Document Outline

• Title
• Notice
• Contents
• Preface
  • About This Manual
  • Who Should Read This Manual?
  • How to Use This Manual
  • Related Documentation
• SSR Product Overview
  • Supported Media (Encapsulation Type)
  • Supported Routing Protocols
  • Configuring the SmartSwitch Router
    • Understanding the Command Line Interface
    • Basic Line Editing Commands
    • Access Modes
    • User Mode
    • Enable Mode
    • Configure Mode
    • Boot PROM Mode
    • Disabling a Function or Feature
  • Loading System Images and Configuration Files
    • Boot and System Image
    • Configuration Files
    • Loading System Image Software
    • Loading Boot PROM Software
    • Activating the Configuration Commands in the Scratchpad
    • Copying the Configuration to the Startup Configuration File
    • Displaying Configuration Changes
  • Managing the SSR
    • Setting the SSR Name
    • Setting SSR Date and Time
    • Configuring NTP
    • Configuring the SSR CLI
    • Configuring SNMP Services
    • Configuring DNS
    • Connecting Between the SSR and Other Systems
    • Configuring Logging
  • Monitoring Configuration
• Hot Swapping Line Cards and Control Modules
  • Hot Swapping Overview
  • Hot Swapping Line Cards
    • Deactivating the Line Card
    • Removing the Line Card
      • Installing a New Line Card
    • Hot Swapping One Type of Line Card With Another
  • Hot Swapping a Secondary Control Module
    • Deactivating the Control Module
    • Removing the Control Module
    • Installing the Control Module
  • Hot Swapping a Switching Fabric Module (SSR 8600 only)
• Bridging Configuration Guide
  • Bridging Overview
    • Spanning Tree (IEEE 802.1d)
    • Bridging Modes (Flow-Based and Address-Based)
  • VLAN Overview
    • Port-based VLANs
    • MAC-address-based VLANs
    • Protocol-based VLANs
    • Subnet-based VLANs
    • Multicast-based VLANs
    • Policy-based VLANs
    • SSR VLAN Support
      • VLANs and the SSR
      • Ports, VLANs, and L3 Interfaces
      • Access Ports and Trunk Ports (802.1Q support)
      • Explicit and Implicit VLANs
  • Configuring SSR Bridging Functions
    • Configuring Address-based or Flow-based Bridging
    • Configuring Spanning Tree
    • Adjusting Spanning-Tree Parameters
      • Setting the Bridge Priority
      • Setting a Port Priority
      • Assigning Port Costs
      • Adjusting Bridge Protocol Data Unit (BPDU) Intervals
    • Configuring a Port or Protocol based VLAN
      • Creating a Port or Protocol Based VLAN
      • Adding Ports to a VLAN
    • Configuring VLAN Trunk Ports
    • Configuring VLANs for Bridging
    • Configuring Layer-2 Filters
  • Monitoring Bridging
  • Configuration Examples
    • Creating an IP or IPX VLAN
    • Creating a non-IP/non-IPX VLAN
• SmartTRUNK Configuration Guide
  • Overview
  • Configuring SmartTRUNKs
    • Creating a SmartTRUNK
    • Add Physical Ports to the SmartTRUNK
    • Specify Traffic Distribution Policy (Optional)
  • Monitoring SmartTRUNKs
  • Example Configurations
• DHCP Configuration Guide
  • DHCP Overview
  • Configuring DHCP
    • Configuring an IP Address Pool
    • Configuring Client Parameters
    • Configuring a Static IP Address
    • Grouping Scopes with a Common Interface
    • Configuring DHCP Server Parameters
  • Updating the Lease Database
  • Monitoring the DHCP Server
  • DHCP Configuration Examples
    • Configuring Secondary Subnets
    • Secondary Subnets and Directly-Connected Clients
    • Interacting with Relay Agents
• IP Routing Configuration Guide
  • IP Routing Overview
    • IP Routing Protocols
      • Unicast Routing Protocols
      • Multicast Routing Protocols
  • Configuring IP Interfaces and Parameters
    • Configuring IP Addresses to Ports
    • Configuring IP Interfaces for a VLAN
    • Specifying Ethernet Encapsulation Method
    • Configuring Address Resolution Protocol (ARP)
      • Configuring ARP Cache Entries
      • Configuring Proxy ARP
    • Configuring Reverse Address Resolution Protocol (RARP)
      • Specifying IP Interfaces for RARP
      • Defining MAC-to-IP Address Mappings
      • Monitoring RARP
    • Configuring DNS Parameters
    • Configuring IP Services (ICMP)
    • Configuring IP Helper
    • Configuring Direct Broadcast
    • Configuring Denial of Service (DOS)
    • Monitoring IP Parameters
  • Configuring Router Discovery
  • Configuration Examples
    • Assigning IP/IPX Interfaces
• VRRP Configuration Guide
  • VRRP Overview
  • Configuring VRRP
    • Basic VRRP Configuration
      • Configuration of Router R1
      • Configuration for Router R2
    • Symmetrical Configuration
      • Configuration of Router R1
      • Configuration of Router R2
    • Multi-Backup Configuration
      • Configuration of Router R1
      • Configuration of Router R2
      • Configuration of Router R3
    • Additional Configuration
      • Setting the Backup Priority
      • Setting the Advertisement Interval
      • Setting Pre-empt Mode
      • Setting an Authentication Key
  • Monitoring VRRP
    • ip-redundancy trace
    • ip-redundancy show
  • VRRP Configuration Notes
• RIP Configuration Guide
  • RIP Overview
  • Configuring RIP
    • Enabling and Disabling RIP
    • Configuring RIP Interfaces
    • Configuring RIP Parameters
    • Configuring RIP Route Preference
    • Configuring RIP Route Default-Metric
  • Monitoring RIP
  • Configuration Example
• OSPF Configuration Guide
  • OSPF Overview
    • OSPF Multipath
  • Configuring OSPF
    • Enabling OSPF
    • Configuring OSPF Interface Parameters
    • Configuring an OSPF Area
    • Configuring OSPF Area Parameters
    • Creating Virtual Links
    • Configuring Autonomous System External (ASE) Link Advertisements
    • Configuring OSPF over Non-Broadcast Multiple Access
  • Monitoring OSPF
  • OSPF Configuration Examples
• BGP Configuration Guide
  • BGP Overview
    • The SSR BGP Implementation
  • Basic BGP Tasks
    • Setting the Autonomous System Number
    • Setting the Router ID
    • Configuring a BGP Peer Group
    • Adding and Removing a BGP Peer
    • Starting BGP
    • Using AS-Path Regular Expressions
      • AS-Path Regular Expression Examples
    • Using the AS Path Prepend Feature
      • Notes on Using the AS Path Prepend Feature
  • BGP Configuration Examples
    • BGP Peering Session Example
    • IBGP Configuration Example
      • IBGP Routing Group Example
      • IBGP Internal Group Example
    • EBGP Multihop Configuration Example
    • Community Attribute Example
      • Notes on Using Communities
    • Local_Pref Attribute Example
      • Notes on Using the Local_Pref Attribute
    • Multi-Exit Discriminator Attribute Example
    • EBGP Aggregation Example
    • Route Reflection Example
      • Notes on Using Route Reflection
• Routing Policy Configuration Guide
  • Route Import and Export Policy Overview
    • Preference
    • Import Policies
      • Import-Source
      • Route-Filter
    • Export Policies
      • Export-Destination
      • Export-Source
      • Route-Filter
    • Specifying a Route Filter
    • Aggregates and Generates
      • Aggregate-Destination
      • Aggregate-Source
      • Route-Filter
    • Authentication
      • Authentication Methods
      • Authentication Keys and Key Management
  • Configuring Simple Routing Policies
    • Redistributing Static Routes
    • Redistributing Directly Attached Networks
    • Redistributing RIP into RIP
    • Redistributing RIP into OSPF
    • Redistributing OSPF to RIP
    • Redistributing Aggregate Routes
    • Simple Route Redistribution Examples
      • Example 1: Redistribution into RIP
      • Example 2: Redistribution into OSPF
  • Configuring Advanced Routing Policies
    • Export Policies
    • Creating an Export Destination
    • Creating an Export Source
    • Import Policies
    • Creating an Import Source
    • Creating a Route Filter
    • Creating an Aggregate Route
    • Creating an Aggregate Destination
    • Creating an Aggregate Source
    • Examples of Import Policies
      • Example 1: Importing from RIP
      • Example 2: Importing from OSPF
    • Examples of Export Policies
      • Example 1: Exporting to RIP
      • Example 2: Exporting to OSPF
• Multicast Routing Configuration Guide
  • IP Multicast Overview
    • IGMP Overview
    • DVMRP Overview
  • Configuring IGMP
    • Configuring IGMP on an IP Interface
    • Configuring IGMP Query Interval
    • Configuring IGMP Response Wait Time
    • Configuring Per-Interface Control of IGMP Membership
  • Configuring DVMRP
    • Starting and Stopping DVMRP
    • Configuring DVMRP on an Interface
    • Configuring DVMRP Parameters
    • Configuring the DVMRP Routing Metric
    • Configuring DVMRP TTL & Scope
    • Configuring a DVMRP Tunnel
  • Monitoring IGMP & DVMRP
  • Configuration Examples
• IP Policy-Based Forwarding Configuration Guide
  • Overview
  • Configuring IP Policies
    • Defining an ACL Profile
    • Associating the Profile with an IP Policy
      • Creating Multi-statement IP Policies
      • Setting Load Distribution for Next-hop Gateways
      • Setting the IP Policy Action
      • Checking the Availability of Next-hop Gateways
    • Applying an IP Policy to an Interface
      • Applying an IP Policy to Locally Generated Packets
  • IP Policy Configuration Examples
    • Routing Traffic to Different ISPs
    • Prioritizing Service to Customers
    • Authenticating Users through a Firewall
    • Firewall Load Balancing
  • Monitoring IP Policies
• Network Address Translation Configuration Guide
  • Overview
  • Configuring NAT
    • Setting Inside and Outside Interfaces
    • Setting NAT Rules
      • Static
      • Dynamic
  • Managing Dynamic Bindings
  • NAT and FTP
  • Monitoring NAT
  • Configuration Examples
    • Static Configuration
      • Using Static NAT
    • Dynamic Configuration
      • Using Dynamic NAT
    • Dynamic NAT with IP Overload (PAT) Configuration
      • Using Dynamic NAT with IP Overload
    • Dynamic NAT with Outside Interface Redundancy
      • Using Dynamic NAT with Matching Interface Redundancy
• Web Hosting Configuration Guide
  • Overview
  • Load Balancing
    • Configuring Load Balancing
      • Creating the Server Group
      • Specifying Load Balancing Policy (Optional)
      • Adding Servers to the Load Balancing Group
    • Setting Server Status
    • Load Balancing and FTP
    • Allowing Access to Load Balancing Servers
    • Setting Timeouts for Load Balancing Mappings
    • Displaying Load Balancing Information
    • Configuration Examples
      • Web Hosting with One Virtual Group and Multiple Destination Servers
      • Web Hosting with Multiple Virtual Groups and Multiple Destination Servers
      • Virtual IP Address Ranges
  • Web Caching
    • Configuring Web Caching
      • Creating the Cache Group
      • Specifying the Client(s) for the Cache Group (Optional)
      • Redirecting HTTP Traffic on an Interface
    • Configuration Example
    • Other Configurations
      • Bypassing Cache Servers
      • Proxy Server Redundancy
      • Distributing Frequently-Accessed Sites Across Cache Servers
    • Monitoring Web-Caching
• IPX Routing Configuration Guide
  • IPX Routing Overview
    • RIP (Routing Information Protocol)
    • SAP (Service Advertising Protocol)
  • Configuring IPX RIP & SAP
    • IPX RIP
    • IPX SAP
    • Creating IPX Interfaces
    • IPX Addresses
  • Configuring IPX Interfaces and Parameters
    • Configuring IPX Addresses to Ports
    • Configuring IPX Interfaces for a VLAN
    • Specifying IPX Encapsulation Method
  • Configuring IPX Routing
    • Enabling IPX RIP
    • Enabling SAP
    • Configuring Static Routes
    • Configuring Static SAP Table Entries
    • Controlling Access to IPX Networks
      • Creating an IPX Access Control List
      • Creating an IPX Type 20 Access Control List
      • Creating an IPX SAP Access Control List
      • Creating an IPX GNS Access Control List
      • Creating an IPX RIP Access Control List
  • Monitoring an IPX Network
  • Configuration Examples
• Access Control List Configuration Guide
  • ACL Basics
    • Defining Selection Criteria in ACL Rules
    • How ACL Rules are Evaluated
    • Implicit Deny Rule
    • Allowing External Responses to Established TCP Connections
  • Creating and Modifying ACLs
    • Editing ACLs Offline
    • Maintaining ACLs Using the ACL Editor
  • Using ACLs
    • Applying ACLs to Interfaces
    • Applying ACLs to Services
    • Using ACLs as Profiles
      • Using Profile ACLs with the IP Policy Facility
      • Using Profile ACLs with the Traffic Rate Limiting Facility
      • Using Profile ACLs with Dynamic NAT
      • Using Profile ACLs with the Port Mirroring Facility
      • Using Profile ACLs with the Web Caching Facility
  • Enabling ACL Logging
  • Monitoring ACLs
• Security Configuration Guide
  • Security Overview
  • Configuring SSR Access Security
    • Configuring RADIUS
      • Monitoring RADIUS
    • Configuring TACACS
      • Monitoring TACACS
    • Configuring TACACS Plus
      • Monitoring TACACS Plus
    • Configuring Passwords
  • Layer-2 Security Filters
    • Configuring Layer-2 Address Filters
    • Configuring Layer-2 Port-to-Address Lock Filters
    • Configuring Layer-2 Static Entry Filters
    • Configuring Layer-2 Secure Port Filters
    • Monitoring Layer-2 Security Filters
    • Layer-2 Filter Examples
      • Example 1: Address Filters
      • Example 2 : Secure Ports
  • Layer-3 Access Control Lists (ACLs)
• QoS Configuration Guide
  • QoS & Layer-2/Layer-3/Layer-4 Flow Overview
    • Layer-2 and Layer-3 & Layer-4 Flow Specification
    • Precedence for Layer-3 Flows
    • SSR Queuing Policies
  • Traffic Prioritization for Layer-2 Flows
    • Configuring Layer-2 QoS
  • Traffic Prioritization for Layer-3 & Layer-4 Flows
    • Configuring IP QoS Policies
      • Setting an IP QoS Policy
      • Specifying Precedence for an IP QoS Policy
    • Configuring IPX QoS Policies
      • Setting an IPX QoS Policy
      • Specifying Precedence for an IPX QoS Policy
  • Configuring SSR Queueing Policy
    • Allocating Bandwidth for a Weighted-Fair Queuing Policy
  • ToS Rewrite
    • Configuring ToS Rewrite for IP Packets
  • Monitoring QoS
  • Limiting Traffic Rate
    • Example Configuration
    • Displaying Rate Limit Information
• Performance Monitoring Guide
  • Performance Monitoring Overview
  • Configuring the SSR for Port Mirroring
  • Monitoring Broadcast Traffic
• RMON Configuration Guide
  • RMON Overview
  • Configuring and Enabling RMON
    • Example of RMON Configuration Commands
    • RMON Groups
      • Lite RMON Groups
      • Standard RMON Groups
      • Professional RMON Groups
    • Control Tables
  • Using RMON
  • Configuring RMON Groups
    • Configuration Examples
  • Displaying RMON Information
    • RMON CLI Filters
      • Creating RMON CLI Filters
      • Using RMON CLI Filters
  • Troubleshooting RMON
  • Allocating Memory to RMON
• WAN Configuration Guide
  • WAN Overview
    • High-Speed Serial Interface (HSSI) and Standard Serial Interfaces
    • Configuring WAN Interfaces
    • Primary and Secondary Addresses
    • Static, Mapped, and Dynamic Peer IP/IPX Addresses
      • Static Addresses
      • Mapped Addresses
      • Dynamic Addresses
    • Forcing Bridged Encapsulation
    • Packet Compression
      • Average Packet Size
      • Nature of the Data
      • Link Integrity
      • Latency Requirements
      • Example Configurations
    • Packet Encryption
    • WAN Quality of Service
      • Source Filtering and ACLs
      • Weighted-Fair Queueing
      • Congestion Management
  • Frame Relay Overview
    • Virtual Circuits
      • Permanent Virtual Circuits (PVCs)
  • Configuring Frame Relay Interfaces for the SSR
    • Defining the Type and Location of a Frame Relay and VC Interface
    • Setting up a Frame Relay Service Profile
    • Applying a Service Profile to an Active Frame Relay WAN Port
  • Monitoring Frame Relay WAN Ports
  • Frame Relay Port Configuration
  • Point-to-Point Protocol (PPP) Overview
    • Use of LCP Magic Numbers
  • Configuring PPP Interfaces
    • Defining the Type and Location of a PPP Interface
    • Setting up a PPP Service Profile
    • Applying a Service Profile to an Active PPP Port
    • Configuring Multilink PPP Bundles
      • Compression on MLP Bundles or Links
  • Monitoring PPP WAN Ports
  • PPP Port Configuration
  • WAN Configuration Examples
    • Simple Configuration File
    • Multi-Router WAN Configuration
      • Router R1 Configuration File
      • Router R2 Configuration File
      • Router R3 Configuration File
      • Router R4 Configuration File
      • Router R5 Configuration File
      • Router R6 Configuration File