SR-Sシリーズ セキュアスイッチ　コマンド設定事例集

Transcription

1 SR-S P3NK Z0 V13

2 SR-S V Microsoft Corporation Copyright FUJITSU LIMITED

3 SR-S V VLAN VLAN VLAN VLAN LACP MAC MAC MAC ETHERBLOCK MAC ETHERBLOCK MAC ETHERBLOCK VLAN MAC VLAN MAC QoS STP STP MSTP DHCP IGMP IEEE802.1X Web AAA AAA MAC ARP ether L ether L LAN IPv4 IPv RIP IPv RIP IPv

4 SR-S V RIP IPv OSPF IPv OSPF IPv OSPF LSA AS OSPF LSA OSPF IPv OSPF PIM-DM PIM-SM IP IPv ping DSCP VRRP ECMP DHCP DHCP DHCP DHCP IPv6 DHCP IPv6 DHCP DNS ProxyDNS DNS DNS DNS DNS URL URL SNMP

5 SR-S V IEEE802.1ad IEEE802.1ad IEEE802.1ad C-TAG IEEE802.1ah IEEE802.1ah IEEE802.1ah S-TAG IEEE802.1ah L L LAN LAN LAN MAC MAC LAN LAN LAN

6 SR-S V13 CD-ROM README PL PL configure # 6

7 SR-S V13 MicrosoftMS-DOSWindowsWindows NTWindows Server Windows Vista Microsoft Corporation Adobe Reader Adobe Systems Incorporated Netscape Netscape Communications Corporation UNIX Microsoft Windows XP Professional operating system Windows XP Microsoft Windows XP Home Edition operating system Microsoft Windows 2000 Server Network operating system Windows 2000 Microsoft Windows 2000 Professional operating system Microsoft Windows NT Server network operating system Version 4.0 Windows NT 4.0 Microsoft Windows NT Workstation operating system Version 4.0 Microsoft Windows Server 2003, Standard Edition Windows Server 2003 Microsoft Windows Server 2003 R2, Standard Edition Microsoft Windows Server 2003, Enterprise Edition Microsoft Windows Server 2003 R2, Enterprise Edition Microsoft Windows Server 2003, Datacenter Edition Microsoft Windows Server 2003 R2, Datacenter Edition Microsoft Windows Server 2003, Web Edition Microsoft Windows Server 2003, Standard x64 Edition Microsoft Windows Server 2003 R2, Standard Edition Microsoft Windows Server 2003, Enterprise x64 Edition Microsoft Windows Server 2003 R2, Enterprise x64 Edition Microsoft Windows Server 2003, Enterprise Edition for Itanium-based systems Microsoft Windows Server 2003, Datacenter x64 Edition Microsoft Windows Server 2003 R2, Datacenter x64 Edition Microsoft Windows Vista Ultimate operating system Windows Vista Microsoft Windows Vista Business operating system Microsoft Windows Vista Home Premium operating system Microsoft Windows Vista Home Basic operating system Microsoft Windows Vista Enterprise operating system Microsoft Windows 7 64bit Home Premium Windows 7 Microsoft Windows 7 32bit Professional 7

8 SR-S V Web Web Web MIB/Trap Web Web Web 8

9 SR-S V13 1 VLAN 1.1 VLAN VLAN SR-S316C2/716C2 VLAN HUB VLAN HUB / /24 VLAN ID 10 VLAN ID 20 ETHER15 VLAN HUB VLAN ID VLAN ID /24 VLAN ID /24 # ether 1,5 media metal ETHER1 # ether 1 vlan untag 10 ETHER5 # ether 5 vlan untag /24 # lan 0 ip address /24 3 # lan 0 vlan /24 # lan 1 ip address /24 3 # lan 1 vlan 20 9 VLAN

10 SR-S V VLAN 1 2 VLAN VLAN SR-S316C2/716C2 VLAN HUB VLAN HUB VLAN ID 10 VLAN ID 20 VLAN ID 10 VLAN ID 20 ETHER15 VLAN HUB VLAN ID VLAN ID /24 VLAN ID /24 # ether 1,5 media metal ETHER1 # ether 1 vlan tag 10,20 ETHER5 # ether 5 vlan tag 10, /24 # lan 0 ip address /24 3 # lan 0 vlan /24 # lan 1 ip address /24 3 # lan 1 vlan VLAN

11 SR-S V VLAN SR-S224PS1, 224CP1, 248TC1, 308TL1, 310TL2, 316TL1, 318TL2, 324TL2, 316C2, 324TC1, 328TR1, 348TC1, 716C2, 724TC1, 748TC1 IP VLAN10 VLAN20 IP VLAN100 SR-S316C2/716C2 VLAN HUB VLAN HUB / /24 VLAN ID 10IP VLAN ID 20IP VLAN ID 100IP ETHER15 VLAN HUB VLAN ID VLAN ID /24 VLAN ID /24 VLAN ID100 # ether 1,5 media metal ETHER1 # ether 1 vlan untag 10,100 ETHER5 # ether 5 vlan untag 20,100 VLAN1020 IPv4 VLAN # vlan 10 protocol ipv4 # vlan 20 protocol ipv /24 # lan 0 ip address /24 3 # lan 0 vlan /24 # lan 1 ip address /24 3 # lan 1 vlan VLAN

12 SR-S V M SR-S316C2/716C2 1 2 ETHER1 4 10/100/1000BASE-T 1000Mbps VLAN ID VLAN ID /24 VLAN ID /24 1 ETHER1 4 # ether 1-4 media metal # ether 1-4 mode 1000 # ether 1-4 vlan tag 10,20 ETHER1 4 # ether 1-4 type linkaggregation /24 # lan 0 ip address /24 3 # lan 0 vlan /24 # lan 1 ip address /24 3 # lan 1 vlan 20 12

13 SR-S V13 2 ETHER1 4 # ether 1-4 media metal # ether 1-4 mode 1000 # ether 1-4 vlan tag 10,20 ETHER1 4 # ether 1-4 type linkaggregation /24 # lan 0 ip address /24 3 # lan 0 vlan /24 # lan 1 ip address /24 3 # lan 1 vlan P LACP M LACP SR-S316C2/716C2 1 2 ETHER1 4 10/100/1000BASE-T 1000Mbps VLAN ID VLAN ID /24 VLAN ID /24 13

14 SR-S V13 1 ETHER1 4 # ether 1-4 media metal # ether 1-4 mode 1000 # ether 1-4 vlan tag 10,20 ETHER1 4 # ether 1-4 type linkaggregation 1 1 LACP # linkaggregation 1 mode active /24 # lan 0 ip address /24 3 # lan 0 vlan /24 # lan 1 ip address /24 3 # lan 1 vlan 20 2 ETHER1 4 # ether 1-4 media metal # ether 1-4 mode 1000 # ether 1-4 vlan tag 10,20 ETHER1 4 # ether 1-4 type linkaggregation 1 1 LACP # linkaggregation 1 mode active /24 # lan 0 ip address /24 3 # lan 0 vlan /24 # lan 1 ip address /24 3 # lan 1 vlan P LACP P.37 14

15 SR-S V13 3 SR-S224TC2 ETHER25 ETHER26 SR-S224TC2 ETHER2526 ETHER25 ETHER26 1 ETHER25 1 # ether 25 type backup 1 master ETHER26 1 # ether 26 type backup 1 backup 1 # backup 1 mode master 15

16 SR-S V13 4 MAC MAC ETHERNET VLAN IDCOS 2.11 MAC P.55 MAC ACL MAC VLAN - MAC MAC ETHERNET LSAP - MAC MAC ETHERNET LSAP - VLAN ID - COS - IP IP - IP IP - - TCPUDP - ICMP TYPEICMP CODE - IP TOS DSCP ETHER ETHER 16 MAC

17 SR-S V13 2 A. B. A MAC MAC B 4.1 MAC VLAN MAC SR-S308TL1/310TL2/316TL1/318TL2/324TL2 MAC "resource filter distribution filter ipv4" MACIPv4 IP IPv4 MACIPv6 IP IPv6 IPv4 DSCP IPv4 IPv6 DSCP IPv6 VLAN 10 ETHER1 8 VLAN VLAN 20 ETHER1 4 ETHER9 12 VLAN ETHER1 4 ETHER9 12 ETHER2 VLAN 10 MAC 00:0b:01:02:03:04 VLAN ID 10 MAC 00:0b:01:02:03:04 ACL # acl 100 mac 00:0b:01:02:03:04 any any # acl 100 vlan 10 any VLAN ID 10 ACL # acl 110 vlan 10 any ETHER2 1 # ether 2 macfilter 0 pass 100 ETHER2 2 # ether 2 macfilter 1 reject MAC

18 SR-S V MAC VLAN MAC SR-S308TL1/310TL2/316TL1/318TL2/324TL2 MAC "resource filter distribution filter ipv4" MACIPv4 IP IPv4 MACIPv6 IP IPv6 IPv4 DSCP IPv4 IPv6 DSCP IPv6 VLAN 10 ETHER1 8 VLAN VLAN 20 ETHER1 4 ETHER9 12 VLAN ETHER1 4 ETHER9 12 ETHER4 8 VLAN 10 MAC 00:0b:01:02:03:04 VLAN ID 10 MAC 00:0b:01:02:03:04 ACL # acl 120 mac any 00:0b:01:02:03:04 any # acl 120 vlan 10 any VLAN ID 10 ACL # acl 110 vlan 10 any ETHER4 8 1 # ether 4-8 macfilter 0 pass 120 ETHER4 8 2 # ether 4-8 macfilter 1 reject MAC

19 SR-S V VLAN SR-S308TL1/310TL2/316TL1/318TL2/324TL2 MAC "resource filter distribution filter ipv4" MACIPv4 IP IPv4 MACIPv6 IP IPv6 IPv4 DSCP IPv4 IPv6 DSCP IPv6 VLAN 10 ETHER1 8 VLAN VLAN 20 ETHER1 4 ETHER9 12 VLAN ETHER1 4 ETHER9 12 ETHER1 4 IP SR-S316C2 IP IP,ARP, Reverse ARP ACL # acl 130 mac any any ether 0800 # acl 131 mac any any ether 0806 # acl 132 mac any any ether 8035 ETHER1 4 1 # ether 1-4 macfilter 0 reject 130 # ether 1-4 macfilter 1 reject 131 # ether 1-4 macfilter 2 reject MAC

20 SR-S V ETHERBLOCK MAC SR-S208TC2, 224TC2, 208PD1, 224PS1, 224CP1, 248TC1 ETHERBLOCK VLAN MAC ether macfilter ETHER1 8 ETHERBLOCK1 acl 8 etherblock macfilter ETHER1 8 ETHERBLOCK1 acl 1 acl VLAN 10 ETHER1 8 VLAN VLAN 20 ETHER1 4 ETHER9 12 VLAN ETHER1 4 ETHER9 12 ETHERBLOCK1ETHER1 8 VLAN 10 MAC 00:0b:01:02:03:04 VLAN ID 10 MAC 00:0b:01:02:03:04 ACL # acl 100 mac 00:0b:01:02:03:04 any any # acl 100 vlan 10 any VLAN ID 10 ACL # acl 110 vlan 10 any ETHERBLOCK1ETHER1 8 1 # etherblock 1 macfilter 0 pass 100 ETHERBLOCK1ETHER1 8 2 # etherblock 1 macfilter 1 reject MAC

21 SR-S V ETHERBLOCK MAC SR-S208TC2, 224TC2, 208PD1, 224PS1, 224CP1, 248TC1 ETHERBLOCK VLAN MAC ether macfilter ETHER1 8 ETHERBLOCK1 acl 8 etherblock macfilter ETHER1 8 ETHERBLOCK1 acl 1 acl VLAN 10 ETHER1 8 VLAN VLAN 20 ETHER1 4 ETHER9 12 VLAN ETHER1 4 ETHER9 12 ETHERBLOCK1ETHER1 8 VLAN 10 MAC 00:0b:01:02:03:04 VLAN ID 10 MAC 00:0b:01:02:03:04 ACL # acl 120 mac any 00:0b:01:02:03:04 any # acl 120 vlan 10 any VLAN ID 10 ACL # acl 110 vlan 10 any ETHERBLOCK1ETHER1 8 1 # etherblock 1 macfilter 0 pass 120 ETHERBLOCK1ETHER1 8 2 # etherblock 1 macfilter 1 reject MAC

22 SR-S V ETHERBLOCK SR-S208TC2, 224TC2, 208PD1, 224PS1, 224CP1, 248TC1 ETHERBLOCK ether macfilter ETHER1 8 ETHERBLOCK1 acl 8 etherblock macfilter ETHER1 8 ETHERBLOCK1 acl 1 acl VLAN 10 ETHER1 8 VLAN VLAN 20 ETHER1 4 ETHER9 12 VLAN ETHER1 4 ETHER9 12 ETHERBLOCK1ETHER1 8 IP IP IP,ARP, Reverse ARP ACL # acl 130 mac any any ether 0800 # acl 131 mac any any ether 0806 # acl 132 mac any any ether 8035 ETHERBLOCK1ETHER1 8 1 # etherblock 1 macfilter 0 reject 130 # etherblock 1 macfilter 1 reject 131 # etherblock 1 macfilter 2 reject MAC

23 SR-S V VLAN MAC VLAN MAC SR-S308TL1/310TL2/316TL1/318TL2/324TL2 MAC "resource filter distribution filter ipv4" MACIPv4 IP IPv4 MACIPv6 IP IPv6 IPv4 DSCP IPv4 IPv6 DSCP IPv6 VLAN10 ETHER1 4 ETHER5 8 VLAN VLAN20 ETHER1 4 ETHER5 8 VLAN VLAN10 MAC 00:0b:01:02:03:04 MAC 00:0b:11:12:13:14 TCP VLAN 20 MAC 00:0b:21:22:23:24 MAC 00:0b:31:32:33:34 UDP MAC 00:0b:01:02:03:04 MAC 00:0b:11:12:13:14 TCP ACL # acl 0 mac 00:0b:01:02:03:04 00:0b:11:12:13:14 any # acl 0 ip any any 6 any MAC 00:0b:11:12:13:14 MAC 00:0b:01:02:03:04 TCP ACL # acl 1 mac 00:0b:11:12:13:14 00:0b:01:02:03:04 any # acl 1 ip any any 6 any MAC 00:0b:21:22:23:24 MAC 00:0b:31:32:33:34 UDP ACL # acl 2 mac 00:0b:21:22:23:24 00:0b:31:32:33:34 any # acl 2 ip any any 17 any MAC 00:0b:31:32:33:34 MAC 00:0b:21:22:23:24 UDP ACL # acl 3 mac 00:0b:31:32:33:34 00:0b:21:22:23:24 any # acl 3 ip any any 17 any VLAN10 12 # vlan 10 macfilter 0 reject 0 # vlan 10 macfilter 1 reject 1 VLAN20 34 # vlan 20 macfilter 0 reject 2 # vlan 20 macfilter 1 reject 3 23 MAC

24 SR-S V VLAN VLAN SR-S308TL1/310TL2/316TL1/318TL2/324TL2 MAC "resource filter distribution filter ipv4" MACIPv4 IP IPv4 MACIPv6 IP IPv6 IPv4 DSCP IPv4 IPv6 DSCP IPv6 VLAN10 ETHER1 4 ETHER5 8 VLAN VLAN20 ETHER1 4 ETHER5 8 VLAN VLAN10 IP VLAN 20 FNA IP IP, ARP, Reverse ARP ACL # acl 10 mac any any ether 0800 # acl 11 mac any any ether 0806 # acl 12 mac any any ether 8035 FNA ACL # acl 20 mac any any llc 8080 # acl 21 mac any any llc 0000 # acl 22 mac any any llc 0001 ACL # acl 30 mac any any any VLAN10 1 # vlan 10 macfilter 0 pass 10 # vlan 10 macfilter 1 pass 11 # vlan 10 macfilter 2 pass 12 # vlan 10 macfilter 3 reject 30 VLAN20 2 # vlan 20 macfilter 0 pass 20 # vlan 20 macfilter 1 pass 21 # vlan 20 macfilter 2 pass 22 # vlan 20 macfilter 3 reject MAC

25 SR-S V13 5 MAC MAC MAC FDB ETHER MAC SR-S316C2/716C2 ETHER2 ETHER5 ETHER VLAN10 VLAN20 ETHER25 12 VLAN 10 ETHER10 3 VLAN 20 1 MAC 00:00:00:00:00:11 2 MAC 00:00:00:00:00:22 3 MAC 00:00:00:00:00:33 # ether 2,5,10 media metal ETHER25 VLAN10 # ether 2,5 vlan untag 10 ETHER10 VLAN20 # ether 10 vlan untag 20 VLAN10 MAC # vlan 10 forward 0 00:00:00:00:00:11 2 # vlan 10 forward 1 00:00:00:00:00:22 5 VLAN20 MAC # vlan 20 forward 0 00:00:00:00:00: MAC

26 SR-S V13 6 QoS 2.12 QoS P VLAN P.63 SR-S208TC2/224TC2/208PD1/224PS1/224CP1/248TC1/308TL1/310TL2/316TL1/318TL2/324TL2 4 SR-S316C2/324TC1/328TR1/348TC1/716C2/724TC1/748TC1 8 SR-S208TC2/224TC2/208PD1/224PS1/224CP1/248TC1/308TL1/310TL2/ 316TL1/318TL2/324TL2 CoS FAX #qos cosmap 0 0 #qos cosmap 1 1 #qos cosmap 2 1 #qos cosmap 3 2 #qos cosmap 4 2 #qos cosmap 5 3 #qos cosmap 6 3 #qos cosmap QoS

27 SR-S V13 SR-S316C2/324TC1/328TR1/348TC1/716C2/724TC1/748TC1 CoS FAX #qos cosmap 0 0 #qos cosmap 1 0 #qos cosmap 2 1 #qos cosmap 3 1 #qos cosmap 4 2 #qos cosmap 5 3 #qos cosmap 6 4 #qos cosmap QoS

28 SR-S V MAC ETHERNET VLAN IDCOS ETHER SR-S308TL1/310TL2/316TL1/318TL2/324TL2 "resource filter distribution qos ipv4" MACIPv4 IP IPv4 MACIPv6 IP IPv6 IPv4 DSCP IPv4 IPv6 DSCP IPv6 ACL MAC VLAN - MAC MAC ETHERNET LSAP - MAC MAC ETHERNET LSAP - VLAN ID - COS - IP IP - IP IP - TCPUDP - ICMP TYPEICMP CODE - IP TOS DSCP ETHER ETHER - COS - COS ip precedence - DSCP - ip precedence - ip precedence COS - 28 QoS

29 SR-S V13 COS VLAN MAC COS VLAN 20 ETHER1 5 VLAN ETHER1 4 ETHER5 ETHER5 VLAN 20 MAC 00:0b:01:02:03:04 COS 5 VLAN ID 20 MAC 00:0b:01:02:03:04 ACL # acl 100 mac 00:0b:01:02:03:04 any any # acl 100 vlan 20 any ETHER5 1 COS 5 # ether 5 qos aclmap 0 cos COS ip precedence VLAN MAC COS ip precedence VLAN 10 ETHER1 8 VLAN ETHER1 VLAN 10 MAC 00:0b:01:02:03:04 COS ip precedence VLAN ID 10 MAC 00:0b:01:02:03:04 ACL # acl 110 mac any 00:0b:01:02:03:04 any # acl 110 vlan 10 any ETHER1 1 COS ip precedence # ether 1 qos aclmap 0 cos tos QoS

30 SR-S V13 DSCP VLAN DSCP VLAN 10 ETHER1 8 VLAN ETHER1 DSCP 40 ACL # acl 120 mac any any any ETHER1 1 DSCP 40 # ether 1 qos aclmap 0 dscp ip precedence VLAN COS ip precedence VLAN 10 ETHER1 8 VLAN VLAN 10 COS 5 ip precedence 6 VLAN ID 10 COS 5 ACL # acl 150 vlan 10 5 VLAN10 ETHER1 8 1 ip precedence 6 # ether 1-8 qos aclmap 0 tos QoS

31 SR-S V13 ip precedence COS VLAN VLAN ip precedence COS ETHER10 VLAN10VLAN20VLAN30 VLAN100 ETHER10 VLAN 20VLAN30VLAN100 ip precedence COS VLAN ID ACL # acl 100 vlan 20 any # acl 110 vlan 30 any # acl 120 vlan 100 any ETHER10 1 ip precedence COS # ether 10 qos aclmap 0 tos cos 100 # ether 10 qos aclmap 1 tos cos 110 # ether 10 qos aclmap 2 tos cos 120 ETHERBLOCK COS SR-S208TC2, 224TC2, 208PD1, 224PS1, 224CP1, 248TC1 ETHERBLOCK VLAN MAC COS ether qos aclmap ETHER1 8 ETHERBLOCK1 acl 8 etherblock qos aclmap ETHER1 8 ETHERBLOCK1 acl 1 acl VLAN 20 ETHER1 5 VLAN ETHER1 4 ETHER5 ETHERBLOCK1ETHER1 8 VLAN 20 MAC 00:0b:01:02:03:04 COS 5 VLAN ID 20 MAC 00:0b:01:02:03:04 ACL # acl 100 mac 00:0b:01:02:03:04 any any # acl 100 vlan 20 any ETHERBLOCK1ETHER1 8 1 COS 5 # etherblock 1 qos aclmap 0 cos QoS

32 SR-S V13 ETHERBLOCK COS ip precedence SR-S208TC2, 208PD1, 224TC2, 224PS1, 224CP1, 248TC1 ETHERBLOCK VLAN MAC COS ip precedence ether qos aclmap ETHER1 8 ETHERBLOCK1 acl 8 etherblock qos aclmap ETHER1 8 ETHERBLOCK1 acl 1 acl VLAN 10 ETHER1 8 VLAN ETHERBLOCK1ETHER1 8 VLAN 10 MAC 00:0b:01:02:03:04 COS ip precedence VLAN ID 10 MAC 00:0b:01:02:03:04 ACL # acl 110 mac any 00:0b:01:02:03:04 any # acl 110 vlan 10 any ETHERBLOCK1ETHER1 8 1 COS ip precedence # etherblock 1 qos aclmap 0 cos tos 110 ETHERBLOCK DSCP SR-S208TC2, 224TC2, 208PD1, 224PS1, 224CP1, 248TC1 ETHERBLOCK DSCP ether qos aclmap ETHER1 8 ETHERBLOCK1 acl 8 etherblock qos aclmap ETHER1 8 ETHERBLOCK1 acl 1 acl VLAN 10 ETHER1 8 VLAN ETHERBLOCK1ETHER1 8 DSCP QoS

33 SR-S V13 ACL # acl 120 mac any any any ETHERBLOCK1ETHER1 8 1 DSCP 40 # etherblock 1 qos aclmap 0 dscp ETHERBLOCK ip precedence SR-S208TC2, 224TC2, 208PD1, 224PS1, 224CP1, 248TC1 ETHERBLOCK VLAN COS ip precedence ether qos aclmap ETHER1 8 ETHERBLOCK1 acl 8 etherblock qos aclmap ETHER1 8 ETHERBLOCK1 acl 1 acl VLAN 10 ETHER1 8 VLAN VLAN 10 COS 5 ip precedence 6 VLAN ID 10 COS 5 ACL # acl 150 vlan 10 5 VLAN10 ETHERBLOCK1ETHER1 8 1 ip precedence 6 # etherblock 1 qos aclmap 0 tos QoS

34 SR-S V13 ETHERBLOCK ip precedence COS SR-S208TC2, 224TC2, 208PD1, 224PS1, 224CP1, 248TC1 ETHERBLOCK VLAN ip precedence COS ether qos aclmap ETHER1 8 ETHERBLOCK1 acl 8 etherblock qos aclmap ETHER1 8 ETHERBLOCK1 acl 1 acl ETHER1 8 VLAN10VLAN20VLAN30 VLAN100 ETHER1 6 VLAN 20VLAN30VLAN100 ip precedence COS VLAN ID ACL # acl 100 vlan 20 any # acl 110 vlan 30 any # acl 120 vlan 100 any ETHERBLOCK1ETHER1 8 1 ip precedence COS # etherblock 1 qos aclmap 0 tos cos 100 # etherblock 1 qos aclmap 1 tos cos 110 # etherblock 1 qos aclmap 2 tos cos 120 VLAN VLAN MAC VLAN20 ETHER1 5 VLAN ETHER1 4 ETHER5 VLAN20 MAC 00:0b:01:02:03:04 3 MAC 00:0b:01:02:03:04 ACL # acl 100 mac 00:0b:01:02:03:04 any any VLAN201 # vlan 20 qos aclmap 0 queue QoS

35 SR-S V13 7 STP STP 7.1 STP STP STPP.39 SR-S316C2/716C2 ETHER2 ETHER1 STP ETHER12 VID 10 VLAN # ether 1,2 media metal VLAN # ether 1 vlan untag 10 # ether 2 vlan untag 10 STP # ether 1 stp use on # ether 2 stp use on 35 STP

36 SR-S V MSTP VLAN STP LAN MSTP VLAN STP MSTPP.5 0 SR-S316C2/716C2 VLAN MSTP VLAN 1 2 1G M VLAN VLAN VLAN VLAN ETHER1 2 1G ETHER M ETHER12 STP STP

37 SR-S V13 2 ETHER1 1 1G ETHER M ETHER3 4 1G ETHER1 3 STP ETHER M ETHER M ETHER M ETHER1 3 STP ETHER1 2 1G ETHER M ETHER12 STP ETHER3 9 VID M ETHER10 14 VID M ETHER1516 VID M 1 # ether 1,2 media metal MDI # ether 1,2 mdi mdix ETHER12 STP # ether 1-2 stp domain 0 cost # ether 1-2 stp domain 1 cost # ether 1-2 stp domain 2 cost ETHER12 # ether 1 mode 1000 # ether 2 mode 100 VLAN # ether 1-2 vlan tag 100,200,300 STP # stp mode mstp # stp domain 1 vlan 100,200 # stp domain 2 vlan 300 # stp domain 0 priority 4096 # stp domain 1 priority 4096 # stp domain 2 priority STP

38 SR-S V13 2 # ether 1-3 media metal MDI # ether 1-3 mdi mdix ETHER1 3 STP # ether 1-3 stp domain 0 cost # ether 1-3 stp domain 1 cost # ether 1-3 stp domain 2 cost ETHER1 3 # ether 1 mode 1000 # ether 2 mode 100 # ether 3 mode 1000 VLAN # ether 1-3 vlan tag 100,200,300 STP # stp mode mstp # stp domain 1 vlan 100,200 # stp domain 2 vlan 300 # stp domain 0 priority 8192 # stp domain 1 priority 8192 # stp domain 2 priority # ether 1-3 media metal MDI # ether 1-3 mdi mdix ETHER1 3 STP # ether 1-3 stp domain 0 cost # ether 1-3 stp domain 1 cost # ether 1-3 stp domain 2 cost ETHER1 3 # ether 1-3 mode 100 VLAN # ether 1-3 vlan tag 100,200,300 STP # stp mode mstp # stp domain 1 vlan 100,200 # stp domain 2 vlan 300 # stp domain 0 priority # stp domain 1 priority # stp domain 2 priority STP

39 SR-S V13 4 # ether 1-16 media metal MDI # ether 1-16 mdi mdix ETHER12 STP # ether 1-2 stp domain 0 cost # ether 1-2 stp domain 1 cost # ether 1-2 stp domain 2 cost ETHER1 16 # ether 1 mode 1000 # ether 2-16 mode 100 VLAN # ether 1 vlan tag 100,200,300 # ether 2 vlan tag 100,200,300 # ether 3-9 vlan untag 100 # ether vlan untag 200 # ether 15,16 vlan untag 300 STP # stp mode mstp # stp domain 1 vlan 100,200 # stp domain 2 vlan 300 # stp domain 0 priority # stp domain 1 priority # stp domain 2 priority STP

40 SR-S V13 8 DHCP DHCP DHCP IP 2.13 DHCP P.74 IPv4 DHCP trusted VLAN IPv4 DHCP VLAN untrusted - IEEE802.1X Web MAC - - VLAN - SR-S224PS1/224CP1/248TC1/308TL1/310TL2/316TL1/318TL2/324TL2/316C2/324TC1/328TR1/348TC1/ 716C2/724TC1/748TC1 VLAN SR-S208TC2/224TC2/208PD1 ether egress permission DHCP clear dhcpsnoop DHCP DHCP DHCP DHCP DHCP IP DHCP DHCP

41 SR-S V13 VLAN10 DHCP ETHER ETHER1 DHCP IP ETHER5 ETHER11 DHCP IP DHCP # vlan 10 dhcpsnoop use on DHCP # ether 1 vlan untag 10 # ether 1 dhcpsnoop trust untrusted # ether 11 vlan untag 10 # ether 11 dhcpsnoop trust untrusted DHCP # ether 5 vlan untag 10 # ether 5 dhcpsnoop trust trusted 41 DHCP

42 SR-S V13 9 IGMP IGMP IGMP 2.14 IGMP P.75 lan IGMP IGMP IGMP 2 clear igmpsnoop group - - IGMP IGMPvlan igmpsnoop source IGMP Query vlan igmpsnoop source IGMP V1/V2vlan igmpsnoop proxy off IPv4IPv6 IGMP vlan igmpsnoop querier Querier IGMP

43 SR-S V13 IGMP 1 ETHER12 VLAN 10 2 ETHER34 VLAN 11 3 ETHER56 VLAN 12 1 VLAN VLAN10 12 ETHER15 2 VLAN10 ETHER16 IGMP # igmpsnoop use on # ether 1-6,15,16 media metal # ether 1-2 vlan untag 10 # ether 3-4 vlan untag 11 # ether 5-6 vlan untag 12 # ether 15 vlan tag 10,11,12 # ether 16 vlan untag 10 VLAN10 # vlan 10 igmpsnoop router yes 15,16 43 IGMP

44 SR-S V13 10 IEEE802.1X IEEE802.1X VLAN ID 2.15 IEEE802.1X P.77 IEEE802.1X VLAN SR-S308TL1/310TL2/316TL1/ 318TL2/324TL2/316C2/324TC1/328TR1/348TC1/716C2/724TC1/748TC1 - WebWeb VLAN - VLAN VLAN IEEE802.1X AAA ID EAP-MD5 1Systemwalker Desktop Inspection 802.1X SR-S316C2/716C2 Supplicant-1 RADIUS Supplicant-2 Supplicant-3 ETHER1 ETHER10 ETHER11 ETHER2 ETHER12 ETHER5 ETHER3 ETHER4 VLAN ID 10 VLAN ID 11 VLAN ID 123 VLAN ID IEEE802.1X

45 SR-S V13 ETHER10 12 IEEE802.1X ETHER10 12 ETHER1011 RADIUS ETHER12 AAA ID ETHER1011 ETHER Supplicant MAC ETHER12 ID VLAN ID Supp1 Supp1-pass VLAN123 Supp2 Supp2-pass VLAN100 RADIUS IP RADIUS VLAN13 RADIUS radius-secret ETHER1011 RADIUS - Acct-Session-Time - Acct-Output-Packets - Acct-Input-Packets - Acct-Output-Octets - Acct-Input-Packets RADIUS VLAN ID RADIUS Tunnel-Type 64 VLAN13 Tunnel-Media-Type Tunnel-Private-Group-ID 81 VLAN ID10 ASCII 10 VLAN 45 IEEE802.1X

46 SR-S V13 IEEE802.1X # dot1x use on RADIUS VLAN # lan 0 vlan 13 # lan 0 ip address /16 3 # ether 1-5,10-12 media metal RADIUS # ether 1 vlan untag 13 IEEE802.1X Supplicant VLAN # ether 2 vlan untag 10 # ether 3 vlan untag 11 # ether 4 vlan untag 100 # ether 5 vlan untag 123 IEEE802.1X # ether 10 dot1x use on # ether 10 dot1x aaa 0 # ether 11 dot1x use on # ether 11 dot1x aaa 0 # ether 12 dot1x use on # ether 12 dot1x aaa 1 RADIUS AAA # aaa 0 name radiusauth # aaa 0 radius service client both # aaa 0 radius auth source # aaa 0 radius client server-info auth secret radius-secret # aaa 0 radius client server-info auth address # aaa 0 radius client server-info account secret radius-secret # aaa 0 radius client server-info account address AAA # aaa 1 name localauth # aaa 1 user 0 id Supp1 # aaa 1 user 0 password Supp1-pass # aaa 1 user 0 supplicant vid 123 # aaa 1 user 1 id Supp2 # aaa 1 user 1 password Supp2-pass # aaa 1 user 1 supplicant vid IEEE802.1X

47 SR-S V13 11 Web Web 2.16 Web P.82 WebWeb VLAN VLAN VLAN VLAN SR-S308TL1/310TL2/316TL1/318TL2/ 324TL2/316C2/324TC1/328TR1/348TC1/716C2/724TC1/748TC1 - VLAN VLAN VLAN VLAN IP IP 11.1 AAA SR-S716C2 user0vlan ID 10 user1vlan ID 11 VLAN ID 10 IDuser0 pass0 ETHER10 ETHER2 ETHER11 ETHER3 VLAN ID 11 IDuser1 pass1 ETHER1011 Web AAA ID 1 ETHER1011 ETHER10 ETHER11 MAC MD5-CHAP VLAN VLAN ID 500 VLAN LAN0 IP /24 VLAN DHCP IP IP / Web

48 SR-S V13 VLAN LAN0 IP /24 IP /32 VLAN ID 10 ETHER2 VLAN ID 11 ETHER3 user0 user1 AAA 1 user0 VLAN ID 10 user1 VLAN ID 11 IP # ip routing enable Web # webauth use on MD5-CHAP # webauth type chap_md5 VLAN VID 500 # lan 0 vlan 500 DHCP # lan 0 ip address /24 3 # lan 0 ip dhcp service server # lan 0 ip dhcp info dns # lan 0 ip dhcp info address / # lan 0 ip dhcp info time 30s IP # acl 0 ip / /32 any # lan 0 ip filter 0 pass acl 0 # acl 1 ip any /32 any # lan 0 ip filter 1 pass acl 1 # acl 2 ip any any any # lan 0 ip filter 2 reject acl 2 # ether 2,3,10,11 media metal ETHER1011 STP # ether 10 stp use off # ether 11 stp use off ETHER1011 Web # ether 10 vlan untag 500 # ether 10 webauth use on # ether 10 webauth aaa 1 # ether 11 vlan untag 500 # ether 11 webauth use on # ether 11 webauth aaa 1 # ether 11 webauth mode port 48 Web

49 SR-S V13 Web VLAN ID ETHER # ether 2 vlan untag 10 # ether 3 vlan untag 11 LAN1 VLAN ID 100 # lan 1 vlan 100 # lan 1 ip address /24 3 LAN1 RIP # lan 1 ip rip use v2m v2 0 off RIP VLAN /24 # rip ip redist 0 reject /24 exact # rip ip redist 1 pass any AAA # aaa 1 name home # aaa 1 user 0 id user0 # aaa 1 user 0 password pass0 # aaa 1 user 0 supplicant vid 10 # aaa 1 user 1 id user1 # aaa 1 user 1 password pass1 # aaa 1 user 1 supplicant vid 11 # reset 49 Web

50 SR-S V AAA SR-S716C2 user0vlan ID 10 user1vlan ID 11 IDuser0 pass0 ETHER10 RADIUS ETHER2 VLAN ID 10 ETHER11 ETHER3 VLAN ID 11 IDuser1 pass1 ETHER1011 Web AAA ID 1 ETHER1011 ETHER10 MAC ETHER11 RADIUS IP MD5-CHAP VLAN LAN0 IP /24 VLAN DHCP IP IP / VLAN LAN0 IP /24 IP /32 IP # ip routing enable Web # webauth use on MD5-CHAP # webauth type chap_md5 VLAN VID 500 # lan 0 vlan Web

51 SR-S V13 DHCP # lan 0 ip address /24 3 # lan 0 ip dhcp service server # lan 0 ip dhcp info dns # lan 0 ip dhcp info address / # lan 0 ip dhcp info time 30s IP # acl 0 ip / /32 any # lan 0 ip filter 0 pass acl 0 # acl 1 ip / /32 any # lan 0 ip filter 1 pass acl 1 # acl 2 ip any any any # lan 0 ip filter 2 reject acl 2 # ether 2,3,10,11 media metal ETHER1011 STP # ether 10 stp use off # ether 11 stp use off ETHER1011 Web # ether 10 vlan untag 500 # ether 10 webauth use on # ether 10 webauth aaa 1 # ether 11 vlan untag 500 # ether 11 webauth use on # ether 11 webauth aaa 1 # ether 11 webauth mode port Web VLAN ID ETHER # ether 2 vlan untag 10 # ether 3 vlan untag 11 LAN1 VLAN ID 100 # lan 1 vlan 100 # lan 1 ip address /24 3 LAN1 RIP # lan 1 ip rip use v2m v2 0 off RIP VLAN /24 # rip ip redist 0 reject /24 exact # rip ip redist 1 pass any AAA # aaa 1 name home # aaa 1 radius service client both # aaa 1 radius client server-info auth secret test # aaa 1 radius client server-info auth address # reset 51 Web

52 SR-S V13 12 MAC MAC MAC VLAN SR-S308TL1/310TL2/316TL1/ 318TL2/324TL2/316C2/324TC1/328TR1/348TC1/716C2/724TC1/748TC1 - WebWeb VLAN - VLAN VLAN MAC AAA ID SR-S316C2/716C2 Supplicant-1 RADIUS Supplicant-2 Supplicant-3 ETHER1 ETHER10 ETHER11 ETHER2 ETHER12 ETHER5 ETHER3 ETHER4 VLAN ID 10 VLAN ID 11 VLAN ID 123 VLAN ID 100 ETHER10 12 MAC ETHER10 12 ETHER1011 RADIUS ETHER12 AAA ID ETHER1011 ETHER Supplicant MAC ETHER12 MAC VLAN ID 00:11:11:00:00:01 VLAN123 00:22:22:00:00:02 VLAN100 RADIUS IP RADIUS VLAN13 RADIUS radius-secret MD5-CHAP 52 MAC

53 SR-S V13 RADIUS VLAN ID RADIUS Tunnel-Type 64 VLAN13 Tunnel-Media-Type Tunnel-Private-Group-ID 81 VLAN ID10 ASCII 10 VLAN MAC # macauth use on MAC # macauth password macauth-pass MD5-CHAP # macauth type chap_md5 RADIUS VLAN # lan 0 vlan 13 # lan 0 ip address /16 3 # ether 1-5,10-12 media metal RADIUS # ether 1 vlan untag 13 MAC Supplicant VLAN # ether 2 vlan untag 10 # ether 3 vlan untag 11 # ether 4 vlan untag 100 # ether 5 vlan untag 123 MAC # ether 10 macauth use on # ether 10 macauth aaa 0 # ether 11 macauth use on # ether 11 macauth aaa 0 # ether 12 macauth use on # ether 12 macauth aaa 1 RADIUS AAA # aaa 0 name radiusauth # aaa 0 radius service client auth # aaa 0 radius auth source # aaa 0 radius client server-info auth secret radius-secret # aaa 0 radius client server-info auth address MAC

54 SR-S V13 AAA # aaa 1 name localauth # aaa 1 user 0 id # aaa 1 user 0 password macauth-pass # aaa 1 user 0 supplicant vid 123 # aaa 1 user 1 id # aaa 1 user 1 password macauth-pass # aaa 1 user 1 supplicant vid MAC

55 SR-S V13 13 IEEE802.1X Web MAC online ether SR-S316C2/716C2 HUB ETHER5 7 ETHER56 ETHER7 ETHER56 ETHER7 1 6 # ether 5-7 mac detection use on # ether 7 mac detection max_user 6 # ether 5-6 mac detection portdisable yes 55

56 SR-S V13 14 ARP ARP ARP AAA ID VLAN ID 10 RADIUS ETHER1 ARP ETHER21 SR-S324TC1/724TC1 VLAN10 ARP ARP RADIUS AAA ID 0 RADIUS IP RADIUS VLAN20 RADIUS radius-secret ARP 10 RADIUS VLAN # lan 0 vlan 20 # lan 0 ip address /16 3 # ether 21 media metal RADIUS # ether 21 vlan untag 20 ARP VLAN # ether 1 vlan untag ARP

57 SR-S V13 ARP # vlan 10 arpauth use on # vlan 10 arpauth aaa 0 # vlan 10 arpauth obstruction enable 10s RADIUS AAA # aaa 0 name RADIUS # aaa 0 radius service client auth # aaa 0 radius auth source # aaa 0 radius client server-info auth 0 secret radius-secret # aaa 0 radius client server-info auth 0 address ARP

58 SR-S V # loopdetect use on # loopdetect portdisable yes # loopdetect interval 1m online ether STP SR-S208TC2/224TC2/208PD1 ether egress permission 58

59 SR-S V13 16 ETHER1 ETHER8 ETHER1 ETHER8 ETHER1 ETHER8 ETHER8 # ether 8 type mirror 0 1 rx 59

60 SR-S V13 17 ether L3 ether L3 ETHER ether L3 SR-S316C2/716C2 online ether 1 2 ETHER1 ETHER1 ETHER1 VLAN ID VLAN ID /24 ether L3 1 # ether 1 media metal ETHER1 # ether 1 vlan untag /24 # lan 0 ip address /24 3 # lan 0 vlan 1 IP # ether 1 icmpwatch address # ether 1 icmpwatch interval 15s 40s 5s 60 ether L3

61 SR-S V13 2 # ether 1 media metal ETHER1 # ether 1 vlan untag /24 # lan 0 ip address /24 3 # lan 0 vlan ether L3 ether L3 SR-S316C2/716C2 ETHER1 4 10/100/1000BASE-T 1000Mbps VLAN ID VLAN ID /24 ether L3 1 ETHER1 4 # ether 1-4 media metal # ether 1-4 mode 1000 # ether 1-4 vlan tag 10 ETHER1 4 # ether 1-4 type linkaggregation /24 # lan 0 ip address /24 3 # lan 0 vlan 10 IP # linkaggregation 1 icmpwatch address # linkaggregation 1 icmpwatch interval 15s 40s 5s 61 ether L3

62 SR-S V13 2 ETHER1 4 # ether 1-4 media metal # ether 1-4 mode 1000 # ether 1-4 vlan tag 10 ETHER1 4 # ether 1-4 type linkaggregation /24 # lan 0 ip address /24 3 # lan 0 vlan ether L3

63 SR-S V13 18 online ether ETHER116 ETHER1 ETHER16 2 ETHER116 ETHER1 ETHER16 63

64 SR-S V13 1 ETHER1 # ether 1 recovery limit 5 ETHER1 1 # ether 1 type backup 1 master ETHER16 1 # ether 16 type backup 1 backup 1 # backup 1 mode master 2 ETHER1 # ether 1 recovery limit 5 ETHER1 1 # ether 1 type backup 1 master ETHER16 1 # ether 16 type backup 1 backup 1 # backup 1 mode master 64

65 SR-S V13 19 LAN SR-S716C2, 724TC1, 748TC1 LAN-B LAN-A 3 P.24 SR-S716C2 LAN-A LAN-B internet LAN-C LAN LAN / / /24 LAN-A VLAN LAN1 IP /24 DHCP LAN-B VLAN LAN0 IP /24 DHCP RIP-V IP IP LAN

66 SR-S V13 LAN-C /24 TIME TIME SNTP TIME RFC868SNTPSimple Network Time ProtocolRFC1361RFC1769 NTPNetwork Time Protocol IP IP # ip routing enable # ether 1,2 media metal VLAN # ether 1 vlan untag 10 # ether 2 vlan untag 20 # lan 0 vlan 10 # lan 1 vlan 20 LAN0 # lan 0 ip address /24 3 # lan 0 ip dhcp service off # lan 0 ip route / # lan 0 ip route 1 default # lan 0 ip rip use v1 v1 0 off LAN1 # lan 1 ip address /24 3 # lan 1 ip dhcp service server # lan 1 ip dhcp info dns # lan 1 ip dhcp info address / # lan 1 ip dhcp info time 1d # lan 1 ip dhcp info gateway # time auto server time # time auto interval start # reset 66 LAN

67 SR-S V13 20 IPv4 IPv6 SR-S724TC1, 748TC1 IPv4 IPv6 LAN-A100Mbps LAN-B100Mbps LAN1 LAN IPv6 2001:db8:1111:1001::/64 IPv6 2001:db8:1111:1000::/64 LAN-A 2001:db8:1111:1001::/64 RA VLAN LAN-B 2001:db8:1111:1000::/64 RA VLAN IPv4 IPv6 ether VLAN IPv6 67 IPv4 IPv6

68 SR-S V13 IPv6 # ip6 routing enable LAN0 # lan 0 ip6 use on # lan 0 ip6 address :db8:1111:1000::/64 # lan 0 ip6 ra prefix :db8:1111:1000::/64 30d 7d c0 # lan 0 ip6 ra mode send LAN1 # lan 1 ip6 use on # lan 1 ip6 address :db8:1111:1001::/64 # lan 1 ip6 ra prefix :db8:1111:1001::/64 30d 7d c0 # lan 1 ip6 ra mode send # reset 68 IPv4 IPv6

69 SR-S V13 21 RIP IPv4 SR-S716C2, 724TC1, 748TC1 RIPv /24 3 LAN /24 RIP RIP LAN1 LAN / /24 LAN / / /24 IP IP LAN0RIP LAN1 RIPv2 LAN2 RIPv2 LAN3 2 RIP 69 RIP IPv4

70 SR-S V13 RIP # lan 1 ip rip use v2m v2 0 off # lan 2 ip rip use v2m v2 0 off 2 # lan 3 ip route / RIP # routemanage ip redist rip connected on # routemanage ip redist rip static on RIP RIP - rip ip neighbor - RIP lan ip rip use RIP RIP RIP RIP 1 - RIP rip ip multipath RIP RIP ECMP RIP RIP RIP RIP 243 RIP RIP 25 RIP RIP RIP RIP 243 RIP 243 show ip traffic udpdropped due to full socket buffers 70 RIP IPv4

71 SR-S V13 22 RIP IPv4 SR-S716C2, 724TC1, 748TC1 IP RIP IP 0 any 1 16 RIP IP IP IP IP / / /24 IP IP / / /24 RIPv1 lan 0 ip address / /8 71 RIP IPv4

72 SR-S V13 2 A. B. A B RIP RIP RIP RIP 72 RIP IPv4

73 SR-S V SR-S716C2, 724TC1, 748TC1 LAN0 default default IP RIPv2 IP # lan 0 ip rip filter 0 act pass out # lan 0 ip rip filter 0 route default # lan 0 ip rip filter 1 act reject out # lan 0 ip rip filter 1 route any 73 RIP IPv4

74 SR-S V SR-S716C2, 724TC1, 748TC / / / / / /24 2 LAN / / /24 3 IP RIPv2 IP / / /24 1 # lan 1 ip rip filter 0 act pass out # lan 1 ip rip filter 0 route /24 # lan 1 ip rip filter 0 set metric 1 # lan 1 ip rip filter 1 act pass out # lan 1 ip rip filter 1 route any RIP RIP IPv4

75 SR-S V SR-S716C2, 724TC1, 748TC1 LAN0 default default IP RIPv2 IP # lan 0 ip rip filter 0 act pass in # lan 0 ip rip filter 0 route default # lan 0 ip rip filter 1 act reject in # lan 0 ip rip filter 1 route any 75 RIP IPv4

76 SR-S V SR-S716C2, 724TC1, 748TC / LAN / /24 1 LAN / / IP RIPv2 IP / /24 5 LAN /24 1 # lan 0 ip rip filter 0 act pass in # lan 0 ip rip filter 0 route /24 # lan 0 ip rip filter 0 set metric 1 LAN0 # lan 0 ip rip filter 1 act pass in # lan 0 ip rip filter 1 route any lan /24 5 # lan 1 ip rip filter 0 act pass in # lan 1 ip rip filter 0 route /24 # lan 1 ip rip filter 0 set metric 5 lan1 # lan 1 ip rip filter 1 act pass in # lan 1 ip rip filter 1 route any RIP IPv4

77 SR-S V SR-S716C2, 724TC1, 748TC /24 LAN /24 IP RIPv2 IP / /24 # lan 0 ip rip filter 0 act reject out # lan 0 ip rip filter 0 route /24 # lan 0 ip rip filter 1 act pass out # lan 0 ip rip filter 1 route any 77 RIP IPv4

78 SR-S V SR-S716C2, 724TC1, 748TC / /24 LAN0 IP RIPv2 IP / /24 # lan 0 ip rip filter 0 act reject in # lan 0 ip rip filter 0 route /24 # lan 0 ip rip filter 1 act pass in # lan 0 ip rip filter 1 route any 78 RIP IPv4

79 SR-S V13 23 RIP IPv6 SR-S724TC1, 748TC1 RIPIPv6 0 any 1 16 RIP 2001:db8:1111::/ :db8:1111::/ :db8:1111::/ :db8::/ :db8::/ :db8:1111::/32 79 RIP IPv6

80 SR-S V13 2 A. B. A B RIP RIP RIP RIP 80 RIP IPv6

81 SR-S V SR-S724TC1, 748TC1 LAN0 default default IPv6 RIPIPv6 IPv6 # lan 0 ip6 rip filter 0 act pass out # lan 0 ip6 rip filter 0 route default # lan 0 ip6 rip filter 1 act reject out # lan 0 ip6 rip filter 1 route any 81 RIP IPv6

82 SR-S V SR-S724TC1, 748TC :db8:1111::/ :db8:1111::/ :db8:2222::/ :db8:1111::/ :db8:1111::/ :db8:1111::/64 2 LAN1 2001:db8:2222::/ :db8:2222::/ :db8:2222::/64 3 IPv6 RIPIPv6 IPv6 2001:db8:1111::/ :db8:1111::/ :db8:1111::/64 1 # lan 1 ip6 rip filter 0 act pass out # lan 1 ip6 rip filter 0 route 2001:db8:1111::/64 # lan 1 ip6 rip filter 0 set metric 1 # lan 1 ip6 rip filter 1 act pass out # lan 1 ip6 rip filter 1 route any RIP RIP IPv6

83 SR-S V SR-S724TC1, 748TC1 LAN0 default default IPv6 RIPIPv6 IPv6 # lan 0 ip6 rip filter 0 act pass in # lan 0 ip6 rip filter 0 route default # lan 0 ip6 rip filter 1 act reject in # lan 0 ip6 rip filter 1 route any 83 RIP IPv6

84 SR-S V SR-S724TC1, 748TC :db8:1111::/ LAN0 2001:db8:1111::/ :db8:1111::/64 1 LAN1 2001:db8:1111::/ :db8.1111::/ IPv6 RIPIPv6 IPv :db8:1111::/ :db8:1111::/64 5 LAN0 2001:db8:1111::/64 1 # lan 0 ip6 rip filter 0 act pass in # lan 0 ip6 rip filter 0 route 2001:db8:1111::/64 # lan 0 ip6 rip filter 0 set metric 1 LAN0 # lan 0 ip6 rip filter 1 act pass in # lan 0 ip6 rip filter 1 route any lan1 2001:db8:1111::/64 5 # lan 1 ip6 rip filter 0 act pass in # lan 1 ip6 rip filter 0 route 2001:db8:1111::/64 # lan 1 ip6 rip filter 0 set metric 5 lan1 # lan 1 ip6 rip filter 1 act pass in # lan 1 ip6 rip filter 1 route any 84 RIP IPv6

85 SR-S V RIP IPv6

86 SR-S V SR-S724TC1, 748TC1 2001:db8:1111::/64 LAN0 2001:db8:1111::/64 IPv6 RIPIPv6 IPv6 2001:db8:1111::/ :db8:1111::/64 # lan 0 ip6 rip filter 0 act reject out # lan 0 ip6 rip filter 0 route 2001:db8:1111::/64 # lan 0 ip6 rip filter 1 act pass out # lan 0 ip6 rip filter 1 route any 86 RIP IPv6

87 SR-S V SR-S724TC1, 748TC1 2001:db8:1111::/ :db8:1111::/64 LAN0 IPv6 RIPIPv6 IPv6 2001:db8:1111::/ :db8:1111::/64 # lan 0 ip6 rip filter 0 act reject in # lan 0 ip6 rip filter 0 route 2001:db8:1111::/64 # lan 0 ip6 rip filter 1 act pass in # lan 0 ip6 rip filter 1 route any 87 RIP IPv6

88 SR-S V13 24 OSPF IPv4 SR-S716C2, 724TC1, 748TC1 OSPFv2 OSPF ID ID ID 2.30 OSPF P.108 OSPF IP IP OSPF 50 2 Designated Router OSPF MTU OSPF OSPF LSA LSDB LSA LSA commit / reset 60 OSPF commit LSA MaxAge OSPF OSPF DR LSA DR LSA ID LAN LAN LAN LAN LAN LAN LAN LAN LAN LAN LAN LAN1 ID ID OSPF IPv4

89 SR-S V13 IP IP 1 LAN0 OSPF LAN1 OSPF LAN0 OSPF ID LAN1 OSPF ID LAN /16 2 LAN0 OSPF LAN1 OSPF LAN0 OSPF ID LAN1 OSPF ID LAN0 1 LAN1 passive-interface 3 LAN0 OSPF LAN1 OSPF LAN0 OSPF ID LAN1 OSPF ID LAN0 255 LAN1 passive-interface 4 LAN0 OSPF LAN1 OSPF LAN0 OSPF ID LAN1 OSPF ID LAN0 1 LAN1 passive-interface 5 LAN0 OSPF LAN1 OSPF LAN0 OSPF ID LAN1 OSPF ID /16 6 LAN0 OSPF LAN1 OSPF 89 OSPF IPv4

90 SR-S V13 LAN0 OSPF ID LAN1 OSPF ID LAN1 passive-interface 1 LAN # lan 0 ip ospf use on 0 # lan 1 ip ospf use on 1 # lan 1 ip ospf priority 0 OSPF # ospf ip area 0 id # ospf ip area 1 id # ospf ip area 1 range /16 2 LAN # lan 0 ip ospf use on 0 # lan 0 ip ospf priority 1 # lan 1 ip ospf use on 0 # lan 1 ip ospf passive on OSPF # ospf ip area 0 id OSPF IPv4

91 SR-S V13 3 LAN # lan 0 ip ospf use on 0 # lan 0 ip ospf priority 255 # lan 1 ip ospf use on 0 # lan 1 ip ospf passive on OSPF # ospf ip area 0 id LAN # lan 0 ip ospf use on 0 # lan 0 ip ospf priority 1 # lan 1 ip ospf use on 0 # lan 1 ip ospf passive on OSPF # ospf ip area 0 id LAN # lan 0 ip ospf use on 0 # lan 1 ip ospf use on 1 OSPF # ospf ip area 0 id # ospf ip area 1 id # ospf ip area 1 range /16 91 OSPF IPv4

92 SR-S V13 6 LAN # lan 0 ip ospf use on 0 # lan 1 ip ospf use on 0 # lan 1 ip ospf passive on OSPF # ospf ip area 0 id OSPF IPv4

93 SR-S V SR-S716C2, 724TC1, 748TC1 OSPF ID OSPF ID ID LAN LAN LAN LAN LAN0 2 LAN1 ID LAN0 4 ID LAN LAN0 5 LAN1 ID IP IP 1 LAN0 OSPF LAN1 OSPF LAN0 OSPF ID LAN1 OSPF ID LAN0 OSPF LAN1 OSPF LAN0 OSPF ID LAN1 OSPF ID OSPF IPv4

94 SR-S V13 3 LAN0 OSPF LAN1 OSPF LAN0 OSPF ID LAN1 OSPF ID OSPF ID OSPF ID LAN0 OSPF LAN1 OSPF LAN0 OSPF ID LAN1 OSPF ID OSPF ID OSPF ID LAN0 OSPF LAN1 OSPF LAN0 OSPF ID LAN1 OSPF ID LAN # lan 0 ip ospf use on 0 # lan 1 ip ospf use on 1 OSPF # ospf ip area 0 id # ospf ip area 1 id OSPF IPv4

95 SR-S V13 2 LAN # lan 0 ip ospf use on 0 # lan 1 ip ospf use on 0 OSPF # ospf ip area 0 id LAN # lan 0 ip ospf use on 0 # lan 1 ip ospf use on 1 OSPF # ospf ip id # ospf ip area 0 id # ospf ip area 1 id # ospf ip area 1 vlink 0 id LAN # lan 0 ip ospf use on 0 # lan 1 ip ospf use on 1 OSPF # ospf ip id # ospf ip area 0 id # ospf ip area 0 vlink 0 id # ospf ip area 1 id OSPF IPv4

96 SR-S V13 5 LAN # lan 0 ip ospf use on 0 # lan 1 ip ospf use on 0 OSPF # ospf ip area 0 id OSPF IPv4

97 SR-S V SR-S716C2, 724TC1, 748TC1 OSPF OSPF RIP OSPF OSPF RIP OSPF OSPF OSPF NSSA OSPF OSPF OSPF ID LAN LAN LAN LAN LAN0 2 ID LAN LAN LAN1 RIPv2 ID IP IP 1 LAN0 OSPF LAN1 OSPF LAN0 OSPF ID LAN1 OSPF ID ID stub 2 LAN0 OSPF LAN1 OSPF LAN0 OSPF ID LAN1 OSPF ID ID stub 97 OSPF IPv4

98 SR-S V13 3 LAN0 OSPF LAN1 OSPF LAN0 OSPF ID LAN1 OSPF ID ID nssa 4 LAN0 OSPF LAN1 RIP V2,OSPF LAN0 OSPF ID LAN1 passive-interface ID nssa OSPF RIP RIP OSPF 1 LAN # lan 0 ip ospf use on 0 # lan 1 ip ospf use on 1 OSPF # ospf ip area 0 id # ospf ip area 1 id # ospf ip area 1 type stub 2 LAN # lan 0 ip ospf use on 0 # lan 1 ip ospf use on 0 OSPF # ospf ip area 0 id # ospf ip area 0 type stub 98 OSPF IPv4

99 SR-S V13 3 LAN # lan 0 ip ospf use on 0 # lan 1 ip ospf use on 1 OSPF # ospf ip area 0 id # ospf ip area 1 id # ospf ip area 1 type nssa 4 LAN # lan 0 ip ospf use on 0 # lan 1 ip rip use v2m v2 0 off # lan 1 ip ospf use on 0 # lan 1 ip ospf passive on # routemanage ip redist ospf rip on # routemanage ip redist rip ospf on OSPF # ospf ip area 0 id # ospf ip area 0 type nssa 99 OSPF IPv4

100 SR-S V13 25 OSPF IPv4 SR-S716C2, 724TC1, 748TC1 LSA 25.1 OSPF LSA SR-S716C2, 724TC1, 748TC1 LSA 0ID LAN0 LAN / /24 LAN0 LAN0 LAN0 LAN1 LAN1 LAN / / /24 1ID LSA IP IP LSA LAN0 OSPF LAN1 OSPF LAN0 ID LAN1 ID / OSPF IPv4

101 SR-S V13 OSPF # lan 0 ip ospf use on 0 # lan 1 ip ospf use on 1 # ospf ip area 0 id # ospf ip area 1 id # ospf ip area 1 range / OSPF IPv4

102 SR-S V AS OSPF SR-S716C2, 724TC1, 748TC1 AS OSPF AS AS /24 VPN RIP RIP LAN1 AS /24 LAN /16 0ID AS IP IPv6 LAN1 RIPv2 IP ASAS OSPF AS LAN0 OSPF LAN0 ID /16 OSPF RIP / OSPF IPv4

103 SR-S V13 OSPF # lan 0 ip ospf use on 0 # ospf ip area 0 id OSPF AS # routemanage ip redist ospf rip on # ospf ip summary /16 AS # ospf ip redist 0 pass /16 inexact # ospf ip redist 1 reject any 103 OSPF IPv4

104 SR-S V LSA SR-S716C2, 724TC1, 748TC1 TYPE3 LSA 0ID LAN0 LAN1 LAN /8 LAN1 LAN0 LAN0 LAN0 LAN1 LAN1 LAN / /8 1ID ID LSA IP IP / /8 LAN0 OSPF LAN1 OSPF LAN0 ID LAN1 ID /8 LSA OSPF # lan 0 ip ospf use on 0 # lan 1 ip ospf use on 1 # ospf ip area 0 id # ospf ip area 1 id # ospf ip area 1 type3-lsa 0 reject /8 in exact # ospf ip area 1 type3-lsa 1 pass any in 104 OSPF IPv4

105 SR-S V OSPF IPv4

106 SR-S V13 26 OSPF IPv6 SR-S724TC1, 748TC OSPF SR-S724TC1, 748TC1 OSPFIPv DRDesignated Router LAN OSPF MTU OSPF OSPF LSA LSDB LSA LSA commit/reset 60 OSPF DR LSA DR LSA LAN0 1 LAN0 2 LAN2 LAN1 LAN1 1 OSPF 2001:db8:10::/ :db8:20::/64 12 IPv6 lan ip6 use on 12 IPv6 1 LAN1 1 LAN2 OSPF 1 OSPF AS OSPF IPv6

107 SR-S V13 ID : : : LAN0 LAN1Passive-interface OSPF OSPF ID OSPF 2 LAN0 255 LAN1 OSPF ID LAN # lan 0 ip6 ospf use on 0 # lan 1 ip6 ospf use on 1 # lan 1 ip6 ospf passive on OSPF # ospf ip6 id # ospf ip6 area 0 id # ospf ip6 area 1 id # routemanage ip6 redist ospf static on 2 LAN # lan 0 ip6 ospf use on 0 # lan 0 ip6 ospf priority 255 # lan 1 ip6 ospf use on 1 OSPF # ospf ip6 id # ospf ip6 area 0 id # ospf ip6 area 1 id OSPF IPv6

108 SR-S V13 # ospf ip6 area 1 type stub 26.2 SR-S724TC1, 748TC1 LAN0 1 LAN1 LAN2 2001:db8:10::/ :db8:20::/64 IPv6 lan ip6 use on IPv6 1 LAN0LAN1LAN2 OSPF OSPF ID ID 1 : : IP LAN1 : 2001:db8:10::1/64 LAN2 : 2001:db8:20::1/ :db8:10::/642001:db8:20::/642001:db8::/ OSPF # ospf ip6 area 1 range :db8::/ OSPF IPv6

109 SR-S V SR-S724TC1, 748TC1 LSA LAN0 1 LAN1 LAN2 2001:db8:10::/ :db8:20::/64 IPv6 lan ip6 use on IPv6 1 LAN0LAN1LAN2 OSPF OSPF ID ID 1 : : IP LAN1 : 2001:db8:10::1/64 LAN2 : 2001:db8:20::1/ :db8:20::/64 OSPF # ospf ip6 area 1 inter-area-prefix 0 reject 2001:db8:20::/64 out # ospf ip6 area 1 inter-area-prefix 1 pass any out 109 OSPF IPv6

110 SR-S V13 27 SR-S716C2, 724TC1, 748TC1 2 PIM-DM PIM-SM 2.33 P PIM-DM SR-S716C2, 724TC1, 748TC1 PIM-DM LAN PIM-DM /24 1 LAN1ETHER / LAN0ETHER /24 LAN2ETHER /24 LAN1ETHER /24 LAN1ETHER /24 LAN0ETHER /24 LAN0ETHER /24 110

111 SR-S V13 PIM-DM PIM-DM 1 LAN0LAN1LAN2 ETHER1ETHER2ETHER3 RIP LAN0 IP /24 LAN1 IP /24 LAN2 IP /24 2 LAN0LAN1 ETHER1 ETHER2 RIP LAN0 IP /24 LAN1 IP /24 3 LAN0LAN1 ETHER1 ETHER2 RIP LAN0 IP /24 LAN1 IP /24 111

112 SR-S V13 1 ETHER # delete ether LAN # delete lan # ether 1-3 media metal ETHER1~3 # ether 1 vlan untag 1 # ether 2 vlan untag 2 # ether 3 vlan untag /24 # lan 0 vlan 1 # lan 0 ip address /24 3 # lan 0 ip multicast mode pimdm /24 # lan 1 vlan 2 # lan 1 ip address /24 3 # lan 1 ip rip use v2 v2 0 on # lan 1 ip multicast mode pimdm /24 # lan 2 vlan 3 # lan 2 ip address /24 3 # lan 2 ip rip use v2 v2 0 on # lan 2 ip multicast mode pimdm 112

113 SR-S V13 2 ETHER # delete ether LAN # delete lan # ether 1,2 media metal ETHER12 # ether 1 vlan untag 1 # ether 2 vlan untag /24 # lan 0 vlan 1 # lan 0 ip address /24 3 # lan 0 ip multicast mode pimdm /24 # lan 1 vlan 2 # lan 1 ip address /24 3 # lan 1 ip rip use v2 v2 0 on # lan 1 ip multicast mode pimdm 3 ETHER # delete ether LAN # delete lan # ether 1,2 media metal ETHER12 # ether 1 vlan untag 1 # ether 2 vlan untag /24 # lan 0 vlan 1 # lan 0 ip address /24 3 # lan 0 ip multicast mode pimdm /24 # lan 1 vlan 2 # lan 1 ip address /24 3 # lan 1 ip rip use v2 v2 0 on # lan 1 ip multicast mode pimdm 113

114 SR-S V PIM-SM SR-S716C2, 724TC1, 748TC1 PIM-SM PIM-SM BSRBootstrap Router 1 BSR RPRendezvous Point RP 1 RP SPT Shortest Path Tree PIM-SM RP RP LAN0ETHER /24 PIM-SM 1 LAN1ETHER /24 LAN2ETHER /24 LAN0ETHER /24 LAN1ETHER /24 RP BSR PIM-SM LAN0ETHER1 LAN1ETHER / /24 LAN2ETHER3 PIM-SM /24 LAN3ETHER /24 LAN1ETHER /24 PIM-SM LAN0ETHER /24 LAN1ETHER /24 PIM-SM LAN0ETHER /24 PIM-SM 114

115 SR-S V13 RP SPT PIM-SM RIP RP BSR SPT 1 LAN0LAN1LAN2 ETHER1ETHER2ETHER3 LAN0 IP /24 LAN1 IP /24 LAN2 IP /24 2 LAN0LAN1 ETHER1 ETHER2 LAN0 IP /24 LAN1 IP /24 RP BSR LAN0LAN1LAN2LAN3 ETHER1ETHER2ETHER3ETHER4 LAN0 IP /24 LAN1 IP /24 LAN2 IP /24 LAN3 IP /24 4 LAN0LAN1 ETHER1 ETHER2 LAN0 IP /24 LAN1 IP /24 5 LAN0LAN1 ETHER1 ETHER2 LAN0 IP /24 LAN1 IP /24 115

116 SR-S V13 1 ETHER # delete ether LAN # delete lan # ether 1-3 media metal ETHER1~3 # ether 1 vlan untag 1 # ether 2 vlan untag 2 # ether 3 vlan untag /24 # lan 0 vlan 1 # lan 0 ip address /24 3 # lan 0 ip multicast mode pimsm /24 # lan 1 vlan 2 # lan 1 ip address /24 3 # lan 1 ip rip use v2 v2 0 on # lan 1 ip multicast mode pimsm /24 # lan 2 vlan 3 # lan 2 ip address /24 3 # lan 2 ip rip use v2 v2 0 on # lan 2 ip multicast mode pimsm 116