FUJITSU Network SR-S　コマンド設定事例集

Transcription

1 SR-S P3NK Z0 FUJITSU Network SR-S V14

2 V Microsoft Corporation Copyright FUJITSU LIMITED

3 V VLAN VLAN VLAN VLAN LACP MLAG VLAN MAC MAC MAC VLAN MAC VLAN MAC QoS STP STP MSTP DHCP IGMP IEEE802.1X Web AAA AAA MAC ARP ether L ether L LAN IPv4 IPv RIP IPv

4 V14 23 RIP IPv RIP IPv OSPF IPv OSPF IPv OSPF LSA AS OSPF LSA OSPF IPv OSPF PIM-DM PIM-SM IP IPv ping DSCP VRRP ECMP DHCP DHCP DHCP DHCP IPv6 DHCP IPv6 DHCP DNS ProxyDNS DNS DNS DNS DNS URL URL

5 V14 36 SNMP IEEE802.1ad IEEE802.1ad IEEE802.1ad C-TAG IEEE802.1ah IEEE802.1ah IEEE802.1ah S-TAG IEEE802.1ah L LAN LAN LAN MAC MAC LAN LAN LAN

6 V14 PL PL configure # 6

7 V14 MicrosoftMS-DOSWindowsWindows NTWindows Server Windows Vista Microsoft Corporation Adobe Reader Adobe Systems Incorporated Netscape Netscape Communications Corporation UNIX Microsoft Windows XP Professional operating system Windows XP Microsoft Windows XP Home Edition operating system Microsoft Windows 2000 Server Network operating system Windows 2000 Microsoft Windows 2000 Professional operating system Microsoft Windows NT Server network operating system Version 4.0 Windows NT 4.0 Microsoft Windows NT Workstation operating system Version 4.0 Microsoft Windows Server 2003, Standard Edition Windows Server 2003 Microsoft Windows Server 2003 R2, Standard Edition Microsoft Windows Server 2003, Enterprise Edition Microsoft Windows Server 2003 R2, Enterprise Edition Microsoft Windows Server 2003, Datacenter Edition Microsoft Windows Server 2003 R2, Datacenter Edition Microsoft Windows Server 2003, Web Edition Microsoft Windows Server 2003, Standard x64 Edition Microsoft Windows Server 2003 R2, Standard Edition Microsoft Windows Server 2003, Enterprise x64 Edition Microsoft Windows Server 2003 R2, Enterprise x64 Edition Microsoft Windows Server 2003, Enterprise Edition for Itanium-based systems Microsoft Windows Server 2003, Datacenter x64 Edition Microsoft Windows Server 2003 R2, Datacenter x64 Edition Microsoft Windows Vista Ultimate operating system Windows Vista Microsoft Windows Vista Business operating system Microsoft Windows Vista Home Premium operating system Microsoft Windows Vista Home Basic operating system Microsoft Windows Vista Enterprise operating system Microsoft Windows 7 64bit Home Premium Windows 7 Microsoft Windows 7 32bit Professional 7

8 V14 Web Web Web MIB/Trap Web Web Web 8

9 V14 1 VLAN 1.1 VLAN VLAN SR-S324TC1/724TC1 VLAN HUB VLAN HUB / /24 VLAN ID 10 VLAN ID 20 ETHER15 VLAN HUB VLAN ID VLAN ID /24 VLAN ID /24 ETHER1 # ether 1 vlan untag 10 ETHER5 # ether 5 vlan untag /24 # lan 0 ip address /24 3 # lan 0 vlan /24 # lan 1 ip address /24 3 # lan 1 vlan 20 9 VLAN

10 V VLAN 1 2 VLAN VLAN SR-S324TC1/724TC1 VLAN HUB VLAN HUB VLAN ID 10 VLAN ID 20 VLAN ID 10 VLAN ID 20 ETHER15 VLAN HUB VLAN ID VLAN ID /24 VLAN ID /24 ETHER1 # ether 1 vlan tag 10,20 ETHER5 # ether 5 vlan tag 10, /24 # lan 0 ip address /24 3 # lan 0 vlan /24 # lan 1 ip address /24 3 # lan 1 vlan VLAN

11 V VLAN IP VLAN10 VLAN20 IP VLAN100 SR-S324TC1/724TC1 VLAN HUB VLAN HUB / /24 VLAN ID 10IP VLAN ID 20IP VLAN ID 100IP ETHER15 VLAN HUB VLAN ID VLAN ID /24 VLAN ID /24 VLAN ID100 ETHER1 # ether 1 vlan untag 10,100 ETHER5 # ether 5 vlan untag 20,100 VLAN1020 IPv4 VLAN # vlan 10 protocol ipv4 # vlan 20 protocol ipv /24 # lan 0 ip address /24 3 # lan 0 vlan /24 # lan 1 ip address /24 3 # lan 1 vlan VLAN

12 V M SR-S324TC1/724TC1 1 2 ETHER Mbps VLAN ID VLAN ID /24 VLAN ID /24 1 ETHER1 4 # ether 1-4 mode 1000 # ether 1-4 vlan tag 10,20 ETHER1 4 # ether 1-4 type linkaggregation /24 # lan 0 ip address /24 3 # lan 0 vlan /24 # lan 1 ip address /24 3 # lan 1 vlan 20 12

13 V14 2 ETHER1 4 # ether 1-4 mode 1000 # ether 1-4 vlan tag 10,20 ETHER1 4 # ether 1-4 type linkaggregation /24 # lan 0 ip address /24 3 # lan 0 vlan /24 # lan 1 ip address /24 3 # lan 1 vlan P LACP M LACP SR-S324TC1/724TC1 1 2 ETHER Mbps VLAN ID VLAN ID /24 VLAN ID /24 13

14 V14 1 ETHER1 4 # ether 1-4 mode 1000 # ether 1-4 vlan tag 10,20 ETHER1 4 # ether 1-4 type linkaggregation 1 1 LACP # linkaggregation 1 mode active /24 # lan 0 ip address /24 3 # lan 0 vlan /24 # lan 1 ip address /24 3 # lan 1 vlan 20 2 ETHER1 4 # ether 1-4 mode 1000 # ether 1-4 vlan tag 10,20 ETHER1 4 # ether 1-4 type linkaggregation 1 1 LACP # linkaggregation 1 mode active /24 # lan 0 ip address /24 3 # lan 0 vlan /24 # lan 1 ip address /24 3 # lan 1 vlan P LACP P.37 14

15 V14 3 MLAG SR-S324TC1, 328TR1, 348TC1 MLAG 2.8 MLAG P.38 SR-S328TR1 1 ID=1 MLAG ID= VLAN VLAN200 2 SR-S328TR1 MLAG SR-S324TL2 ID 1 1 ID 1 2 ID 2 ETHER VLAN100 4 VLAN200 1 MLAG # mlag mode enable # mlag id 1 # mlag peerlink 25,26 1 # ether 1-2 type linkaggregation 1 1 # ether 1-2 vlan tag # ether 3-4 type linkaggregation 2 3 # ether 3-4 vlan tag 200 STP # stp mode disable IP # lan 0 ip address /24 3 # lan 0 vlan 100 # lan 1 ip address /24 3 # lan 1 vlan MLAG

16 V14 # reset 2 MLAG # mlag mode enable # mlag id 2 # mlag peerlink 25,26 1 # ether 1-2 type linkaggregation 1 1 # ether 1-2 vlan tag # ether 3-4 type linkaggregation 2 3 # ether 3-4 vlan tag 200 STP # stp mode disable IP # lan 0 ip address /24 3 # lan 0 vlan 100 # lan 1 ip address /24 3 # lan 1 vlan 200 # reset 3 1 # ether type linkaggregation 1 21 # ether vlan tag 100 STP # stp mode disable IP # lan 0 ip address /24 3 # lan 0 vlan 100 # reset 16 MLAG

17 V # ether type linkaggregation 2 21 # ether vlan tag 200 STP # stp mode disable IP # lan 0 ip address /24 3 # lan 0 vlan 200 # reset 17 MLAG

18 V14 4 MAC 4.1 SR-S324TC1 ETHER21 ETHER22 SR-S324TC1 ETHER2122 ETHER21 ETHER22 FDB-table ETHER21 1 # ether 21 type backup 1 master ETHER22 1 # ether 22 type backup 1 backup 1 # backup 1 mode master # backup 1 notify mode fdb-table # backup 1 notify interval

19 V VLAN VLAN VLAN VLAN SR-S324TC1 SR-S324TL2 VLAN10,20 ETHER21 VLAN10,20 ETHER21 SR-S324TC1 ETHER8 VLAN10 ETHER23 SR-S324TL2 SR-S324TC1 ETHER8 VLAN20 ETHER24 Vlan-based STP VLAN 2 SR-S324TC1 SR-S324TL2 ETHER2324 ETHER23 ETHER24 VLAN VLAN10 VLAN20 MAC-flush MAC 00:aa:aa:aa:aa:aa MAC MAC 00:aa:aa:aa:aa:aa VLAN ETHER23 3VLAN10 # ether 23 type backup 3 master # ether 23 vlan tag 10 ETHER24 3VLAN20 # ether 24 type backup 3 backup # ether 24 vlan tag 20 3 VLAN # backup 3 mode vlan-based 19

20 V14 # backup 3 notify mode mac-flush # backup 3 notify interval # backup 3 notify mac 00:aa:aa:aa:aa:aa STP # stp mode disable ETHER8 SR-S324TL2 VLAN # ether 8 vlan tag 10,20 # ether 8 stp use off STP # stp mode disable MAC # mac flush 0 address 00:aa:aa:aa:aa:aa # mac flush 0 mode vlan 20

21 V14 5 MAC MAC ETHERNET VLAN IDCOS 2.12 MAC P.59 MAC ACL MAC VLAN - MAC MAC ETHERNET LSAP - MAC MAC ETHERNET LSAP - VLAN ID - COS - IP IP - IP IP - - TCPUDP - ICMP TYPEICMP CODE - IP TOS DSCP ETHER ETHER 21 MAC

22 V14 2 A. B. A MAC MAC B 5.1 MAC VLAN MAC SR-S310TL2/318TL2/324TL2/324PS1 MAC "resource filter distribution filter ipv4" MACIPv4 IP IPv4 MACIPv6 IP IPv6 IPv4 DSCP IPv4 IPv6 DSCP IPv6 VLAN 10 ETHER1 8 VLAN VLAN 20 ETHER1 4 ETHER9 12 VLAN ETHER1 4 ETHER9 12 ETHER2 VLAN 10 MAC 00:0b:01:02:03:04 VLAN ID 10 MAC 00:0b:01:02:03:04 ACL # acl 100 mac 00:0b:01:02:03:04 any any # acl 100 vlan 10 any VLAN ID 10 ACL # acl 110 vlan 10 any ETHER2 1 # ether 2 macfilter 0 pass 100 ETHER2 2 # ether 2 macfilter 1 reject MAC

23 V MAC VLAN MAC SR-S310TL2/318TL2/324TL2/324PS1 MAC "resource filter distribution filter ipv4" MACIPv4 IP IPv4 MACIPv6 IP IPv6 IPv4 DSCP IPv4 IPv6 DSCP IPv6 VLAN 10 ETHER1 8 VLAN VLAN 20 ETHER1 4 ETHER9 12 VLAN ETHER1 4 ETHER9 12 ETHER4 8 VLAN 10 MAC 00:0b:01:02:03:04 VLAN ID 10 MAC 00:0b:01:02:03:04 ACL # acl 120 mac any 00:0b:01:02:03:04 any # acl 120 vlan 10 any VLAN ID 10 ACL # acl 110 vlan 10 any ETHER4 8 1 # ether 4-8 macfilter 0 pass 120 ETHER4 8 2 # ether 4-8 macfilter 1 reject MAC

24 V VLAN SR-S310TL2/318TL2/324TL2/324PS1 MAC "resource filter distribution filter ipv4" MACIPv4 IP IPv4 MACIPv6 IP IPv6 IPv4 DSCP IPv4 IPv6 DSCP IPv6 VLAN 10 ETHER1 8 VLAN VLAN 20 ETHER1 4 ETHER9 12 VLAN ETHER1 4 ETHER9 12 ETHER1 4 IP SR-S324TC1 IP IP,ARP, Reverse ARP ACL # acl 130 mac any any ether 0800 # acl 131 mac any any ether 0806 # acl 132 mac any any ether 8035 ETHER1 4 1 # ether 1-4 macfilter 0 reject 130 # ether 1-4 macfilter 1 reject 131 # ether 1-4 macfilter 2 reject MAC

25 V VLAN MAC VLAN MAC SR-S310TL2/318TL2/324TL2/324PS1 MAC "resource filter distribution filter ipv4" MACIPv4 IP IPv4 MACIPv6 IP IPv6 IPv4 DSCP IPv4 IPv6 DSCP IPv6 VLAN10 ETHER1 4 ETHER5 8 VLAN VLAN20 ETHER1 4 ETHER5 8 VLAN VLAN10 MAC 00:0b:01:02:03:04 MAC 00:0b:11:12:13:14 TCP VLAN 20 MAC 00:0b:21:22:23:24 MAC 00:0b:31:32:33:34 UDP MAC 00:0b:01:02:03:04 MAC 00:0b:11:12:13:14 TCP ACL # acl 0 mac 00:0b:01:02:03:04 00:0b:11:12:13:14 any # acl 0 ip any any 6 any MAC 00:0b:11:12:13:14 MAC 00:0b:01:02:03:04 TCP ACL # acl 1 mac 00:0b:11:12:13:14 00:0b:01:02:03:04 any # acl 1 ip any any 6 any MAC 00:0b:21:22:23:24 MAC 00:0b:31:32:33:34 UDP ACL # acl 2 mac 00:0b:21:22:23:24 00:0b:31:32:33:34 any # acl 2 ip any any 17 any MAC 00:0b:31:32:33:34 MAC 00:0b:21:22:23:24 UDP ACL # acl 3 mac 00:0b:31:32:33:34 00:0b:21:22:23:24 any # acl 3 ip any any 17 any VLAN10 12 # vlan 10 macfilter 0 reject 0 # vlan 10 macfilter 1 reject 1 VLAN20 34 # vlan 20 macfilter 0 reject 2 # vlan 20 macfilter 1 reject 3 25 MAC

26 V VLAN VLAN SR-S310TL2/318TL2/324TL2/324PS1 MAC "resource filter distribution filter ipv4" MACIPv4 IP IPv4 MACIPv6 IP IPv6 IPv4 DSCP IPv4 IPv6 DSCP IPv6 VLAN10 ETHER1 4 ETHER5 8 VLAN VLAN20 ETHER1 4 ETHER5 8 VLAN VLAN10 IP VLAN 20 FNA IP IP, ARP, Reverse ARP ACL # acl 10 mac any any ether 0800 # acl 11 mac any any ether 0806 # acl 12 mac any any ether 8035 FNA ACL # acl 20 mac any any llc 8080 # acl 21 mac any any llc 0000 # acl 22 mac any any llc 0001 ACL # acl 30 mac any any any VLAN10 1 # vlan 10 macfilter 0 pass 10 # vlan 10 macfilter 1 pass 11 # vlan 10 macfilter 2 pass 12 # vlan 10 macfilter 3 reject 30 VLAN20 2 # vlan 20 macfilter 0 pass 20 # vlan 20 macfilter 1 pass 21 # vlan 20 macfilter 2 pass 22 # vlan 20 macfilter 3 reject MAC

27 V14 6 MAC MAC MAC FDB ETHER MAC SR-S324TC1/724TC1 ETHER2 ETHER5 ETHER VLAN10 VLAN20 ETHER25 12 VLAN 10 ETHER10 3 VLAN 20 1 MAC 00:00:00:00:00:11 2 MAC 00:00:00:00:00:22 3 MAC 00:00:00:00:00:33 ETHER25 VLAN10 # ether 2,5 vlan untag 10 ETHER10 VLAN20 # ether 10 vlan untag 20 VLAN10 MAC # vlan 10 forward 0 00:00:00:00:00:11 2 # vlan 10 forward 1 00:00:00:00:00:22 5 VLAN20 MAC # vlan 20 forward 0 00:00:00:00:00: MAC

28 V14 7 QoS 2.13 QoS P VLAN P.62 SR-S310TL2/318TL2/324TL2/324PS1 4 SR-S324TC1/328TR1/348TC1/724TC1/748TC1 8 SR-S310TL2/318TL2/324TL2/324PS1 CoS FAX #qos cosmap 0 0 #qos cosmap 1 1 #qos cosmap 2 1 #qos cosmap 3 2 #qos cosmap 4 2 #qos cosmap 5 3 #qos cosmap 6 3 #qos cosmap QoS

29 V14 SR-S324TC1/328TR1/348TC1/724TC1/748TC1 CoS FAX #qos cosmap 0 0 #qos cosmap 1 0 #qos cosmap 2 1 #qos cosmap 3 1 #qos cosmap 4 2 #qos cosmap 5 3 #qos cosmap 6 4 #qos cosmap QoS

30 V MAC ETHERNET VLAN IDCOS ETHER SR-S310TL2/318TL2/324TL2/324PS1 "resource filter distribution qos ipv4" MACIPv4 IP IPv4 MACIPv6 IP IPv6 IPv4 DSCP IPv4 IPv6 DSCP IPv6 ACL MAC VLAN - MAC MAC ETHERNET LSAP - MAC MAC ETHERNET LSAP - VLAN ID - COS - IP IP - IP IP - TCPUDP - ICMP TYPEICMP CODE - IP TOS DSCP ETHER ETHER - COS - COS ip precedence - DSCP - ip precedence - ip precedence COS - 30 QoS

31 V14 COS VLAN MAC COS VLAN 20 ETHER1 5 VLAN ETHER1 4 ETHER5 ETHER5 VLAN 20 MAC 00:0b:01:02:03:04 COS 5 VLAN ID 20 MAC 00:0b:01:02:03:04 ACL # acl 100 mac 00:0b:01:02:03:04 any any # acl 100 vlan 20 any ETHER5 1 COS 5 # ether 5 qos aclmap 0 cos COS ip precedence VLAN MAC COS ip precedence VLAN 10 ETHER1 8 VLAN ETHER1 VLAN 10 MAC 00:0b:01:02:03:04 COS ip precedence VLAN ID 10 MAC 00:0b:01:02:03:04 ACL # acl 110 mac any 00:0b:01:02:03:04 any # acl 110 vlan 10 any ETHER1 1 COS ip precedence # ether 1 qos aclmap 0 cos tos QoS

32 V14 DSCP VLAN DSCP VLAN 10 ETHER1 8 VLAN ETHER1 DSCP 40 ACL # acl 120 mac any any any ETHER1 1 DSCP 40 # ether 1 qos aclmap 0 dscp ip precedence VLAN COS ip precedence VLAN 10 ETHER1 8 VLAN VLAN 10 COS 5 ip precedence 6 VLAN ID 10 COS 5 ACL # acl 150 vlan 10 5 VLAN10 ETHER1 8 1 ip precedence 6 # ether 1-8 qos aclmap 0 tos QoS

33 V14 ip precedence COS VLAN VLAN ip precedence COS ETHER10 VLAN10VLAN20VLAN30 VLAN100 ETHER10 VLAN 20VLAN30VLAN100 ip precedence COS VLAN ID ACL # acl 100 vlan 20 any # acl 110 vlan 30 any # acl 120 vlan 100 any ETHER10 1 ip precedence COS # ether 10 qos aclmap 0 tos cos 100 # ether 10 qos aclmap 1 tos cos 110 # ether 10 qos aclmap 2 tos cos 120 VLAN VLAN MAC VLAN20 ETHER1 5 VLAN ETHER1 4 ETHER5 VLAN20 MAC 00:0b:01:02:03:04 3 MAC 00:0b:01:02:03:04 ACL # acl 100 mac 00:0b:01:02:03:04 any any VLAN201 # vlan 20 qos aclmap 0 queue QoS

34 V14 8 STP STP 8.1 STP STP STPP.43 SR-S324TC1/724TC1 ETHER2 ETHER1 STP ETHER12 VID 10 VLAN VLAN # ether 1 vlan untag 10 # ether 2 vlan untag 10 STP # ether 1 stp use on # ether 2 stp use on 34 STP

35 V MSTP VLAN STP LAN MSTP VLAN STP MSTPP.5 4 SR-S324TC1/724TC1 VLAN MSTP VLAN 1 2 1G M VLAN VLAN VLAN VLAN ETHER1 2 1G ETHER M ETHER12 STP STP

36 V14 2 ETHER1 1 1G ETHER M ETHER3 4 1G ETHER1 3 STP ETHER M ETHER M ETHER M ETHER1 3 STP ETHER1 2 1G ETHER M ETHER12 STP ETHER3 9 VID M ETHER10 14 VID M ETHER1516 VID M 1 MDI # ether 1,2 mdi mdix ETHER12 STP # ether 1-2 stp domain 0 cost # ether 1-2 stp domain 1 cost # ether 1-2 stp domain 2 cost ETHER12 # ether 1 mode 1000 # ether 2 mode 100 VLAN # ether 1-2 vlan tag 100,200,300 STP # stp mode mstp # stp domain 1 vlan 100,200 # stp domain 2 vlan 300 # stp domain 0 priority 4096 # stp domain 1 priority 4096 # stp domain 2 priority STP

37 V14 2 MDI # ether 1-3 mdi mdix ETHER1 3 STP # ether 1-3 stp domain 0 cost # ether 1-3 stp domain 1 cost # ether 1-3 stp domain 2 cost ETHER1 3 # ether 1 mode 1000 # ether 2 mode 100 # ether 3 mode 1000 VLAN # ether 1-3 vlan tag 100,200,300 STP # stp mode mstp # stp domain 1 vlan 100,200 # stp domain 2 vlan 300 # stp domain 0 priority 8192 # stp domain 1 priority 8192 # stp domain 2 priority MDI # ether 1-3 mdi mdix ETHER1 3 STP # ether 1-3 stp domain 0 cost # ether 1-3 stp domain 1 cost # ether 1-3 stp domain 2 cost ETHER1 3 # ether 1-3 mode 100 VLAN # ether 1-3 vlan tag 100,200,300 STP # stp mode mstp # stp domain 1 vlan 100,200 # stp domain 2 vlan 300 # stp domain 0 priority # stp domain 1 priority # stp domain 2 priority STP

38 V14 4 MDI # ether 1-16 mdi mdix ETHER12 STP # ether 1-2 stp domain 0 cost # ether 1-2 stp domain 1 cost # ether 1-2 stp domain 2 cost ETHER1 16 # ether 1 mode 1000 # ether 2-16 mode 100 VLAN # ether 1 vlan tag 100,200,300 # ether 2 vlan tag 100,200,300 # ether 3-9 vlan untag 100 # ether vlan untag 200 # ether 15,16 vlan untag 300 STP # stp mode mstp # stp domain 1 vlan 100,200 # stp domain 2 vlan 300 # stp domain 0 priority # stp domain 1 priority # stp domain 2 priority STP

39 V14 9 DHCP DHCP DHCP IP 2.14 DHCP P.68 IPv4 DHCP trusted VLAN IPv4 DHCP VLAN untrusted - IEEE802.1X Web MAC - - VLAN - VLAN DHCP clear dhcpsnoop DHCP DHCP DHCP DHCP DHCP IP DHCP DHCP

40 V14 VLAN10 DHCP ETHER ETHER1 DHCP IP ETHER5 ETHER11 DHCP IP DHCP # vlan 10 dhcpsnoop use on DHCP # ether 1 vlan untag 10 # ether 1 dhcpsnoop trust untrusted # ether 11 vlan untag 10 # ether 11 dhcpsnoop trust untrusted DHCP # ether 5 vlan untag 10 # ether 5 dhcpsnoop trust trusted 40 DHCP

41 V14 10 IGMP IGMP IGMP 2.15 IGMP P.69 lan IGMP IGMP IGMP 2 clear igmpsnoop group IGMP IGMPvlan igmpsnoop source IGMP Query vlan igmpsnoop source IGMP V1/V2vlan igmpsnoop proxy off IPv4IPv6 IGMP vlan igmpsnoop querier Querier IGMP

42 V14 IGMP 1 ETHER12 VLAN 10 2 ETHER34 VLAN 11 3 ETHER56 VLAN 12 1 VLAN VLAN10 12 ETHER15 2 VLAN10 ETHER16 IGMP # igmpsnoop use on # ether 1-2 vlan untag 10 # ether 3-4 vlan untag 11 # ether 5-6 vlan untag 12 # ether 15 vlan tag 10,11,12 # ether 16 vlan untag 10 VLAN10 # vlan 10 igmpsnoop router yes 15,16 42 IGMP

43 V14 11 IEEE802.1X IEEE802.1X VLAN ID 2.16 IEEE802.1X P.71 IEEE802.1X VLAN - WebWeb VLAN - VLAN VLAN IEEE802.1X AAA ID EAP-MD5 1Systemwalker Desktop Inspection 802.1X SR-S324TC1/724TC1 Supplicant-1 RADIUS Supplicant-2 Supplicant-3 ETHER1 ETHER10 ETHER11 ETHER2 ETHER12 ETHER5 ETHER3 ETHER4 VLAN ID 10 VLAN ID 11 VLAN ID 123 VLAN ID IEEE802.1X

44 V14 ETHER10 12 IEEE802.1X ETHER10 12 ETHER1011 RADIUS ETHER12 AAA ID ETHER1011 ETHER Supplicant MAC ETHER12 ID VLAN ID Supp1 Supp1-pass VLAN123 Supp2 Supp2-pass VLAN100 RADIUS IP RADIUS VLAN13 RADIUS radius-secret ETHER1011 RADIUS - Acct-Session-Time - Acct-Output-Packets - Acct-Input-Packets - Acct-Output-Octets - Acct-Input-Packets RADIUS VLAN ID RADIUS Tunnel-Type 64 VLAN13 Tunnel-Media-Type Tunnel-Private-Group-ID 81 VLAN ID10 ASCII 10 VLAN 44 IEEE802.1X

45 V14 IEEE802.1X # dot1x use on RADIUS VLAN # lan 0 vlan 13 # lan 0 ip address /16 3 RADIUS # ether 1 vlan untag 13 IEEE802.1X Supplicant VLAN # ether 2 vlan untag 10 # ether 3 vlan untag 11 # ether 4 vlan untag 100 # ether 5 vlan untag 123 IEEE802.1X # ether 10 dot1x use on # ether 10 dot1x aaa 0 # ether 11 dot1x use on # ether 11 dot1x aaa 0 # ether 12 dot1x use on # ether 12 dot1x aaa 1 RADIUS AAA # aaa 0 name radiusauth # aaa 0 radius service client both # aaa 0 radius auth source # aaa 0 radius client server-info auth secret radius-secret # aaa 0 radius client server-info auth address # aaa 0 radius client server-info account secret radius-secret # aaa 0 radius client server-info account address AAA # aaa 1 name localauth # aaa 1 user 0 id Supp1 # aaa 1 user 0 password Supp1-pass # aaa 1 user 0 supplicant vid 123 # aaa 1 user 1 id Supp2 # aaa 1 user 1 password Supp2-pass # aaa 1 user 1 supplicant vid IEEE802.1X

46 V14 12 Web Web 2.17 Web P.76 WebWeb VLAN VLAN VLAN VLAN VLAN VLAN VLAN VLAN IP IP 12.1 AAA SR-S724TC1 user0vlan ID 10 user1vlan ID 11 VLAN ID 10 IDuser0 pass0 ETHER10 ETHER2 ETHER11 ETHER3 VLAN ID 11 IDuser1 pass1 ETHER1011 Web AAA ID 1 ETHER1011 ETHER10 ETHER11 MAC MD5-CHAP VLAN VLAN ID 500 VLAN LAN0 IP /24 VLAN DHCP IP IP / DNS IP IP 46 Web

47 V14 HTTPS VLAN LAN0 IP /24 IP /32 VLAN ID 10 ETHER2 VLAN ID 11 ETHER3 user0 user1 AAA 1 user0 VLAN ID 10 user1 VLAN ID 11 IP # ip routing enable Web # webauth use on MD5-CHAP # webauth type chap_md5 VLAN VID 500 # lan 0 vlan 500 DHCP # lan 0 ip address /24 3 # lan 0 ip dhcp service server # lan 0 ip dhcp info dns # lan 0 ip dhcp info address / # lan 0 ip dhcp info time 10s # lan 0 ip webauth redirect enable # webauth protocol https IP # acl 0 ip / /32 any # lan 0 ip filter 0 pass acl 0 # acl 1 ip any /32 any # lan 0 ip filter 1 pass acl 1 # acl 2 ip any any any # lan 0 ip filter 2 reject acl 2 ETHER1011 STP # ether 10 stp use off # ether 11 stp use off ETHER1011 Web # ether 10 vlan untag 500 # ether 10 webauth use on # ether 10 webauth aaa 1 # ether 11 vlan untag 500 # ether 11 webauth use on 47 Web

48 V14 # ether 11 webauth aaa 1 # ether 11 webauth mode port Web VLAN ID ETHER # ether 2 vlan untag 10 # ether 3 vlan untag 11 LAN1 VLAN ID 100 # lan 1 vlan 100 # lan 1 ip address /24 3 LAN1 RIP # lan 1 ip rip use v2m v2 0 off RIP VLAN /24 # rip ip redist 0 reject /24 exact # rip ip redist 1 pass any AAA # aaa 1 name home # aaa 1 user 0 id user0 # aaa 1 user 0 password pass0 # aaa 1 user 0 supplicant vid 10 # aaa 1 user 1 id user1 # aaa 1 user 1 password pass1 # aaa 1 user 1 supplicant vid 11 # reset 48 Web

49 V AAA SR-S724TC1 user0vlan ID 10 user1vlan ID 11 IDuser0 pass0 ETHER10 RADIUS ETHER2 VLAN ID 10 ETHER11 ETHER3 VLAN ID 11 IDuser1 pass1 ETHER1011 Web AAA ID 1 ETHER1011 ETHER10 MAC ETHER11 RADIUS IP MD5-CHAP VLAN LAN0 IP /24 VLAN DHCP IP IP / DNS IP IP HTTPS VLAN LAN0 IP /24 IP /32 URL Web

50 V14 IP # ip routing enable Web # webauth use on MD5-CHAP # webauth type chap_md5 VLAN VID 500 # lan 0 vlan 500 DHCP # lan 0 ip address /24 3 # lan 0 ip dhcp service server # lan 0 ip dhcp info dns # lan 0 ip dhcp info address / # lan 0 ip dhcp info time 10s # lan 0 ip webauth redirect enable # webauth protocol https URL # webauth success redirect url # webauth success redirect time 15s IP # acl 0 ip / /32 any # lan 0 ip filter 0 pass acl 0 # acl 1 ip / /32 any # lan 0 ip filter 1 pass acl 1 # acl 2 ip any any any # lan 0 ip filter 2 reject acl 2 ETHER1011 STP # ether 10 stp use off # ether 11 stp use off ETHER1011 Web # ether 10 vlan untag 500 # ether 10 webauth use on # ether 10 webauth aaa 1 # ether 11 vlan untag 500 # ether 11 webauth use on # ether 11 webauth aaa 1 # ether 11 webauth mode port Web VLAN ID ETHER # ether 2 vlan untag 10 # ether 3 vlan untag Web

51 V14 LAN1 VLAN ID 100 # lan 1 vlan 100 # lan 1 ip address /24 3 LAN1 RIP # lan 1 ip rip use v2m v2 0 off RIP VLAN /24 # rip ip redist 0 reject /24 exact # rip ip redist 1 pass any AAA # aaa 1 name home # aaa 1 radius service client both # aaa 1 radius client server-info auth secret test # aaa 1 radius client server-info auth address # reset 51 Web

52 V webauthctl URL: FTP FTP IP FTP ID user-id FTP user-pass /webauth/login.html /webauth/logo.gif 12.1 AAA P AAA P.49 # webauth customize mode ftp FTP # webauth customize server address # webauth customize server user user-id # webauth customize server password user-pass # webauth customize page /webauth/login.html # webauth customize logo /webauth/logo.gif # reset 52 Web

53 V14 13 MAC MAC MAC VLAN - WebWeb VLAN - VLAN VLAN MAC AAA ID SR-S324TC1/724TC1 Supplicant-1 RADIUS Supplicant-2 Supplicant-3 ETHER1 ETHER10 ETHER11 ETHER2 ETHER12 ETHER5 ETHER3 ETHER4 VLAN ID 10 VLAN ID 11 VLAN ID 123 VLAN ID 100 ETHER10 12 MAC ETHER10 12 ETHER1011 RADIUS ETHER12 AAA ID ETHER1011 ETHER Supplicant MAC ETHER12 MAC VLAN ID 00:11:11:00:00:01 VLAN123 00:22:22:00:00:02 VLAN100 RADIUS IP RADIUS VLAN13 RADIUS radius-secret MD5-CHAP 53 MAC

54 V14 RADIUS VLAN ID RADIUS Tunnel-Type 64 VLAN13 Tunnel-Media-Type Tunnel-Private-Group-ID 81 VLAN ID10 ASCII 10 VLAN MAC # macauth use on MAC # macauth password macauth-pass MD5-CHAP # macauth type chap_md5 RADIUS VLAN # lan 0 vlan 13 # lan 0 ip address /16 3 RADIUS # ether 1 vlan untag 13 MAC Supplicant VLAN # ether 2 vlan untag 10 # ether 3 vlan untag 11 # ether 4 vlan untag 100 # ether 5 vlan untag 123 MAC # ether 10 macauth use on # ether 10 macauth aaa 0 # ether 11 macauth use on # ether 11 macauth aaa 0 # ether 12 macauth use on # ether 12 macauth aaa 1 RADIUS AAA # aaa 0 name radiusauth # aaa 0 radius service client auth # aaa 0 radius auth source # aaa 0 radius client server-info auth secret radius-secret # aaa 0 radius client server-info auth address MAC

55 V14 AAA # aaa 1 name localauth # aaa 1 user 0 id # aaa 1 user 0 password macauth-pass # aaa 1 user 0 supplicant vid 123 # aaa 1 user 1 id # aaa 1 user 1 password macauth-pass # aaa 1 user 1 supplicant vid MAC

56 V14 14 IEEE802.1X Web MAC online ether SR-S324TC1/724TC1 HUB ETHER5 7 ETHER56 ETHER7 ETHER56 ETHER

57 V14 # ether 5-7 mac detection use on # ether 7 mac detection max_user 6 # ether 5-6 mac detection portdisable yes 57

58 V14 15 ARP ARP ARP AAA ID VLAN ID 10 RADIUS ETHER1 ARP ETHER21 SR-S324TC1/724TC1 VLAN10 ARP ARP RADIUS AAA ID 0 RADIUS IP RADIUS VLAN20 RADIUS radius-secret ARP 10 RADIUS VLAN # lan 0 vlan 20 # lan 0 ip address /16 3 # ether 21 media metal RADIUS # ether 21 vlan untag 20 ARP VLAN # ether 1 vlan untag ARP

59 V14 ARP # vlan 10 arpauth use on # vlan 10 arpauth aaa 0 # vlan 10 arpauth obstruction enable 10s RADIUS AAA # aaa 0 name RADIUS # aaa 0 radius service client auth # aaa 0 radius auth source # aaa 0 radius client server-info auth 0 secret radius-secret # aaa 0 radius client server-info auth 0 address ARP

60 V # loopdetect use on # loopdetect portdisable yes # loopdetect interval 1m online ether STP 60

61 V14 17 ETHER1 ETHER8 ETHER1 ETHER8 ETHER1 ETHER8 ETHER8 # ether 8 type mirror 0 1 rx 61

62 V14 18 ether L3 ether L3 ETHER ether L3 SR-S324TC1/724TC1 online ether 1 2 ETHER1 ETHER1 ETHER1 VLAN ID VLAN ID /24 ether L3 1 ETHER1 # ether 1 vlan untag /24 # lan 0 ip address /24 3 # lan 0 vlan 1 IP # ether 1 icmpwatch address # ether 1 icmpwatch interval 15s 40s 5s 62 ether L3

63 V14 2 ETHER1 # ether 1 vlan untag /24 # lan 0 ip address /24 3 # lan 0 vlan ether L3 ether L3 SR-S324TC1/724TC1 ETHER Mbps VLAN ID VLAN ID /24 ether L3 1 ETHER1 4 # ether 1-4 mode 1000 # ether 1-4 vlan tag 10 ETHER1 4 # ether 1-4 type linkaggregation /24 # lan 0 ip address /24 3 # lan 0 vlan 10 IP # linkaggregation 1 icmpwatch address # linkaggregation 1 icmpwatch interval 15s 40s 5s 63 ether L3

64 V14 2 ETHER1 4 # ether 1-4 mode 1000 # ether 1-4 vlan tag 10 ETHER1 4 # ether 1-4 type linkaggregation /24 # lan 0 ip address /24 3 # lan 0 vlan ether L3

65 V14 19 online ether ETHER116 ETHER1 ETHER16 2 ETHER116 ETHER1 ETHER16 65

66 V14 1 ETHER1 # ether 1 recovery limit 5 ETHER1 1 # ether 1 type backup 1 master ETHER16 1 # ether 16 type backup 1 backup 1 # backup 1 mode master 2 ETHER1 # ether 1 recovery limit 5 ETHER1 1 # ether 1 type backup 1 master ETHER16 1 # ether 16 type backup 1 backup 1 # backup 1 mode master 66

67 V14 20 LAN SR-S724TC1, 748TC1 LAN-B LAN-A 3 P.24 SR-S724TC1 LAN-A LAN-B internet LAN-C LAN LAN / / /24 LAN-A VLAN LAN1 IP /24 DHCP LAN-B VLAN LAN0 IP /24 DHCP RIP-V IP IP LAN

68 V14 LAN-C /24 TIME TIME SNTP TIME RFC868SNTPSimple Network Time ProtocolRFC1361RFC1769 NTPNetwork Time Protocol IP IP # ip routing enable VLAN # ether 1 vlan untag 10 # ether 2 vlan untag 20 # lan 0 vlan 10 # lan 1 vlan 20 LAN0 # lan 0 ip address /24 3 # lan 0 ip dhcp service off # lan 0 ip route / # lan 0 ip route 1 default # lan 0 ip rip use v1 v1 0 off LAN1 # lan 1 ip address /24 3 # lan 1 ip dhcp service server # lan 1 ip dhcp info dns # lan 1 ip dhcp info address / # lan 1 ip dhcp info time 1d # lan 1 ip dhcp info gateway # time auto server time # time auto interval start # reset 68 LAN

69 V14 21 IPv4 IPv6 SR-S724TC1, 748TC1 IPv4 IPv6 LAN-A100Mbps LAN-B100Mbps LAN1 LAN IPv6 2001:db8:1111:1001::/64 IPv6 2001:db8:1111:1000::/64 LAN-A 2001:db8:1111:1001::/64 RA VLAN LAN-B 2001:db8:1111:1000::/64 RA VLAN IPv4 IPv6 ether VLAN IPv6 69 IPv4 IPv6

70 V14 IPv6 # ip6 routing enable LAN0 # lan 0 ip6 use on # lan 0 ip6 address :db8:1111:1000::/64 # lan 0 ip6 ra prefix :db8:1111:1000::/64 30d 7d c0 # lan 0 ip6 ra mode send LAN1 # lan 1 ip6 use on # lan 1 ip6 address :db8:1111:1001::/64 # lan 1 ip6 ra prefix :db8:1111:1001::/64 30d 7d c0 # lan 1 ip6 ra mode send # reset 70 IPv4 IPv6

71 V14 22 RIP IPv4 SR-S724TC1, 748TC1 RIPv /24 3 RIP LAN /24 LAN /24 RIP LAN /24 LAN / / /24 IP IP LAN0RIP LAN1 RIPv2 LAN2 RIPv2 LAN3 2 RIP 71 RIP IPv4

72 V14 RIP # lan 1 ip rip use v2m v2 0 off # lan 2 ip rip use v2m v2 0 off 2 # lan 3 ip route / RIP # routemanage ip redist rip connected on # routemanage ip redist rip static on RIP RIP - rip ip neighbor - RIP lan ip rip use RIP RIP RIP RIP 1 - RIP rip ip multipath RIP RIP ECMP RIP RIP RIP RIP 243 RIP RIP 25 RIP RIP RIP RIP 243 RIP 243 show ip traffic udpdropped due to full socket buffers 72 RIP IPv4

73 V14 23 RIP IPv4 SR-S724TC1, 748TC1 IP RIP IP 0 any 1 16 RIP IP IP IP IP / / /24 IP IP / / /24 RIPv1 lan 0 ip address / /8 73 RIP IPv4

74 V14 2 A. B. A B RIP RIP RIP RIP 74 RIP IPv4

75 V SR-S724TC1, 748TC1 LAN0 default default IP RIPv2 IP # lan 0 ip rip filter 0 act pass out # lan 0 ip rip filter 0 route default # lan 0 ip rip filter 1 act reject out # lan 0 ip rip filter 1 route any 75 RIP IPv4

76 V SR-S724TC1, 748TC / / / / / /24 2 LAN / / /24 3 IP RIPv2 IP / / /24 1 # lan 1 ip rip filter 0 act pass out # lan 1 ip rip filter 0 route /24 # lan 1 ip rip filter 0 set metric 1 # lan 1 ip rip filter 1 act pass out # lan 1 ip rip filter 1 route any RIP RIP IPv4

77 V SR-S724TC1, 748TC1 LAN0 default default IP RIPv2 IP # lan 0 ip rip filter 0 act pass in # lan 0 ip rip filter 0 route default # lan 0 ip rip filter 1 act reject in # lan 0 ip rip filter 1 route any 77 RIP IPv4

78 V SR-S724TC1, 748TC / LAN / /24 1 LAN / / IP RIPv2 IP / /24 5 LAN /24 1 # lan 0 ip rip filter 0 act pass in # lan 0 ip rip filter 0 route /24 # lan 0 ip rip filter 0 set metric 1 LAN0 # lan 0 ip rip filter 1 act pass in # lan 0 ip rip filter 1 route any lan /24 5 # lan 1 ip rip filter 0 act pass in # lan 1 ip rip filter 0 route /24 # lan 1 ip rip filter 0 set metric 5 lan1 # lan 1 ip rip filter 1 act pass in # lan 1 ip rip filter 1 route any RIP IPv4

79 V SR-S724TC1, 748TC /24 LAN /24 IP RIPv2 IP / /24 # lan 0 ip rip filter 0 act reject out # lan 0 ip rip filter 0 route /24 # lan 0 ip rip filter 1 act pass out # lan 0 ip rip filter 1 route any 79 RIP IPv4

80 V SR-S724TC1, 748TC / /24 LAN0 IP RIPv2 IP / /24 # lan 0 ip rip filter 0 act reject in # lan 0 ip rip filter 0 route /24 # lan 0 ip rip filter 1 act pass in # lan 0 ip rip filter 1 route any 80 RIP IPv4

81 V14 24 RIP IPv6 SR-S724TC1, 748TC1 RIPIPv6 0 any 1 16 RIP 2001:db8:1111::/ :db8:1111::/ :db8:1111::/ :db8::/ :db8::/ :db8:1111::/32 81 RIP IPv6

82 V14 2 A. B. A B RIP RIP RIP RIP 82 RIP IPv6

83 V SR-S724TC1, 748TC1 LAN0 default default IPv6 RIPIPv6 IPv6 # lan 0 ip6 rip filter 0 act pass out # lan 0 ip6 rip filter 0 route default # lan 0 ip6 rip filter 1 act reject out # lan 0 ip6 rip filter 1 route any 83 RIP IPv6

84 V SR-S724TC1, 748TC :db8:1111::/ :db8:1111::/ :db8:2222::/ :db8:1111::/ :db8:1111::/ LAN1 2001:db8:1111::/ :db8:2222::/ :db8:2222::/ :db8:2222::/64 3 IPv6 RIPIPv6 IPv6 2001:db8:1111::/ :db8:1111::/ :db8:1111::/64 1 # lan 1 ip6 rip filter 0 act pass out # lan 1 ip6 rip filter 0 route 2001:db8:1111::/64 # lan 1 ip6 rip filter 0 set metric 1 # lan 1 ip6 rip filter 1 act pass out # lan 1 ip6 rip filter 1 route any RIP RIP IPv6

85 V SR-S724TC1, 748TC1 LAN0 default default IPv6 RIPIPv6 IPv6 # lan 0 ip6 rip filter 0 act pass in # lan 0 ip6 rip filter 0 route default # lan 0 ip6 rip filter 1 act reject in # lan 0 ip6 rip filter 1 route any 85 RIP IPv6

86 V SR-S724TC1, 748TC :db8:1111::/ LAN0 2001:db8:1111::/ :db8:1111::/64 1 LAN1 2001:db8:1111::/ :db8.1111::/ IPv6 RIPIPv6 IPv :db8:1111::/ :db8:1111::/64 5 LAN0 2001:db8:1111::/64 1 # lan 0 ip6 rip filter 0 act pass in # lan 0 ip6 rip filter 0 route 2001:db8:1111::/64 # lan 0 ip6 rip filter 0 set metric 1 LAN0 # lan 0 ip6 rip filter 1 act pass in # lan 0 ip6 rip filter 1 route any lan1 2001:db8:1111::/64 5 # lan 1 ip6 rip filter 0 act pass in # lan 1 ip6 rip filter 0 route 2001:db8:1111::/64 # lan 1 ip6 rip filter 0 set metric 5 lan1 # lan 1 ip6 rip filter 1 act pass in # lan 1 ip6 rip filter 1 route any 86 RIP IPv6

87 V RIP IPv6

88 V SR-S724TC1, 748TC1 2001:db8:1111::/64 LAN0 2001:db8:1111::/64 IPv6 RIPIPv6 IPv6 2001:db8:1111::/ :db8:1111::/64 # lan 0 ip6 rip filter 0 act reject out # lan 0 ip6 rip filter 0 route 2001:db8:1111::/64 # lan 0 ip6 rip filter 1 act pass out # lan 0 ip6 rip filter 1 route any 88 RIP IPv6

89 V SR-S724TC1, 748TC1 2001:db8:1111::/ :db8:1111::/64 LAN0 IPv6 RIPIPv6 IPv6 2001:db8:1111::/ :db8:1111::/64 # lan 0 ip6 rip filter 0 act reject in # lan 0 ip6 rip filter 0 route 2001:db8:1111::/64 # lan 0 ip6 rip filter 1 act pass in # lan 0 ip6 rip filter 1 route any 89 RIP IPv6

90 V14 25 OSPF IPv4 SR-S724TC1, 748TC1 OSPFv2 OSPF ID ID ID 2.31 OSPF P.103 OSPF IP IP OSPF 50 2 Designated Router OSPF MTU OSPF OSPF LSA LSDB LSA LSA commit / reset 60 OSPF commit LSA MaxAge OSPF OSPF DR DR LSA LSA ID LAN LAN LAN LAN LAN LAN LAN LAN LAN LAN LAN LAN1 ID ID OSPF IPv4

91 V14 IP IP 1 LAN0 OSPF LAN1 OSPF LAN0 OSPF ID LAN1 OSPF ID LAN /16 2 LAN0 OSPF LAN1 OSPF LAN0 OSPF ID LAN1 OSPF ID LAN0 1 LAN1 passive-interface 3 LAN0 OSPF LAN1 OSPF LAN0 OSPF ID LAN1 OSPF ID LAN0 255 LAN1 passive-interface 4 LAN0 OSPF LAN1 OSPF LAN0 OSPF ID LAN1 OSPF ID LAN0 1 LAN1 passive-interface 5 LAN0 OSPF LAN1 OSPF LAN0 OSPF ID LAN1 OSPF ID /16 6 LAN0 OSPF LAN1 OSPF 91 OSPF IPv4

92 V14 LAN0 OSPF ID LAN1 OSPF ID LAN1 passive-interface 1 LAN # lan 0 ip ospf use on 0 # lan 1 ip ospf use on 1 # lan 1 ip ospf priority 0 OSPF # ospf ip area 0 id # ospf ip area 1 id # ospf ip area 1 range /16 2 LAN # lan 0 ip ospf use on 0 # lan 0 ip ospf priority 1 # lan 1 ip ospf use on 0 # lan 1 ip ospf passive on OSPF # ospf ip area 0 id OSPF IPv4

93 V14 3 LAN # lan 0 ip ospf use on 0 # lan 0 ip ospf priority 255 # lan 1 ip ospf use on 0 # lan 1 ip ospf passive on OSPF # ospf ip area 0 id LAN # lan 0 ip ospf use on 0 # lan 0 ip ospf priority 1 # lan 1 ip ospf use on 0 # lan 1 ip ospf passive on OSPF # ospf ip area 0 id LAN # lan 0 ip ospf use on 0 # lan 1 ip ospf use on 1 OSPF # ospf ip area 0 id # ospf ip area 1 id # ospf ip area 1 range /16 93 OSPF IPv4

94 V14 6 LAN # lan 0 ip ospf use on 0 # lan 1 ip ospf use on 0 # lan 1 ip ospf passive on OSPF # ospf ip area 0 id OSPF IPv4

95 V SR-S724TC1, 748TC1 OSPF ID OSPF ID ID LAN LAN LAN LAN LAN0 2 LAN1 ID LAN0 4 ID LAN LAN0 5 LAN1 ID IP IP 1 LAN0 OSPF LAN1 OSPF LAN0 OSPF ID LAN1 OSPF ID LAN0 OSPF LAN1 OSPF LAN0 OSPF ID LAN1 OSPF ID OSPF IPv4

96 V14 3 LAN0 OSPF LAN1 OSPF LAN0 OSPF ID LAN1 OSPF ID OSPF ID OSPF ID LAN0 OSPF LAN1 OSPF LAN0 OSPF ID LAN1 OSPF ID OSPF ID OSPF ID LAN0 OSPF LAN1 OSPF LAN0 OSPF ID LAN1 OSPF ID LAN # lan 0 ip ospf use on 0 # lan 1 ip ospf use on 1 OSPF # ospf ip area 0 id # ospf ip area 1 id OSPF IPv4

97 V14 2 LAN # lan 0 ip ospf use on 0 # lan 1 ip ospf use on 0 OSPF # ospf ip area 0 id LAN # lan 0 ip ospf use on 0 # lan 1 ip ospf use on 1 OSPF # ospf ip id # ospf ip area 0 id # ospf ip area 1 id # ospf ip area 1 vlink 0 id LAN # lan 0 ip ospf use on 0 # lan 1 ip ospf use on 1 OSPF # ospf ip id # ospf ip area 0 id # ospf ip area 0 vlink 0 id # ospf ip area 1 id OSPF IPv4

98 V14 5 LAN # lan 0 ip ospf use on 0 # lan 1 ip ospf use on 0 OSPF # ospf ip area 0 id OSPF IPv4

99 V SR-S724TC1, 748TC1 OSPF OSPF RIP OSPF OSPF RIP OSPF OSPF OSPF NSSA OSPF OSPF OSPF ID LAN LAN LAN LAN LAN LAN0 ID LAN LAN1 RIPv2 ID IP IP 1 LAN0 OSPF LAN1 OSPF LAN0 OSPF ID LAN1 OSPF ID ID stub 2 LAN0 OSPF LAN1 OSPF LAN0 OSPF ID LAN1 OSPF ID ID stub 99 OSPF IPv4

100 V14 3 LAN0 OSPF LAN1 OSPF LAN0 OSPF ID LAN1 OSPF ID ID nssa 4 LAN0 OSPF LAN1 RIP V2,OSPF LAN0 OSPF ID LAN1 passive-interface ID nssa OSPF RIP RIP OSPF 1 LAN # lan 0 ip ospf use on 0 # lan 1 ip ospf use on 1 OSPF # ospf ip area 0 id # ospf ip area 1 id # ospf ip area 1 type stub 2 LAN # lan 0 ip ospf use on 0 # lan 1 ip ospf use on 0 OSPF # ospf ip area 0 id # ospf ip area 0 type stub 100 OSPF IPv4

101 V14 3 LAN # lan 0 ip ospf use on 0 # lan 1 ip ospf use on 1 OSPF # ospf ip area 0 id # ospf ip area 1 id # ospf ip area 1 type nssa 4 LAN # lan 0 ip ospf use on 0 # lan 1 ip rip use v2m v2 0 off # lan 1 ip ospf use on 0 # lan 1 ip ospf passive on # routemanage ip redist ospf rip on # routemanage ip redist rip ospf on OSPF # ospf ip area 0 id # ospf ip area 0 type nssa 101 OSPF IPv4

102 V14 26 OSPF IPv4 SR-S724TC1, 748TC1 LSA 26.1 OSPF LSA SR-S724TC1, 748TC1 LSA 0ID LAN0 LAN / /24 LAN0 LAN0 LAN0 LAN1 LAN1 LAN / / /24 1ID LSA IP IP LSA LAN0 OSPF LAN1 OSPF LAN0 ID LAN1 ID / OSPF IPv4

103 V14 OSPF # lan 0 ip ospf use on 0 # lan 1 ip ospf use on 1 # ospf ip area 0 id # ospf ip area 1 id # ospf ip area 1 range / OSPF IPv4

104 V AS OSPF SR-S724TC1, 748TC1 AS OSPF AS AS /24 VPN RIP RIP LAN0 LAN1 AS / /24 0ID AS IP IPv6 LAN1 RIPv2 IP ASAS OSPF AS LAN0 OSPF LAN0 ID /16 OSPF RIP / OSPF IPv4

105 V14 OSPF # lan 0 ip ospf use on 0 # ospf ip area 0 id OSPF AS # routemanage ip redist ospf rip on # ospf ip summary /16 AS # ospf ip redist 0 pass /16 inexact # ospf ip redist 1 reject any 105 OSPF IPv4

106 V LSA SR-S724TC1, 748TC1 TYPE3 LSA 0ID LAN0 LAN1 LAN /8 LAN1 LAN0 LAN0 LAN0 LAN1 LAN1 LAN / /8 1ID ID LSA IP IP / /8 LAN0 OSPF LAN1 OSPF LAN0 ID LAN1 ID /8 LSA OSPF # lan 0 ip ospf use on 0 # lan 1 ip ospf use on 1 # ospf ip area 0 id # ospf ip area 1 id # ospf ip area 1 type3-lsa 0 reject /8 in exact # ospf ip area 1 type3-lsa 1 pass any in 106 OSPF IPv4

107 V OSPF IPv4

108 V14 27 OSPF IPv6 SR-S724TC1, 748TC OSPF SR-S724TC1, 748TC1 OSPFIPv DRDesignated Router LAN OSPF MTU OSPF OSPF LSA LSDB LSA LSA commit/reset 60 OSPF DR DR LSA LSA LAN0 1 LAN0 2 LAN2 LAN1 LAN1 1 OSPF 2001:db8:10::/ :db8:20::/64 12 IPv6 lan ip6 use on 12 IPv6 1 LAN1 1 LAN2 OSPF 1 OSPF AS OSPF IPv6

109 V14 ID : : : LAN0 LAN1Passive-interface OSPF OSPF ID OSPF 2 LAN0 255 LAN1 OSPF ID LAN # lan 0 ip6 ospf use on 0 # lan 1 ip6 ospf use on 1 # lan 1 ip6 ospf passive on OSPF # ospf ip6 id # ospf ip6 area 0 id # ospf ip6 area 1 id # routemanage ip6 redist ospf static on 2 LAN # lan 0 ip6 ospf use on 0 # lan 0 ip6 ospf priority 255 # lan 1 ip6 ospf use on 1 OSPF # ospf ip6 id # ospf ip6 area 0 id # ospf ip6 area 1 id OSPF IPv6

110 V14 # ospf ip6 area 1 type stub 27.2 SR-S724TC1, 748TC1 LAN0 1 LAN1 LAN2 2001:db8:10::/ :db8:20::/64 IPv6 lan ip6 use on IPv6 1 LAN0LAN1LAN2 OSPF OSPF ID ID 1 : : IP LAN1 : 2001:db8:10::1/64 LAN2 : 2001:db8:20::1/ :db8:10::/642001:db8:20::/642001:db8::/ OSPF # ospf ip6 area 1 range :db8::/ OSPF IPv6

111 V SR-S724TC1, 748TC1 LSA LAN0 1 LAN1 LAN2 2001:db8:10::/ :db8:20::/64 IPv6 lan ip6 use on IPv6 1 LAN0LAN1LAN2 OSPF OSPF ID ID 1 : : IP LAN1 : 2001:db8:10::1/64 LAN2 : 2001:db8:20::1/ :db8:20::/64 OSPF # ospf ip6 area 1 inter-area-prefix 0 reject 2001:db8:20::/64 out # ospf ip6 area 1 inter-area-prefix 1 pass any out 111 OSPF IPv6

112 V14 28 SR-S724TC1, 748TC1 2 PIM-DM PIM-SM 2.34 P PIM-DM SR-S724TC1, 748TC1 PIM-DM LAN PIM-DM /24 1 LAN1ETHER / LAN0ETHER /24 LAN2ETHER /24 LAN1ETHER /24 LAN1ETHER /24 LAN0ETHER /24 LAN0ETHER /24 PIM-DM 112

113 V14 PIM-DM 1 LAN0LAN1LAN2 ETHER1ETHER2ETHER3 RIP LAN0 IP /24 LAN1 IP /24 LAN2 IP /24 2 LAN0LAN1 ETHER1 ETHER2 RIP LAN0 IP /24 LAN1 IP /24 3 LAN0LAN1 ETHER1 ETHER2 RIP LAN0 IP /24 LAN1 IP /24 1 ETHER # delete ether LAN # delete lan ETHER1 3 # ether 1 vlan untag 1 # ether 2 vlan untag 2 # ether 3 vlan untag /24 # lan 0 vlan 1 # lan 0 ip address /24 3 # lan 0 ip multicast mode pimdm /24 # lan 1 vlan 2 # lan 1 ip address /24 3 # lan 1 ip rip use v2 v2 0 on # lan 1 ip multicast mode pimdm /24 # lan 2 vlan 3 113

114 V14 # lan 2 ip address /24 3 # lan 2 ip rip use v2 v2 0 on # lan 2 ip multicast mode pimdm 2 ETHER # delete ether LAN # delete lan ETHER12 # ether 1 vlan untag 1 # ether 2 vlan untag /24 # lan 0 vlan 1 # lan 0 ip address /24 3 # lan 0 ip multicast mode pimdm /24 # lan 1 vlan 2 # lan 1 ip address /24 3 # lan 1 ip rip use v2 v2 0 on # lan 1 ip multicast mode pimdm 3 ETHER # delete ether LAN # delete lan ETHER12 # ether 1 vlan untag 1 # ether 2 vlan untag /24 # lan 0 vlan 1 # lan 0 ip address /24 3 # lan 0 ip multicast mode pimdm /24 # lan 1 vlan 2 # lan 1 ip address /24 3 # lan 1 ip rip use v2 v2 0 on # lan 1 ip multicast mode pimdm 114

115 V PIM-SM SR-S724TC1, 748TC1 PIM-SM PIM-SM BSRBootstrap Router 1 BSR RPRendezvous Point RP 1 RP SPT Shortest Path Tree PIM-SMRP RP PIM-SM 1 LAN0ETHER /24 LAN1ETHER /24 LAN2ETHER /24 LAN0ETHER /24 LAN1ETHER /24 RP BSR PIM-SM LAN0ETHER1 LAN1ETHER / /24 LAN2ETHER /24 PIM-SM LAN3ETHER /24 PIM-SM LAN1ETHER /24 LAN0ETHER /24 LAN1ETHER /24 PIM-SM LAN0ETHER /24 PIM-SM 115

116 V14 RP SPT PIM-SM RIP RP BSR SPT 1 LAN0LAN1LAN2 ETHER1ETHER2ETHER3 LAN0 IP /24 LAN1 IP /24 LAN2 IP /24 2 LAN0LAN1 ETHER1 ETHER2 LAN0 IP /24 LAN1 IP /24 RP BSR LAN0LAN1LAN2LAN3 ETHER1ETHER2ETHER3ETHER4 LAN0 IP /24 LAN1 IP /24 LAN2 IP /24 LAN3 IP /24 4 LAN0LAN1 ETHER1 ETHER2 LAN0 IP /24 LAN1 IP /24 5 LAN0LAN1 ETHER1 ETHER2 LAN0 IP /24 LAN1 IP /24 116

117 V14 1 ETHER # delete ether LAN # delete lan ETHER1 3 # ether 1 vlan untag 1 # ether 2 vlan untag 2 # ether 3 vlan untag /24 # lan 0 vlan 1 # lan 0 ip address /24 3 # lan 0 ip multicast mode pimsm /24 # lan 1 vlan 2 # lan 1 ip address /24 3 # lan 1 ip rip use v2 v2 0 on # lan 1 ip multicast mode pimsm /24 # lan 2 vlan 3 # lan 2 ip address /24 3 # lan 2 ip rip use v2 v2 0 on # lan 2 ip multicast mode pimsm 117

118 V14 2 ETHER # delete ether LAN # delete lan ETHER12 # ether 1 vlan untag 1 # ether 2 vlan untag /24 # lan 0 vlan 1 # lan 0 ip address /24 3 # lan 0 ip rip use v2 v2 0 on # lan 0 ip multicast mode pimsm /24 # lan 1 vlan 2 # lan 1 ip address /24 3 # lan 1 ip rip use v2 v2 0 on # lan 1 ip multicast mode pimsm # multicast ip pimsm candrp mode on # multicast ip pimsm candrp address # multicast ip pimsm candbsr mode on # multicast ip pimsm candbsr address ETHER # delete ether LAN # delete lan ETHER1 4 # ether 1 vlan untag 1 # ether 2 vlan untag 2 # ether 3 vlan untag 3 # ether 4 vlan untag /24 # lan 0 vlan 1 # lan 0 ip address /24 3 # lan 0 ip rip use v2 v2 0 on # lan 0 ip multicast mode pimsm /24 # lan 1 vlan 2 # lan 1 ip address /24 3 # lan 1 ip rip use v2 v2 0 on # lan 1 ip multicast mode pimsm 118

119 V /24 # lan 2 vlan 3 # lan 2 ip address /24 3 # lan 2 ip rip use v2 v2 0 on # lan 2 ip multicast mode pimsm /24 # lan 3 vlan 4 # lan 3 ip address /24 3 # lan 3 ip rip use v2 v2 0 on # lan 3 ip multicast mode pimsm 4 ETHER # delete ether LAN # delete lan ETHER12 # ether 1 vlan untag 1 # ether 2 vlan untag /24 # lan 0 vlan 1 # lan 0 ip address /24 3 # lan 0 ip multicast mode pimsm /24 # lan 1 vlan 2 # lan 1 ip address /24 3 # lan 1 ip rip use v2 v2 0 on # lan 1 ip multicast mode pimsm 5 ETHER # delete ether LAN # delete lan ETHER12 # ether 1 vlan untag 1 # ether 2 vlan untag /24 # lan 0 vlan 1 # lan 0 ip address /24 3 # lan 0 ip multicast mode pimsm /24 # lan 1 vlan 2 119

120 V14 # lan 1 ip address /24 3 # lan 1 ip rip use v2 v2 0 on # lan 1 ip multicast mode pimsm 120

121 V SR-S724TC1, 748TC /24 1 LAN1ETHER / LAN0ETHER /24 LAN2ETHER /24 LAN1ETHER /24 LAN1ETHER /24 LAN0ETHER /24 LAN0ETHER / LAN0LAN1LAN2 ETHER1ETHER2ETHER3 LAN0 IP /24 LAN1 IP /24 LAN2 IP /24 2 LAN0LAN1 ETHER1 ETHER2 LAN0 IP /24 LAN1 IP /24 121

122 V14 3 LAN0, LAN1 ETHER1 ETHER2 LAN0 IP /24 LAN1 IP /24 1 ETHER # delete ether LAN # delete lan ETHER1 3 # ether 1 vlan untag 1 # ether 2 vlan untag 2 # ether 3 vlan untag /24 # lan 0 vlan 1 # lan 0 ip address /24 3 # lan 0 ip multicast mode static /24 # lan 1 vlan 2 # lan 1 ip address /24 3 # lan 1 ip multicast mode static /24 # lan 2 vlan 3 # lan 2 ip address /24 3 # lan 2 ip multicast mode static # multicast ip route lan0 lan1-lan2 122

123 V14 2 ETHER # delete ether LAN # delete lan ETHER12 # ether 1 vlan untag 1 # ether 2 vlan untag /24 # lan 0 vlan 1 # lan 0 ip address /24 3 # lan 0 ip multicast mode static /24 # lan 1 vlan 2 # lan 1 ip address /24 3 # lan 1 ip multicast mode static # multicast ip route lan1 lan0 3 ETHER # delete ether LAN # delete lan ETHER12 # ether 1 vlan untag 1 # ether 2 vlan untag /24 # lan 0 vlan 1 # lan 0 ip address /24 3 # lan 0 ip multicast mode static /24 # lan 1 vlan 2 # lan 1 ip address /24 3 # lan 1 ip multicast mode static # multicast ip route lan1 lan0 123

124 V14 29 IP IP 2.35 IP P.110 IP Internet IP ACL ACL IP IP IP TOS DSCP IP IP IP IP IP 124 IP

125 V14 IP IP 2 A. B. A B ping IP DHCP 6768DHCP IP 125 IP

126 V LAN LAN Web FTP Web DNS DNS DNS DNS Web DNS Web DNS DNS SR-S310TL2/318TL2/324TL2/324PS1 IP IPv4"resource filter distribution filter ipv4" MACIPv4 IP IPv4 MACIPv6 IP IPv6 IPv4 DSCP IPv4 IPv6 DSCP IPv6 LAN LAN LAN LAN IP Web DNS / /24 FTP LAN /24 LAN Web LAN /24 LAN DNS ICMP ICMP IP ICMP ICMP 126 IP

127 V14 Web /24 Web 80http TCP 2Web DNS /24 DNS 53domain UDP 2DNS ICMP 1ICMP 1 Web 80 TCP # acl 0 ip /24 any 6 any # acl 0 tcp any 80 # lan 1 ip filter 0 pass acl 0 Web # acl 1 ip any /24 6 any # acl 1 tcp 80 any # lan 1 ip filter 1 pass acl 1 DNS 53 UDP # acl 2 ip / /32 17 any # acl 2 udp any 53 # lan 1 ip filter 2 pass acl 2 DNS # acl 3 ip / /24 17 any # acl 3 udp 53 any # lan 1 ip filter 3 pass acl 3 ICMP # acl 4 ip any any 1 any # lan 1 ip filter 4 pass acl 4 # acl 5 ip any any any any # lan 1 ip filter 5 reject acl IP

128 V IPv6 LAN LAN Web ftp Web DNS DNS DNS DNS Web DNS Web DNS DNS SR-S310TL2/318TL2/324TL2/324PS1 IP IPv6"resource filter distribution filter ipv6" MACIPv4 IP IPv4 MACIPv6 IP IPv6 IPv4 DSCP IPv4 IPv6 DSCP IPv6 LAN LAN1 LAN0 LAN IPv6 Web 2001:db8::5 DNS 2001:db8:: :db8:1::/ :db8::/64 FTP 2001:db8::15 LAN 2001:db8:1::/64 Web LAN 2001:db8:1::/64 LAN DNS ICMPv6 ICMPv6 IPv6 ICMPv6 ICMPv6 128 IP

129 V14 Web 12001:db8:1::/64 80http TCP 2Web DNS 12001:db8:1::/64 DNS 53domain UDP 2DNS ICMPv6 1ICMPv6 1 Web 80 TCP # acl 0 ip6 2001:db8:1::/64 any 6 any # acl 0 tcp any 80 # lan 1 ip6 filter 0 pass acl 0 Web # acl 1 ip6 any ip6 2001:db8:1::/64 6 any # acl 1 tcp 80 any # lan 1 ip6 filter 1 pass acl 1 DNS 53 UDP # acl 2 ip6 2001:db8:1::/64 any 17 any # acl 2 udp any 53 # lan 1 ip6 filter 2 pass acl 2 DNS # acl 3 ip6 any 2001:db8:1::/64 17 any # acl 3 udp 53 any # lan 1 ip6 filter 3 pass acl 3 ICMPv6 # acl 4 ip6 any any 58 # acl 4 icmp any any # lan 1 ip6 filter 4 pass acl 4 # acl 5 ip6 any any any any # lan 1 ip6 filter 5 reject acl IP

130 V LAN Web DNS DNS DNS DNS Web DNS Web DNS DNS SR-S310TL2/318TL2/324TL2/324PS1 IP IPv4"resource filter distribution filter ipv4" MACIPv4 IP IPv4 MACIPv6 IP IPv6 IPv4 DSCP IPv4 IPv6 DSCP IPv6 LAN LAN LAN LAN Web IP DNS FTP / /24 LAN /32 Web LAN DNS ICMP ICMP IP ICMP ICMP 130 IP

131 V14 LAN Web /32 80http TCP 2Web DNS /24 DNS 53domain UDP 2DNS ICMP 1ICMP 1 Web 80 TCP # acl 0 ip any /32 6 any # acl 0 tcp any 80 # lan 1 ip filter 0 pass acl 0 Web # acl 1 ip /32 any 6 any # acl 1 tcp 80 any # lan 1 ip filter 1 pass acl 1 DNS 53 UDP # acl 2 ip / /32 17 any # acl 2 udp any 53 # lan 1 ip filter 2 pass acl 2 DNS # acl 3 ip / /24 17 any # acl 3 udp 53 any # lan 1 ip filter 3 pass acl 3 ICMP # acl 4 ip any any 1 any # lan 1 ip filter 4 pass acl 4 # acl 5 ip any any any any # lan 1 ip filter 5 reject acl IP

132 V LAN FTP SR-S310TL2/318TL2/324TL2/324PS1 IP IPv4"resource filter distribution filter ipv4" MACIPv4 IP IPv4 MACIPv6 IP IPv6 IPv4 DSCP IPv4 IPv6 DSCP IPv6 LAN LAN LAN LAN IP FTP DNS / /24 Web LAN /24 LAN FTP FTP / ftp TCP LAN FTP # acl 0 ip / /32 6 any # acl 0 tcp any 21 # lan 1 ip filter 0 reject acl IP

133 V ping LAN pingicmp ECHO ICMP SR-S310TL2/318TL2/324TL2/324PS1 IP IPv4"resource filter distribution filter ipv4" MACIPv4 IP IPv4 MACIPv6 IP IPv6 IPv4 DSCP IPv4 IPv6 DSCP IPv6 LAN1 LAN ping IP ping ping LAN /32 pingicmp ECHO LAN /32 pingicmp ECHO /32 ICMP TYPE 8 ICMP /32 ICMP TYPE 8 ICMP # acl 0 ip any /32 1 any # acl 0 icmp 8 any # lan 0 ip filter 0 reject acl 0 # acl 1 ip any any any any # lan 0 ip filter 1 pass acl IP

134 V14 30 DSCP IP DSCP 2.36 DSCP P.112 SR-S310TL2/318TL2/324TL2/324PS1 DSCP IPv4"resource filter distribution qos ipv4" MACIPv4 IP IPv4 MACIPv6 IP IPv6 IPv4 DSCP IPv4 IPv6 DSCP IPv6 DSCP ACL ACL DSCP IP IP IP TOS DSCP IPv6 Traffic Class DSCP SR-S324TC1/328TR1/348TC1/724TC1/748TC1 FTPDSCP 10 LAN LAN1 DSCP0 DSCP10 FTP DSCP TOS00 DSCP0 WWW DSCP / DSCP

135 V14 IP / /24 IP / 20ftp-data 21ftp TCP DSCP 0 DSCP 10 FTP DSCP 0 10 # acl 0 ip /24 any 6 dscp 0 # acl 0 tcp any 20,21 # lan 0 ip dscp 0 acl DSCP

136 V14 31 VRRP SR-S724TC1, 748TC1 VRRP 2 1 VRRP RIP VRRP VRRP P.114 on off vrrp preempt-permit LAN IP VRRP VRRP-AD IP IPv4-VRRP IP IPv6-VRRP IP ff02::12 IPv6 Next Header112 IPv6 VRRP SR-S724TC1/748TC1 136 VRRP

137 V SR-S724TC1, 748TC1 2 LAN VLAN VLAN 100 VLAN HUB VLAN 100 VLAN / / lan0 ETHER2 lan2 lan1 ETHER3 ETHER internet lan0 ETHER2 ETHER1 VLAN 200 VLAN HUB lan1 ETHER3 lan2 VLAN 100 VLAN / / VLAN 100 ID 10 IP VLAN 200 ID 20 IP ETHER1 VLAN 100 ETHER2 VLAN 200 ETHER3 IP /24 IP DNS ETHER1 VLAN 100 ETHER2 VLAN 200 ETHER3 IP / VRRP

138 V14 VLAN # ether 1 vlan untag 10 # ether 2 vlan tag 100 # ether 3 vlan tag 200 # lan 0 vlan 100 # lan 1 vlan 200 # lan 2 vlan 10 STP # stp mode disable # ip routing enable IP DNS # lan 0 ip address /24 3 # lan 1 ip address /24 3 # lan 2 ip address /24 3 # lan 2 ip route 0 default VRRP # lan 0 vrrp use on # lan 0 vrrp group 0 id # lan 0 vrrp group 0 preempt off # lan 0 vrrp group 0 trigger 0 node any # lan 1 vrrp use on # lan 1 vrrp group 0 id # lan 1 vrrp group 0 preempt off # lan 1 vrrp group 0 trigger 0 node any # reset # lan 0 vrrp group 0 trigger 1 ifdown lan2 # lan 1 vrrp group 0 trigger 1 ifdown lan2 138 VRRP

139 V14 VLAN # ether 1 vlan untag 10 # ether 2 vlan tag 100 # ether 3 vlan tag 200 # lan 0 vlan 100 # lan 1 vlan 200 # lan 2 vlan 10 STP # stp mode disable # ip routing enable IP # lan 0 ip address /24 3 # lan 1 ip address /24 3 # lan 2 ip address /24 3 # lan 2 ip route 0 default VRRP # lan 0 vrrp use on # lan 0 vrrp group 0 id # lan 1 vrrp use on # lan 1 vrrp group 0 id # reset 139 VRRP

140 V SR-S724TC1, 748TC1 2 ID LAN VLAN VLAN 100 VLAN 100 A B VLAN 100 VLAN HUB VLAN / lan0 ether2 lan2 lan1 ether3 ether internet lan0 ether2 ether1 VLAN 200 VLAN HUB lan1 ether3 lan2 VLAN 100 A B VLAN / VLAN 100 A - ID 10 - IP B - ID 11 - IP VLAN 200 ID 20 IP ETHER1 VLAN 100 ETHER2 VLAN 200 ETHER3 IP / VRRP

141 V14 ETHER1 VLAN 100 ETHER2 VLAN 200 ETHER3 IP /24 VLAN # ether 1 vlan untag 10 # ether 2 vlan tag 100 # ether 3 vlan tag 200 # lan 0 vlan 100 # lan 1 vlan 200 # lan 2 vlan 10 STP # stp mode disable # ip routing enable IP # lan 0 ip address /24 3 # lan 1 ip address /24 3 # lan 2 ip address /24 3 # lan 2 ip route 0 default VRRP # lan 0 vrrp use on # lan 0 vrrp group 0 id # lan 0 vrrp group 0 preempt off # lan 0 vrrp group 0 trigger 0 ifdown lan2 254 # lan 0 vrrp group 1 id # lan 1 vrrp use on # lan 1 vrrp group 0 id # lan 1 vrrp group 0 preempt off # lan 1 vrrp group 0 trigger 0 ifdown lan2 254 # reset 141 VRRP

142 V14 VLAN # ether 1 vlan untag 10 # ether 2 vlan tag 100 # ether 3 vlan tag 200 # lan 0 vlan 100 # lan 1 vlan 200 # lan 2 vlan 10 STP # stp mode disable # ip routing enable IP # lan 0 ip address /24 3 # lan 1 ip address /24 3 # lan 2 ip address /24 3 # lan 2 ip route 0 default VRRP # lan 0 vrrp use on # lan 0 vrrp group 0 id # lan 0 vrrp group 1 id # lan 0 vrrp group 1 preempt off # lan 0 vrrp group 1 trigger 0 ifdown lan2 254 # lan 1 vrrp use on # lan 1 vrrp group 0 id # reset 142 VRRP

143 V14 32 ECMP SR-S724TC1, 748TC1 ECMP internet A B LAN1 LAN LAN / ECMP P ETHER15 1ETHER16 2 ETHER ETHER # ether 1-14 vlan untag 10 # lan 0 vlan 10 # ether 15 vlan untag 11 # lan 1 vlan 11 # ether 16 vlan untag 12 # lan 2 vlan 12 LAN IP # lan 0 ip address /24 3 # lan 1 ip address /24 3 # lan 2 ip address /24 3 # lan 1 ip route / # lan 2 ip route / ECMP # routemanage ip ecmp mode hash 143 ECMP

144 V ECMP

145 V14 33 DHCP DHCP DHCP DHCP DHCP SR-S724TC1/748TC DHCP P.120 DHCP 11 DHCP 33.1 DHCP DHCP IP IP DHCP IP DHCP IP IP DNS IP DHCP DHCP 145 DHCP

146 V14 SR-S724TC1 DHCP DHCP IP 253 IP IP LAN LAN /24 LAN0 LAN1 VLAN IP IP IP /24 DHCP VLAN # ether 1 vlan untag 10 # lan 1 vlan 10 DHCP # lan 1 ip address /24 3 # lan 1 ip dhcp info dns # lan 1 ip dhcp info address /24 32 # lan 1 ip dhcp info time 1d # lan 1 ip dhcp info gateway # lan 1 ip dhcp service server 146 DHCP

147 V DHCP DHCP IP IP IP IP IP MAC DHCP IP DHCP DHCP IP MAC MAC LAN IP IP DHCP DHCP SR-S724TC1 DHCP DHCP DNS DHCP 100 IP IP MAC 00:00:0e:12:34:56 LAN LAN / /24 IP MAC 00:00:0e:12:34:56 IP DHCP DHCP DHCP 147 DHCP

148 V14 VLAN # ether 1 vlan untag 10 # lan 1 vlan 10 DHCP # lan 1 ip address /24 3 # lan 1 ip dhcp info dns # lan 1 ip dhcp info address /24 32 # lan 1 ip dhcp info time 1d # lan 1 ip dhcp info gateway # lan 1 ip dhcp service server DHCP # host 0 ip address # host 0 mac 00:00:0e:12:34: DHCP

149 V DHCP SR-S724TC1, 748TC1 DHCPIP DHCP DHCP DHCP DHCP DHCP LAN1 LAN0 IP LAN LAN DHCP / /24 LAN0 LAN1 VLAN LAN1 IP DHCP LAN0 IP DHCP VLAN # ether 1 vlan untag 10 # ether 2 vlan untag 20 # lan 0 vlan 10 # lan 1 vlan 20 IP # lan 0 ip address /24 3 # lan 1 ip address / DHCP

150 V14 DHCP # lan 1 ip dhcp service relay DHCP

151 V IPv6 DHCP IPv6 DHCP IPv6 IPv6 DNS IPv6 DNS IPv6 DHCP IPv6 DHCP IPv6 DHCP IPv6 2001:db8:1:: :db8:1::163 LAN1 LAN0 2001:db8:1::/64 IP 2001:db8:1::1 IPv6 2001:db8:1:: :db8:1::163 IPv :db8:1::/64 Valid Lifetime 30 Preferred Lifetime 7 DNS IPv6 2001:db8:1:: DHCP

152 V14 IPv6 DHCP # lan 1 ip6 use on # lan 1 ip6 address :db8:1::1/64 IPv6 DHCP # lan 1 ip6 dhcp service server # lan 1 ip6 dhcp server info address 2001:db8:1:: d 7d # lan 1 ip6 dhcp server info dns 2001:db8:1:: DHCP

153 V IPv6 DHCP SR-S724TC1, 748TC1 IPv6 DHCP LAN LAN IPv6 LAN1 2001:db8:1::1 LAN0 2001:db8::1 IPv6 DHCP 2001:db8:1::/ :db8::/64 LAN IPv6 2001:db8:1::1 IPv6 DHCP LAN IPv6 2001:db8::1 # lan 0 ip6 use on # lan 0 ip6 address :db8::1/64 # lan 1 ip6 use on # lan 1 ip6 address :db8:1::1/64 # lan 1 ip6 ra mode send # lan 1 ip6 ra flags c0 IPv6 DHCP # lan 1 ip6 dhcp service relay # lan 1 ip6 dhcp relay interface lan0 153 DHCP

154 V14 34 DNS ProxyDNS ProxyDNS DNS DNS DNS 2.41 DNS P DNS ProxyDNS IP DNS IP DNS honsya.co.jp honsya.co.jp DNS DNS LAN /24 internet DNS DNS honsya.co.jp DNS IP DNS honsya.co.jp DNS IP A Za z <>&% 1.7 P DNS ProxyDNS

155 V14 DNS # proxydns domain 0 any *.honsya.co.jp any static # proxydns domain 1 any * any static DHCP DHCP 155 DNS ProxyDNS

156 V DNS ProxyDNS IP DNS honsya.co.jp DNS DNS LAN /24 internet DNS DNS DNS IP DNS DNS IP A Za z <>&% 1.7 P.27 DNS # proxydns address /24 static # proxydns address 1 any static DNS ProxyDNS

157 V14 1. DHCP DHCP 34.3 DNS DNS QTYPE ProxyDNS A1 DNS SOA6 0 9A Za z <>&% 1.7 P.27 DNS # proxydns domain 0 6 * any reject 157 DNS ProxyDNS

158 V14 Windows TCP/IP DNS 6. DNS IP 7. OK DNS ProxyDNS

159 V DNS IP DNS ProxyDNS DNS host.com IPv A Za z <>&% 1.7 P.27 # host 0 name host.com # host 0 ip address DHCP DNS 34.3 DNS P.157 P DNS ProxyDNS

160 V14 35 URL URL URL URL ProxyDNS URL WWW internet WWW DNS P.12 5 ProxyDNS DNS IP URL LAN IP DNS IP 0 9A Za z <>&% 1.7 P.27 URL.danger.com 160 URL URL

161 V14 URL # proxydns domain 0 any any reject # proxydns domain 1 any * any static URL URL

162 V14 36 SNMP SNMPSimple Network Management Protocol SNMP MIB suzuki SR-S324TC1 IP SNMP MIB SNMP SNMP P.127 SNMP SNMPSimple Network Management ProtocolSNMP SNMP SNMP MIBManagement Information Base SNMP SNMP 3.1 MIBP MIBP Trap P.92 IP IP SNMP SNMP SNMP SNMPv3snmp 162 SNMP

163 V14 SNMPv1 SNMPv2c SNMPv1 SNMPv2c SNMP suzuki SR-S324TC1 1F IP SNMP public00 SNMP # snmp agent contact suzuki # snmp agent sysname SR-S324TC1 # snmp agent location 1F # snmp agent address SNMP # snmp manager public00 off disable SNMP # snmp service on SNMPv3 SNMPv3 SNMP suzuki SR-S324TC1 1F IP SNMP user00 MD5 auth_password 163 SNMP

164 V14 DES priv_password MIB MIB systeminterfaces linkdownlinkup SNMP # snmp agent contact suzuki # snmp agent sysname SR-S324TC1 # snmp agent location 1F # snmp agent address SNMPv3 # snmp user 0 name user00 # snmp user 0 address # snmp user 0 notification # snmp user 0 auth md5 auth_password # snmp user 0 priv des priv_password MIB # snmp user 0 read view 0 # snmp user 0 notify view 0 # snmp view 0 subtree 0 include system # snmp view 0 subtree 1 include interfaces # snmp view 0 subtree 2 include linkdown # snmp view 0 subtree 3 include linkup SNMP # snmp service on 164 SNMP

165 V14 37 syslog URL DHCP IPv4 LAN LAN LOG_ERROR - LOG_WARNING - LOG_NOTICE - LOG_INFO - DHCP - Proxy DNS IP # syslog server # syslog pri error,warn,notice,info # syslog security dhcp,proxydns 165

166 V P # addact reset config2 166

167 V FTP TELNET SSH TIME internet LAN /24 DNS TELNET/FTP/SSH LAN /24 TIME IP # serverinfo ftp filter default reject # serverinfo telnet filter default reject # serverinfo ssh filter default reject # serverinfo time filter default reject FTP/TELNET/SSH # acl 0 ip /32 any any any # serverinfo ftp filter 0 accept acl 0 # serverinfo telnet filter 0 accept acl 0 # serverinfo ssh filter 0 accept acl 0 LAN TIME # acl 1 ip /24 any any any # serverinfo time filter 0 accept acl 1 167

168 V14 168

169 V14 40 IEEE802.1ad SR-S328TR1 IEEE802.1ad 2.48 IEEE802.1ad P IEEE802.1ad IEEE802.1ad IEEE802.1ad A S-VLAN=500 B 1 PB 2 ether1 ether28 ether1 ether28 IEEE802.1ad VLAN ID 0x88a8 VLAN 1 VLAN VLAN ether1 VLAN 1 VLAN=500 ether28 2 ether1 VLAN 1 VLAN=500 ether IEEE802.1ad

170 V14 VLAN ether egress permission flooding IEEE802.1ad flooding IEEE802.1ad flooding IEEE802.1ad 1 IEEE802.1ad # dot1ad use on # dot1ad s-vlan tpid 88a8 VLAN 1 # dot1ad vlan-map 1 s-vlan vid 500 # ether 1 egress permission 28 # ether 1 dot1ad mode customer # ether 1 dot1ad customer vlan-default forward 1 # ether 28 egress permission 1 # ether 28 dot1ad mode provider # ether 28 vlan tag IEEE802.1ad # dot1ad use on # dot1ad s-vlan tpid 88a8 VLAN 1 # dot1ad vlan-map 1 s-vlan vid 500 # ether 1 egress permission 28 # ether 1 dot1ad mode customer # ether 1 dot1ad customer vlan-default forward 1 # ether 28 egress permission 1 # ether 28 dot1ad mode provider # ether 28 vlan tag IEEE802.1ad

171 V IEEE802.1ad C-TAG IEEE802.1ad C-TAG VLAN IEEE802.1ad A S-VLAN=1000, C-VLAN=10 1 PB 2 B S-VLAN=2000, C-VLAN=20, 30 ether5 linkaggregation1 ether27-28 ether5 linkaggregation1 ether27-28 IEEE802.1ad VLAN ID 0x8100 VLAN 1 VLAN 10 VLAN 1000 VLAN 5 VLAN 2 VLAN 20,30 VLAN 2000 VLAN 0 1 ether5 VLAN 12 VLAN 12 linkaggregation1 ether ether5 VLAN 12 VLAN 12 linkaggregation1 ether27-28 VLAN ether egress permission flooding IEEE802.1ad flooding IEEE802.1ad flooding 171 IEEE802.1ad

172 V14 IEEE802.1ad C-TAG 1 IEEE802.1ad # dot1ad use on # dot1ad s-vlan tpid 8100 VLAN 1 # dot1ad vlan-map 1 c-vlan vid 10 # dot1ad vlan-map 1 s-vlan vid 1000 # dot1ad vlan-map 1 s-vlan priority 5 VLAN 2 # dot1ad vlan-map 2 c-vlan vid 20,30 # dot1ad vlan-map 2 s-vlan vid 2000 # dot1ad vlan-map 2 s-vlan priority 0 # ether 5 egress permission 27,28 # ether 5 dot1ad mode customer # ether 5 dot1ad customer vlan-map 0 1 # ether 5 dot1ad customer vlan-map 1 2 # ether 5 dot1ad customer vlan-default discard # ether vlan tag 1000,2000 # ether type linkaggregation 1 27 # ether 27 egress permission 5 # linkaggregation 1 dot1ad mode provider 2 IEEE802.1ad # dot1ad use on # dot1ad s-vlan tpid 8100 VLAN 1 # dot1ad vlan-map 1 c-vlan vid 10 # dot1ad vlan-map 1 s-vlan vid 1000 # dot1ad vlan-map 1 s-vlan priority 5 VLAN 2 # dot1ad vlan-map 2 c-vlan vid 20,30 # dot1ad vlan-map 2 s-vlan vid 2000 # dot1ad vlan-map 2 s-vlan priority 0 # ether 5 egress permission 27,28 # ether 5 dot1ad mode customer # ether 5 dot1ad customer vlan-map 0 1 # ether 5 dot1ad customer vlan-map 1 2 # ether 5 dot1ad customer vlan-default discard 172 IEEE802.1ad

173 V14 # ether vlan tag 1000,2000 # ether type linkaggregation 1 27 # ether 27 egress permission 5 # linkaggregation 1 dot1ad mode provider 173 IEEE802.1ad

174 V14 41 IEEE802.1ah SR-S328TR1 IEEE802.1ah 2.49 IEEE802.1ah P IEEE802.1ah IEEE802.1ah MAC=00:22:22:00:00:00 ether1 ether25 A IEEE802.1ah B-VLAN=300, I-SID=0x100 2 B 1 BCB B-VLAN=300, I-SID=0x100 3 C MAC=00:11:11:00:00:00 ether1 ether25 MAC=00:33:33:00:00:00 ether1 ether25 IEEE802.1ah VLAN ID 0x8100 VLAN ID 0x ID 0x100 VLAN ether1 0 VLAN=300 ID=0x100 ether25 0 MAC 00:11:11:00:00: IEEE802.1ah

175 V14 2 ether1 0 VLAN=300 ID=0x100 ether25 0 MAC 00:22:22:00:00:00 3 ether1 0 VLAN=300 ID=0x100 ether25 0 MAC 00:33:33:00:00:00 ether egress permission flooding ID flooding IEEE802.1ah flooding IEEE802.1ah 1 IEEE802.1ah # dot1ah use on # dot1ah s-vlan tpid 8100 # dot1ah b-vlan tpid 8100 # dot1ah b-sa 00:11:11:00:00:00 0 # dot1ah service 0 i-sid 100 # dot1ah service 0 b-vlan vid 300 # dot1ah service 0 b-da 0 00:22:22:00:00:00 multicast # dot1ah service 0 b-da 1 00:33:33:00:00:00 multicast # ether 1 egress permission 25 # ether 1 dot1ah mode customer # ether 1 dot1ah customer service-default forward 0 # ether 25 vlan tag 300 # ether 25 egress permission 1 # ether 25 dot1ah mode provider 175 IEEE802.1ah

176 V14 # ether 25 dot1ah provider service IEEE802.1ah # dot1ah use on # dot1ah s-vlan tpid 8100 # dot1ah b-vlan tpid 8100 # dot1ah b-sa 00:22:22:00:00:00 0 # dot1ah service 0 i-sid 100 # dot1ah service 0 b-vlan vid 300 # dot1ah service 0 b-da 0 00:11:11:00:00:00 multicast # dot1ah service 0 b-da 1 00:33:33:00:00:00 multicast # ether 1 egress permission 25 # ether 1 dot1ah mode customer # ether 1 dot1ah customer service-default forward 0 # ether 25 vlan tag 300 # ether 25 egress permission 1 # ether 25 dot1ah mode provider # ether 25 dot1ah provider service IEEE802.1ah # dot1ah use on # dot1ah s-vlan tpid 8100 # dot1ah b-vlan tpid 8100 # dot1ah b-sa 00:33:33:00:00:00 0 # dot1ah service 0 i-sid 100 # dot1ah service 0 b-vlan vid 300 # dot1ah service 0 b-da 0 00:11:11:00:00:00 multicast # dot1ah service 0 b-da 1 00:22:22:00:00:00 multicast # ether 1 egress permission 25 # ether 1 dot1ah mode customer # ether 1 dot1ah customer service-default forward 0 # ether 25 vlan tag 300 # ether 25 egress permission 1 # ether 25 dot1ah mode provider # ether 25 dot1ah provider service IEEE802.1ah

177 V IEEE802.1ah S-TAG IEEE802.1ah S-TAG VLAN A S-VLAN=100 1 IEEE802.1ah B-VLAN=1000, I-SID=0x100 MAC=00:22:22:00:00:00 ether1 ether25 2 S-VLAN=100 B S-VLAN=200 MAC=00:11:11:00:00:00 ether1 ether25 BCB B-VLAN=2000, I-SID=0x200 3 S-VLAN=200 C MAC=00:33:33:00:00:00 ether1 ether25 IEEE802.1ah VLAN ID 0x88a8 VLAN ID 0x88a8 1 ID 0x100 VLAN 100 VLAN ID 0x200 VLAN 200 VLAN ether1 1,2 1,2 ether25 1,2 MAC 00:11:11:00:00:00 2 ether1 1 1 ether25 1 MAC 00:22:22:00:00: IEEE802.1ah

178 V14 3 ether1 2 2 ether25 2 MAC 00:33:33:00:00:00 ether egress permission flooding ID flooding IEEE802.1ah flooding IEEE802.1ah S-TAG 1 IEEE802.1ah # dot1ah use on # dot1ah s-vlan tpid 88a8 # dot1ah b-vlan tpid 88a8 # dot1ah b-sa 00:11:11:00:00:00 1 # dot1ah service 1 i-sid 100 # dot1ah service 1 s-vlan vid 100 # dot1ah service 1 b-vlan vid 1000 # dot1ah service 1 b-da 0 00:22:22:00:00:00 multicast 2 # dot1ah service 2 i-sid 200 # dot1ah service 2 s-vlan vid 200 # dot1ah service 2 b-vlan vid 2000 # dot1ah service 2 b-da 0 00:33:33:00:00:00 multicast # ether 1 egress permission 25 # ether 1 dot1ah mode customer # ether 1 dot1ah customer service 0 1 # ether 1 dot1ah customer service 1 2 # ether 1 dot1ah customer service-default discard # ether 25 vlan tag 1000,2000 # ether 25 egress permission 1 # ether 25 dot1ah mode provider # ether 25 dot1ah provider service 0 1 # ether 25 dot1ah provider service IEEE802.1ah

179 V14 2 IEEE802.1ah # dot1ah use on # dot1ah s-vlan tpid 88a8 # dot1ah b-vlan tpid 88a8 # dot1ah b-sa 00:22:22:00:00:00 1 # dot1ah service 1 i-sid 100 # dot1ah service 1 s-vlan vid 100 # dot1ah service 1 b-vlan vid 1000 # dot1ah service 1 b-da 0 00:11:11:00:00:00 multicast # ether 1 egress permission 25 # ether 1 dot1ah mode customer # ether 1 dot1ah customer service 0 1 # ether 1 dot1ah customer service-default discard # ether 25 vlan tag 1000 # ether 25 egress permission 1 # ether 25 dot1ah mode provider # ether 25 dot1ah provider service IEEE802.1ah # dot1ah use on # dot1ah s-vlan tpid 88a8 # dot1ah b-vlan tpid 88a8 # dot1ah b-sa 00:33:33:00:00:00 2 # dot1ah service 2 i-sid 200 # dot1ah service 2 s-vlan vid 200 # dot1ah service 2 b-vlan vid 2000 # dot1ah service 2 b-da 0 00:11:11:00:00:00 multicast # ether 1 egress permission 25 # ether 1 dot1ah mode customer # ether 1 dot1ah customer service 0 2 # ether 1 dot1ah customer service-default discard # ether 25 vlan tag 2000 # ether 25 egress permission 1 # ether 25 dot1ah mode provider # ether 25 dot1ah provider service IEEE802.1ah

180 V IEEE802.1ah L2 IEEE802.1ah LACP IEEE802.1ah A LACP 1 B-VLAN=300, I-SID=0x100 B-VLAN=300, I-SID=0x101 BCB B-VLAN=300, I-SID=0x102 2 B LACP MAC=00:11:11:00:00:00 ether1,2,3 ether25 MAC=00:22:22:00:00:00 ether1,2,3 ether25 LACP 1 1 ID IEEE802.1ah VLAN ID 0x8100 VLAN ID 0x88a8 1 ID 0x100 VLAN ID 0x101 VLAN ID 0x102 VLAN ether1 1 LACP 5 ether2 2 LACP 5 ether3 3 LACP 5 ether25 1,2,3 MAC 00:11:11:00:00: IEEE802.1ah

181 V14 2 ether1 1 LACP 5 ether2 2 LACP 5 ether3 3 LACP 5 ether25 1,2,3 MAC 00:22:22:00:00:00 ether egress permission flooding ID flooding IEEE802.1ah flooding IEEE802.1ah LACP 1 IEEE802.1ah # dot1ah use on # dot1ah s-vlan tpid 8100 # dot1ah b-vlan tpid 88a8 # dot1ah b-sa 00:11:11:00:00:00 1 # dot1ah service 1 i-sid 100 # dot1ah service 1 b-vlan vid 300 # dot1ah service 1 b-da 0 00:22:22:00:00:00 unicast 2 # dot1ah service 2 i-sid 101 # dot1ah service 2 b-vlan vid 300 # dot1ah service 2 b-da 0 00:22:22:00:00:00 unicast 3 # dot1ah service 3 i-sid 102 # dot1ah service 3 b-vlan vid 300 # dot1ah service 3 b-da 0 00:22:22:00:00:00 unicast # ether 1 egress permission 25 # ether 1 dot1ah mode customer # ether 1 dot1ah customer service-default forward 1 # ether 2 egress permission 25 # ether 2 dot1ah mode customer 181 IEEE802.1ah

182 V14 # ether 2 dot1ah customer service-default forward 2 # ether 3 egress permission 25 # ether 3 dot1ah mode customer # ether 3 dot1ah customer service-default forward 3 LACP # ether 1 dot1ah l2tunnel lacp enable 5 # ether 2 dot1ah l2tunnel lacp enable 5 # ether 3 dot1ah l2tunnel lacp enable 5 # ether 25 vlan tag 300 # ether 25 egress permission 1-3 # ether 25 dot1ah mode provider # ether 25 dot1ah provider service 0 1 # ether 25 dot1ah provider service 1 2 # ether 25 dot1ah provider service IEEE802.1ah # dot1ah use on # dot1ah s-vlan tpid 8100 # dot1ah b-vlan tpid 88a8 # dot1ah b-sa 00:22:22:00:00:00 1 # dot1ah service 1 i-sid 100 # dot1ah service 1 b-vlan vid 300 # dot1ah service 1 b-da 0 00:11:11:00:00:00 unicast 2 # dot1ah service 2 i-sid 101 # dot1ah service 2 b-vlan vid 300 # dot1ah service 2 b-da 0 00:11:11:00:00:00 unicast 3 # dot1ah service 3 i-sid 102 # dot1ah service 3 b-vlan vid 300 # dot1ah service 3 b-da 0 00:11:11:00:00:00 unicast # ether 1 egress permission 25 # ether 1 dot1ah mode customer # ether 1 dot1ah customer service-default forward 1 # ether 2 egress permission 25 # ether 2 dot1ah mode customer # ether 2 dot1ah customer service-default forward 2 # ether 3 egress permission 25 # ether 3 dot1ah mode customer # ether 3 dot1ah customer service-default forward 3 LACP # ether 1 dot1ah l2tunnel lacp enable 5 # ether 2 dot1ah l2tunnel lacp enable 5 # ether 3 dot1ah l2tunnel lacp enable IEEE802.1ah

183 V14 # ether 25 vlan tag 300 # ether 25 egress permission 1-3 # ether 25 dot1ah mode provider # ether 25 dot1ah provider service 0 1 # ether 25 dot1ah provider service 1 2 # ether 25 dot1ah provider service IEEE802.1ah

184 V14 42 LAN 42.1 LAN LAN LAN LAN1 MAC00:00:0e:f5:43:d1 LAN2 MAC00:00:0e:f5:43:d2 GroupA LAN 1 GroupA/AP_A01 IP LAN 2 GroupA/AP_A02 IP LAN BSSID00:90:cc:c8:d1:51 LAN IP PC IP LAN IP LAN 1 LAN LAN LAN LAN LAN SR-M20AP1/20AP2 LAN nodemgr LAN 184 LAN

185 V14 LAN LAN 1 IP LAN 2 IP GroupA AP_A IDnodemgrnodemgr1 AP_A IDnodemgrnodemgr2 LAN LAN ieee ieee Watcher IP IDnodemgrnodemgr3 LAN MAC 00:90:cc:c8:d1: LAN LAN LAN LAN RSSI RSSI 10 RSSI LAN

186 V14 # nodemanager group 0 name GroupA LAN # nodemanager node 0 name AP_A01 # nodemanager node 0 group 0 # nodemanager node 0 address # nodemanager node 0 user nodemgr nodemgr1 # nodemanager node 0 wlan scan disable # nodemanager node 1 name AP_A02 # nodemanager node 1 group 0 # nodemanager node 1 address # nodemanager node 1 user nodemgr nodemgr2 # nodemanager node 1 wlan scan disable LAN # nodemanager node 4 name Watcher # nodemanager node 4 address # nodemanager node 4 user nodemgr nodemgr3 # nodemanager node 4 wlan scan enable # nodemanager node 4 wlan sta disable LAN # nodemanager wlan scan unmanaged 0 UMAP01 00:90:cc:c8:d1:51 # nodemanager collect interval 10s 10s 5s LAN LAN # nodemanager icmpwatch interval 10s 10s 5s # nodemanager icmpwatch threshold 6 # nodemanager wlan scan interval 10s 10s 1m # nodemanager wlan scan error threshold 6 # nodemanager log 100 LAN RSSI # nodemanager wlan sta rssi LAN

187 V LAN LAN LAN LAN 42.1 LAN P.18 4 LAN # show nodemanager logging wlan scan managed brief LAN LAN LAN # show nodemanager node node 0 # show nodemanager node node 1 LAN LAN # show nodemanager logging wlan scan managed group 0 LAN # show nodemanager logging wlan scan unmanaged LAN # show nodemanager logging wlan scan unknown # show nodemanager logging wlan scan 187 LAN

188 V LAN LAN LAN 42.1 LAN P.18 4 LAN # show nodemanager logging wlan sta rssi group 0 LAN # show nodemanager logging wlan sta group 0 LAN # show nodemanager logging wlan reject group 0 LAN # show nodemanager logging wlan trace group 0 # show nodemanager logging wlan scan 188 LAN

189 V LAN MAC MAC LAN LAN LAN MAC MAC MAC MAC LAN LAN 1MAC 00:00:0e:f5:43:d1 LAN 2MAC 00:00:0e:f5:43:d2 LAN MAC LAN 1 LAN LAN P.18 4 MAC LAN MAC MAC # nodemanager wlan filterset 0 filter 0 mac 00:00:0e:f5:43:d1 pass # nodemanager wlan filterset 0 filter 0 description STATION_001 # nodemanager wlan filterset 0 filter 1 mac 00:00:0e:f5:43:d2 pass # nodemanager wlan filterset 0 filter 1 description STATION_002 # nodemanager wlan filterset 0 filter 2 mac any reject LAN MAC # nodemanagerctl update wlan filterset 0 group LAN

190 V LAN LAN LAN LAN LAN RSSI RSSI 3. LAN LAN AP LAN LAN - LAN - LAN APSCANONLY LAN LAN 1 LAN 2 LAN 1 LAN 2 LAN LAN 2 LAN 1 LAN RSSI LAN P LAN

191 V14 # nodemanager node 0 wlan neighbor 1 4 # nodemanager node 1 wlan neighbor 0 4 RSSI # nodemanager wlan autotxpower rssi 20 # nodemanagerctl wlan autotxpower group LAN

192 V LAN LAN LAN LAN LAN LAN LAN 5GHz w52/53/56 2.4GHz RSSI GHz 1 5 IEEE802.11n LAN P.18 4 LAN 5GHz # nodemanager wlan autochannel channel w52/53/56 2.4GHz RSSI # nodemanager wlan autochannel rssi GHz # nodemanager wlan autochannel layout 1 5 IEEE802.11n # nodemanager wlan autochannel bandwidth 40 LAN # nodemanagerctl wlan autochannel group LAN

193 V14 A L ACL...124, 134 ARP...58 AS AS B L2 IEEE802.1ah LACP LAN LSA M BSR C C-TAG IEEE802.1ad D DHCP DHCP DHCP DHCP...39 DHCP DNS DNS DNS DNS DSCP...124, 134 DSCP E ECMP ether L I IEEE802.1ad IEEE802.1ah IEEE802.1X...43 IGMP...41 IGMP...41 IPv IP...73, 124 IP IP IP IP MAC MAC MAC MAC MIB MLAG MSTP O OSPFv OSPF IPv OSPF P PIM-DM PIM-SM ProxyDNS Q QoS R RIP... 73, 81 RIP RIP RIP RP S SNMP SNMP SNTP SPT S-TAG IEEE802.1ah STP

194 V14 T TIME...68 TOS...124, 134 U URL V VLAN...9 VRRP W Web , , ID , , 140 ID HUB MAC , VLAN , , , 134 VLAN VLAN... 9 IEEE802.1ad IEEE802.1ah

195 V , , 115 LAN LAN ,

196 SR-S P3NK Z