Professional Documents
Culture Documents
IP6510 v8 M
IP6510 v8 M
Router/Bridge
USER'S MANUAL
ii
TABLE OF CONTENTS
1 PRODUCT DESCRIPTION ...................................................................................................................... 1
1.1 DESCRIPTION ..................................................................................................................................... 1
1.2 APPLICATIONS ........................................................................................................................................... 2
1.3 SPECIFICATIONS ........................................................................................................................................ 3
2 INSTALLATION ........................................................................................................................................ 6
2.1 SITE SELECTION ................................................................................................................................. 6
2.2 MECHANICAL INSTALLATION ................................................................................................................ 6
2.2.1 Power ........................................................................................................................................... 7
2.2.2 E1/ T1/Ethernet Card Description ................................................................................................ 7
2.2.2.1 Jumper Settings ....................................................................................................................... 8
2.2.2.2 E1/T1 pin assignment .............................................................................................................. 9
2.3 FRONT PANEL CONSOLE PORT AND LEDS ........................................................................................ 10
2.3.1 Console Port .............................................................................................................................. 10
2.4 LED OPERATION .............................................................................................................................. 10
2.5 ETHERNET CONNECTION................................................................................................................... 11
3 OPERATION ........................................................................................................................................... 12
3.1 POWER ON ...................................................................................................................................... 12
3.2 USING A VT-100 TERMINAL .............................................................................................................. 12
3.2.1 VT-100 Monitor Serial Port Setup .............................................................................................. 12
3.3 LOGIN, SET TIME AND DATE AND LOGOUT ......................................................................................... 13
3.3.1 Overview .................................................................................................................................... 13
3.3.2 Login .......................................................................................................................................... 13
3.3.3 Password ................................................................................................................................... 14
3.3.4 Show System Date/Time and Change It .................................................................................... 14
3.3.5 Logout ........................................................................................................................................ 14
3.4 Interface Naming Rule ............................................................................................................... 14
3.5 Assigning Timeslots To A WAN Port ......................................................................................... 15
3.6 CONFIGURATION............................................................................................................................... 15
3.7 REMOTE MANAGEMENT .................................................................................................................... 15
3.7.1 SNMP ......................................................................................................................................... 15
3.7.2 SSH ............................................................................................................................................ 16
3.8 VERIFYING LOOP-IP6510 OPERATIONS ............................................................................................. 16
3.8.1 Independent Test ....................................................................................................................... 16
3.8.2 Substitution ................................................................................................................................ 17
3.8.3 Using the Bert Test Set .............................................................................................................. 17
4 REMOTE BRIDGE SETUP OVERVIEW ................................................................................................ 18
4.1 OVERVIEW ....................................................................................................................................... 18
4.2 STEP BY STEP SETUP INSTRUCTIONS ................................................................................................ 19
5 PPP/MLPPP............................................................................................................................................ 20
5.1 OVERVIEW ....................................................................................................................................... 20
5.2 STEP BY STEP SETUP INSTRUCTIONS ................................................................................................ 20
6 VLAN....................................................................................................................................................... 22
6.1 OVERVIEW ....................................................................................................................................... 22
6.2 EXAMPLE SETUP .............................................................................................................................. 22
6.2.1 Application #1 (Fig. 6-1) Step by Step Setup Instructions .......................................................... 22
6.2.2 Application #2 (Fig. 6-2) Step by Step Setup Instructions .......................................................... 24
6.3 VLAN AND PORT TABLES ................................................................................................................. 26
6.3.1 VLAN Table ................................................................................................................................ 26
6.3.2 VLAN Port Table ........................................................................................................................ 27
7 VLAN STACKING (Q-IN-Q) SETUP....................................................................................................... 27
7.1 OVERVIEW ....................................................................................................................................... 27
iii
7.2 VLAN STACKING .............................................................................................................................. 28
7.3 DEFINITIONS..................................................................................................................................... 29
7.4 SETUP EXAMPLE .............................................................................................................................. 29
8 FRAME RELAY SETUP ......................................................................................................................... 31
8.1 OVERVIEW ....................................................................................................................................... 31
8.2 STEP BY STEP SETUP INSTRUCTIONS ................................................................................................ 32
9 NAT / NAPT ............................................................................................................................................ 33
9.1 OVERVIEW ....................................................................................................................................... 33
9.2 EXAMPLE AND SETUP INSTRUCTIONS ................................................................................................. 33
9.3 PORT FORWARDING EXAMPLE AND INSTRUCTIONS ............................................................................. 35
10 STP/RSTP SETUP ................................................................................................................................. 36
10.1 OVERVIEW ....................................................................................................................................... 36
10.2 STEP BY STEP SETUP INSTRUCTIONS ................................................................................................ 39
11 QOS (QUALITY OF SERVICE) .............................................................................................................. 41
11.1 OVERVIEW ....................................................................................................................................... 41
11.2 POLICY SYNTAX................................................................................................................................ 41
10.2.1 Policy add .............................................................................................................................. 41
10.2.2 Policy delete........................................................................................................................... 42
10.2.3 Policy display ......................................................................................................................... 42
11.3 STEP BY STEP SETUP INSTRUCTIONS ................................................................................................ 43
12 OSPF SETUP ......................................................................................................................................... 45
12.1 OVERVIEW ....................................................................................................................................... 45
12.2 STEP BY STEP SETUP INSTRUCTIONS ................................................................................................ 46
13 DHCP SETUP ......................................................................................................................................... 47
13.1 DHCP SERVER OVERVIEW ............................................................................................................... 47
13.2 DHCP SERVER SETUP ..................................................................................................................... 48
13.3 DHCP RELAY OVERVIEW ................................................................................................................. 49
13.4 DHCP RELAY SETUP....................................................................................................................... 49
14 FIRMWARE/CONFIG UPLOAD AND DOWNLOAD WITH TFTP ......................................................... 50
14.1 OVERVIEW ....................................................................................................................................... 50
14.2 SETTING UP A TFTP SERVER ........................................................................................................... 50
14.3 STEP BY STEP SETUP INSTRUCTIONS ................................................................................................ 51
14.3.1 Configuration Upload ............................................................................................................. 51
14.3.2 Configuration Download ........................................................................................................ 51
14.3.3 Firmware Download ............................................................................................................... 51
15 OPERATION COMMANDS .................................................................................................................... 52
15.1 PING COMMAND ............................................................................................................................... 52
15.2 TRACEROUTE COMMAND .................................................................................................................. 52
15.3 BRIDGE COMMAND ........................................................................................................................... 52
15.4 DHCP COMMANDS ........................................................................................................................... 56
15.5 INTERFACE COMMANDS .................................................................................................................... 61
15.6 LOGIN COMMANDS............................................................................................................................ 68
15.7 POLICY COMMANDS .......................................................................................................................... 68
15.8 ROUTE COMMANDS .......................................................................................................................... 70
15.9 SHOW COMMANDS ........................................................................................................................... 71
15.10 SYSTEM COMMANDS......................................................................................................................... 76
15.11 MLPPP COMMANDS ......................................................................................................................... 79
16 GLOSSARY ............................................................................................................................................ 80
iv
LIST OF FIGURES
LIST OF TABLES
Table 2- 1 Power Connector ----------------------------------------------------------------------------------- 7
Table 2- 2 Jumper Setting for E1/T1 Card ----------------------------------------------------------------- 8
Table 2- 3 E1/T1 pin definition -------------------------------------------------------------------------------- 9
Table 2- 4 Ethernet Ports Pin Definition -------------------------------------------------------------------- 9
Table 2- 5 Console Port Pin Assignment ------------------------------------------------------------------ 10
Table 2- 6 Front Panel LED Indication --------------------------------------------------------------------- 10
Table 2- 7 Ethernet Plug-in Card LED Indication -------------------------------------------------------- 11
Table 2- 8 T1/E1 Plug-in Card LED Indication ----------------------------------------------------------- 11
Table 2- 9 RJ45 10/100M Ethernet Connector Pin Assignment ------------------------------------- 11
v
D Bitte führen Sie das Gerät am Ende seinerLewbensdauer den zue Verfügung
stehended Rückgabeund Sammelsystemen zu.
GB At the end of the product's useful life, please dispose of it at appropriate collection
points provided in your country
F Une fois le produit en fin devie, veuillez le déposer dans un point de recyclage
approprié.
ES Para preservar el medio ambiente, al final dela vida útil de su producto, depositelo
en los laguares destinado aello de acuerdo con la legislación vigente.
P No final de vida útil do producto, por favor coloque no ponto de recolha apropriado.
I Onde tutelare l'ambiente, non buttate l'apparecchio trai i normali rifiuti al termine
della sua vita utile, ma portatelo presso i punti do taccolta specifici per questi rifiuti
previsti dalla normativa vigente.
NL Wij raden u aan het apparant aan het einde van zijn nuttige levensduur, niet bij hey
gewone huisafval te deponeren, maar op de dearvoor bestemde adressen.
PL Gdy produkt nie nadaje sie juz do dalszego uzytku, nalezy zostawic go w jednym ze
specjalnych punktów zajmujacych sie zbiórka zuzytych producktów w wybranych
miejscach na terenie kraju.
SLO Ko se izdelku izteče življenska doba, ga odnesite na ustrezno zbirno mesto oziroma
ga odvrzite v skladu z veljavnimi predpisi.
PRC 當產品使用壽命結束,請在你的國家所提供的適當地點做好回收處理
1 Product Description IP6510 Multiple WAN Router /Bridge
1 Product Description
1.1 Description
The Loop-IP6510 Router/Bridge provides remote bridge connectivity from 4 Ethernet ports to 2 fixed WAN
ports and also to 2 optional WAN slots. Whereas the 2 fixed WAN ports are always Ethernet, choices are
available for the 2 optional WAN slots. Each of the 2 optional slots can accept one of 4 choices of plug-in
cards, which are (a) a card with dual T1 port, (b) a card with dual E1 port, (c) a card with one 10/100 BaseT
fast Ethernet port and (d) a card with one SFP (mini-GBIC) housing for 100M-FX fast Ethernet port.
Using the optional dual E1/T1 card option, up to 4 E1/T1 lines can be used for WAN connectivity, either
separately, or in a single bundle.
All Ethernet, WAN and LAN ports have speed auto-sensing, half/full duplex auto-negotiation, and auto
MDI/MDI-X crossover features. In addition all serial (E1/T1) WAN interfaces support PPP, MLPPP, Frame
Relay, Cisco compatible HDLC and HDLC protocols.
The Loop-IP6510 Router/Bridge supports DB9S console port, which allows users to execute in-service
diagnostics and fault isolation from a local terminal. It also allows user to remote manage via Telnet, SSH
and SNMP through Ethernet or WAN ports. Multicolor LED indicators and ACO (Alarm Cut-Off) button are
provided on the front panel.
1.2 Applications
E1/T1
LAN LAN
Network
IP6510 IP6510
E1/T1
IP6510 IP6510
Backup
Network
DSL DSL
Ethernet Ethernet
E1/T1
Network
IP6510 IP6510
1.3 Specifications
Ethernet WAN Interface
Two built-in 10/100BaseT Ethernet ports (WAN1 and WAN2)
Speed auto-sensing
Half/full duplex auto-negotiation
Auto MDI/MDI-X crossover
E1 Line Interface
Line Rate 2.048M bps 50 ppm
Line Code HDB3
Output Signal ITU G.703
Connector RJ48C
Loopbacks Line Loopback, Payload Loopback
Test Pattern 20-bit QRSS, 3-in-24, 1-in-8, 2-in-8, 1:1
T1 Line Interface
Line Rate 1.544 Mbps 50 bps
Line Code AMI or B8ZS
Output Signal DS1
Connector RJ48C
Loopbacks Line Loopback, Payload Loopback
Test Pattern 20-bit QRSS, 3-in-24, 1-in-8, 2-in-8, 1:1
LAN Interface
4 10/100BaseT interfaces
Speed auto-sensing
Half/full duplex auto-negotiation
Auto MDI/MDI-X crossover
Management
SNMP v1, v2c
Telnet
SSH
Bridge
STP, RSTP
802.1q supported
Cisco ISL packet transparent
VLAN packet transparent
User configurable aging time
Up to 16K MAC table
Padding/un-padding Ethernet FCS
Support IEEE 802.1ad Q-in-Q
Router
Routing protocol: RIP-I, RIP-II, OSPF
Static route
Address Translation
NAT/NAPT
Static address table for NAT
Port forwarding table for NAPT (Virtual Service)
Supports port range from 1 to 65535
DHCP
DHCP server support for LAN users (RFC2131, RFC2132)
BOOTP compatible
DHCP relay
QoS
QoS based on rate limit
Classification based on
Outbound direction
Source/destination IP addresses
DSCP
Protocol types
Port number range
Electrical
Power Source (AC) 100 to 240 Vac, 0.8A
Power Source (DC) -36 to -72 Vdc, 1.2A
Power Consumption < 20 W
Standards Compliance
IEEE 802.1d bridge, 802.1w RSTP, 802.1q VLAN, 802.1ad Q-in-Q
IETF RIP1 (RFC1058), RIP2 (RFC1389)
ITU G.703, G.704, G.823
Compliance
EMC/EMI FCC15 Class A, EN55022, EN55024
Safety UL60950, IEC60950-1 (CB)
Network FCC68, CS-03
Note: Non-Loop SFP modules are not guaranteed to work with our equipments. It is strongly recommended to buy
Loop-logo SFP modules.
2 Installation
2.1 Site Selection
The following list shows site selection guidelines. Follow this list to select a proper installation site.
1. Location of the Loop-IP6510 unit should be part of the central office equipment layout design.
Consideration should be given to entrance cable routing.
2. The installation site should provide proper room for adequate ventilation and cable routing. Reserve at
least 0.5 m at the rear of the unit for human access, cables, and air flow.
3. The site should provide a stable environment. The operating area should be clean and free from
extremes of temperature, humidity, shock, and vibration.
4. Relative humidity should stay between 0 and 95%.
CAUTION:
Never install communications wiring during a lightning storm.
Never install communication jacks in wet locations unless the jack is specifically
designed for wet locations.
Never touch un-insulated communication wires or terminals unless the line has
been disconnected at the network interface.
Use caution when installing or modifying communication lines.
2.2.1 Power
The power connection on your unit will be AC 100-240Vac (0.8A) and DC -36 to -72Vdc (1.2A). AC and DC
power are supported simultaneously on the IP6510.
Before attaching any power supply, check the label on the Loop-IP6510 unit to ensure that you connect the
unit to the correct power source. The unit’s power switch should be in the OFF position while you connect the
power source.
Slot A Slot B
J1 1,2 -
JP1 - 2,3
JP10 - 2,3
J1
Main Board
JP1 JP10
J1
Main Board
JP1 JP10
NOTE: CLI commands for T1 such as interface intf t1 code are only available at the command line if the
card is in T1 mode. The same for E1 commands.
1 Ring In
2 Tip In
3 Unassigned
4 Ring Out
5 Tip Out
6 Unassigned
7 Shield Ground
8 Shield Ground
Ground
Screw
USB Port*
AC
Power ACO WAN Console
DC LAN 1- 4
Power WAN1-2 Backup* Port
LEDs
* Future option
Off No alarm
Red At least one alarm is active
ALM
Green N/A
Amber N/A
Off No plug-in card detected
A Green Layer two protocol is active in both slots
Red At least one alarm state is alert
Off No plug-in card detected
B Green Layer two protocol is active in both slots
Red At least one alarm state is alert
Note: Under normal status, the LED indication order for ACT and ALM will be Green to Amber. When the
LED is flashing, keep pressing the ACO button will set the machine to default.
3 Operation
This chapter describes the Loop-IP6510 router configuration options and operational functions. Refer to
subsequent chapters for detailed instructions regarding specific applications.
3.1 Power On
After following the installation instructions in Chapter 2, power up the unit. It will go through a self-test
procedure.
Note: Many newer PCs use USB Ports. If your computer has a USB port rather than COM ports you will
need to purchase a commercially available PC USB to DB9 conversion cable. These cables come
with software which, when loaded in a PC, will allow you to send keyboard commands through the
PC’s USB Port to the DB9 Console Port of the Loop-IP6510.
IP6510
VT-100 Monitor
Open your VT-100 emulator program. Left-click your mouse on Setup. A drop-down menu will appear. Left
click your mouse on Serial port Setup.
Set COM Port to the COM Port you are connected to on your VT-100 monitor. Then select your other
settings from Table 3-1 below.
Table 3- 1 Console Port Default Setting
Item Options Default
Baud 38400, 19200, 9600, 2400, 1200 9600
Data Bit 8, 7 bit per byte 8
Stop Bit 2, 1 bit 1
Parity Bit NONE, EVEN, ODD NONE
After selecting your settings left-click your mouse on OK. The setup screen will disappear.
To save your setup, left-click Save setup with your mouse, as shown in the screen below.
You can save the setup in any directory you choose. For the sake of convenience we saved our setup in the
Loopterm file on our desktop.
The IP6510 CLI provides for two levels of users: operator and admin. The operator is allowed to inspect
current system configuration and operation status only. The admin is allowed to change system settings. The
IP6510 disables password checking for operator and admin by default.
3.3.2 Login
The user uses login admin to login as an admin user. A command example is shown below. This example
assumes that the password check for admin is disabled, so when the system prompts for a password just
press ENTER (ie. ignore the password). The command logout logs the user off of the system.
>login admin
Password:
Welcome!!
Press '?' to get help!
admin>
3.3.3 Password
The user uses the command system account password to change the password. The system prompts for
the old password. Type in the old password and press ENTER. The system prompts for the new password.
Enter the new password and press ENTER to reconfirm the new password. Press ENTER and the password
is changed.
>login admin
Password:
Welcome!!
Press '?' to get help!
3.3.5 Logout
Type in the command logout and press ENTER.
admin>logout
Bye bye!
192.168.1.254/24
LAN1
PC
IP6510
LAN
3.7.2 SSH
SSH provides authentication and a secure remote management channel which is more secure than
traditional Telnet. Before activating the SSH service, the user should generate RSA and DSA key pairs to do
authentication for the future connection. Following example shows how to activate the SSH service on
IP6510. Once the SSH service is activated, the user can use a SSH client (ex. A free PUTTY) to connect to
the IP6510. Once the user is connected to IP6510 by using SSH, the user can get the same CLI command
interface as connected to console port.
LAN/WAN
100.1.1.1
100.1.1.2 IP6510
Especially during initial installation, excessive errors may be due to (a) incorrect configuration of either Loop-
IP6510 or of the equipment at the other end of the line, or (b) due to faulty line installation, which results in
excessive noise, cross talk, or impedance mismatch. Especially in electrically noisy environments, such as
central offices, use of shielded cables are mandatory.
3.8.2 Substitution
If a spare Loop-IP6510 plug-in is available, then replace the working one with the spare. The user must
carefully configure the spare exactly as the working one. If the substitution clears the problem, then the
original working one is suspect. Note that this is not definitive as other reasons may cause the same
symptom. A good practice is to reconfigure the original one and swap once more.
If both units behave the same, then the problem is probably elsewhere.
With a BERT, each of the ports of the Loop-IP6510 can be tested individually. The user must configure the
BERT in the exact way the Loop-IP6510 is configured. This is easily done by comparing each of the options
one by one. After checking that the configuration matches, if any one of the ports fails, then Loop-IP6510 has
failed.
wan-a-1
SNMP
Local Network 1
LAN 1
TDM IP Network
Network Loop-IP 6510 # 1
Management IP:140.132.254.254
Mask: 255. 255.0.0
wan-a-1
Local Network 2
LAN 1
Loop- IP 6510 # 2
Management IP:140.132.254.253
Gateway
The second parameter, MAC address, is an optional parameter. If MAC address is not given, the IP6510 will
generate the MAC address randomly. It may conflict with the MAC address of other devices. The following
command can be set up once every time for IP6510.
>login admin
Password:
Welcome!!
Press '?' to get help!
The IP6510 WAN ports carry Ethernet frame checksum by default. To save WAN port’s bandwidth, we
disable the carry of the FCS by command bridge br1 fcs disable.
To setup management on bridge mode, the user have to enable bridge management feature and assign an
IP address for the management port.
5 PPP/MLPPP
5.1 Overview
Multilink PPP can connect multiple links between two systems as needed to provide extra bandwidth.
Remotely accessing resources through PPP Multilink allows for the increase in overall throughput by
combining the bandwidth of two or more physical communication links.
Example: Bundle the four T1 interfaces (wan-a-1 to wan-b-2) in a virtual interface (m1) and make the virtual
interface become bridge mode. When the data packets transmit from LAN to bundle interface, MLPPP will
fragment the packets and transmit the fragments to wan-a-1 to wan-b-2. The remote device receives the
fragments and assembles them into a complete packet.
NOTE: For making an MLPP bundle with E1 interfaces, use the command interface wan-x-x timeslot add
1-31 to add all of the available timeslots to the E1 interfaces. All of the other commands below are the same.
admin>multilink create m1
Command succeeded
Create a bridge group. The following command show an example that creates a bridge without a specifying
a MAC address. In the case, the IP6510 randomly generates a MAC address for the group.
6 VLAN
6.1 Overview
VLAN is used to subdivide a LAN into smaller entities known as VLAN1, VLAN2, VLAN3, VLAN 4094. A
device in a particular VLAN can monitor traffic in that VLAN only, and cannot monitor packets in any other
VLANs. This provides an important level of security and also assists the user to do certain kinds of QoS.
In Figure 6-1, below, VLAN1 and VLAN2 both feed into the VLAN-aware Ethernet Switch. The switch assigns
a Port VID to each port. VLAN1 is assigned VID:3 and VLAN2 is assigned VID:5. Transmissions from
VLAN1(VID:3) and VLAN2(VID:5) are put into tagged packets by the switch and then passed on to the
Ethernet Port of the IP6510.
The IP6510 reads the tag on the packets and uses this VLAN ID to make packet forwarding decisions. In the
diagram below, the packets are to be sent via two T1 interfaces to the Network. Each of these channels can
carry VLAN traffic(eg. VID:3, wan-a-1). The IP6510 forwards packets of a VLAN to a proper interface
according to the tags on the packets.
The first step is to create a bridge group for the IP6510. Type in the command bridge create followed by the
given name and a MAC address.
The second parameter, MAC adress, is an optional parameter. If MAC address is not given, the IP6510 will
generate the MAC address randomly. It may conflict with the MAC address of other devices.
For WAN interface setup, there are wan-a-1and wan-a-2 for setting.
The IP6510 supports multiple WAN interfaces. Before configuring each WAN interface, it needs to setup the
timeslot map in advance.
Type in the command interface wan-a-1 timeslot set to assign timeslots to interface wan-a-1. The
following example assigns 24 timeslots to interface wan-a-1 from timeslot 1 to timeslot 24.
NOTE: For E1, the proper command would be wan-a-1 timeslot set 1-31 to assign all available E1
timeslots to this WAN port.
Type in the command interface wan-a-2 timeslot set to assign timeslots to interface wan-a-2 timeslot.
Here, we don’t explicitly specify any encapsulation method for T1 interfaces. This causes the interfaces to
run default encapsulation method, HDLC.
Type in the admin command bridge br1 add lan1 wan-a-1 wan-a-2.
2. VLAN Setup
The VLAN has to be enabled on the bridge. Type in the command bridge br1 vlan followed by enable.
You must create a VID for each VLAN. To create VID:3 type in the command bridge br1 vlan create and
press Enter. To create VID:5 type in the command bridge br1 vlan create 5.
You must setup the WAN Port to allow it to process VLAN1 (VID:3) or VLAN2 (VID:5).For tagged member
of VID:3 VLAN1. Type in the command bridge br1 vlan add 3 tag wan-a-1. Press Enter. For tagged
member for VID:5 VLAN2. Type in the command bridge br1 vlan add 5 tag wan-a-2.
You must setup the Ethernet Port to allow it to process VLAN1 (VID:3) and VLAN2 (VID:5). To set LAN1
Ethernet to be a tagged member for VID:3 VLAN1, type in the command bridge br1 vlan add 3 tag lan1.
Press Enter. To set LAN1 Ethernet to be a tagged member for VID:5 VLAN2, type in the command Bridge
br1 vlan add 5 tag lan1. Press Enter.
Figure 6-2, below, is much like Figure 6-1, except that it contains both tagged and untagged packets on the
Ethernet side. The IP6510 assigns a default VLAN ID to untagged packets (ie.VLAN3 packets in the
diagram). The default VID is always the Port VID of the Ethernet Port.
Connect a cable between the COM port of your PC and the Console port of the IP6510. Then follow the
instructions below.
The first step is to create a bridge group for the IP6510. Type in the command bridge create followed by the
given name and a MAC address. Then press the Enter key.
The second parameter, MAC address, is an optional parameter. If the MAC address is not given, the IP6510 will
generate the MAC address randomly. It may conflict with the MAC address of other devices.
For WAN interface setup, there are wan-a-1and wan-a-2 for setting.The IP6510 supports multiple WAN
interfaces. Before configuring each WAN interface, it needs to setup the timeslot map in advance.
Type in the command interface wan-a-1 timeslot set to assign timeslots to interface wan-a-1. The following
example assigns 24 timeslots to interface wan-a-1 from timeslot 1 to timeslot 24.
Type in the command interface wan-a-2 timeslot set to assign timeslots to interface wan-a-2 timeslot.
Here, we don’t explicitly specify any encapsulation method for T1 interfaces. This causes the interfaces to
run default encapsulation method, HDLC.
Type in the admin command bridge br1 add lan1 wan-a-1 wan-a-2 wan-b-1.
A admin> bridge br1 add lan1 wan-a-1 wan-a-2 wan-b-1
Command succeeded
2. VLAN Setup
You must set the VLAN mode. Type in the command bridge br1 vlan followed by the parameter you require.
In our sample screen we chose to use enable as our parameter.
You must create a VID for each port. To create VID:3 type in the command bridge br1 vlan create 3 and
press Enter. To create VID:5 type in the command set vlan create 5. To create VID:7 type in the command
bridge br1 vlan create 7.
For tagged member of VID:3 VLAN1, type in the command bridge br1 vlan add 3 tag wan-a-1. Press Enter.
For tagged member of VID:5 VLAN2, type in the command bridge br1 vlan add 5 tag wan-a-2. For tagged
member of VID:7 VLAN2, type in the command bridge br1 vlan add 7 tag wan-b-1.
You must setup the Ethernet Port to allow it to process VLAN1 (VID:3), VLAN2 (VID:5) and VLAN3 (VID:7)
To set LAN1 Ethernet to be a tagged member for VID:3 VLAN1, type in the command bridge br1 vlan add
3 tag lan1. Press Enter. To set LAN1 Ethernet to be a tagged member for VID:5 VLAN2, type in the command
bridge br1 vlan add 5 tag lan1. Press Enter. To set LAN1 Ethernet to be an untagged member for VID:7
VLAN3, type in the command bridge br1 vlan add 7 untag lan1. Press Enter. Finally, to set LAN1’s PVID to
be VID:7, type in the command interface lan1 vlan pvid 7.
The “show bridge br1 vlan table” command can be used to access the VLAN Table. The VLAN table displays
the tagged/untagged member for each VLAN ID. There can be as many as 4094 VLAN IDs. The VID1 appears in
the table is automatically generated. The others must be created.
====================================================================
VID: 1
Tag Member:
Untag Member:
BrgMng_0, lan1, wan-a-1, wan-a-2, wan-b-1
====================================================================
VID: 3
Tag Member:
lan1, wan-a-1
Untag Member:
====================================================================
VID: 5
Tag Member:
lan1, wan-a-2
Untag Member:
====================================================================
VID: 7
Tag Member:
wan-b-1
Untag Member:
lan1
Command succeeded
6.3.2 VLAN Port Table
The “show bridge br1 vlan port” command can be used to display a port’s parameters in the VLAN
environment.
7.1 Overview
Double-tag Q-in-Q allows a service provider to convey customer traffic transparently. Figure 7-1, below,
shows the basic application of the IP6510 Q-in-Q feature. The IP6510 receives Ethernet frames (tagged or
untagged) from a customer’s LAN, then encapsulates the frames with an additional outer tag and sends them
out through a WAN link.
C
8100 PCP F C-VID
I
S-TAG C-TAG
LEN/
TPID TCI TPID TCI DATA FCS
DA(6B) SA(6B) ETYPE
(2B) (2B) (2B) (2B) (0~1500B) (4B)
(2B)
D
8100 PCP E S-VID
I
*PCP: The Priority Code Point (PCP) is a 3-bit length field which is used to convey priority and drop
eligibility parameters.
*DEI: the Drop Eligible Indicator bit.
*S_VID: The S_VLAN Identifier (VID) is a 12-bit length field uniquely identifying the VLAN to which the
frame belongs. Its value can be between 1 and 4,094.
7.3 Definitions
Priority Code Point (PCP) is user configurable and sets the default value of the priority field of a newly
inserted S-TAG.
Per-port Parameter S-VLAN Port Type defines how a port processes an egress packet. Following table
defines actions of all possible egress processes.
Customer The port always removes the S-TAG when a packet is forwarded through
the port. The process enables a customer network port to remove the
outer tag before it forwards a packet to the customer’s network.
Note: Default WANs are provider ports. Provider ports allow only packets with S-Tag to pass through.
Default LANs are customer ports. Customer ports do not allow packets with S-TAG to pass An SVLAN
group can include members of the customer port group only or the provider port group only. The
SVLAN group cannot include members of both port groups. If the packets from customer to provider
ports want to pass through, IP6510 must set up the customer ports' PVID same as provider ports'
SVID.
Setup Commands
admin> create bridge br1
WARNING: A MAC address has been randomly generated for bridge group! It might
conflict with other device!!
Command succeeded
8.1 Overview
Each IP6510 WAN port can support multiple Frame Relay PVCs, up to 16 per port. The maximum number of
PVCs in IP6510 is 64. Figure 8-1 below illustrates a Frame Relay setup. The dashed lines in the diagram
represent Frame Relay PVCs.
Note: The IP6510 only supports user site protocol and cannot communicate directly with each other. They
must be connected to a Frame Relay network that includes devices that run FR network protocol.
Frame
Relay User
Network
IP6510
Set Frame Relay polling protocol as Q.933 Annex A and its parameters n391, n392, n393, and t391. Please
note that these parameters must match the parameters on the network side.
adm in>interface wan -a-1 fram e_relay q933 n391 10 n392 4 n393 5 t391 20
Com m and succeeded
adm in>interface wan -a-1 pvc add pvc1 17 512 512 64 120
Com m and succeeded
Note: In the above screen the first 512 is the value for the CIR (Committed Information Rate) of PVC1. The
total sum of the CIR values for all PVCs must not exceed the total physical bandwidth of the WAN
port. Physical bandwidth can be calculated by using the formula.
If you are not sure how many timeslots you used in your WAN port mapping, you can check by using
the command show interface wan-a-1 config.
A PVC can also run a dynamic routing protocol. In following example, RIP II is enabled
9 NAT / NAPT
9.1 Overview
NAT stands for Network Address Translation, NAPT means Network Address and Port Translation. These
two very similar techniques can change the IP address, checksum, and other headers in the packet while
leaving the data unchanged. It can be applied in a one-to-one or one-to-many setting. The one to one method
can be used to translate between two different systems of addresses.
The one to many NAPT application, the most commonly used technique, hides several devices who do not
have a globally unique IP address behind a single IP address that is globally unique. All traffic from the local
network arrives here and the router then distributes the packets using previously stored translation data. An
analogy can be an office telephone network with a single telephone number but with an extension necessary
to contact any one person. Another example can be a large family with a single home address but many kids,
all of whom receive letters in the mail.
Because NAT/NAPT hides many devices behind one IP address, it does not allow for ideal “end to end”
communication. However, this technique can greatly expand the available address space, and was thus a
major way to prevent IP address exhaustion before the introduction of IPv6.
E1 (PPP or HDLC)
WAN 1 LAN 1
100.2.254.254/24 Private IP: 192.168.2.1/24
Local Network
IP Network
IP6510
Port Forwarding
202.162.213.146:20 → 192.168.1.109:20
LAN1 202.162.213.146:21 → 192.168.1.109:21
IP Address: 202.162.213.146:80 → 192.168.1.109:80
192.168.1.1/24
202.162.213.146:443 → 192.168.1.109:443
202.162.213.146:8080 → 192.168.1.109:8080
FTP Server
Private IP: 192.168.1.109/24 Client
Gateway: 192.168.1.1 Private IP: 192.168.1.204/24
Gateway: 192.168.1.1
NOTE Ports are uniquely allocated, so that when 202.162.213.146:20 is translated to 192.168.1.109:20,
another server cannot allocate port 21 anymore.
10 STP/RSTP Setup
10.1 Overview
The Spanning Tree Algorithm can be used to detect and disable network loops and to provide backup links
between bridges. This allows the device to interact with other STP/RSTP-compliant switches or bridges in a
network to ensure that only one route exists between any two stations on the network and to provide backup
links which automatically take over when a primary link goes down.
In Figure 9-1, below, the forwarding port in IP6510 #4 is blocked so that there can only be one path between
PC#1 and PC #2.
IP6510 #1 IP6510 #2
PC # 1 PC # 2
Blocked
IP6510 #3 IP6510 #4
Traffic Path
Figure 9- 1 Normal RSTP Link
In Figure 9-2, below, the WAN link between IP6510 #1 and IP6510 #2 has broken. The system immediately
removes the forwarding port block in IP6510 #4 so that there is still a path between PC #1 and PC #2.
WAN 1
PC #1 PC # 2
Link
LAN 1
Broken LAN1
PC1 to PC2
link is
recovered
Traffic Path
Figure 9- 2 Restored RSTP Link
In Figure 9-3, WAN 2 is blocked by RSTP. Only WAN1 can carry on the data transfer from PC#1 to PC#2.
WAN 1
LAN 1
PC # 1 WAN 2 LAN 2 PC # 2
Port Blocked
by RSTP
Traffic Path
In Figure 9-4, when WAN1 is broken, the working path will switch immediately from WAN1 to WAN2 within 6
seconds.
WAN 1
Link
Broken
WAN 1
Spanning tree algorithm uses a distributed algorithm to select a bridging device that serves as the root of the
spanning tree network. It selects a root port on each bridging device (except for the root device) which incurs
the lowest path cost when forwarding a packet from that device to the root device. Then it selects a
designated bridging device from each LAN, which incurs the lowest path cost when forwarding a packet from
that LAN to the root device. All ports connected to designated bridging devices are assigned as designated
ports. After determining the lowest cost spanning tree, it enables all root ports and designated ports, and
disables all other ports. Network packets are therefore only forwarded between root ports and designated
ports, eliminating any possible network loops.
Once a stable network topology has been established, all bridges listen for Hello BPDUs (Bridge Protocol
Data Units) transmitted from the Root Bridge. If a bridge does not get a Hello BPDU after a predefined
interval (Maximum Age), the bridge assumes that the link to the Root Bridge is down. This bridge will then
initiate negotiations with other bridges to reconfigure the network topology. RSTP is designed as a general
replacement for the slower, legacy STP. RSTP achieves much faster reconfiguration (i.e., around one tenth
of the time required by STP) when a node or port fails.
For optimal performance of the bridges it is recommended to use the default operational values for
performance parameters. These have been specified in order to avoid the need to set values prior to
operation. They have been chosen with a view to maximizing the ease with which Bridged LAN components
interoperate.
Recommended or Range
Parameter Fixed value
default value
Bridge Hello Time 2.0 — 1.0-10.0
Bridge Max Age 20.0 — 6.0-40.0
Bridge Forward Delay 15.0 — 4.0-30.0
Transmission Limit 3 — —
All times are in seconds.
The setup procedure is now complete. If you want to see what your setup looks like, type in the command
show bridge br1 spantree and press Enter. A sample display is shown below.
Bridge Information:
Bridge ID Hello Time Max Age Forward Delay Root Cost
========================================================================
Root 32768-008EA208A8D3 4 sec 25 sec 20 sec 0
This 32768-008EA208A8D3 4 sec 25 sec 20 sec 0
Port Information:
State Priority Cost Edge-port Link-type Root Port
========================================================================
lan1 Disabled 127 100 enabled p-to-p No
wan1 Disabled 127 100 enabled p-to-p No
Command succeeded
11.1 Overview
In packet networks, one important requirement for link sharing is to share bandwidth on a link between
multiple agencies, where each agency wants to receive a guaranteed share of the link bandwidth during
congestion. But bandwidth that is not being used by one agency should be available to other agencies
sharing the link.
Quality of Service (QoS) is the idea that transmission rates, error rates can be measured, improved, and to
some extent guaranteed in advance. QoS enables you to provide better service to certain flows and helps
user to control the use of the outbound traffic on a given link. IP6510 QoS is policy based where the traffic
type defines each policy.
In the Loop-IP6510, we have classified the outgoing traffic (i.e. policy) by packet’s IP address, network
protocol, TCP/UDP port number, and/or DSCP value. User can configure the committed bandwidth for a
particular class of traffic by mentioning the minimum and maximum bandwidth. Users should make sure that
total configured bandwidth of all such policies do not exceed the link’s physical bandwidth.
15% Telnet
Local
wan-a-2 LAN 1 network
IP6510
Figure 10- 1 QoS Application
Two subnetworks, A and B are accessed through the wan-a-1 interface as depicted in the figure i.e. all
traffics of these networks are passed through wan-a-1 interface. Again each of A and B have different types
of traffic, say Telnet, WWW, FTP or so on.
Suppose Telnet of subnet A has a high traffic rate and consumes most of the bandwidth of wan-a-1. Other
services will be blocked, as wan-a-1 doesn’t have enough bandwidth compared to LAN1 and eventually some
traffic from LAN1 will be dropped. To solve this problem, policy rate limiting is installed on wan-a-1 to control
bandwidth distribution.
Suppose subnet A will have 60% of the available wan-a-1 bandwidth guaranteed; subnetwork B the rest
(40%). Within each subnetwork the guaranteed flows for each type of service are as as indicated in the
figure. Assume wan-a-1 has 1Mbps bandwidth, so telnet in subnet A will have 60 Kbps (10% of 60% of
1Mbps) guaranteed bandwidth, while FTP will have 120 Kbps. Corresponding commands for these Telnet
and FTP for subnet A are as follows:
admin>interface wan-a-1 policy qos rate_limit append 192.168.1.0/24 any tcp 23 any 60-60 kbps
Command succeeded
admin>interface wan-a-1 policy qos rate_limit append 192.168.1.0/24 any tcp 21 any 120 kbps
Command succeeded
admin>interface wan-a-1 policy qos rate_limit append 192.168.1.0/24 any any 80 any 120-120 kbps
Command succeeded
admin>interface wan-a-1 policy qos rate_limit append 192.168.1.0/24 any any 80 any 300 kbps
Command succeeded
The following are the commands to setup traffic distribution control for subnet B
admin>interface wan-a-1 policy qos rate_limit append 192.168.2.0/24 any TCP 23 any 60 kbps
Command succeeded
admin>interface wan-a-1 policy qos rate_limit append 192.168.2.0/24 any TCP 21 any 120-120 kbps
Command succeeded
admin>interface wan-a-1 policy qos rate_limit append 192.168.1.0/24 any 80 120 kbps
Command succeeded
admin>interface wan-a-1 policy qos rate_limit append 192.168.1.0/24 any 100 100
Command succeeded
12 OSPF Setup
12.1 Overview
Figure 11-1 below illustrates the IP6510 being used in router mode..
Peer Router
IP 100.2.254.253
WAN 1 LAN 1
IP Network IP: 100.2.254.254 IP: 192.168.1.1 Local Network
MASK: 255.255.0.0 MASK: 255.255.255.0 with IP Address
IP: 160.2.254.253
Gateway: 255.255.0.0
IP6510
Network Address:
IP Router 100.3.0.0
255.255.0.0
OSPF routes IP packets based solely on the destination IP address found in the IP packet header. IP packets
are routed "as is" - they are not encapsulated in any further protocol headers as they transit the Autonomous
System.
OSPF allows sets of networks to be grouped together. Such a grouping is called an area. The topology of an
area is hidden from the rest of the Autonomous System. This information hiding enables a significant
reduction in routing traffic. Also, routing within the area is determined only by the area's own topology, lending
the area protection from bad routing data.
OSPF enables the flexible configuration of IP subnets. Each route distributed by OSPF has a destination and
mask. Two different subnets of the same IP network number may have different sizes (i.e., different masks).
This is commonly referred to as variable length subnetting. A packet is routed to the best (i.e., longest or
most specific) match.
Type in the admin command route ospf area add 1 to create an area with ID 1.
Set up the WAN1 interface. Type in the admin command interface wan1 route ospf setup enable 1 to
add WAN1 into area 1. Then press the Enter key.
Save the configuration. Type in the command system configuration save. Then press the Enter key.
13 DHCP Setup
DHCP (Dynamic Host Configuration Protocol) can be used to automatically assign IP addresses, to deliver
TCP/IP stack configuration parameters (ie. subnet mask and default router), and to provide other
configuration information. Figure 12-1 below illustrates the IP6510 set up in a DHCP server application. All
hosts (shown on the right side of the network diagram) can get IP addresses from the IP6510 when its DHCP
Server is enabled.
IP6510
Host (DHCPClient)
..........
Figure 12- 1 DHCP Application
Use the command dhcp server subnet add to create a subnet which contains all necessary information
needed by DHCP clients. In the following example screen the subnet loop1 had been created.
Once a subnet is created, we set network address. When the DHCP server allocate an IP address for a
client, the server will also send the client proper network address. The network address is 192.168.1.0/24.
An IP address range from 192.168.1.5 to 192.168.1.20 is for the subnet by type in command dhcp server
subnet loop1 ip_range.
The command dhcp server subnet domain_name works set works for domain name.
A DNS server 192.168.1.2 is set by command dhcp server subnet loop1 dns_server add.
To use command dhcp server interface add to add all LAN interfaces which offer DHCP service. As
following example, only the LAN1 is enabled for the service.
When the DHCP server is running, the hosts on network connected to LAN1 can use the DHCP to obtain IP
addresses.
Deploying DHCP in a single subnet network is straightforward. DHCP messages are IP broadcast messages,
and all computers on the subnet can listen to and respond to these broadcasts. A single DHCP server is all
that is required.
It is complicated when there is more than one subnet on your network. This is because the DHCP broadcast
messages do not (by default) cross the router interfaces. The DHCP relay agent allows you to place DHCP
clients and DHCP servers on different subnets of your network or even to put them on different networks.
IP6510
WAN 1 LAN1
IP Network Host (DHCP Client)
..........
Figure 12- 2 DHCP Relay Setup
The following example illustrates how to enable a DHCP relay service with the IP6510.
14.1 Overview
Firmware/Download and Configuration Upload/Download functions can be performed with the TFTP server on the
LAN side or with the TFTP server on an outside network.
NOTE: In this application the Loop-IP6510 and the TFTP Server are in the same subnet. Connect a cable
between the COM port of your PC and the Console port of the IP6510. The TFTP Server is connected
to the LAN1 Port of the Loop-IP6510.
Type in the admin command system configuration copy startup_cfg tftp://, followed by the IP address of the
TFTP Server, followed by /IP6510_config. Then press Enter. Your screen will tell you if the command
succeeded.
In your TFTP server, you will see the configuration file, IP6510_config.
Type in the admin command system configuration copy tftp://, followed by the IP address of the TFTP Server,
followed by the name of the configuration file on the TFTP server, followed by startup.
Press Enter. Your screen will tell you if the command succeeded. You must now reset the system to let the
downloaded configuration take effect. To do so, type in the admin command system reboot and then press
Enter. Resetting can also be done by powering down the unit and then powering it up again.
admin>system reboot
15 Operation Commands
This chapter describes the IP6510 configuration options and operational functions. Each command requires
a certain user privilege.
In the following commands, please replace “brg_name” with the real bridge group name in your system.
Note: A hello time value that is too low results in many BPDU hello messages being sent
over the network, possibly creating excessive traffic on the network. A value that is too
high slows the response to network topology changes. The default value of 2 seconds
is recommended in 802.1d/802.1w. If you change this value, the following relationship
must be obeyed:
Bridge_Max_Age >= 2 x (Bridge_Hello_Time + 1.0 seconds)
Explanation: Add the DHCP subnetto the server, so that when a request is received from a DHCP client,
the server can assign an IP address and other necessary parameters to the client. Note that
user must add a subnet for each configured interface on which he/she WANts to run DHCP
server
Parameters: Name unique name of subnet (<16 bytes)
Sets the default duration of a lease for an IP address that is assigned from a DHCP Server
to a client
Parameters: time default lease time in secs to remove setting
Privilege: admin
Syntax: interface intf e1 idle_code code
Explanation: Define the unused channel idle code
Parameters: code Idle code (0 to 255)
more) ports connected to the same bridge towards the root bridge tie for position as the root
port. The port with the lowest port priority will forward (be root port) and the other port(s) will
block (be alternate port).
Parameters: value port priority (0-255). Default value is 128.
Explanation: Set the acceptable frame type of a given interface. Two options could be chose: all means
this interface could accept tagged, untagged or pure-priority packets; tag-only means this
interface could only accept tagged packets.
Parameters: type all/tag-only
Privilege: admin
Syntax: policy acl list1 append action selector
Explanation: Appends an entry on the specified list. If a packet matches the selector described in the
rule, action will be taken.
A maximum of 32 entries can be added to a list.
Parameters: action { permit | deny }
selector "[src_ip/prefix] [dst_ip/prefix] [protocol] [service]"
Privilege: admin
Syntax: show bridge brg_name config
Explanation: Show bridge group configuration
Parameters: none
wan-b-2.
Parameters: None
Parameters:
Command: system ip
Privilege: admin
Syntax: system ip
Explanation: Setup the SNMP management IP
Parameters: IP address
Subnet Mask: automatically set to a fixed value, 255, 255, 255, 255
16 Glossary