Cara Configurasi Extreme.........

Setelah beberapa minggu yang lalu mengikut seminar tentang Extreme di tambah dengan beberapa tutorial mengenai produk dari Extreme Network;

Sepengetahuan saya tentang Switch dari pabrikan Extreme Network ;



Hardware
BlackDiamond : Chassis-based high-port density switches for 
               Carrier-Ethernet service providers and enterprise 
               core
Summit       : Standalone switches from L2 100Mbps to L3 10Gig 
               top-of-rack datacenter switches.
ReachNXT     : Port Extender - Manageable by an access switch via 
               XOS
SummitWM     : Wireless controllers
Altitude     : Wireless Access Points
Sentriant NG : Intrusion Protection System (IPS)
Sentriant AG : Network Access Controller (NAC)


Software
ExtremeWare(VxWorks based) = first generation of Extreme networks 
             operating system
ExtremeXOS = 2nd Generation OS based on Linux kernel and BusyBox
EPICenter  = Network Management Tool

Configuration

Switch CLI prompt is driven from SNMP host name value

Space bar to go to BootROM: for return to factory default configuration: config none

Extreme FDB = Forwarding Database for MAC addresses - 300 Sec 

              Aging timer per MAC

IP FDB (L3) for IP forwarding   

   show iparp 

    show fdb 

    create fdbentry 

    delete fdbentry 

    disable learning 

    enable learning

# configure ports 1 vlan accounting unlimited-learnings 

# configure ports 1 vlan accounting learning-limit 3 (use aging timer also) (only for dynamic entries)

Lock-learning (sticky mac)  

# configure ports 1 vlan VLAN1 lock-learning  

# configure ports 1 vlan VLAN1 unlock-learning 

    show vlan default security

ELSM (Extreme Link Status monitoring) 

gets link status from other-end 

     enable elsm ports 

    disable elsm ports 

    configure elsm ports 

    clear elsm ports 

VLANs

1. Port-based
2. 802.1Q Tagged VLAN
3. Protocol-based VLAN 

        create vlan vlan_name 

        delete vlan vlan_name 

        configure vlan vlan_name add ports 

        configure vlan vlan_name delete ports 

        disable vlan vlan_name 

        enable vlan vlan_name 

        configure vlan vlan_name tag  

        configure vlan default delete port 7 

        configure vlan ENGINEERING add port 7 untagged 

        configure vlan ENGINEERING add ports 2,3 tagged 

        show vlan ENGINEERING  

     BPDU –> vlan0

Port Sharing (Aggregation) LAG 

     enable sharing 1 grouping 1-4 algorithm address-based lacp 

     show port sharing

Port Settings

   enable lldp port all 

   show ports configuration no-refresh 

   enable jumbo-frame ports all 

   show vlan VLAN1 security

spanning-tree is disabled by default

EMI-STP Encapsulation - Extreme Multi Instance Spanning Tree - VST+ additional header

EAPS - Ethernet Automatic Protection Switching (Ring)

• Ring Topology
• L2 Protocol - Multicast MAC
• EAPS version 2 (advanced feature - EAPS shared port for preventing superloop)
• 50 ms failover
• Device Roles: Master node, Transit nodes
• Primary/secondary port on each switch
• Master blocks its secondary port
• Control VLAN and Protected VLAN (one Control VLAN per EAPS domain)
• EAPS flush FDB when there's a topology change

 create vlan control_vlan_name  

   configure vlan control_vlan_name tag vlan_tag  

   configure vlan control_vlan_name add port tagged 

        create eaps  

        configure eaps mode master|transit 

        configure eaps primary port  

        configure eaps secondary port  

        configure eaps add control vlan control_vlan_name 

        configure eaps add protect vlan  

        enable eaps 

        enable eaps  

        configure eaps fast-convergence [off|on] -> additional 250ms 

     configure eaps name failtime expiry-action open secondary-port > by default sends alert!

EAPS with a Shared Port

• Configure partner
• Configure controller port
• link-id must be same on both switches

SummitStack

• Should have same image: 

     download image slot

• 40Gbps full duplex capacity per switch
• MAX: 8 devices 

     enable stacking 

        show stacking 

        show stacking configuration 

        configure stacking easy-setup

IP Routing

• By default is disabled 

    enable ipforwarding 

    configure iproute add x.x.x.x/x y.y.y.y 

    show ipconfig

• In new vlan ip forwarding might be disabled make sure to check. 

    show iproute 

    show ipstats

• icmp is enabled by default

OSPF

    enable ipforwarding 

    configure ospf routerid 1.1.1.1 

    enable loopback vlanname (if you want to have loopback) 

    configure ospf address VLAN1 area 0.0.0.0 

    configure ospf address VLAN2 area 0.0.0.0 

    enable ospf 

    show ospf 

    show ospf area 0.0.0.0 

    show ospf neighbors 

    show ospf lsdb

• Redistribution is disabled and is configurable by policy files.
• Core license required for OSPF DR/BDR function.
• on edge / advanced edge license: we can not have DRs so priority:0

ESRP

Extreme Standby Routing Protocol - ESRP is extreme protocol for redundancy something like VRRP

QOS

• No much QOS support
• Traffic shaping is called metering
• 8 queue per interface
• Queue 1 and 8 are used by default (2q)

Config port-channel LACP Laod balancing dan redudance di Cisco

Kali ini saya coba berbagi pengetahuan dan semoga ini bisa bermanfaat bagi kita semua, dalam kesempatan ini saya coba menjelaskan cara-cara pembuatan port-channel lacp load balancing dan redudance

Apa sih itu LACP ?
LACP adalah kepanjangan dari Link Aggregation Control Protocol yang inti dari artinya adalah penggabungan beberapa port menjadi satu

Lalu apa itu Port-channel ?
Port-channel adalah Ethernet Channel of interfaces kalau load balancing ?

load balancing adalah membuat seimbang, dimana dalam kasus ini kinerja dari port-nya balance
Lebih detail tentang teori baca aja deh di sini http://en.wikipedia.org/wiki/Link_aggregation

Lalu keuntungannya apa ?
Apa aja boleh… ^,^

Dari pada teori mulu mendingan kita praktek langsung aja ya..
Sekarang kita mulai configurasinya, tahap awal kita configurasi interface-nya, mari kita aktifin interface

Port-channel-nya :

     SW-Backbone-2#configure terminal
     SW-Backbone-2(config)#interface port-channel 1
     SW-Backbone-2(config-if)#description ke-SW-Backbone-1
     SW-Backbone-2(config-if)#switchport trunk encapsulation dot1q
     SW-Backbone-2(config-if)#switchport mode trunk
     SW-Backbone-2(config-if)#switchport trunk allowed vlan 90,104,225
     SW-Backbone-2(config-if)#CTRL+Z

lanjut aktifin load balance redudance-nya
               
     SW-Backbone-2(config)#port-channel load-balance src-dst-ip

Ok..ini hasil dari configurasi di atas

     SW-Backbone-2#show running-config interface po1

     Building configuration…
      Current configuration : 134 bytes
     !
     interface Port-channel1
     description ke-SW-Backbone-1
     switchport trunk encapsulation dot1q
     switchport trunk allowed vlan 90,104,225
     switchport mode trunk
     end

     SW-Backbone-2#sh ru
     Building configuration…
     Current configuration : 6063 bytes
     !
     ! Last configuration change at 20:14:18 JKT Fri Dec 23 2011 by evan
     ! NVRAM config last updated at 19:32:28 JKT Fri Dec 23 2011 by evan
     !
     version 12.2
     no service pad
     service tcp-keepalives-in
     service timestamps debug datetime msec localtime show-timezone
     service timestamps log datetime msec localtime show-timezone
     service password-encryption
     service unsupported-transceiver
     !
     hostname SW-Backbone-2
     !
     port-channel load-balance src-dst-ip
     !

lanjutttt… Sekarang kita alokasikan 4 port untuk kita gabungkan :

     SW-Backbone-2#configure terminal
     SW-Backbone-2(config)#in gi0/25
     SW-Backbone-2(config)#description EthCnl-Po1
     SW-Backbone-2(config-if)#switchport trunk encapsulation dot1q
     SW-Backbone-2(config-if)#switchport mode trunk
     SW-Backbone-2(config-if)#channel-group 1 mode active
     SW-Backbone-2(config-if)#CTRL+Z
     SW-Backbone-2#configure terminal
     SW-Backbone-2(config)#in gi0/26
     SW-Backbone-2(config)#description EthCnl-Po1
     SW-Backbone-2(config-if)#switchport trunk encapsulation dot1q
     SW-Backbone-2(config-if)#switchport mode trunk
     SW-Backbone-2(config-if)#channel-group 1 mode active
     SW-Backbone-2(config-if)#CTRL+Z
     SW-Backbone-2#configure terminal
     SW-Backbone-2(config)#in gi0/27
     SW-Backbone-2(config)#description EthCnl-Po1
     SW-Backbone-2(config-if)#switchport trunk encapsulation dot1q
     SW-Backbone-2(config-if)#switchport mode trunk
     SW-Backbone-2(config-if)#channel-group 1 mode active
     SW-Backbone-2(config-if)#CTRL+Z
     SW-Backbone-2#configure terminal
     SW-Backbone-2(config)#in gi0/27
     SW-Backbone-2(config)#description EthCnl-Po1
     SW-Backbone-2(config-if)#switchport trunk encapsulation dot1q
     SW-Backbone-2(config-if)#switchport mode trunk
     SW-Backbone-2(config-if)#channel-group 1 mode active
     SW-Backbone-2(config-if)#CTRL+Z

Di sini saya tidak memasukkan Allow Vlan ( filter vlan ) pada port yg kita gabung, melainkan cukup pada interface Port-channel-nya saja

Setelah di connectin semua maka hasilnya seperti ini :

     SW-Backbone-2#show int status
     Port      Name               Status       Vlan       Duplex  Speed Type
     ———- CUT —————-
     Gi0/25    EthCnl-Po1         connected    trunk      a-full a-1000 1000BaseSX SFP
     Gi0/26    EthCnl-Po1         connected    trunk      a-full a-1000 1000BaseSX SFP
     Gi0/27    EthCnl-Po1         connected    trunk      a-full a-1000 1000BaseSX SFP
     Gi0/28    EthCnl-Po1         connected    trunk      a-full a-1000 1000BaseSX SFP
     Po1       ke-SW-Backbone-1   connected    trunk      a-full a-1000
    
     SW-Backbone-2#sh ru in gi0/25
     Building configuration…
     Current configuration : 151 bytes
     !
     interface GigabitEthernet0/25
     description EthCnl-Po1
     switchport trunk encapsulation dot1q
     switchport trunk allowed vlan 90,104,225
     switchport mode trunk
     channel-group 1 mode active
     end

     SW-Backbone-2#sh ru in gi0/26
     Building configuration…
     Current configuration : 151 bytes
     !
     interface GigabitEthernet0/26
     description EthCnl-Po1
     switchport trunk encapsulation dot1q
     switchport trunk allowed vlan 90,104,225
     switchport mode trunk
     channel-group 1 mode active
     end

     SW-Backbone-2#sh ru in gi0/27
     Building configuration…
     Current configuration : 151 bytes
     !
     interface GigabitEthernet0/27
     description EthCnl-Po1
     switchport trunk encapsulation dot1q
     switchport trunk allowed vlan 90,104,225
     switchport mode trunk
     channel-group 1 mode active
     end
  
     SW-Backbone-2#sh ru in gi0/28
     Building configuration…
     Current configuration : 151 bytes
     !
     interface GigabitEthernet0/28
     description EthCnl-Po1
     switchport trunk encapsulation dot1q
     switchport trunk allowed vlan 90,104,225
     switchport mode trunk
     channel-group 1 mode active
     end

Sekarang kita liat Speed-nya pada Interface Port-channel-nya sudah sebesar 4Gb ( MTU 1500 bytes, BW 4000000 Kbit, DLY 10 usec, ), dan di sini juga terlihat port berapa aja yg kita gabung ( Members in this channel: Gi0/25 Gi0/26 Gi0/27 Gi0/28 )

     SSW-Backbone-2#show interfaces Po1
     Port-channel1 is up, line protocol is up (connected)
     Hardware is EtherChannel, address is 0012.0161.1719 (bia 0012.0161.1719)
     Description: ke-SW-Backbone-1
     MTU 1500 bytes, BW 4000000 Kbit, DLY 10 usec,
     reliability 255/255, txload 101/255, rxload 26/255
     Encapsulation ARPA, loopback not set
     Keepalive set (10 sec)
     Full-duplex, 1000Mb/s, link type is auto, media type is unknown
     input flow-control is off, output flow-control is unsupported
     Members in this channel: Gi0/25 Gi0/26 Gi0/27 Gi0/28
     ARP type: ARPA, ARP Timeout 04:00:00
     Last input 00:00:00, output 00:00:00, output hang never
     Last clearing of “show interface” counters 1w3d
     Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 0
     Queueing strategy: fifo
     Output queue: 0/40 (size/max)
     5 minute input rate 422306000 bits/sec, 182790 packets/sec
     5 minute output rate 1598643000 bits/sec, 246533 packets/sec
     124709349643 packets input, 39994852902325 bytes, 0 no buffer
     Received 15963398 broadcasts (8718778 multicasts)
     0 runts, 0 giants, 0 throttles
     778973 input errors, 5589 CRC, 0 frame, 0 overrun, 0 ignored
     0 watchdog, 8718778 multicast, 0 pause input
     0 input packets with dribble condition detected
     165597102019 packets output, 132050835252807 bytes, 0 underruns
     0 output errors, 0 collisions, 0 interface resets
     0 babbles, 0 late collision, 0 deferred
     0 lost carrier, 0 no carrier, 0 PAUSE output
     0 output buffer failures, 0 output buffers swapped out

     SW-Backbone-2#show interfaces gi0/25
     GigabitEthernet0/25 is up, line protocol is up (connected)
     Hardware is Gigabit Ethernet, address is 0012.0161.1719 (bia 0012.0161.1719)
     Description: EthCnl-Po1
     MTU 1500 bytes, BW 1000000 Kbit, DLY 10 usec,
     reliability 255/255, txload 103/255, rxload 29/255
     Encapsulation ARPA, loopback not set
     Keepalive not set
     Full-duplex, 1000Mb/s, link type is auto, media type is 1000BaseSX SFP
     input flow-control is off, output flow-control is unsupported
     ARP type: ARPA, ARP Timeout 04:00:00
     Last input 00:00:00, output 00:00:22, output hang never
     Last clearing of “show interface” counters 1w3d
     Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 0
     Queueing strategy: fifo
     Output queue: 0/40 (size/max)
     5 minute input rate 116336000 bits/sec, 48788 packets/sec
     5 minute output rate 406893000 bits/sec, 63369 packets/sec
     33031920919 packets input, 11535121696360 bytes, 0 no buffer
     Received 8751836 broadcasts (8484111 multicasts)
     0 runts, 0 giants, 0 throttles
     779637 input errors, 5602 CRC, 0 frame, 0 overrun, 0 ignored
     0 watchdog, 8484111 multicast, 0 pause input
     0 input packets with dribble condition detected
     42145656820 packets output, 33357023523376 bytes, 0 underruns
     0 output errors, 0 collisions, 0 interface resets
     0 babbles, 0 late collision, 0 deferred
     0 lost carrier, 0 no carrier, 0 PAUSE output
     0 output buffer failures, 0 output buffers swapped out

Kelar deh… gimana ? ada pertanyaan ?

VLAN & LACP configuration on extreme switches

Using serial console connect the switch and assign ip address for the netmanagement port

Then do a telnet to switch ip
default user id is "Admin" and password is null (empty password)

Configuring Vlan (Vlan1)

1 >> create vlan vlan1                                          #vlan name is vlan1
2>> configure vlan1 tag 20                                  #vlan id is 20 here
3>>configure vlan1 add ports 20-25,27               #ports starting from 20 to 25 and 27 are added to
                                                                               vlan1

Adding vlan tag to the vlan ports

4>>configure vlan1 add ports 20-25,27 tagged    #ports starting from 20 to 25 and 27 are added to
                                                                               vlan1 and all these ports are having vlan id 20

5 >> show vlan
6>> show vlan1

Configuring Link aggregation on ports 22,23 ( which is already part of vlan1)

1>> enable sharing 22 grouping 22,23 lacp          #lacp/dynamic are different protocol options
2>> show sharing