You are viewing a cached version of this page.

You are currently offline. This page was loaded from cache.

RUCKUS FastIron Layer 2 Switching Configuration Guide, 10.0.10

Provides step-by-step instructions to help you understand and configure Layer 2 technology features for the current release of FastIron OS. Organized by technology, for example, Multi-Chassis Trunking (MCT), and Link Aggregation Group (LAG).

1 Vistance Legal Statements
Preface Ruckus
- 3 Contact Information, Resources, and Conventions
  - 3.1 Contacting RUCKUS Customer Services and Support
  - 3.2 Document Feedback
  - 3.3 RUCKUS Product Documentation Resources
  - 3.4 Online Training Resources
  - 3.5 Document Conventions
  - 3.6 Command Syntax Conventions
About This Guide
- 4 About This Document
  - 4.1 New in This Document
  - 4.2 Supported Hardware
RFN
- 5 Remote Fault Notification
  - 5.1 Remote Fault Notification on 1 Gbps Fiber Connections
  - 5.2 Enabling Remote Fault Notification
6 Metro Ring Protocol
- 6.1 Metro Ring Protocol Overview
  - 6.1.1 Ring Initialization and Ring Health Packets (RHP) Processing
    - 6.1.1.1 RHP Processing in MRP Phase 1
    - 6.1.1.2 RHP Processing in MRP Phase 2
    - 6.1.1.3 How Ring Breaks are Detected and Healed
    - 6.1.1.4 MRP Topology Groups
- 6.2 MRP Rings Without Shared Interfaces (MRP Phase 1)
- 6.3 MRP Rings with Shared Interfaces (MRP Phase 2)
- 6.4 Selection of Master Node
- 6.5 Metro Ring Protocol Configuration
  - 6.5.1 Metro Ring Protocol Configuration Notes
  - 6.5.2 Configuring Metro Ring Protocol
  - 6.5.3 Scenario - 2: Configuring MRP
  - 6.5.4 Scenario - 3: Configuring MRP for Topology Group
  - 6.5.5 MRP CLI Example
    - 6.5.5.1 MRP Commands on Switch A (Master Node)
    - 6.5.5.2 MRP Commands on Switch B
    - 6.5.5.3 MRP Commands on Switch C
    - 6.5.5.4 MRP Commands on Switch D
- 6.6 Metro Ring Protocol Diagnostics
- 6.7 Displaying MRP Information
7 Virtual Switch Redundancy Protocol (VSRP)
- 7.1 VSRP Overview
- 7.2 VSRP Configuration Notes and Feature Limitations
- 7.3 VSRP Redundancy
- 7.4 Master Election and Failover
  - 7.4.1 VSRP Failover
  - 7.4.2 VSRP Priority Calculation
  - 7.4.3 MAC Address Failover on VSRP-Aware Devices
- 7.5 VSRP Interval Timers
- 7.6 Configuring Device Redundancy Using VSRP
- 7.7 Configuring Optional VSRP Parameters
- 7.8 Configuring Authentication on VSRP Interfaces
- 7.9 Tracking Ports and Setting the VSRP Priority
- 7.10 Disabling Backup Preemption
  - 7.10.1 Disabling VSRP Backup Preemption
- 7.11 VSRP-Aware Security Features
  - 7.11.1 Configuring Security Parameters on a VSRP-Aware Device
- 7.12 VSRP Fast Start
  - 7.12.1 Special Considerations when Configuring VSRP Fast Start
  - 7.12.2 Recommendations for Configuring VSRP Fast Start
  - 7.12.3 Configuring VSRP Fast Start Globally
- 7.13 VSRP and MRP Signaling
UDLD and Protected Link Groups
- 8 UDLD
  - 8.1 UDLD Overview
    - 8.1.1 UDLD for Tagged Ports
    - 8.1.2 Configuration Notes and Feature Limitations for UDLD
  - 8.2 Configuring UDLD
  - 8.3 Displaying UDLD Information
  - 8.4 Clearing UDLD Statistics
9 Link Aggregation Group
- 9.1 Overview of Link Aggregation
  - 9.1.1 LAG Virtual Interface
  - 9.1.2 LAG Formation Rules
  - 9.1.3 Error Disable
  - 9.1.4 Error Disable Recovery
  - 9.1.5 LAG Virtual Anchor Speed
  - 9.1.6 Use Cases
  - 9.1.7 Configuration Notes for FastIron Devices in a Traditional Stack
  - 9.1.8 Maximum Number of LAGs
  - 9.1.9 Upgrade and Downgrade Notes
  - 9.1.10 LAG Load Sharing
  - 9.1.11 LAG Hashing on Stacking Products
  - 9.1.12 Symmetric Load Balancing
- 9.2 Configuring a LAG
  - 9.2.1 Creating a Link Aggregation Group (LAG)
  - 9.2.2 Configuring LAG Virtual Interface
  - 9.2.3 Configuring a Layer 3 Link Aggregation Group (LAG)
  - 9.2.4 Configuring an LACP Timeout
  - 9.2.5 Specifying the LAG Threshold for a LAG
  - 9.2.6 Enabling Ports Within a LAG
  - 9.2.7 Disabling Ports Within a LAG
  - 9.2.8 Removing a Port from a Currently Operational LAG
  - 9.2.9 Monitoring LAG Virtual Interface and Individual LAG Port
  - 9.2.10 Assigning a Name to a Port Within a LAG
    - 9.2.10.1 Allowable Characters for LAG Names
  - 9.2.11 Enabling sFlow Forwarding on a Port in a LAG
  - 9.2.12 Setting the sFlow Sampling Rate for a LAG
  - 9.2.13 Assigning an IP Address Within a LAG
  - 9.2.14 Renaming an Existing LAG
  - 9.2.15 Displaying LAG Information
  - 9.2.16 Preboot eXecution Environment Boot Support
    - 9.2.16.1 Enabling PXE Boot Support on a Port
  - 9.2.17 User-Configured Peer Information per LACP
- 9.3 Resilient Hashing
  - 9.3.1 Resilient Hashing Limitations
  - 9.3.2 Configuring Resilient Hashing
10 Multi-Chassis Trunking
- 10.1 Multi-Chassis Trunking Overview
  - 10.1.1 How MCT Works
  - 10.1.2 MCT Terminology
  - 10.1.3 MCT Data Flow
  - 10.1.4 MCT and VLANs
  - 10.1.5 MCT Feature Interaction and Supported Features
  - 10.1.6 MCT Board Type Compatibility
- 10.2 Basic MCT Configuration
  - 10.2.1 MCT Configuration Considerations
  - 10.2.2 MCT Recommendations and Best Practices
  - 10.2.3 Configuring MCT
    - 10.2.3.1 Step 1: Configure ICL for Cluster Devices and LAGs for Client Devices
    - 10.2.3.2 Step 2: Configure the MCT VLAN, MCT Session VLAN, Recommended MCT Keep-Alive VLAN, and ICL Forwarding Delay
    - 10.2.3.3 Step 3: Configuring the Cluster
    - 10.2.3.4 Step 4: Configuring Clients
  - 10.2.4 Forcing a Port Up in a Basic MCT Configuration
- 10.3 Cluster Client Automatic Configuration
  - 10.3.1 Setting Up Cluster Client Automatic Configuration
- 10.4 MCT Failover Scenarios
  - 10.4.1 Cluster Failover Mode
    - 10.4.1.1 Configuring the Failover Mode
  - 10.4.2 Client Isolation Mode
    - 10.4.2.1 Configuring Client Isolation Mode
  - 10.4.3 Shutting Down All Client Interfaces
  - 10.4.4 Using the Keep-Alive VLAN
  - 10.4.5 Setting Keep-Alive Timers and Hold Time
- 10.5 MCT Hitless Upgrade
- 10.6 Layer 2 Behavior with MCT
  - 10.6.1 Dynamic Trunks (LAGs)
  - 10.6.2 Port Loop Detection
  - 10.6.3 MCT Layer 2 Protocols
  - 10.6.4 Layer 2 Multicast Snooping over MCT
    - 10.6.4.1 IGMP and MLD Snooping
    - 10.6.4.2 IGMP and MLD Snooping Behavior on MCT Cluster Devices
    - 10.6.4.3 How Failovers are Handled for Layer 2 Multicast over MCT
    - 10.6.4.4 PIM-SM and PIM6-SM Snooping over MCT
    - 10.6.4.5 Forwarding Entries for PIM-SM and PIM6-SM Multicast Snooping
    - 10.6.4.6 Displaying Information for Multicast Snooping
    - 10.6.4.7 Multicast Snooping Configuration Example
- 10.7 Layer 3 Behavior with MCT
  - 10.7.1 Layer 3 Unicast Forwarding over MCT
    - 10.7.1.1 Layer 3 Traffic Forwarding Toward MCT Clients
    - 10.7.1.2 Layer 3 Traffic Forwarding From MCT Clients
  - 10.7.2 User-defined VRF Support over MCT
  - 10.7.3 VRRP or VRRP-E over an MCT-Enabled Network
  - 10.7.4 OSPF and BGP over an MCT-Enabled Network
  - 10.7.5 Layer 3 with MCT Configuration Considerations
  - 10.7.6 MCT Configuration for a Single-Level MCT Deployment
    - 10.7.6.1 MCT Configuration: Router A
    - 10.7.6.2 MCT Configuration: Router B
    - 10.7.6.3 MCT Configuration: S1-SW Device
  - 10.7.7 MCT Configuration with VRRP-E
    - 10.7.7.1 VRRP-E Configuration: Router A
    - 10.7.7.2 VRRP-E Configuration: Router B
  - 10.7.8 MCT Configuration with OSPF
  - 10.7.9 MCT Configuration with BGP
  - 10.7.10 PIM Over MCT Intermediate Router Functionality
    - 10.7.10.1 MCT Peer as Intermediate Upstream Router
    - 10.7.10.2 MCT Peer as Intermediate Downstream Router
    - 10.7.10.3 Load Sharing of Multicast Traffic by MCT-Cluster on CCEP Links
    - 10.7.10.4 Fast Convergence of Multicast Traffic
    - 10.7.10.5 First Hop and Last Hop Router Support on MCT Cluster Devices for MCT VLANs
    - 10.7.10.6 RP Support on MCT Cluster Devices
    - 10.7.10.7 Anycast RP Support for MCT Cluster Devices
    - 10.7.10.8 Requirements for Multicast MCT
    - 10.7.10.9 Limitations
    - 10.7.10.10 Configuring Multicast Routing over MCT for IPv4
- 10.8 Displaying MCT Information
  - 10.8.1 MAC Clear Commands
- 10.9 Single-Level MCT Configuration Example
  - 10.9.1 Client 1 Configuration
  - 10.9.2 Client 2 Configuration
  - 10.9.3 AGG-A (R1) Configuration
  - 10.9.4 AGG-B (R2) Configuration
- 10.10 Two-Level MCT Configuration Example
  - 10.10.1 AGG-A (R1) Configuration
  - 10.10.2 AGG-B (R2) Configuration
  - 10.10.3 DIST-A (R3) Configuration
  - 10.10.4 DIST-B (R4) Configuration
- 10.11 MCT Configuration Example Using ICX 7850 Stacks as Cluster Peers
- 10.12 MCT Hitless Sequential Upgrade
11 MVRP
- 11.1 Multiple VLAN Registration Protocol Overview
  - 11.1.1 MVRP with Per-VLAN STP and Per-VLAN RSTP
  - 11.1.2 MVRP Application Example
  - 11.1.3 MVRP Configuration Notes
    - 11.1.3.1 MVRP Limitations
  - 11.1.4 Configuring MVRP
    - 11.1.4.1 Configuration Example: Implementing MVRP
    - 11.1.4.2 Configuration Example: Implementing MVRP with Per-VLAN RSTP
Spanning Tree Protocol
- 12 Spanning Tree Protocol
  - 12.1 STP Overview
  - 12.2 Standard STP Parameter Configuration
    - 12.2.1 STP Parameters and Defaults
    - 12.2.2 Enabling or Disabling the Spanning Tree Protocol (STP)
    - 12.2.3 STP Protection Enhancement
    - 12.2.4 Changing STP Bridge and Port Parameters
    - 12.2.5 Configuring Spanning Tree Protocol
    - 12.2.6 Displaying STP Information
  - 12.3 STP Feature Configuration
    - 12.3.1 Fast Port Span
      - 12.3.1.1 Disabling and Re-Enabling Fast Port Span
      - 12.3.1.2 Excluding Specific Ports from Fast Port Span
    - 12.3.2 Fast Uplink Span
      - 12.3.2.1 Active Uplink Port Failure
      - 12.3.2.2 Switchover to the Active Uplink Port
      - 12.3.2.3 Fast Uplink Span Rules for LAGs
    - 12.3.3 STP Configuration Examples
    - 12.3.4 802.1W Rapid Spanning Tree (RSTP)
      - 12.3.4.1 Bridges and Bridge Port Roles
      - 12.3.4.2 Edge Ports and Edge Port Roles
      - 12.3.4.3 Point-to-Point Ports
      - 12.3.4.4 Bridge Port States
      - 12.3.4.5 Edge Port and Non-Edge Port States
      - 12.3.4.6 Changes to Port Roles and States
      - 12.3.4.7 802.1W Convergence in a Simple Topology
      - 12.3.4.8 Convergence after a Link Failure
      - 12.3.4.9 Convergence at Link Restoration
      - 12.3.4.10 Convergence in a Complex 802.1W Topology
      - 12.3.4.11 Propagation of Topology Change
      - 12.3.4.12 Compatibility of 802.1W with 802.1D
      - 12.3.4.13 Configuring 802.1W Rapid Spanning Tree Protocol
        
        12.3.4.13.1 Note Regarding Pasting 802.1W Settings into the Running Configuration
      - 12.3.4.14 Displaying RSTP (IEEE 802.1w) Information
    - 12.3.5 Single 802.1W Rapid Spanning Tree Protocol (SRSTP)
      - 12.3.5.1 Enabling 802.1W Single Rapid Spanning Tree Protocol
      - 12.3.5.2 Displaying SRSTP Information
    - 12.3.6 Single Spanning Tree (SSTP)
      - 12.3.6.1 SSTP Defaults
      - 12.3.6.2 Enabling Single Spanning Tree Protocol
      - 12.3.6.3 Displaying SSTP Information
    - 12.3.7 STP per VLAN Group
      - 12.3.7.1 STP Load Balancing
      - 12.3.7.2 Configuring STP per VLAN Group
      - 12.3.7.3 Configuration Example for STP Load Sharing
    - 12.3.8 Spanning Tree Path Cost Support for 802.1D 2004
      - 12.3.8.1 Configuring Spanning Tree Path Cost Support for 802.1D 2004
      - 12.3.8.2 Displaying Spanning Tree 802.1D 2004 Path Cost Information
  - 12.4 PVST/PVST+ Compatibility
    - 12.4.1 Overview of PVST and PVST+
    - 12.4.2 Configuring PVST+ Support
      - 12.4.2.1 Enabling PVST+ Support Manually
    - 12.4.3 Displaying PVST+ Support Information
    - 12.4.4 PVST+ Configuration Examples
      - 12.4.4.1 Tagged Port Using Default VLAN 1 as its Port Native VLAN
      - 12.4.4.2 Untagged Port Using VLAN 2 as Port Native VLAN
    - 12.4.5 PVST+ Protect
  - 12.5 PVRST Compatibility
  - 12.6 BPDU Guard
    - 12.6.1 Enabling STP BPDU Guard
    - 12.6.2 Displaying the BPDU Guard Status
      - 12.6.2.1 BPDU Guard Status Example Configurations
    - 12.6.3 BPDU Guard Status Example Console Messages
  - 12.7 Root Guard
    - 12.7.1 Enabling STP Root Guard
    - 12.7.2 Displaying the STP Root Guard
    - 12.7.3 Displaying the Root Guard by VLAN
  - 12.8 Designated Protection
    - 12.8.1 Enabling Designated Protection on a Port
    - 12.8.2 Syslog Message for a Port in Designated Inconsistent State
  - 12.9 STP BPDU TX Filter
    - 12.9.1 Enabling STP BPDU TX Filter
  - 12.10 Packet InError Detection
    - 12.10.1 Configuring Packet InError Detection
    - 12.10.2 Syslog Message for Error-Disabled Port Due to inError Packets
  - 12.11 Error Disable Recovery
    - 12.11.1 Enabling an Error-Disabled Port Automatically
    - 12.11.2 Enabling an Error-Disabled Port Manually
    - 12.11.3 Setting the Recovery Interval
    - 12.11.4 Displaying the Error Disable Recovery State by Interface
    - 12.11.5 Displaying the Recovery State for All Conditions
    - 12.11.6 Displaying the Recovery State by Port Number and Cause
    - 12.11.7 Errdisable Syslog Messages
  - 12.12 802.1s Multiple Spanning Tree Protocol
    - 12.12.1 Multiple Spanning Tree Regions
    - 12.12.2 Configuration Notes
    - 12.12.3 Configuring MSTP Mode and Scope
    - 12.12.4 Reduced Occurrences of MSTP Reconvergence
      - 12.12.4.1 Example Application of MSTP Reconvergence
      - 12.12.4.2 Deleting a VLAN to MSTI Mapping
      - 12.12.4.3 Viewing the MSTP Configuration Digest
    - 12.12.5 Configuring Multiple Spanning Tree Protocol
    - 12.12.6 MSTP+ Overview
    - 12.12.7 Configuring MSTP+
    - 12.12.8 Switching Between Non-MSTP, MSTP, and MSTP+ Modes
    - 12.12.9 Disabling MSTP on a Port
    - 12.12.10 Changing MSTP Port Parameters
    - 12.12.11 Forcing Ports to Transmit an MSTP BPDU
    - 12.12.12 Enabling MSTP on a Device
    - 12.12.13 Displaying MSTP Statistics
    - 12.12.14 Displaying MSTP Information for a Specified Instance
    - 12.12.15 Displaying MSTP Information for CIST Instance 0
    - 12.12.16 MSTP Root Guard
      - 12.12.16.1 Configuring MSTP Root Guard
      - 12.12.16.2 Displaying MSTP Root Guard Configuration
  - 12.13 xSTP Syslog for BPDU Threshold
    - 12.13.1 Displaying xSTP Statistics
- 13 Flexlink
  - 13.1 Flexlink Overview
    - 13.1.1 Flexlink Configuration Notes and Considerations
    - 13.1.2 Configuring Flexlink
    - 13.1.3 Displaying Flexlink Information
- 14 Unknown Unicast Flood Block
  - 14.1 Unknown Unicast Flood Block Overview
  - 14.2 Configuring UUFB
  - 14.3 Displaying UUFB Information
15 VLANs
- 15.1 VLAN Overview
- 15.2 Default VLAN
- 15.3 Displaying VLAN Information
- 15.4 Layer 2 Port-Based VLANs
  - 15.4.1 Configuring Port-Based VLANs on Device-A
  - 15.4.2 Configuring Port-Based VLANs on Device-B
  - 15.4.3 Configuring Port-Cased VLANs on Device-C
  - 15.4.4 Removing a Port-Based VLAN
- 15.5 Moving Untagged Port Membership from One Non-Default VLAN to Another
- 15.6 Removing VLANs from Physical Ports
- 15.7 Assigning a Different VLAN ID to Default and Reserved VLANs
- 15.8 Viewing Reassigned VLAN IDs for Reserved VLANs
- 15.9 Add and Remove All Tagged VLANs
- 15.10 Multi-Range VLANs
  - 15.10.1 Creating and Configuring a Multi-Range VLAN
  - 15.10.2 Displaying Multi-Range VLAN Information
- 15.11 IEEE 802.1Q Tagging
  - 15.11.1 Support for IEEE 802.1ad (Q-in-Q) Tagging
- 15.12 Spanning Tree Protocol
  - 15.12.1 Enable Spanning Tree on a VLAN
- 15.13 Super-Aggregated VLANs
- 15.14 LAG Interface and VLAN Membership
- 15.15 Multiple VLAN Membership Rules
- 15.16 Virtual Routing Interface Groups
- 15.17 VLAN-Based Static MAC Entries Configuration
  - 15.17.1 Configuring a VLAN to Drop Static MAC Entries
- 15.18 VLAN Groups
  - 15.18.1 Configuring a VLAN Group
  - 15.18.2 Displaying Information About VLAN Groups
  - 15.18.3 Displaying the VLAN Group Information
  - 15.18.4 Allocating Memory for More VLANs or Associated Ports
    - 15.18.4.1 Increasing the Number of Configurable VLANs or Port-to-VLAN Associations
- 15.19 Topology Groups
  - 15.19.1 Master VLAN and Member VLANs
  - 15.19.2 Control Ports and Free Ports
  - 15.19.3 Topology Group Configuration Considerations
  - 15.19.4 Configuring a Topology Group
  - 15.19.5 Displaying STP Information
  - 15.19.6 Displaying Topology Group Information
- 15.20 Aggregated VLANs (Tag Profiles)
  - 15.20.1 IEEE 802.1ad Tagging
    - 15.20.1.1 Tag Profile Configuration Rules
    - 15.20.1.2 Configuring Tag Profile
    - 15.20.1.3 Selective Q-in-Q
      - 15.20.1.3.1 BPDU Tunneling over Selective Q-in-Q
        
        15.20.1.3.1.1 Configuring Q-in-Q BPDU Tunneling
  - 15.20.2 Example IEEE 802.1ad Configuration
  - 15.20.3 Configuration Notes for Aggregated VLANs
  - 15.20.4 Configuring Aggregated VLANs
    - 15.20.4.1 Complete CLI Examples for Aggregated VLANs
      - 15.20.4.1.1 Commands for Configuring Aggregated VLANs on Device A
      - 15.20.4.1.2 Commands for Configuring Aggregated VLANs on Device B
      - 15.20.4.1.3 Commands for Configuring Aggregated VLANs on Device C
      - 15.20.4.1.4 Commands for Configuring Aggregated VLANs on Device D
      - 15.20.4.1.5 Commands for Configuring Aggregated VLANs on Device E
      - 15.20.4.1.6 Commands for Configuring Aggregated VLANs on Device F
  - 15.20.5 Verifying the Aggregated VLAN Configuration
- 15.21 Simultaneous Support for Tagged and Untagged VLANs
- 15.22 VLAN Mapping
- 15.23 Private VLAN Configuration
  - 15.23.1 Multiple Tagged and Untagged Support for PVLANs
  - 15.23.2 Configuration Notes for PVLANs and Standard VLANs
    - 15.23.2.1 Configuration Considerations for Isolated or Community PVLAN
  - 15.23.3 CLI Example for a General PVLAN Network
  - 15.23.4 Configuration Example for Implicit Dual-Mode PVLAN Network
  - 15.23.5 Multiple Promiscuous Ports Support in Private VLANs
    - 15.23.5.1 Mapping Secondary VLAN to Primary VLAN by Multiple Promiscuous Ports
  - 15.23.6 PVLAN Support Over LAG
- 15.24 Layer 2 Trace Route Utility
16 VXLAN
- 16.1 VXLAN Gateway Overview
- 16.2 MAC Learning
- 16.3 Failure Detection and Redundant Remote Connections
- 16.4 Quality of Service Support
- 16.5 Unsupported Features
- 16.6 VXLAN Configuration Considerations
- 16.7 Inter-VLAN Routing Using an External Router with VXLAN VTEPs
- 16.8 Configuring VXLAN
- 16.9 Gathering VXLAN Statistics
- 16.10 Clearing VXLAN Statistics
- 16.11 Displaying VXLAN Information
- 16.12 MACsec over VXLAN
  - 16.12.1 Configuring MACsec over VXLAN
- 16.13 VXLAN Routing In and Out of Tunnels (RIOT)
  - 16.13.1 Enabling VXLAN RIOT
  - 16.13.2 Configuring the Overlay Next-Hop Partition Size
17 Protected Port
- 17.1 Protected Port Overview
- 17.2 Configuring Protected Port

Did you find what you were looking for?