config vlan ans spanning tree in 8300

Nortel Ethernet Routing Switch 8300

Configuration — VLANs andSpanning TreeRelease: 4.2Document Revision: 02.01

www.nortel.com

NN46200-516.

Nortel Ethernet Routing Switch 8300Release: 4.2Publication: NN46200-516Document release date: 30 March 2009

Copyright © 2009 Nortel NetworksAll Rights Reserved.

LEGAL NOTICE

While the information in this document is believed to be accurate and reliable, except as otherwise expresslyagreed to in writing NORTEL PROVIDES THIS DOCUMENT "AS IS" WITHOUT WARRANTY OR CONDITION OFANY KIND, EITHER EXPRESS OR IMPLIED. The information and/or products described in this document aresubject to change without notice.

THE SOFTWARE DESCRIBED IN THIS DOCUMENT IS FURNISHED UNDER A LICENSE AGREEMENT ANDMAY BE USED ONLY IN ACCORDANCE WITH THE TERMS OF THAT LICENSE.

Nortel, the Nortel logo, and the Globemark are trademarks of Nortel Networks.

All other trademarks are the property of their respective owners.

.

3.

ContentsSoftware license 9

New in this release 13Features 13

IP spoof detection 13STP BPDU filtering 13

Other changes 14Customer service 14

Introduction 15

VLAN and spanning tree fundamentals 17VLAN overview 17

Port-based VLANs 18Policy-based VLANs 19Independent VLAN Learning 22VLAN tagging and port types 23VLAN virtual router interfaces 25VLAN implementation on the Ethernet Routing Switch 8300 25VLAN configuration rules 26VLAN feature support and scaling 27Network Load Balancing Support 27VLAN MAC-layer bridging and filtering 29IP spoofing prevention within a VLAN 30

Spanning tree overview 30Spanning Tree Protocol 30RSTP and MSTP 36

VLAN configuration using Device Manager 43Viewing defined VLANs using Device Manager 43Port-based VLANs configuration using Device Manager 45

Creating a port-based VLAN using Device Manager 45Configuring an IP address for a VLAN using Device Manager 47Configuring port-based VLANs using Device Manager 48

Viewing IP spoof detection information using Device Manager 49Job aid: Spoof detect dialog box fields 50

Nortel Ethernet Routing Switch 8300Configuration — VLANs and Spanning Tree

NN46200-516 02.0130 March 2009

Copyright © 2009 Nortel Networks

.

4

Configuring policy-based VLANs using Device Manager 50Creating a protocol-based VLAN using Device Manager 50Creating user-defined, protocol-based VLANs using Device Manager 51

Configuring advanced VLAN operations using Device Manager 53Configuring advanced VLAN features using Device Manager 53Configuring VLAN forwarding filters using Device Manager 56Changing VLAN port membership using Device Manager 57Configuring MAC address autolearning on a VLAN using Device Manager 58Modifying autolearned MAC addresses using Device Manager 59

Managing VLAN bridging using Device Manager 60Configuring the forwarding database timeout using Device Manager 60Viewing the forwarding database using Device Manager 61Clearing learned MAC addresses by VLAN using Device Manager 62Clearing learned MAC addresses for all VLANs by port using Device

Manager 63Configuring static forwarding using Device Manager 63Configuring a MAC-layer bridge filter using Device Manager 65Configuring Layer 2 multicast MAC filtering using Device Manager 66

VLAN configuration using the CLI 69Job aid: Roadmap of VLAN CLI commands 69VLAN configuration and management using the CLI 73

Creating a port-based VLAN using the CLI 74Creating a protocol-based VLAN using the CLI 75Assigning an IP address to a VLAN using the CLI 77Deleting an IP address from a VLAN using the CLI 78Viewing basic VLAN configuration using the CLI 78Performing a general VLAN action using the CLI 79Viewing general VLAN information using the CLI 80Adding a multilink trunk to a VLAN using the CLI 80Configuring VLAN forwarding database entries using the CLI 81Configuring VLAN forwarding database filters using the CLI 82Adding VLAN static forwarding database members using the CLI 83Viewing VLAN forwarding database information using the CLI 84Viewing forwarding database filters using the CLI 84Adding ports to a VLAN using the CLI 85Removing ports from a VLAN using the CLI 86Configuring NLB using the CLI 86Viewing VLAN port member status using the CLI 88Configuring a VLAN name using the CLI 89Deleting a VLAN using the CLI 89Enabling VLAN tagging on a port using the CLI 90Assigning untagged frames to the default VLAN using the CLI 90Viewing advanced VLAN information using the CLI 91


NN46200-516 02.0130 March 2009


.

5

IP spoof detection configuration using the CLI 91Configuring static multicast MAC entries using the CLI 93Viewing VLAN static MAC information using the CLI 95Viewing VLAN manual edit MAC information using the CLI 95Viewing VLAN autolearn information using the CLI 96Viewing VLAN ARP information using the CLI 96Viewing VLAN IGMP information using the CLI 97Viewing VLAN static multicast information using the CLI 97Viewing the PID range for a user-defined, protocol-based VLAN using the

CLI 97

VLAN configuration using the NNCLI 99Job aid: Roadmap of VLAN NNCLI commands 99VLAN configuration and management using the NNCLI 102

Creating a port-based VLAN using the NNCLI 103Creating a protocol-based VLAN using the NNCLI 104Creating a user-defined, protocol-based VLAN using the NNCLI 106Assigning an IP address to a VLAN using the NNCLI 107Deleting an IP address from a VLAN using the CLI 108Performing a general VLAN action using the NNCLI 108Adding a multilink trunk to a VLAN using the NNCLI 109Viewing general VLAN information using the NNCLI 110Configuring VLAN forwarding database entries using the NNCLI 110Deleting VLAN forwarding database entries using the NNCLI 111Configuring VLAN forwarding database filters using the NNCLI 112Deleting VLAN forwarding database filters using the NNCLI 113Adding VLAN static forwarding database members using the NNCLI 114Removing VLAN static forwarding database members using the NNCLI 114Viewing VLAN forwarding database information using the NNCLI 115Viewing VLAN forwarding database filters using the NNCLI 115Adding ports to a VLAN using the NNCLI 116Removing ports from a VLAN using the NNCLI 117Configuring NLB using the NNCLI 118Viewing VLAN port information using the NNCLI 120Configuring a VLAN name using the NNCLI 121Deleting a VLAN using the NNCLI 121Configuring VLAN tagging using the NNCLI 122Viewing specific VLAN information using the NNCLI 122Viewing advanced VLAN information using the NNCLI 123IP spoof detection configuration using the NNCLI 123Configuring static multicast MAC entries using the NNCLI 126Removing VLAN static multicast MAC entries using the NNCLI 128Viewing VLAN static multicast information using the NNCLI 128Viewing VLAN IP information using the NNCLI 129


NN46200-516 02.0130 March 2009


.

6

Viewing VLAN static MAC information using the NNCLI 129Viewing VLAN manual edit MAC information using the NNCLI 130Viewing VLAN IGMP information using the NNCLI 130Viewing VLAN autolearn information using the NNCLI 131Viewing the PID range for a user-defined VLAN using the NNCLI 131

Spanning Tree configuration using Device Manager 133Configuring the STP mode using Device Manager 133Configuring STP BPDU Filtering using Device Manager 135Configuring Spanning Tree Groups using Device Manager 136

Configuring STG global settings using Device Manager 136Creating an STG using Device Manager 137Editing an STG using Device Manager 139Deleting an STG using Device Manager 140Adding ports to an STG using Device Manager 141Viewing STG status using Device Manager 141Enabling or disabling STG on a port using Device Manager 143Viewing STG ports using Device Manager 144Configuring topology change detection using Device Manager 147

RSTP Configuration using Device Manager 148Configuring global RSTP using Device Manager 148Configuring port RSTP parameters using Device Manager 150Viewing port RSTP status using Device Manager 153

MSTP configuration using Device Manager 154Configuring global MSTP parameters using Device Manager 154Configuring port CIST for MSTP using Device Manager 158Configuring MSTI bridges for MSTP using Device Manager 161Configuring MSTI ports for MSTP using Device Manager 162

Spanning Tree configuration using the CLI 165Job aid 165Configuring the STP mode using the CLI 169STP BPDU Filtering configuration using the CLI 170

Configuring STP BPDU Filtering using the CLI 170Viewing STP BPDU Filtering status using the CLI 171

STG configuration using the CLI 171Configuring STG global settings using the CLI 172Creating an STG using the CLI 173Configuring STG parameters using the CLI 174Viewing STG configuration using the CLI 177Viewing STG status using the CLI 177Configuring STG port parameters using the CLI 179Viewing general port STG information using the CLI 181Viewing extended port STG information using the CLI 183Configuring topology change detection using the CLI 184


NN46200-516 02.0130 March 2009


.

7

RSTP configuration using the CLI 184Configuring RSTP using the CLI 185Viewing global RSTP configuration using the CLI 186Viewing global RSTP status using the CLI 186Configuring Ethernet RSTP parameters using the CLI 187Viewing port RSTP configuration using the CLI 188Viewing port RSTP status using the CLI 188Viewing port RSTP role using the CLI 189

MSTP configuration using the CLI 189Configuring global MSTP parameters using the CLI 190Configuring an MSTP region using the CLI 191Viewing MSTP configuration using the CLI 191Configuring MSTP CIST using the CLI 192Configuring MSTP MSTI using the CLI 193Viewing MSTP instance information using the CLI 193Configuring Ethernet MSTP CIST using the CLI 194Configuring Ethernet MSTP MSTI using the CLI 195Viewing MSTP port information using the CLI 196Viewing MSTP status using the CLI 197

Spanning Tree configuration using the NNCLI 199Job aid 199Configuring the STP mode using the NNCLI 202Disabling STP mode using the NNCLI 203STP BPDU Filtering configuration using the NNCLI 204

Enabling STP BPDU Filtering using the NNCLI 204Disabling STP BPDU Filtering using the NNCLI 205Configuring the STP BPDU Filtering port timer using the NNCLI 205Configuring STP BPDU Filtering default values using the NNCLI 206Viewing STP BPDU Filtering status using the NNCLI 207

STG configuration using the NNCLI 208STG configuration using the NNCLI navigation 208Configuring STG global settings using the NNCLI 209Configuring STP using the NNCLI 209Deleting an STG using the NNCLI 212Viewing STG configuration using the NNCLI 212Configuring STG port parameters using the NNCLI 214Viewing port STG information using the NNCLI 216

RSTP configuration using the NNCLI 218Configuring global RSTP using the NNCLI 218Disabling group STP using the NNCLI 220Viewing global RSTP configuration using the NNCLI 220Viewing global RSTP status using the NNCLI 220Configuring port RSTP parameters using the NNCLI 221


NN46200-516 02.0130 March 2009


.

8

Disabling port RSTP using the NNCLI 222Viewing port RSTP information using the NNCLI 223

MSTP configuration using the NNCLI 224Configuring MSTP using the NNCLI 224Viewing MSTP configuration using the NNCLI 225Configuring MSTP MSTI using the NNCLI 226Viewing MSPT MSTI configuration information using the NNCLI 226Configuring Ethernet MSTP CIST using the NNCLI 227Disabling Ethernet MSTP CIST force-port-state using the NNCLI 228Configuring Ethernet MSTP MSTI using the NNCLI 229Viewing MSTP port information using the NNCLI 230Viewing MSTP status using the NNCLI 231

RSTP and MSTP CLI Configuration examples 233Configuring RSTP using the CLI 233

Example of configuring RSTP using the CLI: Configuring ERS8300 B1 234Example of configuring RSTP using the CLI: Configuring ERS8300 B2 235Example of configuring RSTP using the CLI: configuring ERS1600 B3 236Example of configuring RSTP using the CLI: configuring ERS1600 B4 236Example of configuring RSTP using the CLI: configuring ES 470 B5 237Example of configuring RSTP using the CLI: configuring ES470 B6 238

Configuring MSTP using the CLI 239Example of Configuring MSTP: configuring ERS8300 B1 240Example of Configuring MSTP: configuring ERS8300 B2 241Example of Configuring MSTP: configuring ERS1600 B3 242Example of Configuring MSTP: configuring ERS1600 B4 243Example of Configuring MSTP: configuring ES 470 B5 244Example of Configuring MSTP: configuring ES 470 B6 246

Customer service 249Updated versions of documentation 249How to get help 249Express Routing Codes 249Additional information 250


NN46200-516 02.0130 March 2009


.

9.

Software licenseThis section contains the Nortel Networks software license.

Nortel Networks Inc. software license agreementThis Software License Agreement ("License Agreement") is betweenyou, the end-user ("Customer") and Nortel Networks Corporation andits subsidiaries and affiliates ("Nortel Networks"). PLEASE READ THEFOLLOWING CAREFULLY. YOU MUST ACCEPT THESE LICENSETERMS IN ORDER TO DOWNLOAD AND/OR USE THE SOFTWARE.USE OF THE SOFTWARE CONSTITUTES YOUR ACCEPTANCE OFTHIS LICENSE AGREEMENT. If you do not accept these terms andconditions, return the Software, unused and in the original shippingcontainer, within 30 days of purchase to obtain a credit for the fullpurchase price.

"Software" is owned or licensed by Nortel Networks, its parent or one ofits subsidiaries or affiliates, and is copyrighted and licensed, not sold.Software consists of machine-readable instructions, its components, data,audio-visual content (such as images, text, recordings or pictures) andrelated licensed materials including all whole or partial copies. NortelNetworks grants you a license to use the Software only in the countrywhere you acquired the Software. You obtain no rights other than thosegranted to you under this License Agreement. You are responsible for theselection of the Software and for the installation of, use of, and resultsobtained from the Software.

1. Licensed Use of Software. Nortel Networks grants Customer anonexclusive license to use a copy of the Software on only one machineat any one time or to the extent of the activation or authorized usage level,whichever is applicable. To the extent Software is furnished for use withdesignated hardware or Customer furnished equipment ("CFE"), Customeris granted a nonexclusive license to use Software only on such hardwareor CFE, as applicable. Software contains trade secrets and Customeragrees to treat Software as confidential information using the same careand discretion Customer uses with its own similar information that it doesnot wish to disclose, publish or disseminate. Customer will ensure thatanyone who uses the Software does so only in compliance with the terms


NN46200-516 02.0130 March 2009


.

10 Software license

of this Agreement. Customer shall not a) use, copy, modify, transferor distribute the Software except as expressly authorized; b) reverseassemble, reverse compile, reverse engineer or otherwise translate theSoftware; c) create derivative works or modifications unless expresslyauthorized; or d) sublicense, rent or lease the Software. Licensors ofintellectual property to Nortel Networks are beneficiaries of this provision.Upon termination or breach of the license by Customer or in the eventdesignated hardware or CFE is no longer in use, Customer will promptlyreturn the Software to Nortel Networks or certify its destruction. NortelNetworks may audit by remote polling or other reasonable means todetermine Customer’s Software activation or usage levels. If suppliers ofthird party software included in Software require Nortel Networks to includeadditional or different terms, Customer agrees to abide by such termsprovided by Nortel Networks with respect to such third party software.

2. Warranty. Except as may be otherwise expressly agreed to inwriting between Nortel Networks and Customer, Software is provided"AS IS" without any warranties (conditions) of any kind. NORTELNETWORKS DISCLAIMS ALL WARRANTIES (CONDITIONS) FOR THESOFTWARE, EITHER EXPRESS OR IMPLIED, INCLUDING, BUT NOTLIMITED TO THE IMPLIED WARRANTIES OF MERCHANTABILITY ANDFITNESS FOR A PARTICULAR PURPOSE AND ANY WARRANTY OFNON-INFRINGEMENT. Nortel Networks is not obligated to provide supportof any kind for the Software. Some jurisdictions do not allow exclusionof implied warranties, and, in such event, the above exclusions may notapply.

3. Limitation of Remedies. IN NO EVENT SHALL NORTELNETWORKS OR ITS AGENTS OR SUPPLIERS BE LIABLE FOR ANYOF THE FOLLOWING: a) DAMAGES BASED ON ANY THIRD PARTYCLAIM; b) LOSS OF, OR DAMAGE TO, CUSTOMER’S RECORDS,FILES OR DATA; OR c) DIRECT, INDIRECT, SPECIAL, INCIDENTAL,PUNITIVE, OR CONSEQUENTIAL DAMAGES (INCLUDING LOSTPROFITS OR SAVINGS), WHETHER IN CONTRACT, TORT OROTHERWISE (INCLUDING NEGLIGENCE) ARISING OUT OFYOUR USE OF THE SOFTWARE, EVEN IF NORTEL NETWORKS,ITS AGENTS OR SUPPLIERS HAVE BEEN ADVISED OF THEIRPOSSIBILITY. The forgoing limitations of remedies also apply to anydeveloper and/or supplier of the Software. Such developer and/or supplieris an intended beneficiary of this Section. Some jurisdictions do not allowthese limitations or exclusions and, in such event, they may not apply.

4. General

1. If Customer is the United States Government, the following paragraphshall apply: All Nortel Networks Software available under this LicenseAgreement is commercial computer software and commercial computer


NN46200-516 02.0130 March 2009


.

Nortel Networks Inc. software license agreement 11

software documentation and, in the event Software is licensed foror on behalf of the United States Government, the respective rightsto the software and software documentation are governed by NortelNetworks standard commercial license in accordance with U.S. FederalRegulations at 48 C.F.R. Sections 12.212 (for non-DoD entities) and48 C.F.R. 227.7202 (for DoD entities).

2. Customer may terminate the license at any time. Nortel Networksmay terminate the license if Customer fails to comply with the termsand conditions of this license. In either event, upon termination,Customer must either return the Software to Nortel Networks or certifyits destruction.

3. Customer is responsible for payment of any taxes, including personalproperty taxes, resulting from Customer’s use of the Software.Customer agrees to comply with all applicable laws including allapplicable export and import laws and regulations.

4. Neither party may bring an action, regardless of form, more than twoyears after the cause of the action arose.

5. The terms and conditions of this License Agreement form the completeand exclusive agreement between Customer and Nortel Networks.

6. This License Agreement is governed by the laws of the country inwhich Customer acquires the Software. If the Software is acquired inthe United States, then this License Agreement is governed by thelaws of the state of New York.


NN46200-516 02.0130 March 2009


.

12 Software license


NN46200-516 02.0130 March 2009


.

13.

New in this releaseThe following sections detail what’s new in Nortel Ethernet Routing Switch8300 Configuration — VLANs and Spanning Tree (NN46205-516) forRelease 4.2:

• “Features” (page 13)

• “Other changes” (page 14)

FeaturesSee the following sections for information about feature changes:

IP spoof detectionIP spoof detection is a new feature for Release 4.2. With IP spoofdetection, you can block the external use of the switch IP address. Formore information see:

• “IP spoofing prevention within a VLAN” (page 30)

• “Configuring port-based VLANs using Device Manager” (page 48)

• “Viewing IP spoof detection information using Device Manager” (page49)

• “IP spoof detection configuration using the CLI” (page 91)

• “IP spoof detection configuration using the NNCLI” (page 123)

STP BPDU filteringSpanning Tree Protocol (STP) Bridge Protocol Data Unit (BPDU) filteringis a new feature for Release 4.2. With STP BPDU filtering, a networkadministrator can prevent unknown devices from influencing an existingspanning tree topology and from flooding the network with BPDUs. Formore information see:

• “Spanning Tree BPDU Filtering” (page 34)

• “Configuring STP BPDU Filtering using Device Manager” (page 135)


NN46200-516 02.0130 March 2009


.

14 New in this release

• “STP BPDU Filtering configuration using the CLI” (page 170)

• “STP BPDU Filtering configuration using the NNCLI” (page 204)

Other changesFor information about changes that are not feature-related, see thefollowing section:

• “Customer service” (page 14)

Customer serviceCustomer service chapter is added to this document. This chapterdescribes the complete range of services and support that Nortel providesto customers. For more information about Nortel support, see “Customerservice” (page 249).


NN46200-516 02.0130 March 2009


.

15.

IntroductionThe Nortel Ethernet Routing Switch 8300 is a flexible and multifunctionalswitch that supports a diverse range of network architectures andprotocols. This guide contains conceptual and procedural informationto support the administration of the Ethernet Routing Switch 8300. Formore information about the available user interfaces and how to use editcommands and special terminal characters, see Nortel Ethernet RoutingSwitch 8300 User Interface Fundamentals (NN46200-103)

Navigation• “VLAN and spanning tree fundamentals” (page 17)

• “VLAN configuration using Device Manager” (page 43)

• “VLAN configuration using the CLI” (page 69)

• “VLAN configuration using the NNCLI” (page 99)

• “Spanning Tree configuration using Device Manager ” (page 133)

• “Spanning Tree configuration using the CLI ” (page 165)

• “Spanning Tree configuration using the NNCLI” (page 199)

• “RSTP and MSTP CLI Configuration examples” (page 233)


NN46200-516 02.0130 March 2009


.

16 Introduction


NN46200-516 02.0130 March 2009


.

17.

VLAN and spanning tree fundamentalsThis chapter describes virtual local area network (VLAN) and spanningtree concepts and features supported on the Ethernet Routing Switch8300.

Navigation• “VLAN overview” (page 17)

• “Spanning tree overview” (page 30)

VLAN overviewA virtual local area network (VLAN) is a switched network logicallysegmented by functions, project teams, or applications without regard tothe physical location of users. Use a VLAN to divide the LAN into smallergroups without interfering with the physical network.

With VLAN practical applications, you can perform the following tasks:

• create VLANs, workgroups, or common interest groups

• create VLANs, workgroups, or workgroups for specific types of networktraffic

• add, move, or delete members from workgroups without makingphysical changes to the network

By dividing the network into separate VLANs, you can create separatebroadcast domains. This arrangement conserves bandwidth, especially innetworks that support broadcast and multicast applications that flood thenetwork with traffic. A VLAN workgroup can include members from severaldispersed physical segments on the network, which improves traffic flowbetween them.

The Ethernet Routing Switch 8300 performs the Layer 2 switchingfunctions necessary to transmit information within VLANs and the Layer 3routing functions necessary for VLANs to communicate with one another.You can define a VLAN for a single switch or it can span multiple switches.


NN46200-516 02.0130 March 2009


.

18 VLAN and spanning tree fundamentals

A VLAN consists of a group of ports that define a logical broadcastdomain. These ports can belong to a single VLAN or they can bespread across multiple VLANs. In a VLAN-aware switch, every framereceived on a port is classified as belonging to only one VLAN. When abroadcast, multicast, or unknown destination frame requires flooding by aVLAN-aware switch, the system sends the frame through only the otheractive ports that belong to the same VLAN.

The default switch configuration groups all ports into the port-based defaultVLAN 1. You cannot delete this VLAN from the system, and it is staticallybound to the default Spanning Tree Group (STG).

The Ethernet Routing Switch 8300 supports port-based VLANs andpolicy-based VLANs.

VLAN overview navigation

• “Port-based VLANs ” (page 18)

• “Policy-based VLANs ” (page 19)

• “Independent VLAN Learning” (page 22)

• “VLAN tagging and port types ” (page 23)

• “VLAN virtual router interfaces ” (page 25)

• “VLAN implementation on the Ethernet Routing Switch 8300 ” (page25)

• “VLAN configuration rules ” (page 26)

• “VLAN feature support and scaling” (page 27)

• “Network Load Balancing Support” (page 27)

• “VLAN MAC-layer bridging and filtering” (page 29)

• “IP spoofing prevention within a VLAN” (page 30)

Port-based VLANsPort-based VLAN consist of ports explicitly configured as members ofthe VLAN. When you create a port-based VLAN, you assign a VLANidentification number (VID) and specify which ports belong to the VLAN.Use the VID to coordinate VLANs across multiple switches.

The default switch configuration groups all ports into the port-based defaultVLAN 1. You cannot delete this VLAN from the system, and it is staticallybound to the default STG.


NN46200-516 02.0130 March 2009


.

VLAN overview 19

The example in the following figure shows two port-based VLANs: onefor the marketing department and one for the sales department. Ports areassigned to each port-based VLAN. A change in the sales area requiresthe sales representative at port 3/1 (the first port in the I/O module inchassis slot 3) to move to the marketing department. You can perform themove without physically moving cables. With a port-based VLAN, you canindicate in Device Manager or the CLI that port 3/1 in the sales VLAN nowbelongs to the marketing VLAN.

Figure 1Port-based VLAN

A port can belong to one port-based VLAN and many policy-based VLANs.

Policy-based VLANsA policy-based VLAN consists of ports that the system dynamically adds tothe VLAN on the basis of the traffic that comes into the port.

The Ethernet Routing Switch 8300 supports a total of 500 uniquepolicy-based VLANS. However, some restrictions exist on the number ofpolicy-based VLAN types.

Policy-based VLANs navigation

• “Port membership types ” (page 20)

• “Protocol-based VLANs ” (page 20)

• “User-defined, protocol-based VLANs ” (page 22)


NN46200-516 02.0130 March 2009


.


Port membership typesIn a policy-based VLAN, you can designate a port to always or never be amember of the VLAN that describes the port membership types.

The traffic that comes into the port determines the port membership in aVLAN. Nortel recommends that you designate some ports as always amember of the VLAN. If a server or router connects to a port, designatethat port as always a member of a VLAN.

The following table describes port membership types for policy-basedVLANs.

Table 1Port membership types for policy-based VLANs

Membership type Description

Static (Always a member) Static members remain active members ofthe VLAN when configured as belongingto that VLAN. Use this membership type inpolicy-based and port-based VLANs.

• In policy-based VLANs, the tagged ports areusually configured as static members.

• In port-based VLANs, all ports are alwaysstatic members.

Not allowed to join (Never a member) Ports of this type are cannot join the VLAN.

Protocol-based VLANsUse protocol-based VLANs to segment your network into broadcastdomains according to the network protocols in use. You can automaticallyconfine traffic generated by a network protocol—IPX and Appletalk— to itsown VLAN.

All ports within a protocol-based VLAN must belong to the sameport-based VLAN. However, the same port within a port-based VLAN canbelong to multiple protocol-based VLANs. Port tagging is not required for aport to belong to multiple protocol-based VLANs.

The Ethernet Routing Switch 8300 supports the following protocol-basedVLANs:

• IP version 4 (protocol-ipEther2)

• Novell IPX on Ethernet 802.3 frames (protocol-ipx802.3)

• Novell IPX on IEEE 802.2 frames (protocol-ipx802.2)

• Novell IPX on Ethernet SNAP frames (protocol-ipxSnap)


NN46200-516 02.0130 March 2009


.

VLAN overview 21

• Novell IPX on Ethernet Type 2 frames (ipxEther2)

• AppleTalk on Ethernet Type 2 and Ethernet SNAP frames(protocol-ApltkEther2Snap)

• DEC LAT Protocol (protocol-decEther2)

• Other DEC protocols (protocol-decOtherEther2)

• IBM SNA on IEEE 802.2 frames (protocol-sna802.2)

• IBM SNA on Ethernet Type 2 frames (protocol-snaEther2)

• NetBIOS Protocol (protocol-Netbios)

• Xerox XNS (protocol-xnsEther2)

• Banyan VINES (protocol-vinesEther2)

• IP version 6 (protocol-ipv6Ether2)

• Reverse Address Resolution Protocol (protocol-RarpEther2)

• User-defined protocols (protocol-Userdef)

Example: IPX protocol-based VLAN You can create a VLAN for theIPX protocol and place ports that carry substantial IPX traffic into this newVLAN. In the following figure, the network manager placed ports 7/1,3/1, and 3/2 in an IPX VLAN. These ports still belong to their respectivemarketing and sales VLANs, but they are also new members of the IPXVLAN. This arrangement localizes traffic and ensures that only three portsflood with IPX broadcast packets.

Figure 2Dynamic protocol-based VLAN


NN46200-516 02.0130 March 2009


.


User-defined, protocol-based VLANsYou can create user-defined, protocol-based VLANs to support networkswith nonstandard protocols. For user-defined, protocol-based VLANs, youcan specify the Protocol Identifier (PID) for the VLAN. Frames that matchthe specified PID for the following items are assigned to that user-definedVLAN:

• the ethertype for Ethernet type 2 frames

• the PID in Ethernet Sub-Network Access Protocol (SNAP) frames

• the Destination Service Access Point (DSAP) or Source ServiceAccess Point (SSAP) value in Ethernet 802.2 frames

The following table lists the predefined policy PIDs, which you cannot useas user-defined PIDs.

Table 2PIDs not available for user-defined, protocol-based VLANs

PID (hex) Description

04xx, xx04 sna802dot2

F0xx, xxF0 netBIOS

0000-05DC Overlaps with 802.3 frame length

0600, 0807 xns

0BAD VINES

4242 IEEE 802.1D BPDUs

0800 IP

0806 ARP

8035 RARP

809B, 80F3 AppleTalk

8100 Reserved by IEEE 802.1Q for tagged frames

8137, 8138 ipxEthernet2 and ipxSnap

80D5 snaEthernet2

86DD ipv6

8808 IEEE 802.3x pause frames

9000 Used by diagnostic loopback frames

Independent VLAN LearningYou can use the independent VLAN learning (IVL) mode to learn MACaddresses in the context of the VLAN to which they belong. In the EthernetRouting Switch 8300, each VLAN contains an independent, forwardingdatabase. Different VLANs can learn the same MAC address and, based


NN46200-516 02.0130 March 2009


.

VLAN overview 23

on the VLAN that receives traffic for this address, the switch can forwardto this MAC address without confusion. Before a switch can look up thesource or destination MAC address in a received frame, or before it candecide whether to bridge or route a frame, it must determine which VLANthe frame belongs to.

VLAN tagging and port typesThe Ethernet Routing Switch 8300 supports the IEEE 802.1Q specificationfor tagging frames and coordinating VLANs across multiple switches.

Figure 3 "VLAN tag insertion" (page 23) shows the additional 4-octet (tag)header inserted into a frame after the source address and before the frametype. The tag contains the VLAN ID associated with the frame.

Figure 3VLAN tag insertion

VLAN tagging and port types navigation

• “802.1Q tagged ports ” (page 23)

• “Treatment of tagged and untagged frames ” (page 24)

802.1Q tagged portsTagging a frame adds four octets, making the frame bigger than thetraditional maximum frame size. These frames are sometimes called babygiant frames. If a device does not support IEEE 802.1Q tagging, it canexperience problems interpreting tagged frames and receiving baby giantframes.

On the Ethernet Routing Switch 8300, your port level configurationdetermines whether the system sends or receives tagged frames.Configured tagging as true or false for the port, which applies to all VLANson that port.


NN46200-516 02.0130 March 2009


.


After you enable tagging on a nontagged port, you lose the previousconfiguration of VLANs, STGs, and Multilink Trunking (MLT) for theport. The port resets and runs Spanning Tree Protocol, which breaksconnectivity while the protocol goes through the normal listening andlearning states before the forwarding state.

An Ethernet Routing Switch 8300 port with tagging enabled sends framesexplicitly tagged with a VLAN ID. Use tagged ports to multiplex traffic thatbelongs to multiple VLANs to other IEEE-802.1Q-compliant devices.

If you disable tagging on a port, it does not send tagged frames. Anontagged port connects the Ethernet Routing Switch 8300 to devices thatdo not support IEEE 802.1Q tagging. If a tagged frame forwards out a porton which tagging is configured as false, the switch removes the tag fromthe frame before it sends it out the port.

Treatment of tagged and untagged framesAn Ethernet Routing Switch 8300 associates a frame with a VLAN basedon the data content of the frame and the configuration of the ingressport. Whether the frame is tagged or untagged dictates how that frame istreated.

If a tagged port receives a tagged frame with a VLAN ID specified in thetag, the Ethernet Routing Switch 8300 directs it to that VLAN if the VLANis present. If that VLAN is not configured on the ingress port the frameis dropped. For tagged frames received on an untagged port, you canconfigure that port to either discard the frame or accept it. Discardingtagged frames on an untagged port does not apply to the port-basedVLANs. If you choose not to discard tagged frames, the Ethernet RoutingSwitch 8300 sends the frame to the default VLAN assigned to the ingressport.

For untagged frames, content of the frame itself implies VLANmembership. For untagged frames received on a tagged port, you canconfigure the port to either discard or accept the frame. If you configure atagged port to accept untagged frames, the port must be assigned to thedefault port-based VLAN in spanning tree group 1 (STG1).

On the Ethernet Routing Switch 8300 you can configure tagged ports tosend untagged frames on the default VLAN of the port. MLT ports donot support this feature and it becomes disabled when you add a port toan MLT. You cannot apply VLAN port tagging on access ports. Ports aredisabled by default.


NN46200-516 02.0130 March 2009


.

VLAN overview 25

Where the system forwards the frame is based on the VLAN that receivesthe frame and the forwarding options available for that VLAN. The EthernetRouting Switch 8300 tries to associate untagged frames received onuntagged ports with a VLAN in the following order:

1. Does the frame belong to a protocol-based VLAN?

2. What is the port-based VLAN of the receiving port?

If the frame meets none of the preceding criteria, the switch discards theframe.

A nontagged port can belong to multiple VLANs of the same type, butcannot belong to the same Spanning Tree Group (STG).

VLAN virtual router interfacesVirtual router interfaces correspond to routing on a virtual port associatedwith a VLAN. This type of routing routes IP traffic to and from a VLAN.Because a port can belong to multiple VLANs (configured for routingon the switch or not), no one-to-one correspondence exists betweenthe physical port and the router interface. For VLAN routing, the routerinterface for the VLAN is called a virtual router interface because the IPaddress is assigned to an interface on the routing entity in the switch. Thisinitial interface has a one-to-one correspondence with a VLAN on a switch.

VLAN implementation on the Ethernet Routing Switch 8300This section describes how to implement VLANs on an Ethernet RoutingSwitch 8300.

VLAN implementation on the Ethernet Routing Switch 8300navigation

• “Default VLAN ” (page 25)

• “Unassigned VLAN ” (page 25)

Default VLANEthernet Routing Switch 8300 devices arrive factory-configured with allports in a port-based default VLAN and default Spanning Tree Group(STG) 1. With all ports in this default VLAN, the switch behaves as aLayer 2 switch. The default VLAN always includes a VLAN ID of 1 and isport-based. You cannot delete the default VLAN.

Unassigned VLANThe unassigned port-based VLAN acts as a placeholder for ports removedfrom other port-based VLANs. Ports can belong to policy-based VLANsand to the unassigned VLAN. If a frame does not meet policy criteria andno underlying port-based VLAN exists, the port belongs to the unassigned


NN46200-516 02.0130 March 2009


.


VLAN and the system drops the frame. Only ports in the unassignedVLAN have no STG association, so they do not participate in SpanningTree Protocol negotiation; that is, ports in the unassigned VLAN do notsend out Bridge Protocol Data Units (BPDU).

You cannot delete or view the unassigned VLAN. If you delete an STG,the ports move to the unassigned VLAN, and you can later assign them toanother STG. Moving the ports to the unassigned VLAN avoids creatingunwanted loops and duplicate connections. If you disable routing inthese ports, the ports are completely isolated and no Layer 2 or Layer3 functionality is provided.

You can use the unassigned VLAN for security concerns or when you usea port to monitor a mirrored port.

VLAN configuration rulesThe following VLAN rules exist for the Ethernet Routing Switch 8300.

• In addition to the default VLAN, the Ethernet Routing Switch 8300supports 4000 VLANs. VLAN IDs range in value from 1 to 4000.

• If you enable tagging on a port in a VLAN, you lose the STGconfiguration for that port. To preserve VLAN assignment of ports,enable tagging on the ports before you assign the ports to VLANs.

• A tagged port can belong to multiple VLANs and multiple STGs. Whena tagged port belongs to multiple spanning tree groups, the BPDUs aretagged for all spanning tree groups except for STG 1. The default isSTG 1.

• An untagged port can belong to only one port-based VLAN. A port in aport-based VLAN can belong to other policy-based VLANs.

• An untagged port can belong to only one policy-based VLAN for aprotocol. For example, a port can belong to only one policy-basedVLAN where the policy is IPX802dot2 protocol.

• A VLAN cannot span multiple spanning tree groups; that is, one STGmust contain all the ports in the VLAN. STG IDs can range in valuefrom 1 to 64.

• The following order of precedence determines the VLAN membershipof a frame:

— VLAN ID in the VLAN tag of the frame

— protocol-based VLAN

— port-based VLAN


NN46200-516 02.0130 March 2009


.

VLAN overview 27

VLAN feature support and scalingThe following table summarizes features supported on the EthernetRouting Switch 8300 modules.

ATTENTIONThis table changes frequently. For more information about the latest scalabilityinformation, see the release notes that came with your switch.

Table 3VLAN support in the Ethernet Routing Switch 8300

Feature

Number of VLANs 4096

Port-based VLANs Supported

Policy-based VLANs

• Protocol-based Supported

• Source MAC-based Not supported

IEEE 802.1Q tagging Supported

IP routing and VLANs Supported

IPX routing Not supported

IPX VLANs Supported

Special VLANs

• Default VLAN Supported

• Unassigned VLAN Supported

• Brouter ports Not supported

Network Load Balancing SupportNetwork Load Balancing (NLB) support is a clustering technology thatMicrosoft includes in the Windows 2000 Advanced Server and DatacenterServer operating systems. NLB increases the scalability and availabilityof TCP- and IP-based services such as Web, Terminal Services, VirtualPrivate Networking, and streaming media servers.

To scale the performance of a server-based program, NLB distributesclient requests among multiple servers within a cluster of hosts. Figure4 "Two-host cluster" (page 28) shows an example of a cluster of hosts.With NLB, all hosts receive each incoming IP packet, but only the intendedrecipients accept the packet. The cluster hosts can respond concurrentlyto requests from different clients or to multiple requests from the sameclient.


NN46200-516 02.0130 March 2009


.


Figure 4Two-host cluster

Network Load Balancing Support modes of operationNLB supports three modes of operation:

• unicast mode of operation

• multicast mode of operation

• Internet Group Management Protocol (IGMP) multicast mode ofoperation

Unicast mode of operation In unicast mode, NLB replaces the MACaddress of the network adapter with a virtual cluster MAC address. Bymasking the cluster MAC address, NLB creates a bogus MAC address oneach host adapter. Therefore, all NLB host adapters in a cluster share acommon cluster MAC address, and all the hosts in the cluster receive allthe frames forwarded to the cluster MAC address.

After you enable NLB, the bogus MAC address appears in the Ethernetframe header, and the Ethernet Routing Switch 8300 learns this bogusaddress rather than the cluster MAC address. This process ensures thatthe Ethernet switch does not learn the cluster MAC addresses on multipleports.


NN46200-516 02.0130 March 2009


.

VLAN overview 29

After a client or switch sends an ARP request for the MAC address of thevirtual IP address of the cluster, the ARP response from the cluster hostscontains the virtual cluster MAC address in the payload rather than thebogus MAC addresses.

Multicast mode of operation In this mode, NLB assigns a multicastMAC address to all hosts in the cluster but retains the built-in address ofthe network adapter. This mode does not need a bogus MAC address.

After you enable NLB, the adapter MAC address appears in the Ethernetframe header. The Ethernet switch learns this adapter MAC address ratherthan the cluster MAC address. This process ensures that the Ethernetswitch does not learn the cluster MAC addresses on multiple ports.

NLB uses the multicast MAC address for client-to-cluster traffic and theadapter MAC address for network traffic specific to the host computer.

After a client or switch sends an ARP request for the MAC address of thevirtual IP address of the cluster, the ARP response from the cluster hostscontains the cluster MAC virtual Multicast address in the payload ratherthan the hardware MAC addresses.

IGMP multicast mode of operation In this mode, NLB assigns an IPmulticast MAC address to all hosts in the cluster but retains the built-inaddress of the network adapter. This mode does not need a false MACaddress.

NLB supports multicast flood suppression by implementing IGMP. Thecluster hosts send the join message for a predefined group, and themulticast MAC is the virtual MAC address of the cluster hosts.

After a client or switch sends an ARP request for the MAC address of thevirtual IP address of the cluster, the ARP response from the cluster hostscontains the cluster MAC virtual multicast address in the payload ratherthan the hardware MAC addresses.

VLAN MAC-layer bridging and filteringTo perform MAC-layer bridging, the switch must know the destinationMAC-layer address of each device on each attached network, so it canforward packets to the appropriate destination. The bridging table storesMAC-layer addresses, and you can filter packet traffic based on thedestination MAC-layer address information.


NN46200-516 02.0130 March 2009


.


The Ethernet Routing Switch 8300 supports Bridge MIB filtering (RFC1493) with a limit of 100 MAC filters. Create a filter entry by entering aMAC address and the port it resides on (similar to a static MAC entry).In the MAC filter record, you also specify the ports, for which to discardsource or destination packets for the MAC address on a port.

IP spoofing prevention within a VLANYou can prevent VLAN logical IP spoofing by blocking the external use ofthe switch IP address. You can configure IP spoof detection on a port byport basis. This configuration detects a duplicate IP address (that is, anaddress that is the same as the VLAN IP address) and blocks all packetswith a source or destination MAC address equal to the VLAN IP address.

If an ARP packet is received that has the same source IP address asthe logical VLAN IP address, the hardware discards all traffic coming toa port of the switch in that VLAN (with this MAC address as source ordestination address). After detecting a duplicate IP address, the switchsends a gratuitous ARP packet to inform devices on the VLAN about thecorrect MAC address for that IP address. You can specify a time on aconfigurable global timer after which the MAC discard record is deleted,and the switch resumes accepting packets from that MAC address.

This covers virtual and physical IP addresses such as those associatedwith VRRP. IP spoof prevention can detect spoofing of VRRP virtual IPaddresses as well as physical IP addresses assigned to a VLAN.

If you use Split MultiLink Trunking (SMLT), configure this option on bothSMLT aggregation switches to avoid connectivity issues.

For more information about configuring IP spoof detection, see“Configuring port-based VLANs using Device Manager” (page 48),“Viewing IP spoof detection information using Device Manager” (page 49),“IP spoof detection configuration using the CLI” (page 91), or “IP spoofdetection configuration using the NNCLI” (page 123).

Spanning tree overviewThe Ethernet Routing Switch 8300 can use one of three spanning treeprotocols, including Spanning Tree Protocol (STP), Rapid Spanning TreeProtocol (RSTP), and Multiple Spanning Tree Protocol (MSTP).

Spanning Tree ProtocolThe IEEE Std 802.1D standard defines the operation of the Spanning TreeProtocol (STP). STP detects and eliminates logical loops in a bridged orswitched network. When multiple paths exist, the spanning tree algorithmconfigures the network, so that a bridge or switch uses only the mostefficient path. If that path fails, the protocol automatically reconfigures


NN46200-516 02.0130 March 2009


.

Spanning tree overview 31

the network to make another path become active and sustain networkoperations. You can control path redundancy for VLANs by implementingthe STP.

A network can include multiple instances of STP. The collection of ports inone spanning tree instance is called a spanning tree group (STG).

ATTENTIONIf you disable the Spanning Tree Protocol, it can reduce Central ProcessingUnit (CPU) overhead slightly. However, unless you use the switch in a simplenetwork with little possibility of loops, Nortel recommends that you leave theSpanning Tree Protocol enabled.

Spanning Tree Protocol navigation

• “Spanning Tree Groups” (page 31)

• “Spanning Tree Protocol controls” (page 32)

• “Spanning Tree Group modes” (page 33)

• “Spanning tree FastStart ” (page 33)

• “STGs and VLANs ” (page 34)

• “Spanning Tree Protocol topology change detection ” (page 34)

Spanning Tree GroupsEach Spanning Tree Group (STG) consists of a collection of ports thatbelong to the same instance of the STP. These STP instances arecompletely independent from each other. For example, they each sendtheir own BPDUs and have their own timers.

With the Ethernet Routing Switch 8300, you can include multiple spanningtree groups (STG) within the same switch. The routing switch canparticipate in the negotiation for multiple spanning trees.

The following figure shows multiple spanning tree groups.


NN46200-516 02.0130 March 2009


.


Figure 5Multiple STGs

Spanning Tree Protocol controlsBoth the ports associated with a VLAN and VLANs themselves must becontained within a single STG to prevents problems with spanning treeblockage of ports and loss of connectivity within the VLAN.

Each untagged port can belong to only one STG, while tagged ports canbelong to more than one STG. When a tagged port belongs to more thanone STG, the system tags the spanning tree BPDUs to distinguish those ofone STG from those of another STG. The system does not tag the BPDUsfrom STG 1. The tagged BPDUs transmit using a multicast MAC addressas tagged frames with a VLAN ID. Because tagged BPDUs are not part ofthe IEEE 802.1D standard, not all devices can interpret tagged BPDUs.

You can enable or disable the Spanning Tree Protocol at the port or STGlevel. If you disable the protocol at the group level, received BPDUs arehandled like a MAC-level multicast and flooded out the other ports of theSTG, and an STG can contain one or more VLANs. Remember that MACbroadcasts are flooded out on all ports of a VLAN; a BPDU is a MAC-levelmessage, but the BPDU is flooded out all ports on the STG, which canencompass many VLANs.


NN46200-516 02.0130 March 2009


.


When you globally enable STP on the STG, BPDU handling depends onthe STP setting of the port.

• When you enable STP on the port, it processes received BPDUs inaccordance with STP.

• When you disable STP on the port, the port stays in a forwarding stateand drops and does not process received BPDUs.

Spanning Tree Group modesThe Ethernet Routing Switch 8300 supports a Cisco compatible SpanningTree Group (STG) mode. By default, the Nortel STG (NTSTG) is enabled,and all BPDUs sent on every MLT link. To use the Cisco compatiblespanning tree mode, disable NTSTG, and the system sends BPDUs ononly one link of the aggregation group.

Spanning tree FastStartWhen enabled on a port with no other bridges, Spanning Tree FastStartstarts the port quickly following switch initialization or a spanning treechange. The port goes through the normal blocking and learning statesbefore the forwarding state, but the bridge hello timer (2 seconds bydefault) determines the hold time for these states instead of the bridgeforward delay timer (15 seconds by default). If you enable FastStart on aport that uses the defaults of 2 seconds for Hello time and 15 seconds forForward Delay time, it goes into the forwarding state in 4 seconds insteadof the usual 30 seconds. If the port sees a BPDU, it reverts to regularbehavior.

Instead of disabling Spanning Tree protocol on a port, Nortel recommendsthat you enable FastStart on the port as an alternative.

FastStart is intended for access ports where only one device connectsto the switch (for example, workstations with no other spanning treedevices) and it prevents the 30 to 35 second wait period for spanning treeinitialization and bridge learning.

ATTENTIONUse Spanning Tree FastStart with caution. This feature does not adhere tothe specifications in the IEEE 802.1D standard for Spanning Tree Protocol(STP), in which a port enters the blocking state following the initialization of thebridging device or from the disabled state when you enable the port throughconfiguration.


NN46200-516 02.0130 March 2009


.


STGs and VLANsA VLAN can include all the ports in a STG, and an STG can includemultiple VLANS, but a VLAN never includes more ports than exist in theSTG. Nortel recommends that you plan the STGs, and then create theVLANs.

In the Ethernet Routing Switch 8300 default configuration, a single STGencompasses all the ports in the switch. For most applications, thisconfiguration is sufficient. The default STG is assigned ID 1 (STG1).

If a VLAN spans multiple switches, it must belong to the same STG acrossall switches.

Spanning Tree Protocol topology change detectionWith change detection, you can detect topology changes and send atopology change notification (TCN) to the root on an individual portbasis. Change detection is enabled by default. When and a topologychange occurs, change detection sends a trap that contains the followinginformation, so you can identify the device:

• the MAC address of the STG sending the TCN

• the port number

• the STG ID

You can disable change detection on ports connected to a single endstation where powering that end station on and off can trigger the TCN.The IEEE STD 802.1D standard references change detection.

Topology change detection configuration rules When you work withchange detection settings

• You can configure change detection on access ports only. This alsoapplies to link aggregation ports.

• If you disable change detection and change the port from access totagging-enabled, the switch automatically configures change detectionto enabled for the port. This also applies to link aggregation ports.

• In a link aggregation group with access ports, modifications to changedetection for a member port automatically apply to the remainingmember ports.

Spanning Tree BPDU FilteringThe Ethernet Routing Switch 8300 supports Bridge Protocol Data Unit(BPDU) Filtering for a Spanning Tree Group (STPG), Rapid Spanning TreeProtocol (RSTP), and Multiple Spanning Tree Protocol (MSTP).


NN46200-516 02.0130 March 2009


.


The Spanning Tree Protocol detects and eliminates logical loops in abridged or switched network. A bridge that participates in the spanningtree exchanges information with other bridges using BPDUs. Based on theBPDU information exchange, the bridge with the lowest bridge ID becomesthe root. This process is called the root selection process.

When you add a new bridge to the spanning tree or remove an existingbridge from the spanning tree, the root selection process repeats and anew root is selected.

With BPDU Filtering, the network administrator can achieve the following:

• Block an unwanted root selection process when an edge device (forexample, a laptop running Linux and enabled with STP) is added to thenetwork. This prevents unknown devices from influencing an existingspanning tree topology.

• Block the flooding of BPDUs from an unknown device.

ATTENTIONThe STP BPDU Filtering feature is not supported on Multi-Link Trunk (MLT)ports.

If BPDU-Filter feature is enabled on some ports, and then those ports are addedto MLT, the following error message appears: Error: MLT add ports fail.

When a port has BPDU Filtering enabled and the port receives an STPBPDU, the following actions take place:

• The port is immediately put in the operational disabled state.

• A trap is generated and the following log message is written to the log:Ethernet <x> is shut down by BPDU Filter

• The port timer starts.

• The port stays in the operational disabled state until the port timerexpires.

If you disable the timer or reset the switch before the timer expires, theport remains in the disabled state. If you disable BPDU Filtering while thetimer is running, the timer stops and the port remains in the disabled state.You must then manually enable the port to return it to the normal mode.

ATTENTIONYou can enable the port manually by using the following command in CLI:config ether <port> state enable


NN46200-516 02.0130 March 2009


.


You can enable and disable the BPDU Filtering feature on a port to portbasis. The BPDU Filtering timer is user configurable for each port and hasa valid range of 10 to 65535 seconds. The port timer is disabled if youconfigure the timer for 0 seconds.

For more information about configuring BPDU Filtering, see “ConfiguringSTP BPDU Filtering using Device Manager” (page 135), “ConfiguringSTP BPDU Filtering using the CLI” (page 170), or “STP BPDU Filteringconfiguration using the NNCLI” (page 204).

RSTP and MSTPRapid Spanning Tree Protocol (RSTP) is an Institute of Electrical andElectronics Engineers (IEEE ) 802.1w standard feature that provides fasterrecovery time than STP after a failure in a LAN with logical loops. TheRSTP is an extension of STP and maintains a backward compatibilitywith the IEEE 802.1d standard implementation of STP. In certainconfigurations, the recovery time of RSTP can be reduced to less than 1second.

Multiple Spanning Tree Protocol (MSTP) provides the functionality ofRSTP with enhanced network control and load balancing. With MSTP,you can configure multiple instances of RSTP on the same switch. EachRSTP instance can include one or more VLANs. The operation of MSTP issimilar to the current Nortel proprietary MSTP. The MSTP is an extensionof RSTP.

By using RSTP and MSTP in addition to the current proprietary STPimplementation, the Ethernet Routing Switch 8300 can achieve thefollowing:

• reduce convergence time after a topology change (from 30 seconds toless than 1 or 2 seconds)

• eliminate unnecessary flushing of the MAC database and the floodingof traffic to the network

• create backward compatibility with classic 802.1d switches

• create support for 64 instances of spanning tree in MSTP mode

RSTP and MSTP navigation

• “RSTP interoperability with STP” (page 37)

• “Differences in port roles for STP and RSTP” (page 37)

• “Port roles: root forwarding role” (page 38)

• “Port roles: designated forwarding role” (page 38)

• “Port roles: alternate blocking role” (page 39)


NN46200-516 02.0130 March 2009


.


• “Port roles: backup blocking role” (page 39)

• “Edge port” (page 39)

• “Path cost values” (page 39)

• “RSTP negotiation process” (page 40)

RSTP interoperability with STPRSTP provides backward compatibility with standard STP. You canconfigure a port in either STP-compatible mode or RSTP mode:

• An STP-compatible port transmits and receives only STP BPDUs. AnyRSTP BPDU that the port receives in this mode is discarded.

• An RSTP port transmits and receives only RSTP BPDUs. If an RSTPport receives a STP BPDU, it becomes an STP port. User interventionis required to change this port back to RSTP mode. This process iscalled Port Protocol Migration.

Differences in port roles for STP and RSTPRSTP is an enhanced version of STP. These two protocols have almostthe same set of parameters.

The following table lists the differences in port roles for STP and RSTP.STP supports two port roles, while RSTP supports four port roles

Table 4STP and RSTP port role differences

Port role STP RSTP Description

Root Yes Yes This port receivesa better BPDU thanits own and has thebest path to reach theRoot. The root port isin Forwarding state.The root port anddesignated ports canbe in the Discardingstate before they go toroot forwarding.

Designated Yes Yes This port has thebest BPDU onthe segment. Thedesignated port is inthe Forwarding state.


NN46200-516 02.0130 March 2009


.


Port role STP RSTP Description

Alternate No Yes This port receives abetter BPDU than itsown BPDU, and aRoot port exists withinthe same switch. Thealternate port is in theDiscarding state.

Backup No Yes This port receivesa better BPDU thanits own BPDU, andthis BPDU is fromanother port withinthe same switch. Thebackup port is in theDiscarding state.

Port roles: root forwarding roleMSTP and RSTP root forwarding roles are as follows:

• The port that receives the best path BPDU on a switch is the root port,and is referred to as a Root Forwarding (RF) port. The root port is theclosest to the root bridge in terms of path cost.

• The spanning tree algorithm elects a single root bridge in a bridgednetwork each spanning tree instance.

• The root bridge is the only bridge in a network that does not have rootports; all ports on a root bridge are Designated Forwarding (DF).

• Only be one path towards a root bridge can exist on a segment;otherwise, loops can occur.

Port roles: designated forwarding roleMSTP and RSTP designated forwarding roles are as follows:

• All bridges connected on a segment monitor the BPDUs all the BPDUsof the other bridges. The bridge that sends the best BPDU is, bymutual agreement, the root bridge for the segment.

• The corresponding port on the bridge is referred to as a DesignatedForwarding Port.


NN46200-516 02.0130 March 2009


.


Port roles: alternate blocking roleMSTP and RSTP alternate blocking roles are as follows:

• A blocked port is defined as a port not designated by a root port.

• An alternate blocked port is a port that is blocked because it receivedbetter path cost BPDUs from another bridge.

Port roles: backup blocking roleMSTP and RSTP backup blocking roles are as follows:

• A blocked port is defined as a port not designated by a root port.

• A backup blocked port is a port that is blocked because it receivedbetter path cost BPDUs from another port within the same switch.

Edge portRSTP uses a new parameter called the edge port. When a port connectsto a nonswitch device, such as a PC or a workstation, it must beconfigured as an edge port. An active edge port enters the forwardingstate without delay. An edge port becomes a nonedge port if it receives aBPDU.

Path cost valuesRSTP and MSTP recommend new path cost values that support a widerange of link speeds. The following table lists the recommended path costvalues.

Table 5Recommended path cost values

Link Speed Recommended Value

Less than or equal to 100 Kb/s

1 Mb/s

10 Mb/s

100 Mb/s

200 000 000

20 000 000

2 000 000

200 000

1 Gb/s

10 Gb/s

100 Gb/s

20 000

2000

200

1 Tb/s

10 Tb/s

20

2


NN46200-516 02.0130 March 2009


.


RSTP negotiation processThis section describes the negotiation process between switches thattakes place before PCs can exchange data, based on the following figure.

Figure 6RSTP negotiation process

After turn on, all ports assume the role of designated ports. All ports arein the discarding state except edge ports. Edge ports go directly into theforwarding state without delay.

Switch A port 1 and switch B port 1 exchange BPDUs. Switch A knowsthat it is the root and that switch A port 1 is the designated port. Switch Blearns that switch A has higher priority. Switch B port 1 becomes the rootport. Both switch A port 1 and switch B port 1 are still in the discardingstate.

Switch A starts the negotiation process by sending a BPDU with theproposal bit set.

Switch B receives the proposal BPDU and sets its nonedge ports todiscarding state. This operation occurs during the synchronization process.

Switch B sends a BPDU to switch A with the agreement bit set.


NN46200-516 02.0130 March 2009


.


Switch A sets port 1 to the forwarding state, and switch B sets port 1 to theforwarding state. PC 1 and PC 2 can now communicate. The negotiationprocess now moves on to switch B port 3 and its partner port. PC 3 cannotexchange data with either PC 1 or PC 2 until the negotiation processbetween switch B and switch C is complete.

The RSTP convergence time depends on how quickly the switch canexchange BPDUs during the negotiation process, and on the number ofswitches in the network.


NN46200-516 02.0130 March 2009


.



NN46200-516 02.0130 March 2009


.

43.

VLAN configuration using DeviceManager

This chapter describes how to configure and manage a virtual local areanetwork (VLAN) on an Ethernet Routing Switch 8300 using the DeviceManager.

For more information about statistics, see Nortel Ethernet Routing Switch8300 Performance Management (NN46200-705) .

Navigation• “Viewing defined VLANs using Device Manager” (page 43)

• “Port-based VLANs configuration using Device Manager” (page 45)

• “Viewing IP spoof detection information using Device Manager” (page49)

• “Configuring policy-based VLANs using Device Manager” (page 50)

• “Configuring advanced VLAN operations using Device Manager” (page53)

• “Managing VLAN bridging using Device Manager” (page 60)

Viewing defined VLANs using Device ManagerView a list of all defined VLANs with their configurations and current statusby performing this procedure.

Procedure steps

Step Action

1 From the Device Manager main menu, choose VLAN, VLANs- GRT (vrf 0).


NN46200-516 02.0130 March 2009


.

44 VLAN configuration using Device Manager

The VLAN dialog box appears with the Basic tab selecteddisplaying information about all defined VLANs.

--End--

Variable definitionsUse the data in the following table to view a list of all defined VLANs.

Variable Value

Id Identifies the VLAN ID. Values range from 1 to 4000.

Name Identifies the VLAN name.

IfIndex The logical interface index assigned to the VLAN.

Color Identifier A proprietary color scheme used to associate a colorwith the VLAN. Color does not affect how frameforwarding.

Type The type of VLAN:

• byPort

• byIpSubnet

• byProtocoId

StgId The ID of the STG, to which the VLAN belongs.

VrfId Specifies the Vrf identifier.

VrfName Identifies the Vrf name.

PortMembers The slot and port of each possible VLAN member.

ActiveMembers The slot and port of each activeVLAN member.

StaticMembers The slot and port of each static (always) member of aprotocol-based VLAN.

NotAllowToJoin The slot and port that cannot become a member of theprotocol-based VLAN.

ProtocolId The network protocol for protocol-based VLANs. Thisvalue originates from the Assigned Numbers RFC.

• None (port-based VLAN)

• ip (IP version 4)

• ipx802dot3 (Novell IPX on Ethernet 802.3 frames)

• ipx802dot2 (Novell IPX on IEEE 802.2 frames)

• ipxSnap (Novell IPX on Ethernet SNAP frames)

• ipxEthernet2 (Novell IPX on Ethernet Type 2 frames)


NN46200-516 02.0130 March 2009


.

Port-based VLANs configuration using Device Manager 45

Variable Value

• appleTalk (AppleTalk on Ethernet Type 2 andEthernet SNAP frames)

• decLat (DEC LAT protocol)

• decOther (Other DEC protocols)

• sna802dot2 (IBM SNA on IEEE 802.2 frames)

• snaEthernet2 (IBM SNA on Ethernet Type 2 frames)

• netBIOS (NetBIOS protocol)

• xns (Xerox XNS)

• vines (Banyan VINES)

• ipv6 (IP version 6)

• usrDefined (user-defined protocol)

• RARP (Reverse Address Resolution Protocol)

SubnetAddr The source IP subnet address (IP subnet-based VLANsonly).

SubnetMask The source IP subnet mask (IP subnet-based VLANsonly).

For information about changing VLAN port membership, see “ChangingVLAN port membership using Device Manager” (page 57).

Port-based VLANs configuration using Device ManagerThis section describes how to configure port-based VLANs to create andconfigure ports.

Port-based VLANs configuration using Device Manager navigation

• “Creating a port-based VLAN using Device Manager” (page 45)

• “Configuring an IP address for a VLAN using Device Manager” (page47)

• “Configuring port-based VLANs using Device Manager” (page 48)

Creating a port-based VLAN using Device ManagerCreate a port-based VLAN to specify ports as exclusive members of theVLAN by performing this procedure.


NN46200-516 02.0130 March 2009


.


Prerequisites

• When you create a VLAN, follow the rules described in “VLANconfiguration rules ” (page 26).

Procedure steps

Step Action

1 From the Device Manager menu bar, select VLAN, VLANs -GRT (vrf 0) .

2 Click Insert.

The VLAN, Insert Basic dialog box appears.

3 In the Id box, enter an unused VLAN ID or use the ID provided.

4 In the Name box, type the VLAN name or use the nameprovided.

5 In the Color Identifier list select a color or use the colorprovided.

6 In the StgId box, type or select a STG ID for the VLAN.

7 Select the byPort option button in the Type box.

8 Click the ellipsis (...) in the PortMembers box.

The VlanPortMembers dialog box appears.

9 Click the ports to add to the VLAN.

You cannot add a dimmed port to the VLAN (for example, youcannot select ports that do not belong to the same STG as thenew VLAN).

10 ClickOk.

The VlanPortMembers dialog box closes, and the port membersappear in the VLAN, Insert Basic dialog box.

11 Click Insert.

The VLAN, Insert Basic dialog box closes and the VLAN appearsin the VLAN - GRT dialog box.

12 Click Close.

--End--

Variable definitionsUse the data in this table to help you create a port-based VLAN.


NN46200-516 02.0130 March 2009


.

Port-based VLANs configuration using Device Manager 47

Variable Value

Id A value that uniquely identifies theVLAN associated with this entry.Values range from 1 to 4000.

Name An assigned name for this VLAN. Thisfield is optional.

Color Identifier An assigned color code for this VLAN.The value of this object is used bythe VLAN Manager graphical userinterface (GUI) tool. This field isoptional.

StgId The STG identifier assigned to thisVLAN.

Type The type of VLAN, distinguishedaccording to the policy used to defineits port membership.

PortMembers The set of ports that are members ofthe VLAN.

For information about creating a protocol-based VLAN, see “Creating aprotocol-based VLAN using Device Manager” (page 50).

For information about creating user-defined, protocol-based VLANs, see“Creating user-defined, protocol-based VLANs using Device Manager”(page 51).

Configuring an IP address for a VLAN using Device ManagerConfigure an IP address for a VLAN to add the VLAN to a network byperforming this procedure.

Prerequisites

• When you create a VLAN, follow the rules described in “VLANconfiguration rules ” (page 26).

Procedure steps

Step Action

1 On the Device Manager menu bar, choose VLAN, VLANs -GRT (vrf 0) .

The VLAN dialog box appears with the Basic tab selected.

2 Select the desired VLAN.

3 Click IP.

The IP, VLAN dialog box appears for the VLAN.


NN46200-516 02.0130 March 2009


.


4 Click Insert.

The IP, VLAN, Insert IP Address dialog box appears.

5 Enter an IP address and netmask for routing.

6 Click Insert.

The Insert IP Address dialog box closes and the IP address andnetmask appear in the IP, VLAN dialog box.

7 Close all dialog boxes..

--End--

Configuring port-based VLANs using Device ManagerConfigure port-based VLANs to enable or disable VLAN features for a portor multiple ports by performing this procedure.

Procedure steps

Step Action

1 On the Device Manager main window, select a port or multipleports.

2 From the Device Manager menu bar, choose Edit, Port.

The Port dialog box for a port or multiple ports appears with theInterface tab selected.

The tab label varies, depending on the module that you selected.

3 Click the VLAN tab.

The VLAN dialog box appears.

4 Configure the port-based VLAN or VLANs as required.

To configure a port-based VLAN in the multiple port dialog box,double-click an editable box for a port parameter, and choosean option.

5 Click Apply.

--End--

Variable definitionsUse the data in the following table to configure port-based VLANs.


NN46200-516 02.0130 March 2009


.

Viewing IP spoof detection information using Device Manager 49

Variable Value

Index Displays an index of selected ports. This fieldonly appears when multiple ports are selected.

PerformTagging • Select to enable tagging to tag all framessent from this port.

• Clear to disable tagging to not send framesfrom this port. The switch removes the tagbefore sending the frame from the port.

When you enable tagging on an untagged port,you lose the previous configuration of VLANsand STGs for the port. The port resets andruns the Spanning Tree Protocol, which breaksconnectivity while the protocol goes through thenormal blocking and learning states before theforwarding state.

VlanNames Identifies the name of the VLAN assigned tothis port.

DiscardUntaggedFrames Select to discard untagged frames on a portwith tagging enabled.

UntagPortDefaultVlan Select to designate a default VLAN toassociate with untagged frames.

ATTENTIONYou must enable tagging on the port beforeyou configure UntagPortDefaultVlan.

DefaultVlanId Enter a VLAN ID to designate a default VLANto associate with discarded frames.

SpoofDetect Enables or disables IP spoofing prevention forthe port.

Viewing IP spoof detection information using Device ManagerView IP spoof detection information to display information about spoofedIP addresses and MAC addresses associated to ports and VLANs byperforming this procedure.

Procedure steps

Step Action

1 From the Device Manager menu bar, choose IP , IP - GRT (vrf0).


NN46200-516 02.0130 March 2009


.


2 Click the Spoof Detect tab.

--End--

Job aid: Spoof detect dialog box fieldsThe following table describes the Spoof detect dialog box fields.

Table 6Job aid: Spoof detect dialog box fields

Field Description

Index Displays an index of switch ports.

SpoofedIpAddress Identifies the spoofed switch VLAN IPaddress.

SpoofedMacAddress Identifies the spoofed switch VLANsource and destination MAC address.

Port Identifies the port member numberassociated with the spoofed switchVLAN.

VlanId Identifies the spoofed switch VLAN.Values range from 1 to 4000.

Configuring policy-based VLANs using Device ManagerA policy-based VLAN consists of ports that the system adds dynamicallybased on traffic that comes into the port.

Configuring policy-based VLANs navigation

• “Creating a protocol-based VLAN using Device Manager” (page 50)

• “Creating user-defined, protocol-based VLANs using Device Manager”(page 51)

Creating a protocol-based VLAN using Device ManagerCreate a protocol-based VLAN to segment a network into broadcastdomains according to the network protocol in use by performing thisprocedure.

Procedure steps

Step Action




NN46200-516 02.0130 March 2009


.

Configuring policy-based VLANs using Device Manager 51

2 Click Insert.


3 Type the unique VLAN ID in the Id box, or use the ID provided.

4 (Optional) Type the VLAN name in the Name box, or use thename provided.

5 (Optional) Select a color from the Color Identifier list, or use thecolor provided.

The VLAN Manager uses this color to visually distinguish theVLANs in a network.

6 Select the byProtocolId option button in the Type section.

The dialog box activates the boxes required to set upprotocol-based VLANs.

7 Click the ellipsis (...) in the PortMembers box.


8 Select the ports to add to the VLAN.


9 Click Ok.


When you create a protocol-based VLAN, all ports in theunderlying STG the system automatically adds as members,unless they already belong to an existing protocol-based VLANof the same type.

10 Select a protocol ID option button in the ProtocolId section.

11 Click a level option button (0 to 7) in the QosLevel section.

12 Click Insert.

The VLAN, Insert Basic dialog box closes, and theprotocol-based VLAN appears in the Basic tab of the VLANdialog box.

--End--

Creating user-defined, protocol-based VLANs using Device ManagerCreate user-defined, protocol-based VLANs so the switch can supportnetworks with nonstandard protocols by performing this procedure.


NN46200-516 02.0130 March 2009


.


Procedure steps

Step Action

1 On the Device Manager menu bar, choose VLAN, VLANs -GRT (vrf 0).


2 Click Insert.


3 Select the byProtocolId option button in the Type section.

4 Click the ellipsis (...)in the PortMembers box.


5 Select the ports to add to the VLAN.


6 Click Ok.


7 Select the usrDefined option button in the ProtocolIdsection.

The UserDefinedPidList box becomes editable.

8 Enter the protocol ID (PID) for the protocol in a four-digithexadecimal range or list format in the UserDefinedPidList box.

You can specify up to a maximum of eight PIDs for auser-defined VLAN. You can specify the PIDs as a rangeseparated by dashes (-), individual PIDs separated by commas(,), or a combination. For example, you can specify 9001-9004;or 9001, 9002, 9003, 9004; or 9001, 9003-9009.

9 Select an encapsulation option button in the Encap section.

10 Select a level option button (0–7) in the QosLevel section.

11 Click Insert.

The VLAN, Insert Basic dialog box closes, and theprotocol-based VLAN appears in the Basic tab of the VLANdialog box.

12 Click Apply.

13 Click Close.

--End--


NN46200-516 02.0130 March 2009


.

Configuring advanced VLAN operations using Device Manager 53

Configuring advanced VLAN operations using Device ManagerThis section describes how to configure advanced VLAN operations, suchas changing VLAN port membership and autolearning.

ATTENTIONAfter you create a VLAN, you cannot change the VLAN type. You must deletethe VLAN, and then create a new VLAN of a different type.

Configuring advanced VLAN operations using Device Managernavigation

• “Configuring advanced VLAN features using Device Manager” (page53)

• “Configuring VLAN forwarding filters using Device Manager” (page 56)

• “Changing VLAN port membership using Device Manager” (page 57)

• “Configuring MAC address autolearning on a VLAN using DeviceManager” (page 58)

• “Modifying autolearned MAC addresses using Device Manager” (page59)

Configuring advanced VLAN features using Device ManagerConfigure advanced VLAN features to assist when troubleshooting VLANoperation problems by performing this procedure.

Procedure steps

Step Action

1 On the Device Manager menu bar, choose VLAN, VLANs -GRT (vrf 0).


2 Click the Advanced tab.

The Advanced tab appears.

3 Configure advanced features by double-clicking the box of theitems you want to modify.

You cannot modify items in dimmed boxes.

--End--

Variable definitionsUse the data in the following table to configure advanced VLAN features.


NN46200-516 02.0130 March 2009


.


Field Description

Id The VLAN ID. Values range from 1 to 4000.

Name The VLAN name.

IfIndex The logical interface index assigned to the VLAN.

Type Type of VLAN:

• byPort

• byIpSubnet

• byProtocolId

ProtocolId The network protocol for protocol-based VLANs.This value originates from the Assigned NumbersRFC.

• None (port-based VLAN)

• ip (IP version 4)

• ipx802dot3 (Novell IPX on Ethernet 802.3frames)

• ipx802dot2 (Novell IPX on IEEE 802.2 frames)

• ipxSnap (Novell IPX on Ethernet SNAP frames)

• ipxEthernet2 (Novell IPX on Ethernet Type 2frames)

• appleTalk (AppleTalk on Ethernet Type 2 andEthernet SNAP frames)

• decLat (DEC LAT protocol)

• decOther (Other DEC protocols)

• sna802dot2 (IBM SNA on IEEE 802.2 frames)

• snaEthernet2 (IBM SNA on Ethernet Type 2frames)

• netBIOS (NetBIOS protocol)

• xns (Xerox XNS)

• vines (Banyan VINES)

• ipv6 (IP version 6)

• usrDefined (user-defined protocol)

• RARP (Reverse Address Resolution Protocol)

Encap This encapsulation type is for user-defined,protocol-based VLANs only.

AgingTime The timeout period in seconds for aging out thedynamic member ports of policy-based VLANs.


NN46200-516 02.0130 March 2009


.


Field Description

MacAddress The MAC address assigned to the virtual routerinterface for this VLAN. This box applies only to aVLAN configured for routing. Routed frames andARP replies use this MAC address as their SourceMAC.

Vlan Operation Action One of the following VLAN-related actions:

• none—no VLAN updates.

• flushMacFdb—flush MAC forwarding table forVLAN.

• flushArp—flush ARP table for VLAN.

• flushIp—flush IP route table for VLAN.When you execute this command, the switchimmediately sends a RIP request to solicit theupdated RIP routes.

• all—flush all tables for VLAN. When youexecute this command, the switch immediatelysends a RIP request to solicit the updated RIProutes.

• flushSnoopMem—flush IGMP Snoop Members.

• flushSnoopMRtr—flush snoop multicast router.

Result Result code for action.

UserDefinedPid User-defined protocol ID list if the user selected anddefined a protocol type.

UserPriority User-assigned priority level.

UpdateDynamicMacQosLevel

This field indicates whether to update the QoSlevel for dynamically learned MAC addressesassociated with a subnet-based or protocol-basedVLAN. If you enable this field the QoS level for alldynamically learned MAC addresses changes whenthe VLAN QoS level changes. If you disable thisfield, when the VLAN learns a MAC address, theQoS level does not update when the VLAN QoSlevel changes.


NN46200-516 02.0130 March 2009


.


Field Description

QosLevel The quality of service level of the destination MACaddress for incoming frames on this VLAN.

• level0 (lowest priority)

• level1 (default)

• level2

• level3

• level4

• level5

• level6

• level7 (highest priority)

NlbMode Defines the administrative network load balancingmode:• nlbAdminDisable

• nlbAdminIgmpMcast

• nlbAdminMulticast

• nlbAdminUnicast

OperNlbMode Identifies the operational network load balancingmode.

Configuring VLAN forwarding filters using Device ManagerConfigure VLAN forwarding filters to control the forwarding of VLANinformation by performing this procedure.

Procedure steps

Step Action

1 From the Device Manager menu bar, choose VLAN, VLANs -GRT (vrf 0).

2 Click the Forwarding tab.

3 Click Filter.

4 Select a forwarding filter Condition.

5 Select or clear the Ignore case check box.

6 Select a forwarding filter Column formula.


NN46200-516 02.0130 March 2009


.


7 Select and configure remaining forwarding filter parameters asrequired.

--End--

Variable definitionsUse the data in this table to help you configure VLAN forwarding filters.

Variable Value

Address An address for which the filter hasforwarding or filtering information.

VlanId The ID of the VLAN.

Port The port number.

Monitor Select true or false to copy packetswith a MAC address in the sourceor destination field. Used with portmirroring.

QoSLevel User-assigned Quality of Service level.

SmltRemote Specifies whether you want to use splitmultilink trunking.

Status Values include:

• self—one of the bridge addresses

• learned—a learned entry that isbeing used

• mgmt—a static entry

Changing VLAN port membership using Device ManagerChange the port membership of a VLAN to modify the ports specified asexclusive members of the VLAN by performing this procedure.

Procedure steps

Step Action



2 Double-click the PortMembers box for the VLAN whose portsyou want to change.

The PortMembers, VLAN dialog box for the VLAN appears.

3 Click the port members to add or remove.


NN46200-516 02.0130 March 2009


.


You cannot add a dimmed port to the VLAN (for example, youcannot select ports that do not belong to the same STG as theVLAN).

4 Click Ok.

The PortMembers dialog box closes, and the changes appear inthe Basic tab.

5 Click Apply.

6 Click Close.

--End--

Configuring MAC address autolearning on a VLAN using DeviceManager

Configure MAC address autolearning on a VLAN to define VLAN ports toautomatically learn MAC addresses by performing this procedure.

Procedure steps

Step Action

1 From the Device Manager menu bar, choose VLAN, MACLearning.

The VlanMacLearning dialog box appears with the Manual Edittab selected.

2 Click Insert.

The VlanMacLearning, Insert Manual Edit dialog box appears.

3 Enter the source MAC address in the Address box.

4 Click the ellipsis (...) in the Ports box.

The BridgeManualEditPorts dialog box appears showing theavailable ports.

5 Select the port numbers of the ports you want to perform VLANMAC learning.

6 Click Ok.

The BridgeManualEditPorts dialog box closes, and the portnumbers appear in the Insert Manual Edit dialog box.

7 Click Insert.

The Insert Manual Edit dialog box closes, and the MAC addressand ports appear in the Manual Edit tab of the VlanMacLearningdialog box.

8 Click Apply.


NN46200-516 02.0130 March 2009


.


9 Click Close.

--End--

Variable definitionsUse the data in the following table to configure MAC address autolearningon a VLAN.

Variable Value

Address The source MAC address of an entry.

Port The allowed ports the MAC address of this entry is learned on.

Modifying autolearned MAC addresses using Device ManagerModify autolearned MAC addresses to switch from an automaticallylearned MAC address to a MAC address that you can edit manually byperforming this procedure.

Procedure steps

Step Action

1 From the Device Manager menu bar, choose VLAN, MACLearning.

The VlanMacLearning dialog box appears with the Manual Edittab selected.

2 Click the Auto Learn tab.

The Auto Learn tab appears, which displays autolearned MACaddresses.

3 Double-click the address in the Auto Learn Action box that youwant to change.

4 Select convertToManualEdit from the list.

5 Click Apply.

The Auto Learn Action changes.

--End--

Variable definitionsUse the data in the following table to configure MAC address autolearningon a VLAN.

Variable Value

Address The source MAC address of the autolearned entries.


NN46200-516 02.0130 March 2009


.


Variable Value

Auto Learn Action The mechanism that allows you to move a MAC addressentry from the autolearned table to the Manual Edit table.

Settings:

• None

• convertToManualEdit

Port The port that learned the MAC address.

Managing VLAN bridging using Device ManagerThis section describes how to manage VLAN bridging.

Managing VLAN bridging using Device Manager navigation

• “Configuring the forwarding database timeout using Device Manager”(page 60)

• “Viewing the forwarding database using Device Manager” (page 61)

• “Clearing learned MAC addresses by VLAN using Device Manager”(page 62)

• “Clearing learned MAC addresses for all VLANs by port using DeviceManager” (page 63)

• “Configuring static forwarding using Device Manager” (page 63)

• “Configuring a MAC-layer bridge filter using Device Manager” (page65)

• “Configuring Layer 2 multicast MAC filtering using Device Manager”(page 66)

Configuring the forwarding database timeout using Device ManagerConfigure the forwarding database timeout to assign the period foraging out dynamically learned forwarding information by performing thisprocedure.

Procedure steps

Step Action

1 From the Device Manager menu bar, choose VLAN, VLANs -GRT (vrf 0) .


2 Select a VLAN.


NN46200-516 02.0130 March 2009


.

Managing VLAN bridging using Device Manager 61

3 Click Bridge.

The Bridge, VLAN dialog box appears with the Transparent tabselected displaying learned entry discards.

4 In the FdbAging box, enter an interval (in seconds), to age outdynamically learned forwarding information, or keep the default(300 seconds).

5 Click Apply.

6 Click Close.

--End--

Variable definitionsUse the data in the following table to configure the forwarding databasetimeout.

Variable Value

FdbAging The timeout period (in seconds) used to age outforwarding database (FDB) entries of this VLAN.

Viewing the forwarding database using Device ManagerView the forwarding database for a VLAN to see bridge forwarding andfiltering information used by transparent bridging to determine how toforward a received frame by performing this procedure.

Procedure steps

Step Action



2 Select a VLAN.

3 Click Bridge.

The Bridge, VLAN dialog box appears with the Transparent tabselected.

4 Click the Forwarding tab.

The Forwarding dialog box appears.

--End--

Variable definitionsUse the data in the following table to view the forwarding database.


NN46200-516 02.0130 March 2009


.


Variable Value

Status Values include:

• self—one of the bridge addresses

• learned—a learned entry

• mgmt—a static entry

Address A unicast MAC address for which the bridge holdsforwarding and filtering information.

VlanId The VLAN identifier.

Port A value of zero (0) or the port number of the port which cansee a frame with the specified MAC address. A value of 0indicates a self-assigned MAC address.

QosLevel The quality of service level of the destination MAC addressfor incoming frames on this VLAN.



• level2

• level3

• level4

• level5

• level6


SmltRemote Specifies if you want to use Split MultiLink Trunking(SMLT).

Clearing learned MAC addresses by VLAN using Device ManagerClear learned MAC addresses by VLAN to manually flush the bridgeforwarding database of learned MAC addresses for a VLAN by performingthis procedure.

Procedure steps

Step Action

1 From the Device Manager menu bar, choose VLAN, VLANs -GRT (vrf 0) .

2 Click the Advanced tab.

3 Double-click the VLAN Operation Action box for a specificVLAN.

4 Select flushMacFdb from the list.


NN46200-516 02.0130 March 2009


.


5 Click Apply.

--End--

Clearing learned MAC addresses for all VLANs by port using DeviceManager

Clear learned MAC addresses for port-associated VLANs to manually flushthe bridge forwarding database of learned MAC addresses for all VLANsassociated to a specific port by performing this procedure.

Procedure steps

Step Action

1 From the Device Manager main window, select a port.


The Port dialog box appears with the Interface tab selected.

3 In the Action section, select the FlushMacFdb option button.

4 Click Apply.

5 Click Close.

--End--

Configuring static forwarding using Device ManagerConfigure static forwarding to assign specific ports to forward data framesby performing this procedure.

Procedure steps

Step Action



2 Select a VLAN.

3 Click Bridge.

The Bridge, VLAN dialog box appears with the Transparent tabselected.

4 Click the Static tab.

The Static dialog box appears.

5 Click Insert.

The Bridge, VLAN, Insert Static dialog box appears.


NN46200-516 02.0130 March 2009


.


6 Enter a forwarding destination MAC address in the MacAddressbox.

7 Click the ellipsis (...) in the Port box.

The Bridge Static Port dialog box appears.

8 Click the number of the port which receives the frame.

9 Click Ok.

The Bridge Static Port dialog box closes, and the selected portappears in the Bridge, VLAN, Insert Static dialog box.

10 In the QosLevel box, select a quality of service level (0 to 8)option button or use the default (level 1).

11 Click Insert.

The Bridge, VLAN, Insert Static dialog box closes and the staticinformation appears in the Static tab of the Bridge, VLAN dialogbox.

12 Click Close.

--End--

Variable definitionsUse the data in the following table to configure static forwarding.

Variable Value

MacAddress The destination MAC address in a frame, to which theforwarding information of this entry applies. This object cantake the value of a unicast address.

Port The port number of the port that receives the frame.

QosLevel The quality of service level of the destination MAC address forincoming frames on this VLAN.



• level2

• level3

• level4

• level5

• level6



NN46200-516 02.0130 March 2009


.


Configuring a MAC-layer bridge filter using Device ManagerConfigure a MAC-layer bridge filter to apply a packet filtering method to aVLAN port by performing this procedure.

Procedure steps

Step Action



2 Select a VLAN.

3 Click Bridge.

The Bridge, VLAN dialog box appears with the Transparent tabselected

4 Click the Filter tab.

5 Click Insert.

The Bridge, VLAN, Insert Filter dialog box appears.

6 In the MacAddress box, enter the MAC address used to matchthe destination address of incoming packets.

7 In the Port box, click the ellipses (...).

The BridgeFilterPort dialog box appears.

8 Select the port number for this MAC address.

9 Click Ok.

The BridgeFilterPort dialog box closes and the port appears inthe Port box in the Bridge, VLAN, Insert Filter dialog box.

10 In the DropCommand section, select a drop method optionbutton.

11 Choose a QoS level.

12 Click Insert.

The Bridge, VLAN, Insert Filter dialog box closes, and the filterappears in the Filter tab.

13 Close all dialog boxes.

--End--

Variable definitionsUse the data in the following table to configure a MAC-layer bridge filter.


NN46200-516 02.0130 March 2009


.


Variable Value

MacAddress The MAC address of this entry. Used to match thedestination address of incoming packets.

Port The port that holds this MAC address.

DropCommand Specify a drop method:

• none: Drops no packets.

• srcDrop: Drops packets with this source MAC address.

• dstDrop: Drops packets with this destination MACaddress.

• bothDrop: Drops packets with this source and destinationMAC address.

QosLevel The quality of service level of the destination MAC addressfor incoming frames.



• level2

• level3

• level4

• level5

• level6


Configuring Layer 2 multicast MAC filtering using Device ManagerConfigure Layer 2 multicast MAC filtering to direct MAC multicast floodingto a specific set of ports by performing this procedure.

Procedure steps

Step Action


The VLAN dialog box appears displaying the Basic tab. TheBasic tab displays all defined VLANs with their configurationsand current status.

2 Select a VLAN.

3 Click Bridge.

The Bridge dialog box appears displaying the FDB Aging tab.


NN46200-516 02.0130 March 2009


.


4 Click the Multicast tab.

The Multicast dialog box appears.

5 Click Insert.

The Bridge, VLAN, Insert Multicast MAC dialog box appears.

6 In the Address box, type the MAC address for the multicastflooding domain.

7 Click the ellipsis (...) beside the ForwardingPorts box.

8 Select a port.

9 Click Ok.

10 Click the ellipsis (...) beside the MltIds box.

11 Select an MLT ID.

12 Click Ok.

13 Click Insert.

--End--

Variable definitionsUse the data in the following table to configure Layer 2 multicast MACfiltering.

Variable Value

Address The MAC address for the multicastflooding domain. This field does notaccept MAC addresses that beginwith 01:00:5e (01:00:5e:00:00:00to 01:00:5e:ff:ff:ff inclusive). If youattempt to use this type of address,the following error message appears:Error: Invalid MAV address

ForwardingPorts The ports to include in the multicastflooding domain.

MltIds The multilink trunks that you mustinclude in the multicast floodingdomain.


NN46200-516 02.0130 March 2009


.



NN46200-516 02.0130 March 2009


.

69.

VLAN configuration using the CLIThis chapter describes how to configure and manage virtual local areanetwork (VLAN) using the command line interface (CLI).

For more information about CLI command reference, see Nortel EthernetRouting Switch 8300 Command Reference - CLI (NN46200-513) .

Navigation• “Job aid: Roadmap of VLAN CLI commands” (page 69)

• “VLAN configuration and management using the CLI” (page 73)

Job aid: Roadmap of VLAN CLI commandsThe following table lists the CLI commands and their parameters that youuse to complete the procedures in this section.

Table 7Job aid: Roadmap of VLAN CLI commands

Command Parameter

config ethernet <port> perform-tagging <enable|disable>

config ethernet [<port>][spoof-detect <enable|disable>]

config vlan <vid> action <none>

<flushMacFdb>

<flushArp>

<flushIp>

<triggerRipUpdate>

<all>


NN46200-516 02.0130 March 2009


.

70 VLAN configuration using the CLI

Table 7Job aid: Roadmap of VLAN CLI commands (cont’d.)

Command Parameter

config vlan <vid> add-mlt <number>

config vlan <vid> create byport <sid>

name <value>

color <value>

info

config vlan <vid> create byprotocol <sid>

<ip>

<ipx802dot3>

<ipx802dot2>

<ipxSnap>

<ipxEthernet2>

<appleTalk>

<decLat>

<decOther>

<sna802dot2>

<snaEthernet2>

<netBios>

<xns>

<vines>

<ipV6>

<usrDefined>

<rarp>

<pid1-pidn, pidm..>

name <value>


NN46200-516 02.0130 March 2009


.

Job aid: Roadmap of VLAN CLI commands 71


Command Parameter

color <value>

encap <value>

info

config vlan <vid> delete

config vlan <vid> fdb-entry aging-time <seconds>

flush

qos-level <mac> status <value> <0...7>

sync

info

config vlan <vid> fdb-filter add <mac> port <value> drop <value> [qos<value>]

remove <mac>

info

config vlan <vid> fdb-static add <mac> port <value> [qos <value>]

remove <mac>

info

config vlan <vid> name <string>

config vlan <vid> nlb-mode<disable|igmp-mcast|multicast|unicast>

config vlan <vid> ports add <port>

member <value>

config vlan <vid> ports remove <port>

[member <value>]


NN46200-516 02.0130 March 2009


.



Command Parameter

config vlan <vid> qos-level

For more information about a procedure usingthis command, see Nortel Ethernet RoutingSwitch 8300 Configuration — QoS and IPFiltering (NN46200-515) .

<number>

config vlan <vid> static-mcastmac add mac <value> [port <value>] [mlt<value>]

add-mlt <mid> mac <value>

add-ports <port> mac <value>

delete-mac <value>

<none>

delete-ports <port> mac <value>

info

show spoof-detect [ports <portlist>]

show spoof-detect [vlan <vid>]

show vlan info advance [<vid>]

show vlan info arp [<vid>]

show vlan info basic [<vid>]

show vlan info fdb-entry <vid>

show vlan info fdb-filter <vid>

show vlan info arp [<vid>]

show vlan info autolearn-mac

show vlan info igmp [<vid>]

show vlan info manual-edit-mac

show vlan infonlb-mode [<vid>]

show vlan info ports [<vid>]


NN46200-516 02.0130 March 2009


.

VLAN configuration and management using the CLI 73


Command Parameter

show vlan info static-mcast [<vid>]

show vlan info userdefined-advance

VLAN configuration and management using the CLIConfigure and manage VLANs to create a VLAN, add or remove portsin the VLAN, assign priority, change a VLAN name, or perform otheroperations.

VLAN configuration and management using the CLI navigation

• “Creating a port-based VLAN using the CLI” (page 74)

• “Creating a protocol-based VLAN using the CLI” (page 75)

• “Assigning an IP address to a VLAN using the CLI” (page 77)

• “Deleting an IP address from a VLAN using the CLI” (page 78)

• “Viewing basic VLAN configuration using the CLI” (page 78)

• “Performing a general VLAN action using the CLI” (page 79)

• “Viewing general VLAN information using the CLI” (page 80)

• “Adding a multilink trunk to a VLAN using the CLI” (page 80)

• “Configuring VLAN forwarding database entries using the CLI” (page81)

• “Configuring VLAN forwarding database filters using the CLI” (page 82)

• “Adding VLAN static forwarding database members using the CLI”(page 83)

• “Adding ports to a VLAN using the CLI” (page 85)

• “Viewing VLAN forwarding database information using the CLI” (page84)

• “Viewing forwarding database filters using the CLI” (page 84)

• “Removing ports from a VLAN using the CLI” (page 86)

• “Configuring NLB using the CLI” (page 86)

• “Viewing VLAN port member status using the CLI” (page 88)

• “Configuring a VLAN name using the CLI” (page 89)

• “Deleting a VLAN using the CLI” (page 89)

• “Enabling VLAN tagging on a port using the CLI” (page 90)


NN46200-516 02.0130 March 2009


.


• “Assigning untagged frames to the default VLAN using the CLI” (page90)

• “Viewing advanced VLAN information using the CLI” (page 91)

• “IP spoof detection configuration using the CLI” (page 91)

• “Configuring static multicast MAC entries using the CLI” (page 93)

• “Viewing VLAN static MAC information using the CLI” (page 95)

• “Viewing VLAN manual edit MAC information using the CLI” (page 95)

• “Viewing VLAN autolearn information using the CLI” (page 96)

• “Viewing VLAN ARP information using the CLI” (page 96)

• “Viewing VLAN IGMP information using the CLI” (page 97)

• “Viewing VLAN static multicast information using the CLI” (page 97)

• “Viewing the PID range for a user-defined, protocol-based VLAN usingthe CLI” (page 97)

Creating a port-based VLAN using the CLICreate a port-based VLAN to specify ports as exclusive members of theVLAN by performing this procedure.

Procedure steps

Step Action

1 Create a port-based VLAN by using the following command:

config vlan <vid> create byport

<vid> identifies the VLAN. Values range from 1 to 4000. Thedefault VLAN ID is 1.

--End--

Variable definitionsThe following table defines optional parameters that you enter after theconfig vlan <vid> create byport command.

Variable Value

color <value> (Optional) Used by the Optivity NMS VLANManager tool to select a color when it drawsthis VLAN on the screen.Allowable color values range from 0 to 32.


NN46200-516 02.0130 March 2009


.


Variable Value

info <sid> Displays the following information:

• Sub-Context: The names of the directoriesfor the next CLI command level.

• Current Context: The parameter settingsfor the created VLAN.

<sid> is the spanning tree ID. Values rangefrom 1 to 64.

name <value> (Optional) Defines a name for the VLAN. VLANnames can include up to 20 characters inlength.

<sid> Assigns a VLAN STG ID. Allowable SID rangeis from 1 to 64.

Creating a protocol-based VLAN using the CLICreate a protocol-based VLAN to segment a network into broadcastdomains, according to the network or user-defined protocol by performingthis procedure.

Procedure steps

Step Action

1 Create a VLAN based on network protocol by using the followingcommand:

config vlan <vid> create byprotocol

OR

Create a VLAN based on a user-defined protocol by using thefollowing command:

config vlan <vid> create byprotocol <sid>usrDefined


<sid> identifies the VLAN STG ID. Values range from 1 to 64.

--End--


NN46200-516 02.0130 March 2009


.


Variable definitionsThe following table defines optional parameters that you enter after theconfig vlan <vid> create byprotocol or config vlan <vid>create byprotocol <sid> usrDefined command.

Variable Value

<appleTalk> Creates a VLAN based on appleTalk protocol.

color <value> (Optional) Used by the Optivity NMS VLANManager tool to select a color when it drawsthis VLAN on the screen. Allowable colorvalues range from 0 to 32.

<decLat> Creates a VLAN based on decLat protocol.

<decOther> Creates a VLAN based on decOther protocol.

encap <value> (Optional) Specifies frame encapsulation.Allowable values are ethernet-ii, llc, or snap.

If you do not specify an encapsulation value,a protocol entry with each encapsulation typeis created in the Ethernet Routing Switch 8300hardware.

info Displays the following information:


• Current Context: The parameter settingsfor the created VLAN.

<ip> Creates a VLAN based on IP protocol.

<ipV6> Creates a VLAN based on ipV6 protocol.

<ipx802dot2> Creates a VLAN based on ipx802dot3 protocol.

<ipx802dot3> Creates a VLAN based on ipx802dot3 protocol.

<ipxEthernet2> Creates a VLAN based on ipxEthernet2protocol.

<ipxSnap> Creates a VLAN based on ipxSnap protocol.

name <value> (Optional) Defines a name for the VLAN. VLANnames can include up to 20 characters inlength.

<netBios> Creates a VLAN based on netBios protocol.


NN46200-516 02.0130 March 2009


.


Variable Value

<pid1-pidn, pidm..> (Optional) Assigns a user-defined protocol ID(PID) in hexadecimal format (0x0001...0xffff)to this VLAN. The PID can consist of asingle PID, a range, or a combination. (forexample, 0x9001; 0x9001-0x9005; or 0x90061,0x9007-0x9009). You can specify up to amaximum of 8 PIDs for a user-defined VLAN.

<rarp> Creates a VLAN based on ipx802dot3 protocol.

<sna802dot2> Creates a VLAN based on sna802dot2protocol.

<snaEthernet2> Creates a VLAN based on snaEthernet2protocol.

<usrDefined> Creates a VLAN based on a protocol definedby the user.

<vines> Creates a VLAN based on vines protocol.

<xns> Creates a VLAN based on xns protocol.

Assigning an IP address to a VLAN using the CLIAssign an IP address to a VLAN to add the VLAN to a network byperforming this procedure.

Procedure steps

Step Action

1 Assign an IP address to a VLAN by using the followingcommand:

config vlan <vid> ip create <ipaddr/mask>


--End--

Variable definitionsThe following table defines variables in the config vlan <vid> ipcreate command.

Variable Value

<ipaddr/mask> Assigns an IP address and subnet mask to theVLAN, in the format {a.b.c.d}.


NN46200-516 02.0130 March 2009


.


Deleting an IP address from a VLAN using the CLIDelete an IP address from a VLAN to remove the VLAN from a network byperforming this procedure.

Procedure steps

Step Action

1 Delete an IP address from a VLAN by using the followingcommand:

config vlan <vid> ip delete<ipaddr>


--End--

Variable definitionsThe following table defines variables in the config vlan <vid> ipdelete<ipaddr> command.

Variable Value

<ipaddr> Specifies the IP address to delete from thisVLAN.

Viewing basic VLAN configuration using the CLIView the basic configuration for all VLANs on the switch or a specificVLAN by performing this procedure.

Procedure steps

Step Action

1 View the basic configuration for all VLANs by using the followingcommand:

show vlan info basic

OR

2 View the basic configuration for a specific VLAN by using thefollowing command:

show vlan info basic <vid>


--End--


NN46200-516 02.0130 March 2009


.


Performing a general VLAN action using the CLIPerform a general VLAN action to initiate a specific function on a VLAN,such as clearing learned MAC addresses or ARP entries from theforwarding database by performing this procedure.

Procedure steps

Step Action

1 Configure a general VLAN action by using the followingcommand:

config vlan <vid> action


--End--

Variable definitionsThe following table defines optional parameters that you enter after theconfig vlan <vid> action command.

Variable Value

<all> Removes all entries associated with this VLAN.When you execute this command, the switchimmediately sends a RIP request to solicit theupdated RIP routes.

<flushArp> Removes the ARP entries from the addresstable for the selected VLAN.

<flushIp> Removes the learned IP addresses fromthe forwarding table for the selected VLAN.When you execute this command, the switchimmediately sends a RIP request to solicit theupdated RIP routes.

<flushMacFdb> Removes the learned Mac addresses from theforwarding database for the selected VLAN.

<none> Performs no updates.

<triggerRipUpdate> Triggers a Routing Information Protocol (RIP)update.

For more information about RIP, seeConfiguration- IP Multicast Routing Protocols(NN46200-520) .


NN46200-516 02.0130 March 2009


.


Viewing general VLAN information using the CLIView all configuration information about a defined VLAN by performingthis procedure.

Procedure steps

Step Action

1 View all configuration information about a defined VLAN by usingthe following command:

show vlan info all [<vid>][by <value>]


--End--

Variable definitionsThe following table defines variables in the show vlan info all<vid>[by <value>] command.

Variable Value

by <value> Groups the information by ID numberor by each feature.

Adding a multilink trunk to a VLAN using the CLIAdd a multilink trunk to a VLAN to dedicate the trunk to a specific segmentof a LAN by performing this procedure.

Procedure steps

Step Action

1 Add a link aggregation group to a VLAN by using the followingcommand:

config vlan <vid> add-mlt<number>


--End--

Variable definitionsThe following table defines variables in the config vlan <vid>add-mlt<number> command.


NN46200-516 02.0130 March 2009


.


Variable Value

<number> The multilink trunk ID to add to this VLAN.Allowable MLT IDs range from 1 to 31.

Configuring VLAN forwarding database entries using the CLIConfigure VLAN entries in the forwarding database to determine how theVLAN manages the forwarding of MAC address information by performingthis procedure.

Procedure steps

Step Action

1 Configure VLAN entries in the forwarding database by using thefollowing command:

config vlan <vid> fdb-entry


--End--

Variable definitionsThe following table defines optional parameters that you enter after theconfig vlan <vid> fdb-entry command.

Variable Value

aging-time <seconds> Configures the forwarding database agingtimer in seconds (10 to 1 000 000) to assignthe time after which the system removesunused entries from the database.

flush Flushes the forwarding database for thisVLAN.



• Current Context: The fdb-entry parametersettings for this VLAN.


NN46200-516 02.0130 March 2009


.


Variable Value

qos-level <mac> <0...7> Configures the quality of service (QoS) levelparameters for this VLAN.

• MAC: Specify the MAC address, in theformat 0x00:0x00:0x00:0x00:0x00:0x00.

• 0...7: Specify the QoS level for this VLAN.Allowable levels range from 0 to 7, with 7as the highest priority level.

sync Synchronizes the forwarding database of theswitch with the forwarding database of theother aggregation switch.

Configuring VLAN forwarding database filters using the CLIConfigure VLAN forwarding database filters to apply a packet filteringmethod to a VLAN port by performing this procedure.

Procedure steps

Step Action

1 Configure VLAN forwarding database filters by using thefollowing command:

config vlan <vid> fdb-filter


--End--

Variable definitionsThe following table defines optional parameters that you enter after theconfig vlan <vid> fdb-filter command.

Variable Value

add <mac> port <value>drop <value> [qos<value>]

Adds a filter member to a VLAN forwardingdatabase.

• MAC: Specify the MAC address for thefilter, in the format 0x00:0x00:0x00:0x00:0x00:0x00.

• Port <value>: List one or more ports tofilter in the format {slot/port[-slot/port][,...]}.

• Drop: Specify one of the following dropoptions for the filter.


NN46200-516 02.0130 March 2009


.


Variable Value

— none

— dstOnly: destination only

— srcOnly: source only

— Both: both destination and source

• (Optional) QoS : Assigns a QoS level forthis filter. Allowable levels range from 0 to7, with 7 as the highest priority level.



• Current Context: The fdb-filter parametersettings for this VLAN.

remove <mac> Removes the filter for the specified MACaddress from the forwarding database for thisVLAN. Specify a MAC address, in the format0x00:0x00:0x00:0x00:0x00:0x00.

Adding VLAN static forwarding database members using the CLIAdd port information to a VLAN forwarding database by performing thisprocedure.

Procedure steps

Step Action

1 Configure VLAN static forwarding database members by usingthe following command:

config vlan <vid> fdb-static


--End--

Variable definitionsThe following table defines optional parameters that you enter after theconfig vlan <vid> fdb-static command.


NN46200-516 02.0130 March 2009


.


Variable Value

add <mac> port <value>[qos <value>]

Adds a static member to a VLAN forwardingdatabase.

• MAC: Specify the MAC address to add.

• Port: Specify the port to add, in the formatslot/port.

• (Optional)QoS : Assigns a QoS level forthis VLAN. Allowable levels range from 0 to7, with 7 as the highest priority level.

info Displays the following:


• Current Context: The forwarding databasestatic parameter settings for this VLAN.

remove <mac> Specifies the static MAC address member toremove from a VLAN bridge.

Viewing VLAN forwarding database information using the CLIView forwarding database information for a specific VLAN by performingthis procedure.

Procedure steps

Step Action

1 View forwarding database information for a specific VLAN byusing the following command:

show vlan info fdb-entry <vid>


--End--

Viewing forwarding database filters using the CLIView forwarding database filter information for a specific VLAN byperforming this procedure.


NN46200-516 02.0130 March 2009


.


Procedure steps

Step Action

1 View the forwarding database filters for a specific VLAN by usingthe following command:

show vlan info fdb-filter <vid>


--End--

Adding ports to a VLAN using the CLIAdd ports to a VLAN to increase the number of ports specified asexclusive members of the VLAN by performing this procedure.

Procedure steps

Step Action

1 Add ports to a VLAN by using the following command:

config vlan <vid> ports add


--End--

Variable definitionsThe following table defines optional parameters that you enter after theconfig vlan <vid> ports add command.

Variable Value

[member <value>] (Optional) Assigns the port member type.Allowable types include:

• Portmember: Use this designation forports that sometimes belong to this VLAN.

• Static: Use this designation for ports thatalways belong to this VLAN.

• Notallowed: Use this designation for portsthat never belong to this VLAN.

<port> Defines the ports to add in the format{slot/port[-slot/port][,...]}.


NN46200-516 02.0130 March 2009


.


Removing ports from a VLAN using the CLIRemove ports from a VLAN to decrease the number of ports specified asexclusive members of the VLAN by performing this procedure.

Procedure steps

Step Action

1 Remove ports from a VLAN by using the following command:

config vlan <vid> ports remove


--End--

Variable definitionsThe following table defines optional parameters that you enter after theconfig vlan <vid> ports remove command.

Variable Value

[member <value>] Assigns the port member type. Allowable typesinclude:

• Portmember: Use this designation forports that sometimes belong to this VLAN.

• Static: Use this designation for ports thatalways belong to this VLAN.

• Notallowed: Use this designation for portsthat never belong to this VLAN.

<port> Defines the ports to add in the format{slot/port[-slot/port][,...]}.

Configuring NLB using the CLIConfigure Microsoft Network Load Balancing (NLB) support to scale theperformance of a server-based program. NLB distributes client requestsamong multiple servers within a cluster of hosts, and increases thescalability and availability of TCP- and IP-based services such as Web,Terminal Services, Virtual Private Network and streaming media servers.

To configure NLB on a VRF instance (V-mode enabled), first associate theVLAN with a VRF (by default the VRF will be GRT [0]), then you configureNLB mode on the VLAN. To configure NLB on a non-VRF instance(V-mode disabled), configure NLB mode on the VLAN.


NN46200-516 02.0130 March 2009


.


Prerequisites

• NLB must be in the disable mode, which is the default mode, beforeyou can choose one of the other three modes.

Procedure steps

Step Action

1 Configure NLB support on a specific VLAN by using the followingcommand:

config vlan <vid> nlb-mode <disable|igmp-mcast|multicast|unicast>

2 Display the NLB mode on the VLANs or on a specific VLAN byusing the following command:

show vlan info nlb-mode [<vid>]

<vid> specifies the ID of the VLAN where the NLB servers arelocated. Values range from 1 to 4000. The default VLAN IDvalue is 1.

--End--

Variable definitionsThe following table defines parameters that you enter after the configvlan <vid> nlb-mode command.

Variable Definition

<disable|igmp|igmp-mcast|multicast|unicast>

Specifies the mode of the NLBfeature. You must choose onemode. NLB must be in the disablemode, which is the default mode,before you can choose one of theother three modes.

[<vid>] Specifies the ID of the VLANwhere the NLB servers are located.Values range from 1 to 4000. Thedefault VLAN ID value is 1.

Procedure job aid: show vlan info nlb-mode commandUse the data in the following table to help you use the show vlan infonlb-mode command.


NN46200-516 02.0130 March 2009


.


Table 8show vlan info nlb-mode field descriptions

Field Description

VLAN_ID Specifies the ID of the VLANs onwhich NLB is enabled.

NLB_ADMIN_MODE Specifies the NLB mode that theadministrator configured on eachVLAN. If NLB is disabled, this field isempty.

NLB_OPER_MODE Specifies the current operating NLBmode of each VLAN on which NLBis enabled. The following conditionsresult in an empty field (NLB disabled):

• NLB_ADMIN_MODE is in unicastor multicast mode, but the specificVLAN is not configured with an IPaddress.

• NLB_ADMIN_MODE is inigmp-mcast mode, but the IGMPsnoop is not enabled on thespecific VLAN

PORT_LIST Specifies the following for each NLBmode:

• Unicast mode—lists the memberports of each VLAN on which NLBis enabled.

• Multicast mode—lists the portsconnected to the cluster servers ofeach VLAN by snooping the clusterservers’ ARP response messages.

• IGMP mcast mode—lists the portsconnected to the cluster servers ofeach VLAN by snooping the IGMPReport messages of the clusterservers.

MLT_GROUPS Lists the multicast group name of eachVLAN on which NLB is enabled.

Viewing VLAN port member status using the CLIView the status of port members for all VLANs on the switch or for aspecific VLAN by performing this procedure.


NN46200-516 02.0130 March 2009


.


Procedure steps

Step Action

1 View the status of port members for all VLANs on the switch byusing the following command:

show vlan info ports

OR

2 View the status of port members for a specific VLAN by usingthe following command:

show vlan info ports [<vid>]


--End--

Configuring a VLAN name using the CLIConfigure a VLAN name to assign a unique character string to a VLAN onyour network by performing this procedure.

Procedure steps

Step Action

1 Configure a VLAN name by using the following command:

config vlan <vid> name <vname>


--End--

Variable definitionsThe following table defines variables in the config vlan <vid> name<vname> command.

Variable Value

<vname> Defines a name for the VLAN. VLAN namescan include up to 20 characters in length.

Deleting a VLAN using the CLIDelete a VLAN to remove the VLAN from your network by performing thisprocedure.


NN46200-516 02.0130 March 2009


.


Procedure steps

Step Action

1 Delete a VLAN by using the following command:

config vlan <vid> delete


--End--

Enabling VLAN tagging on a port using the CLIEnable VLAN tagging on a port to define how the port manages taggedand untagged data frames by performing this procedure.

Procedure steps

Step Action

1 Enable VLAN tagging on a port by using the following command:

config ethernet <port> perform-tagging<enable|disable>

<port> identifies the slot and port (slot/port).

--End--

Assigning untagged frames to the default VLAN using the CLIDirect untagged frames to the default VLAN by performing this procedure.

ATTENTIONYou must enable tagging on the port before you assign untagged frames to thedefault VLAN.

Procedure steps

Step Action

1 Direct untagged frames to the default VLAN by using thefollowing commands:

Conf eth <slot/port> default-vlan-id <vid> where<vid> ranges from 0 to 4000.

config ethernet <port> untag-port-default-vlan<enable|disable>


NN46200-516 02.0130 March 2009


.



--End--

Viewing advanced VLAN information using the CLIView additional parameters for a specific VLAN or all VLANs on the switchby performing this procedure.

Procedure steps

Step Action

1 View additional parameters for all VLANs on your network byusing the following command:

show vlan info advance

OR

View additional parameters for a specific VLAN by using thefollowing command:

show vlan info advance <vid>


--End--

If the MAC ADDRESS column for a VLAN displays all zeros, the VLAN hasno associated IP address.

IP spoof detection configuration using the CLIThis section describes how to configure IP spoof detection to block theexternal use of the switch IP address using the CLI.

IP spoof detection configuration using the CLI navigation

• “Configuring IP spoof detection using the CLI” (page 91)

• “Viewing IP spoof detection information using the CLI” (page 92)

Configuring IP spoof detection using the CLIConfigure IP spoof detection to enable or disable IP spoofing preventionby performing this procedure.

Step Action

1 Configure IP spoof detection by using the following command:


NN46200-516 02.0130 March 2009


.


config ethernet [<port>] [spoof-detect<enable|disable>]

--End--

Variable definitions The following table defines optional parametersthat you enter with the config ethernet [<port>] [spoof-detect<enable|disable>] command.

Variable Value

<enable|disable> Enables or disables spoof detection ona port or group of ports.

<port> Specifies a single port or group ofports, entered as {slot/port[-slot/port][,...]}.

Viewing IP spoof detection information using the CLIView IP spoof detection information to display information about spoofedIP addresses and MAC addresses associated to ports and VLANs byperforming this procedure.

Step Action

1 View IP spoof detection information by using one of the followingcommands:

show spoof-detect [ports <portlist>]

OR


--End--

Variable definitions The following table defines optional parameters thatyou enter with the show spoof-detect [ports <portlist>] or showspoof-detect [vlan <vid>] commands.

Variable Value

<portlist> Specifies a single port or group ofports, entered as {slot/port[-slot/port][,...]}.

<vid> Identifies the VLAN. Values rangefrom 1 to 4000.


NN46200-516 02.0130 March 2009


.


Job aid The following table describes the command output fielddescriptions for the show spoof-detect [ports <portlist>] andshow spoof-detect [vlan <vid>] commands.

Field Description

PortNum Identifies the port number.

VlanId Identifies the VLAN. Values rangefrom 1 to 4000.

SpoofedIp Identifies the spoofed switch VLAN IPaddress.

SpoofedMac Identifies the spoofed switch VLANsource and destination MAC address.

Configuring static multicast MAC entries using the CLIConfigure static Multicast MAC filtering to direct MAC multicast flooding toa specific set of ports by performing this procedure.

Procedure steps

Step Action

1 Configure static multicast MAC entries for a VLAN by using thefollowing command:

config vlan <vid> static-mcastmac


--End--

Variable definitionsThe following table defines optional parameters that you enter after theconfig vlan <vid> static-mcastmac command.


NN46200-516 02.0130 March 2009


.


Variable Value

add mac <value> [port<value>] [mlt <value>]

Adds a static multicast MAC entry for thisVLAN.

• <value>: Specify the MAC address to add,in the format 0x00:0x00:0x00:0x00:0x00:0x00.

• Port <value>: Add ports to the VLANstatic multicast MAC entry, in the format{slot/port[-slot/port][,...]}.

• MLT <value>: Add a static link aggregationgroup to the VLAN static multicast MACentry.

add-mlt <mid> mac<value>

Adds a static link aggregation group to thestatic multicast MAC entries for this VLAN.

• MID: Specify the MLT ID to add. AllowableMLT IDs range from 1 to 31.

• MAC <value>: Specify the MACaddress to add, in the format0x00:0x00:0x00:0x00:0x00:0x00.

add-ports <port> mac<value>

Adds ports to the static multicast MAC entriesfor this VLAN.

• Ports: Specify the ports to add, in theformat {slot/port[-slot/port][,...]}.

• MAC <value>: Specify the MACaddress for the entry, in the format0x00:0x00:0x00:0x00:0x00:0x00.

delete mac <value> Deletes a MAC address from the staticmulticast MAC entries for this VLAN.

• value: Specify the MAC address for theentry, in the format 0x00:0x00:0x00:0x00:0x00:0x00.


NN46200-516 02.0130 March 2009


.


Variable Value

delete-mlt <mid> mac<value>

Deletes a static link aggregation group fromthe static multicast MAC entries for this VLAN.

• MID: Specify the MLT ID to remove.Allowable MLT IDs range from 1 to 31.


delete-ports <port> mac<value>

Deletes ports from the static multicast MACentries for this VLAN.

• Ports: Specify the ports to remove, in theformat {slot/port[-slot/port][,...]}.




• Current Context: The forwarding databasestatic parameter settings for this VLAN.

Viewing VLAN static MAC information using the CLIView static MAC information for a specific VLAN by performing thisprocedure.

Procedure steps

Step Action

1 View static MAC information for a specific VLAN by using thefollowing command:

show vlan info fdb-static <vid>


--End--

Viewing VLAN manual edit MAC information using the CLIView MAC address information for all VLANs on the switch by performingthis procedure.


NN46200-516 02.0130 March 2009


.


Procedure steps

Step Action

1 View VLAN MAC address information by using the followingcommand:

show vlan info manual-edit-mac

--End--

Viewing VLAN autolearn information using the CLIView autolearned MAC address information for all VLANs on the switch byperforming this procedure.

Procedure steps

Step Action

1 View autolearned MAC address information for all VLANs byusing the following command:

show vlan info autolearn-mac

--End--

Viewing VLAN ARP information using the CLIView the ARP information for a specific VLAN or all VLANs on the switchby performing this procedure.

Procedure steps

Step Action

1 View the ARP information for all VLANs on your network byusing the following command:

show vlan info arp

OR

View the ARP information for a specific VLAN by using thefollowing command:

show vlan info arp <vid>


--End--


NN46200-516 02.0130 March 2009


.


Viewing VLAN IGMP information using the CLIView Internet Group Multicast Protocol (IGMP) information for all VLANson the switch or for a specific VLAN by performing this procedure.

Procedure steps

Step Action

1 View IGMP information for all VLANs by using the followingcommand:

show vlan info igmp

OR

View IGMP information for a specific VLAN by using thefollowing command:

show vlan info igmp <vid>


--End--

Viewing VLAN static multicast information using the CLIView static multicast information for all VLANs on the switch or for aspecific VLAN by performing this procedure.

Procedure steps

Step Action

1 View static multicast information for all VLANs on the switch byusing the following command:

show vlan info static-mcast

OR

View static multicast information for a specific VLAN by using thefollowing command:

show vlan info static-mcast <vid>

--End--

Viewing the PID range for a user-defined, protocol-based VLAN usingthe CLI

View the PID range for a user-defined VLAN by performing this procedure.


NN46200-516 02.0130 March 2009


.


Procedure steps

Step Action

1 View the PID range for a user-defined VLAN by using thefollowing command:

show vlan info userdefined-advance

--End--

Variable definitionsThe following table defines optional parameters that you enter after theshow vlan info userdefined-advance command.

Variable Value

<vid> Identifies the VLAN ID. Values range from 1 to4000. The default VLAN ID is 1.


NN46200-516 02.0130 March 2009


.

99.

VLAN configuration using the NNCLIThis chapter describes how to configure and manage virtual local areanetwork (VLAN) using the Nortel Networks command line interface(NNCLI)

For more information about NNCLI command reference, see NortelEthernet Routing Switch 8300 Command Reference —NNCLI(NN46200-306) .


Navigation• “Job aid: Roadmap of VLAN NNCLI commands” (page 99)

• “VLAN configuration and management using the NNCLI” (page 102)

Job aid: Roadmap of VLAN NNCLI commandsThe following table lists the NNCLI commands and their parameters thatyou use to complete the procedures in this section.

Table 9Job aid: Roadmap of VLAN NNCLI commands

Command Parameter

Privileged EXEC mode

show interface vlan ip [<vid>]

show ip igmp interface vlan <vid>

show spoof-detect [port <portlist>]


show vlan

show vlan autolearn-mac

show vlan manual-edit-mac


NN46200-516 02.0130 March 2009


.

100 VLAN configuration using the NNCLI

Table 9Job aid: Roadmap of VLAN NNCLI commands (cont’d.)

Command Parameter

show vlan members

show vlan nlb-mode

show vlan static-mcastmac

show vlan userdefined-advance

show vlan vid <vid> advance

show vlan vid <vid> basic

show vlan vid <vid> fdb-entry

show vlan vid <vid> fdb-filter

show vlan vid <vid> fdb-static

Global Configuration mode

interface vlan <vid>

no vlan fdb-entry <vid> monitor <mac><fdb-status>

no vlan fdb-filter <vid> <mac>

no vlan fdb-static <vid> <mac>

no vlan members <vid> <portlist>[portmember|static|notallowed] [portmember| static| notallowed]

no vlan nlb-mode <vid>

no vlan static-mcastmac <vid> mac<mac>

no vlan update-dynamic-mac-qos-level<vid>

vlan action <vid> <action>

vlan add-mlt <vid> <mltid>

vlan create <vid> [<name>] type protocol-Userdef <sid> [pid[-pid][,...]]

vlan create <vid> type port <sid>

[color <value>]

[encap <value>]

vlan create <vid> [<name>] type<protocol-type> <sid>

[name < value>]

vlan delete <vid>


NN46200-516 02.0130 March 2009


.

Job aid: Roadmap of VLAN NNCLI commands 101


Command Parameter

aging-time <seconds>

flush

qos-level <mac> <value>

vlan fdb-entry <vid>

sync

vlan fdb-filter <vid> add <mac> <port>drop <option> [qos <value>]

vlan fdb-static <vid> add <mac> <port>

[<qos level>]

vlan members add <vid> <port> [<membervalue>]

vlan members remove <vid> <portlist>

vlan name <vid> <vname>

vlan nlb-mode <vid>

<igmp-mcast|multicast|unicast>

vlan ports <portlist> tagging<tagAll|untagAll|untagPvidOnly>

vlan qos-level <vid> <number>

For more information about a procedure usingthis command, see Nortel Ethernet RoutingSwitch 8300 Configuration — QoS and IPFiltering (NN46200-515) .

add <mac>[ports <portlist>]

add-mlt <mltid> <mac>

add-ports <portlist> <mac>

remove <mac>

remove-mlt <mltid> <mac>

vlan static-mcastmac <vid>

remove-ports <portlist> <mac>

VLAN Interface Configuration mode

ip address <ipaddr> <mask>

no ip address <ipaddr>

FastEthernet/GigabitEthernet/VLAN InterfaceConfiguration mode

no spoof-detect [enable]


NN46200-516 02.0130 March 2009


.



Command Parameter

no spoof-detect [port <portlist>][enable]

spoof-detect [enable]

spoof-detect [port <portlist>][enable]

VLAN configuration and management using the NNCLIConfigure and manage VLANs to create a VLAN, add or remove portsin the VLAN, assign priority, change a VLAN name, or perform otheroperations.

VLAN configuration and management using the NNCLI navigation

• “Creating a port-based VLAN using the NNCLI” (page 103)

• “Creating a protocol-based VLAN using the NNCLI” (page 104)

• “Creating a user-defined, protocol-based VLAN using the NNCLI”(page 106)

• “Assigning an IP address to a VLAN using the NNCLI” (page 107)

• “Deleting an IP address from a VLAN using the CLI” (page 108)

• “Performing a general VLAN action using the NNCLI” (page 108)

• “Adding a multilink trunk to a VLAN using the NNCLI” (page 109)

• “Viewing general VLAN information using the NNCLI” (page 110)

• “Configuring VLAN forwarding database entries using the NNCLI”(page 110)

• “Deleting VLAN forwarding database entries using the NNCLI” (page111)

• “Configuring VLAN forwarding database filters using the NNCLI” (page112)

• “Deleting VLAN forwarding database filters using the NNCLI” (page113)

• “Adding VLAN static forwarding database members using the NNCLI”(page 114)

• “Removing VLAN static forwarding database members using theNNCLI” (page 114)

• “Viewing VLAN forwarding database information using the NNCLI”(page 115)


NN46200-516 02.0130 March 2009


.

VLAN configuration and management using the NNCLI 103

• “Viewing VLAN forwarding database filters using the NNCLI” (page115)

• “Adding ports to a VLAN using the NNCLI” (page 116)

• “Removing ports from a VLAN using the NNCLI” (page 117)

• “Configuring NLB using the NNCLI” (page 118)

• “Viewing VLAN port information using the NNCLI” (page 120)

• “Configuring a VLAN name using the NNCLI” (page 121)

• “Deleting a VLAN using the NNCLI” (page 121)

• “Configuring VLAN tagging using the NNCLI” (page 122)

• “Viewing specific VLAN information using the NNCLI” (page 122)

• “Viewing advanced VLAN information using the NNCLI” (page 123)

• “IP spoof detection configuration using the NNCLI” (page 123)

• “Configuring static multicast MAC entries using the NNCLI” (page 126)

• “Viewing VLAN static multicast information using the NNCLI” (page128)

• “Removing VLAN static multicast MAC entries using the NNCLI” (page128)

• “Viewing VLAN IP information using the NNCLI” (page 129)

• “Viewing VLAN static MAC information using the NNCLI” (page 129)

• “Viewing VLAN manual edit MAC information using the NNCLI” (page130)

• “Viewing VLAN IGMP information using the NNCLI” (page 130)

• “Viewing VLAN autolearn information using the NNCLI” (page 131)

• “Viewing the PID range for a user-defined VLAN using the NNCLI”(page 131)

Creating a port-based VLAN using the NNCLICreate a port-based VLAN to specify ports as exclusive members of theVLAN by performing this procedure.

Prerequisites

• Log on to the Global Configuration mode in the NNCLI.


NN46200-516 02.0130 March 2009


.


Procedure steps

Step Action

1 Create a port-based VLAN by using the following command:

vlan create <vid> type port <sid>



--End--

Variable definitionsThe following table defines optional parameters that you enter after thevlan create <vid> type port <sid> command.

Variable Value

[color <value>] (Optional) Assigns a color attribute from 0 to 32.

The VLAN Manager GUI tool uses the colorattribute to select a color when it draws this VLANon the screen.

[name <value>] (Optional) Specifies a character string that definesthe name of this VLAN. VLAN names can includeup to 20 characters in length.

type port Assigns the VLAN type to port-based VLAN.

After you create a VLAN, you cannot change itstype. You must first delete the VLAN, and thencreate a new VLAN of a different type.

Creating a protocol-based VLAN using the NNCLICreate a protocol-based VLAN to segment a network into broadcastdomains, according to the network protocol in use.

Prerequisites

• Log on to the Global Configuration mode in the NNCLI by performingthis procedure.


NN46200-516 02.0130 March 2009


.


Procedure steps

Step Action

1 Create a protocol-based VLAN by using the following command:

vlan create <vid> [<name>] type <protocol-type><sid>

<name> identifies an optional VLAN name character string with amaximum of 20 characters



--End--

Variable definitionsThe following table defines optional parameters that you enter after thevlan create <vid> [<name>] type <protocol-type> <sid>command.

Variable Value

[color <value>] (Optional) Assigns a color attribute from 0 to 32.

The VLAN Manager GUI tool uses the color attributeto select a color when it draws this VLAN on thescreen.

[encap <value>] This encapsulation type is for user-defined,protocol-based VLANs only. The default value isnull.

type <protocol-type>

Assigns the protocol type for the VLAN.

After you create a VLAN , you cannot change itstype. You must first delete the VLAN, and thencreate a new VLAN of a different type.

Supported protocol types include:

• protocol-ipxSnap

• protocol-Netbios

• protocol-RarpEther2

• protocol-snaEther2

• protocol-Userdef


NN46200-516 02.0130 March 2009


.


Variable Value

• protocol-vinesEther2

• protocol-xnsEther2

• protocol-ApltkEther2Snap

• protocol-decEther2

• protocol-decOtherEther2

• protocol-ipEther2

• protocol-ipv6Ether2

• protocol-ipx802.2

• protocol-ipx802.3

• protocol-ipxEther2

Creating a user-defined, protocol-based VLAN using the NNCLICreate user-defined, protocol-based VLANs to enable the switch tosupport networks with nonstandard protocols by performing this procedure.

Prerequisites


Procedure steps

Step Action

1 Create a user-defined, protocol-based VLAN by using thefollowing command:

vlan create <vid> [<name>] type protocol-Userdef<sid> [pid[-pid][,...]]



--End--

Variable definitionsThe following table defines variables in the vlan create <vid>[<name>] type protocol-Userdef <sid> [pid[-pid][,...]]command.


NN46200-516 02.0130 March 2009


.


Variable Value

[name <value>] (Optional) Specifies a character stringthat defines the name of this VLAN.VLAN names can include up to 20characters in length.

[pid[-pid][,...] Assigns a user-defined protocolID (PID) in hexadecimal format(0x0001...0xffff) to this VLAN. ThePID can consist of a single PID, a range,or a combination of the two (for example,0x9001; 0x9001-0x9005; or 0x90061,0x9007-0x9009). You can specify up to amaximum of eight PIDs for a user-definedVLAN.

Assigning an IP address to a VLAN using the NNCLIAssign an IP address to a VLAN to add the VLAN to a network.

Prerequisites

• Log on to the VLAN Interface Configuration mode in the NNCLI byperforming this procedure.

Procedure steps

Step Action

1 Assign an IP address to a VLAN by using the followingcommand:

ip address <ipaddr> <mask>

--End--

Variable definitionsThe following table defines variables in the ip address <ipaddr><mask> command.

Variable Value

<ipaddress> Assigns an IP address to the VLAN, in the format{a.b.c.d|a.b.c.d}.

<mask> Assigns a subnet mask to the VLAN, in the format,{x.x.x.x}.


NN46200-516 02.0130 March 2009


.


Deleting an IP address from a VLAN using the CLIDelete an IP address from a VLAN to remove the VLAN from a network byperforming this procedure.

Prerequisites

• Log on to the VLAN Interface Configuration mode in the NNCLI.

Procedure steps

Step Action

1 Delete an IP address from a VLAN by using the followingcommand:

no ip address <ipaddr>

--End--

Variable definitionsThe following table defines variables in the no ip address <ipaddr>command.

Variable Value

<ipaddress> Assigns an IP address to the VLAN, in the format{a.b.c.d|a.b.c.d}.

Performing a general VLAN action using the NNCLIPerform a general VLAN action to initiate a specific function on a VLAN,such as clearing learned MAC addresses or ARP entries from theforwarding database by performing this procedure.

Prerequisites


Procedure steps

Step Action

1 Perform a general VLAN action by using the following command:

vlan action <vid> <action>


NN46200-516 02.0130 March 2009


.



--End--

Variable definitionsThe following table defines variables in the vlan action <vid><action> command.

Variable Value

<action> Defines the VLAN action to perform:

• none—Performs no updates.

• flushMacFdb—Removes the learned Macaddresses from the forwarding database for theselected VLAN.

• flushArp—Removes the ARP entries from theaddress table for the selected VLAN.

• flushIP—Removes the learned IP addresses fromthe forwarding table for the selected VLAN. Whenyou execute this command the switch immediatelysends a RIP request to solicit the updated RIProutes.

• all—Removes entries from all tables. When youexecute this command, the switch immediatelysends a RIP request to solicit the updated RIProutes.

Adding a multilink trunk to a VLAN using the NNCLIAdd a multilink trunk to a VLAN to dedicate the trunk to a specific segmentof a LAN by performing this procedure.

Prerequisites


Procedure steps

Step Action

1 Add a link aggregation group to a VLAN by using the followingcommand:

vlan add-mlt<vid><mltid>


NN46200-516 02.0130 March 2009


.



<mltid> identifies the multilink trunk ID. Values range from 1 to31.

--End--

Viewing general VLAN information using the NNCLIView information about all existing VLANs in your network by performingthis procedure.

Prerequisites

• Log on to the Privileged EXEC mode in the NNCLI.

Procedure steps

Step Action

1 View information about all existing VLANs in your network byusing the following command:

show vlan

--End--

Configuring VLAN forwarding database entries using the NNCLIConfigure VLAN entries in the forwarding database to define how theVLAN manages the forwarding of MAC address information by performingthis procedure.

Prerequisites


Procedure steps

Step Action

1 Configure VLAN entries in the forwarding database by using thefollowing command:

vlan fdb-entry <vid>


NN46200-516 02.0130 March 2009


.



--End--

Variable definitionsThe following table defines optional parameters that you enter after thevlan fdb-entry <vid> command.

Variable Value

Coaging-time

<seconds>

Configures the forwarding database aging timer inseconds (10 to 1 000 000) to assign the time afterwhich the system removes unused entries from thedatabase.

flush Flushes the forwarding database of learned MACaddresses for this VLAN.

qos-level

<mac> <value>

Sets the quality of service (QoS) level for thisentry.

• MAC: Specifies the MAC address, in the format0x00:0x00:0x00:0x00:0x00:0x00.

• Value: Specify the QoS level for this VLAN.Allowable levels range from 0 to 7, with 7 as thehighest priority.

sync Synchronizes the forwarding database of theswitch with the forwarding database of the otherswitches.

Deleting VLAN forwarding database entries using the NNCLIDelete a VLAN forwarding database entry to remove the configuration ofhow the VLAN manages the forwarding of MAC address information byperforming this procedure.

Prerequisites


Procedure steps

Step Action

1 Delete a VLAN forwarding database entry by using the followingcommand:

no vlan fdb-entry <vid> monitor <mac> <fdb-status>


NN46200-516 02.0130 March 2009


.



--End--

Variable definitionsThe following table defines variables in the no vlan fdb-entry <vid>monitor <mac> <fdb-status> command.

Variable Value

<fdb-status> Specifies the status of the forwarding databaseentry.

• Other

• Invalid

• Learned

• Self

• Mgmt

<mac> Specifies the MAC address of the entry,in theformat 0x00:0x00:0x00:0x00:0x00:0x00.

Configuring VLAN forwarding database filters using the NNCLIConfigure VLAN forwarding database filters to apply a packet filteringmethod to a VLAN port by performing this procedure.

Prerequisites


Procedure steps

Step Action

1 Configure VLAN forwarding database filters by using thefollowing command:

vlan fdb-filter <vid> add <mac> <port> drop<option>


--End--


NN46200-516 02.0130 March 2009


.


Variable definitionsThe following table defines variables in the vlan fdb-filter <vid> add<mac> <port> drop <option> command.

Variable Value

add

<mac>

<port>

drop <option>

[qos <value>]

Adds a filter member to the forwarding database.

• MAC: Specify the MAC address for the filter, inthe format 0x00:0x00:0x00:0x00:0x00:0x00.

• port: List one or more ports to add to thisVLAN, in the format {slot/port[-slot/port][,...]}.

• drop: Specify the drop option to use.

— none

— scrOnly

— dstOnly

— Both

• (Optional) QoS: Assigns a quality of service(QoS) level for this filter. Allowable levels rangefrom 0 to 7, with 7 as the highest priority.

Deleting VLAN forwarding database filters using the NNCLIDelete VLAN forwarding database filters to remove a packet filteringmethod previously applied to a VLAN port by performing this procedure.

Prerequisites


Procedure steps

Step Action

1 Delete VLAN forwarding database filters by using the followingcommand:

no vlan fdb-filter <vid> <mac>


<mac> identifies the MAC address. Use the format;0x00:0x00:0x00:0x00:0x00:0x00

--End--


NN46200-516 02.0130 March 2009


.


Adding VLAN static forwarding database members using the NNCLIAdd port information to a VLAN forwarding database by performing thisprocedure.

Prerequisites


Procedure steps

Step Action

1 Add port information to a VLAN forwarding database by usingthe following command:

vlan fdb-static <vid> add <mac> <port> <qos level>


--End--

Variable definitionsThe following table defines variables in the vlan fdb-static <vid> add<mac> <port> <qos level> command.

Variable Value

<mac> Specifies the MAC address for the staticforwarding database entry to add, in the format0x00:0x00:0x00:0x00:0x00:0x00.

<port> Specifies the slot or port number for the staticforwarding database entry to add.

[<qos level>] (Optional) Specifies a QoS level for the staticforwarding database member. Allowable levelsrange from 0 to 7, with 7 as the highest prioritylevel.

Removing VLAN static forwarding database members using the NNCLIRemove port information from a VLAN forwarding database by performingthis procedure.

Prerequisites



NN46200-516 02.0130 March 2009


.


Procedure steps

Step Action

1 Remove port information from a VLAN forwarding database byusing the following command:

no vlan fdb-static <vid> <mac>



--End--

Viewing VLAN forwarding database information using the NNCLIView forwarding database information for a specific VLAN by performingthis procedure.

Prerequisites


Procedure steps

Step Action

1 View forwarding database information for a specific VLAN byusing the following command:

show vlan vid <vid> fdb-entry


--End--

Viewing VLAN forwarding database filters using the NNCLIView forwarding database bridging filter information for a specific VLAN byperforming this procedure.

Prerequisites



NN46200-516 02.0130 March 2009


.


Procedure steps

Step Action

1 View forwarding database bridging filter information for a specificVLAN by using the following command:

show vlan vid <vid> fdb-filter


--End--

Adding ports to a VLAN using the NNCLIAdd ports to a VLAN to increase the number of ports specified asexclusive members of the VLAN by performing this procedure.

Prerequisites


Procedure steps

Step Action

1 Add ports to a VLAN by using the following command:

vlan members add <vid> <port> [<member value>]



--End--

Variable definitionsThe following table defines variables in the vlan members add <vid><port> [<member value>] command.


NN46200-516 02.0130 March 2009


.


Variable Value

[<member value>] Defines the port member type for added ports. Theallowable port member types are

• portmember: Sometimes a member of thisVLAN.

• static: Always a member of this VLAN.

• notallowed: Never a member of this VLAN.

Removing ports from a VLAN using the NNCLIRemove ports from a VLAN to decrease the number of ports specified asexclusive members of the VLAN by performing this procedure.

Prerequisites


Procedure steps

Step Action

1 Remove ports from a VLAN by entering one of the followingcommands:

vlan members remove <vid> <portlist> [portmember|static| notallowed]

OR

no vlan members <vid> <portlist> [portmember|static| notallowed]


--End--

Variable definitionsThe following table defines variables in the vlan members remove <vid><portlist> or the no vlan members <vid> <portlist> command.


NN46200-516 02.0130 March 2009


.


Variable Value

<portlist> Lists one or more ports to remove from this VLAN. Thiscommand does not delete the VLAN. Specify the portlist inthe format {slot/port[-slot/port][,...]}.

[portmember|static|notallowed]

(Optional) Specifies the type of port membership as one ofthe following:

• portmember: Sometimes a member of this VLAN.

• static: Always a member of this VLAN.

• notallowed: Never a member of this VLAN

Configuring NLB using the NNCLIConfigure Microsoft Network Load Balancing (NLB) support to scale theperformance of a server-based program. NLB distributes client requestsamong multiple servers within a cluster of hosts, and increases thescalability and availability of TCP- and IP-based services such as Web,Terminal Services, Virtual Private Network and streaming media servers.

To configure NLB on a VRF instance (V-mode enabled), first associate theVLAN with a VRF (by default the VRF will be GRT [0]), then you configureNLB mode on the VLAN. To configure NLB on a non-VRF instance(V-mode disabled), configure NLB mode on the VLAN.

Prerequisites

• Log on to the Global Configuration mode or VRF router mode in theNNCLI.

Procedure steps

Step Action

1 Configure NLB on a specific VLAN by using the followingcommand:

vlan nlb-mode <vid> <igmp-mcast|multicast|unicast>

<vid> is the VLAN identifier. Values range from 1 to 4000.

2 Configure NLB in disable mode on a specific VLAN by using thefollowing command:

no vlan nlb-mode <vid>

<vid> is the VLAN identifier. Values range from 1 to 4000.

3 Display the NLB configuration by using the following command:


NN46200-516 02.0130 March 2009


.


show vlan nlb-mode

--End--

Variable definitionsThe following table defines parameters that you enter after the vlannlb-mode <vid> command.

Variable Value

<vid> Specifies the ID of the VLAN where theNLB servers are located. Values rangefrom 1 to 4000.Default Value: 1

<|igmp-mcast|multicast|unicast>

Specifies the mode of the NLB feature.You must choose one mode. NLB mustbe in the disable mode, which is thedefault mode, before you choose one ofthe other three modes.The default form of this command is novlan nlb-mode <vid>.

For more information, see Microsoft Network Load Balancing TCG.

Procedure job aid: show vlan nlb-mode commandThe following table shows the field descriptions for this command.

Field Description

VLAN_ID Specifies the ID of the VLANs onwhich NLB is enabled.

NLB_ADMIN_MODE Specifies the NLB mode that theadministrator configures on eachVLAN. If NLB is disabled, this field isempty.


NN46200-516 02.0130 March 2009


.


Field Description

NLB_OPER_MODE Specifies the current operating NLBmode of each VLAN on which NLBis enabled. The following conditionsresult in an empty field (NLB disabled):

• NLB_ADMIN_MODE is in unicastor multicast mode, but the specificVLAN is not configured with an IPaddress.

• NLB_ADMIN_MODE is inigmp-mcast mode, but the IGMPsnoop is not enabled on thespecific VLAN.

PORT_LIST Specifies the following for each NLBmode:

• Unicast mode—lists the memberports of each VLAN on which NLBis enabled.

• Multicast mode—lists the portsconnected to the cluster servers ofeach VLAN by snooping the ARPresponse messages of the clusterservers.

• IGMP mcast mode—lists the portsconnected to the cluster servers ofeach VLAN by snooping the IGMPReport messages of the clusterservers.

MLT_GROUPS Lists the multicast group name of eachVLAN on which NLB is enabled.

Viewing VLAN port information using the NNCLIView port information for all VLANs by performing this procedure.

Prerequisites



NN46200-516 02.0130 March 2009


.


Procedure steps

Step Action

1 View port information for all VLANs by using the followingcommand:

show vlan members

--End--

Configuring a VLAN name using the NNCLIConfigure a VLAN name to assign a unique character string to a VLAN onyour network by performing this procedure.

Prerequisites


Procedure steps

Step Action

1 Configure a VLAN name by using the following command:

vlan name <vid> <vname>


<vname> identifies the VLAN name. Values can be a maximumof 20 characters.

--End--

Deleting a VLAN using the NNCLIDelete a VLAN to remove the VLAN from your network by performing thisprocedure.

Prerequisites


Procedure steps

Step Action

1 Delete a VLAN by using the following command:


NN46200-516 02.0130 March 2009


.


vlan delete <vid>


--End--

Configuring VLAN tagging using the NNCLIConfigure VLAN tagging on a port to define how the port manages taggedand untagged data frames by performing this procedure.

Prerequisites


Procedure steps

Step Action

1 Configure VLAN tagging on a port by using the followingcommand:

vlan ports <port> tagging<tagAll|untagAll|untagPvidOnly>


--End--

Variable definitionsThe following table defines variables in the vlan ports <port> tagging<tagAll|untagAll|untagPvidOnly> command.

Variable Value

tagging<tagAll|untagAll|untagPvidOnly>

Specifies the type of port tagging as one of thefollowing:

• tagAll: Enable tagging on all VLANs of the port.

• untagAll: Disable tagging on a port.

• untagPvidOnly: Disable tagging on the Pvid ofa tagged port.

Viewing specific VLAN information using the NNCLIView information about a specific VLAN already configured in your networkby performing this procedure.


NN46200-516 02.0130 March 2009


.


Prerequisites


Procedure steps

Step Action

1 View information about a specific VLAN by using the followingcommand:

show vlan vid <vid> basic


--End--

Viewing advanced VLAN information using the NNCLIView all configuration information about a defined VLAN by performingthis procedure.

Prerequisites


Procedure steps

Step Action

1 View all configuration information about a defined VLAN by usingthe following command:

show vlan vid <vid> advance


--End--

IP spoof detection configuration using the NNCLIThis section describes how to configure IP spoof detection to block theexternal use of the switch IP address using the NNCLI.


NN46200-516 02.0130 March 2009


.


IP spoof detection configuration using the NNCLI navigation

• “Enabling IP spoof detection using the NNCLI” (page 124)

• “Disabling IP spoof detection using the NNCLI” (page 124)

• “Viewing IP spoof detection information using the NNCLI” (page 125)

Enabling IP spoof detection using the NNCLIEnable IP spoof detection to prevent IP spoofing by performing thisprocedure.

ATTENTIONIf you are using SMLT, be sure to configure spoof detection on both SMLTaggregation switches to avoid connectivity issues.

• Log on to the Interface Configuration mode in the NNCLI.

Step Action

1 Enable IP spoof detection on the accessed port by using thefollowing command:

spoof-detect [enable]

2 Enable IP spoof detection on a specific port or group of ports byusing the following command:

spoof-detect [port <portlist>] [enable]

--End--

Variable definitions The following table defines optional parametersthat you enter with the spoof-detect [port <portlist>] [enable]command.

Variable Value

enable Enables spoof detection on the port.


Disabling IP spoof detection using the NNCLIDisable IP spoof detection to discontinue IP spoofing prevention byperforming this procedure.


NN46200-516 02.0130 March 2009


.


ATTENTIONIf you are using SMLT, be sure to configure spoof detection on both SMLTaggregation switches to avoid connectivity issues.

Restart the switch to enable the spoof detection feature.


Step Action

1 Disable IP spoof detection on the accessed port by using thefollowing command:

no spoof-detect [enable]

2 Disable IP spoof detection on a specific port or group of ports byusing the following command:

no spoof-detect [port <portlist>] [enable]

--End--

Variable definitions The following table defines optional parameters thatyou enter with the no spoof-detect [port <portlist>] [enable]command.

Variable Value


Viewing IP spoof detection information using the NNCLIView IP spoof detection information to display information about spoofedIP addresses and MAC addresses associated to ports and VLANs byperforming this procedure.


Step Action

1 View IP spoof detection information by using one of the followingcommands:

show spoof-detect [port <portlist>]


NN46200-516 02.0130 March 2009


.


OR


--End--

Variable definitions The following table defines optional parameters thatyou enter with the show spoof-detect [port <portlist>] or showspoof-detect [vlan <vid>] commands.

Variable Value


<vid> Identifies the VLAN. Values rangefrom 1 to 4000.

Job aid The following table describes the command output fielddescriptions for the show spoof-detect [port <portlist>] andshow spoof-detect [vlan <vid>] commands.

Field Description

PortNum Identifies the port number.

VlanId Identifies the VLAN. Values rangefrom 1 to 4000.

SpoofedIp Identifies the spoofed switch VLAN IPaddress.

SpoofedMac Identifies the spoofed switch VLANsource and destination MAC address.

Configuring static multicast MAC entries using the NNCLIConfigure static Multicast MAC filtering to direct MAC multicast flooding toa specific set of ports by performing this procedure.

Prerequisites


Procedure steps

Step Action

1 Configure static Multicast MAC filtering by using the followingcommand:


NN46200-516 02.0130 March 2009


.


vlan static-mcastmac <vid>


--End--

Variable definitionsThe following table defines optional parameters that you enter after thevlan static-mcastmac <vid> command.

Variable Value

add

<mac>[ports <portlist>][mlt <mltid>]

Adds a static multicast MAC entry for this VLAN.

• MAC: Specify the MAC address to add, in theformat 0x00:0x00:0x00:0x00:0x00:0x00.

• MLT: Add a static link aggregation group to theVLAN static multicast MAC entry.

• Ports: Add ports to the VLAN static multicast MACentry, in the format {slot/port[-slot/port][,...]}.

add-mlt

<mltid><mac>

Adds a static link aggregation group to the staticmulticast MAC entries for this VLAN.

• MLTID: Specify the MLT ID to add. Allowable MLTIDs range from 1 to 31.

• MAC: Specify the MAC address to add, in theformat 0x00:0x00:0x00:0x00:0x00:0x00.

add-ports

<portlist><mac>

Adds ports to the static multicast MAC entries for thisVLAN.

• Portlist: Specify the ports to add, in the format{slot/port[-slot/port][,...]}.

• MAC: Specify the MAC address for the entry, in theformat 0x00:0x00:0x00:0x00:0x00:0x00.

remove <mac> Removes a static multicast MAC entry for this VLAN.

• MAC value: Specify the MAC address for the entry,in the format 0x00:0x00:0x00:0x00:0x00:0x00.


NN46200-516 02.0130 March 2009


.


Variable Value

remove-mlt

<mltid><mac>

Removes a static link aggregation group from the staticmulticast MAC entries for this VLAN.

• MltID: Specify the MLT ID to remove. AllowableMLT IDs range from 1 to 31.


remove-ports

<portlist><mac>

Removes ports from the static multicast MAC entriesfor this VLAN.

• Portlist: Specify the ports to remove, in the format{slot/port[-slot/port][,...]}.


Removing VLAN static multicast MAC entries using the NNCLIRemove VLAN static multicast MAC entries by performing this procedure.

Prerequisites


Procedure steps

Step Action

1 Remove VLAN static multicast MAC entries by using thefollowing command:

no vlan static-mcastmac <vid> mac <mac>



--End--

Viewing VLAN static multicast information using the NNCLIView static multicast information for all VLANs by performing thisprocedure.

Prerequisites



NN46200-516 02.0130 March 2009


.


Procedure steps

Step Action

1 View static multicast information for all VLANs by using thefollowing command:

show vlan static-mcastmac

--End--

Viewing VLAN IP information using the NNCLIView IP information for all VLANs or for a specific VLAN by performingthis procedure.

Prerequisites


Procedure steps

Step Action

1 View IP information for all VLANs or for a specific VLAN by usingthe following command:

show interface vlan ip <vid>


--End--

Viewing VLAN static MAC information using the NNCLIView static MAC information for a specific VLAN by performing thisprocedure.

Prerequisites


Procedure steps

Step Action

1 View static MAC information for a specific VLAN by using thefollowing command:


NN46200-516 02.0130 March 2009


.


show vlan vid <vid> fdb-static


--End--

Viewing VLAN manual edit MAC information using the NNCLIView MAC address information for all VLANs by performing this procedure.

Prerequisites

• Log on to Privileged EXEC the mode in the NNCLI.

Procedure steps

Step Action

1 View MAC address information for all VLANs by using thefollowing command:

show vlan manual-edit-mac

--End--

Viewing VLAN IGMP information using the NNCLIView Internet Group Multicast Protocol (IGMP) information for all VLANsor a specific VLAN by performing this procedure.

Prerequisites


Procedure steps

Step Action

1 View IGMP information for all VLANs or a specific VLAN byusing the following command:

show ip igmp interface vlan <vid>


--End--


NN46200-516 02.0130 March 2009


.


Viewing VLAN autolearn information using the NNCLIView MAC information automatically learned by the switch for all VLANs byperforming this procedure.

Prerequisites


Procedure steps

Step Action

1 View MAC information automatically learned by the switch for allVLANs by using the following command:

show vlan autolearn-mac

--End--

Viewing the PID range for a user-defined VLAN using the NNCLIView the PID range for user-defined VLANs by performing this procedure.

Prerequisites


Procedure steps

Step Action

1 View the PID range for user-defined VLANs by using thefollowing command:

show vlan userdefined-advance

--End--


NN46200-516 02.0130 March 2009


.



NN46200-516 02.0130 March 2009


.

133.

Spanning Tree configuration usingDevice Manager

This chapter describes how to create, manage, and monitor Spanning TreeGroups (STG) and how to configure Spanning Tree Protocol (STP), RapidSpanning Tree Protocol (RSTP), and Multiple Spanning Tree Protocol(MSTP) using the Device Manager.


ATTENTIONIf you disable the Spanning Tree Protocol, it can reduce CPU overhead slightly.However, unless you use the switch in a simple network with little possibility ofloops, Nortel recommends that you leave the Spanning Tree Protocol enabled.

Navigation• “Configuring the STP mode using Device Manager” (page 133)

• “Configuring Spanning Tree Groups using Device Manager” (page 136)

• “RSTP Configuration using Device Manager” (page 148)

• “MSTP configuration using Device Manager” (page 154)

Configuring the STP mode using Device ManagerConfigure STP mode to set the spanning tree mode for the switch toMultiple Spanning Tree Protocol (MSTP), Rapid Spanning Tree Protocol(RSTP), or the default mode by performing this procedure. The defaultmode is legacy STP.


NN46200-516 02.0130 March 2009


.

134 Spanning Tree configuration using Device Manager

ATTENTIONAfter you change the switch STP mode, you must save the switch bootconfiguration file and restart the switch.

Procedure steps

Step Action

1 From the Device Manager menu bar, choose VLAN, SpanningTree, Globals.

2 In the SpanningTreeAdminMode section, select a spanningtree mode.

3 Click Apply.

The system notifies you that the setting takes effect after saveand restart.

4 Click Close.

5 From the Device Manager menu bar, choose Edit, Chassis.

6 In the Action section, click the saveBootConfig button.

7 Click Apply.

8 In the Action section, click the hardReset button.

9 Click Apply.

ATTENTIONYou must wait for the switch reboot process to complete before youcontinue with the next step.

10 From the Device Manager menu bar, choose Device,Rediscover Device.

OR

From the Device Manager menu bar, choose Device, Open.

11 If you selected Device, Open in step 10, click the Open button inthe Open Device dialog box.

--End--

Variable definitionsUse the data in this table to configure the switch spanning tree mode.

Variable Value

nortelStpg Specifies the default legacy spanningtree mode.


NN46200-516 02.0130 March 2009


.

Configuring STP BPDU Filtering using Device Manager 135

Variable Value

mstp Specifies MSTP, spanning tree mode.

rstp Specifies RSTP, spanning tree mode.

Configuring STP BPDU Filtering using Device ManagerConfigure STP BPDU Filtering to enable and manage STP BPDU Filteringon a port or group of ports by performing this procedure.

Procedure steps

Step Action

1 From the Device View, select a port.

To select multiple ports, hold down the Ctrl key, and then clickthe required ports.


3 Click the STP BPDU-Filtering tab.

4 In the STP BPDU-Filtering dialog box, configure STPBPDU-Filtering parameters as required.

5 Click Apply.

--End--

Variable definitionsUse the data in this table to help you configure STP BPDU Filtering.

Variable Value

AdminEnabled Enables or disables BPDU filtering onthe port or ports.

OperEnabled Indicates the current operational statusof BPDU filtering on the port or ports.Values are true (enabled) or false(disabled).

Timeout Specifies the time (in 1/100 seconds)duration the port remains disabledafter it receives a BPDU. The porttimer is disabled if this value is set to0. The default value is 12000 (120seconds).

TimerCount Displays the time remaining for theport to stay in the disabled state afterreceiving a BPDU.


NN46200-516 02.0130 March 2009


.


Configuring Spanning Tree Groups using Device ManagerConfigure Spanning Tree Groups to create a collection of ports that belongto the same STP instance.

ATTENTIONTo configure STG, you must set the spanning tree mode for the switch to legacySTP. For more information, see “Configuring the STP mode using DeviceManager” (page 133).

Configuring Spanning Tree Groups using Device Manager navigation

• “Configuring STG global settings using Device Manager” (page 136)

• “Creating an STG using Device Manager” (page 137)

• “Editing an STG using Device Manager” (page 139)

• “Deleting an STG using Device Manager” (page 140)

• “Adding ports to an STG using Device Manager” (page 141)

• “Viewing STG status using Device Manager” (page 141)

• “Enabling or disabling STG on a port using Device Manager” (page143)

• “Viewing STG ports using Device Manager” (page 144)

• “Configuring topology change detection using Device Manager” (page147)

Configuring STG global settings using Device ManagerWhen you create an STG, the switch assigns a default global MACaddress that sends bridge protocol data units (BPDUs). Configure STGglobal settings if you want to replace the default global MAC address andto identify the mask for the MAC address by performing this procedure.

Prerequisites

• Set the switch spanning tree mode to legacy STP. For moreinformation, see “Configuring the STP mode using Device Manager”(page 133).

Procedure steps

Step Action

1 From the Device Manager menu bar, choose VLAN, SpanningTree, STG .

The STG dialog box appears with the Globals tab selected.

2 In the BpduStartMacAddress box, enter a MAC address.


NN46200-516 02.0130 March 2009


.

Configuring Spanning Tree Groups using Device Manager 137

3 In the BpduMacAddressMask box, identify the mask for theMAC address.

4 Click Apply.

--End--

Creating an STG using Device ManagerCreate an STG to assign ports to an instance of spanning tree byperforming this procedure.

Prerequisites


Procedure steps

Step Action



2 Click the Configuration tab.

The STG configuration dialog box appears.

3 Click Insert.

The STG, Insert Configuration dialog box appears.

4 Use the boxes in the STG, Insert Configuration dialog box toconfigure the STG.

5 In the PortMembers box, click the ellipsis (...).

The StgPortMembers dialog box appears.

6 Click the ports you want to add to the STG.

7 Click OK.

The StgPortMembers dialog box closes and the ports appear inthe PortMembers box in the STG, Insert Configuration dialogbox.

8 Click Insert.

The STG, Insert Configuration dialog box closes, and the STGappears in the Configuration dialog box.


NN46200-516 02.0130 March 2009


.


9 Click Apply.

--End--

Variable definitionsUse the data in the following table to create an STG.

Variable Value

Id The ID number for the STG.

The STG ID and TaggedBpduVlanIdmust be unique in the STG table. If youchange the STG ID without updatingTaggedBpduVlanId, the insertion can failbecause of a duplicate TaggedBpduVlanId.

Type Specifies the type of STG.

Priority Assigns the STP bridge priority, whichranges from 0 (highest priority) to 65535(lowest priority). The default is 32768.

BridgeMaxAge The value (in hundredths of a second) thatall bridges use for MaxAge when this bridgeacts as the root.

The 802.1D-1990 standard specifies that theBridgeMaxAge range relates to the value ofdot1dStpBridgeHelloTime. The default is2000 (20 seconds)

BridgeHelloTime The value (in hundredths of a second)that all bridges use for HelloTime whenthis bridge acts as the root. The IEEE802.1D-1990 standard specifies thegranularity of this timer as to be inincrements of 1/100 of a second. Thedefault is 200 (2 seconds).

BridgeForwardDelay The value (in hundredths of a second) thatall bridges use for Forward Delay when thisbridge acts as the root. The default is 1500(15 seconds).

EnableSTP Enables (check box selected) or disables(check box cleared) the spanning treeprotocol (STP) algorithm for the STG.

StpTrapEnable Enables SNMP traps to be sent to the tracereceiver each time an STP topology occurs(check box selected).


NN46200-516 02.0130 March 2009


.


Variable Value

TaggedBpduAddress Represents a MAC address usedspecifically for tagged BPDUs. Assigned bythe system.

TaggedBpduVlanId Represents the VLAN tag associated withthe STG. The system uses this ID to tagBPDUs through a non-IEEE tagging bridgeto another Ethernet Routing Switch 8000Series.

By default, the TaggedBpduVlanId is anaddress calculated by Device Managerbased on the STG ID. Accepting the defaultvalue calculated by Device Manager allowsfor easier coordination among STGs acrossmultiple switches. If you enter a customvalue for this field, you must manuallycoordinate it across all switches.

The STG ID and TaggedBpduVlanIdmust be unique in the STG table. If youchange the STG ID without updatingTaggedBpduVlanId, the insertion can failbecause of a duplicate TaggedBpduVlanId.

PortMembers The ports you want to become members ofthe new STG.

You cannot select ports if configured asmembers of another STG.

NtStgEnable Defines whether this STG is operating inNortel mode or in Cisco mode:• true—Nortel mode

• false—Cisco mode

For information about editing an STG, see “Editing an STG using DeviceManager” (page 139).

For information about deleting an STG, see “Deleting an STG using DeviceManager” (page 140).

For information about adding ports to an STG, see “Adding ports to anSTG using Device Manager” (page 141).

Editing an STG using Device ManagerEdit an STG to change the current configuration of the STG by performingthis procedure.


NN46200-516 02.0130 March 2009


.


Prerequisites


Procedure steps

Step Action





3 Double-click the box that you want to edit.

The box becomes editable.

4 Enter a new value in the box, or select a new setting from thelist.

5 Click Apply.

--End--

Deleting an STG using Device ManagerDelete an STG to remove the STG from your network by performing thisprocedure.

Prerequisites


Procedure steps

Step Action

1 From the Device Manager menu bar, choose VLAN, SpanningTree, STG.



The Configuration tab appears.

3 Select the STG that you want to delete.


NN46200-516 02.0130 March 2009


.


You must delete all VLANs from an STG before you can removeit.

4 Click Delete.

You cannot delete STG 1, the default STG.

--End--

Adding ports to an STG using Device ManagerAdd ports to an existing STG by performing this procedure.

Prerequisites


Procedure steps

Step Action





3 Double-click the PortMembers box for the STG to which youwant to add ports.

The STGPortMembers dialog box appears indicating the portmembers assigned to this STG.

4 Click the ports you want to add to the STG.

5 Click OK.

The StgPortMembers dialog box closes, and the ports appear inthe PortMembers box in the STG configuration dialog box.

6 Click Apply.

--End--

Viewing STG status using Device ManagerView the spanning tree state for each STG associated with the network byperforming this procedure.


NN46200-516 02.0130 March 2009


.


Prerequisites


Procedure steps

Step Action



2 Click the Status tab.

The Status tab appears, which displays the spanning tree statefor each STG associated with the network.

--End--

Variable definitionsUse the data in the following table to view the spanning tree state for eachSTG.

Variable Value

Id The ID number for the STG.

The STG ID and TaggedBpduVlanId must be uniquein the STG table. If you change the STG ID withoutupdating TaggedBpduVlanId, the insertion can failbecause of a duplicate TaggedBpduVlanId.

BridgeAddress The MAC address used by this bridge when it must bereferred to in a unique fashion.

NumPorts The number of ports controlled by this bridging entity.

ProtocolSpecification Indicates the version of the STP in use. The IEEE802.1d implementations return ieee8021d.

TimeSinceTopologyChange

Indicates the time (in hundredths of a second) sincethe last topology change was detected by the bridgeentity or STG.

TopChanges A bridge sends a topology change trap when eitherof its configured ports transitions from the Learningstate to the Forwarding state, or from the Forwardingstate to the Blocking state. The bridge does not send atrap if a new root trap is sent for the same transition.Implementation of this trap is optional.


NN46200-516 02.0130 March 2009


.


Variable Value

DesignatedRoot The bridge identifier of the root of the spanning treeas determined by the STP. This value is used as theRoot Identifier parameter in all configuration BPDUsoriginated by this node.

RootCost The cost of the path to the root as seen from thisbridge.

RootPort The port number that offers the lowest cost path fromthis bridge to the root bridge.

MaxAge The maximum age of STP information learned from thenetwork on a port before the system discards it (in unitsof hundredths of a second). The actual value that thisbridge currently uses.

HelloTime The amount of time (in hundredths of a second)between transmission of configuration BPDUs by thisnode on a port when it is the root of the spanning tree.The default value is 200 (2 seconds).

HoldTime The time interval (in hundredths of a second), duringwhich no more than two configuration BPDUs aretransmitted by this node. The default value is 100 (1second).

ForwardDelay The time interval (in hundredths of a second) thatcontrols how fast a port changes its spanning state(when moving toward the Forwarding state). Thevalue determines how long the port stays in each ofthe Listening and Learning states, which precede theForwarding state. This value is also used when atopology change occurs, to age all dynamic entries inthe forwarding database.

The bridge uses this value, unless it becomes the rootand; therefore, uses rcStgBridgeForwardDelay.

The default value is 1500 (15 seconds).

Enabling or disabling STG on a port using Device ManagerEnable or disable STP on a specific port by performing this procedure.


NN46200-516 02.0130 March 2009


.


Prerequisites


Procedure steps

Step Action



2 Click the Ports tab.

The STG Ports dialog box appears.

3 In the Port box, locate the port you want to enable or disable.

4 Double-click the EnableStp box for the port you want to enableor disable.

5 To enable STP on the port, select true in the list.

OR

To disable STP on the port, select false in the list.

6 Click Apply.

--End--

For information about viewing STG ports, see “Viewing STG ports usingDevice Manager” (page 144).

For information about configuring topology change detection, see“Configuring topology change detection using Device Manager” (page147).

Viewing STG ports using Device ManagerView the status of ports for each STG in the network by performing thisprocedure.


NN46200-516 02.0130 March 2009


.


Prerequisites


Procedure steps

Step Action




The STG ports dialog box appears, which displays the status ofports for each STG in the network.

--End--

Variable definitionsUse the data in the following table to view the status of ports for each STGin the network.

Variable Value

ChangeDetection The change detection setting (true or false)for this port. You can configure this valueon access ports only. If you enable changedetection on an MLT with access ports, thesetting automatically applies to all ports inthe MLT.

DesignatedBridge The Bridge Identifier of Designated Bridgefor this segment, according to the port.

DesignatedCost The path cost of the Designated Port of thesegment connected to this port. This valuecompares to the Root Path Cost field inreceived BPDUs.

DesignatedPort The Port Identifier Designated Bridge portfor this segment.

DesignatedRoot The unique Bridge Identifier of the bridgerecorded as the root in the configurationBPDUs. The Designated Bridge transmitsthe configuration BPDUs for the segmentattached to the port.


NN46200-516 02.0130 March 2009


.


Variable Value

EnableStp The STP state of the port.

• Enabled—BPDUs processed inaccordance with STP.

• Disabled—The port stays in aforwarding state it drops and doesnot process received BPDUs.

FastStart When you configure this flag, the enabledport moves to the forwarding (5) state.

• true (enables FastStart for the port)

• false (default, disables FastStart for theport)

This setting does not adhere to thespecifications in the IEEE 802.1D standardfor STP, in which a port enters the blockingstate following the initialization of thebridging device or from the disabledstate when you enable the port throughconfiguration.

ForwardTransitions The number of times this port transitionedfrom the Learning state to the Forwardingstate.

PathCost The contribution of this port to the pathcost of paths toward the spanning tree rootthat includes this port. The 802.1D-1990protocol recommends that the default valueof this parameter be in inverse proportionto the speed of the attached LAN.

Port The port number for which this entrycontains STP management information.

Priority The value of the priority field in the firstoctet of the Port ID. The value of rcStgPortdefines the second octet of the Port ID (thePort ID includes only two octets).

Although port priority values range from0–255, the Ethernet Routing Switch 8300uses only the following values: 0, 16, 32,48, 64, 80, 96, 112, 128, 144, 160, 176,192, 208, 224, and 240. The default valueis 128.


NN46200-516 02.0130 March 2009


.


Variable Value

State The current state of the port as defined bythe application of the STP:

• disabled (1)

• blocking (2)

• listening (3)

• learning (4)

• forwarding (5)

• broken (6)

This state controls what action a port takeson reception of the frame. For example, ifthe bridge detects a malfunctioning port, itplaces that port into the broken (6) state.

StgId The STG identifier assigned to this port.

Configuring topology change detection using Device ManagerConfigure STP topology change detection to enable (default) or disable thetopology change detection feature by performing this procedure.

Prerequisites


Procedure steps

Step Action




The STG Ports dialog box appears.

3 Double-click the ChangeDetection box for the desired port.

4 To enable change detection on the port, select true in the list.

OR

To disable change detection on the port, select false in the list.


NN46200-516 02.0130 March 2009


.


5 Click Apply.

--End--

RSTP Configuration using Device ManagerConfigure Rapid Spanning Tree Protocol (RSTP) to reduce the recoverytime after a network breakdown.

ATTENTIONBefore you configure RSTP, the spanning tree mode for the switch must be setto RSTP. For more information, see “Configuring the STP mode using DeviceManager” (page 133).

RSTP configuration using Device Manager navigation

• “Configuring global RSTP using Device Manager” (page 148)

• “Configuring port RSTP parameters using Device Manager” (page 150)

• “Viewing port RSTP status using Device Manager” (page 153)

Configuring global RSTP using Device ManagerConfigure global RSTP parameters to set RSTP feature parameter valuesfor the switch by performing this procedure.

Prerequisites

• Set the switch spanning tree mode to RSTP. For more information, see“Configuring the STP mode using Device Manager” (page 133).

Procedure steps

Step Action

1 From the Device Manager menu bar, choose VLAN, SpanningTree, RSTP.

The RSTP, Globals dialog box appears.

2 Configure RSTP parameters as required.

3 Click Apply.

--End--

Variable definitionsUse the data in this table to help you configure global RSTP.


NN46200-516 02.0130 March 2009


.

RSTP Configuration using Device Manager 149

Variable Value

PathCostDefault Assigns the RSTP default pathcosttype. The default is 32 bits.

TxHoldCount Assigns the RSTP Transmit HoldCount from 1 to 10. The default valueis 3.

Version Assigns the port in the RSTP- orSTP-compatible mode; that is, whetherthe port transmits RSTP BPDUs orConfig/TCN BPDUs.

EnableStp Enables spanning tree protocol in thisSTG.

Priority Assigns the RSTP bridge priority in arange of 0 to 61440 in steps of 4096.

BridgeMaxAge Assigns the RSTP maximum age timefor the bridge from 600 to 4000 onehundredths of a second.

BridgeHelloTime Assigns the RSTP hello time delayfor the bridge from 100 to 1000 onehundredths of a second.

BridgeForwardDelay Assigns the RSTP forward delayfor the bridge from 400 to 3000 onehundredths of a second.

DesignatedRoot Indicates the unique bridge identifier ofthe bridge recorded as the root in theconfiguration BPDUs transmitted bythe designated bridge for the segmentto which the port is attached.

RootCost Indicates the cost of the path to theroot from this bridge.

RootPort Indicates the port number of the portwhich offers the lowest cost path fromthis bridge to the root bridge.

MaxAge Indicates the maximum age ofSpanning Tree Protocol information, inone hundredths of a second, learnedfrom the network on a port before theport is discarded.

HelloTime Indicates the amount of time, in onehundredths of a second, between thetransmission of configuration bridgePDUs by this node on a port when it isthe root of the spanning tree (or tryingto become the root).


NN46200-516 02.0130 March 2009


.


Variable Value

ForwardDelay Indicates this time value, measured inihundredths of a second, controls howfast a port changes its spanning statewhen moving towards the forwardingstate. The value determines how longthe port stays in each of the listeningand learning states, which precedethe forwarding state. This value isalso used when a topology changeis detected, and is underway, to ageall dynamic entries in the forwardingdatabase.

RstpUpCount Indicates the number of times theRSTP module is enabled. A trap isgenerated on the occurrence of thisevent.

RstpDownCount Indicates the number of times theRSTP module is disabled. A trap isgenerated on the occurrence of thisevent.

NewRootIdCount Indicates the number of times thisbridge detects a root identifier change.A trap is generated on the occurrenceof this event.

TimeSinceTopologyChange Indicates the time, in one hundredthsof a second, since the TcWhile Timerfor a port in this bridge was nonzerofor Common Spanning Tree.

TopChanges Indicates the number of times thatthere was at least one nonzeroTcWhile Timer on this bridge forCommon Spanning Tree.

Configuring port RSTP parameters using Device ManagerConfigure port RSTP parameters to set RSTP feature parameter values fora specific port by performing this procedure.


NN46200-516 02.0130 March 2009


.


Prerequisites


Procedure steps

Step Action



2 Click the RSTP Ports tab.

The RSTP Ports dialog box appears with RSTP information forall switch interfaces displayed.

3 Double-click a box in an active field to configure port RSTP.

4 Click Apply.

--End--

Variable definitionsUse the data in this table to help you configure port RSTP parameters.

Variable Value

Port Indicates the interface slot and portnumber.

Priority Assigns the Ethernet RSTP priorityparameter for the port. The priorityranges in the range of 0 to 240 insteps of 16 (0, 16, 32, ... , 240).

PathCost Assigns the RSTP path costparameter for the port in the range of 1to 200000000.

ProtocolMigration When operating in RSTP mode,writing true to this object forces thisport to transmit RSTP BPDUs. Anyother operation on this object has noeffect, and RSTP mode returns falsewhen read.

AdminEdgePort Assigns the administrative value of theEdge Port parameter. A value of trueindicates that this port is an edge-port,and a value of false indicates that thisport is a nonedge-port.


NN46200-516 02.0130 March 2009


.


Variable Value

OperEdgePort Indicates the operational valueof the Edge Port parameter. Theobject is initialized to the value ofAdminEdgePort and is set to false onreception of a BPDU.

AdminPointToPoint Assigns the administrativepoint-to-point status of the LANsegment attached to this port. Avalue of forceTrue indicates that thisport is treated as if it is connectedto a point-to-point link. A valueof forceFalse indicates that thisport is treated as having a sharedmedia connection. A value of autoindicates that this port is consideredto have a point-to-point link if it is anaggregator and all of its members areaggregatable, or if the MAC entity isconfigured for full-duplex operation,either through autonegotiation or bymanagement means.

OperPointToPoint Indicates the operational point-to-pointstatus of the LAN segment attachedto this port. It indicates whether a portis considered to have a point-to-pointconnection or not. The value isdetermined by management or byautodetection as described in theAdminPointToPoint object.

EnableStp Enables or disables STP in this STG.• true—enables STP

• false—disables STP

DesignatedRoot Indicates the unique bridge identifier ofthe bridge recorded as the root in theconfiguration BPDUs transmitted bythe designated bridge for the segmentto which the port is attached.

DesignatedCost Indicates the path cost of thedesignated port of the segmentconnected to this port. This value iscompared to the Root Path Cost fieldin received bridge PDUs.

DesignatedBridge Indicates the unique bridge identifier ofthe bridge which this port considers tobe the Designated Bridge for the portsegment.


NN46200-516 02.0130 March 2009


.


Variable Value

DesignatedPort Indicates the port identifier of the porton the designated bridge for this portsegment.

ForwardTransitions Indicates the number of times this porttransitions to the forwarding state forthis specific instance.

Viewing port RSTP status using Device ManagerView RSTP port status to determine the status of port RSTP parametersby performing this procedure.

Prerequisites


Procedure steps

Step Action



2 Click the RSTP Status tab.

The RSTP Status dialog box appears displaying the RSTP portstatus.

--End--

Variable definitionsUse the data in this table to help you view RSTP port status.

Variable Value


State Indicates the current state of theport as defined by application of theSpanning Tree Protocol. This statecontrols what action a port takes onreception of a frame.

Role Indicates the current port roleassumed by this port.


NN46200-516 02.0130 March 2009


.


Variable Value

OperVersion Indicates whether the port isoperationally in the RSTP- orSTP-compatible mode; that is,whether the port transmits RSTPBPDUs or Config/TCN BPDUs.

EffectivePortState Indicates the effective operationalstate of the port:• true—the specified port state is

enabled

• false—the specified port state isdisabled

MSTP configuration using Device ManagerThis section describes how to configure Multiple Spanning Tree Protocol(MSTP) and multiple instances of MSTP on the same switch.

ATTENTIONBefore you configure MSTP, the spanning tree mode for the switch must be setto MSTP. For more information, see “Configuring the STP mode using DeviceManager” (page 133).

Multiple spanning tree protocol configuration navigation

• “Configuring global MSTP parameters using Device Manager” (page154)

• “Configuring port CIST for MSTP using Device Manager” (page 158)

• “Configuring MSTI bridges for MSTP using Device Manager” (page161)

• “Configuring MSTI ports for MSTP using Device Manager” (page 162)

Configuring global MSTP parameters using Device ManagerConfigure global MSTP to set MSTP parameters for the switch byperforming this procedure.

ATTENTIONInterface level configuration overrides global configuration.

Prerequisites

• Set the switch spanning tree mode to MSTP. For more information, see“Configuring the STP mode using Device Manager” (page 133).


NN46200-516 02.0130 March 2009


.

MSTP configuration using Device Manager 155

Procedure steps

Step Action

1 From the Device Manager menu bar, choose VLAN, SpanningTree, MSTP.

The MSTP, Globals dialog box appears.

2 Configure MSTP as required.

3 Click Apply.

--End--

Variable definitionsUse the data in this table to help you configure global MSTP parameters.

Variable Value

PathCostDefaultType Assigns the MSTP default pathcosttype. The default is 32 bits.

TxHoldCount Assigns the MSTP Transmit HoldCount from 1 to 10. The default valueis 3.

MaxHopCount Indicates the maximum hop count.The range is 100 to 4000 onehundredths of a second in steps of100 one hundredths.

NoOfInstancesSupported Indicates the maximum number ofspanning tree instances supported.

MstpUpCount Indicates the number of times theMSTP module is enabled.

MstpDownCount Indicates the number of times theMSTP module is disabled.

ForceProtocolVersion Specifies the version of Spanning TreeProtocol that the bridge currently runs.• stpCompatible—Spanning Tree

Protocol

• rstp—Rapid Spanning TreeProtocol as specified

• mstp—Multiple Spanning TreeProtocol


NN46200-516 02.0130 March 2009


.


Variable Value

BrgAddress Indicates the MAC address the bridgeuses to be referred to in a uniquefashion.

ATTENTIONNortel recommends that this is thenumerically smallest MAC address ofall ports that belong to this bridge.

Root Indicates the root bridge identifierdetermined by the STP. This valueis used as the CIST root identifierparameter in all configuration bridgePDUs originated by this node.

RegionalRoot Indicates the root bridge identifierof the multiple spanning tree regiondetermined by the STP. This value isthe common and internal spanningtree (CIST) regional root identifierparameter in all configuration bridgePDUs originated by this node.

RootCost Indicates the cost of the path to theCIST root from this bridge.

RegionalRootCost Indicates the cost of the path to theCIST regional root from this bridge.

RootPort Indicates the port number of the portwhich offers the lowest path cost fromthis bridge to the CIST root bridge.

BridgePriority Specifies the value of the writableportion of the bridge identifiercomprising the first two octets. Youmust type a value in the range of 0 to61440, in steps of 4096.

BridgeMaxAge Specifies the value that all bridgesuse for MaxAge when this bridge actsas the root. The range is 600 to 4000one hundredths of a second in stepsof 100 one hundredths. The default is2000.

BridgeForwardDelay Specifies the value that all bridges usefor forward delay when this bridge actsas the root. The range is 400 to 3000one hundredths of a second in stepsof 100 one hundredths of a second.This parameter is related to the valueof BridgeMaxAge. The default is 1500.


NN46200-516 02.0130 March 2009


.


Variable Value

HoldTime Indicates the interval, in onehundredths of a second, duringwhich no more than two configurationbridge PDUs can be transmitted bythis node.

MaxAge Indicates the maximum age ofSpanning Tree Protocol information, inone hundredths of a second, learnedfrom the network on a port before theport is discarded.

ForwardDelay Indicates the length of time, in onehundredths of a second, a port staysin a particular state before moving tothe next state.

TimeSinceTopologyChange Indicates the time, in one hundredthsof a second, since a topology changehas occurred.

TopChanges Indicates the number of topologychanges that have occurred.

NewRootBridgeCount Indicates the number of times thisbridge detects a root bridge changefor Common Spanning Tree. A trap isgenerated on the occurrence of thisevent.

RegionName Specifies the name for the regionconfiguration. By default, the regionname is equal to the bridge MACAddress.

RegionVersion Specifies the version of the MSTregion. The range is 0 to 65535.

ConfigIdSel Specifies the configuration identifierformat selector used by the bridge.This has a fixed value of 0 to indicateRegionName. RegionVersions arespecified as in the standard.

ConfigDigest Indicates the configured MD5 digestvalue for this region, which must be 16octets long.

RegionConfigChange Count Indicates the number of times a regionconfiguration identifier change isdetected. A trap is generated on theoccurrence of this event.


NN46200-516 02.0130 March 2009


.


Configuring port CIST for MSTP using Device ManagerConfigure Common and Internal Spanning Tree (CIST) ports to configureports for MSTP by performing this procedure.

Prerequisites


Procedure steps

Step Action



2 Click the CIST Port tab.

The MSTP, CIST Port dialog box appears.

ATTENTIONThe MSTP, CIST Port dialog box displays information for each portthat is common to all bridge and spanning tree instances.

3 Double-click a box in an active field to configure the MSTP CISTport.

4 Click Apply.

--End--

Variable definitionsUse the data in this table to help you configure port CIST for MSTP.

Variable Value


PathCost Specifies the CIST path costparameter for the port in the range of 1to 200000000.

Priority Specifies the CIST priority parameterfor the port. The priority ranges in therange of 0 to 240 in steps of 16 (0, 16,32, ... , 240).


NN46200-516 02.0130 March 2009


.


Variable Value

DesignatedRoot Indicates the unique bridge identifierof the bridge recorded as the CISTroot in the configuration BPDUstransmitted.

DesignatedCost Indicates the path cost of thedesignated port of the segmentconnected to this port.

DesignatedBridge Indicates the unique bridge identifier ofthe bridge which this port considers tobe the designated bridge for the portsegment.


RegionalRoot Indicates the unique bridge identifierfor the bridge recorded as theCIST regional root identifier in theconfiguration BPDUs transmitted.

RegionalPathCost Indicates the contribution of this portto the path cost of paths towards theCIST regional root, that include thisport.

ProtocolMigration Specifies the protocol migration stateof this port. When operating in RSTPor MSTP mode, writing true to thisobject forces this port to transmitMSTP BPDUs without instanceinformation. Any other operation onthis object has no effect, and it returnsfalse when read.

AdminEdgeStatus Specifies the administrative valueof the Edge Port parameter. Avalue of true indicates that thisport is an edge-port, and a valueof false indicates that this port is anonedge-port.

OperEdgeStatus Indicates the operational valueof the Edge Port parameter.OperEdgeStatus is initialized tothe value of AdminEdgeStatus and isset to false when a BPDU is received.


NN46200-516 02.0130 March 2009


.


Variable Value

AdminP2P Specifies the administrativepoint-to-point status of the LANsegment attached to this port.• forceFalse

—indicates that this port istreated as having a shared mediaconnection

• forceTrue—indicates that this port is treatedas if it connects to a point-to-pointlink

• auto—indicates that this port isconsidered to have a point-to-pointlink if it is an aggregator and all ofits members are aggregatable, orif the MAC entity is configured forfull-duplex operation (either throughautonegotation or by management)

OperP2P Indicates the operational point-to-pointstatus of the LAN segment attached tothis port. OperP2P indicates if a porthas a point-to-point connection. Thevalue is determined by managementor by auto detection.

HelloTime Specifies the amount of time, in onehundredths of a second, between thetransmission of configuration bridgePDUs by this node on this port.

OperVersion Indicates whether the port isoperationally MSTP, RSTP, or theSTP-compatible mode; that is, whetherthe port transmits MST BPDUs, RSTBPDUs, or Config/TCN BPDUs.

EffectivePortState Indicates the effective operationalstate of the port for CIST.EffectivePortState is true only whenthe port is operationally UP at theinterface and protocol levels for CIST.This EffectivePortState is set to falsefor all other conditions.

State Indicates the current state of the portas defined by the common spanningtree protocol. The state is disabled,discarding, learning, or forwarding.


NN46200-516 02.0130 March 2009


.


Variable Value

ForcePortState Specifies the current state of the port.You can change the port to eitherdisabled or enabled for the basespanning tree instance.

SelectedPortRole Indicates the selected port role of theport for this spanning tree instance.

CurrentPortRole Indicates the current port role of theport for this spanning tree instance.

Configuring MSTI bridges for MSTP using Device ManagerConfigure Multiple Spanning Tree Instance (MSTI) bridges for MSTPbridge to determine the MSTP actions that occur for the bridge byperforming this procedure.

ATTENTIONThe switch generates the MSTI bridge instances after the system creates aVLAN in MSTP mode.

Prerequisites


Procedure steps

Step Action



2 Click the MSTI Bridges tab.

The MSTP, MSTI Bridges dialog box appears

3 Double-click a box in an active field to configure the MSTPbridge.

4 Click Apply.

--End--

Variable definitionsUse the data in this table to help you configure MSTI bridges for MSTP.


NN46200-516 02.0130 March 2009


.


Variable Value

Instance Indicates the Multiple Spanning TreeInstance (MSTI) number.

RegionalRoot Indicates the MSTI regional rootidentifier value for the MSTP instance.This value is the MSTI regional rootidentifier parameter in all configurationbridge PDUs originated by this node.

Priority Specifies the MSTI priority parameterfor the bridge. The values that you setfor bridge priority must be in steps of4096. The range is 0 to 61440.

RootCost Indicates the cost of the path to theMSTI regional root bridge as seen bythis bridge.

RootPort Indicates the port number of the portthat offers the lowest path cost fromthis bridge to the MSTI regional rootbridge.

TimeSinceTopologyChange Indicates the time, in one hundredthsof a second, since the bridge lastdetected a topology change.

TopChanges Indicates the total number of topologychanges detected by the bridge sincethe bridge was last reset or initialized.

NewRootCount Indicates the number of times thebridge detects a root bridge change forthis spanning tree instance.

InstanceUpcount Indicates the number of times a newspanning tree instance is created.

InstanceDownCount Indicates the number of times aspanning tree instance is deleted.

Configuring MSTI ports for MSTP using Device ManagerConfigure MSTI ports to determine the MSTP actions that occur for theport by performing this procedure.


NN46200-516 02.0130 March 2009


.


Prerequisites


Procedure steps

Step Action


The MSTP dialog box appears.

2 Click the MSTI Port tab.

The MSTI Port dialog box appears.

ATTENTIONPort members selected on the VLAN, Basic tab appear in the MSTIPort dialog box.

3 Double-click a box in an active field to configure a port for MSTP.

4 Click Apply.

--End--

Variable definitionsUse the data in this table to help you configure MSTI ports for MSTP.

Variable Value


BridgeInstance Indicates the MSTI bridge instanceassociated with a specific port.

PathCost Specifies the contribution of this portto the path cost of paths towards theMSTI root that includes this port. Therange is 1 to 200000000.

Priority Specifies the MSTI priority parameterfor the port. The values set for portpriority must be in steps of 16. Therange is 0 to 240.

DesignatedRoot Indicates the unique bridge identifierof the bridge recorded as the MSTIregional root in the configurationBPDUs transmitted.


NN46200-516 02.0130 March 2009


.


Variable Value

DesignatedBridge Indicates the unique bridge identifier ofthe bridge which this port considers tobe the designated bridge for the portsegment.


State Indicates the current state of the portas defined by the MSTP. A port whichis in forwarding state in one instancecan be in discarding (blocking) state inanother instance.

ForcePortState Assigns the state of the port todisabled or enabled for the specificspanning tree instance.

DesignatedCost Indicates the path cost of thedesignated port of the segmentconnected to this port.

CurrentPortRole Indicates the current role of the portfor this spanning tree instance.

EffectivePortState Indicates the effective operationalstate of the port for a specific instance.The value is set to true when the portis operationally up at the interfaceand protocol levels for the specificinstance. The value is set to false atall other times.


NN46200-516 02.0130 March 2009


.

165.

Spanning Tree configuration using theCLI

This chapter describes how to create, manage, and monitor Spanning TreeGroups (STG) and how to configure Spanning Tree Protocol (STP), RapidSpanning Tree Protocol (RSTP), and Multiple Spanning Tree Protocol(MSTP) using the CLI.


ATTENTIONIf you disable the Spanning Tree Protocol (STP), it can reduce CPU overheadslightly. However, unless you use the switch in a simple network with littlepossibility of loops, Nortel recommends that you leave the Spanning TreeProtocol enabled.

Navigation• “Job aid” (page 165)

• “Configuring the STP mode using the CLI” (page 169)

• “STG configuration using the CLI” (page 171)

• “RSTP configuration using the CLI” (page 184)

• “MSTP configuration using the CLI” (page 189)

Job aidThe following table lists the CLI commands and their parameters that youuse to complete the procedures in this section.


NN46200-516 02.0130 March 2009


.

166 Spanning Tree configuration using the CLI

Table 10Roadmap of STG CLI commands

Command Parameter

default

mstp

config bootconfig flags spanning-tree-mode

rstp

config ethernet <port> [bpdu-filter<enable|disable>] [<seconds>]

edge-port<true|false>

forceportstate <enable|disable>

hello-time <timeval>

info

p2p <forcetrue|forcefalse|auto>

protocol-migration <true|false>

priority <timeval>

config ethernet <portlist> mstp cist

pathcost <intval>


info

priority <intval>

config ethernet <portlist>mstp msti <instid>

pathcost <intval>

info

faststart <enable|disable>

change-detection <enable|disable>change-detection <enable|disable>

pathcost <intval>

priority <intval>

config ethernet <port> stg

stp <enable|disable>

config ethernet <port> stg <sid>change-detection <enable|disable>

hopcount <number>

info

pathcost-type <16-bit|32-bit>

config mstp

tx-holdcount <number>


NN46200-516 02.0130 March 2009


.

Job aid 167

Table 10Roadmap of STG CLI commands (cont’d.)

Command Parameter

force-version <stp-compatible|rstp|mstp>

forward-delay <number>

info

max-age <number>

config mstp cist

priority <number>

infoconfig mstp msti <instid>

priority<number>

config-id-sel <number>

info

name <string>

config mstp region

revision <number>

force-version <stp-compatible|rstp>

forward-delay <number>

group-stp<enable|disable>

hello-time<number>

info

max-age <number>


priority <number>

config rstp

tx-hold count <number>


info

p2p<forcetrue|forcefalse|auto>

pathcost <intval>

priority <intval>


config ethernet <port> rstp

stp <enable|disable>


NN46200-516 02.0130 March 2009


.



Command Parameter

add ports <value>

create [<port>] [vlan <value>] [mac<value>] [ntstg <value>]

delete

forward-delay <timeval>

group-stp <enable|disable>

info

hello-interval <timeval>

max-age <timeval>

priority <number>

remove ports <value>

config stg <sid>

trap-stp <enable|disable>

show bpdu-filter <port>

show mstp config

show mstp instance <instid>

show mstp status

cistinfo <port>

cistrole <port>

mstiinfo <port>

show ports info mstp

mstirole <port>

show ports info rstp config <port>

role <port>

status <port>

show rstp config

show rstp status

show stg info config <sid>

show stg info status <sid>


NN46200-516 02.0130 March 2009


.

Configuring the STP mode using the CLI 169


Command Parameter

show ports info stg main <port>

show ports infostg extended <port>

Configuring the STP mode using the CLIConfigure the STP mode to set the spanning tree mode for the switch toMultiple Spanning Tree Protocol (MSTP), Rapid Spanning Tree Protocol(RSTP), or the default mode by performing this procedure. The defaultmode is legacy STP.

ATTENTIONWhen you change the switch STP mode, you must save the switch bootconfiguration and restart the switch.

Procedure steps

Step Action

1 Configure STP mode by using the following command:

config bootconfig flags spanning-tree-mode

2 Save the switch configuration file by using the followingcommand: save bootconfig

3 Restart the switch by using the following command: boot -y

ATTENTIONIt can take several minutes for the switch restart process to complete.

--End--

Variable definitionsThe following table defines optional parameters that you enter after theconfig bootconfig flags spanning-tree-mode command.

Variable Value

default Specifies default spanning tree mode.




NN46200-516 02.0130 March 2009


.


STP BPDU Filtering configuration using the CLIThis section describes how to configure Spanning Tree Protocol (STP)Bridge Protocol Data Unit (BPDU) Filtering for a Spanning Tree Group(STG), Rapid Spanning Tree Protocol (RSTP), and Multiple Spanning TreeProtocol (MSTP), using the command line interface (CLI).

STP BPDU Filtering configuration using the CLI navigation

• “Configuring STP BPDU Filtering using the CLI” (page 170)

• “Viewing STP BPDU Filtering status using the CLI” (page 171)

Configuring STP BPDU Filtering using the CLIConfigure STP BPDU Filtering to enable and manage STP BPDU Filteringon a port or group of ports by performing this procedure.

Procedure steps

Step Action

1 Configure STP BPDU Filtering by using the following command:

config [ethernet <port>] [bpdu-filter <enable|disable>] [<seconds>]

--End--

Variable definitionsThe following table defines optional parameters that you enter with theconfig [ethernet <port>] [bpdu-filter <enable|disable>][<seconds>] command.

Variable Value

<enable|disable> Enables or disables BPDU filtering ona port or group of ports.


<seconds> Specifies the STP BPDU Filtering porttimer timeout duration in seconds.Values can be 0 or range from 10 to65535.

With timeout value of 0 configured, theSTP BPDU Filtering port timer timeoutduration is infinite.


NN46200-516 02.0130 March 2009


.

STG configuration using the CLI 171

Variable Value

The default STP BPDU Filtering porttimer timeout value is 120 seconds.

Viewing STP BPDU Filtering status using the CLIView port STP BPDU Filtering status to display STP BPDU Filtering statusinformation for all ports, a specific port, or a group of ports by performingthis procedure.

Procedure steps

Step Action

1 View STP BPDU Filtering status for all interface ports by usingthe following command:

show bpdu-filter

2 View STP BPDU Filtering status for a specific port or a group ofports by using the following command:

show bpdu-filter <port>

--End--

Variable definitionsThe following table defines optional parameters that you enter with theshow bpdu-filter <port> commands.

Variable Value


STG configuration using the CLIConfigure STGs to create a collection of ports that belong to the sameSTP instance.

ATTENTIONTo configure STG, you must set the spanning tree mode for the switch to legacySTP. For more information, see “Configuring the STP mode using the CLI” (page169).


NN46200-516 02.0130 March 2009


.


STG configuration using the CLI navigation

• “Configuring STG global settings using the CLI” (page 172)

• “Creating an STG using the CLI” (page 173)

• “Configuring STG parameters using the CLI” (page 174)

• “Viewing STG configuration using the CLI” (page 177)

• “Viewing STG status using the CLI” (page 177)

• “Configuring STG port parameters using the CLI” (page 179)

• “Viewing general port STG information using the CLI” (page 181)

• “Viewing extended port STG information using the CLI” (page 183)

• “Configuring topology change detection using the CLI” (page 184)

Configuring STG global settings using the CLIWhen you create an STG, the switch assigns a default global MACaddress that sends Bridge Protocol Data Units (BPDU). Configure STGglobal settings if you want to replace the default global MAC address andto identify the mask for the MAC address by performing this procedure.

Prerequisites

• Set the switch spanning tree mode to legacy STP. For moreinformation, see “Configuring the STP mode using the CLI” (page 169).

Procedure steps

Step Action

1 Change the default STG global MAC address and identify themask by using the following command:

config sys set bpdu-mac-address-range <starting-mac-address> <Mask>

--End--

Variable definitionsThe following table defines variables in the config sys setbpdu-mac-address-range <starting-mac-address> <Mask>command.


NN46200-516 02.0130 March 2009


.


Variable Value

<Mask> Indicates the mask (1–48) for the MACaddress, which sends BPDUs.

<starting-mac-address> Indicates the MAC (multicast) address, whichsends BPDUs.

The system assigns a default MAC addressto an STG that you create to send BPDUs.To change the default MAC address, enterthe MAC address of your choice as the<starting-mac-address> value.

Creating an STG using the CLICreate an STG to assign ports to an instance of spanning tree byperforming this procedure.

Prerequisites


Procedure steps

Step Action

1 Create a STG by using the following command:

config stg <sid> create [<port>] [vlan <value>][mac <value>] [ntstg <value>]


--End--

Variable definitionsThe following table defines variables in the config stg <sid> create[<port>] [vlan <value>] [mac <value>] [ntstg <value>]command.

Variable Value

[mac <value>] Specifies the tagged BPDU MAC address.


NN46200-516 02.0130 March 2009


.


Variable Value

[<port>] Defines the ports to add to this STG, int theformat:{slot/port[-slot/port][,...]}.

You cannot add ports that belong to anotherSTG or ports configured as tagging-disabled tothe STG.

[vlan <value>] Specifies the tagged BPDU VLAN ID. If aVLAN spans multiple switches, it must belongto the same STG across all switches.

[ntstg <value>] Defines whether this STG is operating in Nortelmode or in Cisco mode:• enable—Nortel mode

• disable—Cisco mode

Configuring STG parameters using the CLIConfigure parameters for a specified STG by performing this procedure.

Prerequisites


Procedure steps

Step Action

1 Configure an STG by using the following command:

config stg <sid>


--End--

Variable definitionsThe following table defines optional parameters that you enter after theconfig stg <sid> command.


NN46200-516 02.0130 March 2009


.


Variable Value

add ports <value> Adds ports to an STG.

• Ports: Define the ports to add to thisSTG, in the format{slot/port[-slot/port][,...]}.You cannot add ports that belong toanother STG or ports configured astagging-disabled to the STG.

create [<port>] [vlan<value>][mac <value>] [ntstg<value>]

Creates a new STG.

• port: Define the ports to add to this STG,in the format{slot/port[-slot/port][,...]}.You cannot add ports that belong toanother STG or ports configured astagging-disabled to the STG.

• vlan: Specify the tagged BPDU VLANID. If a VLAN spans multiple switches, itmust belong to the same STG across allswitches.

• mac: Specify the tagged BPDU MACaddress.

• ntstg: Specify whether this STG isoperating in Nortel mode or in Ciscomode:

— enable—Nortel mode

— disable—Cisco mode

delete Deletes the specified STG.

forward-delay <timeval> Configures the bridge forward delay time,or the value in hundredths of a second thatall bridges use for Forward Delay when thisbridge acts as the root.

• Timeval: Specify a value between400 and 3000. The default is 1500 (15seconds).

group-stp <enable|disable>

Enables or disables the STP on all ports inthe specified STG.


NN46200-516 02.0130 March 2009


.


Variable Value

hello-interval <timeval> Configures the bridge hello time inincrements of 1/100 of a second. All bridgesuse this value for HelloTime when this bridgeacts as the root. The IEEE 802.1D-1990standard specifies the granularity of thistimer.

• Timeval: Specify a value between 100and 1000. The default is 200 (2 seconds).


• Sub-Context: The names of thedirectories for the next CLI commandlevel.

• Current Context: The parameter settingsfor the configured STG.

max-age <timeval> Configures the bridge maximum age time,or the value in hundredths of a second thatall bridges use for MaxAge when this bridgeacts as the root.

The 802.1D-1990 standard specifies that theBridgeMaxAge range relates to the value ofdot1dStpBridgeHelloTime.

• Timeval: Specify a value between600 and 4000. The default is 2000 (20seconds).

priority <number> Assigns the STP bridge priority, in decimal.

• Number: Specify a value between 0(highest priority) and 65535 (lowestpriority). The default is 32768.

remove ports <value> Removes the specified ports from an STG.

• Value: Define the ports to add to thisSTG, in the format{slot/port[-slot/port][,...]}.


NN46200-516 02.0130 March 2009


.


Variable Value

<sid> Specifies an STG ID from 1 to 64.

trap-stp <enable|disable>

Enables or disables the sending of traps toa trace receiver. When enabled, the systemsends SNMP traps to a trace receiverevery time an STP topology occurs for thespecified STG.

Viewing STG configuration using the CLIView configuration information for a specific STG or all STGs in yournetwork by performing this procedure.

Prerequisites


Procedure steps

Step Action

1 View STG configuration by using the following command:

show stg info config

--End--

Variable definitionsThe following table defines optional parameters that you enter after theshow stg info config command.

Variable Value

<sid> Identifies the VLAN STG ID. Valuesrange from 1 to 64.

Viewing STG status using the CLIView the status of a specific STG or all STGs in your network byperforming this procedure.

Prerequisites



NN46200-516 02.0130 March 2009


.


Procedure steps

Step Action

1 View STG status by using the following command:

show stg info status[<sid>]


--End--

Job aidUse the data in the following table to understand field descriptionsdisplayed with the show stg info status <sid> command.

Table 11Job aid

Field Description

Bridge Address The MAC address used by this bridge when itmust be referred to in a unique fashion.

Designated Root The bridge identifier of the root of thespanning tree as determined by the STPas executed by this node. This value isused as the Root Identifier parameter in allConfiguration Bridge PDUs originated by thisnode.

Forward Delay The time interval in hundredths of a secondthat controls how fast a port changes itsspanning state when it moves toward theForwarding state. The value determineshow long the port stays in each of theListening and Learning states, which precedethe Forwarding state. This value is alsoused when a topology change occurs, toage all dynamic entries in the forwardingdatabase. The bridge uses this value, unlessit becomes the root and; therefore, usesrcStgBridgeForwardDelay. The default valueis 1500 (15 seconds).

Hello Time The amount of time in hundredths of a secondbetween transmission of configuration BPDUsby this node on a port when it is the root ofthe spanning tree. The default value is 200 (2seconds).


NN46200-516 02.0130 March 2009


.


Table 11Job aid (cont’d.)

Field Description

Hold Time The time interval in hundredths of a second,during which no more than two Configurationbridge PDUs shall be transmitted by thisnode. The default value is 100 (1 second).

Max Age The maximum age of Spanning Tree Protocolinformation learned from the network on aport before the system discards it. Max Age isin units of hundredths of a second and is theactual value that this bridge currently uses.

Num Ports The number of ports controlled by thisbridging entity.

Protocol Specification An indication of what version of the SpanningTree Protocol is running. The IEEE 802.1dimplementations returns ieee8021d.

Root Cost The cost of the path to the root as seen fromthis bridge.

Root Port The port number of the port that offers thelowest cost path from this bridge to the rootbridge.

Top Changes A bridge sends a topology change trap wheneither of its configured ports transitions fromthe Learning state to the Forwarding state,or from the Forwarding state to the Blockingstate. The bridge does not send a trap if anew root trap is sent for the same transition.Implementation of this trap is optional.

Configuring STG port parameters using the CLIConfigure STG parameters on an individual port or group of ports byperforming this procedure.

ATTENTIONPorts must have tagging enabled to belong to multiple spanning tree groups.

Nortel recommends that you enable FastStart as an alternative to disablingSpanning Tree Protocol on an individual port.

Prerequisites



NN46200-516 02.0130 March 2009


.


Procedure steps

Step Action

1 Configure STG for a port by using the following command:

config ethernet <port> stg <sid>



--End--

Variable definitionsThe following table defines optional parameters that you enter after theconfig ethernet <port> stg <sid> command.

Variable Value

change-detection<enable|disable>

Enables or disables topology changedetection for the specified spanning tree.The default is enable.

ethernet <port> Defines the slot and port you want toconfigure for an STG.

faststart<enable|disable>

Enables or disables FastStart. After youenable FastStart, the port goes throughthe normal listening and learning statesbefore forwarding, but the bridge hellotimer (2 seconds by default) determinesthe hold time for these states instead ofthe bridge forward delay timer (15 secondsby default).

info Displays current settings for the port STG.

pathcost <intval> Assigns the contribution of this port to thepath cost.

<intval> is the cost (1 to 65535).

priority <intval> Assigns the priority of this port.

<intval> is the priority (0 to 255).

stp <enable|disable> Enables or disables the STP.


NN46200-516 02.0130 March 2009


.


Viewing general port STG information using the CLIView basic STG information for specific ports or all ports by performingthis procedure.

Prerequisites


Procedure steps

Step Action

1 View basic port STG information by using the followingcommand:

show ports info stg main<port>


--End--

Job aidUse the data in the following table to understand field descriptionsdisplayed with the show ports info stg main <port> command.

Table 12Job aid

Field Description

CHANGEDETECTION

The change detection setting (true or false) for this port.Can be configured only on Access ports. If you enablechange detection on an MLT with access ports, thesetting is automatically applied to all ports in the MLT.

ENABLESTP

The STP state of the port.

• Enabled—BPDUs are processed in accordance withSTP.

• Disabled—The port stays in a forwarding state,received BPDUs are dropped and not processed,and no BPDU is generated.


NN46200-516 02.0130 March 2009


.



Field Description

FASTSTART When this flag is set, the enabled port is moved straightto the Forwarding (5) state.


• false (default, disables FastStart for the port)

This setting does not adhere to the specifications inthe IEEE 802.1D standard for Spanning Tree Protocol(STP), in which a port enters the blocking statefollowing the initialization of the bridging device or fromthe disabled state, when you enable the port throughconfiguration.

FORWARDTRANSITIONS

The number of times this port transitions from theLearning state to the Forwarding state.

PATHCOST The contribution of this port to the path cost of pathstoward the spanning tree root that includes this port.The 802.1D-1990 protocol recommends that the defaultvalue of this parameter be in inverse proportion to thespeed of the attached LAN.

PORT_NUM The port number of the port for which this entrycontains STP management information.

PRIO The value of the priority field, which is included in thefirst octet of the (2 octet long) Port ID. The value ofrcStgPort gives the other octet of the Port ID.

STATE The current state of port as defined by the applicationof the STP.

• disabled (1)

• blocking (2)

• listening (3)

• learning (4)

• forwarding (5)

• broken (6)

This state controls what action a port takes on receptionof the frame. If the bridge detects a malfunctioning port,it places that port into the Broken (6) state.

SID The STG identifier assigned to this port.


NN46200-516 02.0130 March 2009


.


Viewing extended port STG information using the CLIView additional STG information for a specific port or all ports byperforming this procedure.

Prerequisites


Procedure steps

Step Action

1 View additional port STG information by using the followingcommand:

show ports info stg extended<port>


--End--

Job aidUse the data in the following table to understand field descriptionsdisplayed with the show ports info stg extended <port> command.

Table 13Job aid

Field Description

BRIDGE The Bridge Identifier of the bridge that this port uses asthe Designated Bridge for this segment of this port.

COST The path cost of the Designated Port of the segmentconnected to this port. This value compares to the RootPath Cost field in received bridge PDUs.

PORT The Port Identifier of the port on the Designated Bridgefor the segment of this port.

PORT_NUM The port number of the port for which this entry containsSpanning Tree Protocol management information.

ROOT The unique Bridge Identifier of the Bridge recorded asthe root in the configuration BPDUs transmitted by theDesignated Bridge for the segment, to which the portattaches.



NN46200-516 02.0130 March 2009


.


Configuring topology change detection using the CLIConfigure topology change detection to enable (default) or disable thetopology change detection feature by performing this procedure.

Prerequisites


Procedure steps

Step Action

1 Configure topology change detection by using the followingcommand:

config ethernet <port> stg <sid> change-detection<enable|disable>



--End--

ATTENTIONIf you enable change detection on an MLT with access ports, the settingautomatically applies to all ports in the MLT.

Variable definitionsThe following table defines variables in the config ethernet <port>stg <sid> change-detection <enable|disable> command.

Variable Value

change-detection<enable|disable>

Specifies whether to enable or disabletopology change detection for the specifiedSTG. The default is enabled.

RSTP configuration using the CLIConfigure Rapid Spanning Tree Protocol (RSTP) to reduce the recoverytime after a network breakdown.

RSTP configuration using the CLI navigation

• “Configuring RSTP using the CLI” (page 185)

• “Viewing global RSTP configuration using the CLI” (page 186)

• “Viewing global RSTP status using the CLI” (page 186)


NN46200-516 02.0130 March 2009


.

RSTP configuration using the CLI 185

• “Configuring Ethernet RSTP parameters using the CLI” (page 187)

• “Viewing port RSTP configuration using the CLI” (page 188)

• “Viewing port RSTP status using the CLI” (page 188)

• “Viewing port RSTP role using the CLI” (page 189)

Configuring RSTP using the CLIConfigure RSTP parameters to reduce recovery time after a networkfailure by performing this procedure.

Prerequisites

• Set the switch spanning tree mode to RSTP. For more information, see“Configuring the STP mode using the CLI” (page 169).

Procedure steps

Step Action

1 Configure the RSTP parameters by using the followingcommand:

config rstp

--End--

Variable definitionsThe following table defines optional parameters that you enter aftertheconfig rstp command.

Variable Value

force-version <stp-compatible|rstp>

Assigns the port in the RSTP- orSTP-compatible mode; that is, whetherthe port transmits RSTP BPDUs orConfig/TCN BPDUs.

forward-delay <number> Assigns the RSTP forward delayfor the bridge from 400 to 3000 onehundredths of a second.

group-stp<enable|disable> Enables or disables RSTP for aspecific STG.

hello-time<number> Assigns the RSTP hello time delayfor the bridge from 100 to 1000 onehundredths of a second.


NN46200-516 02.0130 March 2009


.


Variable Value

info Shows current level parameter settingsand next level directories.

max-age <number> Assigns the RSTP maximum age timefor the bridge from 600 to 4000 onehundredths of a second.

pathcost-type <16-bit|32-bit> Assigns the RSTP default pathcostversion; The default is 32 bits.

priority <number> Assigns the RSTP bridge priority in arange of 0 to 61440 in steps of 4096.

tx-holdcount <number> Assigns the RSTP Transmit HoldCount from 1 to 10. The default valueis 3.

Viewing global RSTP configuration using the CLIView the global RSTP configuration information to display the RSTPconfiguration details for the switch by performing this procedure.

Prerequisites


Procedure steps

Step Action

1 View the global RSTP configuration information by using thefollowing command:

show rstp config

--End--

Viewing global RSTP status using the CLIView global RSTP status to display RSTP status information for the switchby performing this procedure.

Prerequisites



NN46200-516 02.0130 March 2009


.

RSTP configuration using the CLI 187

Procedure steps

Step Action

1 View the RSTP status by using the following command:

show rstp status

--End--

Configuring Ethernet RSTP parameters using the CLIConfigure Ethernet RSTP parameters to set RSTP parameters for the portby performing this procedure.

Prerequisites


Procedure steps

Step Action

1 Configure Ethernet RSTP parameters by using the followingcommand:

config ethernet<port>rstp


--End--

Variable definitionsThe following table defines optional parameters that you enter after theconfig ethernet<port>rstp command, where <port> specifies aport or list of ports. Use the {slot/port[-slot/port][,...]} format.

Variable Value

edge-port <true|false> Assigns the RSTP edge-portparameter for the port.

info Shows current level parameter settingsand next level directories.


Assigns the Ethernet RSTPpoint-to-point parameter for theport.


NN46200-516 02.0130 March 2009


.


Variable Value

pathcost <intval> Assigns the RSTP path costparameter for the port in the range of 1to 200000000.

priority <intval> Assigns the Ethernet RSTP priorityparameter for the port. The priorityranges in the range of 0 to 240 insteps of 16 (0, 16, 32, ... , 240).

protocol-migration<true|false>

Assigns the Ethernet RSTPprotocol-migration parameter forthe port.

stp <enable|disable> Enables or disables STP on the port.

Viewing port RSTP configuration using the CLIView the RSTP configuration information to display the RSTP configurationdetails for a single port or list of ports by performing this procedure.

Prerequisites


Procedure steps

Step Action

1 View the RSTP configuration information by using the followingcommand:

show ports info rstp config <port>


--End--

Viewing port RSTP status using the CLIView the RSTP status for a port to display the RSTP related statusinformation for a selected port by performing this procedure.

Prerequisites



NN46200-516 02.0130 March 2009


.

MSTP configuration using the CLI 189

Procedure steps

Step Action

1 View the RSTP status for a port by using the following command:

show ports info rstp status

<ports> identifies the slot and port (slot/port).

--End--

Viewing port RSTP role using the CLIView port RSTP role to display the RSTP role by performing thisprocedure.

Prerequisites


Procedure steps

Step Action

1 View the RSTP role by using the following command:

show ports info rstp role <port>

<ports> identifies the slot and port (slot/port).

--End--

MSTP configuration using the CLIThis section describes how to configure Multiple Spanning Tree Protocol(MSTP) using the CLI.

ATTENTIONBefore you configure MSTP, the spanning tree mode for the switch must beset to MSTP. For more information, see “Configuring the STP mode using theCLI” (page 169).

MSTP configuration using the CLI navigation

• “Configuring global MSTP parameters using the CLI” (page 190)

• “Configuring an MSTP region using the CLI” (page 191)

• “Viewing MSTP configuration using the CLI” (page 191)


NN46200-516 02.0130 March 2009


.


• “Configuring MSTP CIST using the CLI” (page 192)

• “Configuring MSTP MSTI using the CLI” (page 193)

• “Viewing MSTP instance information using the CLI” (page 193)

• “Configuring Ethernet MSTP CIST using the CLI” (page 194)

• “Configuring Ethernet MSTP MSTI using the CLI” (page 195)

• “Viewing MSTP port information using the CLI” (page 196)

• “Viewing MSTP status using the CLI” (page 197)

Configuring global MSTP parameters using the CLIConfigure global MSTP to set MSTP parameters for the switch byperforming this procedure.

Prerequisites

• Set the switch spanning tree mode to MSTP. For more information, see“Configuring the STP mode using the CLI” (page 169).

Procedure steps

Step Action

1 Configure MSTP by using the following command:

config mstp

--End--

Variable definitionsThe following table defines optional parameters that you enter after theconfig mstp command.

Variable Value

hop-count <number> Assigns the MSTP hop count. Therange is 100 to 4000 one hundredthsof a second. The default is 2000 onehundredths.

info Shows current switch MSTP parametersettings.

pathcost-type<16-bit|32-bit>

Assigns the MSTP default path costversion. The default is 32 bits.

tx-holdcount <number> Assigns the MSTP Transmit Hold Count.The range is 1 to 10. The default is 3.


NN46200-516 02.0130 March 2009


.


Configuring an MSTP region using the CLIConfigure an MSTP region to set the MSTP region parameters byperforming this procedure.

Prerequisites


Procedure steps

Step Action

1 Configure an MSTP region by using the following command:

config mstp region

--End--

Variable definitionsThe following table defines optional parameters that you enter after theconfig mstp region command.

Variable Value

config-id-sel <number> Assigns the MSTP region configurationID number:

The range is 0 to 255.

info Shows current region parametersettings.

name <string> Assigns the MSTP region name. Thecharacter string can be a range of 1 to32 characters.

revision <number> Assigns the MSTP region revisionnumber. The revision number can bea range of 0 and 65535.

Viewing MSTP configuration using the CLIView MSTP configuration to display the MSTP information for the switch byperforming this procedure.

Prerequisites



NN46200-516 02.0130 March 2009


.


Procedure steps

Step Action

1 View MSTP configurations by using the following command:

show mstp config

--End--

Configuring MSTP CIST using the CLIConfigure MSTP Common and Internal Spanning Tree (CIST) to configurethe MSTP CIST parameters by performing this procedure.

Prerequisites


Procedure steps

Step Action

1 Configure MSTP CIST by using the following command:

config mstp cist

--End--

Variable definitionsThe following table defines optional parameters that you enter after theconfig mstp cist command.

Variable Value

force-version <stp-compatible|rstp|mstp>

Assigns the CIST version.

forward-delay <number> Assigns the CIST forward delay from 400to 3000 one hundredths of a second.The default is 1500.

info Displays current CIST parametersettings.


NN46200-516 02.0130 March 2009


.


Variable Value

max-age <number> Assigns the CIST maximum age timefrom 600 to 4000 one hundredths of asecond for the bridge. The default is2000. The step size is in one hundredthsof a second.

priority <number> Assigns the CIST bridge priority numberin a range of 0 to 61 440. The numbermust be a multiple of 4096. The defaultis 32768.

Configuring MSTP MSTI using the CLIConfigure MSTP multiple spanning tree instance (MSTI) to view or set theMSTP bridge priority number for the MSTI by performing this procedure.

Prerequisites


Procedure steps

Step Action

1 Configure MSTP MSTI by using the following command:

config mstp msti <instid>

<instid> identifies the instance ID. Values range from 1 to 63.

--End--

Variable definitionsThe following table defines optional parameters that you enter after theconfig mstp msti <instid> command.

Variable Value

info Displays current MSTI parametersettings.

priority<number> Assigns the MSTI bridge prioritynumber in a range of 0 to 65 535. Thenumber must be a multiple of 4096.

Viewing MSTP instance information using the CLIView MSTP instance information to display MSTP instance statusinformation by performing this procedure.


NN46200-516 02.0130 March 2009


.


Prerequisites


Procedure steps

Step Action

1 View MSTP instance information by using the followingcommand:

show mstp instance <instid>


--End--

ATTENTIONIf you attempt to use the show mstp instance <instid> commandfor a nonexistent mstp instance, the following error message appears:"printMstpCliInfoInst : nnMstBridgeTblGet FAILED"

Configuring Ethernet MSTP CIST using the CLIConfigure Ethernet MSTP CIST to set the MSTP CIST parameters for aport by performing this procedure.

Prerequisites


Procedure steps

Step Action

1 Configure Ethernet MSTP CIST by using the following command:

config ethernet <port> mstp cist


--End--

Variable definitionsThe following table defines optional parameters that you enter after theconfig ethernet <port> mstp cist command.


NN46200-516 02.0130 March 2009


.


Variable Value

edge-port<true|false> Assigns the MSTP edge-portparameter for the port.


Assigns the state of the port STP tofalse (disabled) or true (enabled) forthe CIST.

hello-time <timeval> Assigns the hello time for a port from100 to 1000 one hundredths of asecond.

info Shows current CIST parametersettings.


Assigns the following Ethernet MSTPCIST point-to-point parameter for theport:• forceFalse


• forceTrue—indicates that this port is treatedas if it connects to a point-to-pointlink



Assigns the Ethernet MSTP CISTprotocol-migration parameter to true orfalse for the port.

priority <intval> Assigns the CIST priority value for theport. The value must be a multiple of16. The range is 0 to 240.

pathcost <intval> Assigns the CIST path cost parameterfor the port in the range of 1 to200000000.

Configuring Ethernet MSTP MSTI using the CLIConfigure Ethernet MSTP MSTI to configure the Ethernet MSTP MSTIparameters on a port by performing this procedure.


NN46200-516 02.0130 March 2009


.


Prerequisites


Procedure steps

Step Action

1 Configure Ethernet MSTP MSTI by using the followingcommand:

config ethernet <port> mstp msti <instid>



--End--

Variable definitionsThe following table defines optional parameters that you enter after theconfig ethernet <port> mstp msti <instid> command.

Variable Value


Assigns the state of the port todisabled or enabled for the specificMSTP MSTI instance.

info Shows current Ethernet MSTP MSTIparameter settings.

priority <intval> Assigns the Ethernet MSTP MSTIpriority value for the port. The valuemust be a multiple of 16. The range is0 to 240.

pathcost <intval> Assigns the MSTP MSTI path costvalue for the port in the range of 1 to200000000.

Viewing MSTP port information using the CLIView MSTP port information to display MSTP, CIST, and MSTI informationfor a single port or a list of ports by performing this procedure.

Prerequisites



NN46200-516 02.0130 March 2009


.


Procedure steps

Step Action

1 View MSTP port information by using the following command:

show ports info mstp

--End--

Variable definitionsThe following table defines optional parameters that you enter after theshow ports info mstp command.

Variable Value

cistinfo <port> Displays the CIST information for aport, range of ports, or list of ports.

Specify the portlist as: {slot/port[-slot/port][,...]}

cistrole <port> Displays the CIST role and states for aport, range of ports, or list of ports.


mstiinfo <port> Displays MSTI information for a port,range of ports, or list of ports.


mstirole <port> Displays the MSTI role and states for aport, range of ports, or list of ports.


Viewing MSTP status using the CLIView MSTP status to display MSTP status information for the bridge byperforming this procedure.

Prerequisites



NN46200-516 02.0130 March 2009


.


Procedure steps

Step Action

1 View MSTP status by using the following command:

show mstp status

--End--


NN46200-516 02.0130 March 2009


.

199.

Spanning Tree configuration using theNNCLI

This chapter describes how to create, manage, and monitor Spanning TreeGroups (STGs) and how to configure Spanning Tree Protocol (STP), RapidSpanning Tree Protocol (RSTP), and Multiple Spanning Tree Protocol(MSTP) using the Nortel Networks command line interface (NNCLI).


ATTENTIONIf you disable the Spanning Tree Protocol (STP), it can reduce CPU overheadslightly. However, unless you use the switch in a simple network with littlepossibility of loops, Nortel recommends that you leave the Spanning TreeProtocol enabled.

Navigation• “Job aid” (page 199)

• “Configuring the STP mode using the NNCLI” (page 202)

• “Disabling STP mode using the NNCLI” (page 203)

• “STP BPDU Filtering configuration using the NNCLI” (page 204)

• “STG configuration using the NNCLI” (page 208)

• “RSTP configuration using the NNCLI” (page 218)

• “MSTP configuration using the NNCLI” (page 224)

Job aidThe following table lists the commands and their parameters that you useto complete the procedures in this section.

Command Parameter

Privileged EXEC mode


NN46200-516 02.0130 March 2009


.

200 Spanning Tree configuration using the NNCLI

Command Parameter

show spanning-tree bpdu-filtering[<interface-type>]

show spanning-tree bpdu-filtering[<interface-type>] [<portlist>]

show spanning-tree config [<sid>]

show spanning-tree port[<portlist>]

config

msti

port

show spanning-tree mstp

status

config

port

show spanning-tree rstp

status

Global Configuration mode

bpdu-mac-address-range<starting-mac-address> <mask>

no spanning-tree rstpgroup-stp enable

forward-time <number>

max-age<number>

max-hop <number>

msti<number>

pathcost-type<16-bit|32-bit>

priority <number>

region<config-id-sel|region-name|region-version>

tx-holdcount<number>

spanning-tree mstp

version<mstp|rstp|stp-compatible>

spanning-tree mstp msti <instid> priority<number>


NN46200-516 02.0130 March 2009


.

Job aid 201

Command Parameter

forward-time <number>

group-stp<enable>

hello-time<number>

max-age <number>


priority <number>

tx-holdcount <number>

spanning-tree rstp

version <rstp|stp-compatible>

<sid>

add-ports <portlist

create [<portlist>][vlan <vid>][tagged-bpdu-mac <mac address>]

[forward-delay <timeval>]

[group-stp <enable|disable>]

[hello-interval <timeval>]

[max-age <timeval>]

[priority <number>]

remove-ports <portlist>

spanning-tree stp <sid>

[trap-stp <enable|disable>]

FastEthernet/GigabitEthernet InterfaceConfiguration mode

no spanning-tree bpdu-filtering[enable]

no spanning-tree bpdu-filtering [port<portlist>] [enable]

port<port>no spanning-tree rstp

stp

default spanning-tree bpdu-filtering[enable] [port <portlist>] [timeout]

spanning-tree bpdu-filtering[enable]

spanning-tree bpdu-filtering [port<portlist>] [enable]

spanning-tree bpdu-filtering[timeout <10-65535|0>]


NN46200-516 02.0130 March 2009


.


Command Parameter

change-detection

cost <value>

faststart

spanning-tree [port <portlist>] stp<sid>

priority <value>

spanning-tree mstp msti <instid> cost

force-port-state <enable>

port<portlist>

priority <number>

cost <value>


p2p<force-true|force-false|auto>

port<port>

priority <value>


spanning-tree rstp

stp <enable>

Configuring the STP mode using the NNCLIConfigure the STP mode to set the spanning tree mode for the switch toMultiple Spanning Tree Protocol (MSTP), Rapid Spanning Tree Protocol(RSTP), or the default mode by performing this procedure. The defaultmode is regular STP.

ATTENTIONWhen you change the switch STP mode, you must save the switch bootconfiguration and restart the switch.

Prerequisites


Procedure steps

Step Action

1 Configure the STP mode to RSTP or MSTP by using one of thefollowing commands:

boot config flags spanning-tree-mode


NN46200-516 02.0130 March 2009


.

Disabling STP mode using the NNCLI 203

OR

Configure the STP mode to default by using the followingcommand:

default boot config flags spanning-tree-mode

2 Save the switch configuration file by using the followingcommand: save bootconfig

3 Restart the switch by using the following command: boot -y

ATTENTIONIt can take several minutes for the switch restart process to complete.

--End--

Variable definitionsThe following table defines optional parameters that you enter after theboot config flags spanning-tree-mode command.

Variable Value



Disabling STP mode using the NNCLIDisable STP mode to discontinue using spanning tree mode on the switchby performing this procedure.

Prerequisites


Procedure steps

Step Action

1 Disable STP mode by using the following command:

no boot config flags spanning-tree-mode

--End--


NN46200-516 02.0130 March 2009


.


STP BPDU Filtering configuration using the NNCLIThis section describes how to configure Spanning Tree Protocol (STP)Bridge Protocol Data Unit (BPDU) Filtering for a Spanning Tree Group(STG), Rapid Spanning Tree Protocol (RSTP), and Multiple SpanningTree Protocol (MSTP), using the Nortel Networks command line interface(NNCLI).

STP BPDU Filtering configuration using the NNCLI navigation

• “Enabling STP BPDU Filtering using the NNCLI” (page 204)

• “Disabling STP BPDU Filtering using the NNCLI” (page 205)

• “Configuring the STP BPDU Filtering port timer using the NNCLI” (page205)

• “Configuring STP BPDU Filtering default values using the NNCLI”(page 206)

• “Viewing STP BPDU Filtering status using the NNCLI” (page 207)

Enabling STP BPDU Filtering using the NNCLIEnable STP BPDU Filtering to manage STP BPDU Filtering on a port orgroup of ports by performing this procedure.

Prerequisites


Procedure steps

Step Action

1 Enable STP BPDU Filtering on the accessed port by using thefollowing command:

spanning-tree bpdu-filtering [enable]

2 Enable STP BPDU Filtering on an additional port or group ofports by using the following command:

spanning-tree bpdu-filtering [port <portlist>][enable]

--End--

Variable definitionsThe following table defines optional parameters that you enter with thespanning-tree bpdu-filtering command.


NN46200-516 02.0130 March 2009


.

STP BPDU Filtering configuration using the NNCLI 205

Variable Value

enable Enables STP BPDU Filtering on a portor group of ports.


Disabling STP BPDU Filtering using the NNCLIDisable STP BPDU Filtering to discontinue managing STP BPDU Filteringon a port or group of ports by performing this procedure.

Prerequisites


Procedure steps

Step Action

1 Disable STP BPDU Filtering on the accessed port by using thefollowing command:

no spanning-tree bpdu-filtering [enable]

2 Disable STP BPDU Filtering on an additional port or group ofports by using the following command:

no spanning-tree bpdu-filtering [port <portlist>][enable]

--End--

Variable definitionsThe following table defines optional parameters that you enter with the nospanning-tree bpdu-filtering[port <portlist>] [enable]command.

Variable Value


Configuring the STP BPDU Filtering port timer using the NNCLIConfigure the STP BPDU Filtering port timer to specify the duration a portremains in the operational state by performing this procedure.


NN46200-516 02.0130 March 2009


.


Prerequisites


Procedure steps

Step Action

1 Configure the STP BPDU Filtering port timer by using thefollowing command:

spanning-tree bpdu-filtering [timeout<10-65535|0>]

--End--

Variable definitionsThe following table defines optional parameters that you enter withthe spanning-tree bpdu-filtering[timeout <10-65535|0>]command.

Variable Value

<10-65535|0> Specifies the STP BPDU Filtering porttimer timeout duration in seconds.Values can be 0 or range from 10 to65535.


Configuring STP BPDU Filtering default values using the NNCLIConfigure STP BPDU Filtering default values to manage the port STPBPDU Filtering default values on the switch by performing this procedure.

Prerequisites


Procedure steps

Step Action

1 Configure STP BPDU Filtering default values by using thefollowing command:


NN46200-516 02.0130 March 2009


.

STP BPDU Filtering configuration using the NNCLI 207

default spanning-tree bpdu-filtering [enable][port <portlist>] [timeout]

--End--

Variable definitionsThe following table defines optional parameters that you enter withthe default spanning-tree bpdu-filtering [enable] [port<portlist>] [timeout <10-65535|0>] command.

Variable Value

enable Enables STP BPDU Filtering on a portor group of ports.


<10-65535|0> Specifies the STP BPDU Filtering porttimer timeout duration in seconds.Values can be 0 or range from 10 to65535.


The default STP BPDU Filtering porttimer timeout value is 120 seconds.

Viewing STP BPDU Filtering status using the NNCLIView port STP BPDU Filtering status to display STP BPDU Filtering statusinformation for all interface ports, a specific interface port, or a group ofinterface ports by performing this procedure.

Prerequisites


Procedure steps

Step Action

1 View STP BPDU Filtering status for all interface ports by usingthe following command:

show spanning-tree bpdu-filtering [<interface-type>]


NN46200-516 02.0130 March 2009


.


2 View STP BPDU Filtering status for a specific interface port or agroup of interface ports by using the following command:

show spanning-tree bpdu-filtering [<interface-type>] [<portlist>]

--End--

Variable definitionsThe following table defines optional parameters that you enter with theshow spanning-tree bpdu-filtering [<interface-type>] orshow spanning-tree bpdu-filtering [<interface-type>][<portlist>] commands.

Variable Value

<interface-type> Identifies the type of interface forwhich to display port BPDU filteringstatus. Values are FastEthernet andGigabitEthernet.


STG configuration using the NNCLIConfigure STGs to create a collection of ports that belong to the sameSTP instance.

ATTENTIONTo configure STG, you must set the spanning tree mode for the switch to legacySTP. For more information, see “Configuring the STP mode using the NNCLI”(page 202).

STG configuration using the NNCLI navigation

• “Configuring STG global settings using the NNCLI” (page 209)

• “Configuring STP using the NNCLI” (page 209)

• “Deleting an STG using the NNCLI” (page 212)

• “Viewing STG configuration using the NNCLI” (page 212)

• “Configuring STG port parameters using the NNCLI” (page 214)

• “Viewing port STG information using the NNCLI” (page 216)


NN46200-516 02.0130 March 2009


.

STG configuration using the NNCLI 209

Configuring STG global settings using the NNCLIWhen you create an STG, the switch assigns a default global MACaddress, which sends BPDUs. Configure STG global settings if you wantto replace the default global MAC address and to identify the mask for theMAC address by performing this procedure.

Prerequisites

• Set the switch spanning tree mode to legacy STP. For moreinformation, see “Configuring the STP mode using the NNCLI” (page202).


Procedure steps

Step Action

1 Change the default STG global MAC address by using thefollowing command:

bpdu-mac-address-range <starting-mac-address><Mask>

--End--

Variable definitionsThe following table defines variables in the bpdu-mac-address-range<starting-mac-address> <Mask> command.

Variable Value

<Mask> Indicates the mask (1–48) for the MACaddress, which sends BPDUs.

<starting-mac-address> Indicates the MAC (multicast) address, whichsends BPDUs.

The system assigns a default MAC addressto an STG that you create to send BPDUs.To change the default MAC address, enterthe MAC address of your choice as the<starting-mac-address> value.

Configuring STP using the NNCLIConfigure STP to create and configure a new STG or modify parametersfor an existing STG by performing this procedure.


NN46200-516 02.0130 March 2009


.


Prerequisites



Procedure steps

Step Action

1 Configure an STG by using the following command:

spanning-tree stp <sid>


--End--

Variable definitionsThe following table defines optional parameters that you enter after thespanning-tree stp <sid> command.

Variable Value

add-ports <portlist> Adds ports to an STG.

• portlist: Define the list of ports toadd to this STG, in the format{slot/port[-slot/port][,...]}.

create [<portlist>][vlan<vid>] [tagged-bpdu-mac <macaddress>]

Create an STG.

• Portlist: Define the list of ports toadd to this STG, in the format{slot/port[-slot/port][,...]}.You cannot add ports that belongto another STG or ports configuredas tagging-disabled to the STG.

• VID: Specify the tagged BPDUVLAN ID. If a VLAN spans multipleswitches, it must belong to thesame STG across all switches.

• MAC address: Specify the taggedBPDU MAC address.


NN46200-516 02.0130 March 2009


.


Variable Value

[forward-delay <timeval>] Configures the bridge forward delaytime, or the value in hundredths ofa second that all bridges use forForward Delay when this bridge actsas the root.

• timeval: Specify a value between400 and 3000. The default is 1500(15 seconds).

[group-stp <enable|disable>] Enable or disable the Spanning TreeProtocol on all ports in the specifiedSTG.

[hello-interval <timeval>] Set the bridge hello time increments of1/100 of a second. This value is usedby all bridges for HelloTime when thisbridge acts as the root. The granularityof this timer is specified by the IEEE802.1D-1990 standard.


[max-age <timeval>] Set the bridge maximum age time, orthe value in hundredths of a secondthat all bridges use for MaxAge whenthis bridge acts as the root.

The 802.1D-1990 standardspecifies that the BridgeMaxAgerange relates to the value ofdot1dStpBridgeHelloTime. Thedefault is 2000 (20 seconds).


[priority <number>] Set the STP bridge priority, in decimal.The range is 0 (highest priority) to65535 (lowest priority). The default is32768.

• number: Specify a value between0 and 65535.


NN46200-516 02.0130 March 2009


.


Variable Value

remove-ports <portlist> Removes the specified ports from anSTG.

• portlist: Defines the list of ports toadd to this STG, in the format{slot/port[-slot/port][,...]}.

[trap-stp <enable|disable>] Enables or disables the sendingof traps to a trace receiver. Whenenabled, SNMP traps are sent to atrace receiver every time an STPtopology occurs for the specified STG.

Deleting an STG using the NNCLIDelete an STG to remove the STG from your network by performing thisprocedure.

Prerequisites



Procedure steps

Step Action

1 Delete an STG by using the following command:

no spanning-tree <sid>


--End--

Viewing STG configuration using the NNCLIView configuration information for a specific STG or all STGs in yournetwork by performing this procedure.


NN46200-516 02.0130 March 2009


.


Prerequisites



Procedure steps

Step Action

1 View STG configuration by using the following command:

show spanning-tree config<sid>


--End--

Job aidUse the data in the following table to understand field descriptionsdisplayed with the show spanning-tree config<sid> command.

Table 14Job aid

Field Description

BRIDGE ADDRESS The MAC address used by this bridge when it must bereferred to in a unique fashion.

DESIGNATED ROOT The bridge identifier of the root of the spanning tree asdetermined by the Spanning Tree Protocol as executedby this node. This value is used as the Root Identifierparameter in all Configuration Bridge PDUs originatedby this node.

FORWARD DELAY The time interval in hundredths of a second thatcontrols how fast a port changes its spanning statewhen moving toward the Forwarding state. The valuedetermines how long the port stays in each of theListening and Learning states, which precede theForwarding state. This value is also used when atopology change is detected and is under way, toage all dynamic entries in the Forwarding Database.(This value is the one this bridge is currently using,in contrast to rcStgBridgeForwardDelay, which is thevalue that this bridge and all others can start usingif/when this bridge were to become the root.) Thedefault value is 1500 (15 seconds).


NN46200-516 02.0130 March 2009


.



Field Description

HELLO TIME The amount of time in hundredths of a second betweentransmission of configuration BPDUs by this node ona port when it is the root of the spanning tree. Thedefault value is 200 (2 seconds).

HOLD TIME The time interval in hundredths of a second, duringwhich no more than two Configuration bridge PDUsshall be transmitted by this node. The default value is100 (1 second).

MAX AGE The maximum age of Spanning Tree Protocolinformation learned from the network on a port beforeit is discarded, in units of hundredths of a second. Theactual value that this bridge is currently using.

NUM PORTS The number of ports controlled by this bridging entity.

PROTOCOLSPECIFICATION

An indication of what version of the Spanning TreeProtocol is running. The IEEE 802.1d implementationsdisplays ieee8021d.

ROOT COST The cost of the path to the root as seen from thisbridge.

ROOT PORT The port number of the port that offers the lowest costpath from this bridge to the root bridge.

[<sid>] Specify an STG ID from 1 to 64.

Top Changes A topology change trap is sent by a bridge when eitherof its configured ports transitions from the Learningstate to the Forwarding state, or from the Forwardingstate to the Blocking state. The trap is not sent if a newroot trap is sent for the same transition. Implementationof this trap is optional.

Configuring STG port parameters using the NNCLIConfigure STG for a single port or a range of ports to modify STGparameters, such as topology change detection, port to path cost,FastStart, and priority by performing this procedure.

ATTENTIONPorts must have tagging enabled to belong to multiple spanning tree groups.

Nortel recommends that you enable FastStart as an alternative to disablingSpanning Tree Protocol on an individual port.


NN46200-516 02.0130 March 2009


.


Prerequisites



Procedure steps

Step Action

1 Configure STG port parameters by using the following command:

spanning-tree port <port> stp <sid>



--End--

Variable definitionsThe following table defines optional parameters that you enter after thespanning-tree port <port> stp <sid> commands.

Variable Value

change-detection Enables or disables the topology changedetection for the specified spanning tree.

cost <value> Configures the contribution of this port tothe path cost. The IEEE 802.1D standardrecommends that the default value of thisparameter be in inverse proportion to thespeed of the attached LAN.

• value: Specify a value from 1 to 65535.

faststart When enabled on a port with no other bridges,Spanning Tree FastStart starts the port quicklyfollowing switch initialization or a spanningtree change. The port goes through thenormal listening and learning states before theforwarding state, but the bridge hello timer (2seconds by default) determines the hold timefor these states instead of the bridge forwarddelay timer (15 seconds by default).


NN46200-516 02.0130 March 2009


.


Variable Value

Nortel recommends that you enable FastStartas an alternative to disabling Spanning TreeProtocol on an individual port.

priority

<value>

Configures the priority of this port.

• value: Specify a value from 0 to 65535.

Viewing port STG information using the NNCLIView all available STG information for a single port, all ports, or a specificgroup of ports by performing this procedure.

Prerequisites



Procedure steps

Step Action

1 View port STG information by using the following command:

show spanning-tree port<port>


--End--

Job aidUse the data in the following table to understand field descriptionsdisplayed with the show spanning-tree port<port> command.

Table 15Job aid

Variable Value

BRIDGE The Bridge Identifier of the bridge that this port uses as theDesignated Bridge for the segment of this port.

CHANGEDETECTION

The change detection setting (true or false) for this port. Youcan configure this value only on access ports. If you enablechange detection on an MLT with access ports, the settingautomatically applies to all ports in the MLT.


NN46200-516 02.0130 March 2009


.



Variable Value

COST The path cost of the Designated Port of the segment connectedto this port. This value compares to the Root Path Cost field inreceived bridge PDUs.

ENABLESTP

The STP state of the port.

• Enabled—BPDUs processed in accordance with STP.

• Disabled—The port stays in a forwarding state it drops anddoes not process received BPDUs.

FASTSTART When enabled on a port with no other bridges, Spanning TreeFastStart starts the port quickly following switch initializationor a spanning tree change. The port goes through the normallistening and learning states before the forwarding state, but thebridge hello timer (2 seconds by default) determines the holdtime for these states instead of the bridge forward delay timer(15 seconds by default).


• false (default, disables FastStart for the port)

This setting does not adhere to the specifications in the IEEE802.1D standard for Spanning Tree Protocol (STP), in which aport enters the listening state following the initialization of thebridging device or from the disabled state when you enable theport through configuration.

FORWARDTRANSITION

The number of times this port transitioned from the Learningstate to the Forwarding state.

PATHCOST The contribution of this port to the path cost of paths toward thespanning tree root that includes this port. The 802.1D-1990protocol recommends that the default value of this parameterbe in inverse proportion to the speed of the attached LAN.

PORT The identifier of the port on the Designated Bridge for thesegment of this port.

PORT_NUM The port number of the port for which this entry containsSpanning Tree Protocol management information.

PRIO The value of the priority field, in the first octet of the (2 octetlong) Port ID. The value of rcStgPort defines the other octet ofthe Port ID.

ROOT The unique Bridge Identifier of the Bridge recorded as the rootin the configuration BPDUs transmitted by the DesignatedBridge for the segment, to which the port attaches.


NN46200-516 02.0130 March 2009


.



Variable Value


STATE The current state of the port as defined by the application ofthe STP.

• disabled (1)

• blocking (2)

• listening (3)

• learning (4)

• forwarding (5)

• broken (6)

This state controls what action a port takes on reception of theframe. If the bridge detects a malfunctioning port, it places thatport into the broken (6) state.

RSTP configuration using the NNCLIConfigure Rapid Spanning Tree Protocol (RSTP) to reduce the recoverytime after a network breakdown.

ATTENTIONBefore you configure RSTP, the spanning tree mode for the switch must beset to RSTP. For more information, see “Configuring the STP mode using theNNCLI” (page 202).

RSTP configuration using the NNCLI navigation

• “Configuring global RSTP using the NNCLI” (page 218)

• “Disabling group STP using the NNCLI” (page 220)

• “Viewing global RSTP configuration using the NNCLI” (page 220)

• “Viewing global RSTP status using the NNCLI” (page 220)

• “Configuring port RSTP parameters using the NNCLI” (page 221)

• “Disabling port RSTP using the NNCLI” (page 222)

• “Viewing port RSTP information using the NNCLI” (page 223)

Configuring global RSTP using the NNCLIConfigure RSTP parameters to reduce recovery time after a networkfailure by performing this procedure.


NN46200-516 02.0130 March 2009


.

RSTP configuration using the NNCLI 219

Prerequisites

• Set the switch spanning tree mode to RSTP. For more information, see“Configuring the STP mode using the NNCLI” (page 202).


Procedure steps

Step Action

1 Configure RSTP by using the following command:

spanning-tree rstp

--End--

Variable definitionsThe following table defines optional parameters that you enter after thespanning-tree rstp command.

Variable Value

forward-time <number> Assigns the RSTP forward delayfor the bridge from 400 to 3000 onehundredths of a second.

group-stp<enable> Enables RSTP for a specific STG.

hello-time<number> Assigns the RSTP hello time delayfor the bridge from 100 to 1000 onehundredths of a second.

max-age <number> Assigns the RSTP maximum age timefor the bridge from 600 to 4000 onehundredths of a second.

pathcost-type <16-bit|32-bit> Assigns the RSTP default pathcosttype to either 16 bits or 32 bits. Thedefault is 32 bits.

priority <number> Assigns the RSTP bridge priority in arange of 0 to 61440 in steps of 4096.

tx-holdcount<number> Assigns the RSTP transmit hold count.The range is 1 to 10. The default is 3.

version <rstp|stp-compatible> Assigns the port in the RSTP- orSTP-compatible mode; that is, whetherthe port transmits RSTP BPDUs orConfig/TCN BPDUs.


NN46200-516 02.0130 March 2009


.


Disabling group STP using the NNCLIDisable group STP to disable RSTP for a specific STG by performing thisprocedure.

Prerequisites



Procedure steps

Step Action

1 Disable group STP by using the following command:

no spanning-tree rstp group-stp enable

--End--

Viewing global RSTP configuration using the NNCLIView global RSTP configuration to display RSTP configuration details forthe switch by performing this procedure.

Prerequisites



Procedure steps

Step Action

1 View global RSTP configuration information by using thefollowing command:

show spanning-tree rstp config

--End--

Viewing global RSTP status using the NNCLIView global RSTP status to display RSTP status information for the switchby performing this procedure.


NN46200-516 02.0130 March 2009


.


Prerequisites



Procedure steps

Step Action

1 View global RSTP status by using the following command:

show spanning-tree rstp status

--End--

Configuring port RSTP parameters using the NNCLIConfigure port RSTP parameters to set RSTP feature parameter values fora specific port by performing this procedure.

Prerequisites



Procedure steps

Step Action

1 Configure Ethernet RSTP parameters by using the followingcommand:

spanning-tree rstp

--End--

Variable definitionsThe following table defines optional parameters that you enter after thespanning-tree rstp command.

Variable Value

cost <value> Assigns the RSTP path costparameter for the port in the range of 1to 200000000.


NN46200-516 02.0130 March 2009


.


Variable Value

edge-port<true|false> Assigns the RSTP edge portparameter for the port.

p2p<force-true|force-false|auto>

Assigns the Ethernet RSTPpoint-to-point parameter for theport.

port<slot/port> Defines the port on which to configureRSTP, in the format {slot/port}.

priority <value> Assigns the Ethernet RSTP priorityparameter for the port. The priorityranges in the range of 0 to 240 insteps of 16 (0, 16, 32, ... , 240).


Assigns the Ethernet RSTPprotocol-migration parameter forthe port.

stp <enable> Enables STP on the port.

Disabling port RSTP using the NNCLIDisable port RSTP to discontinue using the RSTP feature on a specificport or disable STP on the port by performing this procedure.

Prerequisites



Procedure steps

Step Action

1 Disable port RSTP by using the following command:

no spanning-tree rstp

--End--

Variable definitionsThe following table defines optional parameters that you enter after the nospanning-tree rstp command.


NN46200-516 02.0130 March 2009


.


Variable Value

port<slot/port> Defines an Ethernet port on which todisable RSTP, in the format {slot/port}.

stp Disables STP on the port.

Viewing port RSTP information using the NNCLIView port RSTP information to display RSTP parameter details for aspecific port by performing this procedure.

Prerequisites



Procedure steps

Step Action

1 View the RSTP configuration information by using the followingcommand:

show spanning-tree rstp port

--End--

Variable definitionsThe following table defines optional parameters that you enter after theshow spanning-tree rstp port command.

Variable Value

config<portlist> Displays the RSTP configuration for aport or list of ports.Specify the portlist as: {slot/port[-slot/port][,...]}

role <portlist> Displays the RSTP role for a port orlist of ports.Specify the portlist as: {slot/port[-slot/port][,...]}

status<portlist> Displays the RSTP status for a port orlist of ports.Specify the portlist as: {slot/port[-slot/port][,...]}


NN46200-516 02.0130 March 2009


.


MSTP configuration using the NNCLIThis section describes how to configure Multiple Spanning Tree Protocol(MSTP) using the NNCLI.

MSTP configuration using the NNCLI navigation

• “Configuring MSTP using the NNCLI” (page 224)

• “Viewing MSTP configuration using the NNCLI” (page 225)

• “Configuring MSTP MSTI using the NNCLI” (page 226)

• “Viewing MSPT MSTI configuration information using the NNCLI” (page226)

• “Configuring Ethernet MSTP CIST using the NNCLI” (page 227)

• “Disabling Ethernet MSTP CIST force-port-state using the NNCLI”(page 228)

• “Configuring Ethernet MSTP MSTI using the NNCLI” (page 229)

• “Viewing MSTP port information using the NNCLI” (page 230)

• “Viewing MSTP status using the NNCLI” (page 231)

Configuring MSTP using the NNCLIConfigure Multiple Spanning Tree Protocol to set the MSTP configurationversion by performing this procedure.

Prerequisites

• Set the switch spanning tree mode to MSTP. For more information, see“Configuring the STP mode using the NNCLI” (page 202).


Procedure steps

Step Action

1 Configure MSTP by using the following command:

spanning-tree mstp

--End--

Variable definitionsThe following table defines optional parameters that you enter after thespanning-tree mstp command.


NN46200-516 02.0130 March 2009


.

MSTP configuration using the NNCLI 225

Variable Value

forward-time <number> Assigns the MSTP forward delayfor the bridge from 400 to 3000 onehundredths of a second.

max-age<number> Assigns the MSTP maximum age timefor the bridge from 600 to 4000 onehundredths of a second.

max-hop <number> Assigns the MSTP bridge maximumhop count. The range is 100 to 4000one hundredths of a second in stepsof 100 one hundredths.

msti<number> Assigns the MSTP MSTI instanceparameter.

pathcost-type<16-bit|32-bit> Assigns the MSTP default pathcosttype to either 16 bits or 32 bits. Thedefault is 32 bits.

priority <number> Assigns the MSTP bridge priority in arange of 0 to 61440 in steps of 4096.

region<config-id-sel|region-name|region-version>

Assigns the MSTP region commands:• config-id-sel—Assigns the MSTP

region configuration ID number:The range is 0 to 255.

• region-name—Assigns the MSTPregion name. The characterstring can be a range of 1 to 32characters.

• region-version—Assigns theMSTP region version. The range is0 to 65535.

tx-holdcount<number> Assigns the MSTP transmit hold count.The range is 1 to 10. The default is 3.

version<mstp|rstp|stp-compatible>

Assigns the MSTP bridge version.

Viewing MSTP configuration using the NNCLIView the MSTP configurations to display the MSTP-related bridge andregion information by performing this procedure.

Prerequisites




NN46200-516 02.0130 March 2009


.


Procedure steps

Step Action

1 View the MSTP configurations by using the following command:

show spanning-tree mstp config

--End--

Configuring MSTP MSTI using the NNCLIConfigure multi-service transport platform (MSTP) multiple spanningtree instance (MSTI) to set the configuration version by performing thisprocedure.

Prerequisites



Procedure steps

Step Action

1 Configure MSTP MSTI by using the following command:

spanning-tree mstp msti <instid>

<instid> identifies the instance ID.

--End--

Variable definitionsThe following table defines optional parameters that you enter after thespanning-tree mstp msti <instid> command.

Variable Value

priority<number> Assigns the MSTP bridge priority. Therange is 0 to 65535, in steps of 4096.

Viewing MSPT MSTI configuration information using the NNCLIView MSPT MSTI configuration information to review the MSTP instancestatus by performing this procedure.


NN46200-516 02.0130 March 2009


.


Prerequisites


Procedure steps

Step Action

1 View MSPT MSTI configuration information by using thefollowing command:

show spanning-tree mstp msti config <instid>


--End--

ATTENTIONIf you attempt to use the show mstp instance <instid> commandfor a nonexistent MSTP instance, the following error message appears:"printMstpCliInfoInst : nnMstBridgeTblGet FAILED"

Configuring Ethernet MSTP CIST using the NNCLIConfigure Ethernet MSTP CIST to set the MSTP CIST parameters for aport by performing this procedure.

Prerequisites



Procedure steps

Step Action

1 Configure Ethernet MSTP CIST by using the following command:

spanning-tree mstp

--End--

Variable definitionsThe following table defines optional parameters that you enter after thespanning-tree mstp command.


NN46200-516 02.0130 March 2009


.


Variable Value

cost <intval> Assigns the CIST path cost parameterfor the port in the range of 1 to200000000.

edge-port<true|false> Assigns the MSTP edge-portparameter for the port.

force-port-state <enable> Assigns the state of the port to true(enabled) for the CIST.

hello-time <timeval> Assigns the hello time for a port from100 to 1000 one hundredths of asecond.

p2p <force-true|force-false|auto>

Assigns the following Ethernet MSTPCIST point-to-point parameter for theport:• force-false


• force-true—indicates that this port is treatedas if it connects to a point-to-pointlink


port<slot/port> Identifies the slot and port (slot/port).

priority <intval> Assigns the CIST priority value for theport. The value must be a multiple of16. The range is 0 to 240.


Assigns the Ethernet MSTP CISTprotocol-migration parameter to true orfalse for the port.

Disabling Ethernet MSTP CIST force-port-state using the NNCLIDisable Ethernet MSTP CIST force-port-state to disable STP on a port byperforming this procedure.


NN46200-516 02.0130 March 2009


.


Prerequisites



Procedure steps

Step Action

1 Disable Ethernet MSTP CIST force-port-state by using thefollowing command:

no spanning-tree mstp force-port-state enable

--End--

Configuring Ethernet MSTP MSTI using the NNCLIConfigure Ethernet MSTP MSTI to configure the Ethernet MSTP MSTIparameters on a port by performing this procedure.

Prerequisites



Procedure steps

Step Action

1 Configure Ethernet MSTP MSTI by using the followingcommand:

spanning-tree mstp msti <instid>


--End--

Variable definitionsThe following table defines optional parameters that you enter after thespanning-tree mstp msti <instid> command.


NN46200-516 02.0130 March 2009


.


Variable Value

cost Assigns the MSTP MSTI path costvalue for the port in the range of 1 to200000000.

force-port-state <enable> Enables MSTI learning for a port.

port<slot/port> Identifies the slot and port (slot/port).

priority <number> Assigns the Ethernet MSTP priorityparameter for the port. The priorityranges in the range of 0 to 240 insteps of 16 (0, 16, 32, ... , 240).

Viewing MSTP port information using the NNCLIView the MSTP port role information to display the MSTP, CIST port rolesand states information for a single port or a list of ports by performing thisprocedure.

Prerequisites



Procedure steps

Step Action

1 View the MSTP port information by using the followingcommand:

show spanning-tree mstp port

--End--

Variable definitionsThe following table defines optional parameters that you enter after theshow spanning-tree mstp port command.

Variable Value

config

<portlist>

Displays MSTP CIST port information,in the format slot/port.

role

<portlist>

Displays MSTP CIST port role andstate information, in the formatslot/port.


NN46200-516 02.0130 March 2009


.


Viewing MSTP status using the NNCLIView the MSTP status to display bridge MSTP status information byperforming this procedure.

Prerequisites



Procedure steps

Step Action

1 View the MSTP status by using the following command:

show spanning-tree mstp status

--End--


NN46200-516 02.0130 March 2009


.



NN46200-516 02.0130 March 2009


.

233.

RSTP and MSTP CLI Configurationexamples

This section provides configuration examples for the Rapid Spanning TreeProtocol (RSTP) and Multiple Spanning Tree Protocol (MSTP), includingthe CLI commands you use to create the sample configurations.

For more information about VLAN and Spanning Tree configuration,see the PP8300 Technical Configuration Guide for VLAN, SpanningTree, and Link Aggregation using PPCLI or the PP8300 TechnicalConfiguration Guide for VLAN, Spanning Tree, and Link Aggregationusing NNCLI . You can find these Technical Configuration Guides atwww.nortel.com/documentation. Choose Routers and Routing Switches,and then Ethernet Routing Switch 8300.

Navigation• “Configuring RSTP using the CLI” (page 233)

• “Configuring MSTP using the CLI” (page 239)

Configuring RSTP using the CLIThis section shows an example of configuring RSTP based on the networktopology illustrated in the following figure. This configuration results intraffic flow as shown with the dashed lines because B1 becomes the RSTProot bridge. If B1 fails, then B2 becomes the root bridge based on prioritysettings.

ATTENTIONSet the bridge port priory on B1 such that the Gigabit Ethernet (GbE) interface2/1 is used.


NN46200-516 02.0130 March 2009


.

http://support.avaya.com

234 RSTP and MSTP CLI Configuration examples

Figure 7RSTP topology

Example of configuring RSTP using the CLI: Configuring ERS8300 B1Configure ERS8300 B1 using the CLI by performing this procedure.

Procedure steps

Step Action

1 To set the switch to use RSTP mode enter the followingcommands:

ERS8300-B1:5# config bootconfig flags spanning-tree-mode rstp


NN46200-516 02.0130 March 2009


.

Configuring RSTP using the CLI 235

ERS8300-B1:5# save bootconfigERS8300-B1:5# boot -y

2 To add VLAN 3, enter the following commands:

ERS8300-B1:5# config vlan 3 create byport-mstprstp0ERS8300-B1:5# config vlan 3 ports add 2/1,2/2,2/4,2/5,1/15

3 To change the RSTP bridge priority, enter the followingcommand:

ERS8300-B1:5# config rstp priority 4096

4 To configure port 1/15 as an RSTP edge port, enter the followingcommand:

ATTENTIONWhen you configure a port as an RSTP edge port, you must resetthe port.

ERS8300-B1:5# config ethernet 1/15 rstp edge-porttrue

5 To configure port 2/1 with an RSTP port priority of 16 so that it isused as the RSTP root path by entering the following command:

ERS8300-B1:5# config ethernet 2/1 rstp priority 16

--End--

Example of configuring RSTP using the CLI: Configuring ERS8300 B2Configure ERS8300 B2 using the CLI by performing this procedure.

Procedure steps

Step Action

1 To set the switch to use the RSTP mode, enter the followingcommands:

ERS8300-B2:5# config bootconfig flags spanning-tree-mode rstpERS8300-B2:5# save bootconfigERS8300-B2:5# boot -y




NN46200-516 02.0130 March 2009


.



ERS8300-B2:5# config rstp priority 8192

4 To configure port 3/15 as an RSTP edge port, enter the followingcommand:

ATTENTIONWhen you configure a port as an RSTP edge port, you must resetthe port.

ERS8300-B2:5# config ethernet 3/15 rstp edge-porttrue

--End--

Example of configuring RSTP using the CLI: configuring ERS1600 B3Configure ERS1600 B3 using the CLI by performing this procedure.

Procedure steps

Step Action

1 To set the switch to use the RSTP mode, enter the followingcommand:

ERS1624G-B3:4# config stp version rstp


ERS1624G-B3:4# config stp priority 12288

3 To add VLAN 3, enter the following command:

ERS1624G-B3:4# create vlan 3 vid 3 type portERS1624G-B3:4# config vlan 3 add untagged1,3,5,7,10

4 To configure ports 1 and 3 for 1 Gbps full duplex to becompatible with the ES GbE interfaces, enter the followingcommand:

ERS1624G-B3:4# config ports 1,3 speed 1000_full

--End--

Example of configuring RSTP using the CLI: configuring ERS1600 B4Configure ERS1600 B4 using the CLI by performing this procedure.


NN46200-516 02.0130 March 2009


.

Configuring RSTP using the CLI 237

Procedure steps

Step Action

1 To set the switch to use the RSTP mode, enter the followingcommand:

ERS1612G-B4:4# config stp version rstp


ERS1612G-B4:4# config stp priority 16384


ERS1612G-B4:4# create vlan 3 vid 3 type portERS1612G-B4:4# config vlan 3 add untagged1,3,5,7,10

4 To configure ports 1 and 3 for 1 Gbps full-duplex to becompatible with the ES GbE interfaces, enter the followingcommand:


--End--

Example of configuring RSTP using the CLI: configuring ES 470 B5Configure ES 470 B5 using the CLI by performing this procedure.

Procedure steps

Step Action

1 To change the spanning tree operating mode to the RSTP modeand restart the switch, enter the following command:

ES470_48(config)# spanning-tree op-mode rstpES470_48(config)# bootReboot the unit(s) (y/n) ? y


ES470_48(config)# vlan create 3 type portES470_48(config)# vlan members add 3 15,47,48

3 To remove VLAN port members from the default VLAN, enterthe following command:

ES470_48(config)# vlan members remove 1 15,47,48


NN46200-516 02.0130 March 2009


.


ATTENTIONIf you remove the port, you can enable RSTP by using the followingcommands: interface fastEthernet <port> spanning-treerstp learning enable and spanning-tree rstp learningenable


ES470_48(config)# spanning-tree rstp priority 5000

5 To configure port 15 as an RSTP edge port, enter the followingcommand:

ES470_48(config)# interface fastEthernet 15ES470_48(config-if)# spanning-tree rstp edge-porttrue

--End--

Example of configuring RSTP using the CLI: configuring ES470 B6Configure ES470 B6 using the CLI by performing this procedure.

Procedure steps

Step Action

1 To change spanning tree operating mode to the RSTP mode andrestart the switch, enter the following command:

ES470_48(config)# spanning-tree op-mode rstpES470_48(config)# bootReboot the unit(s) (y/n) ? y






ES470_48(config)# spanning-tree rstp priority 6000

5 To configure port 15 as an RSTP edge port, enter the followingcommand:


NN46200-516 02.0130 March 2009


.

Configuring MSTP using the CLI 239

ES470_48(config)# interface fastEthernet 15ES470_48(config-if)# spanning-tree rstp edge-porttrue

--End--

Configuring MSTP using the CLIThis section shows an example of configuring MSTP based on the networktopology illustrated in the following figure.

Figure 8MSTP topology

The network topology in the preceding figure includes the followingparameters:

• Switches B1 and B2 are in multiple spanning tree region 2.

• B1 is configured so that it becomes the CIST root; it has the lowestCIST priority of 4096.

• B2 is configured so that it becomes the CIST backup; it has the nexthighest CIST priority of 8192.

• Two instances of MSTI: MSTI 1 for VLAN 3 and MSTI 2 for VLAN 4.


NN46200-516 02.0130 March 2009


.


• B1 GbE interface 2/2 is configured with a MSTI 2 priority of 16, whileB2 GbE interface 4/1 is configured with a MSTI 1 priority of 16. Thisresults in VLAN load balancing.

• Switches B3, B4, B5, and B6 are in multiple spanning tree region 1.

• B3 is configured so that it becomes the CIST regional root; it has aCIST priority of 12288. B4 becomes the backup CIST regional root;it has a priority of 16384.

• Two MSTI instances are present; MSTI 1 for VLAN 3, and MSTI 2 forVLAN 4.

• B4 is configured so that it is the MSTI root for VLAN 3 and the backupMSTI root for VLAN 4. The MSTI priority for MSTI 1 is configured to4096, and the MSTI priority for MSTI 2 is configured to 8192.

• B3 is configured so that it is the MSTI root for VLAN 4 and the backupMSTI root for VLAN 3. The MSTI priority for MSTI 1 is configured to8192, and the MSTI priority for MSTI 2 is configured to 4096.

Example of Configuring MSTP: configuring ERS8300 B1Configure ERS 8300 B1 by performing this procedure.

Procedure steps

Step Action

1 To set the switch to use the MSTP mode, enter the followingcommands:

ERS8300-B1:5# config bootconfig flags spanning-tree-mode mstpERS8300-B1:5# save bootconfigERS8300-B1:5# boot -y

2 To configure the MSTP region, enter the following commands:

ERS8300-B1:5# config mstp region config-id-sel 2ERS8300-B1:5# config mstp region name region2ERS8300-B1:5# config mstp region revision 1

3 To configure GbE ports 2/1, 2/2, 2/4, and 2/4 as tagged ports,enter the following commands:

ERS8300-B1:5# config ethernet 2/1,2/2,2/4,2/5perform-tagging enable




NN46200-516 02.0130 March 2009


.




6 To change the MSTP CIST bridge priority, enter the followingcommand:

ERS8300-B1:5# config mstp cist priority 4096

7 To configure the MSTI 2 port, enter the following command:

ERS8300-B1:5# config ethernet 2/2 mstp msti 2priority 16

8 To configure ports 1/15 and 1/16 as MSTP edge ports, enter thefollowing command:

ERS8300-B1:5# config ethernet 1/15,1/16 mstp cistedge-port true

--End--

Example of Configuring MSTP: configuring ERS8300 B2Configure ERS8300 B2 by performing this procedure.

Procedure steps

Step Action

1 To set the switch to use the MSTP mode, enter the followingcommands:

ERS8300-B2:5# config bootconfig flags spanning-tree-mode mstpERS8300-B2:5# save bootconfigERS8300-B2:5# boot -y

2 to configure the MSTP region, enter the following commands:

ERS8300-B2:5# config mstp region config-id-sel 2ERS8300-B2:5# config mstp region name region2ERS8300-B2:5# config mstp region revision 1

3 To configure GbE ports 4/1, 4/2, 4/4, and 4/5 as tagged ports,enter the following command:

ERS8300-B2:5# config ethernet 4/1,4/2,4/4,4/5perform-tagging enable


ERS8300-B2:5# config vlan 3 create byport-mstprstp1


NN46200-516 02.0130 March 2009


.


ERS8300-B2:5# config vlan 3 ports add 4/1,4/2,4/4,4/5,3/15



6 To change the MSTP CIST bridge priority, enter the followingcommand:

ERS8300-B2:5# config mstp cist priority 8192

7 To configure the MSTI 1 port, enter the following command:

ERS8300-B2:5# config ethernet 4/1 mstp msti 1priority 16

8 To configure ports as MSTP edge ports, enter the followingcommand:

ERS8300-B2:5# config ethernet 3/15,3/16 mstp cistedge-port true

--End--


Procedure steps

Step Action

1 To enable the MSTP mode, enter the following command:

ERS1624G-B3:4# config stp version mstp

2 To change MSTP bridge priority, enter the following command:

ERS1624G-B3:4# config stp instance_id 0 priority12288


ERS1624G-B3:4# create vlan 3 vid 3 type portERS1624G-B3:4# config vlan 3 add untagged 10ERS1624G-B3:4# config vlan 3 add tagged 1,3,5,7




NN46200-516 02.0130 March 2009


.


5 To configure ports 1 and 3 for 1 Gbps full-duplex to becompatible with the ES GbE interfaces, enter the followingcommand:


6 To configure the MSTP region and revision, enter the followingcommands:

ERS1624G-B3:4# config stp region name region1ERS1624G-B3:4# config stp region mstconfigidsel 1ERS1624G-B3:4# config stp region revision 1

7 To add MSTI 1, change the MSTI priority, and add VLAN 3, enterthe following commands:

ERS1624G-B3:4# create stp instance_id 1ERS1624G-B3:4# config stp instance_id 2 priority8192ERS1624G-B3:4# config stp_vlan instance_id 1 add 3



--End--


Procedure steps

Step Action

1 To enable MSTP mode, enter the following command:

ERS1624G-B4:4# config stp version mstp

2 To change MSTP bridge priority, enter the following command:

ERS1624G-B4:4# config stp instance_id 0 priority12288





NN46200-516 02.0130 March 2009


.



5 To configure ports 1 and 3 for 1 Gbps full duplex to becompatible with the ES GbE interfaces, enter the followingcommands:


6 To configure the MSTP region and version, enter the followingcommands:

ERS1624G-B4:4# config stp region name region1ERS1624G-B4:4# config stp region mstconfigidsel 1ERS1624G-B4:4# config stp region revision 1



8 To add MSTI 2, change the MSTI priority, and add VLAN 4 enterthe following commands:


--End--

Example of Configuring MSTP: configuring ES 470 B5Configure ES 470 B5 by performing this procedure.

Procedure steps

Step Action

1 To change the spanning tree operation mode to MSTP andrestart the switch, enter the following commands:

ES470_48(config)# spanning-tree op-mode mstpES470_48(config)# bootReboot the unit(s) (y/n) ? y

2 To add tagging, enter the following commands:

ES470_48(config)# vlan ports 47,48 tagging tagall

3 Add VLAN 3 and members:


NN46200-516 02.0130 March 2009


.



4 To remove VLAN port member from the default VLAN, enter thefollowing command:


5 To add VLAN 4 and port members, enter the followingcommand:



ES470_48(config)# vlan members remove 1 16

7 To configure the MSTP region and version, enter the followingcommand:

ES470_48(config)# spanning-tree mstp regionconfig-id-sel 1 region-name region1 region-version1

8 To add MSTP MSTI 1 and add VLAN 3, enter the followingcommands:

ES470_48(config)# spanning-tree mstp msti 1ES470_48(config)# spanning-tree mstp msti 1add-vlan 3



ATTENTIONIf an error message appears stating that you cannot modify settingsand nontagged ports cannot span multiple STPGs, then you mustensure that all appropriate ports have tagging enabled. In thisexample, this applies to ports 47 and 48.

10 To configure ports 6 and 7 as MSTP edge ports, enter thefollowing commands:

ES470_48(config)# interface fastEthernet 15,16ES470_48(config-if)# spanning-tree mstp edge-porttrue

--End--


NN46200-516 02.0130 March 2009


.


Example of Configuring MSTP: configuring ES 470 B6Configure ES 470 B6 by performing this procedure.

Procedure steps

Step Action

1 To change the spanning tree operation mode to MSTP andrestart the switch, enter the following commands:

ES470_48(config)# spanning-tree op-mode mstpES470_48(config)# boot Reboot the unit(s) (y/n) ? y

2 To add tagging, enter the following command:

ES470_48(config)# vlan ports 47,48 tagging tagall

3 To add VLAN 3 and port members, enter the followingcommands:




5 To add VLAN 4 and port members, enter the followingcommands:



ES470_48(config)# vlan members remove 1 16

7 To configure the MSTP region and version, enter the followingcommand:

ES470_48(config)# spanning-tree mstp regionconfig-id-sel 1 region-name region1 region-version1






NN46200-516 02.0130 March 2009


.


10 To configure ports 6 and 7 as MSTP edge ports, enter thefollowing commands:

ES470_48(config)# interface fastEthernet 15,16ES470_48(config-if)# spanning-tree mstp edge-porttrue

--End--


NN46200-516 02.0130 March 2009


.



NN46200-516 02.0130 March 2009


.

249.

Customer serviceVisit the Nortel Web site to access the complete range of services andsupport that Nortel provides. Go to www.nortel.com or go to one of thepages listed in the following sections.

Navigation• “Updated versions of documentation” (page 249)

• “How to get help” (page 249)

• “Express Routing Codes” (page 249)

• “Additional information” (page 250)

Updated versions of documentationYou can download and print the latest versions of Nortel Ethernet RoutingSwitch 8300 technical documentation and Release Notes directly from theInternet at http://nortel.com/documentation.

How to get helpIf you purchased a service contract for your Nortel product from adistributor or authorized reseller, contact the technical support staff for thatdistributor or reseller for assistance.

If you purchased a Nortel service program, you can get help bycontacting one of the Nortel Technical Solutions Centers found athttp://www.nortel.com/callus; or visit our Technical Support site athttp://www.nortel.com/support.

Express Routing CodesAn Express Routing Code (ERC) is available for many Nortel products andservices.

When you use an ERC, your call is routed to a technical support personwho specializes in supporting that particular product or service. To locatean ERC for any product or service, go to http://www.nortel.com/erc.


NN46200-516 02.0130 March 2009


.

http://www.avaya.com/


http://www.avaya.com/help/contact/global/index.html


http://www.avaya.com/help/contact/erc/index.html

250 Customer service

Additional informationUse the information in the following table to access other areas of theNortel Web site.

For information about Contact

Contact Us http://www.nortel.com/contactus

Documentation feedback http://www.nortel.com/documentfeedback

Products (marketing) http://www.nortel.com/product

Partner Information Center (PIC) http://www.nortel.com/pic

Register http://www.nortel.com/register

Search http://nortel.com/search

Services http://nortel.com/services

Training http://nortel.com/trainings


NN46200-516 02.0130 March 2009


.

http://www.avaya.com/cgi-bin/comments/comments.cgi

http://www.avaya.com/documentfeedback

http://www.avaya.com/usa/products

http://support.avaya.com/supportfaqs

https://sso.avaya.com/cxp/portal/Registration.portal

http://search.avaya.com

http://www.avaya.com/usa/products

https://www.avaya-learning.com

251.

Index

AActiveMembers field 44Adding ports to an STG 141advanced VLAN

device manager 53AgingTime field 61

Bbaby giant frames 23Bridge Address 178, 213BridgeAddress field 142BridgeForwardDelay field 138BridgeHelloTime field 138BridgeMaxAge field 138bridging

configuring filters 65MAC-layer 29

Cchange detection

about 34configure 147configure (CLI) 184rules 34

Clearing learned MAC addresses 63Color field 44config ethernet commands

stg 179, 215config policy-based VLANs

device manager 50config port-based VLANs

device manager 45config stg commands

options 173, 210config vlan commands

create 104

ip 77–78configuration

advanced VLAN features 53protocol-based VLAN 50spanning tree group 137

Configuring a spanning tree group 209Configuring aging, VLAN forwarding

database 60Configuring static forwarding 63Configuring STG global settings

Device Manager 136Configuring STG global settings using

the CLI 172Configuring STG parameters using the

CLI 174Configuring the STP mode

Device Manager 133

DDeleting an STG 140Designated Root 178, 213DesignatedBridge field 145, 183, 216DesignatedCost field 145, 183, 217DesignatedPort field 145, 183, 217DesignatedRoot field 143, 145, 183, 217Displaying defined VLANs 43

EEnableStp box 138EnableStp field 146, 181, 217Enabling STP on a port 143

FFastStart

configure (NNCLI) 214FastStart field 146, 182, 217


NN46200-516 02.0130 March 2009


.

252

FastStart, enabling 180Forward Delay 178, 213ForwardDelay field 143forwarding database, flushing 62forwarding database, viewing 61ForwardTransitions field 146, 182, 217frame

protocol-based VLAN 25

Ggeneral VLAN action

performing with the CLI 79General VLAN action

performing with the NNCLI 108General VLAN information

viewing with the NNCLI 110

HHello Time 178, 214HelloTime field 143Hold Time 179, 214HoldTime field 143

IIEEE

802.1Q 23IfIndex field 44, 54IP address

assigning to a VLAN with the NNCLI 107deleting from a VLAN with the CLI 108

IP spoof detectionconfiguring with the CLI 91

MMAC address autolearning 58MAC filtering Device Manager

commandsAddress 67ForwardingPorts 67MltIds 67

MAC filters 30MAC-layer bridging 29MacAddress field 55, 62, 64, 66MACAddress, auto-learned 59managing VLAN bridging

device manager 60Max Age 179, 214MaxAge field 143

MSTP, configuring globally 154Multilink trunk

adding to a VLAN with the CLI 80adding to a VLAN with the NNCLI 109

NName field 44, 54nontagged ports 24NotAllowToJoin field 44NumPorts field 142, 179, 214

PPathCost field 146, 182, 217PID

DSAP value 22Ethernet SNAP 22Ethernet type 2 22invalid for user-defined protocol

VLAN 22VLAN configuration fields 45, 54

policy-based VLANcreating protocol-based 50

policy-based VLAN, about 19Port field 64, 66, 146, 182–183, 217Port Members field 139port-based VLAN

about 18, 103cli 74create 45

PortMembers field 44Priority

configure (NNCLI) 214Priority field 138, 146, 182, 217Protocol Identifier. See PID 22Protocol Specification 179, 214protocol-based VLAN

about 20cli 75create 50

Protocol-based VLANcreating with the NNCLI 104

ProtocolId box 45, 54ProtocolSpecification field 142

QQosLevel field 56, 62, 64, 66


NN46200-516 02.0130 March 2009


.

253

RResult field 55Root Cost 179, 214Root Port 179, 214RootCost field 143RootPort field 143RSTP

MSTP 36RSTP convergence time 41RSTP Edge port 39RSTP port status, viewing 153RSTP Ports, configuring 150RSTP, configuring global parameters 148

Sshow ports commands

infostg extended 183stg main 181

show stg commandsinfo config 177info status 177show-all 212

show vlan info commandsadvance 91all 80arp 96basic 78fdb-entry 84fdb-filter 84ports 88, 97userdefined-advance 97

spanning tree groupschanging 139creating 137deleting 139editing 139limitations 34viewing status 141with VLANs 34

Spanning Tree Protocolconfiguring topology change

detection 184State field 147, 182, 218Static multicast MAC entries

configuring with the CLI 93StaticMembers field 44Status field 62STG commands

configure ports 179, 215

show-all 212StgId box 44StgId field 147, 182–183, 218STGs. See spanning tree groups 141STP

bridge forward delay timer 33, 138bridge hello timer 33, 138bridge priority 138bridge protocol data units (BPDU) 32disabling 32enable/disable 138enabling 32enabling SNMP traps 138multiple spanning tree groups 31port group membership 139Spanning Tree FastStart 33spanning tree groups 31tagged BPDUs 32topology change detection

about 34configure 147configure (CLI) 184rules 34

StpTrapEnable field 138SubnetAddr field 45SubnetMask field 45

Ttagged frame 24tagged or untagged frames 48tagged port 24TaggedBpduAddress field 139TaggedBpduVlanID field 139TimeSinceTopologyChange field 142TOP CHANGES 214TopChanges field 142topology change detection

about 34configure 147configure (CLI) 184configure (NNCLI) 214rules 34

Topology Changes 179Type box 44

Uuntagged frames 24Untagged frames


NN46200-516 02.0130 March 2009


.

254

assigning to the default VLAN withthe CLI 90

user-defined protocol-based VLANabout 22

User-defined, protocol-based VLANcreating with the NNCLI 106

UserDefinedPidList field 55

VViewing port STG information using the

NNCLI 216Viewing STG ports 144VLAN

adding ports with the CLI 85configuring advanced VLAN features 53coordinated across multiple switches 23deleting with the CLI 89device manager 43enabling tagging 26ID

field 44, 54, 62ID, in source frame tag 23in spanning tree groups 34IPX protocol 21multiplex traffic 24policy-based, about 19port-based 103port-based, about 18protocol-based 50protocol-based, about 20removing ports with the CLI 86spanning multiple switches 17tagged port 26tagging, about 23untagged port 26user-defined

about 22invalid PIDs for 22

VLAN autolearn informationviewing with the CLI 96

VLAN commandsconfigure IP 77–78

VLAN forwarding database entriesConfiguring VLAN forwarding

database entries using the CLI 81configuring with the NNCLI 110deleting with the NNCLI 111

VLAN forwarding database filtersconfiguring with the CLI 82configuring with the NNCLI 112

deleting with the NNCLI 113viewing with the NNCLI 115

VLAN forwarding database informationviewing with the NNCLI 115

VLAN IGMP informationviewing with the CLI 97

VLAN manual edit MAC informationviewing with the CLI 95

VLAN nameconfiguring with the CLI 89

VLAN Operation Action field 55VLAN port membership 57VLAN static forwarding database

membersadding with the CLI 83adding with the NNCLI 114removing with the NNCLI 114

VLAN static MAC informationviewing with the CLI 95

VLAN tagging on a portenabling with the CLI 90

VLANscreating 104


NN46200-516 02.0130 March 2009


.

Nortel Ethernet Routing Switch 8300

Configuration — VLANs and Spanning TreeCopyright © 2009 Nortel NetworksAll Rights Reserved.

Release: 4.2Publication: NN46200-516Document revision: 02.01Document release date: 30 March 2009

To provide feedback or to report a problem in this document, go to www.nortel.com/documentfeedback.

www.nortel.comLEGAL NOTICE

While the information in this document is believed to be accurate and reliable, except as otherwise expressly agreed to in writingNORTEL PROVIDES THIS DOCUMENT "AS IS" WITHOUT WARRANTY OR CONDITION OF ANY KIND, EITHER EXPRESSOR IMPLIED. The information and/or products described in this document are subject to change without notice.

THE SOFTWARE DESCRIBED IN THIS DOCUMENT IS FURNISHED UNDER A LICENSE AGREEMENT AND MAY BE USEDONLY IN ACCORDANCE WITH THE TERMS OF THAT LICENSE.

Nortel, the Nortel logo, and the Globemark are trademarks of Nortel Networks.

All other trademarks are the property of their respective owners.

config vlan ans spanning tree in 8300

Documents

spanning tree fundamentals

spanning tree nn46200

spanning tree overview

byprotocolid option button

streaming media servers

updated rip routes

spoofed ip addresses

spanning tree groups