Enterasys Enterasys Matrix DFE-Gold Series User's Guide Page 1

Matrix DFE Series and N-SA User’s GuideImportant NoticeThis guide is a work-in-progress. It is being made available to provide information about key c

viii Chapter 8: Configuring OSPFUsing OSPF on a Matrix DFE or N-SA Series Device ...

Configuring IP Broadcast Settings7-14 Configuring IPDisabling or Re-enabling Proxy ARP on an InterfaceAvariationoftheARPprotocol,proxyARPallow

Configuring IP Broadcast SettingsMatrix DFE Series and N-SA User’s Guide 7-15Enabling or Disabling IP Directed BroadcastsDirectedbroadcastsarenetwo

Configuring Routes and Monitoring IP Traffic7-16 Configuring IPUsethis“no”formofthecommandtoremoveaUDPportorprotocol,disablingforwardin

Configuring Routes and Monitoring IP TrafficMatrix DFE Series and N-SA User’s Guide 7-17Adding or Removing Static IP RoutesFromglobalconfigurationm

Configuring ICMP7-18 Configuring IPClearing IP Traffic CountersFromprivilegedEXECmode,usethiscommandtoclearallIPtrafficstatisticscounters

Configuring ICMPMatrix DFE Series and N-SA User’s Guide 7-19Thisexampleshowsanunsuccessfulping toIPaddress182.127.63.24:Using TracerouteFrom

Configuring ICMP7-20 Configuring IP

Matrix DFE Series and N-SA User’s Guide 8-18Configuring OSPFThischapterprovidesinformationaboutthefollowingOpenShortestPathFirst(OSPF)prot

OSPF Overview8-2 Configuring OSPFrouterbeingaddedtothenetwork,OSPFusestheShortestPathFirst(SPF)algorit h m(alsoreferredtoastheDijks

OSPF OverviewMatrix DFE Series and N-SA User’s Guide 8-3Link-State Advertisements (LSAs)UsingOSPF,theMatrixDFE‐PlatinumSeriessystemfloodslink‐

ixFigures2-1 Sample Matrix Startup Screen...

OSPF Overview8-4 Configuring OSPFFigure 8-1 OSPF TopologyOSPF AreasOSPFallowsnetworkstobegroupedintoareas—acollectionofsubnetsthatareg

OSPF OverviewMatrix DFE Series and N-SA User’s Guide 8-5thatfallwithinthespecifiedrangesarenotadvertisedintootherareasasinter‐arearoutes

OSPF Overview8-6 Configuring OSPFAutonomous System External (ASE) Link AdvertisementsAnautonomoussystemboundaryrouter(ASBR)advertisesexternald

Configuring OSPFMatrix DFE Series and N-SA User’s Guide 8-7Configuring OSPFUsetheproceduresinthissectiontoperformthefollowingOSPFconfigurat

Configuring OSPF8-8 Configuring OSPFAuthentication (simple text)None configured Interface ip ospf authentication-key passwordCost (interface) 10 Inte

Configuring OSPFMatrix DFE Series and N-SA User’s Guide 8-9Activating Advanced Routing Inordertoenableadvancedroutingprotocols,suchasOSPF an

Configuring OSPF8-10 Configuring OSPFFigure 8-2 Topology for Basic OSPF ConfigurationExampleThisexampleshowsthecompleteconfigurationdescribedi

Configuring OSPFMatrix DFE Series and N-SA User’s Guide 8-11Configuring an OSPF NSSAAsdescribedin“OSPFAreas”onpage 8‐4,OSPFnetworksaregroupe

Monitoring and Maintaining OSPF8-12 Configuring OSPFExampleThisexampleshowsthecompleteconfigurationdescribedinProcedu r e 8‐2,beginningwith

Monitoring and Maintaining OSPFMatrix DFE Series and N-SA User’s Guide 8-13Displaying OSPF InformationFromanyroutermode,usethecommandslistedin

x Procedures3-1 Enabling the Switch for Routing ...

Monitoring and Maintaining OSPF8-14 Configuring OSPFResetting OSPFFromPrivilegedEXECmode,usethiscommandtoresettheOSPFprocess,forcingadjac

Matrix DFE Series and N-SA User’s Guide 9-19Configuring VRRPThischapterprovidesthefollowinginformationaboutconfiguringandmonitoringtheVirtu

Configuring VRRP9-2 Configuring VRRPConfiguring VRRPThissectionpresentsthefollowingsampleVRRPconfigurations:•AbasicVRRPconfigurationwithon

Configuring VRRPMatrix DFE Series and N-SA User’s Guide 9-3Basic VRRP ConfigurationFigure 9‐1showsabasicVRRPconfigurationwithasinglevirtualr

Configuring VRRP9-4 Configuring VRRPRouter R2 ConfigurationUsethefollowingproceduretoconfigureRouterR2asshownbackinFigure 9‐1.Noticethat

Configuring VRRPMatrix DFE Series and N-SA User’s Guide 9-5Example: Basic VRRP ConfigurationThisexampleshowsthecompleteconfigurationforbasicVR

Configuring VRRP9-6 Configuring VRRPFigure 9-2 Symmetrical VRRP ConfigurationInthisconfiguration,halfthehostsuse10.0.0.1/16astheirdefaultr

Configuring VRRPMatrix DFE Series and N-SA User’s Guide 9-7Router R2 ConfigurationUsethefollowingproceduretoconfigureRouterR2asshowninFigur

Configuring VRRP9-8 Configuring VRRPExample: Symmetrical VRRP ConfigurationThisexampleshowsthecompleteconfigurationforsymmetricalVRRPonRoute

Configuring VRRPMatrix DFE Series and N-SA User’s Guide 9-9Figure 9-3 Multi-Backup VRRP ConfigurationInthisconfiguration,RouterR1isthemasterf

Matrix DFE Series and N-SA User’s Guide 1-11Features OverviewThischapterprovidesanoverviewoftheMatrixDFESeriesandN‐SAdevices’uniquefeatu

Configuring VRRP9-10 Configuring VRRPTable 9‐2showstheprioritiesforeachvirtualrouterconfiguredonRouterR1..3. In Global Configuration mode:

Configuring VRRPMatrix DFE Series and N-SA User’s Guide 9-11Router R2 ConfigurationUsethefollowingproceduretoconfigureRouterR2asshownbackin

Configuring VRRP9-12 Configuring VRRPTable 9‐3showstheprioritiesforeachvirtualrouterconfiguredonRouterR2.Router R3 Configuration Usethefo

Configuring VRRPMatrix DFE Series and N-SA User’s Guide 9-13Table 9‐4showstheprioritiesforeachvirtualrouterconfiguredonRouterR3.Example: Mu

Modifying a Configuration9-14 Configuring VRRP**Router 2**Matrix>Router2(config)#interface vlan 1 Matrix>Router2(config-if(Vlan 1))#ip address 1

Modifying a ConfigurationMatrix DFE Series and N-SA User’s Guide 9-15Setting the Advertisement IntervalTheVRRPmasterroutersendsperiodicadvertise

Modifying a Configuration9-16 Configuring VRRPSetting an Authentication KeyVRRP Packet Authentication Fields Asshowninthefollowingillustration,e

Monitoring VRRPMatrix DFE Series and N-SA User’s Guide 9-17VRRP Authentication CommandsBydefault,noauthenticationofVRRPpacketsisperformedont

VRRP Configuration Notes9-18 Configuring VRRP•Defaultbackuprouterpriority=100•Master‐down‐interval=timeittakesabackuptodetectthemaster

Factory Default Settings1-2 Features OverviewCDP interval Transmit frequency of CDP messages set to 60 seconds.Community name Public.EAPOL Disabled.EA

Factory Default SettingsMatrix DFE Series and N-SA User’s Guide 1-3Port duplex mode Set to half duplex, except for 100BASE-FX and 1000BASE-X, which is

Factory Default Settings1-4 Features OverviewSpanning Tree version Set to mstp (Multiple Spanning Tree Protocol).SSH Disabled.System baud rate Set to

Factory Default SettingsMatrix DFE Series and N-SA User’s Guide 1-5ICMP Enabled for echo-reply and mask-reply modes.IP-directed broadcasts Disabled.IP

Device Management Methods1-6 Features OverviewDevice Management MethodsTheMatrixDFESeriesandN‐SAdevicescanbemanagedusingthefollowingmetho

Matrix DFE Series and N-SA User’s Guide 2-12Getting StartedThischapterprovidesinformationaboutthefollowingbasicsetupproceduresontheMatrix

Starting the Command Line Interface2-2 Getting StartedUsing a Console Port ConnectionOnceyouhaveconnectedaterminaltothelocalconsoleportasd

Starting the Command Line InterfaceMatrix DFE Series and N-SA User’s Guide 2-3ThedeviceinformationandMatrixpromptdisplaysasshownintheexampl

Setting an IP Address and Basic System Information2-4 Getting StartedSetting an IP Address and Basic System InformationUsetheproceduresinthissect

Setting Syslog ParametersMatrix DFE Series and N-SA User’s Guide 2-5ExampleThisexampleshowshowanadministratorwouldchangetheRead‐Writepasswor

About the Matrix DFE-Platinum Series Distributed Console Model2-6 Getting Started2. (Optional)VerifytheSyslogsettings.show logging server indexFor

About Redundant Management on Matrix DFE-Gold Series ModulesMatrix DFE Series and N-SA User’s Guide 2-7About Redundant Management on Matrix DFE-Gold S

Downloading a New Firmware Image2-8 Getting StartedDisplaying and Changing the Current ConfigurationUsethesecommandstodisplayandchangethecurre

Downloading a New Firmware ImageMatrix DFE Series and N-SA User’s Guide 2-9•UsingFTPdownload.ThisprocedureusesanFTPserverconnectedtothenet

Downloading a New Firmware Image2-10 Getting Started4. Youcannowsetthedevicetoloadthenewimagefileatstartupusingthesetbootsystemcomm

Reviewing and Selecting a Boot Firmware ImageMatrix DFE Series and N-SA User’s Guide 2-118. FromtheSystemImageLoaderprompt,typesetbaud9600to

iNoticeEnterasys Networksreservestherighttomakechangesinspecificationsandotherinformationcontainedinthisdocumentanditswebsitewitho

Resetting the Device2-12 Getting StartedResetting the DeviceUsetheproceduresinthissectiontoresetoneormoredevicemodules,toscheduleasyst

Activating Licensed FeaturesMatrix DFE Series and N-SA User’s Guide 2-13Clearing User-Defined Configuration ParametersUsethefollowingcommandtocle

Using WebView2-14 Getting Started4. Verifylicenseactivation:show licenseUsing WebViewWebViewistheEnterasysNetworksembeddedwebserverfordevic

Matrix DFE Series and N-SA User’s Guide 3-13Using the CLIThischapterprovidesinformationaboutusingtheCLIonMatrixDFESeries/N‐SAdevices.Fo

Configuring CLI Access Security3-2 Using the CLI• Repeatedcharacters(e.g.,“AAAAAA”or“999999ʺ)•Sportsteamsorterms(suchas“Bulls”or“Golfer”)

Configuring CLI Access SecurityMatrix DFE Series and N-SA User’s Guide 3-3Forapasswordtobestrongandhardtobreak,itshould:•Beatleast8char

Configuring CLI Access Security3-4 Using the CLISetting New System Passwords 1. TosetsystempasswordsforthedefaultAdmin,Read‐WriteorRead‐Only

Configuring CLI Access SecurityMatrix DFE Series and N-SA User’s Guide 3-5Disabling a User AccountFromthesuprompt,usethefollowingcommandtodis

Configuring CLI Access Security3-6 Using the CLIExampleThisexampleshowshowtodisplayloginaccountinformation.Inthiscase,devicedefaultshave

Starting and Configuring TelnetMatrix DFE Series and N-SA User’s Guide 3-7Setting Lockout Attempts and DurationFromthesuprompt,usethefollowingc

iiEnterasys Networks, Inc.Firmware License AgreementBEFOREOPENINGORUTILIZINGTHEENCLOSEDPRODUCT,CAREFULLYREADTHISLICENSEAGREEMENT.Thisdocume

Configuring Secure Shell (SSH) Server3-8 Using the CLIConfiguring Secure Shell (SSH) ServerUnderstanding the SSHv2 ProtocolSecureShell(SSH)isa“se

Setting CLI ParametersMatrix DFE Series and N-SA User’s Guide 3-9Generating Host KeysBeforeenablingtheSSHserver,atleastonehostkeymustbegen

Getting Help with CLI Commands3-10 Using the CLIDisplaying Scrolling ScreensIftheCLIscreenlengthhasbeensetusingthesetlengthcommandasdesc

Getting Help with CLI CommandsMatrix DFE Series and N-SA User’s Guide 3-11ExampleThisexampleshowshowtodisplaycontext‐sensitivehelpfortheset

Abbreviating and Completing Commands3-12 Using the CLIExampleThisexampleshowshowtousethepartialkeywordfunctionforallcommandsbeginningwit

Using Basic Line Editing CommandsMatrix DFE Series and N-SA User’s Guide 3-13Using Basic Line Editing CommandsTheCLIsupportsEMACs‐likelineediting

Understanding Module and Port Numbering3-14 Using the CLISwitch PortsMatrixdeviceshavefixedfrontpanelswitchportsand,dependingonthemodel,o

Understanding Module and Port NumberingMatrix DFE Series and N-SA User’s Guide 3-15Port String Syntax for the Matrix N-SA DeviceUsethissyntaxtospe

Preparing the Device for Router Mode3-16 Using the CLIPreparing the Device for Router ModePre-Routing Configuration TasksThefollowingpre‐routingtas

Preparing the Device for Router ModeMatrix DFE Series and N-SA User’s Guide 3-17ExampleThisexampleshowshowto:• ConfigureMatrixDFESeriesmodule

iii4. EXPORTRESTRICTIONS. YouunderstandthatEnterasysanditsAffiliatesaresubjecttoregulationbyagenciesoftheU.S.Government,includingth

Preparing the Device for Router Mode3-18 Using the CLIGlobal Configuration ModeSet system-wide parameters. Type configure terminal from Privileged EXE

Preparing the Device for Router ModeMatrix DFE Series and N-SA User’s Guide 3-19DHCP Pool Configuration ModeConfigure a DHCP server address pool.Type

Preparing the Device for Router Mode3-20 Using the CLI

Matrix DFE Series and N-SA User’s Guide 4-14Configuring Link AggregationThischapterprovidesinformationaboutthefollowinglinkaggregationconfigu

Link Aggregation Control Protocol (LACP) Overview4-2 Configuring Link AggregationLACP OperationForeachaggregatableportinthedevice,LACP:• Mainta

Link Aggregation Control Protocol (LACP) OverviewMatrix DFE Series and N-SA User’s Guide 4-3Matrix DFE Series and N-SA Usage ConsiderationsInnormalu

Configuring LAG Aggregator Keys and Priority4-4 Configuring Link AggregationLACPusesasystempriorityvaluetobuildaLAGID,whichdeterminesaggr

Configuring Underlying Physical PortsMatrix DFE Series and N-SA User’s Guide 4-5Assigning a LAG Aggregator KeyLACPallowsonlyunderlyingphysicalpor

Configuring Underlying Physical Ports4-6 Configuring Link AggregationExampleThisexampleshowshowtoaddFastEthernetport6inslot1totheLAGof

Enabling LACP Flow RegenerationMatrix DFE Series and N-SA User’s Guide 4-7To set the actor or partner administrative states:set port lacp port port-st

iv9. OWNERSHIP. Thisisalicenseagreementandnotanagreementforsale.YouacknowledgeandagreethattheProgramconstitutestradesecretsand/or

Enabling LACP Flow Regeneration4-8 Configuring Link Aggregation

Matrix DFE Series and N-SA User’s Guide 5-15Configuring Spanning TreesThischapterprovidesthefollowinginformationaboutconfiguringandmonitoring

Overview of Spanning Tree Protocols5-2 Configuring Spanning TreesThefollowingsectionsdescribethespanningtreeprotocolssupportedbytheMatrixD

Overview of Spanning Tree ProtocolsMatrix DFE Series and N-SA User’s Guide 5-3Spanning Tree (IEEE 802.1D)TheSpanningTreeProtocol(STP)definedinI

Overview of Spanning Tree Protocols5-4 Configuring Spanning Trees•Inadditiontousinghellotime,forwarddelay,andmaxageinformation,MSTPalsou

Overview of Spanning Tree ProtocolsMatrix DFE Series and N-SA User’s Guide 5-5•FormatSelector‐Oneoctetinlengthandisalways0.Itcannotbeadm

Overview of Spanning Tree Protocols5-6 Configuring Spanning TreesVariousoptionsmaybeconfiguredonaper‐MSTIbasistoallowfordifferingtopologi

Overview of Spanning Tree ProtocolsMatrix DFE Series and N-SA User’s Guide 5-7Figure 5-4 Example of Multiple Regions and MSTIsSpanning Tree Port Stat

Configuring STP and RSTP5-8 Configuring Spanning TreesConfiguring STP and RSTPThissectionprovidesinformationaboutthefollowingSTPandRSTPtasks

Configuring STP and RSTPMatrix DFE Series and N-SA User’s Guide 5-93. Reviewthestatusofspanningtreeononeormoreports:show spantree portenable

vContentsChapter 1: Features OverviewMatrix Series Features ...

Configuring STP and RSTP5-10 Configuring Spanning TreesSetting a Port PriorityYoucansetaspanningtreepriorityforaport,whichwillbeusedtob

Configuring STP and RSTPMatrix DFE Series and N-SA User’s Guide 5-11Adjusting the Bridge Hello TimeHellotimeistheintervalatwhichthebridgeori

Configuring STP and RSTP5-12 Configuring Spanning TreesDefining the Maximum AgeIfabridgedoesnothearBPDUsfromtherootbridgewithinaspecified

Configuring STP and RSTPMatrix DFE Series and N-SA User’s Guide 5-13Defining Point-to-Point LinksBydefault,theadministrativepoint‐to‐pointstatus

Configuring MSTP5-14 Configuring Spanning Trees4. Displaytheedgeportadministrativestatusofoneormoreport(s):show spantree adminedge[port port

Configuring MSTPMatrix DFE Series and N-SA User’s Guide 5-15Figure 5-5 MSTP Sample Network ConfigurationProcedure 5 ‐1showshowtoconfigureDevices

Configuring Spanguard5-16 Configuring Spanning TreesConfiguring SpanguardThissectionprovidesinformationaboutthefollowingSpanguardtasks:• Overv

Configuring SpanguardMatrix DFE Series and N-SA User’s Guide 5-17Enabling and Adjusting SpanguardUsethefollowingcommandstoconfiguredeviceports

Configuring Spanguard5-18 Configuring Spanning TreesToreviewtheSpanguardtimeoutsettingononeormoreports:show spantree spanguardtimeout Torev

Matrix DFE Series and N-SA User’s Guide 6-16Managing SyslogThischapterprovidesinformationaboutthefollowingsystemloggingproceduresontheMatr

vi Getting Help with CLI Commands ... 3

Interpreting Messages6-2 Managing SyslogSyslog Terms and DefinitionsTable 6‐1liststermsanddefinitionsusedinSyslogconfiguration.Interpreting Me

Configuring Syslog Servers, Applications, and Console LoggingMatrix DFE Series and N-SA User’s Guide 6-3ExampleThisexampleshowsSysloginformational

Configuring Syslog Servers, Applications, and Console Logging6-4 Managing SyslogAbout Server Versus Application Severity LevelsThedefaultSyslogconf

Configuring Syslog Servers, Applications, and Console LoggingMatrix DFE Series and N-SA User’s Guide 6-5Modifying default settingsYoucanchangefacto

Configuring Syslog Servers, Applications, and Console Logging6-6 Managing Syslogconfiguredandtheserver(s)towhichmessageswillbesent.Inthisc

Configuring Syslog Servers, Applications, and Console LoggingMatrix DFE Series and N-SA User’s Guide 6-7Enabling Console Logging and File StorageYouc

Configuring Syslog Servers, Applications, and Console Logging6-8 Managing Syslog

Matrix DFE Series and N-SA User’s Guide 7-17Configuring IPThischapterprovidesinformationaboutthefollowingInternetProtocol(IP)configurationp

Using the Matrix DFE Series or N-SA Device as a Router7-2 Configuring IPExample ScenarioImagineyouareusingaMatrixDFESeriesorN‐SAswitchdevic

Using the Matrix DFE Series or N-SA Device as a RouterMatrix DFE Series and N-SA User’s Guide 7-3Pre-Routing Configuration TasksThediscussedprevious

viiChapter 6: Managing SyslogLogging Overview ...

Using the Matrix DFE Series or N-SA Device as a Router7-4 Configuring IPRouter Configuration ModeSet IP protocol parameters.Type router and the protoc

Reviewing and Configuring Router InterfacesMatrix DFE Series and N-SA User’s Guide 7-5Reviewing and Configuring Router InterfacesUsetheproceduresin

Reviewing and Configuring Router Interfaces7-6 Configuring IPThisexampleshowshowtousetheshowipinterfacecommandtodisplayIPconfigurationi

Reviewing and Configuring Router InterfacesMatrix DFE Series and N-SA User’s Guide 7-7Configuring Interfaces for IP RoutingEachMatrixDFESeriesorN

Reviewing and Configuring Router Interfaces7-8 Configuring IPSample ConfigurationThefollowingsampleconfigurationassumestheexamplenetworkscenar

Reviewing and Configuring Router InterfacesMatrix DFE Series and N-SA User’s Guide 7-9**Set the inbound PVID associations for untagged frames**Matrix(

Managing Router Configuration Files7-10 Configuring IPManaging Router Configuration FilesEachMatrixDFESeriesorN‐SAdeviceprovidesasingleconfi

Managing Router Configuration FilesMatrix DFE Series and N-SA User’s Guide 7-11Saving or Erasing the Running Configuration FromprivilegedEXECmode,

Reviewing and Configuring the ARP Table7-12 Configuring IPDisplaying or Writing the Current Config to a FileTheMatrixDFESeries/N‐SA’ssingleconf

Reviewing and Configuring the ARP TableMatrix DFE Series and N-SA User’s Guide 7-13ExamplesThisexampleshowshowtodisplayallentriesintheARPta