XGS-5240-Series User Manual
Table Of Contents
- Chapter 1 INTRODUCTION
- Chapter 2 INSTALLATION
- Chapter 3 witch Management
- Chapter 4 Basic Switch Configuration
- Chapter 5 File System Operations
- Chapter 6 Cluster Configuration
- Chapter 7 USB Function Configuration
- Chapter 8 Device Management
- Chapter 9 Port Configuration
- Chapter 10 Port Isolation Function Configuration
- Chapter 11 Port Loopback Detection Function Configuration
- Chapter 12 ULDP Function Configuration
- Chapter 13 LLDP Function Operation Configuration
- Chapter 14 Port Channel Configuration
- Chapter 15 MTU Configuration
- Chapter 16 bpdu-tunnel-protocol Configuration
- Chapter 17 DDM Configuration
- Chapter 18 EFM OAM Configuration
- Chapter 19 LLDP-MED
- Chapter 20 PORT SECURITY
- Chapter 21 QSFP+ Port Split and Combination Configuration
- Chapter 22 VLAN Configuration
- Chapter 23 MAC Table Configuration
- Chapter 24 MSTP Configuration
- Chapter 25 QoS Configuration
- Chapter 26 PBR Configuration
- Chapter 27 IPv6 PBR Configuration
- Chapter 28 Flow-based Redirection
- Chapter 29 Egress QoS Configuration
- Chapter 30 Flexible QinQ Configuration
- Chapter 31 Layer 3 Management Configuration
- Chapter 32 ARP Scanning Prevention Function Configuration
- Chapter 33 Prevent ARP, ND Spoofing Configuration
- Chapter 34 ARP GUARD Configuration
- Chapter 35 Gratuitous ARP Configuration
- Chapter 36 DHCP Configuration
- Chapter 37 DHCPv6 Configuration
- Chapter 38 DHCP option 82 Configuration
- Chapter 39 DHCPv6 option37, 38
- Chapter 40 DHCP Snooping Configuration
- Chapter 41 DHCP option 60 and option 43
- Chapter 42 IPv4 Multicast Protocol
- Chapter 43 IPv6 Multicast Protocol
- Chapter 44 Multicast VLAN
- Chapter 45 ACL Configuration
- Chapter 46 Self-defined ACL Configuration
- Chapter 47 802.1x Configuration
- 47.1 Introduction to 802.1x
- 47.2 802.1x Configuration Task List
- 47.3 802.1x Application Example
- 47.4 802.1x Troubleshooting
- Chapter 48 The Number Limitation Function of MAC and IP in Port, VLAN Configuration
- 48.1 Introduction to the Number Limitation Function of MAC and IP in Port, VLAN
- 48.2 The Number Limitation Function of MAC and IP in Port, VLAN Configuration Task Sequence
- 48.3 The Number Limitation Function of MAC and IP in Port, VLAN Typical Examples
- 48.4 The Number Limitation Function of MAC and IP in Port, VLAN Troubleshooting Help
- Chapter 49 Operational Configuration of AM Function
- Chapter 50 Security Feature Configuration
- 50.1 Introduction to Security Feature
- 50.2 Security Feature Configuration
- 50.2.1 Prevent IP Spoofing Function Configuration Task Sequence
- 50.2.2 Prevent TCP Unauthorized Label Attack Function Configuration Task Sequence
- 50.2.3 Anti Port Cheat Function Configuration Task Sequence
- 50.2.4 Prevent TCP Fragment Attack Function Configuration Task Sequence
- 50.2.5 Prevent ICMP Fragment Attack Function Configuration Task Sequence
- 50.3 Security Feature Example
- Chapter 51 TACACS+ Configuration
- Chapter 52 RADIUS Configuration
- Chapter 53 SSL Configuration
- Chapter 54 IPv6 Security RA Configuration
- Chapter 55 VLAN-ACL Configuration
- Chapter 56 MAB Configuration
- Chapter 57 PPPoE Intermediate Agent Configuration
- Chapter 58 SAVI Configuration
- Chapter 59 Captive Portal Authentication
- 59.1 Captive Portal Authentication Configuration
- 59.2 Accounting Function Configuration
- 59.3 Free-resource Configuration
- 59.4 Authentication White-list Configuration
- 59.5 Automatic Page Pushing after Successful Authentication (it is not supported currently)
- 59.6 http-redirect-filter
- 59.7 Portal Non-perception
- 59.8 Portal Escaping
- Chapter 60 VRRP Configuration
- Chapter 61 IPv6 VRRPv3 Configuration
- Chapter 62 MRPP Configuration
- Chapter 63 ULPP Configuration
- Chapter 64 ULSM Configuration
- Chapter 65 Mirror Configuration
- Chapter 66 RSPAN Configuration
- Chapter 67 SNTP Configuration
- Chapter 68 NTP Function Configuration
- Chapter 69 DNSv4/v6 Configuration
- Chapter 70 Summer Time Configuration
- Chapter 71 Monitor and Debug
- Chapter 72 Reload Switch after Specified Time
- Chapter 73 Debugging and Diagnosis for Packets Received and Sent by CPU
- Chapter 74 VSF
- Chapter 75 SWITCH OPERATION
- Chapter 76 TROUBLESHOOTING
- Chapter 77 APPENDIX A
- Chapter 78 GLOSSARY
Configuration Guide of XGS-5240-Series
61-2
rminal user systems.
In IPv6 environment, the hosts in a LAN usually learn the default gateway via neig
hbor discovery protocol (NDP), which is implemented based on regularly receiving adver
tisement messages from routers. The NDP of IPv6 has a mechanism called Neighbor
Unreachability Detection, which checks whether a neighbor node is failed by sending un
icast neighbor request messages to it. In order to reduce the overheads of sending nei
ghbor request messages, these messages are only sent to those neighbor nodes which
are sending flows, and are only sent if there is no instruction of UP state of the route
r in a period of time. In Neighbor Unreachability Detection, if adopting default paramete
rs, it will take about 38 seconds to detect an unreachable router, which is a delay not
ignorable for users and might cause a time-out in some transport protocols. Compared
with NDP, VRRP provides a fast default gateway switch. In VRRP, backup routers can t
ake up the unavailable master router in about 3 seconds (default parameter), and this
process needs no interaction with hosts, which means being transparent to hosts.
61.1.1 The Format of VRRPv3 Message
VRRPv3 has its own message format, VRRP messages are used to communicate t
he priority of routers and the state of Master in the backup group, they are encapsulat
ed in IPv6 messages to send, and are sent to the specified IPv6 multicast address. Th
e format of VRRPv3 message is shown in Graph 1. The source address of the IPv6 m
essage encapsulating the VRRPv3 message is the local address of the outbound interf
ace of the message, and the destination address of it is the IPv6 multicast address(the
multicast allocated to VRRPv3 is FF02:0:0:0:0:0:0:12). The number of hops should be
limited to 255, and the next message head is 112(representing a VRRP message).
The meaning of each field in a VRRPv3 message is shown as follows:
Version: The version of VRRPv3, whose value is 3;
Type: The type of VRRP messages. There is only one type: ADVERTISEMENT, an
d its value is 1;
Virtual Rtr ID:The ID of the virtual router;
Priority:Priority, ranging from 0 to 255;
Count IPv6 Addr:The number of IPv6 addresses in a VRRPv3 message, the mini
mum of which is 1;
Rsvd:Reserved field, whose value is 0;
Adver Int:The advertisement interval of VRRPv3 messages, in seconds;
Checksum:The checksum, taking account of the whole VRRPv3 message and an I
Pv6 pseudo head (please refer to RFC2460 for details);
IPv6 Address(es):one or more IPv6 addresses related to the virtual router, the nu
mber of which is the same with ”Count IPv6 Addr”, and the first one of which should b