Find Technical Content
  • Home
  • Ruckus Support Portal
  • Ruckus Networks
  • Table of Contents
  • Dark Mode

Powered by Titania Delivery

⚠ This cached page may be outdated. Click refresh to get the latest content.
Cached Version You are Offline

You are viewing a cached version of this page.

You are currently offline. This page was loaded from cache.

RUCKUS FastIron Layer 3 Routing Configuration Guide, 09.0.10 53-1005722-17

  • 1 Vistance Legal Statements
  • Preface Ruckus
    • 3 Contact Information, Resources, and Conventions
      • 3.1 Contacting RUCKUS Customer Services and Support
      • 3.2 Document Feedback
      • 3.3 RUCKUS Product Documentation Resources
      • 3.4 Online Training Resources
      • 3.5 Document Conventions
      • 3.6 Command Syntax Conventions
  • 4 About This Document
    • 4.1 New in This Document
    • 4.2 Supported Hardware
  • ARP
    • 5 Address Resolution Protocol
      • 5.1 ARP Parameter Configuration
        • 5.1.1 How ARP Works
        • 5.1.2 Rate limiting ARP Packets
        • 5.1.3 ARP Aging
        • 5.1.4 Configuring Global ARP Aging
        • 5.1.5 Configuring the ARP Aging on a Specific Interface
        • 5.1.6 Changing the Maximum Number of ARP Table Entries
        • 5.1.7 Enabling Proxy ARP Globally
        • 5.1.8 Enabling Proxy ARP on an Interface
        • 5.1.9 Disabling Proxy ARP on an Interface
        • 5.1.10 Static ARP
        • 5.1.11 Creating Static ARP Entries
        • 5.1.12 Changing the Maximum Number of Static ARP Table Entries
        • 5.1.13 Enabling Learning Gratuitous ARP
        • 5.1.14 Disabling Next Hop or ARP Port Movement Syslog Message Generation
        • 5.1.15 ARP Packet Validation
        • 5.1.16 Ingress ARP Packet Priority
          • 5.1.16.1 Configuring the Priority of Ingress ARP Packets
      • 5.2 Displaying the ARP Table
      • 5.3 Reverse Address Resolution Protocol Configuration
        • 5.3.1 How RARP Differs from BootP and DHCP
        • 5.3.2 Disabling RARP
        • 5.3.3 Creating Static RARP Entries
        • 5.3.4 Changing the Maximum Number of Static RARP Entries Supported
      • 5.4 Dynamic ARP Inspection Overview
        • 5.4.1 ARP Poisoning
        • 5.4.2 How Dynamic ARP Inspection Works
          • 5.4.2.1 ARP and DHCP Snoop Entries
        • 5.4.3 Configuration Notes and Feature Limitations for DAI
        • 5.4.4 Configuring Dynamic ARP Inspection
          • 5.4.4.1 Configuring an Inspection ARP Entry
          • 5.4.4.2 Enabling DAI on a VLAN
          • 5.4.4.3 Enabling ARP Inspection Trust on a Port
          • 5.4.4.4 Disabling Syslog Messages for DAI
        • 5.4.5 Multi-VRF Support for DAI
          • 5.4.5.1 Enabling ARP Inspection Trust on a Port for a Nondefault VRF
        • 5.4.6 Displaying ARP Inspection Status and Ports
  • 6 IP Addressing
    • 6.1 IP Addressing Overview
      • 6.1.1 IP interfaces
      • 6.1.2 IP Route Table
      • 6.1.3 ACLs and IP Access Policies to Filter IP Traffic
      • 6.1.4 IP Packet Flow Through a Layer 3 Device
        • 6.1.4.1 IP forwarding cache
        • 6.1.4.2 Layer 4 Session Table
      • 6.1.5 Encapsulation Type and MTU Packet Parameters
    • 6.2 Basic IP Configuration
    • 6.3 Assigning an IP address to a loopback interface
    • 6.4 Assigning an IPv4 Address to an Ethernet Port
    • 6.5 Assigning an IP Address to a Virtual Ethernet Interface
    • 6.6 Domain Name System
      • 6.6.1 Configuring DNS
    • 6.7 ICMP
      • 6.7.1 Disabling ICMP Messages
      • 6.7.2 Enabling ICMP Redirect Messages
    • 6.8 ICMP Router Discovery Protocol Configuration
      • 6.8.1 Enabling IRDP
    • 6.9 Configuring IP Follow on a Virtual Routing Interface
    • 6.10 IP Address Replacement
      • 6.10.1 Replacing an IP Address
    • 6.11 Changing Packet Encapsulation Type and MTU
    • 6.12 IPv4 Point-to-Point GRE Tunnels
      • 6.12.1 GRE Tunnel Parameters
      • 6.12.2 Path MTU Discovery Support
      • 6.12.3 Support for IPv4 Multicast Routing Over GRE Tunnels
      • 6.12.4 Configuring IP GRE Tunnels
      • 6.12.5 Configuring Optional IP GRE Tunnel Parameters
      • 6.12.6 Configuring Path MTU Discovery on a GRE Tunnel
      • 6.12.7 Enabling IPv4 Multicast Routing Over a GRE Tunnel
      • 6.12.8 Assigning a VRF routing instance to a GRE tunnel interface
      • 6.12.9 Deleting an IP address from an interface configured as a tunnel source
      • 6.12.10 Example Point-to-Point GRE Tunnel Configuration
        • 6.12.10.1 Configuring Point-to-Point GRE Tunnel for Router A
        • 6.12.10.2 Configuring Point-to-Point GRE Tunnel for Router B
      • 6.12.11 Displaying GRE Tunneling Information
      • 6.12.12 Clearing GRE statistics
    • 6.13 Bandwidth for IP Interfaces
      • 6.13.1 OSPF Cost Calculation with Interface Bandwidth
      • 6.13.2 Setting the Bandwidth Value for an Ethernet Interface
      • 6.13.3 Setting the Bandwidth Value for a VE Interface
      • 6.13.4 Setting the bandwidth value for a tunnel interface
    • 6.14 User-configurable MAC address per IP interface
      • 6.14.1 Manually Configuring an IP MAC Address
    • 6.15 Modifying and Displaying Layer 3 System Parameter Limits
    • 6.16 Changing the Router ID
    • 6.17 Configuring IP Forwarding Parameters
    • 6.18 Configuring a Default Network Route
    • 6.19 IP Load Sharing
      • 6.19.1 Changing the Number of Load Sharing (ECMP) Paths for IPv4
    • 6.20 Configuring IPv4 Option Type Filters
    • 6.21 31-Bit Subnet Masks on Point-to-Point Networks
      • 6.21.1 Assigning a 31-Bit Subnet Mask to an IPv4 Address
      • 6.21.2 Configuration Example for 31-Bit Subnet Mask Configuration
    • 6.22 UDP broadcast and IP helper
      • 6.22.1 Enabling UDP Application Forwarding
      • 6.22.2 Configuring an IP helper address
    • 6.23 Enabling or Disabling Layer 2 Switching
    • 6.24 Configuring Delay Time for Notifying VE Down Event
      • 6.24.1 Configuring VE down time notification
    • 6.25 Specifying a Single Source Interface for Specified Packet Types
    • 6.26 Displaying IP Configuration Information
    • 6.28 Clearing IP routes
    • 6.29 Displaying IP Traffic Statistics
  • 7 IPv6 Addressing
    • 7.1 IPv6 Addressing Overview
      • 7.1.1 IPv6 Address Types
      • 7.1.2 IPv6 Stateless Auto-Configuration
    • 7.2 Full Layer 3 IPv6 Feature Support
    • 7.3 IPv6 CLI Command Support
    • 7.4 IPv6 Host Address on a Layer 2 Switch
      • 7.4.1 Configuring a Global or Site-Local IPv6 Address with a Manually Configured Interface ID
      • 7.4.2 Configuring a link-local IPv6 address as a system-wide address for a switch
    • 7.5 Configuring the management port for an IPv6 automatic address configuration
    • 7.6 Configuring Basic IPv6 Connectivity on a Layer 3 Switch
      • 7.6.1 Enabling IPv6 routing
      • 7.6.2 IPv6 Configuration on Each Router Interface
        • 7.6.2.1 Configuring a Global or Site-Local IPv6 Address on an Interface
        • 7.6.2.2 Enabling IPv6 on an Interface
        • 7.6.2.3 Configuring a link-local IPv6 address on an Interface
        • 7.6.2.4 Configuring an IPv6 anycast address on an interface
      • 7.6.3 Dual Stacking for IPv4 and IPv6
    • 7.7 IPv6 Over IPv4 Tunnels
      • 7.7.1 IPv6 over IPv4 tunnel configuration notes
      • 7.7.2 Configuring a Manual IPv6 Over IPv4 Tunnel
      • 7.7.3 Clearing IPv6 Tunnel Statistics
      • 7.7.4 Displaying IPv6 tunnel information
    • 7.8 IPv6 Management
      • 7.8.1 Configuring IPv6 Management ACLs
      • 7.8.2 Restricting SNMP access to an IPv6 node
      • 7.8.3 Specifying an IPv6 SNMP trap receiver
      • 7.8.4 Configuring SNMP V3 Over IPv6
      • 7.8.5 Secure Shell, SCP, and IPv6
      • 7.8.6 IPv6 Telnet
        • 7.8.6.1 Establishing a Telnet Session from an IPv6 Host
      • 7.8.7 IPv6 traceroute
      • 7.8.8 IPv6 Web Management Using HTTP and HTTPS
      • 7.8.9 Restricting Web Management Access
      • 7.8.10 Configuring Name-to-IPv6 Address Resolution Using IPv6 DNS Resolver
      • 7.8.11 Defining an IPv6 DNS Entry
      • 7.8.12 Pinging an IPv6 address
      • 7.8.13 Configuring an IPv6 Syslog Server
      • 7.8.14 Viewing IPv6 SNMP server addresses
      • 7.8.15 Disabling router advertisement and solicitation messages
      • 7.8.16 Disabling IPv6 on a Layer 2 Switch
    • 7.9 IPv6 ICMP Feature Configuration
      • 7.9.1 Enabling IPv6 ICMP Redirects and Configuring ICMP Rate-Limiting
    • 7.10 IPv6 Neighbor Discovery Configuration
      • 7.10.1 IPv6 Neighbor Discovery Configuration Notes
      • 7.10.2 Neighbor Solicitation and Advertisement Messages
      • 7.10.3 Router advertisement and solicitation messages
      • 7.10.4 Neighbor redirect messages
      • 7.10.5 Duplicate Address Detection (DAD)
      • 7.10.6 IPv6 router advertisement parameters
      • 7.10.7 Prefixes Advertised in IPv6 Router Advertisement Messages
      • 7.10.8 Domain Name System Search List
        • 7.10.8.1 Configuring DNSSL
      • 7.10.9 Recursive DNS server addresses
        • 7.10.9.1 Configuring recursive DNS server addresses
      • 7.10.10 IPv6 address advertisement suppression
        • 7.10.10.1 Suppressing the advertisement of all configured IPv6 addresses
        • 7.10.10.2 Suppressing the advertisement of selected IPv6 addresses
      • 7.10.11 Flags in IPv6 Router Advertisement Messages
      • 7.10.12 Enabling and disabling IPv6 router advertisements
      • 7.10.13 IPv6 router advertisement preference support
        • 7.10.13.1 Configuring IPv6 RA Preference
      • 7.10.14 Configuring the Stale State Timeout for IPv6 Neighbors
      • 7.10.15 Configuring the Maximum Number of IPv6 Cache Entries
      • 7.10.16 Configuring the Maximum Number of IPv6 Neighbors
      • 7.10.17 Reachable time for remote IPv6 nodes
    • 7.11 IPv6 Neighbor Discovery Proxy
      • 7.11.1 IPv6 ND Proxy
      • 7.11.2 Local ND Proxy
      • 7.11.3 Configuring IPv6 ND Proxy Globally
      • 7.11.4 Configuring Local ND Proxy on an interface
      • 7.11.5 Disabling IPv6 ND Proxy
    • 7.12 IPv6 Neighbor Discovery Inspection
      • 7.12.1 Configuring Neighbor Discovery Inspection
      • 7.12.2 Configuring Neighbor Discovery Inspection on Multiple VLANs
      • 7.12.3 Syslog message for ND Inspection
    • 7.13 IPv6 MTU
      • 7.13.1 Configuration Notes and Feature Limitations for IPv6 MTU
      • 7.13.2 Changing the IPv6 MTU
    • 7.14 Configuring IPv6 Extension Header Option Type Filters
    • 7.15 127-Bit Subnet Masks on Point-to-Point Networks
      • 7.15.1 Assigning a 127-bit subnet mask to an IPv6 address
    • 7.16 Static Neighbor Entries Configuration
    • 7.17 Limiting the number of hops an IPv6 packet can traverse
    • 7.18 IPv6 source routing security enhancements
    • 7.19 TCAM Space Configuration
      • 7.19.1 Allocating TCAM Space
    • 7.20 Displaying IPv6 Global Information
    • 7.21 Displaying the IPv6 Local Router Information
    • 7.22 Clearing Global IPv6 Information
  • 8 IPv4 Static Routing
    • 8.1 Overview of Static Routing
      • 8.1.1 Static Route States Follow Port States
    • 8.2 Configuring a basic IP static route
    • 8.3 Adding Metrics to a Static Route
    • 8.4 Naming an IP static route
    • 8.5 Removing a name or a static route
    • 8.6 Configuring a physical interface as next hop
    • 8.7 Configuring a virtual interface as next hop
    • 8.8 Configuring a tunnel as next hop
    • 8.9 Configuring a static route for use with a route map
    • 8.10 Configuring a Null Route
    • 8.11 Configuring a default static route
    • 8.12 Resolving a Static Route Using Other Static Routes
    • 8.13 Resolving the Next Hop Through a Protocol
    • 8.14 Creating an IP Static Route in a Non-Default VRF
    • 8.15 Inter-VRF Route Leaking Using Static Routes
    • 8.17 Configuring Load Sharing and Redundancy
    • 8.18 Determining maximum static routes
    • 8.19 Displaying IPv4 static routes
  • 9 IPv6 Static Routing
    • 9.1 Overview of Static Routing
      • 9.1.1 Static Route States Follow Port States
    • 9.2 Configuring a basic IPv6 static route
    • 9.3 Removing an IPv6 Static Route
    • 9.4 Configuring an Interface as Next Hop
    • 9.5 Configuring a virtual interface as next hop
    • 9.6 Configuring a tunnel as next hop
    • 9.7 Configuring a VRF as next hop for an IPv6 static route
    • 9.8 Adding Metrics to an IPv6 Static Route
    • 9.9 Configuring a Null Route
    • 9.10 Configuring a Default Static Route
    • 9.11 Resolving a Static Route Using Other Static Routes
    • 9.12 Resolving the IPv6 static route through a protocol
    • 9.13 Configuring Load Sharing and Redundancy
    • 9.14 Adding an IPv6 Static Route Tag for Use with Route Maps
    • 9.15 IPv6 multicast static routes
    • 9.16 Configuring IPv6 Multicast Routes in a Non-Default VRF
    • 9.17 Displaying information on IPv6 static routes
  • 10 RIP
    • 10.1 RIP Overview
      • 10.1.1 Overview of RIP Route Learning and Advertising Parameters
      • 10.1.2 Redistribution of Routes into RIP
        • 10.1.2.1 Using Prefix Lists and Route Maps to Filter RIP Routes
    • 10.2 Enabling RIP and Configuring Global Parameters
    • 10.3 Configuring RIP interfaces
    • 10.4 Displaying RIP Information
  • 11 RIPng
    • 11.1 RIPng Overview
    • 11.2 RIPng Configuration Overview
    • 11.3 Enabling RIPng and Configuring Global Parameters
    • 11.4 Enabling and configuring RIPng interfaces
    • 11.5 Clearing RIPng Routes from the IPv6 Route Table
    • 11.6 Displaying RIPng information
  • 12 OSPFv2
    • 12.1 OSPFv2 Overview
    • 12.2 Autonomous System
    • 12.3 OSPFv2 Components and Roles
    • 12.4 Reduction of Equivalent AS External LSAs
    • 12.5 Algorithm for AS External LSA Reduction
    • 12.6 Maximum limit overload processing
    • 12.7 Enabling OSPFv2
    • 12.8 Backbone area
    • 12.9 Assigning OSPFv2 areas
    • 12.10 Area range
      • 12.10.1 Assigning an area range
    • 12.11 Area Types
    • 12.12 Stub area and totally stubby area
      • 12.12.1 Disabling summary LSAs for a stub area
    • 12.13 Not-So-Stubby Area (NSSA)
      • 12.13.1 Configuring an NSSA
      • 12.13.2 Configuring a Summary Address for the NSSA
    • 12.14 Assigning Interfaces to an Area
    • 12.15 Link State Advertisements
    • 12.16 Configuring the Maximum Number of LSAs in the LSDB
    • 12.17 Checking the LSDB Overflow State
    • 12.18 Virtual Links
      • 12.18.1 Configuring virtual links
    • 12.19 Default Route Origination
    • 12.20 External route summarization
    • 12.21 SPF timers
    • 12.22 Modifying Shortest Path First timers
    • 12.23 OSPFv2 administrative distance
    • 12.24 OSPFv2 LSA refreshes
      • 12.24.1 Configuring the OSPFv2 LSA pacing interval
    • 12.25 Disabling the Opaque LSA Capability
    • 12.26 Support for OSPF RFC 2328 Appendix E
    • 12.27 OSPFv2 Graceful Restart
      • 12.27.1 Disabling OSPFv2 Graceful Restart
      • 12.27.2 Re-enabling OSPFv2 Graceful Restart
      • 12.27.3 Disabling OSPFv2 graceful restart helper
    • 12.28 OSPFv2 stub router advertisement
    • 12.29 OSPFv2 Shortest Path First throttling
    • 12.30 IETF RFC and Internet Draft Support
    • 12.31 OSPFv2 non-stop routing
      • 12.31.1 Limitations of NSR
      • 12.31.2 Enabling OSPFv2 NSR
    • 12.32 Synchronization of critical OSPFv2 elements
      • 12.32.1 Link state database synchronization
      • 12.32.2 LSA delayed acknowledging
      • 12.32.3 LSA syncing and packing
      • 12.32.4 Neighbor device synchronization
      • 12.32.5 Synchronization limitations
      • 12.32.6 Interface synchronization
    • 12.33 Standby Module Operations
    • 12.34 OSPFv2 distribute list
      • 12.34.1 Configuring an OSPFv2 Distribution List Using ACLs
      • 12.34.2 Configuring an OSPFv2 Distribution List Using Route Maps
    • 12.35 OSPFv2 Route Redistribution
    • 12.36 Redistributing routes into OSPFv2
    • 12.37 Load Sharing
    • 12.38 Interface types to which the reference bandwidth does not apply
    • 12.39 Changing the Reference Bandwidth for the Cost on OSPFv2 Interfaces
    • 12.40 OSPFv2 over VRF
      • 12.40.1 Enabling OSPFv2 in a non-default VRF
    • 12.41 Configuring the OSPFv2 Max-Metric Router LSA
    • 12.42 Re-enabling OSPFv2 compatibility with RFC 1583
    • 12.43 OSPFv2 Authentication
      • 12.43.1 OSPFv2 Keychain Authentication
      • 12.43.2 OSPFv2 authentication configuration
        • 12.43.2.1 Configuring plain text authentication on an OSPFv2 interface
        • 12.43.2.2 Configuring Plain Text Authentication on an OSPFv2 Virtual Link
        • 12.43.2.3 Configuring MD5 authentication on an OSPFv2 interface
        • 12.43.2.4 Configuring MD5 Authentication on an OSPFv2 Virtual Link
        • 12.43.2.5 Configuring HMAC-SHA-1 or HMAC-SHA-256 authentication on an OSPFv2 interface
        • 12.43.2.6 Configuring HMAC-SHA-1 or HMAC-SHA-256 on an OSPFv2 Virtual Link
        • 12.43.2.7 Configuring keychain authentication on an OSPFv2 interface
        • 12.43.2.8 Configuring Keychain Authentication on an OSPFv2 Virtual Link
        • 12.43.2.9 Configuring authentication key activation wait time on an OSPFv2 interface
        • 12.43.2.10 Configuring Authentication Key Activation Wait Time on an OSPFv2 Virtual Link
        • 12.43.2.11 Displaying OSPFv2 Results
    • 12.44 Changing Default Settings
    • 12.45 Disabling and re-enabling OSPFv2 event logging
    • 12.46 Understanding the effects of disabling OSPFv2
      • 12.46.1 Disabling OSPFv2
  • 13 OSPFv3
    • 13.1 OSPFv3 Overview
    • 13.2 Configuring the router ID
    • 13.3 Enabling OSPFv3
    • 13.4 Configuring OSPFv3
    • 13.5 OSPFv3 areas
      • 13.5.1 Backbone area
      • 13.5.2 Area range
      • 13.5.3 Area types
      • 13.5.4 Assigning OSPFv3 areas
      • 13.5.5 Assigning OSPFv3 areas to interfaces
      • 13.5.6 Stub area and totally stubby area
      • 13.5.7 Configuring a stub area
      • 13.5.8 Not-so-stubby area
      • 13.5.9 Configuring an NSSA
      • 13.5.10 LSA types for OSPFv3
    • 13.6 Virtual Links
      • 13.6.1 Virtual link source address assignment
      • 13.6.2 Configuring virtual links
    • 13.7 OSPFv3 route redistribution
      • 13.7.1 Redistributing routes into OSPFv3
    • 13.8 Default route origination
      • 13.8.1 Configuring default external routes
    • 13.9 Disabling and re-enabling OSPFv3 event logging
    • 13.10 Filtering OSPFv3 Routes
      • 13.10.1 Configuring an OSPFv3 Distribution List Using an IPv6 Prefix List as Input
      • 13.10.2 Configuring an OSPFv3 distribution list using a route map as input
    • 13.11 SPF timers
      • 13.11.1 Modifying SPF timers
    • 13.12 OSPFv3 administrative distance
      • 13.12.1 Configuring administrative distance based on route type
    • 13.13 Changing the reference bandwidth for the cost on OSPFv3 interfaces
    • 13.14 OSPFv3 LSA refreshes
      • 13.14.1 Configuring the OSPFv3 LSA pacing interval
    • 13.15 External route summarization
    • 13.16 OSPFv3 over VRF
      • 13.16.1 Enabling OSPFv3 in a non-default VRF
      • 13.16.2 Assigning OSPFv3 areas in a non-default VRF
    • 13.17 Setting all OSPFv3 interfaces to the passive state
    • 13.18 OSPFv3 Graceful Restart Helper
      • 13.18.1 Disabling OSPFv3 Graceful Restart Helper
      • 13.18.2 Re-enabling OSPFv3 graceful restart helper
    • 13.19 OSPFv3 non-stop routing
      • 13.19.1 Enabling OSPFv3 NSR
    • 13.20 Configuring the Maximum Number of LSAs in the LSDB for OSPFv3
    • 13.21 Checking the LSDB Overflow State for OSPFv3
    • 13.22 OSPFv3 Authentication
      • 13.22.1 OSPFv3 Authentication Trailer
        • 13.22.1.1 OSPFv3 Keychain Authentication
        • 13.22.1.2 OSPFv3 Authentication Trailer Configuration
          • 13.22.1.2.1 Configuring HMAC-SHA-1 or HMAC-SHA-256 Authentication on an OSPFv3 Interface
          • 13.22.1.2.2 Configuring HMAC-SHA-1 or HMAC-SHA-256 Authentication on an OSPFv3 Virtual Link
          • 13.22.1.2.3 Configuring HMAC-SHA-1 or HMAC-SHA-256 Authentication on an OSPFv3 Area
          • 13.22.1.2.4 Configuring keychain authentication on an OSPFv3 interface
          • 13.22.1.2.5 Configuring keychain authentication on an OSPFv3 virtual link
          • 13.22.1.2.6 Configuring Keychain Authentication on an OSPFv3 Area
          • 13.22.1.2.7 Configuring authentication key activation wait time on an OSPFv3 interface
          • 13.22.1.2.8 Configuring Authentication Key Activation Wait Time on an OSPFv3 Virtual Link
          • 13.22.1.2.9 Configuring RFC 6506 Authentication on an OSPFv3 Interface
          • 13.22.1.2.10 Configuring RFC 6506 Authentication on an OSPFv3 Virtual Link
          • 13.22.1.2.11 Displaying OSPFv3 Results
      • 13.22.2 IPsec for OSPFv3
        • 13.22.2.1 IPsec for OSPFv3 configuration
        • 13.22.2.2 IPsec for OSPFv3 Considerations
        • 13.22.2.3 Configuring IPsec on an OSPFv3 area
        • 13.22.2.4 Configuring IPsec on an OSPFv3 interface
        • 13.22.2.5 Configuring IPsec on OSPFv3 Virtual Links
        • 13.22.2.6 Specifying the key rollover timer
        • 13.22.2.7 Clearing IPsec Statistics
    • 13.23 Displaying OSPFv3 Results
  • 14 BGP4
    • 14.1 BGP4 Overview
    • 14.2 BGP4 Peering
    • 14.3 BGP4 Message Types
    • 14.4 BGP4 attributes
    • 14.5 BGP4 Best Path Selection Algorithm
    • 14.6 Implementation of BGP4
    • 14.7 Device ID
    • 14.8 BGP global mode
    • 14.9 Configuring a local AS number
    • 14.10 Neighbor configuration
      • 14.10.1 Configuring BGP4 neighbors
    • 14.11 Peer Groups
      • 14.11.1 Configuring BGP4 peer groups
    • 14.12 Advertising the default BGP4 route
    • 14.13 Four-byte AS numbers
    • 14.14 Cooperative BGP4 route filtering
    • 14.15 BGP4 Parameters
    • 14.16 Route Redistribution
      • 14.16.1 Redistributing routes into BGP4
    • 14.17 Advertised Networks
    • 14.18 Importing routes into BGP4
    • 14.19 Route reflection
      • 14.19.1 Configuring a cluster ID for a route reflector
      • 14.19.2 Configuring a route reflector client
    • 14.20 Route flap dampening
    • 14.21 Aggregating routes advertised to BGP neighbors
    • 14.22 Advertising the default BGP4 route
    • 14.23 Advertising the default BGP4 route to a specific neighbor
    • 14.24 Multipath load sharing
    • 14.25 Specifying the Weight Added to Received Routes
    • 14.26 Using the IPv4 Default Route as a Valid Next Hop for a BGP4 Route
    • 14.27 Adjusting defaults to improve routing performance
    • 14.28 Next-hop recursion
      • 14.28.1 Enabling next-hop recursion
    • 14.29 Route Filtering
    • 14.30 BGP Regular Expression Pattern-Matching Characters
    • 14.31 Timers
    • 14.32 BGP4 outbound route filtering
      • 14.32.1 Configuring BGP4 outbound route filtering
      • 14.32.2 Enabling BGP4 Cooperative Route Filtering
    • 14.33 BGP4 Confederations
      • 14.33.1 Configuring BGP4 confederations
    • 14.34 BGP community and extended community
    • 14.35 BGP4 graceful restart
      • 14.35.1 Disabling BGP4 Graceful Restart
      • 14.35.2 Re-enabling BGP4 graceful restart in bgp global configuration mode
    • 14.36 Generalized TTL Security Mechanism support
      • 14.36.1 Configuring GTSM for BGP4
    • 14.37 Disabling the BGP AS_PATH Check Function
    • 14.38 Matching on a destination network
    • 14.39 Matching on a Next-Hop Device
    • 14.40 Route Map Continue Statement for BGP4 Routes
    • 14.41 BGP Keychain Authentication
    • 14.42 Clearing diagnostic buffers
    • 14.43 Displaying BGP4 Statistics
    • 14.44 Displaying BGP4 Neighbor Statistics
  • 15 BGP4+
    • 15.1 BGP4+ overview
    • 15.2 BGP global mode
    • 15.3 IPv6 unicast address family
    • 15.4 BGP4+ neighbors
      • 15.4.1 Configuring BGP4+ Neighbors Using Global IPv6 Addresses
      • 15.4.2 Configuring BGP4+ neighbors using link-local addresses
    • 15.5 BGP4+ Peer Groups
      • 15.5.1 Configuring BGP4+ peer groups
      • 15.5.2 Configuring a peer group with IPv4 and IPv6 peers
    • 15.6 Importing routes into BGP4+
    • 15.7 Advertising the default BGP4+ route
    • 15.8 Advertising the default BGP4+ route to a specific neighbor
    • 15.9 Using the IPv6 Default Route as a Valid Next Hop for a BGP4+ Route
    • 15.10 BGP4+ next hop recursion
      • 15.10.1 Enabling next-hop recursion
    • 15.11 BGP4+ NLRIs and next hop attributes
    • 15.12 BGP4+ route reflection
      • 15.12.1 Configuring a cluster ID for a route reflector
      • 15.12.2 Configuring a route reflector client
    • 15.13 BGP4+ route aggregation
      • 15.13.1 Aggregating Routes Advertised to BGP Neighbors
    • 15.14 BGP4+ multipath
      • 15.14.1 Enabling Load-Balancing Across Different Paths
    • 15.15 Route maps
      • 15.15.1 Configuring a route map for BGP4+ prefixes
    • 15.16 Redistributing prefixes into BGP4+
    • 15.17 Redistributing routes into BGP4+
    • 15.18 Specifying the weight added to BGP4+ received routes
    • 15.19 BGP4+ outbound route filtering
      • 15.19.1 Configuring BGP4+ outbound route filtering
    • 15.20 BGP4+ confederations
      • 15.20.1 Configuring BGP4+ confederations
    • 15.21 BGP4+ extended community
      • 15.21.1 Defining a community ACL
      • 15.21.2 Applying a BGP extended community filter
    • 15.22 BGP4+ graceful restart
      • 15.22.1 Disabling BGP4+ Graceful Restart
      • 15.22.2 Re-enabling BGP4+ graceful restart
    • 15.23 Generalized TTL Security Mechanism support
      • 15.23.1 Configuring GTSM for BGP4+
    • 15.24 Disabling the BGP AS_PATH Check Function
    • 15.25 Displaying BGP4+ statistics
    • 15.26 Displaying BGP4+ Neighbor Statistics
  • 16 BFD
    • 16.1 Bidirectional Forwarding Detection Overview
    • 16.2 BFD Session States
    • 16.3 BFD in a Stacking System
    • 16.4 BFD High Availability Support
    • 16.5 Micro-BFD
      • 16.5.1 Enabling Micro-BFD Globally
      • 16.5.2 Configuring Micro-BFD for the Member Links of a LAG Interface
      • 16.5.3 BFD Configuration on One LAG Member Port
    • 16.6 BFD Session Configuration Where Next Hop is a VE Interface
    • 16.7 BFD Session Configuration Where Next Hop is a LAG Interface
    • 16.8 BFD Considerations and Limitations
    • 16.9 Holdover Timer
    • 16.10 BFD Support for OSPF
      • 16.10.1 Configuring BFD for OSPFv2 Globally
      • 16.10.2 Enabling BFD on an OSPFv2-Enabled Interface
      • 16.10.3 Configuring BFD for OSPFv3 Globally
      • 16.10.4 Enabling BFD on an OSPFv3-Enabled Interface
      • 16.10.5 Setting a BFD Session to Passive
      • 16.10.6 Disabling BFD for OSPF-enabled Interfaces
      • 16.10.7 Configuring BFD for OSPFv2 Globally in a Nondefault VRF Instance
      • 16.10.8 Configuring BFD for OSPFv3 Globally in a Nondefault VRF Instance
    • 16.11 BFD Support for BGP
      • 16.11.1 Configuring BFD for BGP
      • 16.11.2 Configuring BFD for BGP for a Nondefault VRF Instance
      • 16.11.3 Enabling BFD Sessions for a BGP Neighbor
      • 16.11.4 Enabling BFD Sessions for a BGP Peer Group
      • 16.11.5 Enabling BFD Sessions for a BGP Neighbor for a Nondefault VRF Instance
      • 16.11.6 Setting a BFD Session as Passive
      • 16.11.7 Disabling a BFD Session for a BGP Neighbor
    • 16.12 BFD for Static Routes
      • 16.12.1 Configuring BFD for an IP Static Route
      • 16.12.2 Configuring BFD for an IPv6 Static Route
    • 16.13 BFD Configuration Examples
      • 16.13.1 Configuration Example: Single-Hop Static BFD Session for a LAG
      • 16.13.2 Configuration Example: Single-Hop Session for One Member Link for a LAG
      • 16.13.3 Configuration Example: BFD for OSPF Single-Hop Session for an Ethernet Interface
      • 16.13.4 Configuration Example: BFD for OSPF Single-Hop Session for a LAG Interface
      • 16.13.5 Configuration Example: BFD for OSPF Single-Hop Session for a VE Interface
      • 16.13.6 Configuration Example: BFD for eBGP Single-Hop Session
      • 16.13.7 Configuration Example: BFD for iBGP Single-Hop Session
      • 16.13.8 Configuration Example: BFD for IP Static Routes Single-Hop Session
      • 16.13.9 Configuration Example: BFD for IP Static Routes Multi-hop Session
    • 16.14 Displaying BFD Information
  • 17 VRRPv2
    • 17.1 VRRPv2 Overview
      • 17.1.1 VRRP Terminology
      • 17.1.2 VRRP Limitations on ICX Devices
      • 17.1.3 VRRP hold timer
      • 17.1.4 VRRP interval timers
      • 17.1.5 VRRP Authentication
      • 17.1.6 VRRP master device abdication to backup device
      • 17.1.7 ARP and VRRP control packets
    • 17.2 Enabling an Owner VRRP Device
    • 17.3 Enabling a backup VRRP device
    • 17.4 Configuring simple text authentication on VRRP interfaces
    • 17.5 Configuring MD5 authentication on VRRP interfaces
    • 17.6 Abdicating VRRP master device status
    • 17.7 Tracked ports and track priority with VRRP and VRRP-E
      • 17.7.1 Tracking ports and setting the VRRP priority
    • 17.8 VRRP backup preemption
      • 17.8.1 Disabling VRRP backup preemption
    • 17.9 Accept mode for backup VRRP devices
      • 17.9.1 Enabling Accept Mode on a Backup VRRP Device
    • 17.10 Suppressing RIP route advertisements on VRRP backup devices
    • 17.11 VRRP-Ev2 overview
    • 17.12 Enabling a VRRP-E device
    • 17.13 VRRP-E Load-Balancing Using Short-Path Forwarding
      • 17.13.1 Short-path forwarding with revert priority
      • 17.13.2 Configuring VRRP-E load-balancing using short-path forwarding
    • 17.14 VRRP-E Hitless Upgrade
      • 17.14.1 Configuring VRRP-E hitless upgrade
    • 17.15 VRRP-E slow start timer
      • 17.15.1 Configuring a VRRP-E slow-start timer
    • 17.16 Configuration Example: ISSU Upgrade Using VRRP-E
    • 17.17 Displaying VRRPv2 Information
    • 17.18 Clearing VRRPv2 statistics
  • 18 VRRPv3
    • 18.1 VRRPv3 overview
      • 18.1.1 VRRP Limitations on ICX Devices
    • 18.2 Enabling an IPv6 VRRPv3 owner device
    • 18.3 Enabling an IPv6 VRRPv3 backup device
    • 18.4 Enabling an IPv4 VRRPv3 owner device
    • 18.5 Enabling an IPv4 VRRPv3 backup device
    • 18.6 Tracked ports and track priority with VRRP and VRRP-E
      • 18.6.1 Tracking ports and setting VRRP priority using VRRPv3
    • 18.7 Accept mode for backup VRRP devices
      • 18.7.1 Enabling Accept Mode on a Backup VRRP Device
    • 18.8 Alternate VRRPv2 checksum for VRRPv3 IPv4 sessions
      • 18.8.1 Enabling the VRRPv2 checksum computation method in a VRRPv3 IPv4 session
      • 18.8.2 Displaying alternate VRRPv2 checksum settings
    • 18.9 Automatic generation of a virtual link-local address for VRRPv3
      • 18.9.1 Assigning an auto-generated link-local IPv6 address for a VRRPv3 cluster
    • 18.10 Displaying VRRPv3 Statistics
    • 18.11 Clearing VRRPv3 statistics
    • 18.12 VRRP-Ev3 Overview
    • 18.13 Enabling an IPv6 VRRP-Ev3 device
    • 18.14 Displaying and Clearing VRRP-Ev3 Statistics
  • 19 Multi-VRF
    • 19.1 Multi-VRF Overview
    • 19.2 Multi-VRF Considerations
    • 19.3 VRF-related System-Max Values
    • 19.4 Additional Features to Support Multi-VRF
    • 19.5 Configuring Multi-VRF
      • 19.5.1 Configuring VRF system-max values
      • 19.5.2 Creating VLANs as links on a tagged port for security
      • 19.5.3 Configuring a VRF Instance
      • 19.5.4 Starting a routing process for a VRF
      • 19.5.5 Assigning a Layer 3 interface to a VRF
      • 19.5.6 Assigning a Loopback Interface to a VRF
      • 19.5.7 Verifying a Multi-VRF Configuration
      • 19.5.8 Removing a VRF configuration
      • 19.5.9 Configuring static ARP for Multi-VRF
      • 19.5.10 Configuring Additional ARP Features for Multi-VRF
  • 20 Unicast Reverse Path Forwarding
    • 20.1 Unicast Reverse Path Forwarding
    • 20.2 Configuration Considerations for uRPF
    • 20.3 Unicast Reverse Path Forwarding Feasibility
    • 20.4 System-Max Changes and uRPF
    • 20.5 Enabling Unicast Reverse Path Forwarding
    • 20.6 Configuring unicast Reverse Path Forwarding modes

Multi-VRF

In this section:

  1. Multi-VRF Overview
  2. Multi-VRF Considerations
  3. VRF-related System-Max Values
  4. Additional Features to Support Multi-VRF
    In addition to basic features, you can configure dynamic ARP inspection, DHCP snooping, and IP Source Guard to support Multi-VRF.
  5. Configuring Multi-VRF

Did you find what you were looking for?

Thanks!

Ruckus Wireless

© 2026 Ruckus Wireless LLC All rights reserved.

  • Accessibility
  • Privacy & Cookies
  • Do Not Sell My Information
  • Trademarks
  • Terms
  • Feedback