vlan configuration guide · symantec filestore n8300 clustered nas storage system v200r001 vlan...

Symantec FileStore N8300 Clustered NAS Storage System

V200R001

VLAN Configuration Guide

Issue 01

Date 2011-08-30

Symantec Corporation

Symantec provides customers with comprehensive technical support and service. For any assistance, pleasecontact our local office or company headquarters.

Symantec CorporationAddress: 350 Ellis St, Mountain View CA 94043

Website: http://www.symantec.com

Copyright © Symantec Corporation. 2011. All rights reserved.No part of this document may be reproduced or transmitted in any form or by any means without prior writtenconsent of Symantec Corporation. Trademarks and Permissions

and other Symantec trademarks are trademarks of Symantec Corporation.All other trademarks and trade names mentioned in this document are the property of their respective holders. NoticeThe purchased products, services and features are stipulated by the contract made between Symantec andthe customer. All or part of the products, services and features described in this document may not be withinthe purchase scope or the usage scope. Unless otherwise specified in the contract, all statements, information,and recommendations in this document are provided "AS IS" without warranties, guarantees or representationsof any kind, either express or implied.

The information in this document is subject to change without notice. Every effort has been made in thepreparation of this document to ensure accuracy of the contents, but all statements, information, andrecommendations in this document do not constitute a warranty of any kind, express or implied.

Symantec Corporation

http://www.symantec.com

Contents

1 Overview......................................................................................................................................1-11.1 Introduction to the VLAN...............................................................................................................................1-21.2 Application Scenario of the N8300 VLAN Function......................................................................................1-3

2 Configure N8300 VLAN Function...........................................................................................2-12.1 Procedure for Configuring the N8300 VLAN Function.................................................................................2-22.2 Preparing Data.................................................................................................................................................2-22.3 Configuring Switch Ports................................................................................................................................2-52.4 Configuring N8300 Service Network Ports....................................................................................................2-6

3 Verifying the VLAN Function.................................................................................................3-1

A Switch VLAN Configuration.................................................................................................A-1A.1 VLAN Overview...........................................................................................................................................A-2A.2 VLAN Division.............................................................................................................................................A-3A.3 Port-Based VLAN.........................................................................................................................................A-4

A.3.1 Link Types of Ethernet Ports................................................................................................................A-4A.3.2 Assigning an Ethernet Port to Specified VLANs.................................................................................A-4A.3.3 Configuring the Default VLAN ID for a Port......................................................................................A-5

B N8300 VLAN Configuration...................................................................................................B-1B.1 vlan add..........................................................................................................................................................B-2B.2 vlan del...........................................................................................................................................................B-2B.3 vlan show.......................................................................................................................................................B-3B.4 ip addr add......................................................................................................................................................B-4B.5 ip addr online.................................................................................................................................................B-6B.6 ip addr show...................................................................................................................................................B-7

Symantec FileStore N8300VLAN Configuration Guide Contents

Issue 01 (2011-08-30) Symantec Corporation i

Figures

Figure 1-1 A typical network divided into multiple VLANs...............................................................................1-2Figure 1-2 Implementing the N8300 VLAN function..........................................................................................1-3Figure 1-3 Deploying the N8300 and clients on different network segments......................................................1-4Figure 2-1 Procedure for configuring the N8300 VLAN function......................................................................2-2Figure 2-2 Networking diagram for configuring the VLAN function.................................................................2-3Figure 2-3 Configuring switch ports....................................................................................................................2-5Figure 2-4 Configuring N8300 service network ports.........................................................................................2-6Figure 3-1 N8300 with configured switch ports and network port.....................................................................3-1Figure A-1 A VLAN implementation.................................................................................................................A-3

Symantec FileStore N8300VLAN Configuration Guide Figures

Issue 01 (2011-08-30) Symantec Corporation iii

Tables

Table A-1 Access port packet processing............................................................................................................A-5Table A-2 Trunk port packet processing.............................................................................................................A-5Table A-3 Hybrid port packet processing............................................................................................................A-6

Symantec FileStore N8300VLAN Configuration Guide Tables

Issue 01 (2011-08-30) Symantec Corporation v

1 Overview

About This Chapter

Users often divide a local area network (LAN) into network segments to prevent broadcaststorms and strengthen the LAN security. This disables clients belonging to different networksegments from accessing each other. To ensure that all clients can access the shared files in theN8300 clustered NAS storage system (the N8300 for short), users are required to assign theN8300 and clients to the same network segment. To achieve this, you can divide the existingnetwork into multiple VLANs. Then, designate the devices that need to communicate with eachother, such as clients or N8300 devices, into the same VLAN while the devices that need nocommunication with each other into different VLANs.

This section explains how to implement VLAN division by adding N8300 service network portsand switch ports to the VLAN.

1.1 Introduction to the VLANConfiguring the VLAN function in the local LAN can eliminate broadcast storms, and improvethe security of data transmission. The N8300 supports the VLAN function based on servicenetwork ports.

1.2 Application Scenario of the N8300 VLAN FunctionWhen clients on different network segments concurrently access the N8300, one solution is todivide a local area network (LAN) into different VLANs, and add switch ports as well asN8300 service network ports on corresponding VLANs. This solution frees users from changingthe access control list of routes or switches on the existing network.

Symantec FileStore N8300VLAN Configuration Guide 1 Overview

Issue 01 (2011-08-30) Symantec Corporation 1-1

1.1 Introduction to the VLANConfiguring the VLAN function in the local LAN can eliminate broadcast storms, and improvethe security of data transmission. The N8300 supports the VLAN function based on servicenetwork ports.

Concept of the VLAN

Logically, a LAN is divided into several subsets. Each subset is called a VLAN, and each VLANis a broadcast domain.

Figure 1-1 shows a typical network that is divided into multiple VLANs. Hosts in the networkare located in three VLANs as required. Transmitting packets is controlled by the switches. Thehosts in a VLAN can access each other, but the hosts in different VLANs cannot access eachother.

Figure 1-1 A typical network divided into multiple VLANs

Ethernet switch A Ethernet switch B Ethernet switch C

VLAN1

VLAN2

VLAN3

Functions of a VLAN

In VLAN networking, the devices that need to communicate with each other are added to aVLAN; the devices that do not need to communicate with each other are added to differentVLANs. This isolates broadcast domains, eliminates broadcast storms, and improves the securityof data transmission.

1 OverviewSymantec FileStore N8300


1-2 Symantec Corporation Issue 01 (2011-08-30)

N8300 VLAN functionThe N8300 supports the VLAN function based on service network ports; that is, all clients on aVLAN can access the N8300 by adding N8300 service network ports to the VLAN.

As shown in Figure 1-2, the N8300 is added to VLAN1 but not to VLAN2. Therefore, clientsA and B in VLAN1 can access the N8300 and clients C and D in VLAN2 cannot access theN8300.

Figure 1-2 Implementing the N8300 VLAN function

Ethernet switch

VLAN1 VLAN2

N8300Client A, B Client C, D

1.2 Application Scenario of the N8300 VLAN FunctionWhen clients on different network segments concurrently access the N8300, one solution is todivide a local area network (LAN) into different VLANs, and add switch ports as well asN8300 service network ports on corresponding VLANs. This solution frees users from changingthe access control list of routes or switches on the existing network.

As shown in Figure 1-3, clients are deployed on different network segments. You need toconfigure the switch or the N8300 to allow the clients on different network segments toconcurrently access the N8300.



Figure 1-3 Deploying the N8300 and clients on different network segments

N8300

...

130.23.49.1/24 192.168.49.1/24

Client Client

Ethernet Switch

The common solutions are as follows:

RouterExistence

Limitationon RouterApplication

Limitationon SwitchConfiguration

Solution

Yes a Unrestricted N/A Adds routing information.

Unable tochange therouting table.

Unrestricted The available solutions include:l Configures the access control list

(ACL) on a switch to filter andcontrols the data flow passingthrough the switch.NOTE

The ACL includes the IP ACL and theMAC ACL. When configuring the IPACL, you need to configure therouting.

l Configures the Private VLAN(PVLAN) for a switch.

l Configures switch ports, dividesthe existing network into multipleVLANs, and adds the N8300 todifferent VLANs.

Unable tochange anACL or tocreate aPVLAN

Configures switch ports, divides theexisting network into multipleVLANs, and adds the N8300 todifferent VLANs.

1 OverviewSymantec FileStore N8300



RouterExistence

Limitationon RouterApplication

Limitationon SwitchConfiguration

Solution

No N/A Unrestricted The available solutions include:l Configures the access control list

(ACL) on a switch to filter andcontrol the data flow passingthrough the switch.NOTE

The ACL includes the IP ACL and theMAC ACL. When configuring the IPACL, you need to configure therouting.

l Configures the PVLAN for aswitch.

l Configures switch ports, dividesthe existing network into multipleVLANs, and adds the N8300 todifferent VLANs.

Unable tochange anACL or tocreate aPVLAN

Configures switch ports, divides theexisting network into multipleVLANs, and adds the N8300 todifferent VLANs.

a: Dedicated routers or three-layer switches (with the routing function).

NOTE

For details on how to configure a router, switch, or ACL, refer to the related documents about routers orswitches. This document mainly explains how to connect the N8300 to VLANs by configuring theN8300 service network ports and switch ports.



2 Configure N8300 VLAN Function

About This Chapter

This chapter uses adding an N8300 with two clustered NAS engine node into two VLANs as anexample to illustrate the preparations and procedure for configuring the N8300 VLAN function.

2.1 Procedure for Configuring the N8300 VLAN FunctionTo configure the N8300 VLAN function, you need to prepare data, configure switch ports, andconfigure the N8300 service network port.

2.2 Preparing DataTo introduce the data prepared for the N8300 VLAN configuration, this section adds anN8300 (configured with two clustered NAS engine nodes) to two VLANs.

2.3 Configuring Switch PortsThe switch supports the port-based VLAN by adding switch ports to the VLAN.

2.4 Configuring N8300 Service Network PortsConfiguring N8300 service network ports enables the N8300 to receive the packets fromdifferent VLANs, and implements the access of different VLANs to the N8300.

Symantec FileStore N8300VLAN Configuration Guide 2 Configure N8300 VLAN Function


2.1 Procedure for Configuring the N8300 VLAN FunctionTo configure the N8300 VLAN function, you need to prepare data, configure switch ports, andconfigure the N8300 service network port.

Figure 2-1 shows the procedure for configuring the N8300 VLAN function.

Figure 2-1 Procedure for configuring the N8300 VLAN function

Start

Prepare data

Configure switch ports

End

1. Prepare data for configuring VLAN function

Required child item

Optional child itemNote:

Configure N8300 service network ports

2. Configure N8300 VLAN Function

2.2 Preparing DataTo introduce the data prepared for the N8300 VLAN configuration, this section adds anN8300 (configured with two clustered NAS engine nodes) to two VLANs.

Networking

As shown in Figure 2-2, the networking is as follows:

l Two N8300 clustered NAS engine nodes connect to a switch through switch ports GE 0/0/1and GE 0/0/2 respectively

l Client A and client B connect to the switch through switch ports GE 0/0/3 and GE 0/0/4respectively

The IP address of client A is 130.23.49.201. The IP address of client B is 192.168.49.201.

Configure the VLAN function to allow client A and client B on different subnets to access theN8300.

2 Configure N8300 VLAN FunctionSymantec FileStore N8300



Figure 2-2 Networking diagram for configuring the VLAN function

GE 0/0/4

GE 0/0/3

N8300 clustered NAS engine node 1

GE 0/0/1The corresponding N8300 service network port: Pubeth0

GE 0/0/2The corresponding N8300 service network port: Pubeth0

Client A (130.23.49.201/24)

Client B (192.168.49.201/24)

Ethernet Switch

N8300 clustered NAS engine node 2

Context

To implement the VLAN function of the N8300, determine the VLAN quantity according to theaccess demands, and add switch ports and service network ports on the N8300 engine nodes tothe corresponding VLANs.

You need to prepare the following data:

l VLAN IDDetermine a VLAN ID according to users' demands and the quantity of the VLANssupported by the switch.

l Data of the service network ports on the clustered NAS engine nodesOn the service network segments, reserve physical IP addresses or virtual IP addresses forthe service network port such as Pubeth0, or the bond virtual service network port such asbond0 that is accessible to clients. The reserved ports need to meet the following conditions:– Physical IP address

On each VLAN, one physical IP address needs to be reserved for one clustered NASengine. Therefore, the number of unused physical IP addresses should fulfill thefollowing conditions:Number of unused physical IP addresses ≥ Number of clustered NAS engine nodes xNumber of VLANsIf the network in Figure 2-2 is used as an example, the number of unused physical IPaddresses should be greater than or equal to 4 (4 = Number of clustered NAS enginenodes (2) x Number of VLANs (2)).

– Virtual IP addressOn each VLAN, you need to add one virtual IP address that is on the same subnet asthe clients on the VLAN.



NOTE

When the traffic is heavy on the clients, users require multiple service network ports to concurrentlyaccess the N8300. To meet this requirement, reserve physical IP addresses and virtual IP addresseson the service network segment for each service network port.

l Data of the switch ports– Switch ports connected to clients on the different network segments are added to

different VLANs. The port type is Access.– Switch ports connecting to service network ports on the clustered NAS engine nodes

are added to the VLAN where users are to access the N8300. The port type is Trunk.

The Access and Trunk switch port is explained as follows:

Port Type Description

Access port The Access port connects to user hosts. It can only belong to a VLAN.

Trunk port The Trunk port connects to ports of other S5300EI devices or the N8300service network ports. It can belong to different VLANs.

For details about switch port types, see Appendix A.3.1 Link Types of Ethernet Ports.

Data Preparation

Taking the networking in Figure 2-2 as an example, you need the following data to add theN8300 to two VLANs.

l VLAN ID:– VLAN1 (default management VLAN)

– VLAN2

– VLAN3

l Ethernet switch:– Switch port GE 0/0/1 and GE 0/0/2 (connect to N8300 service network port Pubeth0)

Belongs to VLAN1 (default management VLAN), VLAN2, and VLAN3. The port typeis Trunk.

– Switch port GE 0/0/3 and GE 0/0/4 (connect to client A and B on different networksegments )Belongs to VLAN2. The port type is Access.

l N8300 clustered NAS engine node service network port:– Four unused physical IP addresses are required.

– Two virtual IP addresses are added. They are respectively on the same network segmentsas client A and client B.

The N8300 virtual IP addresses are planned as follows:

N8300 Virtual IPAddress

Subnet Mask Client IP Address

130.23.49.34 255.255.255.0 Client A: 130.23.49.201





Subnet Mask Client IP Address

192.168.49.35 255.255.255.0 Client B: 192.168.49.201

2.3 Configuring Switch PortsThe switch supports the port-based VLAN by adding switch ports to the VLAN.

Context

Before configuring the port-based VLAN, you need to set the port type for switch ports as shownin Figure 2-3.

l Set ports GE 0/0/3 and GE 0/0/4 connecting to the client A and B to Access

l Set ports GE 0/0/1 and GE 0/0/2 connecting to service network port Pubeth0 of theN8300 to Trunk

Figure 2-3 Configuring switch ports

Ethernet Switch

GE 0/0/4Interface Type: Access

GE 0/0/3Interface Type: Access

Client A (130.23.49.201/24)

Client B (192.168.49.201/24)

N8300 Clustered NAS engine node 1


GE 0/0/1Interface Type: TrunkThe responding service network port: Pubeth0

GE 0/0/2Interface Type: TrunkThe responding service network port: Pubeth0

For details about the basic knowledge, principles of the switch VLAN function, see AppendixA Switch VLAN Configuration.

Procedure

Step 1 Create VLAN 2 and VLAN 3.



Step 2 Configure the switch port GE 0/0/1 and GE 0/0/2 connecting to service network port Pubeth0of the N8300 and add it to VLAN1 (default VLAN), VLAN2, and VLAN3. The port type isTrunk.

Step 3 Configure switch ports connecting to the clients on different subnets and add them to VLAN2and VLAN3. The port type is Access .

----End

2.4 Configuring N8300 Service Network PortsConfiguring N8300 service network ports enables the N8300 to receive the packets fromdifferent VLANs, and implements the access of different VLANs to the N8300.

PrerequisiteAs shown in Figure 2-4, the ports of the switch connecting to the N8300 services network portand clients have been added to different VLANs. For details, see section 2.3 Configuring SwitchPorts.

Figure 2-4 Configuring N8300 service network ports



GE 0/0/1VLAN list: 1, 2, 3The responding service network port: Pubeth0

GE 0/0/2VLAN list: 1, 2, 3The responding service network port: Pubeth0

Ethernet Switch

GE 0/0/3VLAN list: 2


Client A (130.23.49.201/24)

Client B (192.168.49.201/24)

ContextThe N8300 VLAN function needs to be configured in network management mode on the CLI.For details about commands, see chapter B N8300 VLAN Configuration.

NOTE

As an example, the following procedure adds the N8300 service port Pubeth0 to two VLANs. If usersneed to add another service network port, such as Pubeth1 or bond virtual network port Bond0 to the twoVLANs, change service network port Pubeth0 in the following procedure to the required one.




Procedure

Step 1 Log in to the CLI and select the network mode.

1. Run the PuTTy tool. In the Host Name (or IP address) text box, enter the IP address ofthe N8300 console.

2. Click Open. On the CLI, enter the correct user name and password of user master. Then,the following message is displayed.

************************************************************ N8000 Clustered NAS Storage System * * ** ** Warning: Authorized Access Only ************************************************************

5.7 ENTERPRISE EDITION (Thu Jul 7 08:22:05 2011), Installed on Tue Jul 12 16:34:10 EDT 2011Welcome, master (Master). Today's date is Mon Jul 25 15:02:06 EDT 2011.

NOTE

For the initial login, you can use the default user name master and password master.

3. Enter the network management mode.

Run the network command.

N8000>networkN8000.Network>

Step 2 Ensure that the unused N8300 physical IP addresses are sufficient for the two VLANs.

1. Determine the number of the unused N8300 physical IP addresses.

Run the ip addr show command.

l When the number of the unused IP addresses is greater than or equal to 4, skip to Step3.

l If the number of the unused IP addresses is less than 4, run the ip addr add commandto add IP addresses to the clustered NAS engine.

l

N8000.Network> ip addr showIP Netmask Device Node Type Status -- ------- ------ ---- ---- ------ 129.23.49.11 255.255.0.0 pubeth0 N8000_01 Physical 129.23.49.12 255.255.0.0 pubeth0 N8000_02 Physical 129.23.49.13 255.255.0.0 pubeth1 N8000_01 Physical 129.23.49.14 255.255.0.0 pubeth1 N8000_02 Physical 129.23.49.15 255.255.0.0 pubeth2 N8000_01 Physical 129.23.49.16 255.255.0.0 pubeth2 N8000_02 Physical 129.23.49.17 255.255.0.0 pubeth3 N8000_01 Physical 129.23.49.18 255.255.0.0 pubeth3 N8000_02 Physical 129.23.49.25 255.255.0.0 pubeth0 N8000_01 Virtual ONLINE (Con IP)129.23.49.26 255.255.0.0 pubeth3 Virtual OFFLINE 129.23.49.27 255.255.0.0 pubeth0 N8000_01 Virtual ONLINE 129.23.49.28 255.255.0.0 pubeth1 Virtual OFFLINE 129.23.49.29 255.255.0.0 pubeth2 Virtual OFFLINE 129.23.49.30 255.255.0.0 pubeth3 Virtual OFFLINE 129.23.49.31 255.255.0.0 pubeth0 N8000_02 Virtual ONLINE 129.23.49.32 255.255.0.0 pubeth1 Virtual OFFLINE 129.23.49.33 255.255.0.0 pubeth2 Virtual OFFLINE



In the previous instance, there are no unused physical IP addresses (in the unused state).Therefore, you need to run the ip addr add command for four times to add four physicalIP addresses.

2. (Optional) Add the physical IP address to the clustered NAS engine.Run the ip addr add ipaddr netmask physical command.This example adds physical IP addresses ranging from 129.23.49.24 to 129.23.49.27. Afterthese IP addresses are added, they are in the unused state, as shown below.

N8000.Network> ip addr add 129.23.49.24 255.255.0.0 physical N8000 ip addr Success V-288-1031 ip addr add successful.......N8000.Network> ip addr add 129.23.49.25 255.255.0.0 physical N8000 ip addr Success V-288-1031 ip addr add successful.......N8000.Network> ip addr add 129.23.49.26 255.255.0.0 physical N8000 ip addr Success V-288-1031 ip addr add successful.......N8000.Network> ip addr add 129.23.49.27 255.255.0.0 physical N8000 ip addr Success V-288-1031 ip addr add successful.......N8000.Network> ip addr showIP Netmask Device Node Type Status -- ------- ------ ---- ---- ------ 129.23.49.11 255.255.0.0 pubeth0 N8000_01 Physical 129.23.49.12 255.255.0.0 pubeth0 N8000_02 Physical 129.23.49.13 255.255.0.0 pubeth1 N8000_01 Physical 129.23.49.14 255.255.0.0 pubeth1 N8000_02 Physical 129.23.49.15 255.255.0.0 pubeth2 N8000_01 Physical 129.23.49.16 255.255.0.0 pubeth2 N8000_02 Physical 129.23.49.17 255.255.0.0 pubeth3 N8000_01 Physical 129.23.49.18 255.255.0.0 pubeth3 N8000_02 Physical 129.23.49.24 255.255.0.0 ( unused ) Physical 129.23.49.25 255.255.0.0 ( unused ) Physical 129.23.49.26 255.255.0.0 ( unused ) Physical 129.23.49.27 255.255.0.0 ( unused ) Physical

Step 3 Add the N8300 to the corresponding VLAN.

1. Configure the N8300 service network port Pubeth0 and add the N8300 to VLAN2 andVLAN3.Run the vlan add device vlan_id command. device is the N8300 service network port,corresponding to the configured switch port.

N8000.Network> vlan add pubeth0 2 100% [#] Updating VLAN configuration N8000.Network> vlan add pubeth0 3100% [#] Updating VLAN configuration N8000.Network> vlan showVLAN DEVICE VLAN id---- ------ -------pubeth0.2 pubeth0 2 pubeth0.3 pubeth0 3 As shown on the screen, the N8300 has been added to two VLANs pubeth0.2 andpubeth0.3.

2. Add a virtual IP address for each of the two VLANs, enabling the two VLANs to reside inthe same segment as the VLAN clients.Run the ip addr add ipaddr netmask virtual device command. device is the name of theVLAN to which the N8300 service network port has added.In this case, the N8300 virtual IP addresses are planned as follows:




VLANName

Client IPAddress


Subnet Mask

pubeth0.2 Client A:130.23.49.201

130.23.49.34 255.255.0.0

pubeth0.3 Client B:192.168.49.201

192.168.49.35 255.255.0.0

N8000.Network> ip addr add 130.23.49.34 255.255.0.0 virtual pubeth0.2N8000 ip addr Success V-288-1031 ip addr add successful.N8000.Network> ip addr add 192.168.49.35 255.255.0.0 virtual pubeth0.3 N8000 ip addr Success V-288-1031 ip addr add successful.

3. (Optional) Set the virtual IP addresses to Online.Run the vlan add command and wait for one or two minutes. Then, the virtual IP addressesautomatically become online. If offline is displayed or virtual IP addresses need to beswitched to a specified node, run the ip addr online ipaddr nodename command.

----End

Follow-up ProcedureFor details about how to verify the correctness or availability of the N8300 VLAN function, seechapter 3 Verifying the VLAN Function.



3 Verifying the VLAN Function

After you configure the N8300 VLAN function, you need to verify it by checking whether clientson different network segments can access the N8300.

As shown in Figure 3-1, switch ports GE 0/0/1, GE 0/0/2, GE 0/0/3 and GE 0/0/4 as well asservice network port pubeth0 of the N8300 have been configured.

Figure 3-1 N8300 with configured switch ports and network port

GE 0/0/1VLAN list: 1, 2, 3The responding N8300 service network port: Pubeth0

N8300 clustered NAS engine node 1pubeth0.2: 130.23.49.34/24pubeth0.3: 192.168.49.35/24

Client A (130.23.49.201/24)

Client B (192.168.49.201/24)



Ethernet Switch

GE 0/0/2VLAN list: 1, 2, 3The responding N8300 service network port: Pubeth0

N8300 clustered NAS engine node 2pubeth0.2: 130.23.49.34/24pubeth0.3: 192.168.49.35/24

NOTE

To show how to verify the VLAN function, this section verifies the connectivity between client A and theN8300 on Vlan2.

Symantec FileStore N8300VLAN Configuration Guide 3 Verifying the VLAN Function


When client A is based on Windows operating system, checking whether client Acan access N8300 CIFS homedir share

Step 1 In the Windows operating system, choose Start > Run.

Step 2 Verify the connectivity between the N8300 IP address and client IP address.Run the ping command to test the connectivity between the client and the N8300.

Step 3 Enter the virtual IP address of the CIFS normal share you need to access. Click OK.

Input as format as \\130.23.49.34 in Run dialog box. 130.23.49.34 specifies the N8300 serviceIP address.

You can see all the CIFS normal share folder.

Step 4 Double click the folder you need to access.The Connect to... dialog box is displayed.

Step 5 In the Connect to... dialog box, enter the username and password and click OK.

NOTE

If the Connect to... dialog box is not displayed after clicking OK in the Run dialog box, re-enable theCIFS service. Then wait until this operation is valid.

CAUTIONRestarting the CIFS service interrupts the services running on the file system. Therefore, restart the CIFSservice when the system is idle.

Step 6 You can access the shared files system fs01 in the share directory.

CAUTIONRestarting the CIFS service interrupts the services running on the file system. Therefore, restartthe CIFS service when the system is idle.

----End

When client A is based on Windows operating system, checking whether client Acan access N8300 CIFS homedir share

Step 1 In the Windows operating system, choose Start > Run.The Run dialog box is displayed. Enter the service IP address of the N8300.

Input as format as \\130.23.49.34\test in Run dialog box. It contains N8300 service IP and username.

Step 2 Click OK.The Connect to... dialog box is displayed.

Step 3 In the Connect to... dialog box, enter the username and password and click OK.

3 Verifying the VLAN FunctionSymantec FileStore N8300



Step 4 After successful authentication, you can access the shared directory. If you access the N8300 asuser test, the N8300 automatically creates a directory named test (same as the username). Youcan only perform operations in the test directory.

----End

When client A is based on SUSE and RedHat operating system, checking whetherclient A can access N8300 NFS share

Step 1 Log in to the client A as user root.


# ping 130.23.49.34PING 130.23.49.34 (130.23.49.34) 56(84) bytes of data.64 bytes from 130.23.49.34: icmp_seq=1 ttl=64 time=0.123 ms64 bytes from 130.23.49.34: icmp_seq=2 ttl=64 time=0.099 ms

---130.23.49.34 ping statistics --02 packets transmitted, 2 received, 0% packet loss, time 1000ms rtt min/avg/max/mdev = 0.099/0.111/0/123/0/012 ms

Step 3 Run the showmount command to view all the shared files on the N8300 NFS server.#showmount –e 130.23.49.34Export list for 130.23.49.34/vx/nfstest *#

NOTE

130.23.49.34 is the service IP address of the N8300./vx/nfstest is the NFS share file system for the N8300.

Step 4 Run the mount command to mount the remote file system.mount –t nfs 130.23.49.34:/vx/nfstest /mnt

NOTE

You can enter -o timeo=10 after the mount command to set the NFS server retry time.

Step 5 Check whether the shared file system of the remote Linux system is mounted to the local filesystem. If the N8300 shared file system is displayed on the screen, it indicates that the remoteLinux shared file system is successfully mounted on the local file system. In this case, the clientis mounted with the remote N8300 shared file system.#mount130.23.49.34:/vx/fs_sim on /mnt type nfs (rw,addr=130.23.49.34)

----End

When client A is based on HP-UNIX and SUN Solaris Clients operating system,checking whether client A can access N8300 NFS share

Step 1 Log in to the client A as user root.


# ping 130.23.49.34PING 130.23.49.34 (130.23.49.34) 56(84) bytes of data.64 bytes from 130.23.49.34: icmp_seq=1 ttl=64 time=0.123 ms

Symantec FileStore N8300VLAN Configuration Guide 3 Verifying the VLAN Function


64 bytes from 130.23.49.34: icmp_seq=2 ttl=64 time=0.099 ms

---130.23.49.34 ping statistics --02 packets transmitted, 2 received, 0% packet loss, time 1000ms rtt min/avg/max/mdev = 0.099/0.111/0/123/0/012 ms

Step 3 Run the showmount command to view all the shared files on the N8300 NFS server.#showmount –e 130.23.49.34Export list for 130.23.49.34/vx/nfstest *#

NOTE

130.23.49.34 is the service IP address of the N8300.

/vx/nfstest is the NFS share file system of the N8300.

Step 4 Run the mount command to mount the remote file system.mount –f nfs -o vers=3,proto=tcp 130.23.49.34:/vx/nfstest /mnt

NOTE

-f nfs is the default option. You can also choose not to enter it.

For Vers, select option 2 or option 3.

For Proto, select tcp or udp.

Step 5 Check whether the shared file system of the remote Linux system is mounted to the local filesystem. If the N8300 shared file system is displayed on the screen, it indicates that the remoteLinux shared file system is mounted to the local file system. In this case, the client is mountedwith the remote N8300 shared file system successfully.#mount130.23.49.34:/vx/fs_sim on /mnt type nfs (rw,addr=130.23.49.34)

----End

3 Verifying the VLAN FunctionSymantec FileStore N8300



A Switch VLAN Configuration

This Appendix describes the basic knowledge of the VLAN.

A.1 VLAN OverviewThis section describes the background, concepts, and advantages of VLAN.

A.2 VLAN DivisionThe switch generally supports five VLAN division modes.

A.3 Port-Based VLANPorts on Ethernet switches have the three link types: access, trunk, and hybrid. For the threetypes of ports, the process of being added into a VLAN and the way of forwarding packets aredifferent.

Symantec FileStore N8300VLAN Configuration Guide A Switch VLAN Configuration

Issue 01 (2011-08-30) Symantec Corporation A-1

A.1 VLAN OverviewThis section describes the background, concepts, and advantages of VLAN.

The traditional Ethernet is a broadcast network, where all hosts are in the same broadcast domainand connected with each other through hubs or switches. Hubs and switches, which are the basicnetwork connection devices, have limited forwarding functions.l A hub is a physical layer device without the switching function, so it forwards the received

packet to all ports except the inbound port of the packet.l A switch is a link layer device which can forward a packet according to the MAC address

of the packet. However, when the switch receives a broadcast packet or an unknown unicastpacket whose MAC address is not included in the MAC address table of the switch, it willforward the packet to all the ports except the inbound port of the packet.

The above scenarios could result in the following network problems.l Large quantity of broadcast packets or unknown unicast packets may exist in a network,

wasting network resources.l A host in the network receives a lot of packets whose destination is not the host itself,

causing potentially serious security problems.

The solution to these problems is isolating the broadcast domains. The traditional way is to userouters, which forward packets according to the destination IP address and do not forwardbroadcast packets in the link layer. However, routers are expensive and provide few ports, sothey cannot split the network efficiently. Therefore, using routers to isolate broadcast domainshas many limitations.

The virtual local area network (VLAN) technology is developed for switches to controlbroadcasts in LANs.

A VLAN can span multiple physical spaces. This enables hosts in a VLAN to be located indifferent physical locations.

As shown in Figure A-1, by creating VLANs in a physical LAN, you can divide the LAN intomultiple logical LANs, each of which has a broadcast domain of its own. Hosts in the sameVLAN communicate in the traditional Ethernet way. However, hosts in different VLANs cannotcommunicate with each other directly but need the help of network layer devices, such as routersand Layer 3 switches.

A Switch VLAN ConfigurationSymantec FileStore N8300


A-2 Symantec Corporation Issue 01 (2011-08-30)

Figure A-1 A VLAN implementation

Ethernet switch A Ethernet switch B Ethernet switch C

VLAN1

VLAN2

VLAN3

A.2 VLAN DivisionThe switch generally supports five VLAN division modes.

VLAN DivisionMode

Definition

Port-based VLAN Defines VLANs according to ports. After specified ports are addedto specified VLANs, ports can forward the packets of the specifiedVLANs.

MAC address–basedVLAN

Defines VLANs according to the source MAC addresses ofpackets. Specified packets are forwarded after being added to theVLAN tag.

Protocol-based VLAN Assigns different VLAN IDs to the packets according to the typeand encapsulation format of protocols (suites) to which thereceived packets belong.

IP address and subnetmask–based VLAN

Defines VLANs according to the source IP address and subnetmask of a packet. After receiving an untagged packet, the switchdetermines the VLAN to which the packet belongs according toits source IP address and automatically sends the packet to aspecified VLAN for transfer.



VLAN DivisionMode

Definition

MAC address–basedVLAN

Defines VLANs according to the source MAC addresses ofpackets. Packets are forwarded after being added to the VLAN tag.

Port bonding–basedVLAN

Defines VLANs according to the source MAC address, source IPaddress, and subnet mask of a packet. Then, the packet isautomatically assigned to a specified VLAN for transfer.

By default, the VLAN matching is performed in the order of port-bonding VLAN, MAC-basedVLAN, IP address and subnet-based VLAN, protocol-based VLAN, and port-based VLAN.

A.3 Port-Based VLANPorts on Ethernet switches have the three link types: access, trunk, and hybrid. For the threetypes of ports, the process of being added into a VLAN and the way of forwarding packets aredifferent.

Port-based VLANs are easy to implement and manage and applicable to hosts with relativelyfixed positions.

Ports on Ethernet switches have the three link types: access, trunk, and hybrid. For the threetypes of ports, the process of being added into a VLAN and the way of forwarding packets aredifferent.

A.3.1 Link Types of Ethernet Ports

A.3.2 Assigning an Ethernet Port to Specified VLANs

A.3.3 Configuring the Default VLAN ID for a Port

A.3.1 Link Types of Ethernet Ports

The link type of an Ethernet port on the switch can be one of the following:

l Access: An access port can belong to only one VLAN, and is generally connected to a userPC.

l Trunk: A trunk port can belong to more than one VLAN. It can forward packets for multipleVLANs, and is generally connected to another switch.

l Hybrid: A hybrid port can belong to more than one VLAN to forward packets for multipleVLANs. It can be connected to either a switch or a user PC.

NOTE

A hybrid port allows the packets of multiple VLANs to be sent untagged, but a trunk port only allows thepackets of the default VLAN to be sent untagged.

The three types of ports can coexist on the same device.

A.3.2 Assigning an Ethernet Port to Specified VLANs




You can assign an Ethernet port to a VLAN to forward packets for the VLAN, thus allowingthe VLAN on the current switch to communicate with the same VLAN on the peer switch.

An access port can be assigned to only one VLAN, while a hybrid or trunk port can be assignedto multiple VLANs.

NOTE

Before assigning an access or hybrid port to a VLAN, create the VLAN first.

A.3.3 Configuring the Default VLAN ID for a Port

An access port can belong to only one VLAN. Therefore, the VLAN an access port belongs tois also the default VLAN of the access port. A hybrid/trunk port can belong to multiple VLANs,so you should configure a default VLAN ID for the port.

After a port is added to a VLAN and configured with a default VLAN, the port receives andsends packets in a way related to its link type. For detailed description, refer to Table A-1, TableA-2, and Table A-3.

Table A-1 Access port packet processing

Incoming packet processing Outgoing packetprocessing

For an untagged packet For a tagged packet

Receive the packet and tagthe packet with the defaultVLAN tag

l If the VLAN ID is thedefault VLAN ID, receivethe packet.

l If the VLAN ID is not thedefault VLAN ID, discardthe packet.

Strip the tag from the packetand send the packet.

Table A-2 Trunk port packet processing



l If the port has already beenadded to its defaultVLAN, tag the packet withthe default VLAN tag andthen forward the packet.

l If the port has not beenadded to its defaultVLAN, discard the packet.

l If the VLAN IDs areallowed to pass throughthe port, receive thepacket.

l If the VLAN ID is not oneof the VLAN IDs allowedto pass through the port,discard the packet.

l If the VLAN ID is thedefault VLAN ID, strip offthe tag and send thepacket.

l If the VLAN ID is not thedefault VLAN ID, keepthe original tag and sendthe packet.



Table A-3 Hybrid port packet processing



l If the port has already beenadded to its defaultVLAN, tag the packet withthe default VLAN tag andforward the packet.

l If the port has not beenadded to its defaultVLAN, discard the packet.

l If the VLAN IDs areallowed to pass throughthe port, receive thepacket.

l If the VLAN ID is not oneof the VLAN IDs allowedto pass through the port,discard the packet.

If the VLAN ID is allowed topass through the port, sendthe packets. Use the porthybrid vlan command toconfigure whether the portkeeps or strips off the tagswhen sending packets of aVLAN (including the defaultVLAN).




B N8300 VLAN Configuration

This appendix describes the commands of configuring the N8300 VLAN function.

B.1 vlan add

B.2 vlan del

B.3 vlan show

B.4 ip addr add

B.5 ip addr online

B.6 ip addr show

Symantec FileStore N8300VLAN Configuration Guide B N8300 VLAN Configuration

Issue 01 (2011-08-30) Symantec Corporation B-1

B.1 vlan add

Function

Adds VLAN ports.

Format

vlan add device vlan_id

ParametersParameter Description Default Value

device Specifies the name of a port. None.

vlan_id Specifies the vlan identifier. None.

Modes

Network mode

Level

Master and System Administrator

Usage Guidelines

To add VLAN ports, run the vlan add device vlan_id command.

The instruction for executing this command is as follows:

device specifies the name for the network port. The value is the service network port. Otherwise,an error message is displayed.

Example

Add a VLAN port:

Network> vlan add pubeth1 2Network> vlan showVLAN DEVICE VLAN id----- ------ -------pubeth0.2 pubeth0 2pubeth1.2 pubeth1 2

B.2 vlan del

B N8300 VLAN ConfigurationSymantec FileStore N8300


B-2 Symantec Corporation Issue 01 (2011-08-30)

Function

Deletes VLAN ports.

Format

vlan del vlan_device

Parameters

Parameter Description Default Value

vlan_device Specifies the name of the vlandevice.

None.

Modes

Network mode

Level

Master and System Administrator

Usage Guidelines

To delete VLAN ports, run the vlan del vlan_device command.

The instruction for executing this command is as follows:

vlan_device specifies the name of the vlan device. The vlan_device name combines the interfaceon which the VLAN is based and the VLAN ID separated by '.'. If you enter the wrong name,an error message is displayed.

Example

To delete a VLAN port:

Network> vlan del pubeth0.2Network> vlan showVLAN DEVICE VLAN id----- ------ -------pubeth1.2 pubeth1 2

B.3 vlan show

Function

Displays the current VLAN devices.



Formatvlan show

ParametersNone.

ModesNetwork mode

LevelMaster and System Administrator

Usage GuidelinesTo display the current VLAN devices, run the vlan show command.

ExampleTo display the current VLAN devices:

Network> vlan showVLAN DEVICE VLAN id----- ------ -------pubeth0.2 pubeth0 2pubeth1.2 pubeth1 2

B.4 ip addr add

FunctionAdds an IP address to a cluster.

Formatip addr add ipaddr netmask type [devices]


ipaddr Specifies the IP address to beadded to the cluster.

None.

netmask Specifies the netmask for theIP address.

None.

type Specifies the IP type, eithervirtual or physical.

None.




Parameter Description Default Value

devices Specifies the device on whichthe operation takes place.This attribute is only used ifthe type is virtual.

None.

ModesNetwork mode


Usage GuidelinesTo add an IP address to a cluster, run the ip addr add ipaddr netmask type [devices] command.

The instructions for executing this command are as follows:l ipaddr specifies the IP address to be added. If the ipaddr that you entered has been occupied

by the cluster or is an invalid IP address, an error message is displayed.l netmask specifies the subnet mask. If the netmask that you entered is an invalid subnet

mask, an error message is displayed.l type specifies the type of the specified IP address, either virtual or physical.

NOTE

If the value type is physical, then the value of device is ignored.

l After you add a virtual IP address, it takes a few seconds for it to come online.

l One node can be configured with multiple network card. Therefore, one node may haveseveral physical IP addresses.

l When adding or deleting an IP address, mechanism ensures that the number of virtual IPaddresses corresponding to each node is the same.

ExampleTo add an IP address to a cluster:

Network> ip addr add 10.216.114.216 255.255.248.0 physicalNetwork> ip addr showIP Netmask Device Node Type Status-- ------- ------ ---- ---- ------10.216.114.212 255.255.248.0 pubeth0 node5_1 Physical10.216.114.213 255.255.248.0 pubeth1 node5_1 Physical10.216.114.214 255.255.248.0 pubeth0 node5_2 Physical10.216.114.215 255.255.248.0 pubeth1 node5_2 Physical10.216.114.216 255.255.248.0 ( unused ) Physical10.216.114.217 255.255.248.0 pubeth0 node5_1 Virtual ONLINE (Con IP)10.10.10.10 255.255.248.0 pubeth0 node5_1 Virtual ONLINE10.10.10.11 255.255.248.0 pubeth1 node5_1 Virtual ONLINE10.10.10.12 255.255.248.0 pubeth0 node5_2 Virtual ONLINE10.10.10.13 255.255.248.0 pubeth1 node5_2 Virtual ONLINE



B.5 ip addr online

FunctionChanges an IP address to the online mode on a specified node.

Formatip addr online ipaddr nodename


ipaddr Specifies the IP address thatneeds to be brought online.

None.

nodename Specifies the node name onwhich the IP address needs tobe brought online.

None.

ModesNetwork mode


Usage GuidelinesTo change a virtual IP address to the online mode on a specified node, run the ip addr onlineipaddr nodename command.

The instructions for executing this command are as follows:l ipaddr specifies the IP address that needs to be brought online. If the specified ipaddr is

not assigned to the cluster or is not a virtual IP address, an error message is displayed.l nodename specifies the node name on which the IP address needs to be brought online. If

you do not want to enter a specific nodename, enter "any" with the IP address.l You can change an IP address to the online mode if it is in the OFFLINE or FAULTED

state.

NOTEAn IP address that does not go online may indicate a problem with the cluster. For help, run the servicescommand in support mode, or contact the Technical Support.

ExampleTo change a virtual IP address to the online mode on a specified node:




Network> ip addr online 10.10.10.15 node5_2Network> ip addr showIP Netmask Device Node Type Status-- ------- ------ ---- ---- ------10.216.114.212 255.255.248.0 pubeth0 node5_1 Physical10.216.114.213 255.255.248.0 pubeth1 node5_1 Physical10.216.114.214 255.255.248.0 pubeth0 node5_2 Physical10.216.114.215 255.255.248.0 pubeth1 node5_2 Physical10.216.114.217 255.255.248.0 pubeth0 node5_1 Virtual ONLINE (Con IP)10.10.10.10 255.255.248.0 pubeth0 node5_1 Virtual ONLINE10.10.10.11 255.255.248.0 pubeth1 node5_1 Virtual ONLINE10.10.10.12 255.255.248.0 pubeth0 node5_2 Virtual ONLINE10.10.10.13 255.255.248.0 pubeth1 node5_2 Virtual ONLINE10.10.10.15 255.255.248.0 pubeth0 node5_2 Virtual ONLINE

B.6 ip addr show

FunctionDisplays all the IP addresses for the cluster.

Formatip addr show

ParametersNone.

ModesNetwork mode


Usage GuidelinesTo display all the IP addresses for the cluster, run the ip addr show command.

The instructions for executing this command are as follows:

The output headings are:l IP

Displays the IP addresses for the cluster.l Netmask

Displays the netmasks for the IP address.l Device

Displays the device names for the IP address.l Node

Displays the node names for the IP address.



l TypeDisplays the type of the IP address: physical or virtual.

l StatusDisplays the status of the IP addresses, include:– ONLINE

– ONLINE (console IP)

– OFFLINE

– FAULTED

ExampleTo display all the IP addresses for the cluster:

Network> ip addr showIP Netmask Device Node Type Status-- ------- ------ ---- ---- ------10.216.114.212 255.255.248.0 pubeth0 node5_1 Physical10.216.114.213 255.255.248.0 pubeth1 node5_1 Physical10.216.114.214 255.255.248.0 pubeth0 node5_2 Physical10.216.114.215 255.255.248.0 pubeth1 node5_2 Physical10.216.114.217 255.255.248.0 pubeth0 node5_1 Virtual ONLINE (Con IP)10.10.10.10 255.255.248.0 pubeth0 node5_1 Virtual ONLINE10.10.10.11 255.255.248.0 pubeth1 node5_1 Virtual ONLINE10.10.10.12 255.255.248.0 pubeth0 node5_2 Virtual ONLINE10.10.10.13 255.255.248.0 pubeth1 node5_2 Virtual ONLINE




vlan configuration guide · symantec filestore n8300 clustered nas storage system v200r001 vlan...

Documents