Nokia Network Voyager Reference Guide for IPSO 6.0 - Check Point

Nokia Network Voyager Reference Guide for IPSO 6.0 - Check Point Nokia Network Voyager Reference Guide for IPSO 6.0 - Check Point

downloads.checkpoint.com
from downloads.checkpoint.com More from this publisher
13.07.2015 Views

2 Configuring InterfacesYou can specify a minimum number of ports that must be active for the logical interface toremain active. If the number of active ports is less than this number, the logical interface isdeactivated. This option is particularly useful in VRRP configurations. For example, you mighthave a VRRP pair in which both the master and backup systems use two aggregated GigabitEthernet ports as their external connection. If one of the Gigabit Ethernet ports in the masterfails, you probably would prefer that the backup system becomes the master so that there is noloss of bandwidth in the external connection. In this case, you would set the minimum number ofactive ports to be two.You can aggregate as many as four ports in one aggregation group, and you can have as many aseight aggregation groups on one appliance.You can hot swap NICs that have ports participating in an aggregation group. If the group hasports on other NICs, the traffic is distributed to those ports and the aggregation group continuesto function when you remove a NIC in this manner. If you reinsert the NIC, the appropriate portsrejoin the aggregation group and resume forwarding traffic automatically.You can view statistical information about link aggregation groups and the individual interfacesin the groups by clicking Configuration > Monitor > System Health > Interface TrafficStatistics > Link Aggregation Statistics.Static Link AggregationThe IPSO implementation of link aggregation complies with the IEEE 802.3ad standard forstatic link aggregation. Nokia has also tested IPSO link aggregation with the following CiscoCatalyst switches:• 6500 Series• 3550 Series• 2950 SeriesIPSO 6.0 does not support LACP, which is used for dynamic link aggregation. IPSO 4.2 doessupport LACP.CautionMake sure that dynamic link aggregation (LACP) is disabled before you upgrade fromIPSO 4.2 to IPSO 6.0. If you do not, the ports in the aggregation group will loseconnectivity after the upgrade.Managing Link Aggregation Using SNMPNokia IPSO systems use a proprietary SNMP MIB to manage link aggregation. To incorporatelink aggregation into your SNMP-based management, perform the following tasks:• Copy the file NOKIA-IPSO-LINKAGGREGATION-MIB.txt to your management system.This file is located at /etc/snmp/mibs/.• In Network Voyager or the IPSO CLI, enable the following traps:32 Nokia Network Voyager Reference Guide for IPSO 6.0

Link Aggregation• Enable lamemberActive traps• Enable lamemberInactive trapsNoteIPSO does not use the standard IEEE8023-LAG-MIB to support link aggregation.Configuring Switches for Link AggregationObserve the following considerations when you configure a switch to support link aggregationin combination with a Nokia appliance:• You must configure the appropriate switch ports to use static link aggregation. (On Ciscoswitches, this means you must enable EtherChannel.) That is, if you aggregate four portsinto one group on your Nokia appliance, the four switch ports that they connect to muststatic link aggregation.• When you assign switch ports to an EtherChannel group, set the channel mode to on toforce the ports to form a channel without using the Link Aggregation Control Protocol(LACP) or Port Aggregation Protocol (PAgP).• If your switch supports it, configure the aggregated ports to distribute the traffic usingsource and destination IP addresses.• If your switch can only distribute traffic based on source or destination MAC addresses,configure it to use the source MAC addresses. If it uses the destination MAC address todistribute the load, all the traffic flowing from the switch to the IPSO system over theaggregated link is sent to the primary port of the aggregation group.• You must configure the switch ports to have the same physical characteristics (link speed,duplicity, autoadvertise/autonegotiation setting, and so on) as the corresponding aggregatedports on the Nokia system.• On Cisco switches, trunking must be enabled if you create more than one tagged VLAN onan aggregated link. (You can configure as many as 1015 VLANs for an IPSO system.).• If you use IOS on a Cisco switch, trunking is enabled automatically.• If you run CatOS on a Cisco switch, use the following command to configure VLANtrunking on the EtherChannel:set trunk ports nonegotiate dot1q vlansConfiguring Link AggregationTo set up link aggregation in Network Voyager1. Physically configure the interfaces.2. Create the aggregation group.3. Logically configure the aggregation group.These steps are explained in the following sections.Nokia Network Voyager Reference Guide for IPSO 6.0 33

Link Aggregation• Enable lamemberActive traps• Enable lamemberInactive trapsNote<strong>IPSO</strong> does not use the standard IEEE8023-LAG-MIB to support link aggregation.Configuring Switches <strong>for</strong> Link AggregationObserve the following considerations when you configure a switch to support link aggregationin combination with a <strong>Nokia</strong> appliance:• You must configure the appropriate switch ports to use static link aggregation. (On Ciscoswitches, this means you must enable EtherChannel.) That is, if you aggregate four portsinto one group on your <strong>Nokia</strong> appliance, the four switch ports that they connect to muststatic link aggregation.• When you assign switch ports to an EtherChannel group, set the channel mode to on to<strong>for</strong>ce the ports to <strong>for</strong>m a channel without using the Link Aggregation Control Protocol(LACP) or Port Aggregation Protocol (PAgP).• If your switch supports it, configure the aggregated ports to distribute the traffic usingsource and destination IP addresses.• If your switch can only distribute traffic based on source or destination MAC addresses,configure it to use the source MAC addresses. If it uses the destination MAC address todistribute the load, all the traffic flowing from the switch to the <strong>IPSO</strong> system over theaggregated link is sent to the primary port of the aggregation group.• You must configure the switch ports to have the same physical characteristics (link speed,duplicity, autoadvertise/autonegotiation setting, and so on) as the corresponding aggregatedports on the <strong>Nokia</strong> system.• On Cisco switches, trunking must be enabled if you create more than one tagged VLAN onan aggregated link. (You can configure as many as 1015 VLANs <strong>for</strong> an <strong>IPSO</strong> system.).• If you use IOS on a Cisco switch, trunking is enabled automatically.• If you run CatOS on a Cisco switch, use the following command to configure VLANtrunking on the EtherChannel:set trunk ports nonegotiate dot1q vlansConfiguring Link AggregationTo set up link aggregation in <strong>Network</strong> <strong>Voyager</strong>1. Physically configure the interfaces.2. Create the aggregation group.3. Logically configure the aggregation group.These steps are explained in the following sections.<strong>Nokia</strong> <strong>Network</strong> <strong>Voyager</strong> <strong>Reference</strong> <strong>Guide</strong> <strong>for</strong> <strong>IPSO</strong> <strong>6.0</strong> 33

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!