Extreme Networks IP Service Manager Manual de usuario descargar pdf (Pagina 16)

Deployment Guide – ExtremeXOS, NetSight, NAC on BlackDiamond X8, BlackDiamond 8K, Summit Switches

Layer 2 Loop Protection

Basic Layer 2 loop protection is essential to protect the network against looping packets and

broadcast storms. Consider whether the network will use STP, MLAG, SPB, TRILL, EAPS, etc.

As a starting point consider STP Edge Safeguard and BPDU restrict which prevents accidental

or deliberate misconfigurations that cause loops, by having edge ports enter the blocking state

upon receiving a BPDU.

The following is an example configuration:

configure stpd DATA_stp ports edge-safeguard enable 9 recovery-timeout 400

configure stpd DATA_stp ports bpdu-restrict enable 9 recovery-timeout 400

Also consider Extreme Loop Recovery Protocol (ELRP) to detect loops. ELRP can block certain

ports to prevent loop or logging a message to system log.

For example, ELRP can be configured on vlan “blue” excluding uplink port 20:

enable elrp-client

configure elrp-client periodic blue ports all interval 5 log disable-port permanent

configure elrp-client disable-ports exclude 20

Basic Layer 3

VLANs can be enabled for IP forwarding and ports can be added to VLANs to be part of that

network. The steps required are:

1. Create the VLAN (by default the VLAN is added to VR “VR-Default”).

2. Define the tag associated with that VLAN.

3. Add ports to the VLAN as tagged or untagged.

4. Configure the IP address for that VLAN.

5. Enable IP forwarding for that VLAN.

The following is an example of the above steps:

create vlan blue

configure vlan blue tag 100

configure vlan blue add ports 3 tagged

configure vlan blue add ports 4 untagged

configure vlan blue ipaddress 192.168.1.2/24

enable ipforwarding blue

You can view VLAN IP addresses with the command show vlan, and view other IP information

on the switch with the following commands:

show ipconfig

show ipstats

show iproute

show iparp

1 2 ... 11 12 13 14 15 16 17 18 19 20 21 ... 34 35

Sin comentarios

Extreme Networks IP Service Manager Manual de usuario Pagina 16