Ethernet Routing Switches Stackable

1. Ethernet Routing SwitchesStackable Version 2.0.0 Last updated: Mar 2011

2. Objectives At the end of the training, you should be able to • Understand the difference between the ERS families • Understand basic setup for ERS Switches • Know your way around Device Manager (EDM) and a little CLI • Build a small converged network solution and have some fun!

3. Agenda • Getting started • Which ERS • Standalone or Stack • Management • EDM and CLI • Configuring Management • Layer 2 – VLANs • Creating VLANS • Access or TAG • Layer 3 – Routing • IP interfaces • DHCP Relay • QoS • Roles • Typical settings • Energy Saver

4. Getting Started Ideal as: • Access Switch for Large Enterprises: high-performance Gigabit-to-the-Desktop • Aggregation (Distribution) Switch • Core Switching solution for small Enterprises • Top-of-Rack/Horizontal Stacking for the Data Centre • Where 10GbE is required today ERS 5000 Ideal as: • Access Switch for mid-to-large Enterprise • Environments with either FE or GbE connectivity at the Edge, or both • Where 10GbE Uplinks will become important ERS 4500 Ideal as: • Access Switch for Branch Office or smaller Enterprise Campus: when Fast Ethernet-only is appropriate • Low-intensity convergence deployments • Standard offering for the Small to Medium Enterprise ERS 2500

5. Workhorse solution to empower Convergence 10/100 to the Desktop Power-over-Ethernet & QoS high speed local switching & Layer 3 Routing entry-level FAST 32 Integrated Access Control 802.1X with Extensions 802.1AB auto discovery for network & devices Delivers flexibility to the Network Edge Ethernet Routing Switch 2500 Series • Enable the Converged Branch • Highly-available local Stacking & connections to the Core • Scalable, pay-as-you-grow • Comprehensive QoS & access control capabilities

6. 4 Switch options 2526T & 2526T-PWR – 24 10/100 Desktop ports, plus 2 active Uplinks, PoE option 2550T& 2550T-PWR – 48 10/100 Desktop ports, plus 2 active Uplinks, PoE option Uplink options of SFP, 1000T, or 10/100/1000T PoE available on 50% of Desktop ports – Green..! 32Gbps Stacking architecture Up to 384 10/100 ports Wire-speed local switching & integrated Stacking Features of the ERS 2500 Series • 802.3af-compliant PoE • Auto-sensing 10/100 • Auto-discovery of PoE devices • Dynamic power management • Endpoint access control • 802.1X SHSA, Guest VLAN, RADIUS Authentication • DiffServ & 802.1p Prioritisation • Traffic Marking & Re-Marking • Port Mirroring & Rate Limiting • 802.3ad Link Aggregation (6 links)

7. Hardware 26-port Switches • 2526T • 2526T-PWR 50-port Switches • 2550T • 2550T-PWR

8. Flexible Advanced Stacking Architecture • Class-leading Stacking – the ERS 2500 Series implements FAST 32 • 4Gbps of Stacking capacity per Switch & up to 32Gbps for a Stack of 8 • Scales up to 384 Ports of 10/100 Desktop plus up to 16 Ports for 10/100/1000 Combo Uplinks • Auto Unit Replacement software & configuration control • Virtual Hot Swap • Consolidated Management via a single IP Address • Low-cost Stack cabling • Pre-enabled or field-upgradeable ERS 2500 Series with FAST 32 4Gbps Stacking per Switch & up to 32Gbps Up to 8 Switches & 400 Ports Uses low-cost Cat 5E UTP for Stacking

9. Use ERS 2500s as single units • Ideal for smaller sites • Budget-friendly option Standalone Scalability from Day 1 • Units with stacking pre-enabled are available • Ready to stack immediately • No need for a stacking license Stack Enabled Getting Started Standalone or Stacking The ERS 2500 delivers 3 flexible options to meet customer needs Flexible option to move to stacking • No need to purchase additional hardware • Stacking is enabled via a software license • Grow your network when/if YOU want to Standalone Stacked

10. Ethernet Routing Switch 2500 SeriesStacking Implementation • ERS 2500s use the rear 1000BaseTX ports as stacking ports • Rear ports offer the flexibility to be used as either normal Gigabit ports or as stacking ports. • Gigabit grade (Cat5E/Cat6) RJ-45cabling is used to create the stacking ring • Stack up to 8 units high for 384 10/100 user ports and 16 Gigabit ports

11. Ethernet Routing Switch 2500 SeriesStacking Functionality and Rear Ports • “Stacking Mode” must be configured on the rear ports before switches are connected together in a stack (there is no “auto-detection”). • The Base unit must have Unit Select switch set to ON (one switch only) • Each ERS2500 switch ships with a 46cm (1.5 foot) stack cable (black Cat5E cable). • Additional cables of 1.5m (5’) and 3m (10’) are also be available for separate purchase from Avaya and are like “stack return” cables. • Customers are permitted to use their own cables and longer lengths up to 100m (at customer’s risk, not “officially” supported by GNTS).

12. Scalable solution to empower Convergence 10/100 or 10/100/1000 to the Desktop, Fixed 100FX & SFP options Power-over-Ethernet & QoS fail-safe FAST 320 high-speed local switching & Layer 3 Routing Integrated Access Control 802.1X with extensions Delivers 99.999% reliability to the Network Edge Ethernet Routing Switch 4500 Series • Enable the Converged Desktop • Comprehensive access control options • High-availability locally & to the Core • Scalable, pay-as-you-grow • Can mix FE and GE Switches in a stack 10/100/1000 & 10G Switches 10/100 Switches

13. 11 Switch options 4526FX 4526T & 4526T-PWR 4550T & 4550T-PWR 4524GT & 4524GT-PWR 4526GTX & 4526GTX-PWR 4548GT & 4548GT-PWR High density solution: 400/384 ports of 10/100 or 10/100/1000 with PoE & 10GbE options SFP & FX options 184Gbps of local switching & 40Gbps Stacking throughput per Switch Features of the ERS 4500 Series • 802.3af-compliant PoE • Auto-sensing 10/100/1000 • Auto-discovery of PoE devices • Dynamic power management • End-point access control • 802.1X plus extensions (SHMA, MHMA, Guest VLAN, etc) • Automatic Unit Replacement • Traffic Policing, DiffServ & 802.1p Prioritisation • IP Filtering, Policies, & Offset • Redundant Power option

14. Hardware Fast Ethernet Switches • 4526FX • 4526T & 4526T-PWR • 4550T & 4550T-PWR Gigabit Ethernet Switches • 4524GT & 4524GT-PWR • 4526GTX & 4526GTX-PWR • 4548GT & 4548GT-PWR

15. Grow as you Stack from 1 to 8 units as one reliable managed entity Flexible Advanced Stacking Technology • Evolution of redundant self-healing stacking first introduced in 1998 • Support for up to 8 units in a stack • Can mix any ERS4500 switch in the stack • Maximum 400 10/100 ports in a stack • Maximum 384 10/100/1000 ports in a stack • Up to 32 SFP GBICs in a stack for uplinks • Built-in Hi-Stack stacking ports come standard on the switch • Stacking cable (46cm / 18”) included with each switch • Loopback stacking cable for resilient stacking must be purchased separately • True resilient stack IP Management • Load-balancing and fail-over protection with Distributed MLT and 802.3ad • Automatic Unit Replacement Functionality to automatically reconfigure any replaced unit Return Cable creates resilient configuration

16. Agenda Getting Started Management EDM and CLI Configuring management L2- VLANs L3 - Routing QOS Energy Saver

17. Enterprise Device Manager - EDMFeature Overview EDM is a new embedded web based management system. EDM uses Web2.0 and J2EE framework – more up to date Improved workflows, selections and GUI configuration completeness EDM REPLACES both JDM and WebUI graphical configuration and element interfaces. Integrated into the agent code of the switch, no longer requiring the right version of JDM to support chosen platforms. HTTP and HTTPS browser support Tested and supported by: IE 7.0 and FireFox 3.0 and above. New on ERS 2500 4.3 / 4500 v5.4 / 5x00 v6.2

18. Enterprise Device Manager - EDM Main Screens EDM Landing Page – Switch Summary Navigation Tree – “Configuration” folder already open with sub folders

19. Enterprise Device Manager - EDM Main Screens - II EDM – Device Physical View tab can launch pull-down menu off ports

20. Enterprise Device Manager - EDM Main Screens - III EDM – Edit > Chassis > Chassis General switch system information

21. Enterprise Device Manager - EDM Main Screens - IV EDM – Configuration > VLAN > VLANs VLAN creation – white cells can be edited

22. Enterprise Device Manager - EDM Main Screens -V EDM – QoS > QoS Devices NOTE: EDM opens new selections in new Tabs in the main view

23. Enterprise Device Manager - EDM EDM Help Files The help files for EDM are not integrated into the switch agent code and are downloaded to the switch when required by the agent. Help file must be located on TFTP server or USB drive. EDM Help file configuration in CLI CLI commands: edm help-file-path <path> [tftp address <ip>] show edm help-file-path Set Help file path (config) (config)# edm help-file-path /help tftp address 10.16.5.222 Show Help file path (config)# show edm help-file-path TFTP Server Address 10.16.5.222/help

24. Enterprise Device Manager - EDM EDM Help file configuration - EDM EDM – Help File location configuration EDM uses TFTP to access Help File documents Setup the help files location on TFTP server Install the help files one directory below the root on the TFTP server

25. Enterprise Device Manager - EDM HELP Screens EDM – MultiLink Trunks Help (example) NOTE: when you click on Help – the related documentation is TFTP’d to the switch. Help Sub-menu on setting up MLTs

26. Command Line Interface (CLI)Feature overview Serial Console 9600 No parity No flow control Straight cable Ctrl Y to start Telnet SSH Requires ‘secure’ agent image i.e. 2500_431025s.img

27. Show running-config Enhancements Show and Copy commands - CLI The default behavior of the ‘show running-config’ command has changed: it is now displaying only the CLI commands with non-default parameters. The new CLI syntax for ‘show running-module’ is: # show running-config [verbose][module {[802.1ab] [aaur] [adac] [arp-inspection] [aur] [banner] [core] [dhcp-relay] [dhcp-snooping] [eap] [interface] [ip] [ip-source-guard] [ipmgr] [ipv6] [l3] [l3-protocols] [lacp] [logging] [mac-security] [mlt] [poe] [port-mirroring] [qos] [rate-limit] [rmon] [rtc] [snmp] [ssh] [ssl] [stack] [stkmon] [stp] [vlacp] [vlan]}] The new CLI syntax for ‘copy running-config’ is: # copy running-config tftp [verbose] [module {[802.1ab] [aaur] [adac] [arp-inspection] [aur] [banner] [core] [dhcp-relay] [dhcp-snooping] [eap] [interface] [ip] [ip-source-guard] [ipmgr] [ipv6] [l3] [l3-protocols] [lacp] [logging] [mac-security] [mlt] [poe] [port-mirroring] [qos] [rate-limit] [rmon] [rtc] [snmp] [ssh] [ssl] [stack] [stkmon] [stp] [vlacp] [vlan]}] [address <XXX.XXX.XXX.XXX>] filename <WORD> Note: optional parameters shown in RED

28. Show running-config Enhancements Usage examples - CLI Display the non-verbose configuration of a switch/stack: # show running-config ! Embedded ASCII Configuration Generator Script ! Model = Ethernet Routing Switch 2526T (Stack Enabled) ! Software version = v4.3.0.073 ! ! Displaying only parameters different to default !================================================ enable configure terminal ! ! *** CORE *** ! ! ! *** SNMP *** ! ! ! *** IP *** ! ! … ! ! *** STACK MONITOR *** ! NOTE: the output above is for a switch/stack reset to default Copy the non-verbose configuration of a switch/stack to a TFTP server: # copy running-config tftp address 10.100.100.1 filename stack.cfg

29. Show running-config Enhancements Usage examples – CLI (cont) Display the non-verbose configuration for the specified applications: #show running-config module mlt stp vlan ! Embedded ASCII Configuration Generator Script ! Model = Ethernet Routing Switch 2526T (Stack Enabled) ! Software version = v4.3.0.073 ! ! Displaying only parameters different to default !================================================ enable configure terminal ! ! *** STP (Phase 1) *** ! ! ! *** VLAN *** ! ! ! *** MLT (Phase 1) *** ! ! ! *** STP (Phase 2) *** ! ! ! *** VLAN Phase 2*** ! ! ! *** MLT (Phase 2) *** ! NOTE: the output above is for a switch/stack reset to default Copy non-verbose configuration for the specified applications to a TFTP server: #copy running-config tftp module mlt stp vlan address 10.100.100.1 filename mlt_stp_vlan.cfg

30. Display the verbose configuration of a switch/stack: # show running-config verbose ! Embedded ASCII Configuration Generator Script ! Model = Ethernet Routing Switch 2526T (Stack Enabled) ! Software version = v4.3.0.073 ! ! Displaying all switch parameters !==================================================== enable configure terminal ! ! *** CORE *** ! autosave enable mac-address-table aging-time 300 autotopology sntp server primary address 0.0.0.0 sntp server secondary address 0.0.0.0 … ! ! *** STACK MONITOR *** ! no stack-monitor enable stack-monitor stack-size 2 stack-monitor trap-interval 60 Copy the verbose configuration of a switch/stack to a TFTP server: # copy running-config tftp verbose address 10.100.100.1 filename stack_ver.cfg Show running-config Enhancements Usage examples – CLI (cont)

31. Display the verbose configuration for the specified applications: # show running-config verbose module mlt stp vlan ! Embedded ASCII Configuration Generator Script ! Model = Ethernet Routing Switch 2526T (Stack Enabled) ! Software version = v4.3.0.073 ! ! Displaying all switch parameters !==================================================== enable configure terminal ! ! *** STP (Phase 1) *** ! spanning-tree cost-calc-mode dot1d spanning-tree port-mode auto spanning-tree priority 8000 spanning-tree hello-time 2 spanning-tree forward-time 15 max-age 20 no spanning-tree 802dot1d-port-compliance enable ! ! *** VLAN *** ! vlan ports 1/1-26,2/1-26 tagging unTagAll filter-untagged-frame disable filter- unregistered-frames enable priority 0 vlan configcontrol flexible vlan members 1 1/1-26,2/1-26 vlan ports 1/1-26,2/1-26 pvid 1 vlan igmp unknown-mcast-no-flood disable vlan igmp 1 snooping disable … Show running-config Enhancements Usage examples – CLI (cont)

32. … vlan igmp 1 proxy disable robust-value 2 query-interval 125 vlan configcontrol strict auto-pvid ! ! *** MLT (Phase 1) *** ! no mlt mlt 1 name "Trunk #1" disable member NONE mlt 1 learning normal mlt 1 loadbalance basic mlt 2 name "Trunk #2" disable member NONE mlt 2 learning normal mlt 2 loadbalance basic mlt 3 name "Trunk #3" disable member NONE mlt 3 learning normal mlt 3 loadbalance basic mlt 4 name "Trunk #4" disable member NONE mlt 4 learning normal mlt 4 loadbalance basic mlt 5 name "Trunk #5" disable member NONE mlt 5 learning normal mlt 5 loadbalance basic mlt 6 name "Trunk #6" disable member NONE mlt 6 learning normal mlt 6 loadbalance basic ! … Show running-config Enhancements Usage examples – CLI (cont)

33. … ! *** STP (Phase 2) *** ! spanning-tree port-mode normal interface FastEthernet ALL spanning-tree port 1/1-26 learning normal spanning-tree port 2/1-26 learning normal spanning-tree port 1/1-24 cost 10 priority 80 spanning-tree port 1/25-26 cost 1 priority 80 spanning-tree port 2/1-24 cost 10 priority 80 spanning-tree port 2/25-26 cost 1 priority 80 spanning-tree bpdu-filtering port 1/1-26 timeout 120 no spanning-tree bpdu-filtering port 1/1-26 enable spanning-tree bpdu-filtering port 2/1-26 timeout 120 no spanning-tree bpdu-filtering port 2/1-26 enable exit ! ! *** VLAN Phase 2*** ! vlan mgmt 1 ! ! *** MLT (Phase 2) *** ! Copy the verbose configuration for the specified applications to a TFTP server #copy running-config tftp verbose module mlt stp vlan address 10.100.100.1 filename mlt_stp_vlan_ver.cfg Show running-config Enhancements Usage examples – CLI (cont)

34. Agenda Getting Started Management EDM and CLI Configuring management L2- VLANs L3 - Routing QOS Energy Saver

35. Initial Switch/Stack SetupQuick Start ERS2500> enable ERS2500# install Welcome to the 2550T-PWR setup utility. You will be requested for information to initially configure for the switch. When finished the information will be applied and stored in the switch NVRAM. Once the basic parameters are configured, additional configuration can proceed using other management interfaces. Press ^C to abort at any time. ############################################################################### Please provide the in-band IP Address[10.16.5.4]: Please provide the in-band sub-net mask[255.255.255.0]: Please provide the Default Gateway[10.16.5.254]: Please provide the Read-Only Community String[**********]: Please provide the Read-Write Community String[**********]: Please provide the Quick Start VLAN <1-4094> [5]: Please provide the in-band IPV6 Address/Prefix_length[::/0]: Please provide the in-band IPV6 Default Gateway[::]: ############################################################################### Basic switch parameters have now been configured and saved. ###############################################################################

36. Initial Switch/Stack Setup Manual via CLI ERS2500-Rack3# show running-config ! Embedded ASCII Configuration Generator Script ! Model = Ethernet Routing Switch 2550T-PWR ! Software version = v4.3.1.025 ! ! Displaying all switch parameters !==================================================== enable configure terminal ! ! *** IP *** ! ip default-gateway 10.16.5.254 ip address stack 0.0.0.0 ip address switch 10.16.5.4 ip address netmask 255.255.255.0 ! ! *** VLAN *** ! vlan mgmt 5

37. Extended IP ManagerFeature Overview IP Manager enables administrators to restrict access to network services such as web, snmp and telnet (for IPv4 & IPv6). The IP Manager function which controls management connectivity to the switch has been extended to support IPv6 and SSH in ERS2500 release v4.3. Example section of IP Manager in ACG: ! *** IP Manager *** ! telnet-access enable snmp-server enable web-server enablessh-server enable ipmgr telnet ipmgr snmp ipmgr webipmgr ssh ipmgr source-ip 1 0.0.0.0 mask 0.0.0.0 ipmgr source-ip 2 255.255.255.255 mask 255.255.255.255 … ipmgr source-ip 51 ::/0 ipmgr source-ip 52 ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff/128 … NOTE: new options are inRED (‘s’ agent image must be loaded to support ssl)

38. Agenda Getting Started Management L2- VLANs Creating Vlans Access or Tag L3 - Routing QOS Energy Saver

39. VLAN Configuration Control* *Note: Applies to Untag All and Tag PVID Only ports

40. Vlan Configuration Control • Automatic :- • VLAN Membership: Automatically adds an untagged port to a new VLAN and automatically removes it from any previous VLAN membership. • PVID of the port: is automatically changed to the VID of the VLAN it joins. • AutoPVID :- • When an untagged port is added to a new VLAN, the port is added to the new VLAN and the PVID is assigned to the new VID without removing it from any previous VLAN memberships. Using this option, an untagged port can have membership in multiple VLANs

41. Vlan Configuration Control • Flexible:- • Similar to AutoPVID. When this option is used, an untagged port can belong to an unlimited number of VLANs. • Any new additions of an untagged port to a new VLAN does not changethe PVID of that port • Strict:- • The factory default, this selection restricts the addition of an untagged port to a VLAN if it is already a member of another VLAN. • To add an untagged port to a new VLAN, a port must be remove from all other VLANs of which it is a member before adding it to the new VLAN. The PVID of the port is changed to the new VID to which it was added.

42. Ethernet Ports modes

43. L2 - VLANsChanging VlanConfigControl

44. L2 - VLANsCreate VLAN

45. L2 - VLANsCreate VLAN

46. L2 - VLANsCreate VLAN

47. L2 - VLANsRemoving Ports

48. L2 - VLANsAdding Ports

49. L2 - VLANsAdding Ports

50. L2 - VLANsApply Changes