SR-Sシリーズ セキュアスイッチ コマンド設定事例集

Similar documents
FUJITSU Network SR-S コマンド設定事例集

MR1000 コマンド設定事例集

SR-S724TC1/324TC1 セキュアスイッチ ご利用にあたって

SR-X526R1 サーバ収容スイッチ ご利用にあたって

SR-S748TC1/348TC1 セキュアスイッチ ご利用にあたって

SR-X324T1/316T1 サーバ収容スイッチ ご利用にあたって

FUJITSU Network SR-M トラブルシューティング

PRIMERGY BX600 スイッチブレード(1Gbps)(PG-SW107) コマンド設定事例集

FUJITSU Network Si-R Si-R Gシリーズ Webユーザーズガイド

SR-X324T2/316T2 サーバ収容スイッチ ご利用にあたって

SR-X340TR1 サーバ収容スイッチ ご利用にあたって

FUJITSU Network SR-M SR-M20AP1 ご利用にあたって

SR-S310TL2/318TL2 セキュアスイッチ ご利用にあたって

Si-R180 ご利用にあたって

設定例集_Rev.8.03, Rev.9.00, Rev.10.01対応

RT107eセミナー用資料

Si-R30コマンドリファレンス

FutureNet CS-SEILシリーズ コマンドリファレンス ver.1.82対応版

IP.dvi

FUJITSU Network Si-R Si-Rシリーズ Si-R240B ご利用にあたって

CS-SEIL-510/C コマンドリファレンス

リング型IPカメラ監視ソリューション(マルチキャスト編)

WEB.dvi

FUJITSU Network Si-R Si-RシリーズSi-R220C ご利用にあたって

SRT/RTX/RT設定例集

untitled

FUJITSU Network Si-R Si-R Gシリーズ Si-R G100 ご利用にあたって

MR1000 Webリファレンス

FUJITSU Network Si-R Si-R Gシリーズ トラブルシューティング

設定例集

帯域を測ってみよう (適応型QoS/QoS連携/帯域検出機能)

インターネットVPN_IPoE_IPv6_fqdn


アライドテレシス ディストリビューション・スイッチ AT-x600シリーズで実現するMicrosoft® NAP

PIM-SSMマルチキャストネットワーク

PRIMERGY スイッチブレード(10Gbps 18/8 +2) IBP コマンドリファレンス

LSM-L3-24設定ガイド(初版)

QOS.dvi

IGMPS.dvi

00.目次_ope

2008, 2009 TOSHIBA TEC CORPORATION All rights reserved

Win XP SP3 Japanese Ed. NCP IPSec client Hub L3 SW SRX100 Policy base VPN fe-0/0/0 vlan.0 Win 2003 SVR /

ES1018V2_24V2_MG.book

CCIE IP Anycast RP Anycast RP Anycast RP Anycast RP PIM-SM RP RP PIM-SM RP RP RP PIM Register RP PIM-SM RP PIM-SM RP RP RP RP Auto RP/BSR RP RP RP RP

アライドテレシスコア スイッチ AT-SBx908 シリーズで実現する AMF-SBx908 ソリューション Solution No 主な目的 ネットワークの一元管理 共有化をしたい 既存ネットワークを再構築せずに 簡単に導入したい ネットワーク管理 運用にかかるコストを削減

Teradici Corporation # Canada Way, Burnaby, BC V5G 4X8 Canada p f Teradici Corporation Teradi

SRX300 Line of Services Gateways for the Branch

2011 NTT Information Sharing Platform Laboratories

AirMac ネットワーク構成の手引き

CPE9V1.0&AP615V2.0-C01说明书-电子档

AirMac ネットワーク for Windows

GA-1190J

SRT100 コマンド設定運用説明書

Logitec NAS シリーズ ソフトウェアマニュアル

橡2-TrafficEngineering(revise).PDF

アライドテレシス・コアスイッチ AT-x900 シリーズとディストリビューションスイッチ AT-x600 シリーズで実現するACLトラフィックコントロール

アライドテレシス コア・スイッチ AT-x900 シリーズ とディストリビューションスイッチ AT-x600 シリーズ で実現するOSPFv3/OSPFv2 & RIP/RIPng デュアルスタック ・ ネットワーク

All Rights Reserved. Copyright(c)1997 Internet Initiative Japan Inc. 1

Logitec NAS シリーズ ソフトウェアマニュアル

Si-R30コマンドリファレンス

TCP/IP Internet Week 2002 [2002/12/17] Japan Registry Service Co., Ltd. No.3 Internet Week 2002 [2002/12/17] Japan Registry Service Co., Ltd. No.4 2

VLAN.dvi

untitled

untitled

ScreenOS Copyright (C) 2005 NOX Co., Ltd. All Rights Reserved. Version1.00

LAN

Agenda IPv4 over IPv6 MAP MAP IPv4 over IPv6 MAP packet MAP Protocol MAP domain MAP domain ASAMAP ASAMAP 2

IPIP(Si-RGX)

NetAttest EPS設定例

untitled

IP ICMP Redirec

橡sirahasi.PDF

コア・スイッチSBx8100シリーズとディストリビューション・スイッチx610シリーズで実現する大容量テラビットバックプレーンソリューション

Si-R Gシリーズ コマンドユーザーズガイド

untitled

ict2-.key

ScreenOS 5.0 ScreenOS 5.0 Deep Inspection VLAN NetScreen-25/-50/-204/-208 HA NetScreen-25 HA Lite NetScreen-25 NetScreen-50) ALG(Application Layer Gat

total.dvi

ディストリビューションスイッチ AT-x600シリーズで実現するエンタープライズ・認証検疫ネットワーク

TELNET SNMPv1 RMON Ping TELNET 8 SH4124T IP/TCP/UDP/ARP/ICMP TFTP Bridge MIBRFC 1493 MIB-IIRFC 1213 RMON MIBRFC p MIBRFC Q MIBRFC

AMFマルチテナントソリューション

Microsoft PowerPoint - 検証レポート_ARUBA.ppt

QUANTA MESH スイッチ製品のご紹介 株式会社ネットワールドマーケティング統括部ネットワークソリューション課

Transcription:

SR-S P3NK-3822-06Z0 V13

SR-S V13 2009 11 2010 7 2 2010 10 3 2012 7 4 2012 9 5 2013 1 6 Microsoft Corporation Copyright FUJITSU LIMITED 2009-2013 2

SR-S V13...2...6...6...7...8 1 VLAN...9 1.1 VLAN...9 1.2 VLAN...10 1.3 VLAN...11 2...12 2.1 LACP...13 3...15 4 MAC...16 4.1 MAC...17 4.2 MAC...18 4.3...19 4.4 ETHERBLOCK MAC...20 4.5 ETHERBLOCK MAC...21 4.6 ETHERBLOCK...22 4.7 VLAN MAC...23 4.8 VLAN...24 5 MAC...25 6 QoS...26 6.1...26 6.2...28 7 STP...35 7.1 STP...35 7.2 MSTP...36 8 DHCP...40 9 IGMP...42 10 IEEE802.1X...44 11 Web...47 11.1 AAA...47 11.2 AAA...50 12 MAC...52 13...55 14 ARP...56 15...58 16...59 17 ether L3...60 17.1 ether L3...61 18...63 19 LAN...65 20 IPv4 IPv6...67 21 RIP IPv4...69 22 RIP IPv4...71 22.1...73 22.2...74 3

SR-S V13 22.3...75 22.4...76 22.5...77 22.6...78 23 RIP IPv6...79 23.1...81 23.2...82 23.3...83 23.4...84 23.5...86 23.6...87 24 OSPF IPv4...88 24.1...93 24.2...97 25 OSPF IPv4...100 25.1 OSPF LSA...100 25.2 AS OSPF...102 25.3 LSA...104 26 OSPF IPv6...106 26.1 OSPF...106 26.2...108 26.3...109 27...110 27.1 PIM-DM...110 27.2 PIM-SM...114 27.3...120 28 IP...123 28.1...125 28.2 IPv6...127 28.3...129 28.4...131 28.5 ping...132 29 DSCP...133 30 VRRP...135 30.1...136 30.2...139 31 ECMP...142 32 DHCP...144 32.1 DHCP...144 32.2 DHCP...146 32.3 DHCP...148 32.4 IPv6 DHCP...150 32.5 IPv6 DHCP...152 33 DNS ProxyDNS...153 33.1 DNS...153 33.2 DNS...155 33.3 DNS...156 33.4 DNS...158 34 URL URL...159 35 SNMP...161 36...164 37...165 4

SR-S V13 37.1...165 38...166 39 IEEE802.1ad...168 39.1 IEEE802.1ad...168 39.2 IEEE802.1ad C-TAG...170 40 IEEE802.1ah...173 40.1 IEEE802.1ah...173 40.2 IEEE802.1ah S-TAG...176 40.3 IEEE802.1ah L2...179 41 L2...183 42 LAN...185 42.1 LAN...185 42.2...188 42.3...189 42.4 LAN MAC MAC...190 42.5 LAN...191 42.6 LAN LAN...193... 194 5

SR-S V13 CD-ROM README PL PL configure # 6

SR-S V13 MicrosoftMS-DOSWindowsWindows NTWindows Server Windows Vista Microsoft Corporation Adobe Reader Adobe Systems Incorporated Netscape Netscape Communications Corporation UNIX Microsoft Windows XP Professional operating system Windows XP Microsoft Windows XP Home Edition operating system Microsoft Windows 2000 Server Network operating system Windows 2000 Microsoft Windows 2000 Professional operating system Microsoft Windows NT Server network operating system Version 4.0 Windows NT 4.0 Microsoft Windows NT Workstation operating system Version 4.0 Microsoft Windows Server 2003, Standard Edition Windows Server 2003 Microsoft Windows Server 2003 R2, Standard Edition Microsoft Windows Server 2003, Enterprise Edition Microsoft Windows Server 2003 R2, Enterprise Edition Microsoft Windows Server 2003, Datacenter Edition Microsoft Windows Server 2003 R2, Datacenter Edition Microsoft Windows Server 2003, Web Edition Microsoft Windows Server 2003, Standard x64 Edition Microsoft Windows Server 2003 R2, Standard Edition Microsoft Windows Server 2003, Enterprise x64 Edition Microsoft Windows Server 2003 R2, Enterprise x64 Edition Microsoft Windows Server 2003, Enterprise Edition for Itanium-based systems Microsoft Windows Server 2003, Datacenter x64 Edition Microsoft Windows Server 2003 R2, Datacenter x64 Edition Microsoft Windows Vista Ultimate operating system Windows Vista Microsoft Windows Vista Business operating system Microsoft Windows Vista Home Premium operating system Microsoft Windows Vista Home Basic operating system Microsoft Windows Vista Enterprise operating system Microsoft Windows 7 64bit Home Premium Windows 7 Microsoft Windows 7 32bit Professional 7

SR-S V13 - - - - Web Web Web MIB/Trap Web Web Web 8

SR-S V13 1 VLAN 1.1 VLAN VLAN SR-S316C2/716C2 VLAN HUB VLAN HUB 192.168.10.0/24 192.168.20.0/24 VLAN ID 10 VLAN ID 20 ETHER15 VLAN HUB VLAN ID VLAN ID10 192.168.10.0/24 VLAN ID20 192.168.20.0/24 # ether 1,5 media metal ETHER1 # ether 1 vlan untag 10 ETHER5 # ether 5 vlan untag 20 192.168.10.1/24 # lan 0 ip address 192.168.10.1/24 3 # lan 0 vlan 10 192.168.20.1/24 # lan 1 ip address 192.168.20.1/24 3 # lan 1 vlan 20 9 VLAN

SR-S V13 1.2 VLAN 1 2 VLAN VLAN SR-S316C2/716C2 VLAN HUB VLAN HUB VLAN ID 10 VLAN ID 20 VLAN ID 10 VLAN ID 20 ETHER15 VLAN HUB VLAN ID VLAN ID10 192.168.10.0/24 VLAN ID20 192.168.20.0/24 # ether 1,5 media metal ETHER1 # ether 1 vlan tag 10,20 ETHER5 # ether 5 vlan tag 10,20 192.168.10.1/24 # lan 0 ip address 192.168.10.1/24 3 # lan 0 vlan 10 192.168.20.1/24 # lan 1 ip address 192.168.20.1/24 3 # lan 1 vlan 20 10 VLAN

SR-S V13 1.3 VLAN SR-S224PS1, 224CP1, 248TC1, 308TL1, 310TL2, 316TL1, 318TL2, 324TL2, 316C2, 324TC1, 328TR1, 348TC1, 716C2, 724TC1, 748TC1 IP VLAN10 VLAN20 IP VLAN100 SR-S316C2/716C2 VLAN HUB VLAN HUB 192.168.10.0/24 192.168.20.0/24 VLAN ID 10IP VLAN ID 20IP VLAN ID 100IP ETHER15 VLAN HUB VLAN ID VLAN ID10 192.168.10.0/24 VLAN ID20 192.168.20.0/24 VLAN ID100 # ether 1,5 media metal ETHER1 # ether 1 vlan untag 10,100 ETHER5 # ether 5 vlan untag 20,100 VLAN1020 IPv4 VLAN # vlan 10 protocol ipv4 # vlan 20 protocol ipv4 192.168.10.1/24 # lan 0 ip address 192.168.10.1/24 3 # lan 0 vlan 10 192.168.20.1/24 # lan 1 ip address 192.168.20.1/24 3 # lan 1 vlan 20 11 VLAN

SR-S V13 2 4 1000M SR-S316C2/716C2 1 2 ETHER1 4 10/100/1000BASE-T 1000Mbps VLAN ID VLAN ID10 192.168.10.0/24 VLAN ID20 192.168.20.0/24 1 ETHER1 4 # ether 1-4 media metal # ether 1-4 mode 1000 # ether 1-4 vlan tag 10,20 ETHER1 4 # ether 1-4 type linkaggregation 1 1 192.168.10.1/24 # lan 0 ip address 192.168.10.1/24 3 # lan 0 vlan 10 192.168.20.1/24 # lan 1 ip address 192.168.20.1/24 3 # lan 1 vlan 20 12

SR-S V13 2 ETHER1 4 # ether 1-4 media metal # ether 1-4 mode 1000 # ether 1-4 vlan tag 10,20 ETHER1 4 # ether 1-4 type linkaggregation 1 1 192.168.10.2/24 # lan 0 ip address 192.168.10.2/24 3 # lan 0 vlan 10 192.168.20.2/24 # lan 1 ip address 192.168.20.2/24 3 # lan 1 vlan 20 2.7 P.36 2.1 LACP 4 1000M LACP SR-S316C2/716C2 1 2 ETHER1 4 10/100/1000BASE-T 1000Mbps VLAN ID VLAN ID10 192.168.10.0/24 VLAN ID20 192.168.20.0/24 13

SR-S V13 1 ETHER1 4 # ether 1-4 media metal # ether 1-4 mode 1000 # ether 1-4 vlan tag 10,20 ETHER1 4 # ether 1-4 type linkaggregation 1 1 LACP # linkaggregation 1 mode active 192.168.10.1/24 # lan 0 ip address 192.168.10.1/24 3 # lan 0 vlan 10 192.168.20.1/24 # lan 1 ip address 192.168.20.1/24 3 # lan 1 vlan 20 2 ETHER1 4 # ether 1-4 media metal # ether 1-4 mode 1000 # ether 1-4 vlan tag 10,20 ETHER1 4 # ether 1-4 type linkaggregation 1 1 LACP # linkaggregation 1 mode active 192.168.10.2/24 # lan 0 ip address 192.168.10.2/24 3 # lan 0 vlan 10 192.168.20.2/24 # lan 1 ip address 192.168.20.2/24 3 # lan 1 vlan 20 2.7 P.36 2.7.1 LACP P.37 14

SR-S V13 3 SR-S224TC2 ETHER25 ETHER26 SR-S224TC2 ETHER2526 ETHER25 ETHER26 1 ETHER25 1 # ether 25 type backup 1 master ETHER26 1 # ether 26 type backup 1 backup 1 # backup 1 mode master 15

SR-S V13 4 MAC MAC ETHERNET VLAN IDCOS 2.11 MAC P.55 MAC ACL MAC VLAN - MAC MAC ETHERNET LSAP - MAC MAC ETHERNET LSAP - VLAN ID - COS - IP IP - IP IP - - TCPUDP - ICMP TYPEICMP CODE - IP TOS DSCP ETHER ETHER 16 MAC

SR-S V13 2 A. B. A MAC MAC B 4.1 MAC VLAN MAC SR-S308TL1/310TL2/316TL1/318TL2/324TL2 MAC "resource filter distribution filter ipv4" MACIPv4 IP IPv4 MACIPv6 IP IPv6 IPv4 DSCP IPv4 IPv6 DSCP IPv6 VLAN 10 ETHER1 8 VLAN VLAN 20 ETHER1 4 ETHER9 12 VLAN ETHER1 4 ETHER9 12 ETHER2 VLAN 10 MAC 00:0b:01:02:03:04 VLAN ID 10 MAC 00:0b:01:02:03:04 ACL ---- 1 # acl 100 mac 00:0b:01:02:03:04 any any # acl 100 vlan 10 any VLAN ID 10 ACL ---- 2 # acl 110 vlan 10 any ETHER2 1 # ether 2 macfilter 0 pass 100 ETHER2 2 # ether 2 macfilter 1 reject 110 17 MAC

SR-S V13 4.2 MAC VLAN MAC SR-S308TL1/310TL2/316TL1/318TL2/324TL2 MAC "resource filter distribution filter ipv4" MACIPv4 IP IPv4 MACIPv6 IP IPv6 IPv4 DSCP IPv4 IPv6 DSCP IPv6 VLAN 10 ETHER1 8 VLAN VLAN 20 ETHER1 4 ETHER9 12 VLAN ETHER1 4 ETHER9 12 ETHER4 8 VLAN 10 MAC 00:0b:01:02:03:04 VLAN ID 10 MAC 00:0b:01:02:03:04 ACL ---- 1 # acl 120 mac any 00:0b:01:02:03:04 any # acl 120 vlan 10 any VLAN ID 10 ACL ---- 2 # acl 110 vlan 10 any ETHER4 8 1 # ether 4-8 macfilter 0 pass 120 ETHER4 8 2 # ether 4-8 macfilter 1 reject 110 18 MAC

SR-S V13 4.3 VLAN SR-S308TL1/310TL2/316TL1/318TL2/324TL2 MAC "resource filter distribution filter ipv4" MACIPv4 IP IPv4 MACIPv6 IP IPv6 IPv4 DSCP IPv4 IPv6 DSCP IPv6 VLAN 10 ETHER1 8 VLAN VLAN 20 ETHER1 4 ETHER9 12 VLAN ETHER1 4 ETHER9 12 ETHER1 4 IP SR-S316C2 IP IP,ARP, Reverse ARP ACL ---- 1 # acl 130 mac any any ether 0800 # acl 131 mac any any ether 0806 # acl 132 mac any any ether 8035 ETHER1 4 1 # ether 1-4 macfilter 0 reject 130 # ether 1-4 macfilter 1 reject 131 # ether 1-4 macfilter 2 reject 132 19 MAC

SR-S V13 4.4 ETHERBLOCK MAC SR-S208TC2, 224TC2, 208PD1, 224PS1, 224CP1, 248TC1 ETHERBLOCK VLAN MAC ether macfilter ETHER1 8 ETHERBLOCK1 acl 8 etherblock macfilter ETHER1 8 ETHERBLOCK1 acl 1 acl VLAN 10 ETHER1 8 VLAN VLAN 20 ETHER1 4 ETHER9 12 VLAN ETHER1 4 ETHER9 12 ETHERBLOCK1ETHER1 8 VLAN 10 MAC 00:0b:01:02:03:04 VLAN ID 10 MAC 00:0b:01:02:03:04 ACL ---- 1 # acl 100 mac 00:0b:01:02:03:04 any any # acl 100 vlan 10 any VLAN ID 10 ACL ---- 2 # acl 110 vlan 10 any ETHERBLOCK1ETHER1 8 1 # etherblock 1 macfilter 0 pass 100 ETHERBLOCK1ETHER1 8 2 # etherblock 1 macfilter 1 reject 110 20 MAC

SR-S V13 4.5 ETHERBLOCK MAC SR-S208TC2, 224TC2, 208PD1, 224PS1, 224CP1, 248TC1 ETHERBLOCK VLAN MAC ether macfilter ETHER1 8 ETHERBLOCK1 acl 8 etherblock macfilter ETHER1 8 ETHERBLOCK1 acl 1 acl VLAN 10 ETHER1 8 VLAN VLAN 20 ETHER1 4 ETHER9 12 VLAN ETHER1 4 ETHER9 12 ETHERBLOCK1ETHER1 8 VLAN 10 MAC 00:0b:01:02:03:04 VLAN ID 10 MAC 00:0b:01:02:03:04 ACL ---- 1 # acl 120 mac any 00:0b:01:02:03:04 any # acl 120 vlan 10 any VLAN ID 10 ACL ---- 2 # acl 110 vlan 10 any ETHERBLOCK1ETHER1 8 1 # etherblock 1 macfilter 0 pass 120 ETHERBLOCK1ETHER1 8 2 # etherblock 1 macfilter 1 reject 110 21 MAC

SR-S V13 4.6 ETHERBLOCK SR-S208TC2, 224TC2, 208PD1, 224PS1, 224CP1, 248TC1 ETHERBLOCK ether macfilter ETHER1 8 ETHERBLOCK1 acl 8 etherblock macfilter ETHER1 8 ETHERBLOCK1 acl 1 acl VLAN 10 ETHER1 8 VLAN VLAN 20 ETHER1 4 ETHER9 12 VLAN ETHER1 4 ETHER9 12 ETHERBLOCK1ETHER1 8 IP IP IP,ARP, Reverse ARP ACL ---- 1 # acl 130 mac any any ether 0800 # acl 131 mac any any ether 0806 # acl 132 mac any any ether 8035 ETHERBLOCK1ETHER1 8 1 # etherblock 1 macfilter 0 reject 130 # etherblock 1 macfilter 1 reject 131 # etherblock 1 macfilter 2 reject 132 22 MAC

SR-S V13 4.7 VLAN MAC VLAN MAC SR-S308TL1/310TL2/316TL1/318TL2/324TL2 MAC "resource filter distribution filter ipv4" MACIPv4 IP IPv4 MACIPv6 IP IPv6 IPv4 DSCP IPv4 IPv6 DSCP IPv6 VLAN10 ETHER1 4 ETHER5 8 VLAN VLAN20 ETHER1 4 ETHER5 8 VLAN VLAN10 MAC 00:0b:01:02:03:04 MAC 00:0b:11:12:13:14 TCP VLAN 20 MAC 00:0b:21:22:23:24 MAC 00:0b:31:32:33:34 UDP MAC 00:0b:01:02:03:04 MAC 00:0b:11:12:13:14 TCP ACL ---- 1 # acl 0 mac 00:0b:01:02:03:04 00:0b:11:12:13:14 any # acl 0 ip any any 6 any MAC 00:0b:11:12:13:14 MAC 00:0b:01:02:03:04 TCP ACL ---- 2 # acl 1 mac 00:0b:11:12:13:14 00:0b:01:02:03:04 any # acl 1 ip any any 6 any MAC 00:0b:21:22:23:24 MAC 00:0b:31:32:33:34 UDP ACL ---- 3 # acl 2 mac 00:0b:21:22:23:24 00:0b:31:32:33:34 any # acl 2 ip any any 17 any MAC 00:0b:31:32:33:34 MAC 00:0b:21:22:23:24 UDP ACL ---- 4 # acl 3 mac 00:0b:31:32:33:34 00:0b:21:22:23:24 any # acl 3 ip any any 17 any VLAN10 12 # vlan 10 macfilter 0 reject 0 # vlan 10 macfilter 1 reject 1 VLAN20 34 # vlan 20 macfilter 0 reject 2 # vlan 20 macfilter 1 reject 3 23 MAC

SR-S V13 4.8 VLAN VLAN SR-S308TL1/310TL2/316TL1/318TL2/324TL2 MAC "resource filter distribution filter ipv4" MACIPv4 IP IPv4 MACIPv6 IP IPv6 IPv4 DSCP IPv4 IPv6 DSCP IPv6 VLAN10 ETHER1 4 ETHER5 8 VLAN VLAN20 ETHER1 4 ETHER5 8 VLAN VLAN10 IP VLAN 20 FNA IP IP, ARP, Reverse ARP ACL ---- 1 # acl 10 mac any any ether 0800 # acl 11 mac any any ether 0806 # acl 12 mac any any ether 8035 FNA ACL ---- 2 # acl 20 mac any any llc 8080 # acl 21 mac any any llc 0000 # acl 22 mac any any llc 0001 ACL # acl 30 mac any any any VLAN10 1 # vlan 10 macfilter 0 pass 10 # vlan 10 macfilter 1 pass 11 # vlan 10 macfilter 2 pass 12 # vlan 10 macfilter 3 reject 30 VLAN20 2 # vlan 20 macfilter 0 pass 20 # vlan 20 macfilter 1 pass 21 # vlan 20 macfilter 2 pass 22 # vlan 20 macfilter 3 reject 30 24 MAC

SR-S V13 5 MAC MAC MAC FDB ETHER MAC SR-S316C2/716C2 ETHER2 ETHER5 ETHER10 1 2 3 VLAN10 VLAN20 ETHER25 12 VLAN 10 ETHER10 3 VLAN 20 1 MAC 00:00:00:00:00:11 2 MAC 00:00:00:00:00:22 3 MAC 00:00:00:00:00:33 # ether 2,5,10 media metal ETHER25 VLAN10 # ether 2,5 vlan untag 10 ETHER10 VLAN20 # ether 10 vlan untag 20 VLAN10 MAC # vlan 10 forward 0 00:00:00:00:00:11 2 # vlan 10 forward 1 00:00:00:00:00:22 5 VLAN20 MAC # vlan 20 forward 0 00:00:00:00:00:33 10 25 MAC

SR-S V13 6 QoS 2.12 QoS P.63 6.1 VLAN 2.12.1 P.63 SR-S208TC2/224TC2/208PD1/224PS1/224CP1/248TC1/308TL1/310TL2/316TL1/318TL2/324TL2 4 SR-S316C2/324TC1/328TR1/348TC1/716C2/724TC1/748TC1 8 SR-S208TC2/224TC2/208PD1/224PS1/224CP1/248TC1/308TL1/310TL2/ 316TL1/318TL2/324TL2 CoS 7 3 6 5 FAX 4 2 3 2 1 1 0 0 #qos cosmap 0 0 #qos cosmap 1 1 #qos cosmap 2 1 #qos cosmap 3 2 #qos cosmap 4 2 #qos cosmap 5 3 #qos cosmap 6 3 #qos cosmap 7 3 26 QoS

SR-S V13 SR-S316C2/324TC1/328TR1/348TC1/716C2/724TC1/748TC1 CoS 7 4 6 5 3 FAX 4 2 3 1 2 1 0 0 #qos cosmap 0 0 #qos cosmap 1 0 #qos cosmap 2 1 #qos cosmap 3 1 #qos cosmap 4 2 #qos cosmap 5 3 #qos cosmap 6 4 #qos cosmap 7 4 27 QoS

SR-S V13 6.2 MAC ETHERNET VLAN IDCOS ETHER SR-S308TL1/310TL2/316TL1/318TL2/324TL2 "resource filter distribution qos ipv4" MACIPv4 IP IPv4 MACIPv6 IP IPv6 IPv4 DSCP IPv4 IPv6 DSCP IPv6 ACL MAC VLAN - MAC MAC ETHERNET LSAP - MAC MAC ETHERNET LSAP - VLAN ID - COS - IP IP - IP IP - TCPUDP - ICMP TYPEICMP CODE - IP TOS DSCP ETHER ETHER - COS - COS ip precedence - DSCP - ip precedence - ip precedence COS - 28 QoS

SR-S V13 COS VLAN MAC COS VLAN 20 ETHER1 5 VLAN ETHER1 4 ETHER5 ETHER5 VLAN 20 MAC 00:0b:01:02:03:04 COS 5 VLAN ID 20 MAC 00:0b:01:02:03:04 ACL ---- 1 # acl 100 mac 00:0b:01:02:03:04 any any # acl 100 vlan 20 any ETHER5 1 COS 5 # ether 5 qos aclmap 0 cos 5 100 COS ip precedence VLAN MAC COS ip precedence VLAN 10 ETHER1 8 VLAN ETHER1 VLAN 10 MAC 00:0b:01:02:03:04 COS ip precedence VLAN ID 10 MAC 00:0b:01:02:03:04 ACL ---- 1 # acl 110 mac any 00:0b:01:02:03:04 any # acl 110 vlan 10 any ETHER1 1 COS ip precedence # ether 1 qos aclmap 0 cos tos 110 29 QoS

SR-S V13 DSCP VLAN DSCP VLAN 10 ETHER1 8 VLAN ETHER1 DSCP 40 ACL ---- 1 # acl 120 mac any any any ETHER1 1 DSCP 40 # ether 1 qos aclmap 0 dscp 40 120 ip precedence VLAN COS ip precedence VLAN 10 ETHER1 8 VLAN VLAN 10 COS 5 ip precedence 6 VLAN ID 10 COS 5 ACL ---- 1 # acl 150 vlan 10 5 VLAN10 ETHER1 8 1 ip precedence 6 # ether 1-8 qos aclmap 0 tos 6 150 30 QoS

SR-S V13 ip precedence COS VLAN VLAN ip precedence COS ETHER10 VLAN10VLAN20VLAN30 VLAN100 ETHER10 VLAN 20VLAN30VLAN100 ip precedence COS VLAN ID 2030100 ACL ---- 1 # acl 100 vlan 20 any # acl 110 vlan 30 any # acl 120 vlan 100 any ETHER10 1 ip precedence COS # ether 10 qos aclmap 0 tos cos 100 # ether 10 qos aclmap 1 tos cos 110 # ether 10 qos aclmap 2 tos cos 120 ETHERBLOCK COS SR-S208TC2, 224TC2, 208PD1, 224PS1, 224CP1, 248TC1 ETHERBLOCK VLAN MAC COS ether qos aclmap ETHER1 8 ETHERBLOCK1 acl 8 etherblock qos aclmap ETHER1 8 ETHERBLOCK1 acl 1 acl VLAN 20 ETHER1 5 VLAN ETHER1 4 ETHER5 ETHERBLOCK1ETHER1 8 VLAN 20 MAC 00:0b:01:02:03:04 COS 5 VLAN ID 20 MAC 00:0b:01:02:03:04 ACL ---- 1 # acl 100 mac 00:0b:01:02:03:04 any any # acl 100 vlan 20 any ETHERBLOCK1ETHER1 8 1 COS 5 # etherblock 1 qos aclmap 0 cos 5 100 31 QoS

SR-S V13 ETHERBLOCK COS ip precedence SR-S208TC2, 208PD1, 224TC2, 224PS1, 224CP1, 248TC1 ETHERBLOCK VLAN MAC COS ip precedence ether qos aclmap ETHER1 8 ETHERBLOCK1 acl 8 etherblock qos aclmap ETHER1 8 ETHERBLOCK1 acl 1 acl VLAN 10 ETHER1 8 VLAN ETHERBLOCK1ETHER1 8 VLAN 10 MAC 00:0b:01:02:03:04 COS ip precedence VLAN ID 10 MAC 00:0b:01:02:03:04 ACL ---- 1 # acl 110 mac any 00:0b:01:02:03:04 any # acl 110 vlan 10 any ETHERBLOCK1ETHER1 8 1 COS ip precedence # etherblock 1 qos aclmap 0 cos tos 110 ETHERBLOCK DSCP SR-S208TC2, 224TC2, 208PD1, 224PS1, 224CP1, 248TC1 ETHERBLOCK DSCP ether qos aclmap ETHER1 8 ETHERBLOCK1 acl 8 etherblock qos aclmap ETHER1 8 ETHERBLOCK1 acl 1 acl VLAN 10 ETHER1 8 VLAN ETHERBLOCK1ETHER1 8 DSCP 40 32 QoS

SR-S V13 ACL ---- 1 # acl 120 mac any any any ETHERBLOCK1ETHER1 8 1 DSCP 40 # etherblock 1 qos aclmap 0 dscp 40 120 ETHERBLOCK ip precedence SR-S208TC2, 224TC2, 208PD1, 224PS1, 224CP1, 248TC1 ETHERBLOCK VLAN COS ip precedence ether qos aclmap ETHER1 8 ETHERBLOCK1 acl 8 etherblock qos aclmap ETHER1 8 ETHERBLOCK1 acl 1 acl VLAN 10 ETHER1 8 VLAN VLAN 10 COS 5 ip precedence 6 VLAN ID 10 COS 5 ACL ---- 1 # acl 150 vlan 10 5 VLAN10 ETHERBLOCK1ETHER1 8 1 ip precedence 6 # etherblock 1 qos aclmap 0 tos 6 150 33 QoS

SR-S V13 ETHERBLOCK ip precedence COS SR-S208TC2, 224TC2, 208PD1, 224PS1, 224CP1, 248TC1 ETHERBLOCK VLAN ip precedence COS ether qos aclmap ETHER1 8 ETHERBLOCK1 acl 8 etherblock qos aclmap ETHER1 8 ETHERBLOCK1 acl 1 acl ETHER1 8 VLAN10VLAN20VLAN30 VLAN100 ETHER1 6 VLAN 20VLAN30VLAN100 ip precedence COS VLAN ID 2030100 ACL ---- 1 # acl 100 vlan 20 any # acl 110 vlan 30 any # acl 120 vlan 100 any ETHERBLOCK1ETHER1 8 1 ip precedence COS # etherblock 1 qos aclmap 0 tos cos 100 # etherblock 1 qos aclmap 1 tos cos 110 # etherblock 1 qos aclmap 2 tos cos 120 VLAN VLAN MAC VLAN20 ETHER1 5 VLAN ETHER1 4 ETHER5 VLAN20 MAC 00:0b:01:02:03:04 3 MAC 00:0b:01:02:03:04 ACL # acl 100 mac 00:0b:01:02:03:04 any any ---- 1 VLAN201 # vlan 20 qos aclmap 0 queue 3 100 34 QoS

SR-S V13 7 STP STP 7.1 STP STP 2.9.1 STPP.39 SR-S316C2/716C2 ETHER2 ETHER1 STP ETHER12 VID 10 VLAN # ether 1,2 media metal VLAN # ether 1 vlan untag 10 # ether 2 vlan untag 10 STP # ether 1 stp use on # ether 2 stp use on 35 STP

SR-S V13 7.2 MSTP VLAN STP LAN MSTP VLAN STP 2.9.3 MSTPP.5 0 SR-S316C2/716C2 VLAN MSTP VLAN 1 2 1G 1 3 100M 1 2 1 2 3 4 VLAN 100200 VLAN 300 0 1 2 3 4 1 1 2 3 4 VLAN 100200 2 1 3 2 4 VLAN 300 1 ETHER1 2 1G ETHER2 3 100M ETHER12 STP 20000 36 STP

SR-S V13 2 ETHER1 1 1G ETHER2 3 100M ETHER3 4 1G ETHER1 3 STP 20000 3 ETHER1 1 100M ETHER2 2 100M ETHER3 4 100M ETHER1 3 STP 20000 4 ETHER1 2 1G ETHER2 3 100M ETHER12 STP 20000 ETHER3 9 VID100 100M ETHER10 14 VID200 100M ETHER1516 VID300 100M 1 # ether 1,2 media metal MDI # ether 1,2 mdi mdix ETHER12 STP # ether 1-2 stp domain 0 cost 20000 # ether 1-2 stp domain 1 cost 20000 # ether 1-2 stp domain 2 cost 20000 ETHER12 # ether 1 mode 1000 # ether 2 mode 100 VLAN # ether 1-2 vlan tag 100,200,300 STP # stp mode mstp # stp domain 1 vlan 100,200 # stp domain 2 vlan 300 # stp domain 0 priority 4096 # stp domain 1 priority 4096 # stp domain 2 priority 4096 37 STP

SR-S V13 2 # ether 1-3 media metal MDI # ether 1-3 mdi mdix ETHER1 3 STP # ether 1-3 stp domain 0 cost 20000 # ether 1-3 stp domain 1 cost 20000 # ether 1-3 stp domain 2 cost 20000 ETHER1 3 # ether 1 mode 1000 # ether 2 mode 100 # ether 3 mode 1000 VLAN # ether 1-3 vlan tag 100,200,300 STP # stp mode mstp # stp domain 1 vlan 100,200 # stp domain 2 vlan 300 # stp domain 0 priority 8192 # stp domain 1 priority 8192 # stp domain 2 priority 12288 3 # ether 1-3 media metal MDI # ether 1-3 mdi mdix ETHER1 3 STP # ether 1-3 stp domain 0 cost 20000 # ether 1-3 stp domain 1 cost 20000 # ether 1-3 stp domain 2 cost 20000 ETHER1 3 # ether 1-3 mode 100 VLAN # ether 1-3 vlan tag 100,200,300 STP # stp mode mstp # stp domain 1 vlan 100,200 # stp domain 2 vlan 300 # stp domain 0 priority 12288 # stp domain 1 priority 12288 # stp domain 2 priority 8192 38 STP

SR-S V13 4 # ether 1-16 media metal MDI # ether 1-16 mdi mdix ETHER12 STP # ether 1-2 stp domain 0 cost 20000 # ether 1-2 stp domain 1 cost 20000 # ether 1-2 stp domain 2 cost 20000 ETHER1 16 # ether 1 mode 1000 # ether 2-16 mode 100 VLAN # ether 1 vlan tag 100,200,300 # ether 2 vlan tag 100,200,300 # ether 3-9 vlan untag 100 # ether 10-14 vlan untag 200 # ether 15,16 vlan untag 300 STP # stp mode mstp # stp domain 1 vlan 100,200 # stp domain 2 vlan 300 # stp domain 0 priority 32768 # stp domain 1 priority 32768 # stp domain 2 priority 32768 39 STP

SR-S V13 8 DHCP DHCP DHCP IP 2.13 DHCP P.74 IPv4 DHCP trusted VLAN IPv4 DHCP VLAN untrusted - IEEE802.1X Web MAC - - VLAN - SR-S224PS1/224CP1/248TC1/308TL1/310TL2/316TL1/318TL2/324TL2/316C2/324TC1/328TR1/348TC1/ 716C2/724TC1/748TC1 VLAN SR-S208TC2/224TC2/208PD1 ether egress permission DHCP clear dhcpsnoop DHCP DHCP DHCP DHCP DHCP IP DHCP 1 2 40 DHCP

SR-S V13 VLAN10 DHCP ETHER ETHER1 DHCP IP ETHER5 ETHER11 DHCP IP DHCP # vlan 10 dhcpsnoop use on DHCP # ether 1 vlan untag 10 # ether 1 dhcpsnoop trust untrusted # ether 11 vlan untag 10 # ether 11 dhcpsnoop trust untrusted DHCP # ether 5 vlan untag 10 # ether 5 dhcpsnoop trust trusted 41 DHCP

SR-S V13 9 IGMP IGMP IGMP 2.14 IGMP P.75 lan IGMP IGMP IGMP 2 clear igmpsnoop group - - IGMP IGMPvlan igmpsnoop source 0.0.0.0 0.0.0.0 IGMP Query vlan igmpsnoop source IGMP V1/V2vlan igmpsnoop proxy off IPv4IPv6 IGMP vlan igmpsnoop querier Querier 2 1 42 IGMP

SR-S V13 IGMP 1 ETHER12 VLAN 10 2 ETHER34 VLAN 11 3 ETHER56 VLAN 12 1 VLAN VLAN10 12 ETHER15 2 VLAN10 ETHER16 IGMP # igmpsnoop use on # ether 1-6,15,16 media metal # ether 1-2 vlan untag 10 # ether 3-4 vlan untag 11 # ether 5-6 vlan untag 12 # ether 15 vlan tag 10,11,12 # ether 16 vlan untag 10 VLAN10 # vlan 10 igmpsnoop router yes 15,16 43 IGMP

SR-S V13 10 IEEE802.1X IEEE802.1X VLAN ID 2.15 IEEE802.1X P.77 IEEE802.1X VLAN SR-S308TL1/310TL2/316TL1/ 318TL2/324TL2/316C2/324TC1/328TR1/348TC1/716C2/724TC1/748TC1 - WebWeb VLAN - VLAN VLAN IEEE802.1X AAA ID EAP-MD5 1Systemwalker Desktop Inspection 802.1X 1 - - - - SR-S316C2/716C2 Supplicant-1 RADIUS 172.16.1.100 Supplicant-2 Supplicant-3 ETHER1 ETHER10 ETHER11 ETHER2 ETHER12 ETHER5 ETHER3 ETHER4 VLAN ID 10 VLAN ID 11 VLAN ID 123 VLAN ID 100 44 IEEE802.1X

SR-S V13 ETHER10 12 IEEE802.1X ETHER10 12 ETHER1011 RADIUS ETHER12 AAA ID ETHER1011 ETHER12 0 1 Supplicant MAC ETHER12 ID VLAN ID Supp1 Supp1-pass VLAN123 Supp2 Supp2-pass VLAN100 RADIUS IP 172.16.1.100 RADIUS VLAN13 RADIUS radius-secret ETHER1011 RADIUS - Acct-Session-Time - Acct-Output-Packets - Acct-Input-Packets - Acct-Output-Octets - Acct-Input-Packets RADIUS VLAN ID RADIUS Tunnel-Type 64 VLAN13 Tunnel-Media-Type 65 8026 Tunnel-Private-Group-ID 81 VLAN ID10 ASCII 10 VLAN 45 IEEE802.1X

SR-S V13 IEEE802.1X # dot1x use on RADIUS VLAN # lan 0 vlan 13 # lan 0 ip address 172.16.1.101/16 3 # ether 1-5,10-12 media metal RADIUS # ether 1 vlan untag 13 IEEE802.1X Supplicant VLAN # ether 2 vlan untag 10 # ether 3 vlan untag 11 # ether 4 vlan untag 100 # ether 5 vlan untag 123 IEEE802.1X # ether 10 dot1x use on # ether 10 dot1x aaa 0 # ether 11 dot1x use on # ether 11 dot1x aaa 0 # ether 12 dot1x use on # ether 12 dot1x aaa 1 RADIUS AAA # aaa 0 name radiusauth # aaa 0 radius service client both # aaa 0 radius auth source 172.16.1.101 # aaa 0 radius client server-info auth secret radius-secret # aaa 0 radius client server-info auth address 172.16.1.100 # aaa 0 radius client server-info account secret radius-secret # aaa 0 radius client server-info account address 172.16.1.100 AAA # aaa 1 name localauth # aaa 1 user 0 id Supp1 # aaa 1 user 0 password Supp1-pass # aaa 1 user 0 supplicant vid 123 # aaa 1 user 1 id Supp2 # aaa 1 user 1 password Supp2-pass # aaa 1 user 1 supplicant vid 100 46 IEEE802.1X

SR-S V13 11 Web Web 2.16 Web P.82 WebWeb VLAN VLAN VLAN VLAN SR-S308TL1/310TL2/316TL1/318TL2/ 324TL2/316C2/324TC1/328TR1/348TC1/716C2/724TC1/748TC1 - VLAN VLAN VLAN VLAN IP IP 11.1 AAA SR-S716C2 user0vlan ID 10 user1vlan ID 11 VLAN ID 10 IDuser0 pass0 ETHER10 ETHER2 ETHER11 ETHER3 VLAN ID 11 IDuser1 pass1 ETHER1011 Web AAA ID 1 ETHER1011 ETHER10 ETHER11 MAC MD5-CHAP VLAN VLAN ID 500 VLAN LAN0 IP 192.168.1.0/24 VLAN DHCP IP IP 192.168.1.2/24 100 30 47 Web

SR-S V13 VLAN LAN0 IP 192.168.1.0/24 IP 192.168.1.1/32 VLAN ID 10 ETHER2 VLAN ID 11 ETHER3 user0 user1 AAA 1 user0 VLAN ID 10 user1 VLAN ID 11 IP # ip routing enable Web # webauth use on MD5-CHAP # webauth type chap_md5 VLAN VID 500 # lan 0 vlan 500 DHCP # lan 0 ip address 192.168.1.1/24 3 # lan 0 ip dhcp service server # lan 0 ip dhcp info dns 192.168.1.1 # lan 0 ip dhcp info address 192.168.1.2/24 100 # lan 0 ip dhcp info time 30s IP # acl 0 ip 192.168.1.0/24 192.168.1.1/32 any # lan 0 ip filter 0 pass acl 0 # acl 1 ip any 255.255.255.255/32 any # lan 0 ip filter 1 pass acl 1 # acl 2 ip any any any # lan 0 ip filter 2 reject acl 2 # ether 2,3,10,11 media metal ETHER1011 STP # ether 10 stp use off # ether 11 stp use off ETHER1011 Web # ether 10 vlan untag 500 # ether 10 webauth use on # ether 10 webauth aaa 1 # ether 11 vlan untag 500 # ether 11 webauth use on # ether 11 webauth aaa 1 # ether 11 webauth mode port 48 Web

SR-S V13 Web VLAN ID ETHER # ether 2 vlan untag 10 # ether 3 vlan untag 11 LAN1 VLAN ID 100 # lan 1 vlan 100 # lan 1 ip address 172.16.1.102/24 3 LAN1 RIP # lan 1 ip rip use v2m v2 0 off RIP VLAN 192.168.1.0/24 # rip ip redist 0 reject 192.168.1.0/24 exact # rip ip redist 1 pass any AAA # aaa 1 name home # aaa 1 user 0 id user0 # aaa 1 user 0 password pass0 # aaa 1 user 0 supplicant vid 10 # aaa 1 user 1 id user1 # aaa 1 user 1 password pass1 # aaa 1 user 1 supplicant vid 11 # reset 49 Web

SR-S V13 11.2 AAA SR-S716C2 user0vlan ID 10 user1vlan ID 11 IDuser0 pass0 ETHER10 RADIUS 172.16.1.100 ETHER2 VLAN ID 10 ETHER11 ETHER3 VLAN ID 11 IDuser1 pass1 ETHER1011 Web AAA ID 1 ETHER1011 ETHER10 MAC ETHER11 RADIUS IP 172.16.1.100 MD5-CHAP VLAN LAN0 IP 192.168.1.0/24 VLAN DHCP IP IP 192.168.1.2/24 100 30 VLAN LAN0 IP 192.168.1.0/24 IP 192.168.1.1/32 IP # ip routing enable Web # webauth use on MD5-CHAP # webauth type chap_md5 VLAN VID 500 # lan 0 vlan 500 50 Web

SR-S V13 DHCP # lan 0 ip address 192.168.1.1/24 3 # lan 0 ip dhcp service server # lan 0 ip dhcp info dns 192.168.1.1 # lan 0 ip dhcp info address 192.168.1.2/24 100 # lan 0 ip dhcp info time 30s IP # acl 0 ip 192.168.1.0/24 192.168.1.1/32 any # lan 0 ip filter 0 pass acl 0 # acl 1 ip 0.0.0.0/32 255.255.255.255/32 any # lan 0 ip filter 1 pass acl 1 # acl 2 ip any any any # lan 0 ip filter 2 reject acl 2 # ether 2,3,10,11 media metal ETHER1011 STP # ether 10 stp use off # ether 11 stp use off ETHER1011 Web # ether 10 vlan untag 500 # ether 10 webauth use on # ether 10 webauth aaa 1 # ether 11 vlan untag 500 # ether 11 webauth use on # ether 11 webauth aaa 1 # ether 11 webauth mode port Web VLAN ID ETHER # ether 2 vlan untag 10 # ether 3 vlan untag 11 LAN1 VLAN ID 100 # lan 1 vlan 100 # lan 1 ip address 172.16.1.102/24 3 LAN1 RIP # lan 1 ip rip use v2m v2 0 off RIP VLAN 192.168.1.0/24 # rip ip redist 0 reject 192.168.1.0/24 exact # rip ip redist 1 pass any AAA # aaa 1 name home # aaa 1 radius service client both # aaa 1 radius client server-info auth secret test # aaa 1 radius client server-info auth address 172.16.1.100 # reset 51 Web

SR-S V13 12 MAC MAC MAC VLAN SR-S308TL1/310TL2/316TL1/ 318TL2/324TL2/316C2/324TC1/328TR1/348TC1/716C2/724TC1/748TC1 - WebWeb VLAN - VLAN VLAN MAC AAA ID SR-S316C2/716C2 Supplicant-1 RADIUS 172.16.1.100 Supplicant-2 Supplicant-3 ETHER1 ETHER10 ETHER11 ETHER2 ETHER12 ETHER5 ETHER3 ETHER4 VLAN ID 10 VLAN ID 11 VLAN ID 123 VLAN ID 100 ETHER10 12 MAC ETHER10 12 ETHER1011 RADIUS ETHER12 AAA ID ETHER1011 ETHER12 0 1 Supplicant MAC ETHER12 MAC VLAN ID 00:11:11:00:00:01 VLAN123 00:22:22:00:00:02 VLAN100 RADIUS IP 172.16.1.100 RADIUS VLAN13 RADIUS radius-secret MD5-CHAP 52 MAC

SR-S V13 RADIUS VLAN ID RADIUS Tunnel-Type 64 VLAN13 Tunnel-Media-Type 65 8026 Tunnel-Private-Group-ID 81 VLAN ID10 ASCII 10 VLAN MAC # macauth use on MAC # macauth password macauth-pass MD5-CHAP # macauth type chap_md5 RADIUS VLAN # lan 0 vlan 13 # lan 0 ip address 172.16.1.101/16 3 # ether 1-5,10-12 media metal RADIUS # ether 1 vlan untag 13 MAC Supplicant VLAN # ether 2 vlan untag 10 # ether 3 vlan untag 11 # ether 4 vlan untag 100 # ether 5 vlan untag 123 MAC # ether 10 macauth use on # ether 10 macauth aaa 0 # ether 11 macauth use on # ether 11 macauth aaa 0 # ether 12 macauth use on # ether 12 macauth aaa 1 RADIUS AAA # aaa 0 name radiusauth # aaa 0 radius service client auth # aaa 0 radius auth source 172.16.1.101 # aaa 0 radius client server-info auth secret radius-secret # aaa 0 radius client server-info auth address 172.16.1.100 53 MAC

SR-S V13 AAA # aaa 1 name localauth # aaa 1 user 0 id 001111000001 # aaa 1 user 0 password macauth-pass # aaa 1 user 0 supplicant vid 123 # aaa 1 user 1 id 002222000002 # aaa 1 user 1 password macauth-pass # aaa 1 user 1 supplicant vid 100 54 MAC

SR-S V13 13 IEEE802.1X Web MAC online ether SR-S316C2/716C2 HUB ETHER5 7 ETHER56 ETHER7 ETHER56 ETHER7 1 6 # ether 5-7 mac detection use on # ether 7 mac detection max_user 6 # ether 5-6 mac detection portdisable yes 55

SR-S V13 14 ARP ARP ARP AAA ID VLAN ID 10 RADIUS ETHER1 ARP ETHER21 SR-S324TC1/724TC1 VLAN10 ARP ARP RADIUS AAA ID 0 RADIUS IP 172.16.1.100 RADIUS VLAN20 RADIUS radius-secret ARP 10 RADIUS VLAN # lan 0 vlan 20 # lan 0 ip address 172.16.1.200/16 3 # ether 21 media metal RADIUS # ether 21 vlan untag 20 ARP VLAN # ether 1 vlan untag 10 56 ARP

SR-S V13 ARP # vlan 10 arpauth use on # vlan 10 arpauth aaa 0 # vlan 10 arpauth obstruction enable 10s RADIUS AAA # aaa 0 name RADIUS # aaa 0 radius service client auth # aaa 0 radius auth source 172.16.1.200 # aaa 0 radius client server-info auth 0 secret radius-secret # aaa 0 radius client server-info auth 0 address 172.16.1.100 57 ARP

SR-S V13 15 1 # loopdetect use on # loopdetect portdisable yes # loopdetect interval 1m online ether STP SR-S208TC2/224TC2/208PD1 ether egress permission 58

SR-S V13 16 ETHER1 ETHER8 ETHER1 ETHER8 ETHER1 ETHER8 ETHER8 # ether 8 type mirror 0 1 rx 59

SR-S V13 17 ether L3 ether L3 ETHER ether L3 SR-S316C2/716C2 online ether 1 2 ETHER1 ETHER1 ETHER1 VLAN ID VLAN ID1 192.168.10.0/24 ether L3 1 # ether 1 media metal ETHER1 # ether 1 vlan untag 1 192.168.10.1/24 # lan 0 ip address 192.168.10.1/24 3 # lan 0 vlan 1 IP # ether 1 icmpwatch address 192.168.10.2 # ether 1 icmpwatch interval 15s 40s 5s 60 ether L3

SR-S V13 2 # ether 1 media metal ETHER1 # ether 1 vlan untag 1 192.168.10.1/24 # lan 0 ip address 192.168.10.2/24 3 # lan 0 vlan 1 17.1 ether L3 ether L3 SR-S316C2/716C2 ETHER1 4 10/100/1000BASE-T 1000Mbps VLAN ID VLAN ID10 192.168.10.0/24 ether L3 1 ETHER1 4 # ether 1-4 media metal # ether 1-4 mode 1000 # ether 1-4 vlan tag 10 ETHER1 4 # ether 1-4 type linkaggregation 1 1 192.168.10.1/24 # lan 0 ip address 192.168.10.1/24 3 # lan 0 vlan 10 IP # linkaggregation 1 icmpwatch address 192.168.10.2 # linkaggregation 1 icmpwatch interval 15s 40s 5s 61 ether L3

SR-S V13 2 ETHER1 4 # ether 1-4 media metal # ether 1-4 mode 1000 # ether 1-4 vlan tag 10 ETHER1 4 # ether 1-4 type linkaggregation 1 1 192.168.10.1/24 # lan 0 ip address 192.168.10.2/24 3 # lan 0 vlan 10 62 ether L3

SR-S V13 18 online ether 1 2 1 ETHER116 ETHER1 ETHER16 2 ETHER116 ETHER1 ETHER16 63

SR-S V13 1 ETHER1 # ether 1 recovery limit 5 ETHER1 1 # ether 1 type backup 1 master ETHER16 1 # ether 16 type backup 1 backup 1 # backup 1 mode master 2 ETHER1 # ether 1 recovery limit 5 ETHER1 1 # ether 1 type backup 1 master ETHER16 1 # ether 16 type backup 1 backup 1 # backup 1 mode master 64

SR-S V13 19 LAN SR-S716C2, 724TC1, 748TC1 LAN-B LAN-A 3 P.24 SR-S716C2 LAN-A LAN-B internet 1 192.168.0.5 LAN-C LAN1 192.168.1.1 LAN0 192.168.0.1 2 192.168.0.10 192.168.2.0/24 192.168.0.20 192.168.1.0/24 192.168.0.0/24 LAN-A VLAN LAN1 IP 192.168.1.1 192.168.1.0/24 DHCP LAN-B VLAN LAN0 IP 192.168.0.1 192.168.0.0/24 DHCP RIP-V1 1 2 1 IP 192.168.0.5 2 IP 192.168.0.10 65 LAN

SR-S V13 LAN-C 192.168.2.0/24 TIME 192.168.0.20 TIME SNTP TIME RFC868SNTPSimple Network Time ProtocolRFC1361RFC1769 NTPNetwork Time Protocol IP IP # ip routing enable # ether 1,2 media metal VLAN # ether 1 vlan untag 10 # ether 2 vlan untag 20 # lan 0 vlan 10 # lan 1 vlan 20 LAN0 # lan 0 ip address 192.168.0.1/24 3 # lan 0 ip dhcp service off # lan 0 ip route 0 192.168.2.0/24 192.168.0.10 1 1 # lan 0 ip route 1 default 192.168.0.5 1 1 # lan 0 ip rip use v1 v1 0 off LAN1 # lan 1 ip address 192.168.1.1/24 3 # lan 1 ip dhcp service server # lan 1 ip dhcp info dns 192.168.1.1 # lan 1 ip dhcp info address 192.168.1.2/24 253 # lan 1 ip dhcp info time 1d # lan 1 ip dhcp info gateway 192.168.1.1 # time auto server 192.168.0.20 time # time auto interval start # reset 66 LAN

SR-S V13 20 IPv4 IPv6 SR-S724TC1, 748TC1 IPv4 IPv6 LAN-A100Mbps LAN-B100Mbps LAN1 LAN0 192.168.3.1 192.168.2.1 IPv6 2001:db8:1111:1001::/64 IPv6 2001:db8:1111:1000::/64 LAN-A 2001:db8:1111:1001::/64 RA VLAN LAN-B 2001:db8:1111:1000::/64 RA VLAN IPv4 IPv6 ether VLAN IPv6 67 IPv4 IPv6

SR-S V13 IPv6 # ip6 routing enable LAN0 # lan 0 ip6 use on # lan 0 ip6 address 0 2001:db8:1111:1000::/64 # lan 0 ip6 ra prefix 0 2001:db8:1111:1000::/64 30d 7d c0 # lan 0 ip6 ra mode send LAN1 # lan 1 ip6 use on # lan 1 ip6 address 0 2001:db8:1111:1001::/64 # lan 1 ip6 ra prefix 0 2001:db8:1111:1001::/64 30d 7d c0 # lan 1 ip6 ra mode send # reset 68 IPv4 IPv6

SR-S V13 21 RIP IPv4 SR-S716C2, 724TC1, 748TC1 RIPv2 10.1.1.0/24 3 LAN0 10.1.1.1/24 RIP RIP LAN1 LAN2 10.1.2.1/24 11.1.1.1/24 LAN3 10.1.3.1/24 1 2 10.1.3.2/24 10.3.1.0/24 IP IP LAN0RIP LAN1 RIPv2 LAN2 RIPv2 LAN3 2 RIP 69 RIP IPv4

SR-S V13 RIP # lan 1 ip rip use v2m v2 0 off # lan 2 ip rip use v2m v2 0 off 2 # lan 3 ip route 0 10.3.1.0/24 10.1.3.2 1 1 RIP # routemanage ip redist rip connected on # routemanage ip redist rip static on RIP RIP - rip ip neighbor - RIP lan ip rip use RIP RIP RIP RIP 1 - RIP rip ip multipath RIP RIP ECMP RIP RIP RIP RIP 243 RIP RIP 25 RIP RIP RIP RIP 243 RIP 243 show ip traffic udpdropped due to full socket buffers 70 RIP IPv4

SR-S V13 22 RIP IPv4 SR-S716C2, 724TC1, 748TC1 IP RIP IP 0 any 1 16 RIP IP IP IP IP 172.21.0.0/16 172.21.0.0/16 172.21.0.0/24 IP IP 172.21.0.0/16 172.21.0.0/24 172.21.10.0/24 RIPv1 lan 0 ip address 192.168.1.1/24 10.0.0.0 10.0.0.0/8 71 RIP IPv4

SR-S V13 2 A. B. A B RIP RIP RIP RIP 72 RIP IPv4

SR-S V13 22.1 SR-S716C2, 724TC1, 748TC1 LAN0 default default IP RIPv2 IP # lan 0 ip rip filter 0 act pass out # lan 0 ip rip filter 0 route default # lan 0 ip rip filter 1 act reject out # lan 0 ip rip filter 1 route any 73 RIP IPv4

SR-S V13 22.2 SR-S716C2, 724TC1, 748TC1 2 192.168.10.0/24 1 1 192.168.10.0/24 10 192.168.20.0/24 1 1 2 192.168.10.0/24 10 10 192.168.10.0/24 11 1 192.168.10.0/24 2 LAN1 192.168.20.0/24 1 1 192.168.20.0/24 2 2 192.168.20.0/24 3 IP RIPv2 IP 192.168.10.0/24 1 192.168.10.0/24 192.168.10.0/24 1 # lan 1 ip rip filter 0 act pass out # lan 1 ip rip filter 0 route 192.168.10.0/24 # lan 1 ip rip filter 0 set metric 1 # lan 1 ip rip filter 1 act pass out # lan 1 ip rip filter 1 route any RIP 16 74 RIP IPv4

SR-S V13 22.3 SR-S716C2, 724TC1, 748TC1 LAN0 default default IP RIPv2 IP # lan 0 ip rip filter 0 act pass in # lan 0 ip rip filter 0 route default # lan 0 ip rip filter 1 act reject in # lan 0 ip rip filter 1 route any 75 RIP IPv4

SR-S V13 22.4 SR-S716C2, 724TC1, 748TC1 1 2 192.168.10.0/24 1 1 LAN0 192.168.10.0/24 10 192.168.10.0/24 1 LAN1 192.168.10.0/24 1 192.168.10.0/24 5 1 2 IP RIPv2 IP 1 192.168.10.0/24 1 2 192.168.10.0/24 5 LAN0 192.168.10.0/24 1 # lan 0 ip rip filter 0 act pass in # lan 0 ip rip filter 0 route 192.168.10.0/24 # lan 0 ip rip filter 0 set metric 1 LAN0 # lan 0 ip rip filter 1 act pass in # lan 0 ip rip filter 1 route any lan1 192.168.10.0/24 5 # lan 1 ip rip filter 0 act pass in # lan 1 ip rip filter 0 route 192.168.10.0/24 # lan 1 ip rip filter 0 set metric 5 lan1 # lan 1 ip rip filter 1 act pass in # lan 1 ip rip filter 1 route any 16 76 RIP IPv4

SR-S V13 22.5 SR-S716C2, 724TC1, 748TC1 10.20.30.0/24 LAN0 10.20.30.0/24 IP RIPv2 IP 10.20.30.0/24 10.20.30.0/24 # lan 0 ip rip filter 0 act reject out # lan 0 ip rip filter 0 route 10.20.30.0/24 # lan 0 ip rip filter 1 act pass out # lan 0 ip rip filter 1 route any 77 RIP IPv4

SR-S V13 22.6 SR-S716C2, 724TC1, 748TC1 10.20.30.0/24 10.20.30.0/24 LAN0 IP RIPv2 IP 10.20.30.0/24 10.20.30.0/24 # lan 0 ip rip filter 0 act reject in # lan 0 ip rip filter 0 route 10.20.30.0/24 # lan 0 ip rip filter 1 act pass in # lan 0 ip rip filter 1 route any 78 RIP IPv4

SR-S V13 23 RIP IPv6 SR-S724TC1, 748TC1 RIPIPv6 0 any 1 16 RIP 2001:db8:1111::/32 2001:db8:1111::/32 2001:db8:1111::/64 2001:db8::/16 2001:db8::/32 2001:db8:1111::/32 79 RIP IPv6

SR-S V13 2 A. B. A B RIP RIP RIP RIP 80 RIP IPv6

SR-S V13 23.1 SR-S724TC1, 748TC1 LAN0 default default IPv6 RIPIPv6 IPv6 # lan 0 ip6 rip filter 0 act pass out # lan 0 ip6 rip filter 0 route default # lan 0 ip6 rip filter 1 act reject out # lan 0 ip6 rip filter 1 route any 81 RIP IPv6

SR-S V13 23.2 SR-S724TC1, 748TC1 2 2001:db8:1111::/64 1 1 2001:db8:1111::/64 10 2001:db8:2222::/64 1 1 2 2001:db8:1111::/64 10 10 2001:db8:1111::/64 11 1 2001:db8:1111::/64 2 LAN1 2001:db8:2222::/64 1 1 2001:db8:2222::/64 2 2 2001:db8:2222::/64 3 IPv6 RIPIPv6 IPv6 2001:db8:1111::/64 1 2001:db8:1111::/64 2001:db8:1111::/64 1 # lan 1 ip6 rip filter 0 act pass out # lan 1 ip6 rip filter 0 route 2001:db8:1111::/64 # lan 1 ip6 rip filter 0 set metric 1 # lan 1 ip6 rip filter 1 act pass out # lan 1 ip6 rip filter 1 route any RIP 16 82 RIP IPv6

SR-S V13 23.3 SR-S724TC1, 748TC1 LAN0 default default IPv6 RIPIPv6 IPv6 # lan 0 ip6 rip filter 0 act pass in # lan 0 ip6 rip filter 0 route default # lan 0 ip6 rip filter 1 act reject in # lan 0 ip6 rip filter 1 route any 83 RIP IPv6

SR-S V13 23.4 SR-S724TC1, 748TC1 1 2 2001:db8:1111::/64 1 1 LAN0 2001:db8:1111::/64 10 2001:db8:1111::/64 1 LAN1 2001:db8:1111::/64 1 2001:db8.1111::/64 5 1 2 IPv6 RIPIPv6 IPv6 1 2001:db8:1111::/64 1 2 2001:db8:1111::/64 5 LAN0 2001:db8:1111::/64 1 # lan 0 ip6 rip filter 0 act pass in # lan 0 ip6 rip filter 0 route 2001:db8:1111::/64 # lan 0 ip6 rip filter 0 set metric 1 LAN0 # lan 0 ip6 rip filter 1 act pass in # lan 0 ip6 rip filter 1 route any lan1 2001:db8:1111::/64 5 # lan 1 ip6 rip filter 0 act pass in # lan 1 ip6 rip filter 0 route 2001:db8:1111::/64 # lan 1 ip6 rip filter 0 set metric 5 lan1 # lan 1 ip6 rip filter 1 act pass in # lan 1 ip6 rip filter 1 route any 84 RIP IPv6

SR-S V13 16 85 RIP IPv6

SR-S V13 23.5 SR-S724TC1, 748TC1 2001:db8:1111::/64 LAN0 2001:db8:1111::/64 IPv6 RIPIPv6 IPv6 2001:db8:1111::/64 2001:db8:1111::/64 # lan 0 ip6 rip filter 0 act reject out # lan 0 ip6 rip filter 0 route 2001:db8:1111::/64 # lan 0 ip6 rip filter 1 act pass out # lan 0 ip6 rip filter 1 route any 86 RIP IPv6

SR-S V13 23.6 SR-S724TC1, 748TC1 2001:db8:1111::/64 2001:db8:1111::/64 LAN0 IPv6 RIPIPv6 IPv6 2001:db8:1111::/64 2001:db8:1111::/64 # lan 0 ip6 rip filter 0 act reject in # lan 0 ip6 rip filter 0 route 2001:db8:1111::/64 # lan 0 ip6 rip filter 1 act pass in # lan 0 ip6 rip filter 1 route any 87 RIP IPv6

SR-S V13 24 OSPF IPv4 SR-S716C2, 724TC1, 748TC1 OSPFv2 OSPF ID 0.0.0.0 ID 0.0.0.0 ID 2.30 OSPF P.108 OSPF IP IP OSPF 50 2 Designated Router OSPF MTU OSPF OSPF LSA LSDB LSA LSA commit / reset 60 OSPF commit LSA MaxAge OSPF OSPF DR 25000 LSA DR 50000 LSA ID0.0.0.0 10.10.10.1 LAN0 10.10.10.2 LAN0 1 5 10.20.10.1 LAN1 10.30.10.1 LAN1 10.20.10.2 LAN0 10.20.10.3 LAN0 10.20.10.4 LAN0 10.30.10.2 LAN0 2 3 4 6 10.20.20.1 LAN1 10.20.30.1 LAN1 10.20.40.1 LAN1 10.30.20.1 LAN1 ID0.0.0.1 ID0.0.0.2 88 OSPF IPv4

SR-S V13 IP IP 1 LAN0 OSPF LAN1 OSPF LAN0 OSPF ID 0.0.0.0 LAN1 OSPF ID 0.0.0.1 LAN1 0 0.0.0.1 10.20.0.0/16 2 LAN0 OSPF LAN1 OSPF LAN0 OSPF ID 0.0.0.1 LAN1 OSPF ID 0.0.0.1 LAN0 1 LAN1 passive-interface 3 LAN0 OSPF LAN1 OSPF LAN0 OSPF ID 0.0.0.1 LAN1 OSPF ID 0.0.0.1 LAN0 255 LAN1 passive-interface 4 LAN0 OSPF LAN1 OSPF LAN0 OSPF ID 0.0.0.1 LAN1 OSPF ID 0.0.0.1 LAN0 1 LAN1 passive-interface 5 LAN0 OSPF LAN1 OSPF LAN0 OSPF ID 0.0.0.0 LAN1 OSPF ID 0.0.0.2 0.0.0.2 10.30.0.0/16 6 LAN0 OSPF LAN1 OSPF 89 OSPF IPv4

SR-S V13 LAN0 OSPF ID 0.0.0.2 LAN1 OSPF ID 0.0.0.2 LAN1 passive-interface 1 LAN # lan 0 ip ospf use on 0 # lan 1 ip ospf use on 1 # lan 1 ip ospf priority 0 OSPF # ospf ip area 0 id 0.0.0.0 # ospf ip area 1 id 0.0.0.1 # ospf ip area 1 range 0 10.20.0.0/16 2 LAN # lan 0 ip ospf use on 0 # lan 0 ip ospf priority 1 # lan 1 ip ospf use on 0 # lan 1 ip ospf passive on OSPF # ospf ip area 0 id 0.0.0.1 90 OSPF IPv4

SR-S V13 3 LAN # lan 0 ip ospf use on 0 # lan 0 ip ospf priority 255 # lan 1 ip ospf use on 0 # lan 1 ip ospf passive on OSPF # ospf ip area 0 id 0.0.0.1 4 LAN # lan 0 ip ospf use on 0 # lan 0 ip ospf priority 1 # lan 1 ip ospf use on 0 # lan 1 ip ospf passive on OSPF # ospf ip area 0 id 0.0.0.1 5 LAN # lan 0 ip ospf use on 0 # lan 1 ip ospf use on 1 OSPF # ospf ip area 0 id 0.0.0.0 # ospf ip area 1 id 0.0.0.2 # ospf ip area 1 range 0 10.30.0.0/16 91 OSPF IPv4

SR-S V13 6 LAN # lan 0 ip ospf use on 0 # lan 1 ip ospf use on 0 # lan 1 ip ospf passive on OSPF # ospf ip area 0 id 0.0.0.2 92 OSPF IPv4

SR-S V13 24.1 SR-S716C2, 724TC1, 748TC1 OSPF ID OSPF ID ID0.0.0.0 10.10.10.1 LAN0 10.10.10.2 LAN0 1 3 10.20.10.1 LAN1 10.30.10.1 LAN1 10.20.10.2 10.20.20.1 LAN0 2 LAN1 ID0.0.0.2 10.30.10.2 LAN0 4 ID0.0.0.1 10.40.10.1 LAN1 10.40.10.2 LAN0 5 LAN1 ID0.0.0.3 10.50.10.1 IP IP 1 LAN0 OSPF LAN1 OSPF LAN0 OSPF ID 0.0.0.0 LAN1 OSPF ID 0.0.0.1 2 LAN0 OSPF LAN1 OSPF LAN0 OSPF ID 0.0.0.1 LAN1 OSPF ID 0.0.0.1 93 OSPF IPv4

SR-S V13 3 LAN0 OSPF LAN1 OSPF LAN0 OSPF ID 0.0.0.0 LAN1 OSPF ID 0.0.0.2 OSPF ID 10.30.10.1 OSPF ID 10.40.10.1 4 LAN0 OSPF LAN1 OSPF LAN0 OSPF ID 0.0.0.2 LAN1 OSPF ID 0.0.0.3 OSPF ID 10.40.10.1 OSPF ID 10.30.10.1 5 LAN0 OSPF LAN1 OSPF LAN0 OSPF ID 0.0.0.3 LAN1 OSPF ID 0.0.0.3 1 LAN # lan 0 ip ospf use on 0 # lan 1 ip ospf use on 1 OSPF # ospf ip area 0 id 0.0.0.0 # ospf ip area 1 id 0.0.0.1 94 OSPF IPv4

SR-S V13 2 LAN # lan 0 ip ospf use on 0 # lan 1 ip ospf use on 0 OSPF # ospf ip area 0 id 0.0.0.1 3 LAN # lan 0 ip ospf use on 0 # lan 1 ip ospf use on 1 OSPF # ospf ip id 10.30.10.1 # ospf ip area 0 id 0.0.0.0 # ospf ip area 1 id 0.0.0.2 # ospf ip area 1 vlink 0 id 10.40.10.1 4 LAN # lan 0 ip ospf use on 0 # lan 1 ip ospf use on 1 OSPF # ospf ip id 10.40.10.1 # ospf ip area 0 id 0.0.0.2 # ospf ip area 0 vlink 0 id 10.30.10.1 # ospf ip area 1 id 0.0.0.3 95 OSPF IPv4

SR-S V13 5 LAN # lan 0 ip ospf use on 0 # lan 1 ip ospf use on 0 OSPF # ospf ip area 0 id 0.0.0.3 96 OSPF IPv4

SR-S V13 24.2 SR-S716C2, 724TC1, 748TC1 OSPF OSPF RIP OSPF OSPF RIP OSPF OSPF OSPF NSSA OSPF OSPF OSPF ID0.0.0.0 10.10.10.1 LAN0 10.10.10.2 LAN0 1 3 10.20.10.1 LAN1 10.30.10.1 LAN1 10.20.10.2 LAN0 2 ID0.0.0.2 10.30.10.2 LAN0 4 10.20.20.1 LAN1 10.40.10.1 LAN1 RIPv2 ID0.0.0.1 IP IP 1 LAN0 OSPF LAN1 OSPF LAN0 OSPF ID 0.0.0.0 LAN1 OSPF ID 0.0.0.1 ID 0.0.0.1 stub 2 LAN0 OSPF LAN1 OSPF LAN0 OSPF ID 0.0.0.1 LAN1 OSPF ID 0.0.0.1 ID 0.0.0.1 stub 97 OSPF IPv4

SR-S V13 3 LAN0 OSPF LAN1 OSPF LAN0 OSPF ID 0.0.0.0 LAN1 OSPF ID 0.0.0.2 ID 0.0.0.2 nssa 4 LAN0 OSPF LAN1 RIP V2,OSPF LAN0 OSPF ID 0.0.0.2 LAN1 passive-interface ID0.0.0.2 nssa OSPF RIP RIP OSPF 1 LAN # lan 0 ip ospf use on 0 # lan 1 ip ospf use on 1 OSPF # ospf ip area 0 id 0.0.0.0 # ospf ip area 1 id 0.0.0.1 # ospf ip area 1 type stub 2 LAN # lan 0 ip ospf use on 0 # lan 1 ip ospf use on 0 OSPF # ospf ip area 0 id 0.0.0.1 # ospf ip area 0 type stub 98 OSPF IPv4

SR-S V13 3 LAN # lan 0 ip ospf use on 0 # lan 1 ip ospf use on 1 OSPF # ospf ip area 0 id 0.0.0.0 # ospf ip area 1 id 0.0.0.2 # ospf ip area 1 type nssa 4 LAN # lan 0 ip ospf use on 0 # lan 1 ip rip use v2m v2 0 off # lan 1 ip ospf use on 0 # lan 1 ip ospf passive on # routemanage ip redist ospf rip on # routemanage ip redist rip ospf on OSPF # ospf ip area 0 id 0.0.0.2 # ospf ip area 0 type nssa 99 OSPF IPv4

SR-S V13 25 OSPF IPv4 SR-S716C2, 724TC1, 748TC1 LSA 25.1 OSPF LSA SR-S716C2, 724TC1, 748TC1 LSA 0ID0.0.0.0 LAN0 LAN1 10.20.0.0/16 10.20.10.0/24 LAN0 LAN0 LAN0 LAN1 LAN1 LAN1 10.20.20.0/24 10.20.30.0/24 10.20.40.0/24 1ID0.0.0.1 LSA IP IP LSA LAN0 OSPF LAN1 OSPF LAN0 ID 0.0.0.0 LAN1 ID 0.0.0.1 10.20.0.0/16 100 OSPF IPv4

SR-S V13 OSPF # lan 0 ip ospf use on 0 # lan 1 ip ospf use on 1 # ospf ip area 0 id 0.0.0.0 # ospf ip area 1 id 0.0.0.1 # ospf ip area 1 range 0 10.20.0.0/16 101 OSPF IPv4

SR-S V13 25.2 AS OSPF SR-S716C2, 724TC1, 748TC1 AS OSPF AS AS 20.10.10.0/24 VPN 172.16.2.1 RIP 172.16.1.1 RIP LAN1 AS 20.10.20.0/24 LAN0 20.10.0.0/16 0ID0.0.0.0 AS IP IPv6 LAN1 RIPv2 IP ASAS OSPF AS LAN0 OSPF LAN0 ID 0.0.0.0 20.10.0.0/16 OSPF RIP 20.10.0.0/16 102 OSPF IPv4

SR-S V13 OSPF # lan 0 ip ospf use on 0 # ospf ip area 0 id 0.0.0.0 OSPF AS # routemanage ip redist ospf rip on # ospf ip summary 0 20.10.0.0/16 AS # ospf ip redist 0 pass 20.10.0.0/16 inexact # ospf ip redist 1 reject any 103 OSPF IPv4

SR-S V13 25.3 LSA SR-S716C2, 724TC1, 748TC1 TYPE3 LSA 0ID0.0.0.0 LAN0 LAN1 LAN0 20.0.0.0/8 LAN1 LAN0 LAN0 LAN0 LAN1 LAN1 LAN1 10.0.0.0/8 20.0.0.0/8 1ID0.0.0.1 2ID0.0.0.2 LSA IP IP 1 10.0.0.0/8 2 10.0.0.0/8 LAN0 OSPF LAN1 OSPF LAN0 ID 0.0.0.0 LAN1 ID 0.0.0.2 10.0.0.0/8 LSA OSPF # lan 0 ip ospf use on 0 # lan 1 ip ospf use on 1 # ospf ip area 0 id 0.0.0.0 # ospf ip area 1 id 0.0.0.2 2 # ospf ip area 1 type3-lsa 0 reject 10.0.0.0/8 in exact # ospf ip area 1 type3-lsa 1 pass any in 104 OSPF IPv4

SR-S V13 105 OSPF IPv4

SR-S V13 26 OSPF IPv6 SR-S724TC1, 748TC1 26.1 OSPF SR-S724TC1, 748TC1 OSPFIPv6 30 2 DRDesignated Router LAN OSPF MTU OSPF OSPF LSA LSDB LSA LSA commit/reset 60 OSPF DR 10000 LSA DR 20000 LSA LAN0 1 LAN0 2 LAN2 LAN1 LAN1 1 OSPF 2001:db8:10::/64 2 2001:db8:20::/64 12 IPv6 lan ip6 use on 12 IPv6 1 LAN1 1 LAN2 OSPF 1 OSPF AS 2 106 OSPF IPv6

SR-S V13 ID : 0.0.0.0 : 0.0.0.1 : 0.0.0.2 1 LAN0 LAN1Passive-interface OSPF OSPF ID 100.0.0.1 OSPF 2 LAN0 255 LAN1 OSPF ID 100.0.0.2 1 LAN # lan 0 ip6 ospf use on 0 # lan 1 ip6 ospf use on 1 # lan 1 ip6 ospf passive on OSPF # ospf ip6 id 100.0.0.1 # ospf ip6 area 0 id 0.0.0.0 # ospf ip6 area 1 id 0.0.0.1 # routemanage ip6 redist ospf static on 2 LAN # lan 0 ip6 ospf use on 0 # lan 0 ip6 ospf priority 255 # lan 1 ip6 ospf use on 1 OSPF # ospf ip6 id 100.0.0.2 # ospf ip6 area 0 id 0.0.0.0 # ospf ip6 area 1 id 0.0.0.2 107 OSPF IPv6

SR-S V13 # ospf ip6 area 1 type stub 26.2 SR-S724TC1, 748TC1 LAN0 1 LAN1 LAN2 2001:db8:10::/64 2001:db8:20::/64 IPv6 lan ip6 use on IPv6 1 LAN0LAN1LAN2 OSPF OSPF ID 100.0.0.1 ID 1 : 0.0.0.0 0 : 0.0.0.1 1 IP LAN1 : 2001:db8:10::1/64 LAN2 : 2001:db8:20::1/64 1 2001:db8:10::/642001:db8:20::/642001:db8::/32 100 OSPF # ospf ip6 area 1 range 0 2001:db8::/32 100 108 OSPF IPv6

SR-S V13 26.3 SR-S724TC1, 748TC1 LSA LAN0 1 LAN1 LAN2 2001:db8:10::/64 2001:db8:20::/64 IPv6 lan ip6 use on IPv6 1 LAN0LAN1LAN2 OSPF OSPF ID 100.0.0.1 ID 1 : 0.0.0.0 0 : 0.0.0.1 1 IP LAN1 : 2001:db8:10::1/64 LAN2 : 2001:db8:20::1/64 1 2001:db8:20::/64 OSPF # ospf ip6 area 1 inter-area-prefix 0 reject 2001:db8:20::/64 out # ospf ip6 area 1 inter-area-prefix 1 pass any out 109 OSPF IPv6

SR-S V13 27 SR-S716C2, 724TC1, 748TC1 2 PIM-DM PIM-SM 2.33 P.112 27.1 PIM-DM SR-S716C2, 724TC1, 748TC1 PIM-DM LAN PIM-DM 192.168.1.2/24 1 LAN1ETHER 192.168.2.1/24 239.255.1.1 LAN0ETHER1 192.168.1.1/24 LAN2ETHER3 192.168.3.1/24 LAN1ETHER 192.168.2.2/24 LAN1ETHER2 192.168.3.2/24 LAN0ETHER1 192.168.4.1/24 LAN0ETHER1 192.168.5.1/24 110

SR-S V13 PIM-DM PIM-DM 1 LAN0LAN1LAN2 ETHER1ETHER2ETHER3 RIP LAN0 IP 192.168.1.1/24 LAN1 IP 192.168.2.1/24 LAN2 IP 192.168.3.1/24 2 LAN0LAN1 ETHER1 ETHER2 RIP LAN0 IP 192.168.4.1/24 LAN1 IP 192.168.2.2/24 3 LAN0LAN1 ETHER1 ETHER2 RIP LAN0 IP 192.168.5.1/24 LAN1 IP 192.168.3.2/24 111

SR-S V13 1 ETHER # delete ether LAN # delete lan # ether 1-3 media metal ETHER1~3 # ether 1 vlan untag 1 # ether 2 vlan untag 2 # ether 3 vlan untag 3 192.168.1.0/24 # lan 0 vlan 1 # lan 0 ip address 192.168.1.1/24 3 # lan 0 ip multicast mode pimdm 192.168.2.0/24 # lan 1 vlan 2 # lan 1 ip address 192.168.2.1/24 3 # lan 1 ip rip use v2 v2 0 on # lan 1 ip multicast mode pimdm 192.168.3.0/24 # lan 2 vlan 3 # lan 2 ip address 192.168.3.1/24 3 # lan 2 ip rip use v2 v2 0 on # lan 2 ip multicast mode pimdm 112

SR-S V13 2 ETHER # delete ether LAN # delete lan # ether 1,2 media metal ETHER12 # ether 1 vlan untag 1 # ether 2 vlan untag 2 192.168.4.0/24 # lan 0 vlan 1 # lan 0 ip address 192.168.4.1/24 3 # lan 0 ip multicast mode pimdm 192.168.2.0/24 # lan 1 vlan 2 # lan 1 ip address 192.168.2.2/24 3 # lan 1 ip rip use v2 v2 0 on # lan 1 ip multicast mode pimdm 3 ETHER # delete ether LAN # delete lan # ether 1,2 media metal ETHER12 # ether 1 vlan untag 1 # ether 2 vlan untag 2 192.168.5.0/24 # lan 0 vlan 1 # lan 0 ip address 192.168.5.1/24 3 # lan 0 ip multicast mode pimdm 192.168.3.0/24 # lan 1 vlan 2 # lan 1 ip address 192.168.3.2/24 3 # lan 1 ip rip use v2 v2 0 on # lan 1 ip multicast mode pimdm 113

SR-S V13 27.2 PIM-SM SR-S716C2, 724TC1, 748TC1 PIM-SM PIM-SM BSRBootstrap Router 1 BSR RPRendezvous Point RP 1 RP SPT Shortest Path Tree PIM-SM RP RP LAN0ETHER1 192.168.10.1/24 PIM-SM 1 LAN1ETHER2 192.168.11.1/24 LAN2ETHER3 192.168.12.1/24 LAN0ETHER1 192.168.12.2/24 LAN1ETHER2 192.168.13.1/24 RP192.168.12.2 BSR192.168.12.2 PIM-SM LAN0ETHER1 LAN1ETHER2 192.168.11.2/24 192.168.13.2/24 LAN2ETHER3 PIM-SM 192.168.2.1/24 LAN3ETHER4 192.168.3.1/24 LAN1ETHER2 192.168.2.2/24 PIM-SM LAN0ETHER1 192.168.4.1/24 LAN1ETHER2 192.168.3.2/24 PIM-SM LAN0ETHER1 192.168.5.1/24 PIM-SM 114

SR-S V13 RP 2 1 2 3 4 1 2 2 4 4 SPT 1 3 4 1 5 PIM-SM RIP RP 2192.168.12.2 BSR 2192.168.12.2 SPT 1 LAN0LAN1LAN2 ETHER1ETHER2ETHER3 LAN0 IP 192.168.10.1/24 LAN1 IP 192.168.11.1/24 LAN2 IP 192.168.12.1/24 2 LAN0LAN1 ETHER1 ETHER2 LAN0 IP 192.168.12.2/24 LAN1 IP 192.168.13.1/24 RP 192.168.12.2 BSR 192.168.12.2 3 LAN0LAN1LAN2LAN3 ETHER1ETHER2ETHER3ETHER4 LAN0 IP 192.168.11.2/24 LAN1 IP 192.168.13.2/24 LAN2 IP 192.168.2.1/24 LAN3 IP 192.168.3.1/24 4 LAN0LAN1 ETHER1 ETHER2 LAN0 IP 192.168.4.1/24 LAN1 IP 192.168.2.2/24 5 LAN0LAN1 ETHER1 ETHER2 LAN0 IP 192.168.5.1/24 LAN1 IP 192.168.3.2/24 115

SR-S V13 1 ETHER # delete ether LAN # delete lan # ether 1-3 media metal ETHER1~3 # ether 1 vlan untag 1 # ether 2 vlan untag 2 # ether 3 vlan untag 3 192.168.10.0/24 # lan 0 vlan 1 # lan 0 ip address 192.168.10.1/24 3 # lan 0 ip multicast mode pimsm 192.168.11.0/24 # lan 1 vlan 2 # lan 1 ip address 192.168.11.1/24 3 # lan 1 ip rip use v2 v2 0 on # lan 1 ip multicast mode pimsm 192.168.12.0/24 # lan 2 vlan 3 # lan 2 ip address 192.168.12.1/24 3 # lan 2 ip rip use v2 v2 0 on # lan 2 ip multicast mode pimsm 116

SR-S V13 2 ETHER # delete ether LAN # delete lan # ether 1,2 media metal ETHER12 # ether 1 vlan untag 1 # ether 2 vlan untag 2 192.168.12.0/24 # lan 0 vlan 1 # lan 0 ip address 192.168.12.2/24 3 # lan 0 ip rip use v2 v2 0 on # lan 0 ip multicast mode pimsm 192.168.13.0/24 # lan 1 vlan 2 # lan 1 ip address 192.168.13.1/24 3 # lan 1 ip rip use v2 v2 0 on # lan 1 ip multicast mode pimsm # multicast ip pimsm candrp mode on # multicast ip pimsm candrp address 192.168.12.2 # multicast ip pimsm candbsr mode on # multicast ip pimsm candbsr address 192.168.12.2 117

SR-S V13 3 ETHER # delete ether LAN # delete lan # ether 1-4 media metal ETHER1~4 # ether 1 vlan untag 1 # ether 2 vlan untag 2 # ether 3 vlan untag 3 # ether 4 vlan untag 4 192.168.11.0/24 # lan 0 vlan 1 # lan 0 ip address 192.168.11.2/24 3 # lan 0 ip rip use v2 v2 0 on # lan 0 ip multicast mode pimsm 192.168.13.0/24 # lan 1 vlan 2 # lan 1 ip address 192.168.13.2/24 3 # lan 1 ip rip use v2 v2 0 on # lan 1 ip multicast mode pimsm 192.168.2.0/24 # lan 2 vlan 3 # lan 2 ip address 192.168.2.1/24 3 # lan 2 ip rip use v2 v2 0 on # lan 2 ip multicast mode pimsm 192.168.3.0/24 # lan 3 vlan 4 # lan 3 ip address 192.168.3.1/24 3 # lan 3 ip rip use v2 v2 0 on # lan 3 ip multicast mode pimsm 118

SR-S V13 4 ETHER # delete ether LAN # delete lan # ether 1,2 media metal ETHER12 # ether 1 vlan untag 1 # ether 2 vlan untag 2 192.168.4.0/24 # lan 0 vlan 1 # lan 0 ip address 192.168.4.1/24 3 # lan 0 ip multicast mode pimsm 192.168.2.0/24 # lan 1 vlan 2 # lan 1 ip address 192.168.2.2/24 3 # lan 1 ip rip use v2 v2 0 on # lan 1 ip multicast mode pimsm 5 ETHER # delete ether LAN # delete lan # ether 1,2 media metal ETHER12 # ether 1 vlan untag 1 # ether 2 vlan untag 2 192.168.5.0/24 # lan 0 vlan 1 # lan 0 ip address 192.168.5.1/24 3 # lan 0 ip multicast mode pimsm 192.168.3.0/24 # lan 1 vlan 2 # lan 1 ip address 192.168.3.2/24 3 # lan 1 ip rip use v2 v2 0 on # lan 1 ip multicast mode pimsm 119

SR-S V13 27.3 SR-S716C2, 724TC1, 748TC1 192.168.1.2/24 1 LAN1ETHER 192.168.2.1/24 239.255.1.1 LAN0ETHER1 192.168.1.1/24 LAN2ETHER3 192.168.3.1/24 LAN1ETHER 192.168.2.2/24 LAN1ETHER2 192.168.3.2/24 LAN0ETHER1 192.168.4.1/24 LAN0ETHER1 192.168.5.1/24 192.168.1.2 239.255.1.1 1 LAN0LAN1LAN2 ETHER1ETHER2ETHER3 LAN0 IP 192.168.1.1/24 LAN1 IP 192.168.2.1/24 LAN2 IP 192.168.3.1/24 2 LAN0LAN1 ETHER1 ETHER2 LAN0 IP 192.168.4.1/24 LAN1 IP 192.168.2.2/24 120

SR-S V13 3 LAN0, LAN1 ETHER1 ETHER2 LAN0 IP 192.168.5.1/24 LAN1 IP 192.168.3.2/24 1 ETHER # delete ether LAN # delete lan ETHER1~3 # ether 1 vlan untag 1 # ether 2 vlan untag 2 # ether 3 vlan untag 3 192.168.1.0/24 # lan 0 vlan 1 # lan 0 ip address 192.168.1.1/24 3 # lan 0 ip multicast mode static 192.168.2.0/24 # lan 1 vlan 2 # lan 1 ip address 192.168.2.1/24 3 # lan 1 ip multicast mode static 192.168.3.0/24 # lan 2 vlan 3 # lan 2 ip address 192.168.3.1/24 3 # lan 2 ip multicast mode static # multicast ip route 0 192.168.1.2 239.255.1.1 lan0 lan1-lan2 121

SR-S V13 2 ETHER # delete ether LAN # delete lan ETHER12 # ether 1 vlan untag 1 # ether 2 vlan untag 2 192.168.4.0/24 # lan 0 vlan 1 # lan 0 ip address 192.168.4.1/24 3 # lan 0 ip multicast mode static 192.168.2.0/24 # lan 1 vlan 2 # lan 1 ip address 192.168.2.2/24 3 # lan 1 ip multicast mode static # multicast ip route 0 192.168.1.2 239.255.1.1 lan1 lan0 3 ETHER # delete ether LAN # delete lan ETHER12 # ether 1 vlan untag 1 # ether 2 vlan untag 2 192.168.5.0/24 # lan 0 vlan 1 # lan 0 ip address 192.168.5.1/24 3 # lan 0 ip multicast mode static 192.168.3.0/24 # lan 1 vlan 2 # lan 1 ip address 192.168.3.2/24 3 # lan 1 ip multicast mode static # multicast ip route 0 192.168.1.2 239.255.1.1 lan1 lan0 122

SR-S V13 28 IP IP 2.34 IP P.115 IP Internet IP ACL ACL IP IP IP TOS DSCP IP IP IP IP IP 123 IP

SR-S V13 IP IP 2 A. B. A B ping IP DHCP 6768DHCP IP 124 IP

SR-S V13 28.1 LAN LAN Web FTP Web DNS DNS DNS DNS Web DNS Web DNS DNS SR-S308TL1/310TL2/316TL1/318TL2/324TL2 IP IPv4"resource filter distribution filter ipv4" MACIPv4 IP IPv4 MACIPv6 IP IPv6 IPv4 DSCP IPv4 IPv6 DSCP IPv6 LAN LAN LAN1 192.168.1.1 LAN0 192.168.0.1 IP Web 192.168.0.5 DNS 192.168.0.10 192.168.1.0/24 FTP 192.168.0.15 192.168.0.0/24 LAN 192.168.1.0/24 LAN Web LAN 192.168.1.0/24 LAN DNS ICMP ICMP IP ICMP ICMP 125 IP

SR-S V13 Web 1192.168.1.0/24 Web 80http TCP 2Web DNS 1192.168.1.0/24 DNS 53domain UDP 2DNS ICMP 1ICMP 1 Web 80 TCP # acl 0 ip 192.168.1.0/24 any 6 any # acl 0 tcp any 80 # lan 1 ip filter 0 pass acl 0 Web # acl 1 ip any 192.168.1.0/24 6 any # acl 1 tcp 80 any # lan 1 ip filter 1 pass acl 1 DNS 53 UDP # acl 2 ip 192.168.1.0/24 192.168.0.10/32 17 any # acl 2 udp any 53 # lan 1 ip filter 2 pass acl 2 DNS # acl 3 ip 192.168.0.10/32 192.168.1.0/24 17 any # acl 3 udp 53 any # lan 1 ip filter 3 pass acl 3 ICMP # acl 4 ip any any 1 any # lan 1 ip filter 4 pass acl 4 # acl 5 ip any any any any # lan 1 ip filter 5 reject acl 5 126 IP

SR-S V13 28.2 IPv6 LAN LAN Web ftp Web DNS DNS DNS DNS Web DNS Web DNS DNS SR-S308TL1/310TL2/316TL1/318TL2/324TL2 IP IPv6"resource filter distribution filter ipv6" MACIPv4 IP IPv4 MACIPv6 IP IPv6 IPv4 DSCP IPv4 IPv6 DSCP IPv6 LAN LAN1 LAN0 LAN IPv6 Web 2001:db8::5 DNS 2001:db8::10 2001:db8:1::/64 FTP 2001:db8::15 2001:db8::/64 LAN 2001:db8:1::/64 Web LAN 2001:db8:1::/64 LAN DNS ICMPv6 ICMPv6 IPv6 ICMPv6 ICMPv6 127 IP

SR-S V13 Web 12001:db8:1::/64 80http TCP 2Web DNS 12001:db8:1::/64 DNS 53domain UDP 2DNS ICMPv6 1ICMPv6 1 Web 80 TCP # acl 0 ip6 2001:db8:1::/64 any 6 any # acl 0 tcp any 80 # lan 1 ip6 filter 0 pass acl 0 Web # acl 1 ip6 any ip6 2001:db8:1::/64 6 any # acl 1 tcp 80 any # lan 1 ip6 filter 1 pass acl 1 DNS 53 UDP # acl 2 ip6 2001:db8:1::/64 any 17 any # acl 2 udp any 53 # lan 1 ip6 filter 2 pass acl 2 DNS # acl 3 ip6 any 2001:db8:1::/64 17 any # acl 3 udp 53 any # lan 1 ip6 filter 3 pass acl 3 ICMPv6 # acl 4 ip6 any any 58 # acl 4 icmp any any # lan 1 ip6 filter 4 pass acl 4 # acl 5 ip6 any any any any # lan 1 ip6 filter 5 reject acl 5 128 IP

SR-S V13 28.3 LAN Web DNS DNS DNS DNS Web DNS Web DNS DNS SR-S308TL1/310TL2/316TL1/318TL2/324TL2 IP IPv4"resource filter distribution filter ipv4" MACIPv4 IP IPv4 MACIPv6 IP IPv6 IPv4 DSCP IPv4 IPv6 DSCP IPv6 LAN LAN LAN1 192.168.1.1 LAN0 192.168.0.1 Web 192.168.1.5 IP DNS 192.168.1.10 FTP 192.168.1.15 192.168.1.0/24 192.168.0.0/24 LAN 192.168.1.5/32 Web LAN DNS ICMP ICMP IP ICMP ICMP 129 IP

SR-S V13 LAN Web 1192.168.1.5/32 80http TCP 2Web DNS 1192.168.0.0/24 DNS 53domain UDP 2DNS ICMP 1ICMP 1 Web 80 TCP # acl 0 ip any 192.168.1.5/32 6 any # acl 0 tcp any 80 # lan 1 ip filter 0 pass acl 0 Web # acl 1 ip 192.168.1.5/32 any 6 any # acl 1 tcp 80 any # lan 1 ip filter 1 pass acl 1 DNS 53 UDP # acl 2 ip 192.168.0.0/24 192.168.1.10/32 17 any # acl 2 udp any 53 # lan 1 ip filter 2 pass acl 2 DNS # acl 3 ip 192.168.1.10/32 192.168.0.0/24 17 any # acl 3 udp 53 any # lan 1 ip filter 3 pass acl 3 ICMP # acl 4 ip any any 1 any # lan 1 ip filter 4 pass acl 4 # acl 5 ip any any any any # lan 1 ip filter 5 reject acl 5 130 IP

SR-S V13 28.4 LAN FTP SR-S308TL1/310TL2/316TL1/318TL2/324TL2 IP IPv4"resource filter distribution filter ipv4" MACIPv4 IP IPv4 MACIPv6 IP IPv6 IPv4 DSCP IPv4 IPv6 DSCP IPv6 LAN LAN LAN1 192.168.1.1 LAN0 192.168.0.1 IP FTP 192.168.0.5 DNS 192.168.0.10 192.168.1.0/24 Web 192.168.0.15 192.168.0.0/24 LAN 192.168.1.0/24 LAN FTP 192.168.0.5 FTP 1192.168.1.0/24 192.168.0.5 21ftp TCP LAN 192.168.0.5 FTP # acl 0 ip 192.168.1.0/24 192.168.0.5/32 6 any # acl 0 tcp any 21 # lan 1 ip filter 0 reject acl 0 131 IP

SR-S V13 28.5 ping LAN pingicmp ECHO ICMP SR-S308TL1/310TL2/316TL1/318TL2/324TL2 IP IPv4"resource filter distribution filter ipv4" MACIPv4 IP IPv4 MACIPv6 IP IPv6 IPv4 DSCP IPv4 IPv6 DSCP IPv6 LAN1 LAN0 192.168.1.1 192.168.0.1 ping 192.168.1.5 ping IP ping LAN 192.168.1.5/32 pingicmp ECHO LAN 192.168.1.5/32 pingicmp ECHO 1192.168.1.5/32 ICMP TYPE 8 ICMP 1 192.168.1.5/32 ICMP TYPE 8 ICMP # acl 0 ip any 192.168.1.5/32 1 any # acl 0 icmp 8 any # lan 0 ip filter 0 reject acl 0 # acl 1 ip any any any any # lan 0 ip filter 1 pass acl 1 132 IP

SR-S V13 29 DSCP IP DSCP 2.35 DSCP P.117 SR-S308TL1/310TL2/316TL1/318TL2/324TL2 DSCP IPv4"resource filter distribution qos ipv4" MACIPv4 IP IPv4 MACIPv6 IP IPv6 IPv4 DSCP IPv4 IPv6 DSCP IPv6 DSCP ACL ACL DSCP IP IP IP TOS DSCP IPv6 Traffic Class DSCP SR-S324TC1/328TR1/348TC1/724TC1/748TC1 FTPDSCP 10 133 DSCP

SR-S V13 LAN0 192.168.1.1 LAN1 DSCP0 DSCP10 FTP DSCP TOS00 DSCP0 WWW DSCP0 192.168.1.0/24 IP / 192.168.1.0/24 IP / 20ftp-data 21ftp TCP DSCP 0 DSCP 10 FTP DSCP 0 10 # acl 0 ip 192.168.1.0/24 any 6 dscp 0 # acl 0 tcp any 20,21 # lan 0 ip dscp 0 acl 0 10 134 DSCP

SR-S V13 30 VRRP SR-S716C2, 724TC1, 748TC1 VRRP 2 1 VRRP RIP VRRP 2 2.36 VRRP P.119 on off vrrp preempt-permit LAN IP VRRP VRRP-AD IP IPv4-VRRP IP 224.0.0.18 112 IPv6-VRRP IP ff02::12 IPv6 Next Header112 IPv6 VRRP SR-S724TC1/748TC1 135 VRRP

SR-S V13 30.1 SR-S716C2, 724TC1, 748TC1 2 LAN VLAN VLAN 100 VLAN HUB VLAN 100 VLAN 200 192.168.1.10/24 192.168.2.10/24 254254 lan0 ETHER2 lan2 lan1 ETHER3 ETHER1 192.168.3.1 internet lan0 ETHER2 ETHER1 VLAN 200 VLAN HUB lan1 ETHER3 lan2 VLAN 100 VLAN 200 192.168.1.11/24 192.168.2.11/24 100100 192.168.3.2 VLAN 100 ID 10 IP 192.168.1.1 VLAN 200 ID 20 IP 192.168.2.1 ETHER1 VLAN 100 ETHER2 VLAN 200 ETHER3 IP 192.168.1.10/24 IP 202.168.2.1 DNS ETHER1 VLAN 100 ETHER2 VLAN 200 ETHER3 IP 192.168.1.11/24 136 VRRP

SR-S V13 # ether 1-3 media metal VLAN # ether 1 vlan untag 10 # ether 2 vlan tag 100 # ether 3 vlan tag 200 # lan 0 vlan 100 # lan 1 vlan 200 # lan 2 vlan 10 STP # stp mode disable # ip routing enable IP DNS # lan 0 ip address 192.168.1.10/24 3 # lan 1 ip address 192.168.2.10/24 3 # lan 2 ip address 192.168.3.10/24 3 # lan 2 ip route 0 default 192.168.3.1 VRRP # lan 0 vrrp use on # lan 0 vrrp group 0 id 10 254 192.168.1.1 # lan 0 vrrp group 0 preempt off # lan 0 vrrp group 0 trigger 0 node 202.168.2.1 any # lan 1 vrrp use on # lan 1 vrrp group 0 id 20 254 192.168.2.1 # lan 1 vrrp group 0 preempt off # lan 1 vrrp group 0 trigger 0 node 202.168.2.1 any # reset # lan 0 vrrp group 0 trigger 1 ifdown lan2 # lan 1 vrrp group 0 trigger 1 ifdown lan2 137 VRRP

SR-S V13 # ether 1-3 media metal VLAN # ether 1 vlan untag 10 # ether 2 vlan tag 100 # ether 3 vlan tag 200 # lan 0 vlan 100 # lan 1 vlan 200 # lan 2 vlan 10 STP # stp mode disable # ip routing enable IP # lan 0 ip address 192.168.1.11/24 3 # lan 1 ip address 192.168.2.11/24 3 # lan 2 ip address 192.168.3.11/24 3 # lan 2 ip route 0 default 192.168.3.2 VRRP # lan 0 vrrp use on # lan 0 vrrp group 0 id 10 100 192.168.1.1 # lan 1 vrrp use on # lan 1 vrrp group 0 id 20 100 192.168.2.1 # reset 138 VRRP

SR-S V13 30.2 SR-S716C2, 724TC1, 748TC1 2 ID LAN VLAN VLAN 100 VLAN 100 A B 254100 VLAN 100 VLAN HUB VLAN 200 192.168.2.10/24 254 lan0 ether2 lan2 lan1 ether3 ether1 192.168.3.1 internet lan0 ether2 ether1 VLAN 200 VLAN HUB lan1 ether3 lan2 VLAN 100 A B 100254 192.168.3.2 VLAN 200 192.168.2.11/24 100 VLAN 100 A - ID 10 - IP 192.168.1.1 B - ID 11 - IP 192.168.1.2 VLAN 200 ID 20 IP 192.168.2.1 ETHER1 VLAN 100 ETHER2 VLAN 200 ETHER3 IP 192.168.1.10/24 139 VRRP

SR-S V13 ETHER1 VLAN 100 ETHER2 VLAN 200 ETHER3 IP 192.168.1.11/24 # ether 1-3 media metal VLAN # ether 1 vlan untag 10 # ether 2 vlan tag 100 # ether 3 vlan tag 200 # lan 0 vlan 100 # lan 1 vlan 200 # lan 2 vlan 10 STP # stp mode disable # ip routing enable IP # lan 0 ip address 192.168.1.10/24 3 # lan 1 ip address 192.168.2.10/24 3 # lan 2 ip address 192.168.3.10/24 3 # lan 2 ip route 0 default 192.168.3.1 VRRP # lan 0 vrrp use on # lan 0 vrrp group 0 id 10 254 192.168.1.1 # lan 0 vrrp group 0 preempt off # lan 0 vrrp group 0 trigger 0 ifdown lan2 254 # lan 0 vrrp group 1 id 11 100 192.168.1.2 # lan 1 vrrp use on # lan 1 vrrp group 0 id 20 254 192.168.2.1 # lan 1 vrrp group 0 preempt off # lan 1 vrrp group 0 trigger 0 ifdown lan2 254 # reset 140 VRRP

SR-S V13 # ether 1-3 media metal VLAN # ether 1 vlan untag 10 # ether 2 vlan tag 100 # ether 3 vlan tag 200 # lan 0 vlan 100 # lan 1 vlan 200 # lan 2 vlan 10 STP # stp mode disable # ip routing enable IP # lan 0 ip address 192.168.1.11/24 3 # lan 1 ip address 192.168.2.11/24 3 # lan 2 ip address 192.168.3.11/24 3 # lan 2 ip route 0 default 192.168.3.2 VRRP # lan 0 vrrp use on # lan 0 vrrp group 0 id 10 100 192.168.1.1 # lan 0 vrrp group 1 id 11 254 192.168.1.2 # lan 0 vrrp group 1 preempt off # lan 0 vrrp group 1 trigger 0 ifdown lan2 254 # lan 1 vrrp use on # lan 1 vrrp group 0 id 20 100 192.168.2.1 # reset 141 VRRP

SR-S V13 31 ECMP SR-S716C2, 724TC1, 748TC1 ECMP 202.168.1.65 internet A B 1 2 192.168.2.2 192.168.3.2 LAN1 LAN2 192.168.2.1 192.168.3.1 LAN0 192.168.1.1 192.168.1.0/24 2.37 ECMP P.123 1 2 # ether 1-16 media metal ETHER15 1ETHER16 2 ETHER ETHER # ether 1-14 vlan untag 10 # lan 0 vlan 10 # ether 15 vlan untag 11 # lan 1 vlan 11 # ether 16 vlan untag 12 # lan 2 vlan 12 LAN IP # lan 0 ip address 192.168.1.1/24 3 # lan 1 ip address 192.168.2.1/24 3 # lan 2 ip address 192.168.3.1/24 3 # lan 1 ip route 202.168.1.0/24 192.168.2.2 1 1 # lan 2 ip route 202.168.1.0/24 192.168.3.2 1 1 142 ECMP

SR-S V13 ECMP # routemanage ip ecmp mode hash 143 ECMP

SR-S V13 32 DHCP DHCP DHCP DHCP DHCP IPv4SR-S716C2/724TC1/748TC1 IPv6SR-S724TC1/748TC1 2.38 DHCP P.125 DHCP 11 DHCP 32.1 DHCP DHCP IP IP DHCP IP DHCP IP IP DNS IP DHCP DHCP 144 DHCP

SR-S V13 SR-S716C2 DHCP DHCP IP 253 IP 192.168.2.2 192.168.2.33 IP LAN1 192.168.2.1 LAN0 192.168.2.0/24 LAN0 LAN1 VLAN IP 192.168.2.1 3 1 IP 192.168.2.2 192.168.2.33 IP 32 192.168.2.0/24 DHCP # ether 1 media metal VLAN # ether 1 vlan untag 10 # lan 1 vlan 10 DHCP # lan 1 ip address 192.168.2.1/24 3 # lan 1 ip dhcp info dns 192.168.2.1 # lan 1 ip dhcp info address 192.168.2.2/24 32 # lan 1 ip dhcp info time 1d # lan 1 ip dhcp info gateway 192.168.2.1 # lan 1 ip dhcp service server 145 DHCP

SR-S V13 32.2 DHCP DHCP IP IP IP IP IP MAC DHCP IP DHCP DHCP IP MAC MAC LAN IP IP DHCP DHCP SR-S716C2 DHCP DHCP DNS DHCP 100 IP IP 192.168.2.2 MAC 00:00:0e:12:34:56 LAN1 192.168.2.1 LAN0 192.168.2.0/24 192.168.2.0/24 IP MAC 00:00:0e:12:34:56 IP 192.168.2.2 DHCP DHCP DHCP 146 DHCP

SR-S V13 # ether 1 media metal VLAN # ether 1 vlan untag 10 # lan 1 vlan 10 DHCP # lan 1 ip address 192.168.2.1/24 3 # lan 1 ip dhcp info dns 192.168.2.1 # lan 1 ip dhcp info address 192.168.2.2/24 32 # lan 1 ip dhcp info time 1d # lan 1 ip dhcp info gateway 192.168.2.1 # lan 1 ip dhcp service server DHCP # host 0 ip address 192.168.2.2 # host 0 mac 00:00:0e:12:34:56 147 DHCP

SR-S V13 32.3 DHCP SR-S716C2, 724TC1, 748TC1 DHCPIP DHCP DHCP DHCP DHCP DHCP LAN1 LAN0 IP LAN1 192.168.1.1 LAN0 192.168.0.1 DHCP 192.168.0.10 192.168.1.0/24 192.168.0.0/24 LAN0 LAN1 VLAN LAN1 IP 192.168.1.1 DHCP LAN0 IP 192.168.0.1 DHCP 192.168.0.10 # ether 1-2 media metal VLAN # ether 1 vlan untag 10 # ether 2 vlan untag 20 # lan 0 vlan 10 # lan 1 vlan 20 IP # lan 0 ip address 192.168.0.1/24 3 # lan 1 ip address 192.168.1.1/24 3 148 DHCP

SR-S V13 DHCP # lan 1 ip dhcp service relay 192.168.0.10 149 DHCP

SR-S V13 32.4 IPv6 DHCP IPv6 DHCP IPv6 IPv6 DNS IPv6 DNS IPv6 DHCP IPv6 DHCP IPv6 DHCP IPv6 2001:db8:1::1002001:db8:1::163 LAN1 LAN0 2001:db8:1::/64 IP 2001:db8:1::1 IPv6 2001:db8:1::100 2001:db8:1::163 IPv6 100 2001:db8:1::/64 Valid Lifetime 30 Preferred Lifetime 7 DNS IPv6 2001:db8:1::53 150 DHCP

SR-S V13 IPv6 DHCP # lan 1 ip6 use on # lan 1 ip6 address 0 2001:db8:1::1/64 IPv6 DHCP # lan 1 ip6 dhcp service server # lan 1 ip6 dhcp server info address 2001:db8:1::100 100 30d 7d # lan 1 ip6 dhcp server info dns 2001:db8:1::53 151 DHCP

SR-S V13 32.5 IPv6 DHCP SR-S724TC1, 748TC1 IPv6 DHCP LAN LAN IPv6 LAN1 2001:db8:1::1 LAN0 2001:db8::1 IPv6 DHCP 2001:db8:1::/64 2001:db8::/64 LAN IPv6 2001:db8:1::1 IPv6 DHCP LAN IPv6 2001:db8::1 # lan 0 ip6 use on # lan 0 ip6 address 0 2001:db8::1/64 # lan 1 ip6 use on # lan 1 ip6 address 0 2001:db8:1::1/64 # lan 1 ip6 ra mode send # lan 1 ip6 ra flags c0 IPv6 DHCP # lan 1 ip6 dhcp service relay # lan 1 ip6 dhcp relay interface lan0 152 DHCP

SR-S V13 33 DNS ProxyDNS ProxyDNS DNS DNS DNS 2.40 DNS P.13 0 33.1 DNS ProxyDNS IP DNS IP DNS honsya.co.jp honsya.co.jp DNS DNS 192.168.2.2 LAN0 192.168.1.1 192.168.1.0/24 internet DNS 100.100.100.100 DNS honsya.co.jp DNS IP 192.168.2.2 DNS honsya.co.jp DNS IP 100.100.100.100 0 9A Za z <>&% 1.7 P.27 153 DNS ProxyDNS

SR-S V13 DNS # proxydns domain 0 any *.honsya.co.jp any static 192.168.2.2 # proxydns domain 1 any * any static 100.100.100.100 1. DHCP DHCP 154 DNS ProxyDNS

SR-S V13 33.2 DNS ProxyDNS IP DNS honsya.co.jp 192.168.0.0 DNS 192.168.2.2 DNS LAN0 192.168.1.1 192.168.1.0/24 internet DNS 100.100.100.100 DNS 192.168.0.0 DNS IP 192.168.2.2 DNS 192.168.0.0 DNS IP 100.100.100.100 0 9A Za z <>&% 1.7 P.27 DNS # proxydns address 0 192.168.0.0/24 static 192.168.2.2 # proxydns address 1 any static 100.100.100.100 155 DNS ProxyDNS

SR-S V13 1. DHCP DHCP 33.3 DNS DNS QTYPE ProxyDNS A1 DNS SOA6 0 9A Za z <>&% 1.7 P.27 DNS # proxydns domain 0 6 * any reject 156 DNS ProxyDNS

SR-S V13 Windows 2000 1. 2. 3. TCP/IP 4. 5. DNS 6. DNS IP 7. OK 8. 157 DNS ProxyDNS

SR-S V13 33.4 DNS IP DNS ProxyDNS DNS host.com IPv4 192.168.1.2 0 9A Za z <>&% 1.7 P.27 # host 0 name host.com # host 0 ip address 192.168.1.2 DHCP DNS 33.3 DNS P.156 P.15 7 158 DNS ProxyDNS

SR-S V13 34 URL URL URL URL ProxyDNS URL www.honsya.co.jp WWW http://www.honsya.co.jp internet WWW http://www.danger.com www.danger.com 2.40 DNS P.13 0 ProxyDNS www.danger.com DNS IP 100.100.100.100 URL LAN IP DNS IP 0 9A Za z <>&% 1.7 P.27 www.danger.comxxx.danger.com URL.danger.com 159 URL URL

SR-S V13 URL # proxydns domain 0 any www.danger.com any reject # proxydns domain 1 any * any static 100.100.100.100 160 URL URL

SR-S V13 35 SNMP SNMPSimple Network Management Protocol SNMP MIB suzuki SR-S316C2 IP 192.168.1.1 SNMPMIB SNMP 192.168.1.100 2.41 SNMP P.132 SNMP SNMPSimple Network Management ProtocolSNMP SNMP SNMP MIBManagement Information Base SNMP SNMP 3.1 MIBP.753.2 MIBP.97 3.4 Trap P.10 6 IP IP SNMP SNMP SNMP SNMPv3snmp SNMPv3 snmpengineboots 1MIB SNMP MIB 161 SNMP

SR-S V13 SNMPv1 SNMPv2c SNMPv1 SNMPv2c SNMP suzuki SR-S316C2 1F1 192.168.1.1 IP SNMP 192.168.1.100 public00 SNMP # snmp agent contact suzuki # snmp agent sysname SR-S316C2 # snmp agent location 1F # snmp agent address 192.168.1.1 SNMP # snmp manager 0 192.168.1.100 public00 off disable SNMP # snmp service on SNMPv3 SNMPv3 SNMP suzuki SR-S316C2 1F1 192.168.1.1 IP SNMP 192.168.1.100 192.168.1.100 user00 MD5 auth_password 162 SNMP

SR-S V13 DES priv_password MIB MIB systeminterfaces linkdownlinkup SNMP # snmp agent contact suzuki # snmp agent sysname SR-S316C2 # snmp agent location 1F # snmp agent address 192.168.1.1 SNMPv3 # snmp user 0 name user00 # snmp user 0 address 0 192.168.1.100 # snmp user 0 notification 0 192.168.1.100 # snmp user 0 auth md5 auth_password # snmp user 0 priv des priv_password MIB # snmp user 0 read view 0 # snmp user 0 notify view 0 # snmp view 0 subtree 0 include system # snmp view 0 subtree 1 include interfaces # snmp view 0 subtree 2 include linkdown # snmp view 0 subtree 3 include linkup SNMP # snmp service on 163 SNMP

SR-S V13 36 syslog URL DHCP IPv4 LAN1 192.168.1.1 LAN0 192.168.1.10 - LOG_ERROR - LOG_WARNING - LOG_NOTICE - LOG_INFO - DHCP - Proxy DNS IP 192.168.1.10 # syslog server 0 192.168.1.10 # syslog pri error,warn,notice,info # syslog security dhcp,proxydns 164

SR-S V13 37 2 1.2 P.12 37.1 2 2006 12 1 6 30 1 2 2006 12 1 6 30 1 2 # addact 0 0612010630 reset config2 165

SR-S V13 38 192.168.1.100 FTP TELNET SSH TIME internet LAN 192.168.1.0/24 DNS 192.168.1.100 TELNET/FTP/SSH LAN 192.168.1.0/24 TIME IP # serverinfo ftp filter default reject # serverinfo telnet filter default reject # serverinfo ssh filter default reject # serverinfo time filter default reject FTP/TELNET/SSH # acl 0 ip 192.168.1.100/32 any any any # serverinfo ftp filter 0 accept acl 0 # serverinfo telnet filter 0 accept acl 0 # serverinfo ssh filter 0 accept acl 0 LAN TIME # acl 1 ip 192.168.1.0/24 any any any # serverinfo time filter 0 accept acl 1 166

SR-S V13 167

SR-S V13 39 IEEE802.1ad SR-S328TR1 IEEE802.1ad 2.47 IEEE802.1ad P.143 39.1 IEEE802.1ad IEEE802.1ad IEEE802.1ad A S-VLAN=500 B 1 ether1 ether28 PB 2 ether1 ether28 IEEE802.1ad VLAN ID 0x88a8 VLAN 1 VLAN VLAN 500 1 ether1 VLAN 1 VLAN=500 ether28 2 ether1 VLAN 1 VLAN=500 ether28 168 IEEE802.1ad

SR-S V13 VLAN ether egress permission flooding IEEE802.1ad flooding IEEE802.1ad flooding IEEE802.1ad 1 IEEE802.1ad # dot1ad use on # dot1ad s-vlan tpid 88a8 VLAN 1 # dot1ad vlan-map 1 s-vlan vid 500 # ether 1 egress permission 28 # ether 1 dot1ad mode customer # ether 1 dot1ad customer vlan-default forward 1 # ether 28 egress permission 1 # ether 28 dot1ad mode provider # ether 28 vlan tag 500 2 IEEE802.1ad # dot1ad use on # dot1ad s-vlan tpid 88a8 VLAN 1 # dot1ad vlan-map 1 s-vlan vid 500 # ether 1 egress permission 28 # ether 1 dot1ad mode customer # ether 1 dot1ad customer vlan-default forward 1 # ether 28 egress permission 1 # ether 28 dot1ad mode provider # ether 28 vlan tag 500 169 IEEE802.1ad

SR-S V13 39.2 IEEE802.1ad C-TAG IEEE802.1ad C-TAG VLAN IEEE802.1ad A S-VLAN=1000, C-VLAN=10 1 PB 2 B S-VLAN=2000, C-VLAN=20, 30 ether5 linkaggregation1 ether27-28 ether5 linkaggregation1 ether27-28 IEEE802.1ad VLAN ID 0x8100 VLAN 1 VLAN 10 VLAN 1000 VLAN 5 VLAN 2 VLAN 20,30 VLAN 2000 VLAN 0 1 ether5 VLAN 12 VLAN 12 linkaggregation1 ether27-28 2 ether5 VLAN 12 VLAN 12 linkaggregation1 ether27-28 VLAN ether egress permission flooding IEEE802.1ad flooding IEEE802.1ad flooding 170 IEEE802.1ad

SR-S V13 IEEE802.1ad C-TAG 1 IEEE802.1ad # dot1ad use on # dot1ad s-vlan tpid 8100 VLAN 1 # dot1ad vlan-map 1 c-vlan vid 10 # dot1ad vlan-map 1 s-vlan vid 1000 # dot1ad vlan-map 1 s-vlan priority 5 VLAN 2 # dot1ad vlan-map 2 c-vlan vid 20,30 # dot1ad vlan-map 2 s-vlan vid 2000 # dot1ad vlan-map 2 s-vlan priority 0 # ether 5 egress permission 27,28 # ether 5 dot1ad mode customer # ether 5 dot1ad customer vlan-map 0 1 # ether 5 dot1ad customer vlan-map 1 2 # ether 5 dot1ad customer vlan-default discard # ether 27-28 vlan tag 1000,2000 # ether 27-28 type linkaggregation 1 27 # ether 27 egress permission 5 # linkaggregation 1 dot1ad mode provider 2 IEEE802.1ad # dot1ad use on # dot1ad s-vlan tpid 8100 VLAN 1 # dot1ad vlan-map 1 c-vlan vid 10 # dot1ad vlan-map 1 s-vlan vid 1000 # dot1ad vlan-map 1 s-vlan priority 5 VLAN 2 # dot1ad vlan-map 2 c-vlan vid 20,30 # dot1ad vlan-map 2 s-vlan vid 2000 # dot1ad vlan-map 2 s-vlan priority 0 # ether 5 egress permission 27,28 # ether 5 dot1ad mode customer # ether 5 dot1ad customer vlan-map 0 1 # ether 5 dot1ad customer vlan-map 1 2 # ether 5 dot1ad customer vlan-default discard 171 IEEE802.1ad

SR-S V13 # ether 27-28 vlan tag 1000,2000 # ether 27-28 type linkaggregation 1 27 # ether 27 egress permission 5 # linkaggregation 1 dot1ad mode provider 172 IEEE802.1ad

SR-S V13 40 IEEE802.1ah SR-S328TR1 IEEE802.1ah 2.48 IEEE802.1ah P.146 40.1 IEEE802.1ah IEEE802.1ah MAC=00:22:22:00:00:00 ether1 ether25 A IEEE802.1ah B-VLAN=300, I-SID=0x100 2 B MAC=00:11:11:00:00:00 ether1 ether25 1 BCB B-VLAN=300, I-SID=0x100 3 C MAC=00:33:33:00:00:00 ether1 ether25 IEEE802.1ah VLAN ID 0x8100 VLAN ID 0x8100 0 ID 0x100 VLAN 300 1 ether1 0 VLAN=300 ID=0x100 ether25 0 MAC 00:11:11:00:00:00 173 IEEE802.1ah

SR-S V13 2 ether1 0 VLAN=300 ID=0x100 ether25 0 MAC 00:22:22:00:00:00 3 ether1 0 VLAN=300 ID=0x100 ether25 0 MAC 00:33:33:00:00:00 ether egress permission flooding ID flooding IEEE802.1ah flooding IEEE802.1ah 1 IEEE802.1ah # dot1ah use on # dot1ah s-vlan tpid 8100 # dot1ah b-vlan tpid 8100 # dot1ah b-sa 00:11:11:00:00:00 0 # dot1ah service 0 i-sid 100 # dot1ah service 0 b-vlan vid 300 # dot1ah service 0 b-da 0 00:22:22:00:00:00 multicast # dot1ah service 0 b-da 1 00:33:33:00:00:00 multicast # ether 1 egress permission 25 # ether 1 dot1ah mode customer # ether 1 dot1ah customer service-default forward 0 # ether 25 vlan tag 300 # ether 25 egress permission 1 # ether 25 dot1ah mode provider 174 IEEE802.1ah

SR-S V13 # ether 25 dot1ah provider service 0 0 2 IEEE802.1ah # dot1ah use on # dot1ah s-vlan tpid 8100 # dot1ah b-vlan tpid 8100 # dot1ah b-sa 00:22:22:00:00:00 0 # dot1ah service 0 i-sid 100 # dot1ah service 0 b-vlan vid 300 # dot1ah service 0 b-da 0 00:11:11:00:00:00 multicast # dot1ah service 0 b-da 1 00:33:33:00:00:00 multicast # ether 1 egress permission 25 # ether 1 dot1ah mode customer # ether 1 dot1ah customer service-default forward 0 # ether 25 vlan tag 300 # ether 25 egress permission 1 # ether 25 dot1ah mode provider # ether 25 dot1ah provider service 0 0 3 IEEE802.1ah # dot1ah use on # dot1ah s-vlan tpid 8100 # dot1ah b-vlan tpid 8100 # dot1ah b-sa 00:33:33:00:00:00 0 # dot1ah service 0 i-sid 100 # dot1ah service 0 b-vlan vid 300 # dot1ah service 0 b-da 0 00:11:11:00:00:00 multicast # dot1ah service 0 b-da 1 00:22:22:00:00:00 multicast # ether 1 egress permission 25 # ether 1 dot1ah mode customer # ether 1 dot1ah customer service-default forward 0 # ether 25 vlan tag 300 # ether 25 egress permission 1 # ether 25 dot1ah mode provider # ether 25 dot1ah provider service 0 0 175 IEEE802.1ah

SR-S V13 40.2 IEEE802.1ah S-TAG IEEE802.1ah S-TAG VLAN A S-VLAN=100 1 IEEE802.1ah B-VLAN=1000, I-SID=0x100 MAC=00:22:22:00:00:00 ether1 ether25 2 S-VLAN=100 B S-VLAN=200 MAC=00:11:11:00:00:00 ether1 ether25 BCB B-VLAN=2000, I-SID=0x200 3 S-VLAN=200 C MAC=00:33:33:00:00:00 ether1 ether25 IEEE802.1ah VLAN ID 0x88a8 VLAN ID 0x88a8 1 ID 0x100 VLAN 100 VLAN 1000 2 ID 0x200 VLAN 200 VLAN 2000 1 ether1 1,2 1,2 ether25 1,2 MAC 00:11:11:00:00:00 2 ether1 1 1 ether25 1 MAC 00:22:22:00:00:00 176 IEEE802.1ah

SR-S V13 3 ether1 2 2 ether25 2 MAC 00:33:33:00:00:00 ether egress permission flooding ID flooding IEEE802.1ah flooding IEEE802.1ah S-TAG 1 IEEE802.1ah # dot1ah use on # dot1ah s-vlan tpid 88a8 # dot1ah b-vlan tpid 88a8 # dot1ah b-sa 00:11:11:00:00:00 1 # dot1ah service 1 i-sid 100 # dot1ah service 1 s-vlan vid 100 # dot1ah service 1 b-vlan vid 1000 # dot1ah service 1 b-da 0 00:22:22:00:00:00 multicast 2 # dot1ah service 2 i-sid 200 # dot1ah service 2 s-vlan vid 200 # dot1ah service 2 b-vlan vid 2000 # dot1ah service 2 b-da 0 00:33:33:00:00:00 multicast # ether 1 egress permission 25 # ether 1 dot1ah mode customer # ether 1 dot1ah customer service 0 1 # ether 1 dot1ah customer service 1 2 # ether 1 dot1ah customer service-default discard # ether 25 vlan tag 1000,2000 # ether 25 egress permission 1 # ether 25 dot1ah mode provider # ether 25 dot1ah provider service 0 1 # ether 25 dot1ah provider service 1 2 177 IEEE802.1ah

SR-S V13 2 IEEE802.1ah # dot1ah use on # dot1ah s-vlan tpid 88a8 # dot1ah b-vlan tpid 88a8 # dot1ah b-sa 00:22:22:00:00:00 1 # dot1ah service 1 i-sid 100 # dot1ah service 1 s-vlan vid 100 # dot1ah service 1 b-vlan vid 1000 # dot1ah service 1 b-da 0 00:11:11:00:00:00 multicast # ether 1 egress permission 25 # ether 1 dot1ah mode customer # ether 1 dot1ah customer service 0 1 # ether 1 dot1ah customer service-default discard # ether 25 vlan tag 1000 # ether 25 egress permission 1 # ether 25 dot1ah mode provider # ether 25 dot1ah provider service 0 1 3 IEEE802.1ah # dot1ah use on # dot1ah s-vlan tpid 88a8 # dot1ah b-vlan tpid 88a8 # dot1ah b-sa 00:33:33:00:00:00 2 # dot1ah service 2 i-sid 200 # dot1ah service 2 s-vlan vid 200 # dot1ah service 2 b-vlan vid 2000 # dot1ah service 2 b-da 0 00:11:11:00:00:00 multicast # ether 1 egress permission 25 # ether 1 dot1ah mode customer # ether 1 dot1ah customer service 0 2 # ether 1 dot1ah customer service-default discard # ether 25 vlan tag 2000 # ether 25 egress permission 1 # ether 25 dot1ah mode provider # ether 25 dot1ah provider service 0 2 178 IEEE802.1ah

SR-S V13 40.3 IEEE802.1ah L2 IEEE802.1ah LACP IEEE802.1ah A LACP 1 B-VLAN=300, I-SID=0x100 B-VLAN=300, I-SID=0x101 BCB B-VLAN=300, I-SID=0x102 2 B LACP MAC=00:11:11:00:00:00 ether1,2,3 ether25 MAC=00:22:22:00:00:00 ether1,2,3 ether25 LACP 1 1 ID IEEE802.1ah VLAN ID 0x8100 VLAN ID 0x88a8 1 ID 0x100 VLAN 300 2 ID 0x101 VLAN 300 3 ID 0x102 VLAN 300 1 ether1 1 LACP 5 ether2 2 LACP 5 ether3 3 LACP 5 ether25 1,2,3 MAC 00:11:11:00:00:00 179 IEEE802.1ah

SR-S V13 2 ether1 1 LACP 5 ether2 2 LACP 5 ether3 3 LACP 5 ether25 1,2,3 MAC 00:22:22:00:00:00 ether egress permission flooding ID flooding IEEE802.1ah flooding IEEE802.1ah LACP 1 IEEE802.1ah # dot1ah use on # dot1ah s-vlan tpid 8100 # dot1ah b-vlan tpid 88a8 # dot1ah b-sa 00:11:11:00:00:00 1 # dot1ah service 1 i-sid 100 # dot1ah service 1 b-vlan vid 300 # dot1ah service 1 b-da 0 00:22:22:00:00:00 unicast 2 # dot1ah service 2 i-sid 101 # dot1ah service 2 b-vlan vid 300 # dot1ah service 2 b-da 0 00:22:22:00:00:00 unicast 3 # dot1ah service 3 i-sid 102 # dot1ah service 3 b-vlan vid 300 # dot1ah service 3 b-da 0 00:22:22:00:00:00 unicast # ether 1 egress permission 25 # ether 1 dot1ah mode customer # ether 1 dot1ah customer service-default forward 1 # ether 2 egress permission 25 # ether 2 dot1ah mode customer 180 IEEE802.1ah

SR-S V13 # ether 2 dot1ah customer service-default forward 2 # ether 3 egress permission 25 # ether 3 dot1ah mode customer # ether 3 dot1ah customer service-default forward 3 LACP # ether 1 dot1ah l2tunnel lacp enable 5 # ether 2 dot1ah l2tunnel lacp enable 5 # ether 3 dot1ah l2tunnel lacp enable 5 # ether 25 vlan tag 300 # ether 25 egress permission 1-3 # ether 25 dot1ah mode provider # ether 25 dot1ah provider service 0 1 # ether 25 dot1ah provider service 1 2 # ether 25 dot1ah provider service 2 3 2 IEEE802.1ah # dot1ah use on # dot1ah s-vlan tpid 8100 # dot1ah b-vlan tpid 88a8 # dot1ah b-sa 00:22:22:00:00:00 1 # dot1ah service 1 i-sid 100 # dot1ah service 1 b-vlan vid 300 # dot1ah service 1 b-da 0 00:11:11:00:00:00 unicast 2 # dot1ah service 2 i-sid 101 # dot1ah service 2 b-vlan vid 300 # dot1ah service 2 b-da 0 00:11:11:00:00:00 unicast 3 # dot1ah service 3 i-sid 102 # dot1ah service 3 b-vlan vid 300 # dot1ah service 3 b-da 0 00:11:11:00:00:00 unicast # ether 1 egress permission 25 # ether 1 dot1ah mode customer # ether 1 dot1ah customer service-default forward 1 # ether 2 egress permission 25 # ether 2 dot1ah mode customer # ether 2 dot1ah customer service-default forward 2 # ether 3 egress permission 25 # ether 3 dot1ah mode customer # ether 3 dot1ah customer service-default forward 3 LACP # ether 1 dot1ah l2tunnel lacp enable 5 # ether 2 dot1ah l2tunnel lacp enable 5 # ether 3 dot1ah l2tunnel lacp enable 5 181 IEEE802.1ah

SR-S V13 # ether 25 vlan tag 300 # ether 25 egress permission 1-3 # ether 25 dot1ah mode provider # ether 25 dot1ah provider service 0 1 # ether 25 dot1ah provider service 1 2 # ether 25 dot1ah provider service 2 3 182 IEEE802.1ah

SR-S V13 41 L2 SR-S224CP1 L2 A 10.10.100.0/24 B 10.10.101.0/24 1 2 C 10.10.200.0/24 1 ETHER27 AES-CTR-128 IP A10.10.100.0/24 2 ETHER27 AES-CTR-128 IP A10.10.100.0/24 183 L2

SR-S V13 1 ACL # acl 100 ip 10.10.100.0/24 any any any # acl 101 ip any any any any # ether 27 macsec send encrypt aes-ctr-128 text ABCDEFGHIJKLMNOP # ether 27 macsec send auth aes-xcbc text ABCDEFGHIJKLMNOP ACL 100 # ether 27 macsec send classifier 0 encrypt 100 ACL 101 # ether 27 macsec send classifier 1 through 101 # ether 27 macsec receive encrypt aes-ctr-128 text 0123456789012345 # ether 27 macsec receive auth aes-xcbc text 0123456789012345 2 ACL # acl 100 ip any 10.10.100.0/24 any any # acl 101 ip any any any any # ether 27 macsec send encrypt aes-ctr-128 text 0123456789012345 # ether 27 macsec send auth aes-xcbc text 0123456789012345 ACL 100 # ether 27 macsec send classifier 0 encrypt 100 ACL 101 # ether 27 macsec send classifier 1 through 101 # ether 27 macsec receive encrypt aes-ctr-128 text ABCDEFGHIJKLMNOP # ether 27 macsec receive auth aes-xcbc text ABCDEFGHIJKLMNOP 184 L2

SR-S V13 42 LAN 42.1 LAN LAN LAN LAN1 MAC00:00:0e:f5:43:d1 LAN2 MAC00:00:0e:f5:43:d2 GroupA LAN1 GroupA/AP_A01 IP192.168.1.10 LAN2 GroupA/AP_A02 IP192.168.1.11 LAN BSSID00:90:cc:c8:d1:51 LAN IP192.168.1.20 PC IP192.168.1.21 LAN IP192.168.1.22 LAN 1 LAN LAN LAN LAN LAN SR-M20AP1 LAN nodemgr LAN 185 LAN

SR-S V13 LAN LAN 1 IP LAN 2 IP GroupA AP_A01 192.168.1.10 IDnodemgrnodemgr1 AP_A02 192.168.1.11 IDnodemgrnodemgr2 LAN LAN ieee80211 1ieee80211 2 Watcher IP 192.168.1.20 IDnodemgrnodemgr3 LAN MAC 00:90:cc:c8:d1:51 10 10 5 LAN 10 10 5 6 LAN 10 10 1 LAN 6 100 LAN RSSI RSSI 10 RSSI 20 186 LAN

SR-S V13 # nodemanager group 0 name GroupA LAN # nodemanager node 0 name AP_A01 # nodemanager node 0 group 0 # nodemanager node 0 address 192.168.1.10 # nodemanager node 0 user nodemgr nodemgr1 # nodemanager node 0 wlan scan disable # nodemanager node 1 name AP_A02 # nodemanager node 1 group 0 # nodemanager node 1 address 192.168.1.11 # nodemanager node 1 user nodemgr nodemgr2 # nodemanager node 1 wlan scan disable LAN # nodemanager node 4 name Watcher # nodemanager node 4 address 192.168.1.20 # nodemanager node 4 user nodemgr nodemgr3 # nodemanager node 4 wlan scan enable # nodemanager node 4 wlan sta disable LAN # nodemanager wlan scan unmanaged 0 UMAP01 00:90:cc:c8:d1:51 # nodemanager collect interval 10s 10s 5s LAN LAN # nodemanager icmpwatch interval 10s 10s 5s # nodemanager icmpwatch threshold 6 # nodemanager wlan scan interval 10s 10s 1m # nodemanager wlan scan error threshold 6 # nodemanager log 100 LAN RSSI # nodemanager wlan sta rssi 10 20 187 LAN

SR-S V13 42.2 LAN LAN LAN LAN 42.1 LAN P.18 5 - - LAN # show nodemanager logging wlan scan managed brief LAN LAN LAN # show nodemanager node node 0 # show nodemanager node node 1 LAN LAN # show nodemanager logging wlan scan managed group 0 LAN # show nodemanager logging wlan scan unmanaged LAN # show nodemanager logging wlan scan unknown # show nodemanager logging wlan scan 188 LAN

SR-S V13 42.3 LAN LAN LAN 42.1 LAN P.18 5 - - LAN # show nodemanager logging wlan sta rssi group 0 LAN # show nodemanager logging wlan sta group 0 LAN # show nodemanager logging wlan reject group 0 LAN # show nodemanager logging wlan trace group 0 # show nodemanager logging wlan scan 189 LAN

SR-S V13 42.4 LAN MAC MAC LAN LAN LAN MAC MAC MAC MAC LAN LAN 1MAC 00:00:0e:f5:43:d1 LAN 2MAC 00:00:0e:f5:43:d2 LAN MAC LAN 1 LAN 2 42.1 LAN P.18 5 MAC - - - - LAN MAC MAC # nodemanager wlan filterset 0 filter 0 mac 00:00:0e:f5:43:d1 pass # nodemanager wlan filterset 0 filter 0 description STATION_001 # nodemanager wlan filterset 0 filter 1 mac 00:00:0e:f5:43:d2 pass # nodemanager wlan filterset 0 filter 1 description STATION_002 # nodemanager wlan filterset 0 filter 2 mac any reject LAN MAC # nodemanagerctl update wlan filterset 0 group 0 190 LAN

SR-S V13 42.5 LAN LAN LAN LAN LAN RSSI 1. 60 2. RSSI 3. LAN 10 4. 90 5. 1. LAN AP LAN LAN - LAN - LAN APSCANONLY LAN LAN 1 LAN 2 LAN 1 LAN 2 LAN LAN 2 LAN 1 LAN RSSI 20 42.1 LAN P.18 5 - - - - 191 LAN

SR-S V13 # nodemanager node 0 wlan neighbor 1 4 # nodemanager node 1 wlan neighbor 0 4 RSSI # nodemanager wlan autotxpower rssi 20 # nodemanagerctl wlan autotxpower group 0 192 LAN

SR-S V13 42.6 LAN LAN LAN LAN LAN LAN LAN 5GHz w52/53/56 2.4GHz RSSI 20 2.4GHz 1 5 IEEE802.11n 40 42.1 LAN P.18 5 LAN - - - - 5GHz # nodemanager wlan autochannel channel w52/53/56 2.4GHz RSSI # nodemanager wlan autochannel rssi 20 2.4GHz # nodemanager wlan autochannel layout 1 5 IEEE802.11n # nodemanager wlan autochannel bandwidth 40 LAN # nodemanagerctl wlan autochannel group 0 193 LAN

SR-S V13 A L ACL...123, 133 ARP...56 AS...102 AS...102 B BSR...114 C C-TAG IEEE802.1ad...170 D DHCP...144 DHCP...144 DHCP...146 DHCP...40 DHCP...148 DNS...158 DNS...155 DNS...153 DNS...156 DSCP...123, 133 DSCP...133 E ECMP...142 ether L3...60 I IEEE802.1ad...168 IEEE802.1ah...173 IEEE802.1X...44 IGMP...42 IGMP...42 IPv6...67 IP...71, 123 IP...144 IP...123 IP...123 IP...124 L2... 183 L2 IEEE802.1ah... 179 LACP... 13 LAN... 65 LSA... 100 M MAC... 146 MAC... 52 MAC... 190 MAC... 16 MIB... 161 MSTP... 36 O OSPFv2... 88 OSPF IPv6... 106 OSPF... 100 P PIM-DM... 110 PIM-SM... 114 ProxyDNS... 153 Q QoS... 26 R RIP... 71, 79 RIP... 70 RIP... 70 RIP... 69 RP... 114 S SNMP... 161 SNMP... 161 SNTP... 66 SPT... 114 S-TAG IEEE802.1ah... 176 STP... 35 194

SR-S V13 T TIME...66 TOS...123, 133 U URL...159 V VLAN...9 VRRP...135 W Web...47...188...123, 133...71, 123...166 ID...88...100...135, 136...155...189...135, 139 ID...139...165...164...164...97...153 HUB... 9... 165 MAC... 25... 120... 97... 123... 123... 55... 123, 133... 59... 59 VLAN... 10... 191... 110... 153... 15... 135... 88, 100... 71... 72, 80... 142... 123, 133 VLAN... 11... 71, 79 VLAN... 9... 63 IEEE802.1ad... 168 195

SR-S V13 IEEE802.1ah...173...59...158...146...133...135...8...110...42, 114 LAN...185 LAN...193...71, 79...124...28...26...110...50...12...58...47 196

SR-S P3NK-3822-06Z0 2013 1