Download Training 204

Document related concepts

Wake-on-LAN wikipedia , lookup

Deep packet inspection wikipedia , lookup

IEEE 802.1aq wikipedia , lookup

Zero-configuration networking wikipedia , lookup

Point-to-Point Protocol over Ethernet wikipedia , lookup

Network tap wikipedia , lookup

Multiprotocol Label Switching wikipedia , lookup

Serial port wikipedia , lookup

Parallel port wikipedia , lookup

Cracking of wireless networks wikipedia , lookup

Asynchronous Transfer Mode wikipedia , lookup

IEEE 1355 wikipedia , lookup

Packet switching wikipedia , lookup

Virtual LAN wikipedia , lookup

Transcript
Product Overview
PART IV
LANE Services (LSM)
PNNI, DHCP Relay,
Group Mobility, IP Multicast
Triggered IP & IPX
OmniChannel, Omni Switch/Router, Gigabit
ATM LANE Service Module (LSM)
LSM module

LANE services integrated on the Management
Processor Module (MPM)






LES-BUS
LECS
LECS Interface
ATM Manager
Connection Manager
NI Driver and BUS data forwarding engine
2
ATM LANE Service Module (LSM)
LES/BUS redundancy
Primary
LES/BUS
LECS_1
Redundancy VCC
LECS_1
LECS_2
LECS_2
ILMI MIB
Backup
LES/BUS
LEC
3
ATM LANE Service Module (LSM)
Design constraints
one LECS per OmniSwitch
each LES-BUS is associated with a single physical
ATM interface
 maximum of 128 parties on a p2mp connection
 maximum of 64 components per ATM physical port
 4MB of flash memory
 no broadcast control management like the MSS


4
ATM LANE Service Module (LSM)
VCC resources constraints


1024 active VCCs – limit of LECs joined
1024 p2mp connections – limit of LES-BUS instances
Guideline:


with ASM: maximum of 80 LECS, 4 ELANs
with ASM-2: maximum of 300 LECS, 10 ELANs
5
What Is PNNI?
A routing protocol





multilevel hierarchical routing model
topology distribution mechanism
generic CAC algorithm
support UNI 3.1 capabilities (ptp and ptmp)
enable scalability of hundreds / thousands of
switches
NNI signaling specification

network-to-network signaling based on UNI 3.1
6
PNNI
- orATM Network
ATM Network
 PNNI: private “network-network” or “networknode” interface
 Provides the ability to create a scaleable, fullfunction, dynamic, multi-vendor ATM network
7
DHCP relay
 The UDP Relay feature provides a mechanism for
forwarding UDP / IP broadcast packets between
VLANs
 Useful for DHCP in VLANs
Port Policies
Multicast Policies
MAC address Policies
Authenticated User Policies
IP Subnet Policies
DHCP Port Policies
IPX Subnet Policies
DHCP MAC Policies
Protocol Type Policies
8
DHCP relay with external router
BOOTP Relay
130.0.0.11
130.0.0.12
OmniSwitch
125.0.0.1
Port 1
125.0.0.3
Port 2
130.0.0.10
Group 1
130.0.0.13
DHCP Server
125.0.0.2
130.0.0.14
130.0.0.15
9
DHCP with internal router
BOOTP Relay
Router
125.0.0.21
125.0.0.1
130.0.0.21
Group 2
Group 3
130.0.0.13
DHCP Server
125.0.0.2
130.0.0.14
130.0.0.15
10
Group mobility details
 AutoTracker supports 96 Groups with 32
VLANs / group
 Group mobility adds a new capability to move
between groups, rather than only within
VLANs
 Groups are viewed as VLANs, so now we can
configure up to 500 VLANs (really groups) in
the OmniSwitch


if there are no users active on the VLAN group then
the group is inactive
when a user attaches and matches the policies, the
group becomes active
11
Group mobility details
Group mobility also provides dynamic autoactivation of LAN Emulation clients




saves switch resources
saves network resources
scalable for large networks
a group can have an elan name attribute associated
with it, so when a group becomes active the
associated LEC attaches to the ELAN
12
How does this all work?
The default group (Group #1) is used as a
holding group for all ports participating in group
mobility
AutoTracker rules operates the same; just use a
group other than default Group #1 for AutoTracker if
you are also using group mobility
 all ports on the default group are candidates to move
to one of the configured mobile groups
 groups now have a new group mobility flag
 if this flag is set the group is participating in group
mobility and policies are applied at the group level

13
Group mobility
When a new user comes on-line,
AutoTracker observes his traffic and
applies it to policies of defined
groups.
OmniSwitch
AutoTracker
ELAN
ELAN
ELAN
ELAN
ELAN
ELAN
LANE 1.0
Backbone
14
Group mobility
OmniSwitch
AutoTracker
The required Group
is created.
ELAN
ELAN
ELAN
ELAN
ELAN
ELAN
LANE 1.0
Backbone
15
Group mobility
OmniSwitch
The switch then joins
AutoTracker the ELAN mapped to
that Group.
ELAN
ELAN
ELAN
ELAN
ELAN
ELAN
LANE 1.0
Backbone
16
Group mobility
Traffic matching on
another Group is
OmniSwitchobserved.
AutoTracker
ELAN
ELAN
ELAN
ELAN
ELAN
ELAN
LANE 1.0
Backbone
17
Group mobility
The required ELAN
OmniSwitchis joined.
AutoTracker
ELAN
ELAN
ELAN
ELAN
ELAN
ELAN
LANE 1.0
Backbone
18
Group mobility
Group Mobility works with
shared media hubs since
AutoTracker provides
OmniSwitch
Group mapping for both
Ports and MACs.
AutoTracker
HUB
ELAN
ELAN
ELAN
ELAN
ELAN
ELAN
LANE 1.0
Backbone
19
Group mobility
AutoTracker rules without group mobility;
restricts any port to join only one of 32 VLANS
without port reassignments


group mobility expands that to 500 VLANs (groups)
a user can belong to any of 500 groups, and can
belong to multiple groups at the same time
Group mobility allows users with multiple stacks
to join multiple groups using the same
AutoTracker policies


the first policy match becomes the spanning tree
master
additional policy matches do not generate BPDUs
20
Group mobility example
Server
8 OC-12
16 LEC / interface
128 Subnets
ATM SWITCH
4 OC-3
64 LECS
4 OC-3
64 LECS
A user can join any of 64 subnets dynamically
21
IP Multicast Routing
&
IP Multicast Switching
(IPMS)
What is multicast traffic?
 Similar to broadcast traffic
 It’s like selective broadcast
 Only those that request the traffic get it
 Allows a one to many communication rather
than one to one
23
Multicast versus unicast


unicast sends one packet per destination
multicast sends one packet for many destinations
Unicast
Multicast
24
Why is multicast so great?
It conserves bandwidth
Uses for multicast:







resource discovery (OSPF, RIP2, Bootp)
multipoint file transfer (Starburst Com.)
conferencing: many to many (CuSeeMe)
video netcasting (Precept Software IPTV)
redundant systems (parallel databases)
battlefield simulations (parallel processing)
information distribution in data warehousing
25
What is multicast routing?
Details:
multicast router knows who wants traffic
finds out who is sending the traffic
 delivers traffic only to those who want it
 routers communicate with each other and users to
gather the information
 once information is shared, the traffic is sent where it
needs to go


26
Protocols implemented
Most commonly used protocols:

IGMP (Internet Group Management Protocol)


RFC 1112 (V2 described in draft)
DVMRP (Distance Vector Multicast Routing Protocol)


RFC 1075 (v3 described in draft)
used between routers to exchange multicast route
information
Internet’s MBONE built using these protocols
27
DVMRP routing tree
Group 1 Source
Group 1 membership
Group 1 membership
28
DVMRP tree after pruning
Group 1 Source
Group 1 membership
Group 1 membership
29
Why is IPMS so much better?
IPMS (IP Multicast
Switching):
intercepts IGMP
packets to track
membership by SVPN
(source virtual port
number), rather than
by network
 client application
requests membership
in a multicast group;
only those members
will receive the
multicast traffic

 Traffic is controlled by
port rather than by
network
 Performance significantly
improved because
forwarding decision is
made by network interface
 All port forwarding lists
are established
dynamically; no
configuration required
 Co-exists with existing
multicast VLANs
30
IP / IPX Filtering
Triggered IPX support
RFC 2091:




only changed info, rather than all info, is sent
receiver is able to apply changes immediately
reduced routing traffic and uses less memory
no periodic broadcasts of “redundant” information
32
IP RIP filters
RIP input filters

control which networks are allowed into the routing
table when IP RIPs are received
RIP output filters

control the list of networks included in routing
updates sent out an interface; this controls which
networks the router advertises in its IP RIP updates
33
IPX Watchdog spoofing
Why?

to prevent IPX Watchdog packets from initiating
connections on dial-on-demand links when no other
data is being sent
This feature will allow the Xylan router to
respond to a server’s Watchdog requests on
behalf of a remote client.

the Watchdog query packet will never cross the WAN
link if IPX Watchdog spoofing is enabled
34
NetWare Serialization packet filters
NetWare Serialization packet filtering:


If serialization packet filtering is enabled on a WAN
interface, when the router receives a serialization
packet, it will drop the packet instead of activating a
dial-up link
NetWare Serialization packets will never cross a WAN
link which has filtering enabled
There is one drawback:

this can allow users to bypass Novell’s licensing
scheme
35
OmniChannel
OmniChannel features and benefits
 Aggregation of
bandwidth


OmniChannel allows
up to 4 switch ports to
be aggregated together
as one high-speed pipe
 Existing technology

 Load balancing
uses the same existing
networking
technologies available
today, such as Fast
Ethernet
evenly distributes
network data between
all of the aggregated
links
 Scalability

OmniChannel
backbones easily scale
from 100 Mbps to 800
Mbps
37
OmniChannel
38
OmniChannel
How OmniChannel works

OmniChannel supports
load balancing,
flooding, spanning tree
BPDUs, and a failed
link
Load balancing

incoming packets are
assigned in a roundrobin fashion to one
OmniChannel link,
offering even
distribution of the
traffic over each link
One high-speed pipe

a group of
OmniChannel links
behaves exactly as a
single high-speed link
Resiliency

sub-second recovery
in the event of a link
failure
39
OmniChannel
High-speed backbone/server solution

The following application uses two 400 Mbps
OmniChannel links into a centralized OmniSwitch;
the central OmniSwitch then connects to a Sun
server at 800 Mbps
40
OmniChannel
Resilient backbone solutions

this application uses multiple paths from Switch A to
Switch B for a total of 800 Mbps; an alternate path is
used for two of the backbone links to protect the
backbone from a single catastrophic event, such as a
backhoe break, from bringing down the backbone
between Switches A and B
41
Omni Switch/Router
OmniS/R is a powerful Gigabit switch
 22 Gbps switching
fabric
 12 Mpps layer-three
switching
 Up to 19 RISC
processors
 Up to 61 Xylandesigned switching
ASICs
 Up to 32 Gigabit
Ethernet ports
TR
256
10/100
256
64
FR
32
GE
16
ATM
8
P-o-SONET
1
10
100
1000
Maximum port density
43
OmniS/R architecture
OmniS/R system capacity:
switching capacity: 22
Gbps
 sustained: 11.5 Gbps

OmniS/R distributed
layer-three switching

12 million pps
Hardware
Rtg. Engine
Hardware
Rtg. Engine
OC-12 SAR
10/100 Ethernet
Switching Module
Gigabit Ethernet
Switching Module
ATM Uplink
Module
Firewall
LEC(s)
Mgmt. Processor
22 Gbps Frame Fabric
44
Omni Switch/Router features
 Non-blocking frame fabric
 On-board switching
 Full duplex
 Extended burst capacity
 Standards-compliant flow control
 High-performance routing
 Complete network management
45
OmniS/R layer-three switching
HRE-X:

fully distributed, multi-protocol layer-three
switching ASIC


IP and IPX
RIP, RIP II, OSPF,
IP Multicast,
DCHP relay

12 Mpps / switch

one HRE-X per blade

ISP-class table size


256,000 route entries
64,000 next-hop destinations
46
MPX: Management Processor Module
Management Processor Module for OmniS/R
(MPX)

contains a slot for 1 high-speed uplink port, an outof-band Ethernet port, and the standard front-panel
DB-9 console and modem ports.


8MB of Flash, and 16MB RAM standard
Supports both OmniS/R and VBUS
47
ESX modules for OmniS/R
Ethernet and Fast Ethernet OmniS/R modules

ESX-100C-12W


ESX-100C-12W-L3


8-port multimode fiber 100BaseFX switching module with
HRE-X
ESX-100FS-8W


8-port multimode fiber 100BaseFX switching module
ESX-100FM-8W-L3


12-port 10/100BaseTX switching module with HRE-X
ESX-100FM-8W


12-port 10/100BaseTX switching module
8-port single mode fiber 100BaseFX switching module
ESX-100FS-8W-L3

8-port single mode fiber 100BaseFX switching module with
HRE-X
48
High density ESX modules for OmniS/R
Ethernet and Fast Ethernet OmniS/R modules

ESX-100C-32W


32-port 10/100BaseTX switching module, 1K CAM
ESX-100C-32W-L3

32-port 10/100BaseTX switching module with HRE-X
Features:


More than 250 switched 10/100 Ethernet ports in a
single Omni-9 chassis
IEEE 802.1x Flow Control provides backoff message
to sending stations, preventing overflow of input data
ports.
49
Gigabit Ethernet Modules for OmniS/R

GSX-FM-2W or 4W


GSX-FM-2W-L3 or 4W-L3


2-port or 4 port 1000BaseSX Gigabit switching module with
HRE-X
GSX-FS-2W or 4W


2-port or 4 port 1000BaseSX Gigabit switching module
2-port or 4 port 1000BaseLX Gigabit switching module
GSX-FS-2W-L3 or 4W-L3

2-port or 4 port 1000BaseLX Gigabit switching module with
HRE-X
50
Token Ring Switching Modules for OmniS/R

TSX-CD-16W-4C


TSX-CD-16W-4C-L3


32 port Token Ring Switching Module, UTP/STP w/ HRE-X
TSX-F-8W-4C


32 port Token Ring Switching Module, UTP/STP
TSX-CD-32W-4C-L3


16 port Token Ring Switching Module, UTP/STP w/ HRE-X
TSX-CD-32W-4C


16 port Token Ring Switching Module, UTP/STP
8 port Token Ring Switching Module, fiber
TSX-F-8W-4C-L3

8 port Token Ring Switching Module, fiber w/ HRE-X
51
Wide Area Switching Modules for OmniS/R

WSX-S-2W-4C


WSX-S-2W-4C-L3


4 port WAN Switching Module with HRE-X; serial ports
WSX-S-8W-4C


4 port WAN Switching Module; serial ports
WSX-S-4W-4C-L3


2 port WAN Switching Module with HRE-X; serial ports
WSX-S-4W-4C


2 port WAN Switching Module; serial ports
8 port WAN Switching Module; serial ports
WSX-S-8W-4C-L3

8 port WAN Switching Module with HRE-X; serial ports
52
Wide Area Switching Modules for OmniS/R

WSX-BRI-SC-1W [2W]-4C


WSX-BRI-SC-1W [2W]-4C-L3


1 or 2 serial port BRI WAN Switching module supports PPP
or Frame Relay; with HRE-X
WSX-FE1-SC-1W [2W]-4C


1 or 2 serial port BRI WAN Switching module supports PPP
or Frame Relay
1 or 2 serial ports, 1 or 2 FE1 ports with integral CSU. Both
support PPP or Frame Relay, Fractional E1, supports single
Nx64K cluster and FDL protocol
WSX-FE1-SC-1W [2W]-4C-L3

1 or 2 serial ports, 1 or 2 FE1 ports with integral CSU. Both
support PPP or Frame Relay, Fractional E1, supports single
Nx64K cluster and FDL protocol, with HRE-X
53
Wide Area Switching Modules for OmniS/R

WSX-FT1-SC-1W [2W]-4C


1 or 2 serial ports, 1 or 2 FE1 ports with integral CSU. Both
support PPP or Frame Relay, Fractional T1, supports single
Nx64K cluster and FDL protocol
WSX-FT1-SC-1W [2W]-4C-L3

1 or 2 serial ports, 1 or 2 FE1 ports with integral CSU. Both
support PPP or Frame Relay, Fractional T1, supports single
Nx64K cluster and FDL protocol, with HRE-X
54
Gigabit Ethernet
Direction for
OmniStack and
VBUS
Gigabit Ethernet
Xylan’s Gigabit Ethernet family is divided into
three different product groups:



Gigabit uplink sub-modules
Gigabit switch access modules
high-speed Gigabit switching modules
1000Base-SX and 1000Base-LX for multimode
and single mode fiber
56
Gigabit Ethernet for OmniStack
OSGSM-FM-2

2-port Gigabit Ethernet sub-module for the OmniStack 2000,
3000, and 5000 families; (1000Base-SX) SC multimode (850nm)
fiber for short haul
OSGSM-FS-2

2-port Gigabit Ethernet sub-module for the OmniStack 2000,
3000, and 5000 families; (1000Base-LX) single mode (1330nm)
fiber for long distance
57
Gigabit backbone solution
58
Gigabit Ethernet application
59