Escolar Documentos
Profissional Documentos
Cultura Documentos
2. Configuraes iniciais.................................................................... 3
2.1. Geral ...................................................................................................................... 3
2.2. Clock...................................................................................................................... 3
2.2.1. SNTP ..............................................................................................................................................3
2.2.2. Manual............................................................................................................................................3
3. Gerenciamento .............................................................................. 4
3.1. Arquivos de Configurao ...................................................................................... 4
3.2. Atualizao de Firmware ........................................................................................ 4
3.3. Configurao IP ..................................................................................................... 5
3.3.1. Static...............................................................................................................................................5
3.3.2. DHCP .............................................................................................................................................5
4. Interface ........................................................................................ 6
4.1. Speed / Duplex / Autonegotiation ........................................................................... 6
4.2. Storm Control ......................................................................................................... 7
4.3. Rate Limit............................................................................................................... 7
4.4. Security .................................................................................................................. 7
5. Layer 2 .......................................................................................... 7
5.1. Link Aggregation .................................................................................................... 7
5.1.1. Static PortChannel..........................................................................................................................7
5.1.2. LACP ..............................................................................................................................................8
6. layer 3 ......................................................................................... 12
6.1. IGMP.................................................................................................................... 12
7.
8.
9.
10.
Batch ........................................................................................... 12
CoS ............................................................................................. 12
Filters .......................................................................................... 13
Roteiro de testes ......................................................................... 13
firmware:
Version
2.0-pre
2.0-pre
Date
20/02/2006 11:37:27
20/03/2006 11:37:27
Flag
R
S
Size
7148432
7148432
Flags:
R - Running firmware.
S - To be used upon next startup.
E - Empty/Error
DmSwitch3000#reboot
DmSwitch
2. CONFIGURAES INICIAIS
2.1. Geral
#
#
#
#
DmSwitch3000#configure
DmSwitch3000(config)#hostname SWA
SWA(config)#ip snmp-server location DATACOM
SWA(config)#ip snmp-server contact Suporte
2.2. Clock
2.2.1. SNTP
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
SWA(config)#sntp client
SWA(config)#sntp poll 3600
SWA(config)#sntp server 200.20.186.75
SWA(config)#clock timezone Brasilia -3
SWA(config)#show sntp
Current time: Fri Mar 31 11:34:37 2006
SNTP Status: enabled
SNTP poll interval: 3600
SNTP server 1: 200.20.186.75
Last successful update: 14 m, 36 s ago.
Server used: 200.20.186.75
Next attempt: in 45 m, 24 s.
2.2.2. Manual
#
#
#
#
#
#
#
DmSwitch
3. GERENCIAMENTO
3.1. Arquivos de Configurao
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
SWA#copy
SWA#copy
SWA#copy
SWA#copy
SWA#show
default-config running-config
running-config tftp 192.168.0.229 Minima.bin
tftp 192.168.0.229 Minima.bin flash-config 1
running-config startup-config 2 config_teste
flash
firmware:
Version
2.0-pre
2.0-pre
Date
20/02/2006 10:15:00
20/03/2006 11:37:27
Flags
Flash
ID
1
2
3
4
config:
Name
Minima.bin
config_teste
Date
31/03/2006 14:06:58
03/04/2006 09:50:15
Flags
RS
S
E
E
Size
7148432
7148432
Size
596
596
Flags:
R - Running firmware.
S - To be used upon next startup.
E - Empty/Error
SWA#select firmware 1
swA#select Startup-config 1
SWA#show flash
BootLoader version: 1.1.2-1
Flash
ID
1
2
firmware:
Version
2.0-pre
2.0-pre
Date
20/02/2006 10:15:00
20/03/2006 11:37:27
Flags
S
R
Size
7148432
7148432
Flash
ID
1
2
3
4
config:
Name
Minima.bin
config_teste
Date
31/03/2006 14:06:58
03/04/2006 09:50:15
Flags
S
Size
596
596
E
E
Flags:
R - Running firmware.
S - To be used upon next startup.
E - Empty/Error
firmware:
Version
2.0-pre
2.0-pre
Date
20/02/2006 10:15:00
20/03/2006 11:37:27
Flag
R
S
Size
7148432
7148432
Flags:
R - Running firmware.
S - To be used upon next startup.
E - Empty/Error
DmSwitch
SWA#reboot
3.3. Configurao IP
3.3.1. Static
#
#
#
#
3.3.2. DHCP
#
#
#
#
COMMUNITY
private
VERSION
2c
3.5. SSH
#
#
#
#
#
#
#
#
3.8. ACLs
#
#
#
#
3.9. 802.1x
#
#
#
#
SWA(config)#dot1x system-auth-control
SWA(config)#interface ethernet 1
SWA(config-if-eth-1/1)#dot1x port-control auto
SWA(config-if-eth-1/1)#dot1x re-authentication
4. INTERFACE
4.1. Speed / Duplex / Autonegotiation
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
SWA(config)#interface ethernet 1
SWA(config-if-eth-1/1)#speed-duplex 100full
SWA(config-if-eth-1/1)#no negotiation
SWA(config-if-eth-1/1)#mdix force-auto
SWA(config-if-eth-1/1)#show interfaces status ethernet 1
Information of Eth 1/1
Basic information:
Port type:
100TX
MAC address:
00:04:DF:00:08:2D
Configuration:
Name:
Port admin:
Up
Speed-duplex:
100M full
Capabilities:
10M half, 10M full, 100M half, 100M full
Flow-control:
Disabled
MDIX:
Force-Auto
LACP:
Disabled
Current status:
Link status:
Up
Operation speed-duplex: 100M full
Flow control:
Disabled
MDIX:
Normal
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
DmSwitch
SWA(config)#interface ethernet 1
SWA(config-if-eth-1/1)#switchport storm-control broadcast pps 100
SWA(config-if-eth-1/1)#switchport storm-control multicast pps 200
SWA(config-if-eth-1/1)#switchport storm-control unicast pps 300
SWA(config)#interface ethernet 1
SWA(config-if-eth-1/1)#rate-limit input rate 512 burst 32
SWA(config-if-eth-1/1)#rate-limit output rate 1024 burst 32
SWA(config-if-eth-1/1)#show interfaces switchport ethernet 1
Information of Eth 1/1
Broadcast threshold:
Enabled, 500 packets/second
Multicast threshold:
Enabled, 500 packets/second
Unknown-unicast threshold:
Enabled, 500 packets/second
MTU:
9198 bytes
Ingress rate limit:
Enabled, 512kbps, 32KB burst
Egress rate limit:
Enabled, 1024kbps, 32KB burst
Ingress Rule:
Disabled
Acceptable frame type:
All frames
Native VLAN:
2
Priority for untagged traffic: 0
GVRP status:
Disabled
Protocol VLAN:
Allowed VLAN:
1(s,u),
2(s,u)
Forbidden VLAN:
QinQ mode:
External
TPID:
0x8100
MAC addresses maximum:
Disabled
4.4. Security
#
#
SWA(config)#interface ethernet 1
SWA(config-if-eth-1/1)#switchport port-security maximum 15
5. LAYER 2
5.1. Link Aggregation
5.1.1. Static PortChannel
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
SWA(config)#interface port-channel 1
SWA(config-if-port-ch-1)#load-balance src-dst-ip
SWA(config-if-port-ch-1)#set-member ethernet range 25 26
SWA(config-if-port-ch-1)#interface port-channel 2
SWA(config-if-port-ch-2)#set-member ethernet range 27 28
SWA(config-if-port-ch-2)#show interface status port-channel 1
Information of Port-Channel 1
Basic information:
Port type:
1000T
MAC address:
00:04:DF:00:08:D5
Configuration:
Name:
Port admin:
Up
Speed-duplex:
Auto
Capabilities:
10M half, 10M full, 100M half, 100M full, 1000M full
Flow-control:
Disabled
MDIX:
Auto
Current status:
Created by:
User
Link status:
up
Members:
Eth1/25
DmSwitch
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
Eth1/26
SWA(config-if-port-ch-2)#show interface status port-channel 2
Information of Port-Channel 2
Basic information:
Port type:
1000T
MAC address:
00:04:DF:00:08:D6
Configuration:
Name:
Port admin:
Up
Speed-duplex:
Auto
Capabilities:
10M half, 10M full, 100M half, 100M full, 1000M full
Flow-control:
Disabled
MDIX:
Auto
Current status:
Created by:
User
Link status:
up
Members:
Eth1/27
Eth1/28
5.1.2. LACP
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
G - Aggregation
C - Collecting
E - Expired
F - Defaulted
Aggregator id 1 (channel-group 1)
Port
eth 1/25
eth 1/26
Flags
SA
SA
LACP port
Priority
32768
32768
Admin
Key
0x100
0x100
Oper
Key
0x101
0x101
Port
State
AGSCD
AGSCD
Oper
Key
0x101
0x101
Port
State
AGSCD
AGSCD
Aggregator id 2 (channel-group 2)
Port
eth 1/27
eth 1/28
Flags
SA
SA
LACP port
Priority
32768
32768
Admin
Key
0x100
0x100
5.2. xSTP
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
Eth 1/ 1 information
--------------------------------------------------------------STA admin state:
Enabled
Role:
Disabled
--More-SWA(config-if-eth-1/1)#show spanning-tree 1 port-channel 1
Port-Channel 1 information
--------------------------------------------------------------STA admin state:
Enabled
Role:
Root
State:
Forwarding
Path cost:
20000
Priority:
128
Designated cost:
0
Designated port:
128.257
Designated Root:
1.0004df0008bc
Designated Bridge:
1.0004df0008bc
Admin edge port:
Disabled
Admin Link type:
auto
Oper edge port:
Disabled
Oper Link type:
point-to-point
SWA(config-if-eth-1/1)#show spanning-tree 1 port-channel 2
Port-Channel 2 information
--------------------------------------------------------------STA admin state:
Enabled
Role:
Alternate
State:
Discarding
Path cost:
20000
Priority:
128
Designated cost:
0
Designated port:
128.258
Designated Root:
1.0004df0008bc
Designated Bridge:
1.0004df0008bc
Admin edge port:
Disabled
Admin Link type:
auto
Oper edge port:
Disabled
Oper Link type:
point-to-point
5.3. EAPS
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
Yes
Domain Name:
State:
Enabled:
Hello Timer interval:
Fail Timer interval:
Pre-forwarding Timer:
DM1
Complete
Yes
1 sec
3 sec
6 sec (learned)
DmSwitch
Mode:
Master
Remaining:
0 sec
9
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
(none)
Eth1/25
Eth1/26
4093
2-2048
Domain Name:
State:
Enabled:
Hello Timer interval:
Fail Timer interval:
Pre-forwarding Timer:
Last update from:
Primary port:
Secondary port:
Control VLAN ID:
Protected VLANs IDs:
DM2
Links-Up
Yes
1 sec
3 sec
6 sec (learned)
(none)
Eth1/26
Eth1/25
4094
2049-4092
Port status: Up
Port status: Blocked
Mode:
Transit
Remaining:
0 sec
Port status: Up
Port status: Up
5.4. VLAN
5.4.1. Static
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
SWA(config)interface vlan 2
SWA(config-if-vlan-2)#name contabilidade
SWA(config-if-vlan-2)#ip address 192.168.2.241/24
SWA(config-if-vlan-2)#set-member untagged ethernet 1
SWA(config-if-vlan-2)#set-member tagged port-channel 1
SWA(config-if-vlan-2)#set-member tagged port-channel 2
SWA(config-if-vlan-2)#interface ethernet 1
SWA(config-if-eth-1/1)#switchport native vlan 2
SWA(config-if-eth-1/1)#switchport ingress-filtering
SWA(config-if-eth-1/1)#interface port-channel 1
SWA(config-if-port-ch-1)#switchport acceptable-frame-types tagged
SWA(config-if-port-ch-1)#switchport ingress-filtering
SWA(config-if-port-ch-1)#interface port-channel 2
SWA(config-if-port-ch-2)#switchport acceptable-frame-types tagged
SWA(config-if-port-ch-2)#switchport ingress-filtering
SWA(config-if-port-ch-2)#exit
SWA(config)#spanning-tree 1 vlan 2
SWA(config)#show vlan table
Membership:
2
u
u
1
4
u
u
3
6
u
u
5
8 10 12 14 16 18 20 22 24 26 28
u u u u u u u u u U U
u u u u u u u u u U U
7 9 11 13 15 17 19 21 23 25 27
2
.
u
1
4
.
.
3
6
.
.
5
8 10 12 14 16 18 20 22 24 26 28
. . . . . . . . . T T
. . . . . . . . . T T
7 9 11 13 15 17 19 21 23 25 27
5.4.2. GVRP
#
#
SWA(config)#bridge-ext gvrp
SWA(config)#interface port-channel 1
DmSwitch
10
#
#
#
SWA(config-if-port-ch-1)#switchport gvrp
SWA(config-if-port-ch-1)#interface port-channel 2
SWA(config-if-port-ch-2)#switchport gvrp
5.4.3. Q-in-Q
#
#
#
SWA(config)#vlan qinq
SWA(config)#interface ethernet 1
SWA(config-if-eth-1/1)#switchport qinq internal
Interface
--------Eth 1/ 1
Eth 1/18
MAC Address
----------------00-01-02-03-04-05
00-0f-b0-57-8d-ef
VLAN
---1
1
Type
--------Static
Learned
5.6. Monitor
#
#
#
#
#
#
#
#
#
#
SWA(config)#monitor destination 10
SWA(config)#monitor preserve-format
SWA(config)#interface ethernet 1/1
SWA(config-if-eth-1/1)#monitor source rx
SWA(config)#show monitor
Traffic Monitor
------------------------------------------Preserve format:
Enabled
Destination port:
Eth1/10
Source ports:
Eth1/1 (Rx)
#
#
#
#
#
#
#
#
#
#
#
#
#
#
SWA(config-if-eth-1/1-to-1/2)#show l2protocol-tunnel
Destination MAC address: 01-04-df-cd-cd-cd
Eth 1/1
CDP packets tunneling:
STP packets tunneling:
VTP packets tunneling:
PVST packets tunneling:
Enabled
Enabled
Enabled
Disabled
Eth 1/2
CDP packets tunneling:
STP packets tunneling:
VTP packets tunneling:
PVST packets tunneling:
Enabled
Enabled
Enabled
Disabled
DmSwitch
11
#
#
#
#
#
#
#
#
#
#
Eth 1/3
CDP packets tunneling:
STP packets tunneling:
VTP packets tunneling:
PVST packets tunneling:
Disabled
Disabled
Disabled
Disabled
Eth 1/4
CDP packets tunneling:
--More
Disabled
6. LAYER 3
6.1. IGMP
#
#
#
7. BATCH
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
SWA(config)#batch new 1
SWA(config)#batch 1 start-session
Batch-1#configure
Batch-1(config)#interface ethernet 1
Batch-1(config-if-eth-1/1)#rate-limit input rate 64 burst 32
Batch-1(config-if-eth-1/1)#rate-limit output rate 64 burst 32
Batch-1(config-if-eth-1/1)#exit
Batch-1(config)#batch term-session
Save typed commands? <Y/n> y
SWA(config)#batch 1 disable
SWA(config)#batch 1 date min 00 hour 23
SWA(config)#show batch
Batch 1: disable
Date
: min 00 hour 23 day-of-month all month all day-of-week all
Commands List:
configure
interface ethernet 1
rate-limit input rate 64 burst 32
rate-limit output rate 64 burst 32
exit
SWA(config)#
8. CoS
#
#
#
#
#
#
#
#
SWA(config)#queue sched-mode wfq unit 1 ethernet all min-bw 64 128 256 512 1024 sp sp sp
SWA(config)#queue max-bw 10048 10048 10048 10048 10048 100048 100048 100048 ethernet all
SWA(config)#sho queue config ethernet 1
--------------------------------------------------------Port Queue Mode
Max-Bw
Min-Bw Weight SP-Queue
--------------------------------------------------------1/ 1
0
WFQ
10048
64
-NO
1/ 1
1
WFQ
10048
128
-NO
DmSwitch
12
#
#
#
#
#
#
#
#
1/ 1
2
WFQ
10048
256
-NO
1/ 1
3
WFQ
10048
512
-NO
1/ 1
4
WFQ
10048
1024
-NO
1/ 1
5
WFQ
unlimit
-------YES
1/ 1
6
WFQ
unlimit
-------YES
1/ 1
7
WFQ
unlimit
-------YES
--------------------------------------------------------SWA(config)#
9. FILTERS
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
10.ROTEIRO DE TESTES
10.1. EAPS
A partir da configurao default, habilitar EAPS nos 3 SWs. Criar 2 domnios distintos DM1 e DM2. Configurar SWA como master,
SWB e SWC como transit (default) nos 2 domnios.
#
#
#
#
#
#
#
#
#
DmSwitch
13
Configurar em cada SW para o DM1 a porta 25 como primary e a porta 26 como secondary. No domnio DM2 configurar a porta
26 como primary e a 25 como secondary. Isso faz com que ocorra balanceamento de carga.
#
#
#
#
swabc(config)#eaps
swabc(config)#eaps
swabc(config)#eaps
swabc(config)#eaps
DM1
DM1
DM2
DM2
port
port
port
port
Nos SWs A, B e C criar as VLANs de 2 at 200. As VLANs 2 e 200 com nomes Suporte e P&D respectivamente. Adicionar um IP
nestas duas VLANs para gerncia em cada SW.
#
#
#
#
#
#
#
#
#
#
#
Configurar VLAN de controle id 1001 para DM1 e id 1002 para DM2 . Para o domnio DM1 a protected VLAN deve ser de 1 a 100
e para DM2 a protected VLAN deve ser de 101 a 200.
#
#
#
#
#
#
Configurar nos SWs as portas 23 a 28 como tagged nas VLANs de 2 a 200, 1001 e 1002 e Acceptable frame type tagged.
#
#
#
#
#
#
No SWA configurar a porta 2 como tagged nas VLAN 2 e 200. Nos SWs B e C, configurar na porta 2 acesso VLAN 2 e na porta 20
acesso VLAN 200
#
#
#
#
#
#
#
#
#
#
#
swabc(config)#interface vlan 2
swa(config-if-vlan-2)#set-member tagged ethernet 1/2
swbc(config-if-vlan-2)#set-member untagged ethernet 1/2
swabc(config-if-vlan-2)#interface vlan 200
swa(config-if-vlan-200)#set-member tagged ethernet 1/2
swbc(config-if-vlan-200)#set-member untagged ethernet 1/20
swabc(config-if-vlan-200)#interface ethernet 1/2
swa(config-if-eth-1/2)#switchport acceptable-frame-types tagged
swbc(config-if-eth-1/2)#switchport native vlan 2
swbc(config-if-eth-1/2)#interface ethernet 1/20
swbc(config-if-eth-1/20)#switchport native vlan 200
DmSwitch
14
Figura 1.
Verificar que os SWs reconhecem que o master o SWA no dois domnios. O SWA mostra como ring status complete e as portas
secondary bloqueiam conforme foram configuradas em cada domnio. O SWB e SWC esto no estado de Links-Up.
# swa#show system
#
# Product
# ------#
Model:
DmSwitch3224F1
#
OID:
1.3.6.1.4.1.3709.1.2.13
#
# Factory
# ------#
Serial number:
300134
#
MAC Address:
00:04:DF:00:08:BB
#
# User configurable
# ----------------#
Name:
swa
#
Location:
#
Contact:
#
# swa#show eaps detail
#
# EAPS Enabled:
Yes
#
# Domain Name:
DM1
# State:
Complete
# Enabled:
Yes
Mode:
Master
# Hello Timer interval: 1 sec
# Fail Timer interval: 3 sec
# Pre-forwarding Timer: 6 sec (learned)
Remaining:
0 sec
# Last update from:
00:04:DF:00:08:BB, Thu Jan 1 06:15:46 1970
# Primary port:
Eth1/26
Port status: Up
# Secondary port:
Eth1/25
Port status: Blocked
# Control VLAN ID:
1001
# Protected VLANs IDs: 1-100
#
# Domain Name:
DM2
# State:
Complete
# Enabled:
Yes
Mode:
Master
# Hello Timer interval: 1 sec
# Fail Timer interval: 3 sec
# Pre-forwarding Timer: 6 sec (learned)
Remaining:
0 sec
# Last update from:
00:04:DF:00:08:BB, Thu Jan 1 06:15:46 1970
# Primary port:
Eth1/25
Port status: Up
# Secondary port:
Eth1/26
Port status: Blocked
# Control VLAN ID:
1002
# Protected VLANs IDs: 101-200
#
DmSwitch
15
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
EAPS Enabled:
Yes
Domain Name:
State:
Enabled:
Hello Timer interval:
Fail Timer interval:
Pre-forwarding Timer:
Last update from:
Primary port:
Secondary port:
Control VLAN ID:
Protected VLANs IDs:
DM1
Links-Up
Yes
Mode:
Transit
1 sec
3 sec
6 sec (learned)
Remaining:
0 sec
00:04:DF:00:08:BB, Thu Jan 1 06:19:22 1970
Eth1/26
Port status: Up
Eth1/25
Port status: Up
1001
1-100
Domain Name:
State:
Enabled:
Hello Timer interval:
Fail Timer interval:
Pre-forwarding Timer:
Last update from:
Primary port:
Secondary port:
Control VLAN ID:
Protected VLANs IDs:
DM2
Links-Up
Yes
Mode:
Transit
1 sec
3 sec
6 sec (learned)
Remaining:
0 sec
00:04:DF:00:08:BB, Thu Jan 1 06:19:22 1970
Eth1/25
Port status: Up
Eth1/26
Port status: Up
1002
101-200
EAPS Enabled:
Yes
Domain Name:
State:
Enabled:
Hello Timer interval:
Fail Timer interval:
Pre-forwarding Timer:
Last update from:
Primary port:
Secondary port:
Control VLAN ID:
Protected VLANs IDs:
DM1
Links-Up
Yes
Mode:
Transit
1 sec
3 sec
6 sec (learned)
Remaining:
0 sec
00:04:DF:00:08:BB, Thu Jan 1 06:20:41 1970
Eth1/26
Port status: Up
Eth1/25
Port status: Up
1001
1-100
Domain Name:
State:
Enabled:
Hello Timer interval:
Fail Timer interval:
Pre-forwarding Timer:
Last update from:
Primary port:
Secondary port:
Control VLAN ID:
Protected VLANs IDs:
DM2
Links-Up
Yes
Mode:
Transit
1 sec
3 sec
6 sec (learned)
Remaining:
0 sec
00:04:DF:00:08:BB, Thu Jan 1 06:20:41 1970
Eth1/25
Port status: Up
Eth1/26
Port status: Up
1002
101-200
10.2. VLAN
Conectar conforme Figura 2: MA-SWA-P2, MB-SWB-P2 e MC-SWC-P20. Configurar MA como tagged (servidor) nas VLANs 2 e
200 com um IP para cada VLAN em redes distintas (ex. 192.168.2.101/24 e 192.168.200.101/24). Configurar MB (cliente) com IP
da VLAN 2 (ex. 192.168.2.102/24). Configurar MC (cliente) com um IP da VLAN 200 (ex. 192.168.200.103/24).
DmSwitch
16
Figura 2.
Verificar que ping MA-MB, MA-MC e NO MB-MC.
10.3. Resilincia
Executar ping flooding taxa de 10pps com pacotes de 64 bytes de MA para MB e de MA para MC.
#
#
Retirar e voltar a conexo entre cada um dos SWs alternadamente, medindo os tempos de proteo da rede em cada domnio.
Verificar que a proteo ocorre em menos de 200ms (2 pacotes perdidos no mximo tanto para MC qto para MB. Esse tempo de
convergncia refere-se aos testes efetuados com enlaces pticos nas portas giga. Com cobre as giga demoram mais para
convergir.
Verificar que a topologia lgica da rede se alterou (ring status failed)
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
Yes
Domain Name:
State:
Enabled:
Hello Timer interval:
Fail Timer interval:
Pre-forwarding Timer:
Last update from:
Primary port:
Secondary port:
Control VLAN ID:
Protected VLANs IDs:
DM1
Failed
Yes
Mode:
Master
1 sec
3 sec
6 sec (learned)
Remaining:
0 sec
00:04:DF:00:08:BB, Thu Jan 1 01:08:54 1970
Eth1/26
Port status: Up
Eth1/25
Port status: Down
1001
1-100
Domain Name:
State:
Enabled:
Hello Timer interval:
Fail Timer interval:
Pre-forwarding Timer:
Last update from:
Primary port:
DM2
Failed
Yes
Mode:
Master
1 sec
3 sec
6 sec (learned)
Remaining:
0 sec
00:04:DF:00:08:BB, Thu Jan 1 01:08:54 1970
Eth1/25
Port status: Down
DmSwitch
17
#
#
#
#
Secondary port:
Control VLAN ID:
Protected VLANs IDs:
Eth1/26
1002
101-200
Port status: Up
10.4. Q-in-Q
Habilitar Q-in-Q double tagging global nos trs SWs. As portas 25 e 26 dos SWs A, B e C e porta 2 do SWA, devem estar como
tagged modo internal
#
#
#
#
#
swabc(config)#vlan qinq
swabc(config)#interface ethernet range 25 26
swabc(config-if-eth-1/25-to-1/26)#switchport qinq internal
swa(config)#interface ethernet 2
swa(config-if-eth-1/2)#switchport qinq internal
Colocar MA, MB e MC na porta 2 de seus respectivos SWs e verificar que MB e MC se pingam (trocar IPs para mesma subrede. )
Figura 3.
Gerar broadcast em MB e verificar que chega sem tag em MC e chega com a tag 2 (metro tag) em MA
#
root@MB#ping 192.168.2.255 b
swbc(config)#interface ethernet 2
swbc(config-if-eth-1/2)#switchport port-security maximum 50
Habilitar Port-Secutity no SWA para a VLAN de acesso 2 em 80 MACs e Trocar o aging time da VLAN 2 para 600 sec
#
#
#
swa(config)#interface vlan 2
swa(config-if-vlan-2)#mac-address-table port-maximum 80
swa(config-if-vlan-2)# mac-address-table aging-time 600
DmSwitch
18
swabc#clear mac-address-table
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
MAC Address
----------------00-0f-b0-57-8d-ef
0a-81-2e-4d-5b-aa
16-31-4a-75-1c-da
1c-3e-92-5a-1e-d9
1c-fb-e0-7e-c2-f8
1e-44-6a-7c-96-8a
22-5a-3f-1b-72-30
2c-bf-e8-10-3d-9d
38-63-51-11-4f-00
38-eb-7c-57-e3-f4
3a-10-12-71-58-ac
3a-a7-6a-28-29-ee
3e-fa-ba-4b-ec-eb
40-83-c7-5b-b7-17
40-da-1a-2f-a5-70
44-26-e5-38-74-ad
46-7e-49-3e-e3-d4
4c-a3-2a-2c-a5-77
VLAN
---2
2
2
2
2
2
2
2
2
2
2
2
2
2
2
2
2
2
Type
--------Learned
Learned
Learned
Learned
Learned
Learned
Learned
Learned
Learned
Learned
Learned
Learned
Learned
Learned
Learned
Learned
Learned
Learned
#
#
#
#
#
#
#
#
#
#
19
#
#
#
#
#
#
#
#
#
#
#
#
#
#
1
Eth
1
Eth
1
Eth
1
Eth
1
Eth
1
Eth
1
Eth
1
Eth
1
Eth
1
Eth
1
Eth
1
Eth
1
Eth
--More--
1/
1/
1/
1/
1/
1/
1/
1/
1/
1/
1/
1/
1/
25
25
25
25
25
25
25
25
25
25
25
25
25
00-14-f3-0e-85-2d
00-1a-88-c2-4e-fe
00-1b-21-7f-c2-fc
00-2e-2a-64-e9-d2
00-33-56-c4-47-8e
00-35-e3-20-ff-0e
00-3a-a7-83-f8-48
00-3d-f8-e7-d9-44
00-3e-cc-bb-a8-f7
00-47-8e-6b-2c-e8
00-4c-3c-96-3f-27
00-51-54-3c-13-a2
00-55-3b-e4-5a-b0
2
2
2
2
2
2
2
2
2
2
2
2
2
Learned
Learned
Learned
Learned
Learned
Learned
Learned
Learned
Learned
Learned
Learned
Learned
Learned
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
#
MAC Address
----------------00-0c-f1-ac-9b-61
00-03-55-f9-d6-5b
00-04-df-00-08-42
00-0d-01-b0-3e-5a
00-0f-6e-ee-04-7c
00-0f-b0-57-8d-ef
00-10-42-17-f3-ff
00-12-2a-e0-8d-9b
00-18-a0-47-a5-38
00-19-88-23-38-10
00-1a-8d-6b-64-bc
00-1c-e9-e0-73-19
00-20-c2-cd-1b-b1
00-26-64-7b-71-0b
00-26-f4-d4-06-81
00-2c-31-9c-7f-1d
00-2c-34-57-c7-b3
00-35-2b-9b-60-33
VLAN
---1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
1
Type
--------Learned
Learned
Learned
Learned
Learned
Learned
Learned
Learned
Learned
Learned
Learned
Learned
Learned
Learned
Learned
Learned
Learned
Learned
DmSwitch
20