Installation Guide

IBR Installation Guide
Page 13 of 32 Doc # 770-00001-3
Aug. 30, 2013
4.6 Confirming VLAN Settings
By default, VLAN functionality is enabled on IBR and all interfaces are assigned to VLAN1.
During initial configuration, the operator should assign VLANs to interfaces as desired. IBR
can be managed using any VLAN to which an IP address is assigned. See the section titled
Separating Management Traffic From Data Traffic for details on assigning an IP address to a
VLAN and using VLANs to segment management traffic from data traffic.
Interfaces may be configured to support both tagged and untagged packets. Each IBR
interface can be configured to support ingress and egress of tagged packets for all VLANs
connected to the interface except for a VLAN that is configured as native to that interface.
Packets tagged with the VLAN number that is configured as the native VLAN for an interface
will be dropped.
Enter the following command to confirm that vlan1 is enabled.
IBR58 # show vlan brief
Returns: VLAN1 Active ge0 ge1 ge2 ge3
The response (“Returns”) shown above indicate that vlan1 is attached to all four interfaces.
4.7 Displaying IBR IP Address
Enter the following command to confirm that IBR has been assigned an IP address.
IBR58 # show ip interfaces
This command will return an output similar to the following example:
1: lo: <LOOPBACK> mtu 16436 qdisc noop
link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast qlen 1000
link/ether 18:48:d8:00:00:39 brd ff:ff:ff:ff:ff:ff
3: danipc: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast qlen 1000
link/ether 00:24:86:00:00:00 brd ff:ff:ff:ff:ff:ff
4: eth0.1@eth0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue
link/ether 18:48:d8:00:00:39 brd ff:ff:ff:ff:ff:ff
inet 10.21.2.195/16 brd 10.21.255.255 scope global
Following the first three interfaces in the output, there will be an additional interface for each
VLAN. The name of the interface is eth0.nn where nn is the VLAN number to which the IP
address is assigned. Note that even though the interface shows eth0, the IP address will be
reachable only through interfaces to which that VLAN has been assigned.
4.8 Separating Management Traffic From Data Traffic
IBR interfaces should be configured in such a way as to separate internal management traffic
from user data traffic (i.e., prevent management traffic from being sent over the network).
The following sequence of commands illustrates a way to accomplish this. VLAN2, VLAN823,
and the IP addresses shown are used only as examples.
4.8.1 Create VLAN interfaces