Configuring an Ethernet Interface   4

  This chapter describes how to configure Ethernet interfaces on the PortMaster 4 and includes the following topics:

•  "Overview of PortMaster 4 Ethernet Interfaces" on page 4-1
•  "Setting General Ethernet Parameters" on page 4-3
•  "Setting Ethernet IP Parameters" on page 4-4
•  "Setting Ethernet IPX Parameters" on page 4-5
•  "Configuring Ethernet Subinterfaces" on page 4-7
•  "Configuring Standalone Ethernet Boards" on page 4-8
•  "Setting OSPF on an Ethernet Interface" on page 4-10

  Before configuring an Ethernet interface, you must make the appropriate Ethernet connections for your needs. Refer to the PortMaster 4 Installation Guide for information about installing the system manager module and standalone Ethernet boards, and connecting Ethernet interfaces.

  See the PortMaster 4 Command Line Reference for more detailed command descriptions and instructions.

  You can also configure the PortMaster 4 using the PMVision application for Microsoft Windows, UNIX, and other platforms supporting the Java Virtual Machine (JVM). PMVision replaces the PMconsole interface to ComOS.

       Overview of PortMaster 4 Ethernet Interfaces

  The PortMaster 4 supports two Ethernet interfaces on the manager module: Ether0  and Ether1 . Each interface has its own media access control (MAC) address and is fully routeable. The 10/100BaseT Ether1 interface has alternative RJ-45 and media-independent interface (MII) connections. Lucent recommends that you configure Ether1 if you configure only one Ethernet interface. If you configure both, you must connect them to separate Ethernet segments.

       Understanding Ether0

  Ether0 operates at 10Mbps and is physically on the manager board. Use Ether0 for netboots and SNMP. Ether0 supports subinterfaces (see "Configuring Ethernet Subinterfaces" on page 4-7).

  Whenever you make changes to the Ether0 interface, you must reboot the PortMaster 4 for the changes to take effect.

       Understanding Ether1

  The Ethernet board (Ether1) in the manager module is accessed in logical slot 10 and gets its power directly from the manager board. Ether1 can operate at 10Mbps or 100Mbps full duplex. Ether1 is physically on the Ethernet board and communicates with the manager board over the passive ATM backplane.

  Ether1 is supported by two CPUs. One CPU processes inbound data, the other processes outbound data. Ether1 does not shut down in a low power situation or due to overheating. Ether1 maintains its own forwarding table, which it learns from the manager board. You cannot configure Ethernet subinterfaces on Ether1.

  Whenever you make changes to the Ether1 interface, you must reset it for the changes to take effect. Because Ether1 resides in logical slot 10, you reset the Ether1 interface with the following command:

  Command> reset slot10

  Resetting slot 10 reboots the Ethernet board connected to the manager board in slot 4.

  During PPP negotiations for the IP Control Protocol (IPCP), the PortMaster 4 uses the following order of precedence when choosing an IP address to identify itself:

  1. The Local IP address configured in the user profile, if set

  2. The global reported IP address, if set

  3. The first global local IP address, if set

  4. The second global local IP address, if set

  5. The third global local IP address, if set

  6. The fourth global local IP address, if set

  7. The IP address of Ether1

  8. The IP address of Ether0

  Note ¯ RADIUS packets leaving the PortMaster 4 have the source IP address of Ether1, even if the packet exits through Ether0.

 

       Understanding the Interfaces on the Standalone Ethernet Boards

  The 10Mbps or 100Mbps full-duplex Ethernet interfaces on standalone Ethernet boards are identified by a numbering scheme that refers to the slot in which the board is installed. The single-interface board can be installed in any slot except slot 4. A single-interface board installed in slot 3, for example, is designated Ether30 . If the board is installed in slot 5, it is designated Ether50 .

  The dual-interface Ethernet board can be installed in slot 3 only, and the two interfaces on the board are always Ether30  and Ether31 . See "Configuring Standalone Ethernet Boards" on page 4-8 for more information.

       Setting General Ethernet Parameters

  The commands described in this section allow you to configure an Ethernet interface. In addition to specifying the protocol type (IP, IPX, or both) and address, you must specify any routing and filtering you want on the Ethernet interface.

  This section describes the general Ethernet settings that apply to your network regardless of the protocol you use.

       Setting the View

  Because the Ethernet interfaces on a PortMaster 4 are numbered uniquely, you can configure them from any view.

       Configuring RIP Routing

  As described in the PortMaster Routing Guide, PortMaster products automatically send and accept route information as RIP messages.

  Note ¯ ComOS 4.1 and later releases support both RIP-1 and RIP-2 on the PortMaster 4. Earlier releases of ComOS support only RIP-1.

  To configure RIP routing, use the following command:

  Command> set  Ether0 rip on |off |broadcast |listen |v2  
{broadcast |multicast |on |v1-compatibility }

  Refer to the PortMaster 4 Command Line Reference for a description of the keywords in this command. Refer to the PortMaster Routing Guide for a discussion of routing with RIP, and for OSPF and BGP routing configuration instructions.

       Applying Filters

  Filters enable you to control network traffic. After you have created filters in the filter table, you can apply them to the Ethernet interface as either input or output filters. For more information about filters, see Chapter 8, "Configuring Filters."

  Filters applied to the Ethernet interface take effect immediately. If you change the filter, the change will not take effect until you set the filter on the interface again or you reboot the PortMaster.

 

Input Filters

  When an input filter is used, all traffic coming into the PortMaster on the Ethernet interface is compared to the input filter rules. Only packets permitted by the filter rules are accepted by the PortMaster.

  To apply an input filter to the Ethernet interface, use the following command:

  Command> set  Ether0 ifilter  Filtername

  To remove the input filter, omit the filter name when entering the command.

 

Output Filters

  When an output filter is used, all traffic going out of the PortMaster on the Ethernet interface is compared to the output filter rules. Only packets permitted by the filter rules are sent by the PortMaster.

  Note ¯ ICMP and UDP packets generated by the PortMaster are never blocked by the output filter.

  To apply an output filter to the Ethernet interface, use the following command:

  Command> set  Ether0 ofilter  Filtername

  To remove the output filter, omit the filter name when entering the command.

       Setting Ethernet IP Parameters

  This section describes the IP commands, keywords, and values that must be entered for IP protocol support.

       Setting the IP Address

  During the PortMaster installation process, you set the IP address for the Ether0 and Ether1 interfaces. If you have one or more standalone Ethernet boards installed, you must configure an IP address and netmask and set broadcast on the Ethernet interfaces on those boards as well. See "Configuring Standalone Ethernet Boards" on page 4-8.

  To set or change the IP address of an Ethernet interface, use the following command:

  Command> set  Ether0 address  Ipaddress

  Note ¯ If you change the IP address of an Ethernet interface, you must reboot the PortMaster for the change to take effect.

       Setting the Subnet Mask

  The default subnet mask is 255.255.255.0. If you have divided your network into subnets, enter the subnet mask that identifies how your network addresses are divided between the network portion and the host portion.

  To set the subnet mask, use the following command:

  Command> set  Ether0 netmask  Ipmask

  See Appendix A, "Networking Concepts," for more information about using subnet masks.

       Setting the Broadcast Address

  You can define the IP address used as the local broadcast address. The RIP routing protocol uses this address to send information to other hosts on the local Ethernet network. The actual broadcast address is constructed from the IP address of the Ethernet interface and the netmask. The two valid values are high , where the host part of the address is all 1s (ones), such as 192.168.1.255, and low , where the host part of the address is all 0s (zeros), such as 192.168.1.0. The PortMaster default is low . The standard for hosts is to broadcast high, but some hosts still use the low broadcast address, including hosts running SunOS 4.x (Solaris 1.x) and earlier.

  The broadcast address you set for an Ethernet interface on the PortMaster must match the broadcast address set for other hosts on your local Ethernet segment.

  To set the broadcast address, use the following command:

  Command> set  Ether0 broadcast  high |low 

       Enabling or Disabling IP Traffic

  IP traffic is sent and received through a PortMaster Ethernet interface. IP is enabled by default on PortMaster Ethernet ports. If the setting has been changed, you must enable IP on the Ethernet interface of all PortMaster products attached directly to a local Ethernet. Disable IP traffic on Ethernet ports only if the PortMaster is not attached to a local Ethernet network.

  To enable or disable IP traffic, use the following command:

  Command> set  ether0  ip enable |disable 

  Note ¯ This command is currently available only on the Ether0 port.

 

       Setting Ethernet IPX Parameters

  Note ¯ The PortMaster 4 supports the IPX protocol if it is running ComOS 4.1 or later. IPX is not supported in ComOS 4.0.

  You must set the following values to send IPX traffic on an Ethernet interface. IPX routing is enabled when routing is enabled.

•  Network address
•  Protocol
•  Frame type

       Setting the IPX Network Address

  You must identify the IPX network of your local Ethernet segment. An IPX network address is a number entered in hexadecimal format, described in Appendix A, "Networking Concepts."

  To set the IPX network address, use the following command:

  Command> set  Ether0 ipxnet  Ipxnetwork

  Note ¯ If you change the IPX network address of an Ethernet interface, you must reboot the PortMaster for the change to take effect.

 

       Enabling or Disabling IPX Traffic

  Ethernet IPX traffic is sent and received through the PortMaster Ethernet interface. You can enable IPX on the Ethernet interface of any PortMaster products attached directly to a local Ethernet. Disable IPX traffic on Ether0 only if the PortMaster is not attached to a local Ethernet network.

  To enable or disable IPX traffic, use the following command:

  Command> set  ether0  ipx enable |disable 

  Note ¯ This command is available only on the Ether0 port.

 

       Setting the IPX Frame Type

  The IPX frame type must be identified and set to the value used on the local IPX network. The frame type identifies the encapsulation method used on your IPX ports. The IPX protocol can be implemented with one of the four commonly used IPX encapsulation and frame types shown in Table 4-1.

  Table 4-1 Novell IPX Encapsulation and Frame Types 

 

IPX Frame Type	Encapsulation
Ethernet_802.2	Consists of a standard 802.3 media access control (MAC) header followed by an 802.2 Logical Link Control (LLC) header. This is the default encapsulation used by Novell NetWare 4.0.
Ethernet_802.2_II	Not commonly used.
Ethernet_802.3	Consists of a standard 802.3 MAC header followed directly by the IPX header with a checksum of FFFF. This is the default encapsulation used by Novell NetWare 3.11.
Ethernet_II	Uses Novell's Ethernet_II and is sometimes used for networks that handle both TCP/IP and IPX traffic.

  The encapsulation method and frame type were selected when your IPX network servers were installed. The IPX frame type you set on the PortMaster must match the frame type set for your network. Contact your IPX network administrator for information about the frame type used on your network.

  To set the IPX frame type, use the following command--entered on one line:

  Command> set  Ether0 ipxframe  ethernet_802.2 |ethernet_802.2_ii |ethernet_802.3 |ethernet_ii 

       Configuring Ethernet Subinterfaces

  With the subinterface feature of ComOS, you can create up to 512 subinterfaces (the total number of interfaces available on a PortMaster) on the Ether0 interface on the PortMaster 4. Because you have the bandwidth of only a single Ethernet interface, however, efficiency begins to degrade significantly when you add more than eight subinterfaces.

  Note ¯ The PortMaster 4 supports Ethernet subinterfaces only on Ether0.

  Subinterfacing is essentially the segmenting of a single wire, or port, into multiple IP networks. Instead of subnetting and routing, you can create a subinterface and then set it up as you would a standard Ethernet interface. To avoid routing loops, however, you must be sure not to create two subinterfaces in the same TCP/IP network on the same port. Each Ethernet subinterface must have a unique network.

  A drawback to subinterfacing is that it supports static routing only; IPX, RIP, OSPF, packet filtering, and route propagation are not supported on subinterfaces.

  You must configure the primary Ethernet interface before adding subinterfaces. (See "Setting General Ethernet Parameters" on page 4-3 for details.) After you configure the primary Ethernet interface, follow this procedure to add a subinterface.

  1. Create a subinterface.

  Command> add subinterface Name

  This command adds an entry to the subinterface table, which you can then view with the show table subinterface  command. Remove a subinterface from the subinterface table with the delete subinterface  command.

  2. Associate the subinterface with a physical port.

  Command> set subinterface Name port Portlabel

  3. Assign an IP address or an IP address and netmask to the subinterface.

  Command> set subinterface Name Ipaddress [/NM]|[Ipaddress/NM]

  You can specify the netmask in the /NM or dotted decimal format. You can also configure the IP address and netmask separately (see the PortMaster 4 Command Line Reference for details).

  4. Set the broadcast for the interface.

  Command> set subinterface Name broadcast high|low

  5. Save the setting to nonvolatile RAM, and reset the interface.

  Command> save all
Command> reset slot10

  Because Ethernet subinterfaces are rebuilt every time a new subinterface is added, you can view but not modify an Ethernet subinterface using the ifconfig  command (see the PortMaster 4 Command Line Reference).

       Configuring Standalone Ethernet Boards

  This section assumes you have installed a standalone single-interface Ethernet board or a dual-interface Ethernet module as described in the PortMaster 4 Installation Guide.

       Interface Numbering

  The 10/100BaseT interfaces on a standalone Ethenet board or module have two-digit numbers that correspond to the slot in which they are installed and the Ethernet port (Ether0 or Ether1) for that board or module.

•  On a dual-interface Ethernet module, the interfaces are always numbered Ether30  and Ether31  because the module must be installed in slot 3.

    Although physically installed in slot 3, the Ether31 interface is monitored and reset through virtual slot 11.

•  On a single-interface Ethernet board, the interface can have any of the following numbers because this board can be installed in any slot except slot 4: ether00 , Ether10 , Ether20 , Ether30 , Ether50 , Ether60 , Ether70 , Ether80 , or Ether90 .

    Note ¯ The Ethernet interfaces on the manager module are always labeled Ether0 and Ether1.

       Before You Begin

  Before a standalone Ethernet board can function, you must configure an Ethernet interface on the manager module. Configure Ether1 (or Ether0--see "Overview of PortMaster 4 Ethernet Interfaces" on page 4-1) with an IP address and reset the slot of the Ethernet board to make configuration changes take effect. Because Ether1 is in logical slot 10, use the following command to reset the Ether1:

  Command> reset slot10

       Setting the View

  To configure a standalone Ethernet board, you must first set the view to the slot the board is installed in. If you are not sure what slot the boards resides in, use the show boards  command to locate it and to verify that it is properly installed. The ID number (the number in the far left column) is the same as the slot number.

  When you have determined the correct slot, set the view to that slot with the following command:

  Command> set view Slotnumber

  The dual-interface Ethernet module is always installed in slot 3.

  You can now configure the standalone Ethernet board as you would configure a regular Ethernet interface, being careful to replace Ether0 in each command with the appropriate Ethernet interface number (see "Interface Numbering" on page 4-8). See "Setting General Ethernet Parameters" on page 4-3 for configuration guidelines.

  Note ¯ Ether0 or Ether1 must be configured for the PortMaster 4 to function normally.

 

       IPCP Negotiation

  During PPP negotiations for the IP Control Protocol (IPCP), the PortMaster 4 uses the following order of precedence when choosing an IP address to identify itself:

  1. The local IP address configured in the user profile, if set

  2. The global reported IP address, if set

  3. The first global local IP address, if set

  4. The second global local IP address, if set

  5. The third global local IP address, if set

  6. The fourth global local IP address, if set

  7. The IP address of Ether1

  8. The IP address of Ether0

       Main IP Address

  When the PortMaster creates an IP packet, it must identify itself by placing a source address in the IP header. To do so, the PortMaster chooses either the main IP address or the nearest IP address, depending on the service used. The main IP address is chosen in the following order, but the nearest IP address is the IP address of the interface on which the packet exits the PortMaster 4:

  1. The first global local IP address, if set

  2. The second global local IP address, if set

  3. The third global local IP address, if set

  4. The fourth global local IP address, if set

  5. The IP address of Ether1

  6. The IP address of Ether0

  The following services use the main IP address:

•  syslog 
•  traceroute 
•  telnet 
•  DNS
•  RADIUS authentication and accounting
•  ChoiceNet

  The following services use the nearest IP address:

•  ping 
•  OSPF
•  RIP
•  rlogin 

  The global local IP address settings can be displayed with the show global  and show routes  commands.

  You specify the IP address that BGP uses with the set bgp peer  command. See the PortMaster 4 Command Line Reference for details. The source address you set with this command is the interface address BGP uses when forming its packets.

       Setting OSPF on an Ethernet Interface

  You can enable or disable Open Shortest Path First (OSPF) routing protocol on an Ethernet interface.

  To set OSPF on the interface, use the following command--entered all on one line:

  Command> set  Ether0 ospf  on |off  [cost  Number] [hello-interval  Seconds] [dead-time  Seconds]

  The on  keyword enables OSPF on the specified Ethernet interface; off  disables OSPF on that interface.

  You can specify the cost of sending a packet on the interface with a link state metric by using the cost  Number keyword and value. The Number metric is a 16-bit number between 1 and 65535; the default is 1. Refer to the PortMaster Routing Guide for more information about OSPF routing.

  Routers in OSPF networks continually exchange hello packets with their neighbor routers. You can set the interval that elapses between the transmission of hello packets on the interface by using the hello-interval  Seconds keyword and value. Seconds can range from 10 to 120 seconds; the default is 10 seconds.

  If the PortMaster stops receiving hello packets from a neighbor, it treats that router as inactive, or down. You can specify how long the PortMaster waits for hello packets from neighbors by using the dead-time  Seconds keyword and value. Seconds can range from 40 to 1200 seconds; the default is 40 seconds.

  Note ¯ You must set the same cost  value, the same hello-interval  value, and the same dead-time  value on all routers attached to a common network.

  To enable acceptance of RIP packets on the OSPF network, use the following command:

  Command> set  Ether0 ospf  accept-rip on |off 

  See the PortMaster Routing Guide for more information about OSPF.