A P P E N D I X A |
Configuration Examples |
This appendix contains the following configuration examples:
LAN switches can segment networks into logically defined virtual workgroups. This logical segmentation is commonly referred as a virtual LAN (VLAN). This logical segmentation of devices provides better LAN administration, security, and management of broadcast activity over the network. Virtual LANs have become an integral feature of switched LAN solutions.
The VLAN example in TABLE A-1 demonstrates a simple VLAN configuration with FASTPATH. If a single port is a member of VLANs 2, 3, and 4, the port expects to see traffic tagged with either VLAN 2, 3, or 4.
The PVID (Port Virtual Identification) could be something entirely different, for example 12, and things would still work fine, just so incoming traffic was tagged.
vlan participation vlan tagging 2/3/4/9 include 2 |
|
All traffic entering the ports is tagged traffic. Since the traffic is tagged, the PVID configuration for each port is not a concern.
The network card configuration for devices on Project A, B and C should be set to NOT tag traffic.
To take care of these untagged frames, configure the following:
This section provides examples of VLAN Routing for RIP and OSPF.
This example in TABLE A-2 creates two router ports to run RIP 2.
Enter Privileged EXEC Mode from User Exec. Create VLAN. SC box only supports VLAN routing; router port has to join VLAN. |
|
Assign IP to router port 4/1 and 4/2. |
|
The configuration commands shown in TABLE A-3 are the same for STP, RSTP and the basic part of MSTP. You must enable spanning-tree from both the global configuration level and the interface level.
When an end station is statically configured with the address of the router that will handle its routed traffic, a single point of failure is introduced into the network. If the router goes down, the end station is unable to communicate. Since static configuration is a convenient way to assign router addresses, Virtual Router Redundancy Protocol (VRRP) was developed to provide a backup mechanism.
VRRP eliminates the single point of failure associated with static default routes by enabling a backup router to take over from a “master” router without affecting the end stations using the route. The end stations uses a “virtual” IP address that is recognized by the backup router if the master router fails. Participating routers use an election protocol to determine which router is the master router at any given time. A given port can appear as more than one virtual router to the network, also, more than one port on a FASTPATH software can be configured as a virtual router. Either a physical port or a routed VLAN can participate.
VRRP provides redundant gateways in an L3 routed network. If Sun Netra CP3140 board is used as an L2 only switch, there is no reason to use VRRP. If L3 routing is used, then VRRP can be used.
A Sun Netra CT 900 chassis can be equipped with maximum of two Sun Netra CP3140 boards. A user can configure the two Sun Netra CP3140 boards in each chassis as redundant gateways for the node boards in the same chassis, or the user can group multiple chassis into a layer 2 network and then use the Sun Netra CP3140 boards in one chassis as the redundant gateways for all the node boards in the group.
A user may not also configure Sun Netra CP3140 boards as redundant gateways, instead a pair or a set of external routers can be used to provide VRRP facility to a set of Sun Netra CT 900 chassis. In such configuration, Sun Netra CP3140 boards are used as L2 switches only.
The L2 requirements for a VRRP configuration involving Sun Netra CT 900 chassis are the following:
For example, if a Sun Netra CP3140 board is set up as router for a node board in the same Sun Netra CT 900 chassis and that Sun Netra CP3140 board fails, the node board can not reach any other network element via the interface connected to the failed Sun Netra CP3140 board. Even if there is a backup router set up using VRRP, it won’t be reachable via that interface. In such configuration, the only solution is to configure a bonding interface on top of the two base/fabric interfaces. With a bonding interface solution, the node can reach the backup router (that is, the other Sun Netra CP3140 board in the chassis) via the interface connected to the backup router.
A network involving multiple Sun Netra CT 900 chassis with redundant paths to the VRRP enabled Sun Netra CP3140s can have multiple broadcast loops. Therefore, it is important to configure the Spanning Tree Protocol on the Sun Netra CP3140 board in a loop.
In order to configure VRRP on a Sun Netra CP3140 board, a user might need to run all or some of the following commands:
1. To enable administrative mode of VRRP
2. To create a virtual router ID on an interface:
VRID 1 is created on 0/20. VRID value can range from 1 to 255.
3. To set the IP address of the virtual router:
If this IP address is owned by the interface being configured, then that switch assumes the master role for that VRID. An interface owns the IP address that was configured using the ip address <ip-address> <netmask> command
4. To enable virtual router on an interface for a VRID:
5. To set the priority of virtual router:
This priority determines which backup takes over the master role when master router fails. Priority ranges from 1 to 254, 1 being the lowest.
This section shows how to configure the FASTPATH software to support VRRP. In the example shown in FIGURE A-1, Router 1 will be the default master router for the virtual route, and Router 2 will be the backup router.
FIGURE A-1 VRRP Example Network Configuration
1. Enable routing for the switch. IP forwarding is then enabled by default.
2. Configure the IP addresses and subnet masks for the port that will participate in the protocol.
3. Enable VRRP for the switch.
4. Assign virtual router IDs to the port that will participate in the protocol.
5. Specify the IP address that the virtual router function will recognize. Note that the virtual IP address on port 1/0/2 is the same as the port’s actual IP address, therefore this router will always be the VRRP master when it is active. And the priority default is 255.
1. Enable routing for the switch. IP forwarding is then enabled by default.
2. Configure the IP addresses and subnet masks for the port that will participate in the protocol.
3. Enable VRRP for the switch.
4. Assign virtual router IDs to the port that will participate in the protocol.
5. Specify the IP address that the virtual router function will recognize. Since the virtual IP address on port 1/0/4 is the same as Router 1’s port 1/0/2 actual IP address, this router will always be the VRRP backup when Router 1 is active.
6. Set the priority for the port. The default priority is 100.
Copyright © 2009 Sun Microsystems, Inc. All rights reserved.