Cisco 4700 Series Application Control Engine Appliance Routing

158 Pages·2011·2.71 MB·English

Cisco 4700 Series Application Control
Engine Appliance Routing and Bridging
Configuration Guide

Software Versions A4(1.0) and A4(2.0)
February 2011
Americas Headquarters
Cisco Systems, Inc.
170 West Tasman Drive
San Jose, CA 95134-1706
USA
http://www.cisco.com
Tel: [phone]
800 553-NETS (6387)
Fax: [phone]
Text Part Number: OL-23546-01
THE SPECIFICATIONS AND INFORMATION REGARDING THE PRODUCTS IN THIS MANUAL ARE SUBJECT TO CHANGE WITHOUT
NOTICE. ALL STATEMENTS, INFORMATION, AND RECOMMENDATIONS IN THIS MANUAL ARE BELIEVED TO BE ACCURATE BUT
ARE PRESENTED WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED. USERS MUST TAKE FULL RESPONSIBILITY FOR
THEIR APPLICATION OF ANY PRODUCTS.
THE SOFTWARE LICENSE AND LIMITED WARRANTY FOR THE ACCOMPANYING PRODUCT ARE SET FORTH IN THE INFORMATION
PACKET THAT SHIPPED WITH THE PRODUCT AND ARE INCORPORATED HEREIN BY THIS REFERENCE. IF YOU ARE UNABLE TO
LOCATE THE SOFTWARE LICENSE OR LIMITED WARRANTY, CONTACT YOUR CISCO REPRESENTATIVE FOR A COPY.
The Cisco implementation of TCP header compression is an adaptation of a program developed by the University of California, Berkeley (UCB) as
part of UCB’s public domain version of the UNIX operating system. All rights reserved. Copyright © 1981, Regents of the University of California.
NOTWITHSTANDING ANY OTHER WARRANTY HEREIN, ALL DOCUMENT FILES AND SOFTWARE OF THESE SUPPLIERS ARE
PROVIDED “AS IS” WITH ALL FAULTS. CISCO AND THE ABOVE-NAMED SUPPLIERS DISCLAIM ALL WARRANTIES, EXPRESSED
OR IMPLIED, INCLUDING, WITHOUT LIMITATION, THOSE OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
NONINFRINGEMENT OR ARISING FROM A COURSE OF DEALING, USAGE, OR TRADE PRACTICE.
IN NO EVENT SHALL CISCO OR ITS SUPPLIERS BE LIABLE FOR ANY INDIRECT, SPECIAL, CONSEQUENTIAL, OR INCIDENTAL
DAMAGES, INCLUDING, WITHOUT LIMITATION, LOST PROFITS OR LOSS OR DAMAGE TO DATA ARISING OUT OF THE USE OR
INABILITY TO USE THIS MANUAL, EVEN IF CISCO OR ITS SUPPLIERS HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH
DAMAGES.
Cisco and the Cisco Logo are trademarks of Cisco Systems, Inc. and/or its affiliates in the U.S. and other countries. A listing of Cisco's trademarks
can be found at www.cisco.com/go/trademarks. Third party trademarks mentioned are the property of their respective owners. The use of the word
partner does not imply a partnership relationship between Cisco and any other company. (1005R)
Cisco 4700 Series Application Control Engine Appliance Routing and Bridging Configuration Guide
Copyright © 2011, Cisco Systems, Inc. All rights reserved.
C O N T E N T S
Preface ix
Audience x
How to Use This Guide x
Related Documentation xi
Symbols and Conventions xiv
Obtaining Documentation, Obtaining Support, and Security Guidelines xvi
CHAPTER 1 Configuring Ethernet Interfaces 1-1
Ethernet Interface Configuration Quick Start 1-2
Configuring a Layer 2 Ethernet Port 1-7
Adding a Description for an Ethernet Port 1-8
Configuring the Ethernet Interface Speed and Duplex Mode 1-9
Configuring the Ethernet Interface Speed 1-10
Setting the Interface Duplex Mode 1-10
Designating an Ethernet Port as an FT VLAN Port 1-11
Configuring a Delay at the Physical Port Level 1-12
Configuring an Ethernet Port in a Port-Channel Group 1-13
Enabling Quality of Service for a Port 1-14
Enabling or Disabling the Ethernet Interface 1-15
Configuring Layer 2 EtherChannels 1-15
Configuring a Port-Channel Interface 1-17
Adding a Description for a Port Channel 1-18
Designating a Port-Channel Interface as an FT VLAN Interface 1-18
Cisco 4700 Series Application Control Engine Appliance Routing and Bridging Configuration Guide
OL-23546-01 iii
Contents

Configuring Port-Channel Load Balancing 1-19
Enabling or Disabling a Port-Channel Interface 1-21
Example of a Port-Channel Configuration 1-21
ACE Configuration 1-21
Catalyst 6500 Series Switch Configuration 1-22
Configuring a VLAN Access Port 1-22
Configuring VLAN Trunks 1-23
Allocating an Ethernet Port or Port-Channel Interface to a VLAN Trunk 1-25
Completing the VLAN Trunking Configuration 1-27
Specifying the 802.1Q Native VLAN For a Trunk 1-27
Displaying Ethernet Interface Configuration, Status, and Statistics 1-28
Clearing Ethernet Interface Configuration Information 1-35
CHAPTER 2 Configuring VLAN Interfaces 2-1
VLAN Interface Configuration Quick Start 2-2
Allocating VLANs to a User Context 2-4
Configuring a Bank of MAC Addresses for Shared VLANs 2-5
Configuring VLAN Interfaces on the ACE 2-6
Assigning IP Addresses to Interfaces for Routing Traffic 2-8
Disabling and Enabling Traffic on Interfaces 2-11
Configuring the MTU for an Interface 2-12
Configuring a Peer IP Address 2-13
Configuring an Alias IP Address 2-14
Autogenerating a MAC Address for a VLAN Interface 2-15
Enabling the Mac-Sticky Feature 2-16
Providing an Interface Description 2-17
Configuring the UDP Booster Feature 2-18
Removing Trailing Byte from an Ethernet IP Packet 2-18
Assigning a Policy Map to an Interface 2-19
Cisco 4700 Series Application Control Engine Appliance Routing and Bridging Configuration Guide
iv OL-23546-01
Contents

Applying an Access List to an Interface 2-20
Displaying Interface Information 2-22
Displaying VLAN and BVI Information 2-22
Displaying VLAN and BVI Summary Statistics 2-24
Displaying the Internal Interface Manager Tables 2-25
Clearing Interface Statistics 2-26
CHAPTER 3 Configuring Routes on the ACE 3-1
Assigning an IP Address to Interfaces for a Routing Traffic 3-1
Configuring a Default or Static Route 3-2
Removing a Default or Static Route 3-4
Verifying Connectivity of a Remote Host or Server 3-4
Using Traceroute on the ACE-Configured IP Addresses 3-6
Displaying IP Route Information 3-7
Displaying FIB Table Information 3-11
CHAPTER 4 Bridging Traffic 4-1
Guidelines and Restrictions 4-1
Bridge Mode Configuration Quick Start 4-3
Configuring a Bridge-Group VLAN 4-5
Configuring a Bridge Group to the VLAN 4-5
Assigning an ACL to the Bridge-Group VLAN 4-6
Enabling the Interface 4-7
Configuring a Bridge-Group Virtual Interface 4-8
Creating a Virtual Routed Interface for a Bridge Group 4-8
Configuring a BVI IP Address 4-9
Configuring an Alias IP Address 4-11
Configuring a Peer IP Address 4-11
Cisco 4700 Series Application Control Engine Appliance Routing and Bridging Configuration Guide
OL-23546-01 v
Contents

Providing a BVI Description 4-13
Enabling a BVI 4-13
Displaying Bridge Group or BVI Information 4-14
Example of a Bridging Configuration 4-14
CHAPTER 5 Configuring ARP 5-1
Adding a Static ARP Entry 5-2
Enabling ARP Inspection 5-3
Configuring the ARP Retry Attempts 5-4
Configuring the ARP Retry Interval 5-5
Configuring the ARP Request Interval 5-5
Enabling the Learning of MAC Addresses 5-6
Enabling Source MAC Validation 5-7
Configuring the ARP Learned Interval 5-8
Disabling the Replication of ARP Entries 5-8
Specifying a Time Interval Between ARP Sync Messages 5-9
Configuring the Rate Limit for Gratuitous ARP Packets 5-9
Displaying ARP Information 5-10
Displaying IP Address-to-MAC Address Mapping 5-10
Displaying ARP Statistics 5-11
Displaying ARP Inspection Configuration 5-14
Displaying ARP Timeout Values 5-14
Clearing ARP Learned Entries from the ARP Table 5-15
Clearing ARP Statistics 5-16
CHAPTER 6 Configuring the DHCP Relay 6-1
DHCP Server and Client Overview 6-2
DHCP Relay Configuration Quick Start 6-2
Cisco 4700 Series Application Control Engine Appliance Routing and Bridging Configuration Guide
vi OL-23546-01
Contents

Configuring the DHCP Relay Agent 6-4
Enabling the DHCP Relay 6-4
Specifying the DHCP Server IP Address 6-5
Configuring a Relay Agent Information Reforwarding Policy 6-6
Viewing DHCP Relay Configuration and Statistics 6-6
APPENDIX A Addresses, Protocols, and Ports Reference A-1
IP Addresses and Subnet Masks A-1
Classes A-2
Private Networks A-2
Subnet Masks A-2
Determining the Subnet Mask A-4
Determining the Address to Use with the Subnet Mask A-4
Protocols and Applications A-6
TCP and UDP Ports A-7
ICMP Types A-11
INDEX
Cisco 4700 Series Application Control Engine Appliance Routing and Bridging Configuration Guide
OL-23546-01 vii
Contents

Cisco 4700 Series Application Control Engine Appliance Routing and Bridging Configuration Guide
viii OL-23546-01
Preface
This guide describes how to configure the routing and bridging features of the
Cisco 4700 Series Application Control Engine (ACE) appliance.
This guide describes how to perform the following ACE configuration tasks:
• Configuring Ethernet interface ports
(cid:129) Configuring VLANs
(cid:129) Configuring routing
(cid:129) Configuring bridging
(cid:129) Configuring Address Resolution Protocol (ARP)
(cid:129) Configuring Dynamic Host Configuration Protocol (DHCP)
You can configure the ACE by using the following interfaces:
(cid:129) The command-line interface (CLI), a line-oriented user interface that
provides commands for configuring, managing, and monitoring the ACE.
(cid:129) Device Manager graphic user interface (GUI), a Web browser-based GUI
interface that provides a graphical user interface for configuring, managing,
and monitoring the ACE.
This preface contains the following major sections:
(cid:129) Audience
(cid:129) How to Use This Guide
(cid:129) Related Documentation
(cid:129) Symbols and Conventions
(cid:129) Obtaining Documentation, Obtaining Support, and Security Guidelines
Cisco 4700 Series Application Control Engine Appliance Routing and Bridging Configuration Guide
OL-23546-01 ix
Preface

Audience
This guide is intended for the following trained and qualified service personnel
who are responsible for configuring the ACE:
(cid:129) Web master
(cid:129) System administrator
(cid:129) System operator
How to Use This Guide
This guide is organized as follows:
Chapter Description
Chapter 1, Configuring Describes how to configure the Ethernet ports on the
Ethernet Interfaces ACE.
Chapter 2, Describes how to configure VLANs on the ACE.
Configuring VLAN
Interfaces
Chapter 3, Describes how to configure default and static routes.
Configuring Routes on
the ACE
Chapter 4, Bridging Describes how to configure transparent (bridge) mode
Traffic and a bridge-group virtual interface.
Chapter 5, Describes how to configure Address Resolution
Configuring ARP Protocol (ARP) parameters and enable ARP
inspection.
Cisco 4700 Series Application Control Engine Appliance Routing and Bridging Configuration Guide
x OL-23546-01