring STP areitan ion aa Aa a 45 Enabling Disabling STP ssssssssrssssrrssssnrrsrrrrrrsrrreserrrs 45 Configuring STP Mode rnisscomicsiamios nomia a a 45 Configuring STP Parameters ssssssssssressrrrrrrrrrrrserssrns 45 Creating INSEANCES inris iei Peed a outs 46 Configuring MSTP Name and Version 2 ceeeeeeeeee ees 47 Configuring Switch and Port Priority eceeeeeeee es 47 Excluding a Port from Spanning Tree Calculation 48 BPDU Protection Configuration cc scceseeeeee sees eeeeeeeeees 48 Configuring BPDU Protection on Edge Port 48 Configuring Port Loopback Function c seeeeeeeeeees 49 Configuring Port Root Protection FUNCTION cceeee eee 49 STP Configuration Examples ccceeeeeeee estes ee eeeeeeeaeeees 49 BPDU Protection Configuration Example ceseeeeeees 52 Edge Port BPDU Protection Co
49. T Config ID These bridges use the same in stances This area also includes the LAN designating the bridge in the CIST instance Confidential and Proprietary Information of ZTE CORPORATION ZTEDH Chapter 5 STP Configuration Note Bridges in an MST area mush have same MST config ID Two bridges with same MST config ID are probably in different MST area For example if two bridges with the same MST config ID are connected through the LAN of another MST area they should belong to different MST area MST area may have different spanning tree structures Inter nal Spanning Tree IST MST1 MST2 and MSTn Each MSTi can be regarded as an MSTI The bridge forwards the frame with the designated VID based on the path to which the VID corresponds The mapping between VID and MSTI is shown by the MST Config ID The spanning tree structure of MSTI is decided by priority parameters configured by the system MST Instance MST bridge must support two kinds of instances that is IST instance and multiple MST instances By default IST runs in an area All the VLANs are configured to the IST by default IST connects all the switches in the area IST is responsible for communication with other MST areas and SST areas out side the area MST instance does not send the BPDU packet independently Spanning tree information is included in the M record and transmitted as part of the IST BPDU inside the area CIST internal IST and external
50. VLAN Identifier VLAN Virtual Local Area Network ZESR ZTE Ethernet Switch Ring ZESS ZTE Ethernet Smart Switch Confidential and Proprietary Information of ZTE CORPORATION 139
51. VLAN Maintenance and Diagnosis For convenient SVLAN maintenance and diagnosis ZXR10 5900E provides the following commands ZXR10 config show vlan qinq session no This views one or all sessions lt session_id gt configuration of SVLAN ZXR10 config show vlan qinq extend session no This views one or all lt session_id gt extend session configuration of SVLAN Confidential and Proprietary Information of ZTE CORPORATION 21 ZXR10 5900E Series User Manual Ethernet Switching Volume ZTERHY This page is intentionally blank 22 Confidential and Proprietary Information of ZTE CORPORATION Chapter 3 SVLAN COS Configuration Table of Contents SV LAN COS OYETVIEW ccsice tee caevensdenieerneenedenntocmerenenaieevers 23 C nngurnino SYLAN aise cayctesecrcsciaascemietearedthedaceeiutesessorm 23 SVLAN COS Configuration EXamMple srassrrsisisirniieite riia 24 SVLAN COS Maintenance and Diagnosis icc cciccdcrecenveceneceenenns 24 SVLAN COS Overview In SVLAN QinQ mode when receiving tagged data packet from user trunk port uplink port reserves the original data packet tag and attaches service provider tag This tag includes 2 bytes Eth ernet type 0x8100 and 2 bytes priority and VID in which priority field is 3bits and this field is COS we call this as service type ser vice level Or service priority The function is to configure COS priority value Configuring SVLAN COS ZXR10 config cos session lt session
52. VLAN link type of smartgroup port ZXR10 A config interface smartgroupl ZXR10_A config smartgroup1 switchport mode trunk Confidential and Proprietary Information of ZTE CORPORATION 83 ZXR10 5900E Series User Manual Ethernet Switching Volume ZTEDH ZX ZX ZX vs 0 A config smartgroupl switchport trunk vlan 10 0 A config smartgroupl switchport trunk vlan 20 0 A config smartgroupl switchport trunk native vlan 10 Switch B configuration ZX ZX ZX ZX ZX ZX ZX ZX ZX ZX ZX ZX ZX ZX ZX ZX ZX ZX ZX ZX DPHANDAADADAADAAAADAADAAAAD 0 B config interface smartgroupl 0 A config smartgroupl smartgroup mode 802 3ad 0 B config smartgroup1 exit 0 B config interface gei 1 5 0 B config gei_1 5 smartgroup mode passive 0 B config gei_1 5 exit 0 B config interface gei_1 6 0 B config gei_1 6 smartgroup mode passive 0 B config gei_1 6 exit 0 B config interface gei_1 7 0 B config gei_1 7 smartgroup mode passive 0 B config gei_1 7 exit 0 B config interface gei_1 8 0 B config gei_1 8 smartgroup mode passive 0 B config gei_1 8 exit 0 B config interface smartgroupl 0 B config smartgroupl switchport mode trunk 0 B config smartgroupl switchport trunk vlan 10 0 B config smartgroupl switchport trunk vlan 20 0 B config smartgroupl switchport trunk native vlan 10 Link Aggregation Maintenance and Diagnosis To facilitate link aggregation mainte
53. XR10_S3 config zesr ctrl vlan 4000 ZXR10_S3 config zesr ctrl vlan 4000 smartgroupl gei_ 1 1 ZXR10_S3 config zesr ctrl vlan 4000 edge assistant gei_1 2 SW4 configuration Interface instance configuration is ZXR10_S4 config zesr ctrl vlan 4000 ZXR10_S4 config zesr ctrl vlan 4000 Confidential and Proprietary Information of ZTE CORPORATION as SW2 protect instance 1 major level role master level 1 seg 1 role as SW2 protect instance 1 level 1 seg 1 role master 63 ZXR10 5900E Series User Manual Ethernet Switching Volume ZTERH gei_1 1 gei_1 2 ZESR and ZESR Hybrid Configuration Example FIGURE 19 ZESR AND ZESR HYBRID NETWORKING TOPOLOGY FIGURE ZESS MASTER S U 77777 gt S ZESS TRANSIT Gei_2 1 Gei_3 1 ____ Ges Level 1 seg 1 p pg Figure 19 is typical ZESR and ZESR hybrid networking topology figure Node ZXR10 2 ZXR10 3 and ZXR10 1 form double nodes double uplinks that is ZESR Also three nodes form a main loop virtually Node ZXR10 2 ZXR10 3 and ZXR10 4 form a level iseg 1 secondary ring that is ZESR Node 1 configuration as a normal switch the major function is to transparently transmit data package VLAN information need to be configured port with tagged belongs to ctrl vlan close port broadcast and unknown unicast suppression connect ZXR10 3 ZXR10_S1 config interface gei_1 1 configure interface working mode as auto negotiation ZXR10_S1 config g
54. ZTEDR ZXR10 5900E Series All Gigabit Port Intelligent Routing Switch User Manual Ethernet Switching Volume Version 2 8 23 B ZTE CORPORATION ZTE Plaza Keji Road South Hi Tech Industrial Park Nanshan District Shenzhen Tel 86 755 26771900 Fax 86 755 26770801 URL http ensupport zte com cn E mail support zte com cn LEGAL INFORMATION Copyright 2006 ZTE CORPORATION The contents of this document are protected by copyright laws and international treaties Any reproduction or distribution of this document or any portion of this document in any form by any means without the prior written consent of ZTE CORPO RATION is prohibited Additionally the contents of this document are protected by contractual confidentiality obligations All company brand and product names are trade or service marks or registered trade or service marks of ZTE CORPORATION or of their respective owners This document is provided as is and all express implied or statutory warranties representations or conditions are dis claimed including without limitation any implied warranty of merchantability fitness for a particular purpose title or non in fringement ZTE CORPORATION and its licensors shall not be liable for damages resulting from the use of or reliance on the information contained herein ZTE CORPORATION or its licensors may have current or pending intellectual property rights or applications covering the subject matter o
55. ZXR10 5900E Series User Manual Ethernet Switching Volume ZTEDH 2 Assume ports 1 2 and 3 belong to the same VLAN while the other ports belong to other VLANs then frames received on port 1 are broadcast to ports 2 and 3 only while they are not passed to any other port When a user in a VLAN moves to a new location it no longer belongs to the original VLAN unless the user is assigned to that VLAN again VLAN Tag It is possible to transmit services of several VLANs over a single link if a frame carries information about its native VLAN while being passed through a network IEEE 802 1Q implements this function through attaching a VLAN tag to the Ethernet frame A VLAN tag is a four byte long number and it comes after the source MAC address and before the length type field in an Ethernet frame Figure 1 shows the VLAN tag format FIGURE 1 VLAN TAG FORMAT TPID 2 bytes TCI 2 bytes 7 54 07 VLAN tag is applied to cross switch VLANs when the link between switches is usually called a trunk VLAN tag allows VLANs cross several switches to be created through one or more trunks When the ports connecting these switches receive a tagged frame the ports can judge which VLAN the frame belongs to based on the VLAN tag Each 802 1Q port is allocated a default VLAN ID called PVID Un tagged frames received on a port is considered belonging to the default VLAN and then broadcasted in that VLAN ZXR10 5900E supports IEEE 802 1Q
56. _id gt cosO This configures SVLAN COS lt 0 7 gt cos1 lt 0 7 gt cos2 lt 0 7 gt cos3 session id lt 1 16 gt lt 0 7 gt cos4 lt 0 7 gt cos5 lt 0 7 gt cos6 lt 0 7 gt cos7 lt 0 7 gt This configures a cos one time or many coses 2 ZXR10 config interface lt port name gt This enters interface configuration mode ZXR10 config gei_1 x oSs mode cos map session This applies session lt session_id gt corresponding cos to physical interface Confidential and Proprietary Information of ZTE CORPORATION 23 ZXR10 5900E Series User Manual Ethernet Switching Volume ZTERHY 4 ZXR10 config no Cos session lt session_id gt This deletes SVLAN COS configuration 5 ZXR10 config gei_1 x NO cos mode cos map ses This deletes the binding of sion lt session_id gt session on physical port Note Each physical port can only apply one session The new configura tion will replaces the old one For example configure the following two commands on gei_1 1 interface configuration mode 1 cos mode cos map session 1 2 cos mode cos map session 2 Here only 2 takes effect SVLAN COS Configuration Example For example assume that on port gei_1 1 configure cosO prior ity map is 7 cos1 priority map is 6 cos2 priority map is 5 cos3 priority map is 4 cos4 priority map is 3 cos5 priority map is 2 cos6 priority map is 1 cos7 priority map is 7 on port gei_1i 2 configure cos1
57. a 133 IPFIX Configuration Example sssssssssssssrrrrsrerrsesrrrrerrnnns 133 IPFIX Maintenance and Diagnosis ssssssssresssrrsrsrrrrsrrrrns 134 E EA EC F i GIOSSALY E a a E oo Purpose Intended Audience What Is in This Manual About This Manual This manual is ZXR10 5900E V2 8 23 B Series All Gigabit Port Intelligent Routing Switch User Manual Ethernet Switching Vol ume This manual introduces Ethernet switching functions sup ported by ZXR10 5900E including VLAN configuration STP config uration ZESS configuration and Ethernet OAM configuration This manual is intended for the following engineers on site maintenance engineers network monitor engineers system maintenance engineer ZXR10 5900E V2 8 23 B Series All Gigabit Port Intelligent Rout ing Switch User Manual Ethernet Switching Volume contains the following chapters Chapter 1 VLAN Configuration Chapter 2 SVLAN Configuration Chapter 3 SVLAN COS Configuration Chapter 4 MAC Table Configuration Chapter 5 STP Configuration Chapter 6 ZESR ZESR Configuration Chapter 7 ZESS Configuration Chapter 8 ZESR and SVLAN Linkage Networking Configuration Chapter 9 Link Aggregation Configuration This chapter introduces VLAN concept related configuration command and configuration example This chapter introduces SVLAN concept related configuration command and configuration example This chapter introduces SVLAN C
58. am pling rate dynamically according to current port working speed system resource utility ratio and other information When setting sampling rate sFlow works normally For the packet that need to be collected system copies the packet or only copies the max imum packet length that sFlow Agent needs sends the copy of the packet source port and destination port of the packet the current total packet counter value sampling packet counter value and other information to sFlow agent module for processing After sampling packet are forwarded according to normal packet for warding workflow SFlow Agent Unit The main function of SFlow Agent is to analyze sampling packet send encapsulated sFlow packet according to protocol to sFlow collector device meanwhile read the statistic information on the interface and send them to sFlow collector device The location of sFlow agent module can be in network device itself or outside of device For most network devices supporting sFlow sFlow agent unit is integrated into management module of net work device SFlow agent unit runs on a part of device network management software module It integrates interface count infor mation and sampling packet information into sFlow management packet which is sent to sFlow collector SFlow Collector SFlow Collector is the network device that sFlow manage monitor collect and analyze It is responsible for storing packet sended from each sFlow Agent on t
59. and show ip stream config This includes whether to enable IPFIX module size of mem ory entries server address port configuration source address configuration template refresh rate and refresh time configu ration To show TOPN execute the following command show ip stream topn This shows information of N data flows according to set TOPN display mode The information includes data flow ingress egress source address destination address source port destination port L3 protocol type the number of packets or the number of bytes corresponding to TOPNS setting 134 Confidential and Proprietary Information of ZTE CORPORATION ZTERHY Chapter 16 IPFIX Configuration 3 To show template configuration execute the following com mand show ipstream template This shows configuration of template that is fields contained in template Confidential and Proprietary Information of ZTE CORPORATION 135 ZXR10 5900E Series User Manual Ethernet Switching Volume ZTERHY This page is intentionally blank 136 Confidential and Proprietary Information of ZTE CORPORATION Figures Figure 1 VLAN TAG FORMAT eceeeeeeee eee eeeee eee ee eeeeeeeaeneees 2 Figure 2 QinQ Typical Networking cccceceeeeeeeeeeeeeeeaeeaeeeneaes 4 Figure 3 VLAN NETWORKING c eeeeeee eee eee tees eeeee eee eneees 9 Figure 4 Subnet VLAN Configuration Example sseeee 12 Figure 5 SuperVLAN Configuration Example cccccscs
60. antity output by network device thus decreasing requirement to con figuration of upper layer management server and promoting scalability and working efficiency of upper layer management system IPFIX outputs data in format of template Network device will send packet template and data flow records respectively to upper layer management server when outputting data in IPFIX format Packet template specifies format and length of packet in subsequently sent data flow record for management server processing subse quent packets Meanwhile to avoid packet loss and errors in packet transmission network device repeats sending packet template to upper layer management server regularly Sampling IPFIX supports packet number based sampling as well as time based sampling Sampling rate can be configured on each inter face separately Timeout Management As for collected flow data Incase data are not updated within the inactive time data will be output to NM server As for long time active flow the data will also be output to NM server after active time Confidential and Proprietary Information of ZTE CORPORATION ZTERHY Chapter 16 IPFIX Configuration Data Output After collecting data flows in network network device always out puts them to NM server IPFIX supports to output data to multiple NM servers Generally data are output to two servers master server and slave server IPFIX adopts template based data outpu
61. asic SVLAN Configuration cccceeeeeeeeee eee eee eee eaeees 19 Transparent Transmission SVLAN Configuration 20 802 1P Priority Configuration ceceeeee eee ee teste eens 21 SVLAN Maintenance and DiagnoSis ecceeeeeeeeeeee tees 21 SVLAN COS Configuration cccccscssssesseeesseeesners 2D SVLAN COS OVErViCW ia f raa n e a a E a a Ena 23 Configuring SVLAN COShoweirenainereera n anaa iaai 23 SVLAN COS Configuration Example ssssssssssssrrsrsrirrsrrrrrens 24 SVLAN COS Maintenance and DiagnoSis seceeeeeee es 24 MAC Address Table Configuration cssscsssesses 27 Introduction to MAC AddreSS ccceeeeeeeeee teeta eeeeeeeaeeees 27 Composition and Meaning of MAC Address Table 27 MAC Address Classification cceeeeeeeeee eee eeeeeeeaeees 28 MAC Address Table Establishment and Deletion 28 Configuring MAC Address Table ecceeeeeeeeeeeeeeeeeaeees 29 Setting MAC Address Aging TIME scceeeeeee teens eee ees 30 Burning MAC AddreSSeS ceceeeee eee ee teense i aaia 30 Configuring MAC Address Permanent ccccsseeeeeeeeeneeas 30 Binding MAC Address to a Port cceeeeeeeeee eee eeeeaeees 31 Enabling MAC Address Learning ceceeeeeeeeeeeeeeees 32 Limiting MAC Address Count c ecceeeeeee eee eeeeeeeaeees 32 Setting MAC Address Learning Protection 00 32 Setting Port Unkown
62. ata frame from that device for a certain time period set aging time that is it does not receive any data frame from its source MAC address as that of device s MAC address Then the switch deletes that MAC address of the device from its MAC address table and updates the MAC address table MAC address aging applies to dynamic MAC addresses only 3 Manual Addition and Deletion An entry can be added to the MAC address table of a switch with a configuration command when the network is relatively stable and device is connected to a fixed switch port Configuration can take place for dynamic static or permanent MAC address Configuring static or permanent MAC addresses can prevent MAC spoofing attacks MAC address can be deleted with the MAC address deletion command Deleting command of ZXR10 5900E can forcibly delete a dynamically learned MAC address Configuring MAC Address Table MAC address table of switch can run normally with the default con figuration But some appropriate configuration on MAC address table can improve the network stability The configuration of MAC address table includes the following con tents Confidential and Proprietary Information of ZTE CORPORATION 29 ZXR10 5900E Series User Manual Ethernet Switching Volume ZTERH setting MAC Address Aging Time MAC address aging time influences the switch s performance A shorter aging time may make the switch delete useful MAC ad dress table entries A
63. ce filter dsF destination filter time day hour min sec Frm mac from where 0 drv 1 config 2 VPN 3 802 1 4 micro 5 dhcp MAC Address vid vpn port per stc toS wtd srF dsF Frm Time 0000 2222 2222 2 0 fei_2 1 2 1 0 0 0 0 0 1 0 00 14 19 0000 1111 1111 2 0 fei_2 1 2 1 0 0 0 0 0 1 0 00 14 28 MAC Address Table Configuration Example As shown in Figure 6 switches A and B are connected over trunk link smartgroupi three PCs and a ZXR10 2826E are connected to switch B The details is shown as Equipment Mac Address switchport vian 0X0000 8765 95CA 0X0000 8765 95C8 0x0000 8765 95 C zoas je foe fe 34 Confidential and Proprietary Information of ZTE CORPORATION ZTE Chapter 4 MAC Address Table Configuration PC1 PC2 and PC3 work as servers and their MAC addresses are bound to the ports of switch B There are a number of individual users connecting to the ZXR10 2826E so MAC address learning protection with the MAC address count as 1000 and protect time as 120s is need to be enabled on the proper switch B port In addition it is need to set the MAC address aging time to 180s on switch B FIGURE 6 MAC ADDRESS TABLE CONFIGURATION EXAMPLE SwitchA gt Smartgroup1 SwitchB 4 aA A E lt o Q PCI PC2 PC3 ZXR102826E Configuration of switch B Configure MAC address binding on the port ZXR10 B config mac add permanent 0Q0D0 8765 95CA interface gei_1 1 vlan 1 ZXR10 B config mac add pe
64. ck command from its peer and continue as if it were never received Confidential and Proprietary Information of ZTE CORPORATION ZTEDH Chapter 14 Ethernet OAM Configuration Link Monitor Link monitor function is to do statistics for fault symbols or fault frames that physical layer receives during fixed time The driver has a counter which is always doing the statistics of fault frame fault symbol and total receiving frame number The platform reads these information at specific time then judge and process according to fault symbol number fault frame number and total frame number detect what kind of event happens and generate the corresponding event to inform OAMPDU There are four types of link event 1 Link fault symbol period event count the fault symbol gener ated in specific time Period is defined by symbols number that physical layer receives in some time 2 Fault frame event count the fault frame generated in specific time 3 Fault frame period event count the fault frame generated in specific time The period is defined by receiving frame number 4 Fault frame second accumulated event count the fault frame second generated in specific time Period is defined by time interval Configuring 802 3ah Function Configuration ZXR10 config set ethernet oam enable disable This enables Ethernet OAM in global configuration mode Enable open global link Ethernet OAM function Disable close global
65. command ZXR10 config interface smartgroup lt 1 32 gt This creates a trunk group 2 ZXR10 config smartgroupx smartgroup mode This creates smartgroup 802 3ad on mode 2 To add a member port to the trunk group and set the port aggregation mode use the following command ZXR10 config gei_1 x smartgroup lt smartgroup id gt This adds a member port to the mode passive active on trunk group and sets the port aggregation mode When aggregation mode is set to on port runs static trunk and both ends taking part in aggregation should be set to on When aggregation mode is set to active or passive port runs LACP Active indicates a portis in active negotiation mode Pas sive indicates a port is in passive negotiation mode When con figuring dynamic link aggregation set the aggregation mode of one end to active and that of other to passive or both ends to active Note VLAN link type of member port must be consistent with that of smartgroup Otherwise port is not allowed to join trunk group 3 To set load balance mode for port link aggregation use the following command ZXR10 config smartgroupx smartgroup load balance This sets load balance mode for lt mode gt port link aggregation 82 Port link aggregation of ZXR10 5900E supports six load bal ance modes They are based on source and destination IP addresses source and destination MAC addresses as well as source and destination ports
66. conditions that UDLD sets interface down Confidential and Proprietary Information of ZTE CORPORATION 95 ZXR10 5900E Series User Manual Ethernet Switching Volume ZTEDH 96 1 In ordinary mode after sending Hello neighbor joining packet the received Echo packet displays that the peer port s neighbor is not itself 2 In aggressive mode after sending Hello neighbor joining packet the received Echo packet displays that the peer port s neighbor is not itself 3 In aggressive mode after receiving Hello neighbor joining packet send Echo packet and the peer Echo packet is not received 4 In aggressive mode all neighbors in the interface exceed the aging time and don t receive Hello detection packet When interface is down or the interface can t be used this device need to send a flush packet to inform the adjacent layer 2 device to delete the information of this device Enable UDLD protocol the receiving echo packet displays the peer port s neighbor is not itself which indicates fault connection No matter what mode UDLD applies the port will be shutdown Aging time means protocol packet sending interval the default is 15 seconds 3 If aggressive mode is configured packet is not recieverd when exceed aging time port will be shutdown Configuring UDLD UDLD Global Configuration ZXR10 config UdId enable disable lt port list gt This globally enables UDLD or enables UDLD in batch ZXR10 config udid message time
67. config interface gei_1 3 0 config gei_ 1 3 switchport 0 config gei_ 1 3 switchport 0 config gei_1 3 switchport 0 config gei_ 1 3 exit O config interface gei_1 4 0 config gei_ 1 4 switchport 0 config gei_ 1 4 switchport 0 config gei_ 1 4 switchport 0 config gei 1 4 exit Confidential and Proprietary Information of ZTE CORPORATION qing customer mode hybrid hybrid native vlan 10 hybrid vlan 10 100 untag mode trunk trunk native vlan 100 trunk vlan 100 mode trunk trunk native vlan 100 trunk vlan 100 79 ZXR10 5900E Series User Manual Ethernet Switching Volume ZTERHY This page is intentionally blank 80 Confidential and Proprietary Information of ZTE CORPORATION Chapter 9 Link Aggregation Configuration Table of Contents Link Ag r gati m OVERHEW ce cniterertcieerdcercadd re pdceieereievetierenet 81 C nfigurina LINK AGGREGATION oo iic ccxscinceccnvaGeaceinadadectuteiteserus 82 Link Aggregation Configuration Example ceeeeeeeeeeee es 83 Link Aggregation Maintenance and Diagnosis sssesserereses 84 Link Aggregation Overview Link aggregation also called trunk binds multiple physical ports into a logic port Link aggregation is to implement load balance of outgoing incoming traffic among these ports Switch decides from which port packets are sent to the opposite switch depending on the port load balance policy configured by users When detecting the link of one port is broken
68. d a data frame to a VLAN based on the source IP address This source IP address based VLAN can forward user data from differ ent subnets cross several VLANs while remain the original VLAN membership unchanged 4 Confidential and Proprietary Information of ZTE CORPORATION ZTEDH Chapter 1 VLAN Configuration Subnet VLAN isolates data frames from different source IP ad dresses so that a user has access to data from its own subnet only The subnet VLAN priority in untagged frame forwarding is higher than that of protocol VLAN or PVID the priority of tagged frame forwarding in the tagged mode is higher than that of subnet VLAN Port is enabled on Subnet VLAN by default and also can be disabled according to actual demands ZXR10 5900E supports up to 256 subnet VLANs that is supports processing data frames from 256 source IP subnets Protocol VLAN Protocol based VLAN applies to L3 networks or those running many protocols Protocol based VLAN divides packets based on their network layer encapsulation protocol Packets with the same tag belong to the same protocol VLAN This network layer protocol based VLAN can broadcast packets cross several VLAN switches It allows users to move freely in the network while remain their VLAN membership unchanged This solution eliminates the need to reconfigure the VLAN when a user moves to another physical location in the network In addi tion as VLANs are identified based on the protocol type
69. dge switch and then the encapsulated packet is broadcast in vlan these packets are de encapsulated on the port of remote switch that enables tunneled In the end transparent transmission is implemented Layer 2 protocol packet STP on the port that doesn t enable L2PT will not be transmitted in the provider network which will cause that the client network forms several unconnected stp domain based on area border and the client VPN network can t run a uniform STP topology L2PT can help user to meet the requirement by transparently transmitting STP BPDU packet in VPN Command Configuration To enable port or close L2PT tunnel use the following command ZXR10 config gei_1 x I12protocol tunneled stp enable This enables disables port disable tunneled This command is configured in the interface mode It is used to enable or disable a certain port tunneled STP field indicates layer Confidential and Proprietary Information of ZTE CORPORATION 103 ZXR10 5900E Series User Manual Ethernet Switching Volume ZTERHY 2 protocol mode that need tunneled which only supports stp pro tocol The default is disabled Note QinQ or SVLAN need to be configured on tunnel access port to take an effect on port tunneled configuration function which im plements L2PT packet transparent transmission function L2PT Configuration Example Network figure is shown as Figure 26 FIGURE 26 L2PT NETWORKING DIAGRAM Customer switc
70. duction to MAC Address MACMedia Access Control address is the hardware identification of a network device The switch forwards packets based on MAC address MAC address is unique ensuring accurate packet for warding Each switch maintains a MAC address table called forwarding database FDB FDB records one to one mapping relationship between MAC addresses and switch ports When receiving a data frame the switch decides whether to drop it or forward it to the proper port based on this table The FDB is the basis and prerequisite for fast forwarding Composition and Meaning of MAC Address Table A MAC address and a VLAN ID pair uniquely identify a MAC address table entry ZXR10 5900E MAC address table entry includes the following items 1 MAC address such as 00D0 D056 95CA 2 Port No MAC address corresponding port such as gei_1 1 smartgroupl1 3 VLAN ID MAC address corresponding VLAN ID such as 10 4 Other marks Indicate MAC address state and operation ZXR10 5900E MAC address table entry has the following marks stc Whether the MAC address is a static one per Whether the MAC address is permanent toS Whether the MAC address is solid Confidential and Proprietary Information of ZTE CORPORATION 27 28 ZXR10 5900E Series User Manual Ethernet Switching Volume ZTERHY srF Whether to drop frames from the source MAC address dsF Whether to drop frames from the destination MAC ad dress Tim
71. e the time of MAC address on the switch Desiganated by day hour minute second During L2 forwarding the switch checks its MAC address table for the destination MAC address of the received frame and then for ward data to the corresponding port MAC Address Classification ZXR10 5900E MAC address is divided into the following types 1 Dynamic MAC address Dynamic MAC addresses are learned by the switch from data frames it receives and are deleted when the aging time is due When the device connects to another port on the switch the corresponding mapping relationship between the MAC addtess and port number also changes in the MAC address table Dy namic MAC addresses are lost when the switch is powered off and must be learned again when the switch is rebooted 2 Static MAC address Static MAC addresses are configured manually and will never age The mapping relationship between MAC address and port number in the MAC address table remains unchanged despite of changes of the connecting port between switch and device Static MAC addresses are also lost when the switch is powered off and must be configured again when the switch is rebooted 3 Permanent MAC address Permanent MAC addresses are also configured manually The mapping relationship between MAC address and port number in the MAC address table remains unchanged despite of changes of the connecting port between switch and device Permanent MAC addresses will not disappear
72. e Customer Provider a ee Jae Domain Domain SaaS ee as SS Gz Seenen Scenario A Touching Domains Ok Scenario B Intersecting Domains Not Allowed Scenario C Nested Domains Ok Route discovery MEP use LTM LTR to track the route from one MEP to another MEP or between MIPs Fault detection MEP use periodically sending and receiving CCM information to detect network connection It mainly detects con nection fault and unwanted connection fault connection status Fault affirmation and isolation This function belongs to manage ment act manager affirms fault bill by LBM LBR then does the isolation operation Fault notification When MEP has connection fault the relevant re port information will be sent to the designated management sys tem such as NMSTRAP and so on Network status detection estimate network connection status or network delay jitter status through detecting the packet with time stamp between MEPs or packet transceiver with counter value MP includes MEP and MIP is the smallest entity of management layer realizable function By comparison realizable function of MEP is more complicated than that of MIP and management con figuration is more complex In some extent CFM function is mainly implemented by MEP MEP can send receive and handle any one of above information But MIP only can handle LTM and LBM infor mation and send LTR and LBR information 114 Confidential and Proprietary Informatio
73. e IP subnet and default gateway With the SuperVLAN technology the ISP needs only one IP sub net for its SuperVLAN It creates a sub VLAN for each of its users These sub VLANs can use flexibly the IP addresses in the Super VLAN subnet and share the default gateway of the SuperVLAN Each sub VLAN is an independent broadcast domain ensuring user isolation and communicates with other sub VLANs through Super VLAN routing Configuring VLAN Creating VLAN ZXR10 config vlan lt vlan id gt lt vlan name gt This creates specific VLAN and enters into VLAN configuration mode Creating a VLAN in VLAN Database To create a VLAN in VLAN database use the following command ZXR10 config vlan list lt v an list gt name lt vian name gt This creates a VLAN in VLAN database Setting VLAN Name To set VLAN name use the following command ZXR10 config vlanx name lt vian name gt This sets VLAN name VLAN name uniquely identifies a VLAN This can be a group de partment and region name By default a VLAN name is VLAN VLAN ID VLAN ID includes four digits Os are pretended when there are less than four digits Name of VLAN 4 is VLANO004 6 Confidential and Proprietary Information of ZTE CORPORATION ZTEDH Chapter 1 VLAN Configuration Setting VLAN Link Type on Ethernet Interface To set VLAN link type on Ethernet port use the following command ZXR10 config gei_1 x switchport mode
74. e domain inclusion relationship The domain with large level can include the domain with low level whereas it doesn t work The domains with same level can t include each other That is the domain with the largest range has the highest level Domain inclusion relationship can not be intersection but tangency internally tangent or externally tangent and inclusion Connectivity Fault Management CFM is useful to Virtual Bridged Local Area Networks for detecting isolating and reporting connec tivity faults It is aimed primarily at Provider Bridged Networks but is useful also for C VLAN networks IEEE 802 1ag standard defines the following mechanism 1 Configure multiple embedded MDs by a bridge network Each domain can be managed by different management organiza tion Configure MAMaintenance Association identified by a lone MD in any designated bridge and a group of VLANs Protocol workflow and CFM protocol packet format for detect ing isolating and reporting connectivity faults Configure and manage configuration ability of MP mainte nance point in MA MP is used for generating CFM packet 5 Demand MPs to implement specific fault isolating operation and inspect result a Confidential and Proprietary Information of ZTE CORPORATION 113 ZXR10 5900E Series User Manual Ethernet Switching Volume ZTERH FIGURE 30 ETHERNET NETWORK MAINTENANCE DOMAIN INCLUSION RELATIONSHIP FIGURE Operator gt Domain F B a
75. e se In Figure 8 switch A is a root switch There is link failure between switch B and switch C which doesn t receive any BPDU packet from switch B Before MAX_AGE timer expired port in switch C is still in blocking state Confidential and Proprietary Information of ZTE CORPORATION 41 ZXR10 5900E Series User Manual Ethernet Switching Volume ZTERH FIGURE 9 NETWORK LOOP DIAGRAM BPDU Message _ Data Message gt lt BPDU message is blocked In Figure 9 if port loopback protection is not configured After MAX_AGE timer expires blocking port in switch C will be trans mitted into LISTENING state and then FORWARD_DELAY time is transmitted into LEARNING state This cycle is repeated again then this will lead to loop FIGURE 10 PORT LOOPBACK PROTECTION E E ee 1 _ gt BPDU Message Blocked Port IX In Figure 10 if port loopback protection is configured Blocking port in switch C will be transmitted into LOOP_INCONSISTENT 42 Confidential and Proprietary Information of ZTE CORPORATION ZTEDH Port Root Protection Function Chapter 5 STP Configuration state after MAX_AGE time Port in LOOP_INCONSISTENT state won t transmit data This will avoid looping Port root protection function provides a way to protect root switch In switch environment all switches which enable spanning tree will take part in the election of root switch Switch which has the lowest priori
76. e zte ZXR10_ B config mstp revision 2 Map VLANs 1 to 10 to Instance 1 and VLANs 11 to 20 to Instance 2 ZXR10_B config mstp instance 1 vlan 1 10 ZXR10_ B config mstp instance 2 vlan 11 20 Change the priority of Switch B in Instance 2 so that it becomes the Root of Instance 2 ZXR10_B config mstp spanning tree mst instance 2 priority 4096 Switch C Configuration Configure the MST area ZXR10_C config spanning tree mode mstp ZXR10_C config spanning tree mst configuration ZXR10_C config mstp name zte ZXR10_C config mstp revision 2 Map VLANs 1 to 10 to Instance 1 and VLANs 11 to 20 to Instance 2 ZXR10_C config mstp instance 1 vlan 1 10 ZXR10_C config mstp instance 2 vlan 11 20 Change the priority of Switch C in Instance 1 so that it becomes the Root of Instance 1 ZXR10_C config mstp spanning tree mst instance 1 priority 4096 Keep the default configuration of Switch D Confidential and Proprietary Information of ZTE CORPORATION ZTEDH Chapter 5 STP Configuration 2 As shown in Figure 14Switches B and C run in an area CIST Root Bridge is outside the area One edge port of Switch B C is blocked FIGURE 14 CONFIGURATION OF MSTP CIST Root Swith A Swith B 4 Swith C The difference between this example and the previous example is One area can have only one instance to communicate with the external network Edge port is in block or forward state for al
77. ed MEP by index number and session number Also can delete the current all MEPs in MA by select all here MEP includes RMEP designated session number MIP or delete all MIPs in the current MA 17 ZXR10 config md ma assign mep lt 1 8191 gt to The port can be real port or interface lt interfacename gt samartgroup When assigning port for MEP the MIP that level is lower 16 ZXR10 config md ma delete mip session This deletes MIP lt 1 64 gt all When deleting MIP delete the than or equal to current MEP level can t exist on the port in the same vlan same level can t assign port for one MEP many times 116 Confidential and Proprietary Information of ZTE CORPORATION ZTEDH Chapter 14 Ethernet OAM Configuration e 25 ZXR10 config md ma assign mip lt 1 64 gt interface lt interfacename gt ZXR10 config md ma no assign mep lt 1 8191 gt ZXR10 config md ma no assign mip lt 1 64 gt ZXR10 config md ma mep lt 1 8191 gt state enable dis ZXR10 config md ma mep lt 1 8191 gt alarm lowest pri lt 1 5 gt ZXR10 config md ma mep lt 1 8191 gt priority lt 0 7 gt ZXR10 config md ma mep lt 1 8191 gt ccm send enable disable ZXR10 config md ma mep lt 1 8191 gt ccm check enabl e disable ZXR10 config md ma mep lt 1 8191 gt client level lt 0 7 gt This assigns MIP to port The port can be real port or samartgroup When assigning port for MIP the MEP that le
78. ed emergency link events to let client layer know which fault occurs on link from information OAMPDU The DTE which is configured active mode lauches discovery process When discovery process finishes remote OAM peer en tity is in active mode active DTE is allowed to send any OAMPDU DTE configured passive mode doesn t launch discovery process passive DTE feedbacks remote DTE launching discovery process Remote Loopback OAM provides optional data link layer frame loopback mode It is controlled by the remote OAM remote loopback is used for fault location and link performance test When remote DTE is in OAM remote loop mode local and remote DTE statistics can be querid and compared at any time Query can happen before during and after the process that loop is sent to remote DTE In addition analyze OAM sub layer loop frame to ensure additional information about link health namely ensure frame dropping for link fault If an OAM client has sent a Loopback Control OAMPDU and is wait ing for the peer DTE to respond with an Information OAMPDU that indicates it is in OAM remote loopback mode and that OAM client receives an OAM remote loopback command from the peer device the following procedures are recommended a If the local DTE has a higher source_address than the peer it should enter OAM remote loopback mode at the command of its peer If the local DTE has a lower source_address than the peer it should ignore the OAM remote loopba
79. ee filtering modes Source MAC address matching only that is a data frame is dropped when its source MAC address matches the setting Destination MAC address matching only that is a data frame is dropped when its destination MAC address matches the setting Source Destination MAC address matching that is a data frame is dropped when its source or destination MAC address matches the setting To set MAC address filtering use the following command ZXR10 config mac filter source both destination lt m This sets MAC address filtering ac address gt vlan lt vian id gt Confidential and Proprietary Information of ZTE CORPORATION 33 ZXR10 5900E Series User Manual Ethernet Switching Volume ZTERH There is no need to specify a port name while setting MAC address filtering This function filters data frames from all ports of the switch To cancel MAC address filtering simply delete the MAC address Viewing MAC Address Table View MAC address entry by using the following command The viewed MAC address are dynamic learning and added manually ZXR10 config show mac dynamic static permanent This views MAC address table src filter dst filter lt mac address gt interface lt port name gt vlan lt vian id gt Example Example display MAC address entry ZXR10 config show mac Total MAC address 2 Flags vid VLAN id stc static per permanent toS to static wtd is wri ted srF sour
80. ei_1 1 negotiation auto ZXR10_S1 config gei_1 1 switchport mode trunk ZXR10_S1 config gei_1 1 switchport trunk vlan 100 200 ZXR10_S1 config gei_1 1 switchport trunk vlan 4000 ZXR10_S1 config gei_1 1 exit connect ZXR10 2 ZXR10_S1 config interface gei_1 2 configure interface working mode as auto negotiation ZXR10_S1 config gei_1 2 negotiation auto ZXR10_S1 config gei_1 2 switchport mode trunk ZXR10_S1 config gei_1 2 switchport trunk vlan 100 200 64 Confidential and Proprietary Information of ZTE CORPORATION ZTEDH Chapter 6 ZESR ZESR Configuration ZXR10_S1 config gei_1 2 switchport trunk vlan 4000 ZXR10_S1 config gei_ 1 2 exit Node 2 configuration configure ZESR Master node ZXR10_S2 config spanning tree enable ZXR10_S2 config spanning tree mst configuration ZXR10 config mstp instance 1 vlan 100 200 ZXR10 config mstp exit connect ZXR10 1 ZXR10_S2 config interface gei_2 1 ZXR10_S2 config gei_2 1 switchport mode trunk ZXR10_S2 config gei_2 1 switchport trunk vlan 100 200 ZXR10_S2 config gei_2 1 switchport trunk vlan 4000 ZXR10_S2 config gei_2 1 exit connect ZXR10 3 ZXR10_S2 config interface gei_2 2 ZXR10_S2 config gei_2 2 negotiation auto ZXR10_S2 config gei_2 2 switchport mode trunk ZXR10_S2 config gei_2 2 switchport trunk vlan 100 200 ZXR10_S2 config gei_2 2 switchport trunk vlan 4000 ZXR10_S2 config gei_2 2 exit connect ZXR10 4 ZXR10_S2 config interface gei_2 3
81. emote loopback function Stop close link ethernet oam remote loopback function This configures port link monitor event mode This shows port or global configuration The show command can be used in other modes Enhanced Function Configuration lt interface name gt zxR10 debug ethernet oam all interface zxR10 debug ethernet oam packet interface lt interface name gt in out dual type information n otify reqst varb resps varb org spec all mode all time number 100 1000 110 Confidential and Proprietary Information of ZTE CORPORATION This opens OAM Debug function If select all all Debug information on all ports will be displayed on foreground If select interface only one interface Debug information will be printed on foreground This prints Ethernet oam packet that is in out or both on one interface the type of packet can be information PDU notify PDU request PDU response PDU and so on ZTERHY Chapter 14 Ethernet OAM Configuration ZXR10 config clear ethernet oam lt all statistic This clears configuration or statistics data Select all to clear all ethernet oam configuration Select statistic for clearing all statistic information but reserving configuration Instance Configuration As shown in Figure 28 run ethernet oam on R1 and R2 Ri port is gei_1 i R2 port is gei_1 2 FIGURE 28 802 3AH INSTANCE CONFIGURATION 10 1 0 1 16 192 168 1 2 24
82. exer forward Stable yes Mac Address 2 00 19 66 00 2b f PDU Revision 21 CFM Configuration CFM Overview Connectivity Fault Management CFM is useful to Virtual Bridged Local Area Networks for detecting isolating and reporting connec tivity faults It is aimed primarily at Provider Bridged Networks but is useful also for C VLAN networks CFM that current switch mainly supports implementation based on IEEE 802 1ag The manager of network plans the network service and divides the whole network into multiple MDs for management and diagnosis single domain is as shown in Figure 29 The domain in the figure defines a series of ports on edge de vice and internal device The gray point on the edge device is service port that connects the devices out of domain which is defined maintenance edge point MEP The black port includes those devices on the domain intermediate device is the port that connects devices in the domain which is defined as maintenance intermediate pointMIP Implement domain management function by defining MEP and MEP 112 Confidential and Proprietary Information of ZTE CORPORATION ZTEDH Chapter 14 Ethernet OAM Configuration FIGURE 29 MAINTENANCE DOMAIN FIGURE Maintenance Domain As shown in Figure 30 a network can be divided into user domain provider domain and operator domain Each established domain will be designated a level there are 0 7 levels in total The do main level will decid
83. f ZTE CORPORATION Chapter 15 Sflow Configuration Table of Contents VET VIEW oneen EE 123 LOOTING SFIOW eeror rerio niina ea E R NER 125 SFlow Configuration Example sro iseaio aea 125 SFlow Maintenance and DiIagNOSiSersrrrsisiereisgrernrenteisrarunaeran 126 Overview With the rapid development of network service in business envi ronment application network scale becomes larger and larger the number of network devices increases repeatedly and network flow becomes more complicated therefore the cost of network mainte nance keeps on increasing How to manage the network devices effectively and how to monitor and analyze real network traffic on real time have become one of the problem which device carrier pay more attention to At present each equipment manufacturer pro vides various network flow monitor technology but most of these flow monitor technology are private or need specific hardware sup port technology SFLOW is a standard flow monitor technology set by IETF currently It has low requirements on hardware low re source consumption on device and good technology commonality Therefore it is applied by many equipment manufacturers SFLOW function is composed of three parts sFlow packet sam pling unit sFlow agent unit sFlow collector analyzer SFlow packet sampling unit and sFlow agent unit are generally integrated into network device but sFLOW collection is outside of system which analyzes multiple sFlow agent pac
84. f this document Except as expressly provided in any written license between ZTE CORPORATION and its licensee the user of this document shall not acquire any license to the subject matter herein ZTE CORPORATION reserves the right to upgrade or make technical change to this product without further notice Users may visit ZTE technical support website http ensupport zte com cn to inquire related information The ultimate right to interpret this product resides in ZTE CORPORATION Revision History Revision No Revision Date Revision Reason Serial Number sjzl20096393 Contents About This Mania ssssssssnnnnnnnnnnnnnnnnnnnnnnnnnnnnnn I VLAN Configuration sssssssssssss2222200uuunnnnnnnnnnnnnn L VLAN OVErvViEW sadeisidcovece diet nc vidas doe ARENE 1 MILAN WY DOs ciate annuniaa e enna ties Conan eaten ena tenn raaa andes 1 VLAN Ta Qisccnctean esis ARANA EEE ARANA RKE Vanesa ssteanaeadsieasaceast lt annd 2 VLAN Link Type oe ce eeeee eee e cece erence e eee en teas ease naeeae ene nnaenas 2 Default VLAN Cg csisiiveridtsticertniivenieenaarsiainwadiineeds 3 PVIEAN cg catieuden iar niina tees lala daeerieta dad te baie tl cath Gudea 3 QIN erreien ieni a des eieei ei diem edie eee veer ives 4 SUbMet VLAN siarsio inion ina aenva been AEE EEN 4 Protocol MLAN iccse a dine bis cages 5 VLAN Translation ccceeeee eee eee eee eee Ain NANNAN RANAN 5 SUPELLA N sesir ri arer a ENAT EANA EE 5 Cophgurng VEAN esnsrmnisrerron rero
85. fig vlan 2 ZXR10 A config vlan2 supervlan 10 ZXR10_ A config vlan2 exit ZXR10_ A config vlan 3 ZXR10_ A config vlan3 supervlan 10 ZXR10_A config vlan3 exit Set vlan trunk port ZXR10_A config interface gei_1 10 ZXR10_A config gei_1 10 switchport mode trunk ZXR10_A config gei_1 10 switchport trunk vlan 2 3 ZXR10_A config gei_1 10 exit Configuration of Switch B ZXR10_B config interface gei_1 1 ZXR10_B config gei_1 1 switchport access vlan 2 ZXR10_B config gei_1 1 exit ZXR10_B config interface gei_1 2 ZXR10 _B config gei_ 2 switchport access vlan 2 ZXR10_B config gei_1 2 exit ZXR10_B config interface gei_1 5 ZXR10 _B config gei_ 5 switchport access vlan 3 ZXR10_B config gei_ 1 5 exit ZXR10_B config interface gei_1 6 ZXR10_B config gei_1 6 switch access vlan 3 ZXR10_B config gei_ 1 6 exit ZXR10_B config interface gei_1 10 Confidential and Proprietary Information of ZTE CORPORATION 15 ZXR10 5900E Series User Manual Ethernet Switching Volume ZTERH ZXR10_B config gei_1 10 switch mode trunk ZXR10_B config gei_1 10 switch trunk vlan 2 3 ZXR10_B config gei_1 10 exit VLAN Maintenance and Diagnosis For convenient VLAN maintenance and diagnosis ZXR10 5900E provides the following commands show vlan brief access trunk hybrid id lt vi an id gt ifinde x name lt v an name gt ifindex This command can be used to view information about all VLANs VLAN w
86. figuration of S1 Zxrl0 conf t zxr10 config lldp enable Zxr10 config lldp enable interface gei_1 1 Configuration of S2 Zxr1l0 conf t zxr1l0 config lldp enable Zxr10 config lldp enable interface gei_1 1 View the configuration result 1 View LLDP global configuration information Zxrl0 show lldp config Lidp init 1 Lldp enable enabledRxTx Lidp hellotime 30s Lidp holdtime 120s Lldp maxneighbor 128 Lidp curneighbor 2 2 View LLDP status Zxrl0 show lldp statistic LLDP counters Total packets output 23352 Input 23266 Total packets error 0 discard 0 Total tlvs discard 0 unrecognized 0 Total neighbors add 6 del 0 Total neighbors age 0 drop 0 3 view LLDP interface configuration information Zxrl0 show lldp config int gei_1 1 Lldp port enable enabledRxTx Lldp maxneighbor Lldp curneighbor Lldp rxstat Lldp rxPortstus Lldp rxenable Lldp rcvChanges Lldp rcvFrame Lldp badFrame Lldp rxTTL Lldp txstat Lldp txPortstus Lldp txenable Lldp txsLocalchange Lldp txdelay Lldp txshutwhile Lldp txTTR FPORPORPRPNWOORKREHE WE O 4 View LLDP neighbor information Confidential and Proprietary Information of ZTE CORPORATION ZXR10 5900E Series User Manual Ethernet Switching Volume ZTERH 102 Zxrl0 show lldp neighbor Capability Codes R Router T Trans Bridge B Source Route Bridge S Switch H Host I IGMP r Repeater P Phone W W LAN Access
87. for a while if it is stable user and the location of devices that each port of switch connects are fixed that is the interface that each device MAC address in switch MAC address table corresponds is fixed then make the mac address that learns from port and will learn from port permanent to prevent MAC deceiving format network 30 Confidential and Proprietary Information of ZTE CORPORATION ZTERHY Chapter 4 MAC Address Table Configuration attack Even if after device is rebooted these MAC addresses still can be used Of course the premise is that automatic writing function is opened or write operation is implemented MAC address permanent means making dynamic MAC address of corresponding port in MAC address table permanent After this configuration the MAC address learns from the corresponding port can convert to permanent automatically These MAC addresses don t join aging after converting and can be saved into disk Mean while if data frame with this source address occurs on other ports switch won t learn again The MAC permanent entry number is lim ited Therefore when the newly learned MAC entry on port can t continue converting alarm will occur and subsequent MAC will still be handled as dynamic entry When this function is disabled all MAC entries converted by this way on this port will be deleted To configure MAC address permanent perform the following com mands ZXR10 config mac to permanent interface After MAC add
88. g ZXR10 config if exit Z ZXR10 config vlan ging extend session no 1 customer port gei_1 1 uplink port gei_1 2 in vlan 10 outer vlan 100 helpvlan 100 The SVLAN example of viewing configuration is as follows ZXR10 config show vlan qing extend session 1 Session Customer Uplink In Vlan Outer vlan Ovlan Helpvlan Priority unredirect 20 Confidential and Proprietary Information of ZTE CORPORATION ZTEDX Chapter 2 SVLAN Configuration 802 1P Priority Configuration Example port 1 is customer port port 2 is uplink port For the message from port 1 when CVLAN is 10 and SPVLAN is 100 SPVLAN priority is 5 when CVLAN is 12 and SPVLAN is 200 SPVLAN priority is CVLAN priority ZXR10 config switchport gei_1 1 qinq customer ZXR10 config interface gei_1 2 ZXR10 config if switchport mode hybrid ZXR10 config if switchport hybrid vlan 100 tag ZXR10 config if switchport hybrid vlan 200 tag ZXR10 config if exit ZXR10 config vlan ging extend session no 1 customer port gei_1 1 uplink port gei_1 2 in vlan 10 ovlan 100 priority 5 ZXR10 config vlan ging extend session no 2 customer port gei_1 1 uplink port gei_1 2 in vlan 12 ovlan 200 map The SVLAN example of viewing configuration is as follows ZXR10 config show vlan qing extend session 1 Session Customer Uplink In Vlan Outer vlan Ovlan Helpvlan Priority unredirect 1 gei_1 1 gei_1 2 10 100 5 2 gei_1 1 gei_1 2 12 200 mapping ZXR10 config S
89. gei_1 24 gei_1 1 gei_1 4 Trunk gei 1 1 z Vlan 10 20 gei 1 4 gei 1 2 gei_1 gei_1 5 Vian 10 Vlan 20 Vian 10 Vian 20 Confidential and Proprietary Information of ZTE CORPORATION 9 ZXR10 5900E Series User Manual Ethernet Switching Volume ZTEDH Configuration of Switch A ZXR10_A config vlan 10 ZXR10_A config vlan10 switchport pvid gei_1 1 2 ZXR10_A config vlanl10 exit ZXR10_A config vlan 20 ZXR10_A config vlan20 switchport pvid gei_1 4 5 ZXR10_A config vlan20 exit ZXR10_A config interface gei_1 24 ZXR10_A config gei_1 24 switchport mode trunk ZXR10_A config gei_1 24 switchport trunk vlan 10 ZXR10_A config gei_1 24 switchport trunk vlan 20 ZXR10_A config gei_ 1 24 exit Configuration of Switch B ZXR10_B config vlan 10 ZXR10_B config vlanl10 switchport pvid gei_1 1 2 ZXR 0 B config vlanl0 exit ZXR10_B config vlan 20 ZXR10_B config vlan20 switchport pvid gei_1 4 5 ZXR10_B config vlan20 exit ZXR10_B config interface gei_1 24 ZXR10_B config gei_1 24 switchport mode trunk ZXR10_B config gei_1 24 switchport trunk vlan 10 ZXR 0 B config gei_1 24 switchport trunk vlan 20 ZXR10_B config gei_ 1 24 exit Configuring PVLAN ZXR10 config vlan private map session id lt id gt i This configures isolated solate lt port list gt promis lt port list gt community ports promiscuous ports and lt port list gt community port of Private VLAN ZXR10 config
90. ghbor switch has smaller priority Port will enter ROOT_INCONSISTENT state In Figure 12 port of switch C that is connected to switch D should be configured as protection Once this port receives a BPDU packet which contains smaller priority than root switch this port will en ter ROOT_INCONSISTENT state and stops transmitting any data packet Once switch D stops sending the BPDU packet which con tains smaller priority Port of switch C will resume transmitting data packets automatically 44 Confidential and Proprietary Information of ZTE CORPORATION ZTEDH Chapter 5 STP Configuration Configuring STP Enabling Disabling STP ZXR10 config Spanning tree enable disable This enables or disables STP Note Disable STP on ZXR10 5900E all ports that physical status is up are set Forwarding status In default STP is disabled Configuring STP Mode ZXR10 config Spanning tree mode sstp rstp mstp This configures STP mode By default STP mode of ZXR10 5900E is MSTP Whichever mode is selected it can be fully compatible and interoperable with other two modes Configuring STP Parameters The parameters of STP protocol is as follow max age In the CST structure latest BPDU packets are transferred from the Root switch to the leave switch along the CST structure The message age value of the BPDU packet sent by the Root switch is 0 and increases by 1 after each middle switch The max age value does n
91. group 1 mode active ZXR10_S1 config gei_1 1 spanning tree disable 72 Confidential and Proprietary Information of ZTE CORPORATION ZTE ZXR10_S1 config gei_ ZXR10_S1 ZXR10_S1 config gei_ ZXR10_S1 config gei_ ZXR10_S1 config gei_ ZXR10_S1 config gei_ ZXR10_S1 config gei_ ZXR10_S1 config gei_ ZXR10_S1 config gei_ ZXR10_S1 ZXR10_S1 config gei_ ZXR10_S1 config gei_ ZXR10_S1 config gei_ ZXR10_S1 config gei_ ZXR10_S1 config gei_ ZXR 0 sS config gei_ ZXR10_S1 config gei_ ZXR10_S1 ZXR10_S1 config gei_ ZXR10_S1 config gei_ ZXR10_S1 config gei_ ZXR10_S1 config gei_ ZXR10_S1 config gei_ ZXR10_S1 config gei_ ZXR10_S1 config gei_ ZXR10 primary ZXR10 Chapter 7 ZESS Configuration 1 exit config interface gei_1 2 2 negotiation auto 2 switchport mode trunk 2 switchport trunk vlan 100 200 2 switchport trunk vlan 4000 2 smartgroup 1 mode active 2 spanning tree disable 2 exit config interface gei_1 3 3 negotiation auto 3 switchport mode trunk 3 switchport trunk vlan 100 200 3 switchport trunk vlan 4000 3 smartgroup 2 mode activ 3 spanning tree disable 3 exit config interface gei_1 4 4 negotiation auto 4 switchport mode trunk 4 switchport trunk vlan 100 200 4 switchport trunk vlan 4000 4 smartgroup 2 mode active 4 spanning tree disable 4 exit Sl config zess doamin 1 protect insta
92. h Customer switch Service provider network gei 1 1 gei 1 2 Edge switch gei 1 11 gei 1 12 dge switch Switch A and switch B are edge switches which are at the edge of provider network They are used to connect network device of user Tunnel is configured on a port of edge switch to imple ment packet encapsulation or de encapsulation Switch 1 switch 2 switch 3 switch 4 and switch 5 are client network switches which belong to the same VPN The client network device that switch A connects transparently transmits STP protocol packet to the client network device that switch B connects through provider network devices which fin ishes one way transparent transmission The configuration is as follows 1 On tunnel access edge switch A the port that connects the client network device is configured L2PT tunnel QinQ customer port and enabled STP protocol The port that connects provider network is configured trunk port Zxrl0 conf t Zxr10 config vlan 10 Zxr10 config vlanl0 exit 104 Confidential and Proprietary Information of ZTE CORPORATION ZTEDH Chapter 13 L2PT Configuration Zxr10 config inter gei_1 1 Zxr10 config gei_1 1 12protocol tunneled stp enable Zxr10 config gei_1 1 switchport ging customer Zxr10 config gei_1 1 switchport access vlan 10 Zxr10 config gei_ 1 1 exit zxr10 config interface gei_1 2 Zxr10 config gei_1 2 switchport mode trunk Zxr10 config gei_1 2 switchport
93. hat master zess transit hasn t received hello packet The unit is second The default value is 3s master transit zess configuration node role master transit is ZESR master master zess transit node transit node zess master zess transit is ZESR master node transit node After node role and interface are ensured preforward and preup can be configured of which hello fail and preup only can be used for master or zess tranist preup only can be configured as mas ter or zess master Interface must be configured in control vlan before it is configured Interface can use lacp interface but must be dynamic lacp and member interface must close stp Besides secondery interface of zess master node decides blocking location Therefore the interface must be placed on the uplink which need to be blocked but secondery interface of zess transit is suggested to be placed on uplink Example 1 This example shows how to configure control vlan as 4000 role as master interface as gei_2 10 and gei_2 20 ZXR10 config zesr ctrl vlan 4000 major level role master gei_2 10 gei_2 20 2 This example shows how to configure control vlan as 4000 role as zess master interface as gei_2 10 and gei_2 20 ZXR10 config zesr ctrl vlan 4000 major level role zess master gei_2 10 gei_2 20 3 This example shows how to configure control vlan as 4000 role as master preforward as 20s preup as 20s ZXR10 config zesr ctrl vlan 4000 major level preforward
94. he network and then analyzing to give device traffic and various analysis report of service Meanwhile some collector software that have MIB function can configure sFlow agent 124 Confidential and Proprietary Information of ZTE CORPORATION ZTEDY Chapter 15 Sflow Configuration Configuring sFlow 1 To enable disable sflow module use the following command ZXR10 config Sflow enable disable This enables disables sflow module 2 To configure sflow Agent use the following command config sflow agent config ipv4 address This configures sFlow Agent C D udp_port IP address fig sflow agent config ipv6 address This configures sFlow Agent X udp_port IPv6 address 3 To configure sFlow Collector use the following command config sflow collector config ipv4 address This configures sFlow C D udp_port Collector IP address fig sflow collector config ipv6 address_ This configures sFlow X X udp_port Collector IPv6 address ZXR10 config gei_1 x Sflow sample rate ingress This configures sFlow sampling egress lt ratevalue gt rate on the interface SFlow Configuration Example The networking figure is as shown in Figure 32 Confidential and Proprietary Information of ZTE CORPORATION 125 ZXR10 5900E Series User Manual Ethernet Switching Volume ZTERH FIGURE 32 SFLOW CONFIGURATION EXAMPLE P SFLOW Server 10 40 1 2 10 40 1 1 GEL 1 1 Configure sampling port gei_2 12 se
95. his port and stop service flow forwarding The local or peer end LCK is disabled port will be unlocked 6 To display MD configuration information use the following command 7 Todisplay MA configuration information use the following com mand ZXR10 Show mp all lt 1 64 gt md lt 1 16 gt ma lt 1 32 gt This shows MP information Only can show a certain MD one or all MPs in a certain MA Confidential and Proprietary Information of ZTE CORPORATION 119 ZXR10 5900E Series User Manual Ethernet Switching Volume ZTERH Enhanced Function Configuration zxR10 debug cfm pkt all megid md lt 1 16 gt This opens Debug function ma lt 1 32 gt mep lt 1 8191 gt direction send Ircv alll pkt nums lt 10 100 gt time interval a Ae a at lt 4 10000 gt packets of all mep related ports or only print one or several receiving sending or receiving sending packets in one mep selectively default is 10 but the time interval of printing packet can be 4 10000ms ZXR10 config gei_1 x Cfm mac lt xXXXX XXXX XXXX gt This configures port MAC The mac must be the one that related to the rack ZXR10 config Clear pbt cfm This clears all CFM configurations after executing this command can t see any CFM configuration information by show run Instance Configuration The three switches use LT function The network figure is shown as Figure 31 FIGURE 31 LT FUNCTION CONFIGURATION The c
96. ic and flow direction in network In 2003 IETF select Netflow V9 as IPFIX standard from 5 candidate schemes To analyze and perform statistics to data flow in network it is needed to distinguish types of packets transmitted in network Due to non connection oriented characteristics of IP network the communication of different types of services in network can be a series of IP packets sent from one terminal device to another ter minal device This series of packets actually forms one data flow of a service in carrier network If management system can distin guish all flows in the entire network and correctly record transmit time of each flow occupied network port transmit source desti nation address and size of data flows traffic and flow direction of all communications in the entire carrier network can be analyzed and performed with statistics By telling differences among different flows in network it is avail able to judge if two IP packets belong to the same one flow This can be realized by analyzing 7 attributes of IP packet source IP address destination IP address source port id destination id L3 protocol type TOS byte DSCP ifIndex for network device input or output With above 7 attributes of IP packet flows of different service types transmitted in network can be rapidly distinguished Each distinguished data flow can be traced separately and counted accu rately its flow direction characteristics such as transmi
97. if STP function of switch is enabled 1 Two switches but multiple parallel links One converge port configurations and the other does not do so 2 One switch converge configurations of multiple ports but one port in the aggregation port group is connected to other ports of the local equipment in self loop mode 3 Two switches but two parallel links Due to unknown reasons both of them cannot receive BPDU packets from the opposite side Confidential and Proprietary Information of ZTE CORPORATION 55 ZXR10 5900E Series User Manual Ethernet Switching Volume ZTERHY This page is intentionally blank 56 Confidential and Proprietary Information of ZTE CORPORATION Chapter 6 ZESR ZESR Configuration Table of Contents ZESR ZESR Oviedo cideensdnidaneeie ie tieieenceieidemeets 57 COnnOUnnG ZESR ZESR F pn ear erinra RA RRR 58 ZESR ZESR Configuration Examples ssrosieria a 61 ZESR ZESR Overview ZESRZTE Ethernet Smart Ringis a solution for solving the layer 2 loop problem RFC 3619 Compared with STP the biggest advan tage is that the link will switch and recover quickly when one way is disconnected and the shortest time is 50ms ZESR is applicable with multi ring area Multi ring is designated that every level is an independent ring and low level has two entry points to connect with high level ring The highest level ring is named as major level ring and others are named as access rings Multi area is named that there are
98. ifferent VLANs is the same In MSTP mode there can exist multiple spanning tree instances Forwarding states of a port un der different VLANs can be different Many independent sub tree instances can be formed inside the MST area to implement load balance The following are the basic concepts of MSTP 1 MST Config ID It is a forwarding scheme for frames with different VIDs That is in an MST area all the bridges are forwarded to specific span ning trees CIST or an MST instance according to the VID in the frame MST Config ID is composed of the following parts gt Configuration name a character string of 32 bytes Version non negative integer of two bytes gt Configuration summary signature based on the MST Con fig Table and after MD5 processing with a length of 16 bytes MST Config Table is composed of 4 096 continuous dual types The First and last dual bytes are 0 Other dual byte represents a binary number Second dual byte stands for the MSTID to which VID 1 corresponds Third dual byte stands for the MSTID to which VID 2 corresponds and the second last dual byte rep resents the MSTID to which VID 4094 corresponds Configura tion summary is obtained by calculating the MST Config Table and a fixed KEY value through the HMAC MD5 algorithm By resolution it can know a certain VID belongs to which MST in stance or CIST 2 MST Area Each MST area is composed of one or several connected bridges with the same MS
99. iguration only suitable for optical interface for example optical interface is enabled UDLD in the interface mode In global configuration mode no udid mode takes effect 3 The maximum number of UDLD neighbor is 16 Confidential and Proprietary Information of ZTE CORPORATION 97 ZXR10 5900E Series User Manual Ethernet Switching Volume ZTERHY This page is intentionally blank 98 Confidential and Proprietary Information of ZTE CORPORATION Chapter 12 LLDP Table of Contents LEDP DOVETE W asrnane EE 99 Contour io LUDE ssiri a R R SRi 100 LLDP Configuration Example scsscscniincds pnviieiediubetedeeiareendeeens 100 LLDP Overview LLDP Link Layer Discovery Protocolis a new protocol defined in 802 1ab It makes the adjacent devices send information to each other to update physical topology information and establish de vice management information base The workflow of LLDP is as follows 1 send local device link and management information to adjacent device 2 Local device receives adjacent device network management information 3 Store adjacent device network management information in lo cal device MIB database Network management software can query device layer 2 connection status in MIB database LLDP is not configuration protocol of remote system or signal con trol protocol between ports LLDP can discover the adjacent de vices layer 2 configuration is not same but it doesn t provide mechanism to solve the prob
100. is deletes discard state action ZXR10 config gei_1 x spanning tree bpduguard This configures port is in action shutdown shutdown state after enable BPDU protection function S ZXR10 config gei_1 x no Spanning tree bpduguard This deletes shutdown state action 48 Confidential and Proprietary Information of ZTE CORPORATION ZTEDX Chapter 5 STP Configuration Configuring Port Loopback Function ZXR10 config gei_1 x spanning tree guard loop This enables port loopback instance 1 protection function in instance 1 ZXR10 config gei_1 x no Spanning tree guard loop This deletes the port that has instance 1 a loopback protection function in instance 1 Configuring Port Root Protection Function ZXR10 config gei_1 x spanning tree guard root This enables port root instance 1 protection function in instance 1 ZXR10 config gei_1 x nO Spanning tree guard root This deletes port root instance 1 protection function in instance 1 STP Configuration Examples MSTP supports multiple MST areas However it is suggested to configure one MST area running on the backbone network and serving as the root of the entire CST for better fast aggregation and load balance of the entire network 1 As shown inFigure 13 MSTP is run on the backbone network MST area serves as the CST root That is the CIST root bridge is inside the MST area Three switches A B and C are config ured in the same area with an initia
101. ith specified ID name and VLANs with their ports mode as Access Trunk Hybrid The two examples are as follows 1 This example shows how to view the configuration information of VLANs ZXR10 config show vlan VLAN Name Status Said MTU fIndex PvidPorts UntagPorts TagPorts 1 VLAN0001 active 100001 500 0 gei_1 5 12 10 VLANO010 active 100010 500 0 gei_1 1 3 100 VLANO100 active 100100 500 0 gei_1 3 4 130 VLANO130 active 100130 500 0 gei_1 4 gei_1 4 136 VLANO136 active 100136 500 0 gei_1 4 200 VLANO200 active 100200 500 0 gei_1 3 ZXR10 config 2 This example shows information of all the VLANs with their port mode as Trunk ZXR10 config show vlan trunk VLAN Name Status Said MTU fIndex PvidPorts UntagPorts TagPorts 1 VLANOOO1 active 100001 500 0 10 VLAN0010 active 100010 500 0 gei_1 3 100 VLANO100 active 100100 500 0 gei 1 3 130 VLANO130 active 100130 1500 0 136 VLANO136 active 100136 1500 0 200 VLANO200 active 100200 1500 0 gei_1 3 ZXR10 config 16 Confidential and Proprietary Information of ZTE CORPORATION Chapter 2 SVLAN Configuration Table of Contents SM DAN OYETVYIEW cicer nd citicn aaia E 17 SYLAN OG MPI tice x ccass aaar E 17 SVLAN Configuration Example sccccciaresaccevepnasdeseietedganienceecenes 19 SVLAN Maintenance and Diagnosis srsrssreisrsissrviniersererirersrui 21 SVLAN Overview The full name of SVLAN is selective VLAN SVLAN is a kind of VLAN tunnel technology It provides multi
102. ives this Hello packet and sends an Echo packet back From the point of view of this device that receiving this Echo packet means that the two de vices are interconnection and the neighbor relationship with peer device has established on this device and sends Echo packet back After the peer receiving Echo packet the relationship on the two devices is established After both sides establish the neighbor relationship send detection Hello packet at regular time to detect if the detection link works normally When receiving the Hello detection packet sent from neighbor update local storage neighbor buffer information and re set neighbor outtime If exceed neighbor aging time and still not receiving Hello detection packet consider that link is on abnormal working condition and need different working modes to handle UDLD has two working modes ordinary mode and aggressive mode In ordinary mode only when packets are received and link is verified to be through in uni direction this interface can be down in case corresponding packets are not received or link fails to be verified through in uni direction this operation will not be conducted on the interface In aggressive mode as long that link fails to be verified to be through bidirectionally the interface will be down The common point of the two modes is that in any cir cumstance as long as the link is not verified to work normally print alarm Generally speaking there are several
103. kets in the network SFlow sampling unit is the base of sFlow technology Sampling procedure is that sample the packet of network on the interface which supports sFlow and send the sampling packet to sFlow agent device to handle SFlow Collector is the network device that sFlow manage monitor collect and analyze It is responsible for storing packet sended from each sFlow Agent on the network and then analyzing to give device traffic and various analysis report of ser vice Confidential and Proprietary Information of ZTE CORPORATION 123 ZXR10 5900E Series User Manual Ethernet Switching Volume ZTERH SFlow Sampling Unit SFlow sampling unit implements on router switch and other net work devices that need monitor In the network system of router switch and so on generally implement packet sampling function by network processor or ASIC chip SFlow sampling module mainly sample the packet according to the user demands meanwhile send the statistic information in relevant packet forwarding procedure In this process the orig inal packet is totally not affected and this simple process mode doesn t affect device original performance of processing packet The mechanism is simple and easy for processing and implemen tation on hardware and software Firstly configure a sampling rate for sampling interface which can be a fixed value such as sampling a packet every N pack ets or dynamic sampling rate such as deciding the current s
104. l the VLANs Therefore there is no possibility of load balance Advantages of MSTP are not brought into play In Figure 14the link from Switch C to Switch A is in block state for all the VLANs while the link from Switch B to Switch A is in forward state for all the VLANs Confidential and Proprietary Information of ZTE CORPORATION 51 ZXR10 5900E Series User Manual Ethernet Switching Volume ZTERH BPDU Protection Configuration Example Edge Port BPDU Protection Configuration Examples FIGURE 15 BPDU CONFIGURATION _pP Switch 3 Port 4 Switch 1 Switch 2 Switch 4 In Figure 15 port 4 of switch 3 is enabled BPDU protection func tion the configuration of the port that need to be configured edge port BPDU protection is as follows ZXR10 config gei_1 4 spanning tree bpduguard action shutdown ZXR10 config gei_1 4 spanning tree edged port enable 52 Confidential and Proprietary Information of ZTE CORPORATION ZTEDH Chapter 5 STP Configuration Port Loopback Protection Configuration Example FIGURE 16 BPDU CONFIGURATION 2 Switch 1 Port2 Port 4 Port 3 Switch 2 Switch 3 In Figure 16 switch 1 is root switch port 4 of switch 3 is blocked port which is enabled loop protection function Port 5 of switch 2 is disabled The configuration of the port that need to be configured port loop back is as follows ZXR10 config gei_1 5 spanning tree bpduguard action shutdown ZXR10 co
105. l gt response interval of the agent querier ZXR10 config vlanx igmp Snooping querier lt 1 3 gt This configures IGMP Snooping agent querier version in VLAN Configuring IGMP Agent When ZXR10 5900E is configured IGMP SNOOPING to connect multicast router generally the IGMP agent function need to be opened There are two functions of agent one is that when switch receiving query from multicast router send information got by IGMP SNOOPING listening to indicate that which group has the client Another is that when switch listens the first user joining 90 Confidential and Proprietary Information of ZTE CORPORATION ZTERHY Chapter 10 IGMP Snooping Configuration or last user leaving of a group send this message to multicast router ZXR10 config ip igmp snooping mode proxy vlan lt vi an This enables IGMP proxy id gt function Restricting a Multicast Group ZXR10 config vlanx igmp Snooping max group This configures maximum 1 ZXR10 config vlanx igmp snooping acl lt ac number gt This makes a ACL filtering for multicast group num lt number gt group number allowed by the VLAN ZXR10 config vlanx igmp snooping max host in gr This configures maximum oup lt ip address gt limit num lt num gt host group allowed by the VLAN Limiting Quantity of Users 1 ZXR10 config ip igmp snooping max host limit This configures max number interface lt port name gt limit num lt 1 4096 gt
106. l priority of 32768 The CIST root and IST root are decided according to their MAC ad dresses MAC addresses of Switches A B and C are Switch A000d 0df0 0101 Switch B000d 0df0 0102 Switch C000d 0df0 0103 Create two MST instances and map the VLAN in the area to them Run CST on Switch D whose MAC address is 000d 0df0 0104 and priority is 32768 Confidential and Proprietary Information of ZTE CORPORATION 49 ZXR10 5900E Series User Manual Ethernet Switching Volume ZTERH 50 Implement fast aggregation of the entire network and load bal ance of two links on Switch A in the area FIGURE 13 MSTP CONFIGURATION Root node of Instance 2 This port is blocked in ins ew Switch B Switch A a Switch D Root node of Instan e 1 Switch C Switch A B and C are in the same MST area which serves as the CIST root in the network topology Switch A Configuration Configure the MST area ZXR10_A config spanning tree enable ZXR10_A config spanning tree mode mstp ZXR10_A config spanning tree mst configuration ZXR10_A config mstp name zte R10 A ZX config mstp revision 2 Map VLANs 1 to 10 to Instance 1 and VLANs 11 to 20 to Instance 2 XR10_A config mstp instance 1 vlan 1 10 ZXR10 A config mstp instance 2 vlan 11 20 Switch B Configuration Configure the MST area ZXR10_B config spanning tree mode mstp ZXR10_B config spanning tree mst configuration ZXR10_B config mstp nam
107. le use the following commands ZXR10 config 4ip igmp snooping ssm mapping This globally enables ssm mapping ZXR10 config ip igmp Snooping ssm mapping rule This configures ssm mapping lt group address gt lt source address gt rule ZXR10 config ip igmp snooping clear ssm mapping This clears all configured ssm mapping rules Confidential and Proprietary Information of ZTE CORPORATION 89 ZXR10 5900E Series User Manual Ethernet Switching Volume ZTERH Configuring Topology Discovery Convergence After igmp snooping receiving topology changing notification the action is triggered to speed multicast route convergence leave message function at the global configuration mode ZXR10 config ip igmp snooping send general qu This enables sending general ery query message function at the global configuration mode Configuring an Agent Querier Generally multicast network has at least one multicast router which regularly sends the IGMP query packet If the multicast network has no multicast router configure an agent querier to send the IGMP query packet This enables IGMP Snooping querier function The command with parameter isip igmp snooping querier vlan lt vid gt version lt 1 3 gt ZXR10 config ip igmp snooping query interval lt This configures query interval nterval gt of the agent querier ZXR10 config ip igmp snooping query response This configures maximum interval lt interva
108. lem it only reports this problem to upper layer management device In a word LLDP is a kind of neighbor finding protocol It defines a standard for the network devices in the Ethernet such as switch router and wireless lan access point It can announce its existence to other nodes in the network and save discovery information of every neighbor device For example device configuration device ID and other information can be announced by this protocol LLDP defines a common announcement information set a trans mission announcement protocol and a kind of way to save the receiving announcement information The device that need to an nounce its information can put multiple pieces of announcement information into one LLDPDU Link Layer Discovery Protocol Data Unitto transmit This LLDPDU contains a sting of variable length short message units which is called Type Length Value TLV The description is as follows Type means the information type that need to send Length means information byte number Confidential and Proprietary Information of ZTE CORPORATION 99 ZXR10 5900E Series User Manual Ethernet Switching Volume ZTERH Value means the actual information that need to send Each LLDPDU contains four forced TLVs and an optional TLV 1 Device ID TLV 2 Port ID TLV 3 TTL TLV 4 Optional TLV 5 LLDPDU end TLV Device ID and port ID are used for identifying transmitter TTL TLV tells receiver the reserving period of all
109. link Ethernet OAM function ZXR10 config set ethernet oam lt oui gt This sets OUI of Ethernet OAM lt oui gt is character string type the maximum lengthen is 3 ZXR10 config set ethernet oam remote loopback This sets Ethernet OAM timeout lt 1 10 gt remote loopback timeout interval The unit of lt 1 10 gt is second If the function is not set the default value is 3 Confidential and Proprietary Information of ZTE CORPORATION 109 ZXR10 5900E Series User Manual Ethernet Switching Volume ZTEDH p OOOO OOOO OO O OO O O ZXR10 config gei_1 x set ethernet oam enable disable ZXR10 config gei_1 x set ethernet oam period lt 1 10 gt timeout lt 2 10 gt mode active passive ZXR10 config gei_1 x set ethernet oam remote loopback start stop ZXR10 config gei_1 x set ethernet oam link monitor enable disable symbol period threshold lt 1 65535 gt window lt 1 65535 gt frame threshold lt i1 65535 gt window lt 1 60 gt frame period threshold lt 1 65535 gt wind ow lt 1 600000 gt frame seconds threshold lt 1 900 gt window lt 10 900 gt ZXR10 config show ethernet oam lt port gt discove ry link monitor satistics This enables Ethernet OAM on port Enable open port link Ethernet OAM function Disable close port link Ethernet OAM function This configures port discovery mode This enables port remote loopback Start open link ethernet oam r
110. lticast router that does not send query packets Modifying Default Time ZXR10 config vlan igmp Snooping host time out This modifies aging time of lt time gt the user ZXR10 config vlan igmp Snooping last member q This modifies the last member uery interval lt interval gt query interval ZXR10 config vlan igmp Snooping mrouter time This modifies the route port out lt time gt aging time IGMP Snooping Configuration Example Ports gei_1 1 gei_1 3 and gei_1 5 are connected to host Port gei_1 7 is connected to multicast router These ports belong to VLAN 10 Enable IGMP Snooping on switch This is shown in Figure 24 92 Confidential and Proprietary Information of ZTE CORPORATION ZTERH Chapter 10 IGMP Snooping Configuration FIGURE 24 CONFIGURATION OF IGMP SNOOPING IGMP Router Gei_1 7 Switch Gei_1 Gei_1 3 Gei_1 5 Configuration on the switch ZXR10 config ip igmp snooping ZXR10 config ip igmp snooping mode proxy vlan 10 ZXR10 config vlan 10 ZXR10 config vlanl0 igmp snooping IGMP Snooping Maintenance and Diagnosis ZXR10 5900E provides show command to view information re lated to IGMP Snooping to help maintenance and diagnosis ZXR10 Show ip igmp snooping This shows IGMP snooping configuration information ZXR10 Show ip igmp snooping vlan lt vlan id gt This shows IGMP snooping configuration information of designated VLAN zxR10 Show ip igmp snooping port inf
111. n of ZTE CORPORATION ZTEDH 1 10 Configuring CFM Chapter 14 Ethernet OAM Configuration Basic Configuration of CFM eee ee O ZXR10 config fm enable disable ZXR10 config fm create md session lt 1 16 gt name lt mdname gt level lt 0 7 gt ZXR10 config fm delete md lt 1 16 gt ZXR10 config fm md session lt 1 16 gt ZXR10 config md ma create session lt 1 32 gt name lt maname gt ZXR10 config md ma delete lt 1 32 gt lt maname gt ZXR10 config md ma session lt 1 32 gt ZXR10 config md ma protect vlan link ZXR10 config md ma primary vlan lt 1 4094 gt ZXR10 config md ma speed slow fast This enables CFM at global configuration mode Enable enable CFM Disable disable CFM This establishes and configures MD attribute When establishing successfully enter into MD mode automatically This deletes MD This enters into MD configuration mode This creates MA Enter into CFM MA mode successfully This deletes MA lt 1 32 gt session id of MA to be deleted lt ma name gt name of MA to be deleted This enters into MA configuration mode This sets MA protection mode The protection link mode can be only used when md s level is 0 The current MA only has protect vlan an protect link modes This sets MA main vlan No matter whether ma s protection mode is vlan or link main vlan of ma need to be configured
112. n vlan lt vian list gt outer vilan lt v anId gt untag outer vlan lt vianId gt ovlan lt vianId gt priority lt priority id gt map helpvlan lt helpvianiId gt unredirect Paramters Description outer vlan The packet has two layer tages before entering into customer port it designates outer VID map designate 802 1p priority in SPVLAN as 802 1p priority in CVLAN helpvian When transporting CVLAN TAG transparently the needed auxiliary VLAN VID When single tag transporting transparently packet only carries CVLAN TAG when sended from UPLINK port When double tags transporting transparently auxiliary VLAN VID should be the same as outer one The packet still has two layer tags sended from UPLINK port unredirect The downlink packet received from uplink port needn t redirect to customer port forcibly 2 To delete SVLAN configuration use the following command 18 Confidential and Proprietary Information of ZTE CORPORATION ZTEDX Chapter 2 SVLAN Configuration ZXR10 config no vlan qinq session no lt session_id gt This deletes SVLAN configuration ZXR10 config no vlan qinq extend session no This deletes SVLAN lt session_id gt all configuration Paramters Description lt 1 768 gt lt 1 1000 gt SVLAN Configuration Example Basic SVLAN Configuration Example 1 Port 1 is a customer port and port 2 is an uplink port When CVLAN is 10 12 and untag the packet from po
113. nance and diagnosis use the following command ZXR10 config show lacp lt smartgroup id gt counters i This facilitates link aggregation nternal neighbors maintenance and diagnosis This example shows how to view the aggregation state of mem ber port in trunk group 2 ZXR10 config show lacp 2 internal Smartgroup 2 Flag LOOP is TRUE Actor Agg LACPDUs Port Oper Port RX Mux Port State Interval Priority Key State Machine Machine gei_1 7 active 30 32768 0x202 Ox3d current distributing gei_1 8 active 30 32768 0x202 Ox3d current distributing ZXR10 config When Agg State is selected and Port State is 0x3d port ag gregation succeeds If the aggregation fails Agg State is uns elected This example shows how to view the count of the received and transmitted packets of the member port ZXR10 config show lacp 2 counter Smartgroup 2 Actor LACPDUs Marker LACPDUs Marker Port TX Rx Tx RX Err Err 84 Confidential and Proprietary Information of ZTE CORPORATION ZTERHY Chapter 9 Link Aggregation Configuration gei_1 7 11 5 0 0 0 0 gei_1 8 10 6 ZXR10 config When both protocol transmitted packets Tx and protocol re ceived packets Rx of each member port are not zero aggrega tion succeeds Otherwise the aggregation fails 3 This example shows how to view the member port of the op posite side of trunk group 2 ZXR10 config show lacp 2 neighbors Smartgroup 2 neighbors Actor Partner Partne
114. nce 1 smartgroupl secondary smartgroup2 _S1 config zess domain 1 ctl vlan 4000 Node 2 configuration ZX ZX ZX ZX ZX ZX ZX ZX ZX ZX ZX ZX ZX ZX ZX ZX ZX ZX ZX ZX ZX ZX ZX ZX ZX ZX ZX ZX ZX ZX ZX ZX ZX ZX R R R R R R R R R R D NNNUNN ANHAAD Pollo tele D NNNUNN 0_S2 config spanning tree enable 0_S2 config spanning tree mst configuration 0 config mstp instance 1 vlan 100 200 0 config mstp exit 0 S2 config interface smartgroupl 0 _S2 config smartgroup1 switchport mode trunk 0 _S2 config smartgroupl smartgroup mode 802 3ad 0 S2 config smartgroup1 switchport trunk vlan 100 200 0_S2 config smartgroupl 0_S2 config smartgroupl hase heed bene bed bed be ed config gei_ config gei_ MNMNMN DM config gei_ config gei_ config gei_ config gei_ config gei_ config gei_ config gei_ config gei_ config gei_ config gei_ config gei_ config gei_ switchport trunk vlan 4000 exit config interface gei_1 1 config gei_ config gei_ 1 switchport mode trunk 1 switchport trunk vlan 100 200 1 switchport trunk vlan 4000 l exit config interface gei_1 3 config gei_ config gei_ 3 negotiation auto 3 switchport mode trunk 3 switchport trunk vlan 100 200 3 switchport trunk vlan 4000 3 smartgroup 1 mode active 3 spanning tree disable 3 exit config interface gei_1 4 4 negotiation auto 4 switchport m
115. nding and receiving data flow which is monitored on sflow server ZXR10 config sflow enable ZXR10 config sflow agent config ipv4 address 10 40 1 1 ZXR10 config sflow collector config ip address 10 40 1 2 ZXR10 config interface gei_1 1 ZXR10 config gei_1 1 sflow sample rate egress 1000 ZXR10 config gei_1 1 sflow sample rate ingress 1000 ZXR10 config gei_ 1 1 exit SFlow Maintenance and Diagnosis SFlow provides the following commands for maintenance and diag nosis The viewed information is the configuration in the instance ZXR10 config show sflow 126 Confidential and Proprietary Information of ZTE CORPORATION ZTEDH Chapter 15 Sflow Configuration sflow enable sflowagent ip addr 10 40 1 1 sflwcollector ip addr 10 40 1 2 portname egress sample rate ingress sample rate gei_ 2 12 1000 1000 Confidential and Proprietary Information of ZTE CORPORATION 127 ZXR10 5900E Series User Manual Ethernet Switching Volume ZTERHY This page is intentionally blank 128 Confidential and Proprietary Information of ZTE CORPORATION Chapter 16 IPFIX Configuration Table of Contents IPFC OV SI VIEW ciasne EE 129 Connor IPFA creien iarr ainarak aR ar Rah 131 IPFIX Configuration Example sasini a EE 133 IPFIX Maintenance and Diagnosis sisicisivaveriinerecincenietevncannn 134 IPFIX Overview IPFIX Overview IPFIX IP Flow Information Export is used to analyze and perform statistics to communication traff
116. nfig gei_1 5 spanning tree guard loop instance lt 0 16 gt ZXR10 config gei_1 5 spanning tree disable Confidential and Proprietary Information of ZTE CORPORATION 53 ZXR10 5900E Series User Manual Ethernet Switching Volume ZTERHY Port Root Protection Configuration Example FIGURE 17 BPDU CONFIGURATION 3 Switch 2 Switch 3 Switch 4 In Figure 17 switch 1 is root switch Port 4 of switch 3 is enabled port root protection function The configuration of the port that need to be configured port root protection is as follows ZXR10 config gei_1 4 spanning tree bpduguard action shutdown ZXR10 config gei_1 4 spanning tree guard root instance lt 0 16 gt STP Maintenance and Diagnosis ZXR10 5900E provides show command to view STP related infor mation for fault diagnosis 54 Confidential and Proprietary Information of ZTE CORPORATION ZTEDX Chapter 5 STP Configuration ZXR10 Show spanning tree instance lt nstance gt This shows details of the instance based spanning tree zxXR10 Show spanning tree interface lt port name gt This shows spanning tree information of a designated interface ZXR10 Show spanning tree statistics lt port name gt This shows statistics on BPDU packets sent and received by a designated interface ZXR10 Show spanning tree inconsistentports This shows maintenance information of BPDU protection Note In the following three cases loops cannot been avoided even
117. nfiguration Examples 52 Port Loopback Protection Configuration Example 53 Port Root Protection Configuration Example 05 54 STP Maintenance and DiagQnoSiS cceeeeeeeeeeee eee eee es 54 ZESR ZESR Configuration cccsssenssseeseeeseees D7 ZESR ZESR OVErViCW ou cccecccecceeeeeeeeeeeeeecuaueeeeeeneeeugeuuaes 57 Configuring ZESR ZESR naia aaa a a eee aaia aa aii 58 Configuring ZESR Area Protection Instance eccess 58 Configuring Major level Ring ZESR ssssssssrsereerresrrrrre 58 Configuring Access Ring ZESR ceseeeeeeeeee teens eeeees 60 Configuring ZESR Restart Time eceeeeeeeeee teeta eee ees 61 ZESR ZESR Configuration Example ccccceseseeeseeseeeaeeaes 61 ZESR Configuration Example ccceeceeeeeeeeee teens eeeees 61 ZESR and ZESR Hybrid Configuration Example 64 ZESS Configuration ccccccesseceescceeesenscsesseesesess OZ ZESS OVERVIEW es fee ee Peale ee eee Reade dec E Aaa 67 Configuring ZESS vaso E E AE leet lence Cadre 68 Creating ZESS D mara aAA AANEEN a 68 Configuring Preup TIME sssssssssssssrrsserrrserrrnrnrrrrnrereners 69 Configuring ZESS Mode ssssssssssssrrssrnrrrerrrsrnrrrrsrerrners 69 Configuring ZESS Control VLAN sssssssssssssrrrersrrrrsrerrre 70 Configuring ZESS Port iiiccicieccitessentieetecensteernecvsbereesinn 70 Clearing ZESS receive vlan Ports seceeeeeee teste eee ees 71 ZESS Configuration Example
118. nfigures packet egress number based IPFIX sampling rate Setting NM Server Address and L4 Port ID ZXR10 config ip stream export destination This sets the address and port id lt ip address gt udp port of NM server to which packets are sent Setting Source Address for Network Device Sending Packets ZXR10 config ip stream export source lt jp address gt This sets source address for network device sending packets Configuring TOPN ZXR10 config ip stream topn N sort by bytes packets This sets size and sorting behavior of TOPN by packet number or byte number 132 Confidential and Proprietary Information of ZTE CORPORATION ZTERHY Chapter 16 IPFIX Configuration Template Configuration Setting Template ZXR10 config ip stream templat lt template name gt This sets template Setting Data Field Contained in Template Packet ZXR10 config stream template match field This sets data field contained in template packet Server resolves data contained in subsequent data flow according to these fields The fields include source IP destination IP source port destination port the number of bytes contained in data flow the number of packets contained in data flow type of L3 protocol TOS field start time of data flow end time of data flow data flow ingress index data flow egress index and TCP flag Deleting Template ZXR10 config no ip stream template template name This delete
119. ng MP sends a LBR to MEP that lauches LBM by taking LBM source address as destination ad dress When a LBR is received by MHF ignore this LBR for the reason that MIP hasn t the entity that receiving LBR zxrio cfm Ibm md lt 1 16 gt ma lt 1 32 gt smep id Rmep must be established first lt 1 8191 gt dmep id lt 1 8191 gt dmep mac lt xxxx x XXX XXXX gt dmip mac lt xxxx xxxx xxxx gt repeat lt 1 200 gt size lt 1 400 gt timeout lt 1 10 gt LB can be used only when MD MA MP and RMEP establish suc cessfully and global enabled is opened When using LB func tion destination MP parameter can use established RMEP ID RMEP MAC address or middle MIP MAC address LB function supports SG interface 2 To enable LT function use the following command LTM Linktrace Message It is originated by MEP It is used to track the route from MIP to MIP until LTM arrived its destination or MEP can t be forwarded It is used in fault isolation and route discovery LTM multicast packet whose destination address is selected according to MD level of sending MEP is forwarded to appropriate MD level MP by bridge network LTM packet passing middle and MIP of MD and MA all send a LTR to source MEP to ensure the packet arrives here Destination MP could be MIP zxRio cfm Itm md lt 1 16 gt ma lt 1 32 gt smep id Rmep must be established first lt 1 8191 gt dmep id lt 1 8191 gt dmep mac lt xxxx XXXX XXXX gt
120. nning tree disable ZXR10_S1 config gei_1 2 exit ZXR10_S1 config interface gei_1 3 ZXR10_S1 config gei_1 3 negotiation auto ZXR10_S1 config gei_1 3 switchport mode trunk ZXR10_S1 config gei_1 3 switchport trunk vlan 100 200 ZXR10_S 1 config gei_1 3 switchport trunk vlan 4000 ZXR10_S1 config gei_1 3 smartgroup 2 mode active ZXR10_S1 config gei_1 3 spanning tree disable ZXR10_S1 config gei_ 1 3 exit ZXR10_S1 config interface gei_1 4 ZXR10_S1 config gei_1 4 negotiation auto ZXR10_S1 config gei_1 4 switchport mode trunk 62 Confidential and Proprietary Information of ZTE CORPORATION Chapter 6 ZESR ZESR Configuration ZXR10_S1 config gei_1 4 switchport trunk vlan 100 200 ZXR10_S1 config gei_1 4 switchport trunk vlan 4000 ZXR10_S1 config gei_1 4 smartgroup 2 mode active ZXR10_S1 config gei_1 4 spanning tree disable ZXR10_S1 config gei_1 4 exit ZXR10_S1 config zesr ctrl vlan 4000 protect instance 1 ZXR10_S1 config zesr ctrl vlan 4000 major level role transit smartgroupl smartgroup2 SW2 Configuration ZXR10_S2 config spanning tree enable ZXR10_S2 config spanning tree mst configuration ZXR10 config mstp nstance 1 vlan 100 200 ZXR10 config mstp exit ZXR10_S2 config interface smartgroupl ZXR10_S2 config smartgroup1 switchport mode trunk ZXR10_S2 config smartgroup1 smartgroup mode 802 3ad ZXR10 S2 config smartgroupl switchport trunk vlan 100 200 ZXR 0 S2 config smartgroup1 switchport trunk vlan 4000
121. ntial and Proprietary Information of ZTE CORPORATION 87 ZXR10 5900E Series User Manual Ethernet Switching Volume ZTERHY 88 FIGURE 23 IGMP SNOOPING APPLICATION Router Run IGMP Switch gt Run IGMP Snooping v2 o lt Multicast Group Join The host joins corresponding multicast group by sending an IGMP joining message When the switch receives the IGMP host report from a host for a particular multicast group the switch adds the port number of the host to the associated multicast table entry When other hosts in the same VLAN are interested in the multicast traffic and send a membership report the switch adds them to the existed forwarding entries Switch creates only one forwarding entry for each multicast group in the same VLAN forwards the multicast traffic of the multicast group in all ports receiving the membership report Multicast Group Leave Hosts that joined multicast group must respond to IGMP query message transmitted by router periodically As long as one host responds to IGMP query in a VLAN the router must continue for warding traffic of the multicast group that the host joined to the VLAN When a host wants to leave a multicast group it could ignore the IGMP query message transmitted by router periodically called leave quietly or send IGMPv2 leave message of specific group When IGMP Snooping hears IGMPv2 leave message of specific group the switch sends specific group query me
122. o This shows port information vian lt vian id gt related to IGMP snooping ZXR10 Show ip igmp snooping statistic clear This shows statistics on IGMP packets ZXR10 5900E also provides debug ip igmp snooping to opens IGMP snooping debugging to debug IGMP snooping Confidential and Proprietary Information of ZTE CORPORATION 93 ZXR10 5900E Series User Manual Ethernet Switching Volume ZTERH This example shows IGMP snooping packet receiving and trans mitting ZXR10 debug ip igmp snooping ZXR10 IGMP SNOOPING Rev 224 1 1 1 Group Report Msg From Vlan 1 Port gei_4 7 IGMP SNOOPING Rev 224 1 1 1 Group Report Msg From Vlan 1 Port gei_4 8 94 Confidential and Proprietary Information of ZTE CORPORATION Chapter 11 UDLD Configuration Table of Contents VDLD OVVIE acess eee i et Ena 95 Connourkio ODLO cx ccaicies ccats tease casctesscadts RA E ARNIR 96 UDLD Overview UDLD is a layer 2 logic link detection protocol It can detect Eth ernet link logic connectivity and verify physical connectivity Dif ferent from physical connection detection UDLD detects based on neighbor The layer 1 device is transparent to UDLD UDLD detection builds up neighbor relationship with adjacent layer 2 devices firstly When the Ethernet port whose status is UP opens UDLD function this port sends Hello packet that neighbor has en tered to inform other adjacent related devices The adjacent re lated devices port that opens UDLD function rece
123. o an MST area by creating or deleting instances Implementing fast aggre gation and load balance of the whole network 1 ZXR10 config spanning tree mst configuration This enters MST configuration mode 2 ZXR10 config mstp instance lt instance gt vlans This creates an instance lt vlan id gt 46 Confidential and Proprietary Information of ZTE CORPORATION ZTEDX Chapter 5 STP Configuration Note ZXR10 5900E has on instance 0 only in SSTP RSTP mode In MSTP mode the instance 0 exists by default and cannot be deleted at all Configuring MSTP Name and Version 1 ZXR10 config mstp name lt string gt This configures MST configuration name ZXR10 config mstp revision lt version gt This configures version number Note Four conditions decide whether switches belong to same MST area same MST configuration same MST configuration version No same INS VLAN mapping table and switch interconnection or not Configuring Switch and Port Priority In the entire spanning tree structure bridge priority of an instance can decide the position of this switch in the whole CST structure whether this switch can be selected as the root of the entire span ning tree It can also be in a certain instance spanning tree struc ture in the MST area whether this switch can be selected as the area root of the instance Bridge can be designated as the spanning tree root by setting a lower priority fo
124. ode trunk 4 switchport trunk vlan 100 200 4 switchport trunk vlan 4000 4 smartgroup 1 mode active 4 spanning tree disable 4yexit 0 S2 config interface smartgroupl 0 S2 config smartgroupl zess receive vlan 4000 0_S2 config interface gei_1 1 Confidential and Proprietary Information of ZTE CORPORATION 73 ZXR10 5900E Series User Manual Ethernet Switching Volume ZTEDH ZXR10_S2 config gei_1 1 zess receive vlan 4000 Node 3 configuration The configuration such as port instance is as node 2 ZXR10_S3 config interface smartgroupl ZXR10_S3 config smartgroupl zess receive vlan 4000 ZXR10_S3 config interface gei_1 1 ZXR10_S3 config gei_1 1 zess receive vlan 4000 ZESS Maintenance To show ZESS configuration use the following command 1 ZXR10 config Show zess brief This views all ZESS domain status simply status in detail ZXR10 config Show zess receiver vlan lt 1 4094 gt This views designated ZXR10 config show zess domain lt 1 4 gt This views designated domain receive vlan status Paramters Description lt 1 4 gt Domain ID it indicates ZESS domain lt 1 4094 gt ZESS control vlan Id 74 Confidential and Proprietary Information of ZTE CORPORATION Chapter 8 ZESR and SVLAN Linkage Networking Configuration Table of Contents ZESR and SVLAN Linkage Networking Overview 00 75 Configuring ZESR and SVLAN Linkage Networking 5 76 COMMQUIAEION
125. oduces L2PT concept related configuration command and configuration example This chapter introduces Ethernet OAM concept related configuration command and configuration example This chapter introduces sflow concept related configuration command and configuration example This chapter introduces IPFIX concept related configuration command and configuration example ZXR10 5900E V2 8 23 B Series All Gigabit Port Intelligent Routing Switch Hardware Manual ZXR10 5900E V2 8 23 B Series All Gigabit Port Intelligent Routing Switch User Manual Basic Configuration Volume ZXR10 5900E V2 8 23 B Series All Gigabit Port Intelligent Routing Switch User Manual Ethernet Switching Volume m ZXR10 5900E V2 8 23 B Series All Gigabit Port Intelligent Routing Switch User Manual IPv4 Routing Volume ZXR10 5900E V2 8 23 B Series All Gigabit Port Intelligent Routing Switch User Manual IPv6 Routing Volume ii Confidential and Proprietary Information of ZTE CORPORATION Chapter 1 VLAN Configuration Table of Contents VLAN OYETVIEW xc cicdvapeiaieeniimenieesctnabeardeenitcrentunieexdcnendeenane 1 CONOUG VLAN cans coieteascaenutsanecaisteascamiaeeercaeiaceasccmiaasesscers 6 Conngurma PYLAN ongiena bapanseganmrecedpeyeeadad caneredeeranas 10 Conngurmg QM h esaeo a 11 Configuring Supnet VLAN ci sisicicvicccesiansinririnrareneinesannnainananys 11 Conriguring Protocol VLAN cirecsisiiiei ebenen 13 Configuring VLAN Tanslati
126. onfigurations of S1 are as follows ZXR10 config interface gei_1 1 ZXR10 config gei_1 1 switch mode trunk ZXR10 config gei_1 1 exit ZXR10 config vlan 10 ZXR10 config vlanl10 switchport tag gei_1 1 ZXR10 config vlanl0 exit ZXR10 config cfm create md session 15 name md15 level 7 ZXR10 config md ma create session 32 name mal ZXR1O config md ma protect vlan ZXR10 config md ma primary vlan 10 ZXR10 config md ma speed slow ZXR10 config md ma create mep session 64 1 direction down ZXR10 config md ma assign mep 1 to interface gei_1 1 ZXR10 config md ma mep 1 state enable ZXR10 config md ma create rmep session 2 2 remote mac 120 Confidential and Proprietary Information of ZTE CORPORATION ZTEDH Chapter 14 Ethernet OAM Configuration 00d0 d052 1200 The configurations of S2 are as follows ZXR10 config interface gei_2 1 ZXR10 config gei_2 1 switch mode trunk ZXR10 config gei_2 1 exit ZXR10 config interface gei_2 2 ZXR10 config gei_2 2 switch mode trunk ZXR10 config gei_2 2 exit ZXR10 config vlan 10 ZXR10 config vlanl0 switchport tag gei 2 1 ZXR10 config vlanl10 switchport tag gei_2 2 ZXR10 config vlanl0 exit ZXR10 config cfm create md session 15 name md15 level 7 ZXR10 config md ma create session 32 name mal ZXR10 config md ma protect vlan ZXR10 config md ma primary vlan 10 ZXR10 config md ma speed
127. onnect node 2 sg2 gei_1 3 gei_1 4 connect node 3 Node 2 gei_1 1 connect node 3 sg1 gei_1 3 gei_1 4 connect node 1 Node 3 gei_1 1 connects node 2 sg2 gei_1 3 gei_1 4 connect node 1 Node 1 is configured as ZESS node that domain is 1 protect in stance is 1 and control vlan is 4000 Put node 2 3 port node 1 port and the connection port between 2 and 3 into ZESS receive vlan 4000 table Node 1 configuration ZXR10_S1 config spanning tree enable ZXR10_S1 config spanning tree mst configuration ZXR10 config mstp instance 1 vlan 100 200 ZXR10 config mstp exit ZXR10_S1 config interface smartgroupl ZXR10_S1 config smartgroup1 switchport mode trunk ZXR10 S1 config smartgroupl smartgroup mode 802 3ad ZXR 0 sS config smartgroup1l switchport trunk vlan 100 200 ZXR10_S1 config smartgroup1 switchport trunk vlan 4000 ZXR10_S1 config smartgroup1 exit ZXR10_Sl config interface smartgroup2 ZXR10_S1 config smartgroup2 switchport mode trunk ZXR10_S1 config smartgroup2 smartgroup mode 802 3ad ZXR10_S1 config smartgroup2 switchport trunk vlan 100 200 ZXR 0 sS config smartgroup2 switchport trunk vlan 4000 ZXR10_S1 config smartgroup2 exit ZXR10_S1 config interface gei_1 1 ZXR10_S1 config gei_1 1 negotiation auto ZXR10_S1 config gei_1 1 switchport mode trunk ZXR10_S1 config gei_1 1 switchport trunk vlan 100 200 ZXR10_S1 config gei_1 1 switchport trunk vlan 4000 ZXR10_S1 config gei_1 1 smart
128. ontrol sub layer are below OAM OAM layer is optional OAM function mainly includes the following three functions FIGURE 27 OAM SUB LAYER IN ISO IEC OSI REFERENCE MODULE RELATIONSHIP 1 APPLICATION HIGHER LAYERS LLC LOGICAL LINK CONTROL OR OTHER MAC CLIENT PRESENTATION OAM OPTIONAL SESSION TRANSPORT MAC CONTROL OPTIONAL NETWORK DATA LINK PHYSICAL MAC MEDIA ACCESS CONTROL PHYSICAL LAYER Remote discovery Confidential and Proprietary Information of ZTE CORPORATION 107 ZXR10 5900E Series User Manual Ethernet Switching Volume ZTERH 108 Remote loopback Link monitor DTE joining OAM sub layer supports active passive mode When enabling OAM DTE that supports the two modes should select ac tive or passive Remote Discovery OAM provides mechanism for detecting if remote DTE has OAM sub layer if find it isn t satisfied OAM client will know the result and generate fail alarm There are two cases for fail One is that peer end doesn t open OAM function another is link connection fault During the remote discovery process the information OAM PDU tag domain carries current link event link fault emergency failure and emergency event But the specific fault definition composed of link fault emergency failure and emergency event relates to implementation So there are two ways to know link has fault by remote discovery One is knew by OAMPDU timeout an other is to define some detail
129. ot change at all When the message age value of a BPDU packet is greater than the max age value this BPDU packet is invalid hello time It is to control the interval for sending BPDU packet forward delay In case of non state fast transition it decides the delay 2 x forward delay of the port from Blocking to Forwarding max hops Confidential and Proprietary Information of ZTE CORPORATION 45 ZXR10 5900E Series User Manual Ethernet Switching Volume ZTEDH It is decided by the area root node of an instance in the MST area and decreases by 1 after each switch When it decreases to 0 the BPDU packet is invalid Message age and max age values of the BPDU packet in the MST area do not change dur ing area transmission To configure STP protocol parameters use the following com mands 0 config spanning tree hello time lt time gt This set Hello time of STP ZXR ZXR10 config Spanning tree forward delay lt time gt This sets the forward delay time of STP 0 config Spanning tree max age lt time gt This sets the maximum time of BPDU packet 0 config spanning tree mst max hops lt hop gt This sets the maximum hops of BPDU packet Note In CST structure hello time of every switch is determined by the root of switch Max hops takes effect only when this node serves as the area root node of an instance in the MST area Creating Instances In MSTP mode users can turn connected switches int
130. priority map is 5 configure cos session ZXR10 config cos session 1 cos0 7 cosl 6 cos2 5 cos3 4 cos4 3 cos5 2 cos6 1 cos7 7 ZXR10 config cos session 2 cosl 5 apply cos session on physical port ZXR10 config interface gei_1 1 ZXR10 config gei_1 1 cos mode cos map session 1 ZXR10 config gei_1 1 exit ZXR10 config interface gei_1 2 R10 R10 ZX config gei_1 2 cos mode cos map session 2 ZX config gei_1 2 exit SVLAN COS Maintenance and Diagnosis To perform SVLAN maintenance and diagnosis ZXR10 5900E pro vides the following commands to view all SVLAN session configu ration information 24 Confidential and Proprietary Information of ZTE CORPORATION ZTERHY Chapter 3 SVLAN COS Configuration 1 This views SVLAN COS one or all session configuration show qos cos session lt session_id gt 2 This views if a physical port applies ACL show running config interface lt port name gt Confidential and Proprietary Information of ZTE CORPORATION 25 ZXR10 5900E Series User Manual Ethernet Switching Volume ZTERHY This page is intentionally blank 26 Confidential and Proprietary Information of ZTE CORPORATION Chapter 4 MAC Address Table Configuration Table of Contents Introduction to MAC Address oicieein ocnsaniennietaextndiawre ere 27 Configuring MAC Address Table ssssssssssssssesserrerrsrrsesrensns 29 MAC Address Table Configuration Example eeeeeeeeee es 34 Intro
131. r Port Oper Port Port System ID Port No Priority Key State gei_1 7 0x8000 00d0 d0c0 0f60 323 0x8000 0x202 Ox3d gei_1 8 0x8000 00d0 d0c0 0f60 324 0x8000 0x202 0x3d ZXR10 config Partner Port number represents the port number of the part ner When Port State is 0x3d it indicates that the aggregation succeeds Confidential and Proprietary Information of ZTE CORPORATION 85 ZXR10 5900E Series User Manual Ethernet Switching Volume ZTERHY This page is intentionally blank 86 Confidential and Proprietary Information of ZTE CORPORATION Chapter 10 IGMP Snooping Configuration Table of Contents IGMP Snooping OVER WEW cicorineuvntinitenienedennteciereneeaieerens 87 COMTGUANG TOMP SNOGGING sisisi cnisiereciniaGenceinhaiadeetuteitesscns 89 IGMP Snooping Configuration Example s sssssssssssssrrrsssesrerrens 92 IGMP Snooping Maintenance and DiagnoSis ceeeeeeeeee 93 IGMP Snooping Overview IGMP snooping is one of layer 2 functions of the switch which can limit the forwarding of IP multicast traffic As shown in Figure 23 IGMP runs between host and multicast router IGMP communications between host and router so that the switch can learn which ports are multicast members and get multicast forward table before forwarding multicast packets Mul ticast packet is sent to the port in the multicast forward table only IGMP snooping avoid unnecessary network bandwidth waste and improve the switch utilization Confide
132. r the bridge A specific port is included in the spanning tree by setting its prior ity Smaller the set value of a port is the higher port priority is It is most likely for such a port to be included in the spanning tree If all ports on the bridge have the same priority value the port priority depends on the port index number ZXR10 config Spanning tree mst instance lt nstance gt This configures switch priority priority lt priority gt Confidential and Proprietary Information of ZTE CORPORATION 47 ZXR10 5900E Series User Manual Ethernet Switching Volume ZTEDH ai Note Bridge and port priority of ZXR10 5900E must be configured after the instance has been created Excluding a Port from Spanning Tree Calculation In some cases it is necessary to exclude a port from spanning tree calculation such as uplink port of switch or the port connecting to ZXR10 config gei_1 x spanning tree enable disable This excludes a port from spanning tree calculation BPDU Protection Configuration Configuring BPDU Protection on Edge Port ZXR10 config gei_1 x spanning tree edged port This changes a port into edge enable port 7 ZXR10 config gei_1 x spanning tree edged port This closes edge port disable ZXR10 config gei_1 x spanning tree bpduguard This configures port is in action discard discard state after enable BPDU protection function ia ZXR10 config gei_1 x no Spanning tree bpduguard Th
133. rations can be performed by exchanging BPDU messages 1 Selecting a root switch from the stable spanning tree topology 2 Selecting a designated switch from the network 3 Setting redundant switch ports to Discarding to avoid loops in the topology STP module of ZXR10 5900E supports three modes SSTP RSTP and MSTP which respectively observes IEEE802 1d IEEE802 iw and IEEE802 1s standards SSTP Mode Single Spanning Tree Protocol SSTP fully observes IEEE802 1d standards in terms of function The bridge running SSTP can fully inter work with those running RSTP and MSTP Confidential and Proprietary Information of ZTE CORPORATION 37 38 ZXR10 5900E Series User Manual Ethernet Switching Volume ZTERH RSTP Mode Rapid Spanning Tree Protocol RSTP provides a faster aggregation speed than STP that is SSTP mode When the network topology changes the state of the redundant switch port can make a fast shift Discard gt Forword in the case of point to point connection MSTP Mode Two concepts are added to Multiple Spanning Tree Protocol MSTP instance and VLAN mapping SSTP RSTP mode can be regarded as a special case of the MSTP mode There only exists one instance that is instance 0 The MSTP mode also provides fast aggregation and load balance under the VLAN environment In SSTP and RSTP modes there is no concept of VLAN There ex ists one port state that is forwarding state The state of a port in d
134. ress is made lt port name gt enable permanent these MAC address will be saved permanently and won t lost when switch is rebooted ZXR10 config mac to permanent interface After disabling MAC address lt port name gt disable permanent these permanent MAC addresses will be deletes ZXR10 config mac auto write disable enable This configures writing interval lt time gt permanent MAC address and save period Binding MAC Address to a Port A MAC address can be bound to a port of ZXR10 5900E by adding a static permanent MAC address to the FD The mapping relation ship between MAC address and port is fixed for static or permanent MAC address The relationship will not be released until it is man ually deleted For binding a MAC address perform the following steps ZXR10 config mac add dynamic static perman When adding MAC address if ent lt mac address gt interface lt port name gt vlan the VLAN ID is not designated lt vlan id gt add according to port PVID ZXR10 config mac delete lt mac address gt If a VLAN ID is not specified interface lt port name gt vlan lt vian id gt while deleting a MAC address all entries matching lt mac address gt will be deleted Confidential and Proprietary Information of ZTE CORPORATION 31 ZXR10 5900E Series User Manual Ethernet Switching Volume ZTERH Enabling MAC Address Learning MAC address learning is enabled on all switch ports by default
135. rmanent 00D0 8765 95CB interface gei_1 3 vlan 2 ZXR10_B config mac add permanent 00D0 8765 95CC interface gei 1 5 vlan 3 Configure MAC address learning protection on the port ZXR10_B config mac limit num interface gei_1 7 1000 ZXR10_B config mac protect interface gei_1 7 enable ZXR10_B config mac protect time 120 Configure MAC address aging time ZXR10_B config mac aging time 180 Confidential and Proprietary Information of ZTE CORPORATION 35 ZXR10 5900E Series User Manual Ethernet Switching Volume ZTERHY This page is intentionally blank 36 Confidential and Proprietary Information of ZTE CORPORATION Chapter 5 STP Configuration Table of Contents STP OVEN wictcixcicicidiverecdartniaiceaiinhanihsiieheanhiatanannhaadehneas 37 COnnQuring SUP xii tessknineatceho iad EN E e 45 BPDU Protection Configuration sesiicaitendieanerasan rina saneenaien 48 STP Configuration Examples enredo EERE 49 BPDU Protection Configuration EXample sssssssssssserrrssrrrrrsrns 52 STP Maintenance and Diagnosis seriis niaaa 54 STP Overview Spanning Tree Protocol STP is applied to a loop network It blocks some redundant paths with certain algorithms so that the loop net work is pruned into a tree network without any loop thus avoiding the infinite loop of packets in the loop network STP is implemented by exchanging Bridge Protocol Data Unit BPDU messages among involved switches in an extended LAN The following ope
136. rt When node 1 detects that primary port recovers as UP in in version mode open primary port and block secondary port again whereas in non inversion mode keep primary port as blocked and secondary port as open In addition when ZESS is switching FDB of block port need to be updated Confidential and Proprietary Information of ZTE CORPORATION 67 ZXR10 5900E Series User Manual Ethernet Switching Volume ZTERHY FIGURE 20 ZESS NETWORK TOPOLOGY Upper Layer Network Primary pa Secondary Port Port Node 1 Configuring ZESS Creating ZESS Domain Create ZESS domain protect instance and configure ports Each domain protects one instance The maximum number of domain is 4 This is the first step of creating ZESS ZXR10 config zess domain lt 1 4 gt protect instance This creates ZESS Domain lt 0 16 gt primary lt primary interface name gt secondary lt secondary interface name gt ZXR10 config no zess domain lt 1 4 gt This deletes ZESS Domain Paramters Description Domain ID it indicates ZESS domain lt 0 16 gt ZESS protect instance same as ZESR and STP put service vlan into protect instance 68 Confidential and Proprietary Information of ZTE CORPORATION ZTEDY Chapter 7 ZESS Configuration lt 1 600 gt Preforward value the unit is second When the disconnected port reconnects wait for preforward time and open automatically unless has ZESR protocol configuration The default value is
137. rt gei_1 10 belongs to both VLAN20 and VLAN30 Configure different PVIDs for gei_1 1 gei_1 2 and gei_1 10 PCs in 20 20 20 0 24 have access to server 1 and the PC whose IP address is 30 30 30 1 has access to server 2 FIGURE 4 SUBNET VLAN CONFIGURATION EXAMPLE Server 1 Gei_1 1 Vlan 20 A ac 20 20 20 0 24 f Configuration of switch Create a VLAN and assign ports 0 config interface gei_1 1 ZX ZX ZX ZX ZX ZX ZX ZX ZX ZX R ONNA config gei_1 1 config gei_1 1 config gei_1 1 config gei_1 1 config gei_1 2 config gei_1 2 config gei_1 2 config gei_1 2 0 0 0 0 0 config interface gei_1 2 0 0 0 0 switchport switchport switchport exit switchport switchport switchport exit Server 2 Gei_1 2 Vlan 30 Gei_1 10 Vlan 20 30 A ie 30 30 30 1 24 to it mode hybrid hybrid native vlan 20 hybrid vlan 20 untag mode hybrid hybrid native vlan 30 hybrid vlan 30 untag 12 Confidential and Proprietary Information of ZTE CORPORATION ZTEDY Chapter 1 VLAN Configuration ZXR10 config interface gei_1 10 ZXR10 config gei_1 10 switchport mode hybrid ZXR10 config gei_1 10 switchport hybrid vlan 20 30 untag ZXR10 config gei_1 10 exit Create subnet VLAN data ZXR10 config vlan subnet map session no 1 20 20 20 0 255 255 255 0 vlan 20 ZXR10 config vlan subnet map session no 2 30 30 30 1 255 255 2
138. rt1 SPVLAN is 997 998 and 999 respectively ZXR10 config switchport gei_1 1 qinq customer ZXR10 config interface gei _ 1 2 ZXR10 config if switchport mode hybrid ZXR10 config if switchport hybrid vlan 997 tag ZXR10 config if switchport hybrid vlan 998 tag ZXR a switchport hybrid vlan 999 tag ZXR10 config if exit al ZXR10 config vlan qinq extend session no 1 customer port gei_1 1 uplink port gei_1 2 in vlan 10 ovlan 997 ZXR10 config vlan ging extend session no 2 customer port gei_1 1 uplink port gei_1 2 in vlan 12 ovlan 998 ZXR10 config vlan ging extend session no 3 customer port gei_1 1 uplink port gei_1 2 untag ovlan 999 The SVLAN example of viewing configuration ZXR10 config show vlan ging extend session Session Customer Uplink In_ Vlan Outer vlan Ovlan Helpvlan Priority unredirect 1 gei_1 1 gei_1 2 10 997 2 gei_1 1 gei_1 2 12 998 3 gei_1 1 gei_1 2 untag 999 ZXR10 config Example 2 Port 1 is a customer port and port2 is an uplink port For the packet from porti CVLAN is 10 outer tag is 100 new SPVLAN modified outer tag is 200 outer tag VID is 101 new SPVLAN modified outer tag is 201 downlink stream needn t redi rection Confidential and Proprietary Information of ZTE CORPORATION 19 ZXR10 5900E Series User Manual Ethernet Switching Volume ZTERH ZXR10 config vlan qinq extend session no 1 customer port gei_1 1 uplink port gei_1 2 in vlan 10 outer vlan 100 ovlan 200 ZXR1
139. s a result it broadcasts many packets it loses track to their destination MAC addresses which consumes the bandwidth A longer aging time may lead to too many useless entries in the MAC address table which use up the MAC address table resources New MAC addresses cannot be added to the MAC address table so forwarding performance also reduces To set MAC Address Aging Time use the following command ZXR10 config mac aging time lt time gt This sets MAC Address Aging Time The address aging time on ZXR10 5900E by default is up to 360s configurable range is from 60s to 630s Burning MAC Addresses Learned MAC addresses can be burn in the switch after a period of stable running if there is not any change in the connecting ports between switch and device or in the mapping relationship be tween device MAC address and port number in the MAC address table MAC address burning is to convert all dynamic MAC addresses in the MAC address table to static MAC addresses that will not age After address burning data frames from these MAC addresses are not learned when they are received on other ports To burn MAC Address use the following command ZXR10 config mac to static enable disable interface Burnt MAC addresses are not lt port name gt enable disable stored permanently but are lost after power off Configuring MAC Address Permanent This is a security policy for MAC virus flood When network runs
140. s eee eeeeeeeees 103 L2PT Configuration Example cccseeeeeee esses eee eeeeeeaeees 104 Ethernet OAM Configuration sscssssessenesseres LOZ 802 3aN OVERVIEW varoni aeon tances clea e e 107 OVEIMICW sinine nna aa a a erred 107 Remote DISCOVEFY emean A a a aa 108 Remote Loopback sssssesssrsessssserrrrnrnnnesssrnsrrrenrennes 108 LINK MONTON aiea anena naana ana deateeaatcdeteear eden EEEN SINNE 109 Configuring 802 3ah miia ea a eaa a a a a ia i aaa ii 109 Function Configuration s sssssssrssssrrssurnrrsrnrrnnernnseernn 109 Enhanced Function Configuration eeseeeeeee eens 110 Instance Configuration ccceeeeeeee eee ee eee ee eee eeeee eee 111 CEM CONTIQUFATION eee cic ctiaeete a ch bulieLaueadur er dteedead 112 CFM OVETVIEW a kre nea ues sited tance ie denned ax ees Mie eee didn 112 Configuring CFM psarna stieg nae ened 115 Basic Configuration Of CFM c sceeeeeeeeee renee 115 CFM Function Configuration cceeeeeeeeeeees 117 Enhanced Function Configuration 00 120 Instance Configuration ccceeeeeeeeeeeeeee teenies 120 Sflow Configuration ccssccessseeesseesesenseeeeseeeses 123 OVERVIEW o aeaa ANE a duane see deeniepeedeeadaneeveddat tess 123 SFlow Sampling Unit cceeceee ee eee eee ee ee eee eee ee nena 124 SFIOW Agent UNIE oirre ha cient cts th aveddeveraeeieled wens 124 SFIOW CONC CtOR is nseiscnsesa aderirono rinan edt 1
141. s one template Running Template ZXR10 config ip stream template template name This runs template IPFIX Configuration Example An IPFIX configuration example is given here with network topol ogy as shown in Figure 33 Confidential and Proprietary Information of ZTE CORPORATION 133 ZXR10 5900E Series User Manual Ethernet Switching Volume ZTEDHY FIGURE 33 IPFIX CONFIGURATION EXAMPLE Incoming Traffic ZX ZX ZX ZX ZX ZX ZX ZX ZX ZX ZX ZX ZX D NNNUNN Mgmt A amp application Collectors config ip stream enable config interface gei _ 2 12 config if netflow sample rate ingress unicast 1024 config if netflow sample rate egress unicast 1024 config ip strem export destination 192 168 1 1 2055 config ip strem export destination 192 168 1 2 2055 config ip stream export source 192 168 1 244 config ip stream export version 9 config ip stream topn 10 sort by packets config ip stream template test config stream tempalte match src ip config stream tempalte match dst ip config stream tempalte match src port config stream tempalte match dst port config stream tempalte exit config ip stream run template test OG a ae a a a a a a ae OO G G D NNNUNN IPFIX Maintenance and Diagnosis For the convenience of IPFIX maintenance and diagnosis IPFIX provides related view commands 1 To show IPFIX related configurations execute the following comm
142. seeseeeaeeas 15 Figure 6 MAC Address Table Configuration Example 35 Figure 7 BPDU Protection Of Edge POrt cccecseeeeeeee ee eeeen ee ee eens 40 Figure 8 STP Before MAX_AGE Timer Expired essere 41 Figure 9 Network Loop Diagram cceceeeeeeee eee teens eee eaeeees 42 Figure 10 Port Loopback Protection ccsceeeeeeeeeeeeeeeeee es 42 Figure TI ROOT BRIDGE prerii trennen rann o rne i 43 Figure 12 NEW ROOT BRIDGE ssssssssssssrrssrrnrrsrrrrurerrnnernnnreran 44 Figure 13 MSTP CONFIGURATION ssssssssssssrrrrsrrrrsrsrrnserrrnrsrns 50 Figure 14 CONFIGURATION OF MSTP 0ceeeeeeeeeeeeeeeeaeeees 51 Figure 15 BPDU CONFIGURATION eceeeeeeee eee eee eeeeeeaeeees 52 Figure 16 BPDU CONFIGURATION 2 ecceceeeee eee teens eee ee tees 53 Figure 17 BPDU CONFIGURATION 3 e ceceeeee eee eee estate eeeees 54 Figure 18 ZESR Configuration Example ccccccececeseeeeeeeee ee en eens 61 Figure 19 ZESR and ZESR Hybrid Networking Topology FOUTE aiits xara E E hice wom ne eh nerurenees 64 Figure 20 ZESS Network TOpOlOG ccccsceseeeneeseeeeeeaeeaeeenenas 68 Figure 21 ZESS Networking Configuration Figure 5 72 Figure 22 LINK AGGREGATION CONFIGURATION nsec 83 Figure 23 IGMP SNOOPING APPLICATION eeeeeeeeeeeee es 88 Figure 24 CONFIGURATION OF IGMP SNOOPING 2 006 93 Figure 25 LLDP Configuration Example sssssssssrsserrsrrrrerssrns 101 Figure 26 L2PT Networking
143. seg as 1 hello as 2s fail as 4s ZXR10 config zesr ctrl vlan 4000 level 1 seg 1 hello 2 fail 4 Configuring ZESR Restart Time ZXR10 config zesr restart time lt 30 600 gt lt 30 600 gt the specific timethe unit is second the default is 120s Example This example shows how to configure ZESR restart time as 60s ZXR10 config zesr restart time 60 ZESR ZESR Configuration Example ZESR Configuration Example As shown in Figure 18 FIGURE 18 ZESR CONFIGURATION EXAMPLE swl sw2 Level 1 seg 1 Confidential and Proprietary Information of ZTE CORPORATION 61 ZXR10 5900E Series User Manual Ethernet Switching Volume ZTERH SW1 SW4 buildup ring network transparently transform 100 200 SW1 is core switch and the entire network exit SW2 SW4 are convergence switch Demand that service is not be affected if any link is down SW1 sgigei_1 1 gei_1 2connects SW2 sg2gei_1 3 gei_1 4con nects SW3 SW2 gei_1 1 connects SW3 gei_1 2 connects SW4 sg2gei_1 3 gei_1 4connects SW1 SW3 gei_1 1 connects SW2 gei_1 2 connects SW4 sg2gei_1 3 gei_1 4connects SW1 SW4 gei_1i 1 connects SW2 gei_1 2 connects SW3 The network formed by SW1 SW2 and SW3 is major level SW2 is master node The port that SW2 connect with SW1 is major port sg1 The network formed by SW2 SW4 is slave ring level 1 seg 1 Take SW4 as master node and select the port connects with SW3 as slave port gei_1 2 control vlan as 4000 SW
144. slow ZXR10 config md ma create mip session 63 name mip63 ZXR10 config md ma assign mip 63 interface gei 2 1 ZXR10 config cfm enable The configurations of S3 are as follows ZXR10 config interface gei_3 1 ZXR10 config gei_3 1 switch mode trunk ZXR10 config gei_3 1 exit ZXR10 config vlan 10 ZXR10 config vlanl0 switchport tag gei_ 3 1 ZXR10 config vlanl0 exit ZXR10 config cfm create md session 15 name md15 level 7 ZXR10 config md ma create session 32 name mal ZXR10 config md ma protect vlan ZXR10 config md ma primary vlan 10 ZXR10 config md ma speed slow ZXR10 config md ma create mep session 62 2 direction down ZXR10 config md ma assign mep 2 to interface gei_ 3 1 ZXR10 config md ma mep 2 state enable ZXR10 config md ma create rmep session 2 1 remote mac 00d0 d052 2800 ZXR10 config cfm enable To enable LT function on S1 use the following command ZXR10 cfm ltm md 15 ma 32 smep id 1 dmep id 2 Interface that S1 views is as follows Linktrace to 00d0 d052 2800 timeout 5 seconds 64 hops trans id 1 Please wait 5 seconds to print the result 1 00d0 d034 5670 EgrOK RlyFDB 2 00d0 d052 2800 IngOK RlyHit Destination 00d0 d052 2800 reached Confidential and Proprietary Information of ZTE CORPORATION 121 ZXR10 5900E Series User Manual Ethernet Switching Volume ZTERHY This page is intentionally blank 122 Confidential and Proprietary Information o
145. ssage to the port receiving the message to query whether other hosts belonging to the multicast group are available in this port If IGMP Snooping cannot receive any response message after several queries it in dicates that there are no hosts belonging to the multicast group Confidential and Proprietary Information of ZTE CORPORATION ZTEDH Chapter 10 IGMP Snooping Configuration in this port and IGMP Snooping will delete corresponding ports in the Layer 2 forwarding entries if receiving response message it is not necessary to modify forwarding table Fast Leave When switch monitors the IGMPv2 leave message of designated group it does not send the query message Instead the switch directly deletes the corresponding port in the layer 2 forward entry Take care when enabling fast leave function in a VLAN if one of the multiple hosts in a port leaves multicast group other hosts of the same multicast group in the port cannot receive multicast traffic of the multicast group Configuring IGMP Snooping Enabling IGMP snooping ZXR10 config zxr1o config tip igmp snooping i igmp snooping This enables IGMP snooping enables IGMP snooping ZXR10 config vlanx igmp snooping This enables IGMP snooping in VLAN ZXR10 config vlanx igmp snooping fast leave This configures group fast leave function in VLAN Configuring ssm mapping To configure ssm mappingtake received igmp v2 client as v3 client to hand
146. switches as their core QinQ typical networking is shown in Figure 2 Port to the cus tomer network is called the customer port The port to the Service Provider network is called the uplink port and the SP edge access device is called Povider Edge PE FIGURE 2 QINQ TYPICAL NETWORKING SPVLAN 10 Customer SPVLAN 10 Customer a SwitchB User network 2 PE CVLAN 1 100 User network 1 CVLAN 1 100 SP Netwrok The customer network is usually connected to the PE through trunk VLAN Uplinks ports in the SP network are connected symmetri cally in the trunk VLAN mode When a packet tagged untagged from customer network 1 reaches the customer port of switch A Switch A attaches an outer tag VLAN ID as 10 to its forcibly Within the SP network packet is forwarded to all ports in VLAN 10 This packet finally arrives at switch B Switch B recognizes that the port to customer network 2 is a customer port then dispatches the outer tag complying with the traditional 802 1Q to restore the original packet Switch B sends the packet to customer network 2 Thus data is transparently transmitted between customer net works 1 and 2 through the SP network This allows the customer considerable flexibility for Private VLAN ID planning without any conflict with those of the SP network Subnet VLAN Subnet based VLAN applies to L2 VLAN networks for flexible con figuration of data frame forwarding Subnet based VLAN forwar
147. switchport hybrid vlan 100 200 ZX config gei 1 1 exit ZX config interface gei_2 1 ZX config gei 2 1 switchport mode hybrid ZX config gei 2 1 switchport hybrid vlan 200 ZX config gei_ 2 1 exit D ANNU 0 0 0 0 0 0 0 Configuring SuperVLAN 1 ZXR10 config interface supervlan lt supervian id This creates a SuperVLAN gt lt supervilan name gt 2 ZXR10 config vlanx supervlan lt supervian id gt This adds sub VLANs onto SuperVLAN XR10 3 Zz config supervian inter subvlan routing This enables disables routing enable disable function among sub VLANs 4 ZXR10 Show supervian This views SuperVLAN configuration information 14 Confidential and Proprietary Information of ZTE CORPORATION ZTE Example Chapter 1 VLAN Configuration As shown in Figure 5 configure a SuperVLAN on switch A with its subnet as 10 1 1 0 24 and gateway as 10 1 1 1 Configure two sub VLANs on switch B VLAN 2 and VLAN 3 and configure them to belong to the SuperVLAN Switch A and switch B are connected through trunk ports FIGURE 5 SUPERVLAN CONFIGURATION EXAMPLE Switch A Super Vlan 10 1 1 0 24 gei_1 10 Configuration of Switch A Create a SuperVLAN and assign subnet and gateway for it ZXR10_A config interface supervlanl0 ZXR10_A config supervlanl0 ip address 10 1 1 1 255 255 255 0 ZXR10_A config supervlan10 exit Add the SubVLAN to the SuperVLAN ZXR10_ A con
148. t direction and destination can be recorded and the start time end time ser Confidential and Proprietary Information of ZTE CORPORATION 129 ZXR10 5900E Series User Manual Ethernet Switching Volume ZTERH 130 vice type contained packet number byte number and other traffic information can be performed statistics As a macro analysis tool for network communication Netflow tech nology doesn t analyze the specific data contained in each packet in network instead it tests characteristics of transmitted data flow which enables Netflow technology with good scalability support ing high speed network port and large scale telecom network As for processing mechanism IPFIX introduces multi level pro cessing procedures In preprocessing stage IPFIX can filter data flow of a specific level or perform sampling to packets on high speed network interface based on demands of network management With IPFIX processing load of network device can be relieved and scalability of system can be enhanced while the needed man agement information is collected and performed statistics In postprocessing stage IPFIX can select to output all collected original statistics of data flow to upper layer server for data sorting and summary alternatively network device can per form data aggregation to original statistics in various modes and send the summary statistics result to upper layer man agement server The latter one can reduce the data qu
149. t mode IFPIX supports to send template every a few packets or at a certain interval Packet template specifies the format and length of packets in subsequent data flows and server resolves subsequent data flows according to template Configuring IPFIX Basic Configuration Enabling Disabling IPFIX Module ZXR10 config ip stream enable disable This enables disables IPFIX module Setting IPFIX Memory Entries ZXR10 config ip stream cache entries lt number gt This sets the number of data flow entries stored in IPFIX module 4096 by default Setting Aging Time of Active Stream ZXR10 config ip stream cache timeout active lt number gt This sets aging time of active stream As for long time active stream in case it exceeds the set aging time this data flow will age out in minutes 30 minutes by default Confidential and Proprietary Information of ZTE CORPORATION 131 ZXR10 5900E Series User Manual Ethernet Switching Volume ZTERH Setting Aging Time of Inactive Stream ZXR10 config ip stream cache timeout inactive lt numb This sets aging time of inactive er gt stream If data of a flow are not updated within the specified time the aging information will be notified to stream record in seconds 15 seconds by default Setting Sampling Rate ZXR10 config interface lt interface name gt This enters interface configuration mode ZXR10 config if netflow sample rate ingress This co
150. t switch After switches calculate span ning tree port of switch B which connects to switch A will be blocked Its priority is smaller than switch A which is root switch Switch D will become a root switch After switches calculate span ning tree port of switch B which connects to switch A will be blocked If configuration of BPDU protection in edge port of switch C takes place Switch D sends BPDU packet switch C will receive this Confidential and Proprietary Information of ZTE CORPORATION ZTEDH Port Loopback Protection Function Chapter 5 STP Configuration packet and shut down the port which connects to switch D This solves the problem of network performance Loopback protection provides addtional layer 2 protection function One reason for STP loop takes places in a network with redundant link is that one port which in blocking state becomes a designated port and enters into FORWARDING state A blocking port when doesn t receive a BPDU packet STP thinks that there isn t a loop Port will transmit from BLOCKING state to FORWARDING state this will create a loop When port loopback protection is configured and blocking port don t receive BPDU packet Port will transmit into LOOP_INCON SISTENT state This state is blocking state and it doesn t transmit any data FIGURE 8 STP BEFORE MAX_AGE TIMER EXPIRED BPDU message l l l l l lt gt BPDU message is blocked l l l i X Blocked port l e a ra l es t
151. tion lt 1 4094 gt control vlan identifier after configuring this port will receive zess flush packet with same control vlan and forward it It shall be noted that zess domain used port can t be added into the same vlan receiving table Example 1 Configure port gei_1 4 receive control vlan 2000 flush packet ZXR10 config gei_1 4 zess receive vlan 2000 2 Delete port gei_1 4 from the table that control vlan is 2000 ZXR10 config gei_1 4 no zess receive vlan 2000 Clearing ZESS receive vlan Ports To clear ports in receive vlan table on configuration mode use the following commands ZXR10 config zess Clear receive vlan lt 1 4094 gt all This clears all ports with zess receive vilan in designated vlan Paramters Description lt 1 4094 gt ZESS control vlan Id Example This example shows how to clear all ports with zess receive vlan ZXR10 config zess clear receive vlan all ZESS Configuration Example The networking figure is as shown in Figure 21 Confidential and Proprietary Information of ZTE CORPORATION 71 ZXR10 5900E Series User Manual Ethernet Switching Volume ZTEDH FIGURE 21 ZESS NETWORKING CONFIGURATION FIGURE Node 1 Node 1 3 comprise ZESS uplink network node 2 3 connect upper layer network By default the upper layer network is connected and simplified as that connection node 2 and node 3 connect di rectly node 1 configures ZESS Node 1 sgi gei_1 1 gei_1 2 c
152. to be coverd Confidential and Proprietary Information of ZTE CORPORATION 77 ZXR10 5900E Series User Manual Ethernet Switching Volume ZTERHY 78 Configuring One Way PVLAN To configure to forbid uplink port of SVLAN based on ACL to forward data to loopback port use the following commands ZXR10 config vlan private map unidirectional This configures one way session id lt d gt source lt port list gt destination PVLAN source port and lt port list gt destination port ZXR10 config no vlan private map unidirectional This cancels one way PVLAN session id lt id gt configuration ZXR10 config Show vlan private map unidirectio This displays the configuration nal information of one way PVLAN Note Uplink data packet is forwarded by customer port and broad cast in SPVLAN after looped by loopback port To prevent cus tomer port from receiving data message looped by loopback port generally configure a one way PVLAN data whose source port is loopback port and destination port is customer port 2 Downlink data packet is forwarded directly to customer port information by uplink port needn t be forwarded to loopback port To avoid that the data packet that uplink port forwards to loopback port loops and is forwarded to uplink port again must configure a one way PVLAN data whose source port is uplink port and destination port is loopback port Example This example shows how to configure one way PVLAN
153. trunk vlan 10 Z2xr10 config gei 1 2 exit Zxr10 config spanning tree enable On tunnel exit edge switch B the port that connects the provider network is configured L2PT tunnel port the port that connects client network device is configured access port Zxrl0 conf t Zxr10 config vlan 10 Zxr10 config vlanl0 exit Zxr10 config inter gei_1 11 Zxr10 config gei_1 11 12protocol tunneled stp enable Zxr10 config gei_ 1 11 exit Zxr10 config interface gei_1 12 Zxr10 config gei_1 12 switchport access vlan 10 Confidential and Proprietary Information of ZTE CORPORATION 105 ZXR10 5900E Series User Manual Ethernet Switching Volume ZTERHY This page is intentionally blank 106 Confidential and Proprietary Information of ZTE CORPORATION Chapter 14 Ethernet OAM Configuration Table of Contents U2 JON OYES coccecsicnceyeecidevecdeaiiwrcie renee axieaieweueenieenns 107 COMM OMG GOS Soll eeii nine a ER STER 109 CFM COMMMUPSUON caepucececcayercted coherated cere ieaee Geyeeaidecumebedeenen 112 802 3ah Overview IEEE 802 3ah is management of link level It monitors and fault process Point to Point ethernet link Sometimes Detection of the last mile means that Link layer OAM is mainly used in Point to Point direct connect link detection Overview Figure 27 views the location of OAM in ISO IEC OSI reference mod ule LLC logical link control or other MAC client layer are above OAM MAC layer or optional MAC c
154. ty will be root switch After election if one new switch which has smaller priority than the root switch connects to network this new switch will replace the original root switch to become new root switch This results in calculating spanning tree again and interrupting network for a while The new spanning tree may contain sub optimum path and lower network performance Here let s see how port root protection function solves this prob lem FIGURE 11 ROOT BRIDGE A m BPDU Message l l 4 Blocked Port In Figure 11 switch A and switch B are both core switches and switch A is a root switch Switch C is a edge switch Port of switch C which connects to switch B is blocked The flow of BPDU is as direction of arrow Confidential and Proprietary Information of ZTE CORPORATION 43 ZXR10 5900E Series User Manual Ethernet Switching Volume ZTERH FIGURE 12 NEW ROOT BRIDGE A New Root Switch m BPDU Message l l x Blocked Port In Figure 12 switch D takes part in calculating spanning tree If priority of switch D is lower than that of switch A Switch D is elected to be a new root switch After calculating spanning tree port of switch B which connects to switch A is blocked Port root protection command is configured in interface mode It is only permitted in designated port and is not permitted in root port A port which enables root protection receives BPDU packets from a neighbor switch and knows the nei
155. vel is higher than or equal to current MIP level can t exist on the port in the same vlan same level This cancels the assignment of MEP to port This cancels the assignment of MIP to port This sets MEP management enabled By default CFM of MEP is disabled This sets MEP alarm priority The five priorities from low to high are RDI alarm MAC alarm RMEP CCM failure alarm ERR CCM alarm and XCON alarm This sets MEP priority lt 1 8191 gt index number of MEP lt 0 7 gt priority of MEP the range is 0 7 This sets CC packet sending enabled This checks CC packet lt 1 8191 gt ID number of MEP Enable ccm check status of enabled MEP Diable ccm check status of disabled MEP This sets level value of client MEP and alarm function use CFM Function Configuration 1 To enable LB function use the following command LB LoopBack means a MEP sends a designated MP unicast CFM PDU for fault affirmation and isolation A MP responses LBM and sends unicast packet to LBM initiator MEP When MP loop responser receives a LBM check its validity first if invalid then discard If LBM source address is multi cast address not alone MAC address or destination address Confidential and Proprietary Information of ZTE CORPORATION 117 ZXR10 5900E Series User Manual Ethernet Switching Volume ZTEDH and receiving MP MAC aren t matching MP discards this LBM packet If test succeeds receivi
156. version modes In inversion mode when main link recovers service will be cut again whereas in non inversion mode service will still be transmitted on standby link Example Configure ZESS node that domain is 1 and in non inversion mode ZXR10 config zess domain 1 mode non_revertive Configuring ZESS Control VLAN ZESS node can send flush packet to upper node for cleaning FDB ZXR10 config zess domain lt 1 4 gt ctl vlan lt 1 4094 gt This configures ZESS ctl vlan ZXR10 config no zess domain lt 1 4 gt ctl vlan This deletes ZESS control VLAN Parameter Description lt 1 4 gt Domain ID it indicates ZESS domain lt 1 4094 gt Control vlan Id it is used to send flush packet which is multicast in this vlan Example 1 Configure domain 1 control vlan as 2000 ZXR10 config zess domain 1 ctl vlan 2000 2 Deletes domain 1 control vlan ZXR10 config no zesr domain 1 ctl vlan Configuring ZESS Port To configure the designated port as ZESS packet receiving port use the following command This command must be carried out in the corresponding port mode 70 Confidential and Proprietary Information of ZTE CORPORATION ZTEDY Chapter 7 ZESS Configuration 1 ZXR10 config gei_1 x zess receive vlan lt 1 4094 gt This adds port into ZESS VLAN receiving table 2 ZXR10 config gei_1 x no zess receive vlan This deletes port from ZESS lt 1 4094 gt VLAN receiving table Paramters Descrip

ZXR10 5900E Series All Gigabit-Port Intelligent Routing Switch

Contents

Download Pdf Manuals

Related Search

Related Contents