Professional Documents
Culture Documents
Version 0.7
Version 0.7
1 2 3 4
-rw-rw-rw-rw-
Apr 14 2000 02:39:57 Apr 02 2000 00:47:13 Apr 14 2000 02:42:42 Apr 14 2000 03:06:31
<whatever>rename 3comoscfg.def 3comoscfg.sve Rename unit1>flash:/3comoscfg.def to unit1>flash:/3comoscfg.sve? [Y/N]:y ... %Renamed file unit1>flash:/3comoscfg.def to unit1>flash:/3comoscfg.sve.
Version 0.7 3Com Switch 5500 and 5500G Hands-On Training Lab Guide 3
1 2 3 4
-rw-rw-rw-rw-
Apr 14 2000 02:39:57 Apr 02 2000 00:47:13 Apr 14 2000 02:42:42 Apr 14 2000 03:06:31
Version 0.7
Version 0.7
Note: Two 3Com Switches will be needed in this lab. One must be a Switch 5500, the other must be a supported legacy switch, such as the Switch 4400.
Lab Environment
Figure 1 shows the networking diagram you will use in this lab.
Switch 4400 (or other legacy switch)
Switch 5500
140.204.1.2/24
140.204.1.1/24
140.204.1.11/24
Figure 1. Networking diagram for Configuration Conversion Utility
Lab Procedure
Section A, install the CCU on the PC. Section B, initialise and configure the legacy switch. Section C, initialise the Switch 5500. Section D, check connectivity between the PC and the switches. Section E, convert the configuration from the legacy switch to the PC. Section F, upload the converted configuration to the Switch5500. Section G, check that the configuration on the Switch 5500 is as expected.
Version 0.7
3.
Installation is straightforward. You will see the following screens in turn. Just follow their instructions.
Version 0.7
Version 0.7
Version 0.7
4.
Version 0.7
140.204.1.2 255.255.255.0
Version 0.7
0.0.0.0 1
Select menu option: system management location Training Lab Select menu option: system management name Legacy Switch Select menu option: system management contact Chris Tucker 5. 6. You can make other configuration changes if you wish. Logout of the legacy switch:
Version 0.7
2.
<whatever>reset saved-configuration The saved configuration will be erased. Are you sure?[Y/N]y Configuration in flash memory is being cleared. Please wait ... .... Configuration in flash memory is cleared. <whatever>reboot This will reboot device. Continue? [Y/N] y
Version 0.7
[5500-EI-Vlan-interface1]quit
[5500-EI]user-interface vty 0 4 [5500-EI-ui-vty0-4]set authentication password simple sesame [5500-EI-ui-vty0-4]quit [5500-EI]super password simple admin [5500-EI]quit <5500-EI>save
Version 0.7
Check connectivity
2. 3. Connect the PC and the switches as in the diagram. Check that the PC and the switches can ping each other.
Version 0.7
2.
3.
Select menu option: system backupConfig save WARNING: This command will not save any user and password information, Ssh keys or Ssh user authentication method.
Enter TFTP server IP address [0.0.0.0]: 140.204.1.11 Enter File Name [4400]: 4400
Backing up: IP address 140.204.1.2, 3Com SuperStack 3, Chris Tucker, Legacy Switch, Training Lab
Version 0.7
Any interruption during save may cause an incomplete configuration file. In this event, repeat the save command. For more information, refer to the documentation supplied with your device. Processing: completed
Select menu option: 4. Close the Telnet session to the legacy switch.
Select menu option: logout 5. 6. Shut down the TFTP server on the PC. Start the command window associated with the CCU, by double-clicking on the shortcut on the PC desktop. Use the CCU to convert the backup file just uploaded to the PC. Note: Make sure you specify the full file name, which will depend on how the TFTP server was configured. C:\Program Files\3Com\Switch 5500 CCU>ccu file C:\temp\4400 target 3CR17161-91 8. You will be prompted for information that will be needed by the Switch 5500, but which is not in the backup file.
7.
Version 0.7
Please Enter Network Mask [255.255.0.0]: 255.255.255.0 Please Enter Default Gateway [10.0.0.254]: 0.0.0.0 Please Enter Management VLAN [1]: 1 C:\Program Files\3Com\Switch 5500 CCU> 9. A Notepad window will appear, showing the result of the conversion.
Version 0.7
10. The default location of the target file is the working directory of the CCU. Note: this is the file you will upload to the target Switch 5500. C:\Program Files\3Com\Switch 5500 CCU>dir
13/04/2005 13/04/2005 13/04/2005 13/04/2005 12/04/2005 18/02/2005 18/02/2005 22/11/2004 12/04/2005 12/04/2005 03/02/2005 03/02/2005 09/02/2005 17/02/2005
14:57 14:57 16:20 16:20 15:28 17:28 17:59 17:20 15:28 15:28 18:53 18:53 16:01 15:57
<DIR> <DIR>
<DIR>
<DIR> <DIR>
jaxp JRE 290,816 NetUtil.exe 344,064 PingServer.exe 319,499 Switch5500CCU.pdf 4,155 Switch5500CCUreadme.txt 1,349,829 bytes
13 File(s) 5 Dir(s)
Version 0.7
C:\Program Files\3Com\Switch 5500 CCU> 11. Since the configuration file is just text, you can look at it: C:\Program Files\3Com\Switch 5500 CCU>more 4400_3CR17161-91.cfg 12. Can you find the parameters you expect?
Version 0.7
C:\Program Files\3Com\Switch 5500 CCU>ccu ip 140.204.1.2 community private target 3CR17161-91 2. A Notepad window will appear, showing the result of the conversion.
Version 0.7
3.
The default location of the target file is the working directory of the CCU. Note: this is the file you will upload to the target Switch 5500.
13/04/2005 13/04/2005 13/04/2005 13/04/2005 12/04/2005 18/02/2005 18/02/2005 22/11/2004 12/04/2005 12/04/2005 03/02/2005 03/02/2005 09/02/2005 17/02/2005
14:57 14:57 16:20 16:20 15:28 17:28 17:59 17:20 15:28 15:28 18:53 18:53 16:01 15:57
<DIR> <DIR>
<DIR>
<DIR> <DIR>
jaxp JRE 290,816 NetUtil.exe 344,064 PingServer.exe 319,499 Switch5500CCU.pdf 4,155 Switch5500CCUreadme.txt 1,349,829 bytes
13 File(s) 5 Dir(s)
Version 0.7
C:\Program Files\3Com\Switch 5500 CCU> 4. Since the configuration file is just text, you can look at it:
C:\Program Files\3Com\Switch 5500 CCU>more 4400_3CR17161-91.cfg 5. Can you find the parameters you expect?
Version 0.7
Version 0.7
C:\Program Files\3Com\Switch 5500 CCU>copy 4400_3CR17161-91.cfg C:\temp 3. Open a Telnet session to the Switch 5500. You can use HyperTerminal or a CLI in a command window, whichever you prefer.
********************************************************* * * All rights reserved (1997-2005) Without the owner's prior written consent, * *
Login authentication
Version 0.7
login <5500-EI>super Password:admin Now user privilege is 3 level, and only those commands whose level is equal to or less than this level can be used. Privilege note: 0-VISIT, 1-MONITOR, 2-SYSTEM, 3-MANAGE <5500-EI> 4. Use the Telnet session to command the Switch 5500 to get the converted configuration file from the TFTP server:
<5500-EI>tftp 140.204.1.11 get 4400_3CR17161-91.cfg File will be transferred in binary mode. Downloading file from remote tftp server, please wait......... TFTP: 7841 bytes received in 0 second(s).
File downloaded successfully. 5. Choose the configuration file to be started at the next reboot:
<5500-EI>reboot This command will reboot the device. Continue? [Y/N] y 7. While you wait for the Switch 5500 to reboot, shut down the TFTP server on the PC, as you will not need it again in this lab.
Version 0.7
2.
**** WARNING **** xmodem is a slow transfer protocol limited to the current speed settings of the auxiliary ports. During the course of the download no exec input/output will be available! ---- ******* ----
Proceed?[Y/N]y Destination filename [unit1>flash:/ccu.cfg]? Before pressing ENTER you must choose 'YES' or 'NO'[Y/N]:y Download with XMODEM protocol.... ......C.. 3.
Version 0.7
The Switch 5500 is now waiting for the transfer to begin. In the
3Com Switch 5500 and 5500G Hands-On Training Lab Guide 27
HyperTerminal window, click Transfer -> Send file , browse to the converted configuration file, choose the Xmodem protocol, and click Send:
Version 0.7
4.
5.
The Switch 5500 should confirm that the transfer completed successfully:
Download successful!
Version 0.7
Version 0.7
Version 0.7
Note: In this lab, two switches from the 3Com Switch 5500 family will be needed. They must be of the same type (either 5500-EI or 5500G) though the number of ports on each is not important. Two legacy 3Com switches (such as Switch 4400) will also be needed.
Lab Environment
Figure 1 shows the networking diagram you will use in this lab.
Switch 4400 layer 2 switch
LACP aggregation
LACP aggregation
R
Lab Procedure
Section A, initialise all switches. Section B, configure the Switch 5500 units to form an XRN stack. Section C, configure IP interfaces on the XRN stack. Section D, connect the XRN stack to edge switches using LACP.
Version 0.7
Version 0.7
2.
3.
<whatever>reset saved-configuration The saved configuration will be erased. Are you sure?[Y/N]y Configuration in flash memory is being cleared. Please wait ... .... Configuration in flash memory is cleared. <whatever>reboot This will reboot device. Continue? [Y/N] y 4. Start a HyperTerminal console session to the second Switch 5500 unit, using a serial cable. Clear the saved configuration on the unit and reboot:
5.
<whatever>reset saved-configuration The saved configuration will be erased. Are you sure?[Y/N]y
Version 0.7
Configuration in flash memory is being cleared. Please wait ... .... Configuration in flash memory is cleared. <whatever>reboot This will reboot device. Continue? [Y/N] y
Select menu option: system control initialise yes 7. Start a HyperTerminal console session to the other Switch 4400, using a serial cable, and log in as admin. Initialise the switch:
Version 0.7
2.
[fred]set unit 1 name fred1 [fred]change self-unit to 1 D. [fred]quit <fred>fabric save-unit-id <fred>save
36 3Com Switch 5500 and 5500G Hands-On Training Lab Guide Version 0.7
3.
Start a HyperTerminal console session to the other unit, using a serial cable. A. Configure a system name:
<5500-EI>system-view [5500-EI]sysname bill B. If you are using Switch 5500-EIs, configure the fabric ports: Note: this step is not needed if you are using Switch 5500Gs, since they have dedicated XRN fabric connectors on the rear. [bill]fabric-port gig 1/0/27 enable [bill]fabric-port gig 1/0/28 enable C. Name this unit and make sure it uses auto-numbering in the XRN stack:
[bill]set unit 1 name bill1 [bill]change self-unit to autonumbering D. [bill]quit <bill>fabric save-unit-id <bill>save Save the configuration:
Version 0.7
4.
Connect the two units together as a stack. If the units are Switch 5500-EIs, then use two Ethernet cables. If they are Switch 5500Gs, then use two of the special cables in the rear connectors. Note: be sure to connect the units correctly. Each upstream port must connect to a downstream port on the next unit. Note: watch carefully for any console messages as you connect the units.
5. 6. 7.
What unit ID numbers do you see on the front of each unit? What do the port LEDs on each of the fabric ports do? Using a console session to the unit you named bill, display the XRN and fabric topology mapper status:
[bill]display xrn-fabric [bill]display xrn-fabric port [bill]display ftm information 8. 9. Can you see what the problem is? Change the system name on the unit you named bill to fred, so that both units have the same system name: Note: watch carefully for any console messages as you do this. [bill]sysname fred [fred] 10. What unit ID numbers do you see now on the front of each unit? 11. What do the port LEDs on each of the fabric ports do now? 12. Using a console session to either unit, display the XRN and fabric topology
38 3Com Switch 5500 and 5500G Hands-On Training Lab Guide Version 0.7
mapper status: [fred]display xrn-fabric [fred]display xrn-fabric port [fred]display ftm information
Version 0.7
[fred]user-interface vty 0 4 [fred-ui-vty0-4]set authentication password simple sesame [fred-ui-vty0-4]quit [fred]super password simple admin [fred]quit
40 3Com Switch 5500 and 5500G Hands-On Training Lab Guide Version 0.7
<fred>save
Version 0.7
<fred>save
Select menu option: bridge port lacp 1:47 enable Select menu option: bridge port lacp 1:48 enable 4. Start a HyperTerminal console session to the other Switch 4400, using a serial cable, and log in as admin. Enable LACP on the two ethernet ports you will connect to the XRN stack:
Select menu option: bridge port lacp 1:47 enable Select menu option: bridge port lacp 1:48 enable
Version 0.7
Check IP connectivity
8. Check that the two PCs can ping each other.
Version 0.7
The XRN stack is now providing distributed device management (DDM), distributed link aggregation (DLA), and distributed resilient routing (DRR). We will simulate various single points of failure, and investigate the effect on each of these three functions.
3. 4. 5. 6. 7. 8.
Version 0.7
9.
Version 0.7
Classify streams of traffic received the edge of the network, re-marking the . 1p values in each class Prioritise traffic streams by .1p value Configure Strict Priority Queuing to ensure correct service levels Observe the traffic patterns when there is congestion in the network
Version 0.7
Similarities
On all these switches, many QoS features are implemented by creating ACLs to classify packets and then incorporating these ACLs into commands which act on those classes. For example, an ACL can be created to match all packets from a given IP address and this ACL can be incorporated into a command that remarks all matching packets with a particular DSCP value on egress. Each ingress packet is given a priority (see Differences below) that determines to which output queue it will be assigned at the egress port. (There are eight output queues on each of the switches.) Scheduling mechanisms then determine the priority of each output queue. With care, an overall strategy can be created to determine how the switch will prioritise forwarding various classes of traffic.
Differences
By default, the Switch 7700 and Switch 8800 prioritise traffic by the .1p value in tagged packets or by the priority value assigned to the ingress port in untagged packets. They can also prioritise packets by DSCP values and by IP precedence. The prioritisation mechanism is chosen globally for the Switch 7700, but can be chosen per port on the Switch 8800. By default, the Switch 5500 ignores all prioritisation information carried in packets, and prioritises all traffic by the priority value assigned to the ingress port. It can also prioritise tagged packets based on their .1p value. The prioritisation mechanism can be chosen per port on the Switch 5500. The queuing mechanisms available differ on each switch. On the Switch 7700, Strict Priority Queuing (SPQ) is the only mechanism available. On the Switch 8800, SPQ is the default and Weighted Round Robin Queuing (WRRQ) is also available. On the Switch 5500, WRRQ is the default and SPQ and Weighted Fair Queuing (WFQ) are also available. The Switch 5500 has an additional feature, the QoS profile, which consists of a group of settings (for packet filtering, traffic policing, and priority re-marking) that can be applied to a port, to simplify configuration. If used in conjunction with
48 3Com Switch 5500 and 5500G Hands-On Training Lab Guide Version 0.7
802.1X user authentication, the QoS profile can be used to configure a port dynamically according to which user connects to it.
Version 0.7
Note: Two 3Com Switch 5500-EI or Switch 5500G units will be needed in this lab.
Lab Environment
There are several sections to this lab. They all use the network diagram shown in Figure 1.
Port 1 VLAN 3
Port 1 VLAN 1
140.204.3.12 255.255.255.0
Version 0.7
Lab Procedure
In Section A, you will set the scene by configuring interfaces and OSPF,and checking basic connectivity. In Section B, you will install the software utilities to be used, and check that they work as expected with no QoS configured. In Section C you will implement the basic QoS strategy. There will be two levels of service, one of higher priority than the other. As the traffic from a PC reaches the ingress edge switch, it will be classified according to source IP address, and each packet will be marked with the .1p value corresponding to the correct service level. Note: for this lab, traffic from the VLC streaming video server will be in the higher priority class, and all other traffic will be in the lower priority class. Of course, in a real network, a more useful classification might be done on source or destination address, on TCP/UDP port number (so by application) and so on. Next, the switches will be configured to allocate each packet to an output queue according to the .1p value it carries. Strict priority queuing will ensure different levels of service for the two classes of traffic. Finally, you will observe the traffic patterns when there is congestion on the network. In Section D you will configure a QoS profile and apply it to a port.
Version 0.7
<whatever>reset saved-configuration The saved configuration will be erased. Are you sure?[Y/N]y Configuration in flash memory is being cleared. Please wait ... .... Configuration in flash memory is cleared. <whatever>reboot This will reboot device. Continue? [Y/N] y
<5500-EI>system-view [5500-EI]sysname toserver [toserver] 3. Rename the switch that will send that traffic to the client:
[toclient]
Version 0.7
[toclient-ospf-1]area 0 [toclient-ospf-1-area-0.0.0.0]network 140.204.1.0 0.0.0.255 [toclient-ospf-1-area-0.0.0.0]network 140.204.2.0 0.0.0.255 [toclient-ospf-1-area-0.0.0.0]quit [toclient-ospf-1]quit C. Save the configuration: Note: Then you can reboot to these basic settings later if you need to. [toclient]quit <toclient>save
Version 0.7
5.
For toserver, do the following: A. Configure the interfaces: Note: VLAN 1 exists by default, with all ports assigned to it
[toserver]vlan 2 [toserver-vlan2]port eth 1/0/24 [toserver-vlan2]quit [toserver]vlan 3 [toserver-vlan3]port eth 1/0/1 [toserver-vlan3]port eth 1/0/2 [toserver-vlan3]quit [toserver]interface vlan 2 [toserver-Vlan-interface2]ip address 140.204.2.2 24 [toserver-Vlan-interface2]quit [toserver]interface vlan 3 [toserver-Vlan-interface3]ip address 140.204.3.1 24 [toserver-Vlan-interface3]quit [toserver]interface eth 1/0/24 [toserver-Ethernet1/0/24]port link-type trunk [toserver-Ethernet1/0/24]port trunk permit vlan 2 [toserver-Ethernet1/0/24]quit
Version 0.7
[toserver] B. Enable OSPF: [toserver]router id 2.2.2.2 [toserver]ospf [toserver-ospf-1]area 0 [toserver-ospf-1-area-0.0.0.0]network 140.204.2.0 0.0.0.255 [toserver-ospf-1-area-0.0.0.0]network 140.204.3.0 0.0.0.255 [toserver-ospf-1-area-0.0.0.0]quit [toserver-ospf-1]quit C. Save the configuration: Note: Then you can reboot to these basic settings later if you need to. [toserver]quit <toserver>save
Version 0.7
Check connectivity
6. Connect the PCs as in the diagram. Make sure you use the correct ports, so VLAN membership and other configuration is correct. Now check that you have configured basic connectivity correctly. Check that each PC can ping all the other PCs.
7.
Version 0.7
2.
4.
Version 0.7
Version 0.7
5.
6.
Click Choose:
Version 0.7
7.
8.
Click Open:
Version 0.7
9.
Click OK:
Version 0.7
11. Click UDP Unicast, enter the IP address of the client PC, then click Next:
12. There is only one available encapsulation format, so just click Next:
Version 0.7
Version 0.7
13. Enter a TTL figure of 10 (the value is not important here), then click Finish:
Version 0.7
Version 0.7
16. Enter the MRL of the VLC server (udp://140.204.3.11) then click OK:
Version 0.7
Install the iperf tool on the traffic generator and client PCs
Note: you must have Administrator rights to run iperf on a PC. 19. If you dont have the iperf software yet, ask your instructor. Its exactly the same software for server and client. 20. Iperf is run from the command line, so there is no Windows application to install. Simply copy iperf into a directory (such as C:\TEMP) on each PC.
Iperf is run from the command line, so you will need to open a command window and change directory to where you saved iperf, in order to run it. 24. Start the iperf receiver: C:\TEMP>iperf s -u -----------------------------------------------------------Server listening on UDP port 5001 Receiving 1470 byte datagrams UDP buffer size: 8.00 KByte (default) -----------------------------------------------------------[120] local 140.204.1.11 port 5001 connected with 140.204.3.11 port 1064
27.7 MBytes
33.5 Mbits/sec
0.945 ms 9336/29071
Version 0.7
Version 0.7
Version 0.7
toserver switch, since this is implied by remarking .1p values. [toclient]interface eth 1/0/24 [toclient-Ethernet1/0/24]priority trust [toclient-Ethernet1/0/24]quit
Version 0.7
Version 0.7
QoS profiles are useful in two ways. First, if a particular QoS configuration needs to be applied to many ports, its much easier to create a single QoS profile and apply it to many ports, than to apply the QoS commands individually on each port. Second, the QoS profile can be associated with a user, rather than with a physical port. It is possible to dynamically apply a QoS profile to a port, when a user is authenticated using 802.1X. The users correct QoS profile name is stored on the RADIUS server, and given to the switch during the authentication process. For simplicity, the example in this lab will only look at the first of these cases.
[toclient]qos-profile VIP [toclient-qos-profile-vip]traffic-priority inbound ip-group 2001 dscp cs3 cos excellent-effort [toclient-qos-profile-vip]quit
Version 0.7
Version 0.7
Version 0.7
Version 0.7
Note: One 3Com Switch 5500-EI or Switch 5500G unit will be needed in this lab.
Lab Environment
There are several sections to this lab. They all use the network diagram shown in Figure 1.
Ethernet connection
Console connection
R
140.204.1.11 255.255.255.0
Lab Procedure
In Section A, you will configure the Switch 5500 for Web management. In Section B, you will use the Web interface.
Version 0.7
<whatever>reset saved-configuration The saved configuration will be erased. Are you sure?[Y/N]y Configuration in flash memory is being cleared. Please wait ... .... Configuration in flash memory is cleared. <whatever>reboot This will reboot device. Continue? [Y/N] y
Version 0.7
Version 0.7
Check connectivity
5. Check that the PC can ping the switch.
Version 0.7
2.
Version 0.7
Configuration example
3. Create an ACL to match all traffic going to subnet 140.204.1.0 (hint: wildcard 0.0.0.255.) Create a QoS profile test_lab that uses this ACL to remark traffic-priority with DSCP value 46 (expedited forwarding) and local precedence value 6. Assign the QoS profile to port 1/0/1, inbound.
4.
5.
Version 0.7
Version 0.7