You are viewing a cached version of this page.

You are currently offline. This page was loaded from cache.

RUCKUS FastIron Layer 2 Switching Configuration Guide, 10.0.20

Provides step-by-step instructions to help you understand and configure Layer 2 technology features for the current release of FastIron OS. Organized by technology, for example, Multi-Chassis Trunking (MCT), and Link Aggregation Group (LAG).

1 CommScope Legal Statements
Preface Ruckus
- 3 Contact Information, Resources, and Conventions
  - 3.1 Contacting RUCKUS Customer Services and Support
  - 3.2 Document Feedback
  - 3.3 RUCKUS Product Documentation Resources
  - 3.4 Online Training Resources
  - 3.5 Document Conventions
  - 3.6 Command Syntax Conventions
About This Guide
- 4 About This Document
  - 4.1 New in This Document
  - 4.2 Supported Hardware
RFN
- 5 Remote Fault Notification
  - 5.1 Remote Fault Notification on 1 Gbps Fiber Connections
  - 5.2 Enabling Remote Fault Notification
6 Metro Ring Protocol
- 6.1 Metro Ring Protocol Overview
  - 6.1.1 Ring Initialization and Ring Health Packets (RHP) Processing
    - 6.1.1.1 RHP Processing in MRP Phase 1
    - 6.1.1.2 RHP Processing in MRP Phase 2
    - 6.1.1.3 How Ring Breaks are Detected and Healed
    - 6.1.1.4 MRP Topology Groups
- 6.2 MRP Rings Without Shared Interfaces (MRP Phase 1)
- 6.3 MRP Rings with Shared Interfaces (MRP Phase 2)
- 6.4 Selection of Master Node
- 6.5 Metro Ring Protocol Configuration
  - 6.5.1 Metro Ring Protocol Configuration Notes
  - 6.5.2 Configuring Metro Ring Protocol
  - 6.5.3 Scenario - 2: Configuring MRP
  - 6.5.4 Scenario - 3: Configuring MRP for Topology Group
  - 6.5.5 MRP CLI Example
    - 6.5.5.1 MRP Commands on Switch A (Master Node)
    - 6.5.5.2 MRP Commands on Switch B
    - 6.5.5.3 MRP Commands on Switch C
    - 6.5.5.4 MRP Commands on Switch D
- 6.6 Metro Ring Protocol Diagnostics
- 6.7 Displaying MRP Information
7 Virtual Switch Redundancy Protocol (VSRP)
- 7.1 VSRP Overview
- 7.2 VSRP Configuration Notes and Feature Limitations
- 7.3 VSRP Redundancy
- 7.4 Master Election and Failover
  - 7.4.1 VSRP Failover
  - 7.4.2 VSRP Priority Calculation
  - 7.4.3 MAC Address Failover on VSRP-Aware Devices
- 7.5 VSRP Interval Timers
- 7.6 Configuring Device Redundancy Using VSRP
- 7.7 Configuring Optional VSRP Parameters
- 7.8 Configuring Authentication on VSRP Interfaces
- 7.9 Tracking Ports and Setting the VSRP Priority
- 7.10 Disabling Backup Preemption
  - 7.10.1 Disabling VSRP Backup Preemption
- 7.11 VSRP-Aware Security Features
  - 7.11.1 Configuring Security Parameters on a VSRP-Aware Device
- 7.12 VSRP Fast Start
  - 7.12.1 Special Considerations when Configuring VSRP Fast Start
  - 7.12.2 Recommendations for Configuring VSRP Fast Start
  - 7.12.3 Configuring VSRP Fast Start Globally
- 7.13 VSRP and MRP Signaling
UDLD and Protected Link Groups
- 8 UDLD
  - 8.1 UDLD Overview
    - 8.1.1 UDLD for Tagged Ports
    - 8.1.2 Configuration Notes and Feature Limitations for UDLD
  - 8.2 Configuring UDLD
  - 8.3 Displaying UDLD Information
  - 8.4 Clearing UDLD Statistics
9 Link Aggregation Group
- 9.1 Overview of Link Aggregation
  - 9.1.1 LAG Virtual Interface
  - 9.1.2 LAG Formation Rules
  - 9.1.3 Error Disable
  - 9.1.4 Error Disable Recovery
  - 9.1.5 LAG Virtual Anchor Speed
  - 9.1.6 Use Cases
  - 9.1.7 Configuration Notes for FastIron Devices in a Traditional Stack
  - 9.1.8 Maximum Number of LAGs
  - 9.1.9 Upgrade and Downgrade Notes
  - 9.1.10 LAG Load Sharing
  - 9.1.11 LAG Hashing on Stacking Products
  - 9.1.12 Symmetric Load Balancing
- 9.2 Configuring a LAG
  - 9.2.1 Creating a Link Aggregation Group (LAG)
  - 9.2.2 Configuring LAG Virtual Interface
  - 9.2.3 Configuring a Layer 3 Link Aggregation Group (LAG)
  - 9.2.4 Configuring an LACP Timeout
  - 9.2.5 Specifying the LAG Threshold for a LAG
  - 9.2.6 Enabling Ports Within a LAG
  - 9.2.7 Disabling Ports Within a LAG
  - 9.2.8 Removing a Port from a Currently Operational LAG
  - 9.2.9 Monitoring LAG Virtual Interface and Individual LAG Port
  - 9.2.10 Assigning a Name to a Port Within a LAG
    - 9.2.10.1 Allowable Characters for LAG Names
  - 9.2.11 Enabling sFlow Forwarding on a Port in a LAG
  - 9.2.12 Setting the sFlow Sampling Rate for a LAG
  - 9.2.13 Assigning an IP Address Within a LAG
  - 9.2.14 Renaming an Existing LAG
  - 9.2.15 Displaying LAG Information
  - 9.2.16 Preboot eXecution Environment Boot Support
    - 9.2.16.1 Enabling PXE Boot Support on a Port
  - 9.2.17 User-Configured Peer Information per LACP
- 9.3 Resilient Hashing
  - 9.3.1 Resilient Hashing Limitations
  - 9.3.2 Configuring Resilient Hashing
10 Multi-Chassis Trunking
- 10.1 Multi-Chassis Trunking Overview
  - 10.1.1 How MCT Works
  - 10.1.2 MCT Terminology
  - 10.1.3 MCT Data Flow
  - 10.1.4 MCT and VLANs
  - 10.1.5 MCT Feature Interaction and Supported Features
  - 10.1.6 MCT Board Type Compatibility
- 10.2 Basic MCT Configuration
  - 10.2.1 MCT Configuration Considerations
  - 10.2.2 MCT Recommendations and Best Practices
  - 10.2.3 Configuring MCT
    - 10.2.3.1 Step 1: Configure ICL for Cluster Devices and LAGs for Client Devices
    - 10.2.3.2 Step 2: Configure the MCT VLAN, MCT Session VLAN, Recommended MCT Keep-Alive VLAN, and ICL Forwarding Delay
    - 10.2.3.3 Step 3: Configuring the Cluster
    - 10.2.3.4 Step 4: Configuring Clients
  - 10.2.4 Forcing a Port Up in a Basic MCT Configuration
- 10.3 Cluster Client Automatic Configuration
  - 10.3.1 Setting Up Cluster Client Automatic Configuration
- 10.4 MCT Failover Scenarios
  - 10.4.1 Cluster Failover Mode
    - 10.4.1.1 Configuring the Failover Mode
  - 10.4.2 Client Isolation Mode
    - 10.4.2.1 Configuring Client Isolation Mode
  - 10.4.3 Shutting Down All Client Interfaces
  - 10.4.4 Using the Keep-Alive VLAN
  - 10.4.5 Setting Keep-Alive Timers and Hold Time
- 10.5 MCT Hitless Upgrade
- 10.6 Layer 2 Behavior with MCT
  - 10.6.1 Dynamic Trunks (LAGs)
  - 10.6.2 Port Loop Detection
  - 10.6.3 MCT Layer 2 Protocols
  - 10.6.4 Layer 2 Multicast Snooping over MCT
    - 10.6.4.1 IGMP and MLD Snooping
    - 10.6.4.2 IGMP and MLD Snooping Behavior on MCT Cluster Devices
    - 10.6.4.3 How Failovers are Handled for Layer 2 Multicast over MCT
    - 10.6.4.4 PIM-SM and PIM6-SM Snooping over MCT
    - 10.6.4.5 Forwarding Entries for PIM-SM and PIM6-SM Multicast Snooping
    - 10.6.4.6 Displaying Information for Multicast Snooping
    - 10.6.4.7 Multicast Snooping Configuration Example
- 10.7 Layer 3 Behavior with MCT
  - 10.7.1 Layer 3 Unicast Forwarding over MCT
    - 10.7.1.1 Layer 3 Traffic Forwarding Toward MCT Clients
    - 10.7.1.2 Layer 3 Traffic Forwarding From MCT Clients
  - 10.7.2 User-defined VRF Support over MCT
  - 10.7.3 VRRP or VRRP-E over an MCT-Enabled Network
  - 10.7.4 OSPF and BGP over an MCT-Enabled Network
  - 10.7.5 Layer 3 with MCT Configuration Considerations
  - 10.7.6 MCT Configuration for a Single-Level MCT Deployment
    - 10.7.6.1 MCT Configuration: Router A
    - 10.7.6.2 MCT Configuration: Router B
    - 10.7.6.3 MCT Configuration: S1-SW Device
  - 10.7.7 MCT Configuration with VRRP-E
    - 10.7.7.1 VRRP-E Configuration: Router A
    - 10.7.7.2 VRRP-E Configuration: Router B
  - 10.7.8 MCT Configuration with OSPF
  - 10.7.9 MCT Configuration with BGP
  - 10.7.10 PIM Over MCT Intermediate Router Functionality
    - 10.7.10.1 MCT Peer as Intermediate Upstream Router
    - 10.7.10.2 MCT Peer as Intermediate Downstream Router
    - 10.7.10.3 Load Sharing of Multicast Traffic by MCT-Cluster on CCEP Links
    - 10.7.10.4 Fast Convergence of Multicast Traffic
    - 10.7.10.5 First Hop and Last Hop Router Support on MCT Cluster Devices for MCT VLANs
    - 10.7.10.6 RP Support on MCT Cluster Devices
    - 10.7.10.7 Anycast RP Support for MCT Cluster Devices
    - 10.7.10.8 Requirements for Multicast MCT
    - 10.7.10.9 Limitations
    - 10.7.10.10 Configuring Multicast Routing over MCT for IPv4
- 10.8 Displaying MCT Information
  - 10.8.1 MAC Clear Commands
- 10.9 Single-Level MCT Configuration Example
  - 10.9.1 Client 1 Configuration
  - 10.9.2 Client 2 Configuration
  - 10.9.3 AGG-A (R1) Configuration
  - 10.9.4 AGG-B (R2) Configuration
- 10.10 Two-Level MCT Configuration Example
  - 10.10.1 AGG-A (R1) Configuration
  - 10.10.2 AGG-B (R2) Configuration
  - 10.10.3 DIST-A (R3) Configuration
  - 10.10.4 DIST-B (R4) Configuration
- 10.11 MCT Configuration Example Using ICX 7850 Stacks as Cluster Peers
- 10.12 MCT Hitless Sequential Upgrade
11 Multiple VLAN Registration Protocol
- 11.1 Multiple VLAN Registration Protocol Overview
  - 11.1.1 MVRP with Per-VLAN STP and Per-VLAN RSTP
  - 11.1.2 MVRP Application Example
  - 11.1.3 MVRP Configuration Notes
    - 11.1.3.1 MVRP Limitations
  - 11.1.4 Configuring MVRP
    - 11.1.4.1 Configuration Example: Implementing MVRP
    - 11.1.4.2 Configuration Example: Implementing MVRP with Per-VLAN RSTP
12 Rapid Spanning Tree Protocol
- 12.1 RSTP Overview
- 12.2 RSTP Parameter Configuration
  - 12.2.1 RSTP Parameters and Defaults
  - 12.2.2 Configuring IEEE 802.1w Rapid Spanning Tree Protocol
    - 12.2.2.1 Note Regarding Pasting IEEE 802.1w Settings into the Running Configuration
  - 12.2.3 Displaying RSTP (IEEE 802.1w) Information
- 12.3 Bridges and Bridge Port Roles
- 12.4 Edge Ports and Edge Port Roles
- 12.5 Point-to-Point Ports
- 12.6 Bridge Port States
- 12.7 Edge Port and Non-Edge Port States
- 12.8 Changes to Port Roles and States
- 12.9 IEEE 802.1w Convergence in a Simple Topology
- 12.10 Convergence after a Link Failure
- 12.11 Convergence at Link Restoration
- 12.12 Convergence in a Complex IEEE 802.1w Topology
- 12.13 Propagation of Topology Change
13 PVST/PVST+ Compatibility
- 13.1 Overview of PVST and PVST+
- 13.2 Configuring PVST+ Support
  - 13.2.1 Enabling PVST+ Support Manually
- 13.3 Displaying PVST+ Support Information
- 13.4 PVST+ Configuration Examples
  - 13.4.1 Tagged Port Using Default VLAN 1 as its Port Native VLAN
  - 13.4.2 Untagged Port Using VLAN 2 as Port Native VLAN
- 13.5 PVST+ Protect
14 PVRST Compatibility
15 BPDU Guard
- 15.1 Enabling STP BPDU Guard
- 15.2 Displaying the BPDU Guard Status
  - 15.2.1 BPDU Guard Status Example Configurations
- 15.3 BPDU Guard Status Example Console Messages
16 Root Guard
- 16.1 Enabling STP Root Guard
- 16.2 Displaying the STP Root Guard
17 Designated Protection
- 17.1 Enabling Designated Protection on a Port
- 17.2 Syslog Message for a Port in Designated Inconsistent State
18 Error Disable Recovery
- 18.1 Enabling an Error-Disabled Port Automatically
- 18.2 Enabling an Error-Disabled Port Manually
- 18.3 Setting the Recovery Interval
- 18.4 Displaying the Error Disable Recovery State by Interface
- 18.5 Displaying the Recovery State for All Conditions
- 18.6 Displaying the Recovery State by Port Number and Cause
- 18.7 Errdisable Syslog Messages
19 802.1s Multiple Spanning Tree Protocol
- 19.1 Multiple Spanning Tree Regions
- 19.2 Configuration Notes
- 19.3 Configuring MSTP Mode and Scope
- 19.4 Reduced Occurrences of MSTP Reconvergence
  - 19.4.1 Example Application of MSTP Reconvergence
  - 19.4.2 Deleting a VLAN to MSTI Mapping
  - 19.4.3 Viewing the MSTP Configuration Digest
- 19.5 Configuring Multiple Spanning Tree Protocol
- 19.6 MSTP+ Overview
- 19.7 Configuring MSTP+
- 19.8 Switching Between Non-MSTP, MSTP, and MSTP+ Modes
- 19.9 Disabling MSTP on a Port
- 19.10 Changing MSTP Port Parameters
- 19.11 Forcing Ports to Transmit an MSTP BPDU
- 19.12 Enabling MSTP on a Device
- 19.13 Displaying MSTP Statistics
- 19.14 Displaying MSTP Information for a Specified Instance
- 19.15 Displaying MSTP Information for CIST Instance 0
- 19.16 MSTP Root Guard
  - 19.16.1 Configuring MSTP Root Guard
  - 19.16.2 Displaying MSTP Root Guard Configuration
20 Packet InError Detection
- 20.1 Configuring Packet InError Detection
- 20.2 Syslog Message for Error-Disabled Port Due to inError Packets
21 Flexlink
- 21.1 Flexlink Overview
  - 21.1.1 Flexlink Configuration Notes and Considerations
  - 21.1.2 Configuring Flexlink
  - 21.1.3 Displaying Flexlink Information
22 Unknown Unicast Flood Block
- 22.1 Unknown Unicast Flood Block Overview
- 22.2 Configuring UUFB
- 22.3 Displaying UUFB Information
23 VLANs
- 23.1 VLAN Overview
- 23.2 Default VLAN
- 23.3 Displaying VLAN Information
- 23.4 Layer 2 Port-Based VLANs
  - 23.4.1 Configuring Port-Based VLANs on Device-A
  - 23.4.2 Configuring Port-Based VLANs on Device-B
  - 23.4.3 Configuring Port-Cased VLANs on Device-C
  - 23.4.4 Removing a Port-Based VLAN
- 23.5 Moving Untagged Port Membership from One Non-Default VLAN to Another
- 23.6 Removing VLANs from Physical Ports
- 23.7 Assigning a Different VLAN ID to Default and Reserved VLANs
- 23.8 Viewing Reassigned VLAN IDs for Reserved VLANs
- 23.9 Add and Remove All Tagged VLANs
- 23.10 Multi-Range VLANs
  - 23.10.1 Creating and Configuring a Multi-Range VLAN
  - 23.10.2 Displaying Multi-Range VLAN Information
- 23.11 IEEE 802.1Q Tagging
  - 23.11.1 Support for IEEE 802.1ad (Q-in-Q) Tagging
- 23.12 Spanning Tree Protocol
  - 23.12.1 Enable Spanning Tree on a VLAN
- 23.13 Super-Aggregated VLANs
- 23.14 LAG Interface and VLAN Membership
- 23.15 Multiple VLAN Membership Rules
- 23.16 Virtual Routing Interface Groups
- 23.17 VLAN-Based Static MAC Entries Configuration
  - 23.17.1 Configuring a VLAN to Drop Static MAC Entries
- 23.18 VLAN Groups
  - 23.18.1 Configuring a VLAN Group
  - 23.18.2 Displaying Information About VLAN Groups
  - 23.18.3 Displaying the VLAN Group Information
  - 23.18.4 Allocating Memory for More VLANs or Associated Ports
    - 23.18.4.1 Increasing the Number of Configurable VLANs or Port-to-VLAN Associations
- 23.19 Topology Groups
  - 23.19.1 Master VLAN and Member VLANs
  - 23.19.2 Control Ports and Free Ports
  - 23.19.3 Topology Group Configuration Considerations
  - 23.19.4 Configuring a Topology Group
  - 23.19.5 Displaying STP Information
  - 23.19.6 Displaying Topology Group Information
- 23.20 Aggregated VLANs (Tag Profiles)
  - 23.20.1 IEEE 802.1ad Tagging
    - 23.20.1.1 Tag Profile Configuration Rules
    - 23.20.1.2 Configuring Tag Profile
    - 23.20.1.3 Selective Q-in-Q
      - 23.20.1.3.1 BPDU Tunneling over Selective Q-in-Q
        
        23.20.1.3.1.1 Configuring Q-in-Q BPDU Tunneling
    - 23.20.1.4 Adding or Replacing a Customer VLAN for Q-in-Q Tunneling
  - 23.20.2 Example IEEE 802.1ad Configuration
  - 23.20.3 Configuration Notes for Aggregated VLANs
  - 23.20.4 Configuring Aggregated VLANs
    - 23.20.4.1 Complete CLI Examples for Aggregated VLANs
      - 23.20.4.1.1 Commands for Configuring Aggregated VLANs on Device A
      - 23.20.4.1.2 Commands for Configuring Aggregated VLANs on Device B
      - 23.20.4.1.3 Commands for Configuring Aggregated VLANs on Device C
      - 23.20.4.1.4 Commands for Configuring Aggregated VLANs on Device D
      - 23.20.4.1.5 Commands for Configuring Aggregated VLANs on Device E
      - 23.20.4.1.6 Commands for Configuring Aggregated VLANs on Device F
  - 23.20.5 Verifying the Aggregated VLAN Configuration
- 23.21 Simultaneous Support for Tagged and Untagged VLANs
- 23.22 VLAN Mapping
- 23.23 Private VLAN Configuration
  - 23.23.1 Multiple Tagged and Untagged Support for PVLANs
  - 23.23.2 Configuration Notes for PVLANs and Standard VLANs
    - 23.23.2.1 Configuration Considerations for Isolated or Community PVLAN
  - 23.23.3 CLI Example for a General PVLAN Network
  - 23.23.4 Configuration Example for Implicit Dual-Mode PVLAN Network
  - 23.23.5 Multiple Promiscuous Ports Support in Private VLANs
    - 23.23.5.1 Mapping Secondary VLAN to Primary VLAN by Multiple Promiscuous Ports
  - 23.23.6 PVLAN Support Over LAG
- 23.24 Layer 2 Trace Route Utility
VXLAN
- 24 VXLAN
  - 24.1 VXLAN Gateway Overview
  - 24.2 MAC Learning
  - 24.3 Failure Detection and Redundant Remote Connections
  - 24.4 Quality of Service Support
  - 24.5 Unsupported Features
  - 24.6 VXLAN Configuration Considerations
  - 24.7 Inter-VLAN Routing Using an External Router with VXLAN VTEPs
  - 24.8 Configuring VXLAN
  - 24.9 Gathering VXLAN Statistics
  - 24.10 Clearing VXLAN Statistics
  - 24.11 Displaying VXLAN Information
  - 24.12 MACsec over VXLAN
    - 24.12.1 Configuring MACsec over VXLAN
  - 24.13 VXLAN Routing In and Out of Tunnels (RIOT)
    - 24.13.1 Enabling VXLAN RIOT
    - 24.13.2 Configuring the Overlay Next-Hop Partition Size
  - 24.14 Anycast Gateway with VXLAN
    - 24.14.1 Configuring Anycast Gateway in a VXLAN Network
    - 24.14.2 Displaying Anycast Gateway VXLAN Information
- 25 BGP EVPN VXLAN
  - 25.1 BGP EVPN
  - 25.2 BGP EVPN Considerations and Limitations
  - 25.3 BGP EVPN Configuration
    - 25.3.1 Configuring the Underlay Network
    - 25.3.2 Configuring iBGP EVPN Peering Between VTEPs
    - 25.3.3 Configuring EVPN Instances for the Overlay Network
    - 25.3.4 Configuring the Overlay for VXLAN Routing
  - 25.4 BGP Commands Supported for BGP EVPN
  - 25.5 BGP L2VPN EVPN Address Family
  - 25.6 Configuring BGP EVPN Route Filters
  - 25.7 Configuring BGP EVPN Route Maps
  - 25.8 Creating an EVPN Instance
  - 25.9 Configuring an EVPN Instance
  - 25.10 Creating a Range of EVPN Instances
  - 25.11 ARP Suppression for BGP EVPN Overview
    - 25.11.1 Configuring ARP Suppression for BGP EVPN
  - 25.12 Displaying BGP EVPN Information
- 26 BGP EVPN Multihoming
  - 26.1 BGP EVPN Multihoming Overview
  - 26.2 BGP EVPN Multihoming Configuration
  - 26.3 Ethernet Segments
  - 26.4 Unique Identifiers Assignment for Ethernet Segment LAGs
  - 26.5 Ethernet Segment Configuration and Management
  - 26.6 Ethernet Segment Redundancy Mode
  - 26.7 Configuring an Ethernet Segment
  - 26.8 Aliasing and Backup Paths
  - 26.9 Fast Convergence and Mass Withdrawal
  - 26.10 Designated Forwarder
  - 26.11 Split Horizon
  - 26.12 Local Bias
  - 26.13 Protocol Extension
  - 26.14 Ethernet Segment Routes (Type 4)
  - 26.15 Ethernet Auto Discovery Route (Type 1)
  - 26.16 Advertising and Learning Multihomed MAC Addresses and Snooped ARP Entries
  - 26.17 BGP EVPN Multihoming Configuration Example
  - 26.18 Configuring BGP EVPN Multihoming for a CE Device
  - 26.19 Displaying BGP EVPN Multihoming Information
27 Protected Port
- 27.1 Protected Port Overview
- 27.2 Configuring Protected Port

Did you find what you were looking for?