PRIMERGY 10/40GbE Connection Blade 18/8+2 IBP Function...

PRIMERGY

PRIMERGY 10/40GbE Connection Blade 18/8+2

IBP (Intelligent Blade Panel)

Function Manual

FUJITSU

PRIMERGY Switchblade (10Gbps 18/8+2)

IBP Functions - Manual

2

Table of Contents

Chapter 1 Uplink-Set ................................................................................................................... 4

1.1 Functional outline of uplink-set ....................................................................................... 4

1.2 Default configuration of uplink-set .................................................................................. 4

1.3 LACP settings .................................................................................................................... 5

1.4 IGMP snooping/MLD snooping settings ......................................................................... 5

1.5 CEE settings ....................................................................................................................... 5

1.6 Points to note ..................................................................................................................... 5

1.7 Creation/ deletion of uplink-set ........................................................................................ 7

1.8 Addition/ deletion of uplink port ...................................................................................... 7

Chapter 2 Port backup ................................................................................................................ 8

2.1 Functional outline of port backup .................................................................................... 8

2.2 Enable/ Disable port backup............................................................................................. 8

2.3 Changing Failback time .................................................................................................... 9

2.4 Changes of Change Notify ................................................................................................ 9

2.5 Addition/ deletion of backup port .................................................................................. 10

2.6 Default configurations ..................................................................................................... 10

2.7 Precautions ...................................................................................................................... 10

Chapter 3 Linkstate ................................................................................................................... 11

3.1 Functional outline of linkstate ........................................................................................ 11

3.2 Linkstate operating example .......................................................................................... 12

3.3 Enable/ disable linkstate function .................................................................................. 14

3.4 About interlocking with the port backup ....................................................................... 14

3.5 Default setting .................................................................................................................. 14

3.6 Precautions ...................................................................................................................... 14

Chapter 4 Port group ................................................................................................................ 15

4.1 Functional outline of port group .................................................................................... 15

4.2 Frame handling of port group ........................................................................................ 16

4.3 Default configuration of port group ............................................................................... 17

4.4 Precautions for port group ............................................................................................. 17

4.5 Precautions for port group ............................................................................................. 17

4.6 Creation/deletion of port group ...................................................................................... 18

4.7 Addition/deletion of down link port ............................................................................... 18

Chapter 5 VLAN group .............................................................................................................. 19

5.1 Functional outline of VLAN group ................................................................................. 19

5.2 Functional outline of VLAN group (Native VLAN option) ............................................ 20

5.3 Frame handling of VLAN group ..................................................................................... 21

5.4 Frame handling of VLAN group (Native VLAN option) ................................................ 23

5.5 Default configuration ....................................................................................................... 25

5.6 Precautions ...................................................................................................................... 25



3

5.7 Creation/ deletion of VLAN group .................................................................................. 26

5.8 Addition/ deletion of downlink port ............................................................................... 26

5.9 Setting/ deletion of native VLAN option ........................................................................ 26

Chapter 6 Service LAN .............................................................................................................. 27

6.1 Functional Outline of service LAN ................................................................................. 27

6.2 Frame handling of service LAN ...................................................................................... 28


6.4 Precautions ...................................................................................................................... 30

6.5 Creation/ deletion of service LAN .................................................................................. 30

6.6 Addition/deletion of downlink port ................................................................................ 30

Chapter 7 Service VLAN ........................................................................................................... 31

7.1 Functional outline of service VLAN ............................................................................... 31

7.2 Frame handling of service VLAN ................................................................................... 32


7.4 Precautions ...................................................................................................................... 34

7.5 Creation/deletion of service VLAN ................................................................................. 34

7.6 Addition/ deletion of down link port .............................................................................. 34

Chapter 8 Spanning tree function............................................................................................ 35

Chapter 9 Linkaggregation function, mirror function............................................................ 35

Chapter 10 VLAN which can be used with IBP ....................................................................... 36

Chapter 11 Software relay ........................................................................................................ 37

Chapter 12 isolate option operation ........................................................................................ 39

Chapter 13 IGMP Snooping operation..................................................................................... 43

Chapter 14 Authentication function ........................................................................................ 44

Chapter 15 Default settings ...................................................................................................... 45



4

Chapter 1 Uplink-Set

1.1 Functional outline of uplink-set

The uplink-set has 1 or multiple collections of uplink port.

The uplink-set is an element which comprises of groups such as port group, service LAN and service

VLAN and uplink-set connects the customer's LAN to server blade.

The example when uplink-set "Group-A" and "Group-B" are composed in uplink port is shown below.

When the uplink-set is configured, this product is configured with linkaggregation internally.

The uplink-set "Group-A" of the above-mentioned example is a state in which linkaggregation is

configured in uplink port 0/19, 0/20 and 0/21. The uplink-set "Group-B" is a state in which

linkaggregation is configured in 0/26.

1.2 Default configuration of uplink-set

By default, uplink-set, named “default”, is defined.

0/1 Blade1

0/2 Blade2

0/3 Blade3

0/4 Blade4

0/5 Blade5

0/17 Blade17

0/18 Blade18

0/19

0/26

0/20

0/21

Uplink-Set Group-A

Uplink-Set Group-B

・

・

・

0/1 Blade1

0/2 Blade2

0/3 Blade3

0/4 Blade4

0/17 Blade17

0/18 Blade18

0/19

0/24

0/20

0/21

0/22

0/23

Uplink-Set default

0/26

0/25

・

・

・



5

1.3 LACP settings

When LACP (Link Aggregation Control Protocol) is enabled by uplink-set, Linkaggregation in the

uplink-set is starting to send the LACPPDU without any effects by its peer, and then it forms the

linkaggregation after negotiating peer switch. Therefore, the link is not up if there are some

mis-configuration or mis-connection, only the interfaces that are set correctly can be linkup.

1.4 IGMP snooping/MLD snooping settings

When IGMP snooping/MLD snooping is enabled in the uplink-set, IGMP snooping becomes enabled in

the port group, VLAN group, service LAN, service VLAN, that uses this uplink-set. Also, when the

uplink-set is shared among multiple groups, the IGMP snooping/MLD snooping is enabled in all the

groups which are shared.

When multiple groups are configured to IBP, if registration of multicast is done in the group in which

IGMP snooping/MLD snooping is enabled, For the group in which the IGMP snooping/MLD snooping is

disabled, operate as if IGMP snooping/MLD snooping is enabled for the frame which has the same

VLAN ID and, same Multicast address as the registered multicast. When same VLAN ID and same

multicast address is used by multiple groups, the IGMP snooping/MLD snooping settings should be

same for all the using groups.

1.5 CEE settings

When CEE is set to enable in the uplink-set, CEE function becomes enabled in the port group that uses

this uplink-set. When CEE is enabled in port group CEE becomes enabled in all the port groups which

are assigned to that port group. Moreover, the CEE function is not supported in VLAN group, service

LAN, and service VLAN.

1.6 Points to note

Since the up-link set configures linkaggregation, when uplink-set and corresponding device is

connected, connect the uplink port that is attached to the same uplink-set with the same

corresponding device.



6

0/1 Blade1

0/2 Blade2

0/3 Blade3

0/4 Blade4

0/5 Blade5

0/6 Blade6

0/7 Blade7

0/8 Blade8

0/17 Blade17

0/18 Blade18

Uplink-Set test

Uplink-Set test2

external switch A

external switch B

external switch C

OK

Wrong

setting ・

・



7

1.7 Creation/ deletion of uplink-set

When uplink set is created, any uplink ports are not included in that uplink-set. When the uplink-set is

deleted in the state where uplink port is included in the uplink-set, the included uplink port does not

belong to any of the uplink-set and changes to Disable state. The uplink-set named "default" is created

by default and this must exist and cannot be deleted.

Maximum number of uplink-set that can be defined is 18.

1.8 Addition/ deletion of uplink port

Only uplink port can be added to the uplink-set. Downlink port cannot be added. Maximum number of

uplink ports that can be added is 8.

An uplink port can be assigned to the any uplink-set. However, uplink port that is already included in

the uplink-set cannot be assigned to any other uplink-set. When uplink port which is already included

in the uplink-set is to be assigned to the other uplink set, it should be deleted from the uplink set

where it already exists and should be assigned to the other created uplink-set.



8

Chapter 2 Port backup

2.1 Functional outline of port backup

Port backup divides uplink ports, assigned to the uplink-set, into 2 groups. One port out of 2 groups is

considered as active port (Active linkaggregation) and other one is considered as backup port (Backup

linkaggregation) and either group can be activated (Operated) as the other can be backup port at the

same time. When the port backup function is used, if active ports in the uplink-set are all linked down,

the effect of network error can be brought under control at once by switching to the group of stand-by

backup port. While active port is in operation, backup port is in the stand-by mode and cannot

communicate and the link status of it is ‘Linked up’.

Link down all the active ports and switching to the backup ports is called as Failover. After that link up

the active ports and switching from backup ports to active ports is called as Failback.

When port backup is enabled, Failback is executed automatically and ‘No Failback’ cannot be set.

2.2 Enable/ Disable port backup

By default port backup of uplink-set is ‘disabled’. When port backup is to be used in the uplink-set,

after specifying the name of uplink-set, port backup is enabled.

When active ports and backup ports are defined in the uplink-set, the operation that disables the

function of port backup is used only to disable the port back function. It cannot be used to switch over

from backup port to active port. Concretely, when uplink-set is in the state where it is configured by

active linkaggregation and backup linkaggregation, the backup function cannot be operated and

backup linkaggregation can be used as normal linkaggregation.

0/1 Blade1

0/2 Blade2

0/3 Blade3

0/4 Blade4

0/5 Blade5

0/6 Blade6

0/7 Blade7

0/8 Blade8

0/17 Blade17

0/18 Blade18

Active Linkaggregation

Backup Linkaggregation

Failover Failback

external switch B

external switch A

・



9

2.3 Changing Failback time

After executing Failover by port backup, Failback is executed when active ports are linked up again.

Time starting from link up the active ports till Failback is called as Failback time. Specify the uplink-set

when you change Failback time.

2.4 Changes of Change Notify

When operation port is switched due to Failover/Failback by port backup, set whether to send the MAC

learning frame for external switch that is connected to the side, which has newly become as an

operation port.

Following configuration is assumed for the sending of MAC learning frame.

Since operation port is ‘Active’ when linked up to both active port and backup port; the frame is

broadcasted like red arrow (→) as shown in the following figure. In addition, MAC of Blade 1, 2, 3 is

studied from switch A, Switch B. At this time, link down should be generated and operation port

should switch to backup side and the frame should be broadcasted like blue arrow (→). Unless the

frame is sent from the Blade side, the MAC learning table of switch B is not updated. Hence, the frame

from switch C is broadcasted and discarded in switch A. Here, learning table of switch B can be

changed after generating the ‘switching’ by enabling this function. In addition, broadcasting

destination of the frame can be switched to the backup side.

The frame for MAC learning is sent by using and broadcasting LLC(TEST) frame towards the adjacent

switches.

0/1 Blade1

Active LAG

Backup LAG Switch B

Switch A

0/2 Blade2

0/3 Blade3

0/4 Blade4 Switch C

The learning of the MAC

port 0/1-0/3

0/1 Blade1

Active LAG

Backup LAG Switch B

Switch A

0/2 Blade2

0/3 Blade3

0/4 Blade4 Switch C

Change MAC learning port of

port 0/1-0/3

Failover

Frame



10

2.5 Addition/ deletion of backup port

When uplink port is added to the uplink-set, uplink port automatically becomes active irrespective of

port backup being enabled or disabled.

Specify a port to add uplink port which is an active port to the backup port and set it to backup port.

However, all the uplink ports in the uplink-set cannot be set into the backup port.

Deletion of backup port changes the uplink port from backup port to active port.

2.6 Default configurations

When uplink-set is newly created, by default, the port backup is set to ‘disabled’ and all the uplink

ports assigned to the uplink set are active ports. Moreover, Failback time is set to 60 seconds, when

port backup is enabled in the uplink-set port and ‘Send learning frame’ is set for ‘Change Notify’.

2.7 Precautions

When port backup is enabled there is no restriction on the frequency of the failover and failback.

Active port and the backup port are switched according to the situation.

At the time of device start up and cable connection, and when the backup port is linked up previously,

the backup port operates temporarily, however, the operation port switches to an active port after the

failback time passes.



11

Chapter 3 Linkstate

3.1 Functional outline of linkstate

The linkstate is a function to link down all the downlink ports of the group (port group, VLAN group,

service LAN, and service VLAN) which includes the uplink-set, when the port in the uplink-set are all

linked down.

Because Downlink port which is interlocking with link down of uplink port changes to Offline status

and then link down, OS in server blade detects the link down with NIC on the blade and OS can switch

the communication to other switch blade. Therefore, this function is useful when 2 switch blades are

installed in the blade server.

0/1 Blade1

0/2 Blade2

0/3 Blade3

0/4 Blade4

0/5 Blade5

0/6 Blade6

・

・

0/17 Blade17

0/18 Blade18

external switch

Link down occurs

Link down all the downlink ports of the group



12

3.2 Linkstate operating example

Example of operation of linkstate in every configuration is shown.

In the uplink set in the example, all linkstate are enabled.

A Portgroup configuration example.

When the port group is configured like the figure given below, downlink port 0/1 - 0/5 of the port

group which includes relevant uplink-set changes to Offline status, if the Uplink Set 1 is linked down.

Similarly, when the link down is generated in the Uplink Set 2, downlink port 0/6 - 0/8 changes to

Offline status.

B VLAN group configuration example

When the VLAN group is configured like the figure given below, downlink port 0/1 - 0/5 of VLAN group

which includes relevant uplink-set changes to Offline status if the Uplink Set 1 is linked down. Similarly,

when the Uplink Set 2 is linked down, downlink port 0/6 - 0/10 changes to Offline status.

0/1 Blade1

0/2 Blade2

0/3 Blade3

0/4 Blade4

0/5 Blade5

0/6 Blade6

0/7 Blade7

0/8 Blade8

Uplink Set 1

Uplink Set 2

Port Group 1

Port Group 2

0/18 Blade18

0/17 Blade17

・

0/1 Blade1

0/2 Blade2

0/3 Blade3

0/4 Blade4

0/5 Blade5

0/6 Blade6

0/7 Blade7

0/8 Blade8

0/9 Blade9

0/10 Blade10

Uplink Set 1

Uplink Set 2

VLAN Port Group 1

VLAN Port Group 2

VLAN Port Group 3

VLAN Port Group 4

0/18 Blade18



13

C Service LAN configuration example

As shown in the figure below, Uplink Set 1 is assigned to VLAN group, Uplink Set 2 is assigned to port

group and Uplink set 3 is assigned to service LAN. In this case, when the linkdown is generated by

Uplink Set 3, downlink port 0/3, 0/6 - 0/9 changes to Offline status.

D Service VLAN configuration example

As shown in the figure below, Uplink Set 1 is assigned to VLAN group and Service VLAN 1 and Uplink

Set 2 is assigned to port group and Service VLAN 2. In this case, when linkdown is generated by Uplink

Set 1, downlink port 0/1 - 0/7, 0/10 changes to Offline status. Similarly, when linkdown is generated in

Uplink Set 2, downlink port 0/6 - 0/10 changes to Offline status.

0/1 Blade1

0/2 Blade2

0/3 Blade3

0/4 Blade4

0/5 Blade5

0/6 Blade6

0/7 Blade7

0/8 Blade8

0/9 Blade9

0/10 Blade10

Uplink Set 1

Uplink Set 2

Uplink Set 3

Service LAN

VLAN Port Group 1

VLAN Port Group 2

VLAN Port Group 3

Port Group 1

0/18 Blade18

0/1 Blade1

0/2 Blade2

0/3 Blade3

0/4 Blade4

0/5 Blade5

0/6 Blade6

0/7 Blade7

0/8 Blade8

0/9 Blade9

0/10 Blade10

Uplink Set 1

Uplink Set 2

Service VLAN 2

Service VLAN 1

VLAN Port Group 1

VLAN Port Group 2

VLAN Port Group 3

Port Group 1

0/18 Blade18



14

3.3 Enable/ disable linkstate function

When the setting of linkstate is changed, uplink-set is specified. When the link state is set to enable,

the downlink port interlocks with the link state of uplink-set. It does not interlock when set to

disabled.

3.4 About interlocking with the port backup

It is possible to use by interlocking the linkstate function with port backup by uplink set. In case where

both port backup and link state are set to enable by uplink-set, linkdown is done by downlink port by

linkstate function when active linkaggregation and backup linkaggregation of uplink-set related to

the downlink port are linked down together.

3.5 Default setting

When the uplink-set is newly created, linkstate is enabled in default.

3.6 Precautions

When the port backup and linkstate are set to enable at the same time, switching from the linkstate

to the backup port is previously executed. After that, backup port of port backup is linked down.

Linkdown of downlink port is done after active port and backup port are linked down together.

The downlink port where link down was done by linkstate function automatically changes to Enable

status and is linked up, if the uplink-set is linked up again.

When the downlink port is assigned to multiple groups such as port group and service LAN, downlink

port become a group and uplink-set become multiple. In this case, if either of uplink-set is linked

down, downlink port changes to Offline status. The uplink-set that becomes a group are all linked up

in the Enable status.

When LACP is enabled in uplink-set and when it is connected with the switch wherein LACP does not

operate, downlink port changes to Offline status by the linkstate function even though it is in linked

up state.



15

Chapter 4 Port group

4.1 Functional outline of port group

Port group is a collection of ports divided logically in the switchblade.

The port group is formed from group of multiple downlink ports and single uplink-set.

In the port group, communication is possible between downlink port and uplink set assigned to group.

The port in the port group cannot communicate between other (VLAN) port groups.

The above figure is an example in which 3 port groups are defined which are divided into 3 in the

switchblade. When there is communication only between the serverblade, the group configuration

which does not include the uplink-set like "Port Group 3" can be created. The group wherein such an

uplink-set is not included can be enabled as port group. It cannot be enabled in VLAN group, service

LAN and service VLAN.

0/1 Blade1

0/2 Blade2

0/3 Blade3

0/4 Blade4

0/5 Blade5

0/6 Blade6

0/7 Blade7

0/8 Blade8

0/9 Blade9

0/10 Blade10

0/19

0/24

0/20

0/21

0/22

0/23

Port Group 1

Port Group 2

Port Group 3 0/25

0/26

0/18 Blade18



16

4.2 Frame handling of port group

The port group can transmit and receive untagged frame and tagged frame.

When untagged frame is received by input port, it is transmitted by output port in untagged frame.

When tagged frame is received by the input port, it is transmitted in tagged frame tagged in VLAN ID

of the received frame.

Input port Transfer/

Cancellation

Output port

Uplink → downlink Untagged Transfer Untagged

Tagged Transfer Tagged

Downlink →downlink Untagged Transfer Untagged


Downlink →Uplink Untagged Transfer Untagged


[Caution]

When the port group receives the tagged frame of VLAN ID = 1006-1024 in the input

port, the frame is cancelled.

When the port group receives the tagged frame of VLAN ID = 0 in the input port, the

frame is cancelled.

untag

tag (VID=10) tag (VID=10)

untag

untag

tag (VID=10) tag (VID=10)

untag

Uplink→Downlink Downlink→Downlink

Downlink→Uplink

Port Group 1

Port Group 2

Port Group 1

Port Group 2



17

4.3 Default configuration of port group

The status in the default is that, the uplink set "default” has all the uplink ports and the port group

"default" is configured by all downlink ports.

4.4 Precautions for port group

When multiple port groups are configured, the frame of {vid, mac} is received in the port group of one

side. If the frame for {vid, mac} is to be relayed in other port group, when relayed to port of another

port group, as in the operational outline in the following figure, the frame is cancelled. Since the port

group is different. Therefore in each port group the usable {vid, mac} should be unique in the entire

device

4.5 Precautions for port group

VLAN ID=1006-1023 is assigned to the Default VLAN ID of the port assigned to the port group

according to the definition of the port group. As for the port assigned to the port group "default", VLAN

ID=1006 is assigned and VLAN ID=1007-1023 is assigned in order in which the definition of port group

is added.

0/1 Blade1

0/2 Blade2

0/3 Blade3

0/4 Blade4

0/5 Blade5

0/6 Blade6

0/7 Blade7

0/8 Blade8

0/17 Blade17

0/18 Blade18

0/19

0/24

0/20

0/21

0/22

0/23

Uplink-set default

Port group default

0/25

0/26

・

An expected behavior Operation Overview

{vid, mac}

for{vid, mac}

×osition

port-group A

port-group B

{vid, mac}

for{vid, mac} Forward

port-group A

port-group B



18

4.6 Creation/deletion of port group

When port group is created, downlink port and uplink-set is not included in the concerned port group.

When the port group communicates only between downlink ports, uplink-set is not required, therefore

it need not be assigned. When uplink-set is assigned, specification is executed at the time of creating

port group or after creating it. However, when uplink-set is already assigned to port group, VLAN group,

and service LAN, excluding service VLAN, that uplink-set cannot be specified.

When port group is deleted, the assigned down link port and uplink-set are released from the port

group.

Though it is possible to change from the uplink-set that has been already assigned to other uplink-set,

at the time of releasing uplink-set from the port, only uplink-set cannot be released. When uplink port

is released from the port group, the port group needs to be deleted once. Also, port group "default"

that is created by default, should exist and it cannot be deleted. At the time of releasing uplink set

from the port, only uplink-set cannot be released.

The maximum number of port groups that can be defined is 18.

4.7 Addition/deletion of down link port

When down-link port is added to the port group, the downlink port not assigned to other (VLAN) port

group is specified. When the downlink port that has already been assigned to other (VLAN) port group,

is added to a different port group, it is added after once deleting the downlink port from the (VLAN)

port group.

(The operation differs from up-link set.)



19

Chapter 5 VLAN group

5.1 Functional outline of VLAN group

Port group cannot share the uplink-set in the port group where as VLAN group can share uplink-set in

the VLAN group.

To share the uplink-set, VLAN ID is assigned into each VLAN group and frame on uplink-set to be

shared are tagged and identified by the VLAN ID of VLAN group. VLAN ID assigned in VLAN group must

be unique in the VALN group wherein uplink-set is to be shared. However, in this product unique VLAN

ID is not required.

The assigned VLAN group is not shared between VLAN groups and it is single in the down-link port.

Moreover, in the port group, uplink-set, downlink ports are not shared together.

In the above figure, the example shows 5 VLAN groups that are defined in this product. VLAN Group 1,

2, 3 share same uplink-set and in the same way, VLAN group 4, 5 share same uplink-set.

0/1 Blade1

0/2 Blade2

0/3 Blade3

0/4 Blade4

0/5 Blade5

0/6 Blade6

0/7 Blade7

0/8 Blade8

0/9 Blade9

0/10 Blade10

0/19

0/24

0/20

0/21

0/22

0/23

VLAN Group 1 (VLAN ID 10)




VLAN Group 5 (VLAN ID 40) 0/25

0/26 0/18 Blade18



20

5.2 Functional outline of VLAN group (Native VLAN option)

When a frame is received in the uplink-set of VLAN group, if it is an untagged frame, it cannot be

identified that it is from which VLAN group. Therefore, a tagged frame should be transmitted. If

untagged frame is arrived in the uplink-set, VLAN group cannot be identified and that frame is

discarded.

Native VLAN option modifies this ‘Discard’ operation and assigns VLAN group to the untagged frame.

Native VLAN option can be defined in 1 VLAN group out of the VLAN groups where same uplink-set is

shared. When native VLAN option is set, untagged packet in the uplink port is not discarded and

handled as frame of assigned VLAN group and transmitted into that particular VLAN group.

However, when native VLAN option is set, frames tagged by VLAN ID of assigned VLAN group are

discarded.

In the following example, native VLAN option is set in VLAN group2. In this case, untagged frames

arrived in Uplink Set1 are transmitted to VLAN Group 2 as the frames of VLAN Group2. Since Native

VAN is not set in VLAN Group 4, 5, tagged frames of Uplink Set 2 are discarded.

0/1 Blade1

0/2 Blade2

0/3 Blade3

0/4 Blade4

0/5 Blade5

0/6 Blade6

0/7 Blade7

0/8 Blade8

0/9 Blade9

0/10 Blade10






10 Tagged

Untagged (Forward)

10 Tagged

40 Tagged

30 Tagged

Untagged

(Drop)

Uplink Set 1 (with Native VLAN Option)

Uplink Set 2 (without Native VLAN Option)

* Native VLAN Option

0/18 Blade18



21

5.3 Frame handling of VLAN group

In the VLAN group, tagged frames are sent and received to the uplink side and untagged frames are

sent and received in the downlink side.

In communication from the uplink to downlink, tagged frame attached with the tag of VLAN ID

defined in VLAN group that includes that uplink-set from the input port is received. If untagged frames

are received, those frames are discarded. Received frame is transmitted into the VLAN group that

matches with the VLAN ID of the frame and sent to output port as untagged frame.


Cancellation

Output port

Uplink → downlink Untagged Cancellation -

Tagged

(VID＝VLAN Group)

Transfer Untagged

Tagged

(VID≠VLAN Group)

Cancellation -

Uplink→Downlink

Tagged (VID=10)

Tagged (VID=20)

Tagged (VID=30)

Untagged ×ntagged

Untagged

Untagged

Untagged

VLAN Group 1 (VID=10)



Tagged (VLAN Port Group ≠ VID) ×agged (



22

In the communication from downlink to downlink, from downlink to uplink, untagged frames are

received from the input port. If the frame is tagged, VLAN ID of that frame is discarded although it is

matched with the VLAN ID of the VLAN group. Received frames are transmitted into the VLAN group

that includes the port that has received the frames and when output port is downlink port untagged

frames and when it is an uplink port frames tagged with the VLAN ID of that particular VLAN group is

sent to the output port.


Cancellation

Output port

Downlink →downlink Untagged Transfer Untagged

Tagged Cancellation -

Downlink →Uplink Untagged Transfer Tagged

(VID＝VLAN Group)

Tagged Cancellation -

Downlink→Downlink

Downlink→Uplink

Tagged (VID=10)

Tagged (VID=20)

Tagged (VID=30)

Untagged

Untagged

Untagged

VLAN Port Group 1 (VID=10)



×osition Tagged

×aggedon Tagged

×aggedon Tagged

Untagged

Untagged

Untagged



23

5.4 Frame handling of VLAN group (Native VLAN option)

Native VLAN option modifies the operation when untagged frames are received in uplink port. When

native VLAN option settings are enabled, untagged frames discarded in the uplink port till now are

transmitted into the VLAN group. However, in the VLAN group wherein native VLAN option is enabled,

tagged frames transferred till now are discarded.

Native VLAN option modifies the operation of untagged frames in the uplink port and for this purpose

it can be set to ‘enable’ for any 1 VLAN group out of VLAN groups wherein uplink set is shared.


Cancellation

Output port

Uplink → Downlink Untagged Transfer

(Native VLAN

option)

Untagged

Tagged

(VID＝Native VLAN Option)

Cancellation -

Tagged

(VID＝VLAN Group)

Transfer Untagged

Tagged

(VID≠VLAN Group)

Cancellation -

Uplink→Downlink

Tagged (VID=10)

Tagged (VID=20)

Tagged (VID=30)

Untagged

×ntagged Untagged

Untagged

Untagged


with Native VLAN option





24

In the communication from downlink to uplink, untagged frames are received from the Input port.

Received frames are transmitted in the VLAN group that comprise of the port that has received the

frames. If VLAN group is a VLAN group wherein native VLAN option is set, untagged frames and if other

than VLAN group, frames tagged with the VLAN ID of that group are sent into the output port.


Cancellation

Egress port

Downlink → Uplink Untagged Transfer Untagged

(Native VLAN option)

Untagged Cancellation Tagged (VID＝VLAN Group)

Tagged Transfer -

[Remarks]

Native VLAN option is not effective for communication from downlink to downlink. Refer to handling of

‘From downlink to downlink of VLAN group’.

Downlink→Uplink

Tagged (VID=20)

Tagged (VID=30)

Untagged

Untagged

Untagged



×osition Tagged

×aggedon Tagged

×aggedon Tagged

Untagged


with Native VLAN option



25

5.5 Default configuration

VLAN group is not defined by default.

5.6 Precautions

When native VLAN option is defined, in the uplink-set of VLAN group wherein native VLAN is set,

frames tagged by the VALN ID of such VLAN group are discarded. Frames of VLAN group wherein native

VLAN option is set are communicated as untagged frames.

When multiple VLAN groups that have same VLAN ID is configured and if same MAC address is used in

each VLAN group, the frames may get discarded. (Refer precautions of port group)



26

5.7 Creation/ deletion of VLAN group

In the state of ‘created VLAN group’, downlink port is not included in that particular VLAN group. When

creating a VLAN group, uplink-set must be specified and ‘uplink-set not included’ configuration cannot

be defined. When uplink-set is not required, use the port group.

At the time of creation, uplink-set to be specified can be assigned beforehand to the VLAN group and

service VLAN. However, uplink-set already assigned in the port group and service LAN cannot be

specified.

Moreover, use different VLAN ID in the VLAN group that shares the same uplink-set.

When VLAN group is deleted, assigned downlink port and uplink set are released from the VLAN group.

After creating a VLAN group, already assigned uplink-set cannot be changed to different uplink-set.

When uplink-set is to be changed, VLAN group is deleted once.

18 VLAN groups can be defined

Creation/deletion operation of VLAN group does not block communication of other VLAN groups that

use same uplink-set or other uplink-set.

5.8 Addition/ deletion of downlink port

When downlink port is added to the VLAN group, specify the downlink port that is not assigned to the

other (VLAN) port group. When the downlink port already assigned to the other (VLAN) port group is

added to another VLAN group, the downlink port is added after deleting once from the (VLAN) port

group.

5.9 Setting/ deletion of native VLAN option

Since VLAN group is assigned in untagged frames in the uplink-set, native VLAN option can be set in

one of the VLAN groups that share the same uplink group.

Cancellation of native VLAN option changes the process in the uplink-set of VLAN group wherein native

VLAN option is set. (Returns to default operations). Definition of VLAN group is not deleted.



27

Chapter 6 Service LAN

6.1 Functional Outline of service LAN

Service LAN is a group definition for the normal communication broadcasted from the groups defined

in the port groups or VLAN groups. Other than that, it is a group definition for communication to

manage the server. Service LAN is configured either in the dedicated uplink-set on the uplink side or

port group on the downlink side or into the port belonging to the VLAN group.

Service LAN is defined in downlink port by overlapping with the other group. Therefore, frame on

downlink side is a frame tagged with VLAN ID for service LAN to distinguish it from other group. On the

other hand, frame on uplink-set side, is an untagged frame as service LAN dedicated use. VLAN ID

used in service LAN must be unique in the VLAN group that shares defined service LAN, service VLAN

and downlink.

0/1 Blade1

0/2 Blade2

0/3 Blade3

0/4 Blade4

0/5 Blade5

0/6 Blade6

0/7 Blade7

0/8 Blade8

0/9 Blade9

0/10 Blade10

Uplink Set 1

Uplink Set 2

Uplink Set 3

Service LAN

VLAN Group 1

VLAN Group 2

VLAN Group 3

Port Group 1

0/18 Blade18



28

6.2 Frame handling of service LAN

Service LAN executes sending and receiving of untagged frames on uplink side and tagged frames on

downlink side. Uplink side uses uplink-set of service LAN dedicated and downlink is shared with the

group such as port group and VLAN group. Therefore, in the port group and VLAN group wherein

service LAN and downlink are shared, frames tagged with the VLAN ID of service LAN in other than the

port assigned into the service LAN are not used and discarded.

In the communication from uplink to downlink, untagged frames are received from the input port. If

tagged frames are received, those frames are discarded. The received frames are transmitted into

service LAN and are sent as tagged frames assigned to the service LAN in the output port.


Cancellation

Output port

Uplink → Downlink Untagged Transfer Tagged

(VID＝Service LAN)

Tagged

(VID＝Service LAN)

Cancellation -

Tagged

(VID≠Service LAN)

Cancellation -

Untagged

Uplink→Downlink

Port Group 1

Service LAN (VID=4093)

Port Group 2

Tagged x (Drop)

Tagged (VID=4093) x (Drop)


Tagged (VID=4093)

Tagged (VID=4093)

Tagged (VID=4093)



29

In the communication from downlink to downlink and downlink to uplink, tagged frames assigned to

service LAN from input port are received. Frames tagged with VLAN ID of other than untagged frames,

service LAN is processed as frames of other said group definitions. Received frames are transmitted in

the service LAN. In output port, in communication from downlink to uplink port untagged frames are

sent. In the communication from downlink to downlink, tagged frames are sent.

Input port Transfer/Cancellation Output port

Downlink → Downlink Untagged N/A N/A

Tagged

(VID＝Service LAN)

Transfer Tagged

(VID＝Service LAN)

Tagged

(VID≠ Service LAN)

N/A N/A

Downlink → Uplink Untagged N/A N/A

Tagged

(VID＝Service LAN)

Transfer Untagged

Tagged

(VID≠ Service LAN)

N/A N/A

Untagged

Downlink→Downlink

Port Group 1

Service LAN (VID=4093)

Port Group 2

Tagged (VID=4093)



Downlink→Uplink

Tagged (VID=4093)

Tagged (VID=4093)



30


Service LAN is not defined in default.

6.4 Precautions

When the tagged frame is received, the uplink-set of service LAN cancels that frame to communicate

with untagged frame.

The isolate setting of service LAN is disabled and the port assigned to service LAN has multiple port

groups. As for the definition which includes the VLAN group, the performance is limited in order to

execute the relay processing of the switch with software.

6.5 Creation/ deletion of service LAN

When service LAN is created, VLAN ID of tagged frame which is transmitted and received by the

downlink port and the dedicated application set are specified. The downlink port is not assigned to the

service LAN in the state in which service LAN is created. VLAN ID specified at the time of creation

cannot use the ID assigned to other service LAN and service LAN.

When service LAN is deleted, assigned uplink-set is released. When the downlink port is assigned to

the group other than service LAN, it remains in that group. And, when it does not remain in the group

other than service LAN, it changes to Disabled status. After service LAN is defined, VLAN ID and the

uplink-set cannot be changed. In case it is changed, it is necessary to delete the service LAN once and

redefine.

The maximum number of definitions of the service LAN is 17.

6.6 Addition/deletion of downlink port

When the downlink port is assigned to service LAN, the downlink port is accepted, even if it is already

included in the port group, VLAN group, service LAN and service VLAN.

When the downlink port is to be deleted from the service LAN, specify the service LAN from which it is

to be deleted and then delete it.



31

Chapter 7 Service VLAN

7.1 Functional outline of service VLAN

Same as in service LAN, service VLAN is a group definition to carry out the communication by which

server blade is managed and it is possible to define the server VLAN by sharing the uplink-set with

port group or VLAN group against the service LAN which needs the dedicated uplink-set.

Service VLAN is defined by overlapping with other groups by the downlink port. Therefore, in order to

distinguish from other groups, the frame on the downlink port side is a tag frame tagged with VLAN ID

for service VLAN. It is a tagged frame because it overlaps with the port group or the VLAN group for the

uplink port side. VLAN ID which is to be used for service VLAN should be unique between VLAN groups

which share predefined service LAN, service VLAN and uplink-set/downlink.

First of all, it is an example when downlink port of service VLAN is shared with downlink port of port

group and downlink port of VLAN group is shown.

After that, it is an example when uplink-set of service VLAN is shared with uplink-set of port group and

uplink-set of VLAN group respectively is shown. As for this configuration, in order to carry out the relay

processing with software, the number of definitions and performance are limited (Refer to the

precautions given below).

0/2 Blade2

0/3 Blade3

0/4 Blade4

0/5 Blade5

0/6 Blade6

0/7 Blade7

0/8 Blade8

0/9 Blade9

0/10 Blade10

Uplink Set 1

Uplink Set 2

Service VLAN

VLAN Group 1

VLAN Group 2

VLAN Group 3

Port Group 1 ：Port Group、VLAN Port Group

：Service VLAN

Uplink Set 3

0/18 Blade18

0/1 Blade1

0/1 Blade1

0/2 Blade2

0/3 Blade3

0/4 Blade4

0/5 Blade5

0/6 Blade6

0/7 Blade7

0/8 Blade8

0/9 Blade9

0/10 Blade10

Uplink Set 1

Uplink Set 2

Service VLAN 2

Service VLAN 1

VLAN Port Group 1

VLAN Port Group 2

VLAN Port Group 3

Port Group 1 ：Port Group、VLAN Port Group

：Service VLAN

0/18 Blade18



32

7.2 Frame handling of service VLAN

Service VLAN is transmitted and received with the tagged frame on the uplink side and also on the

downlink side. Uplink-set shared with port group or VLAN group is used on both uplink side and

downlink side. Therefore, the tag frame tagged in VLAN ID of the service VLAN excluding the port

assigned to service VLAN cannot be used and is cancelled in port group and VLAN group shared with

service VLAN.

The tag frame tagged in VLAN ID assigned to service VLAN by the input port is received from the uplink

in the downlink communication. The tag frame tagged in VLAN ID other than untagged frame and

service VLAN is processed as a frame of another relevant group definition. The received frame is

forwarded in service VLAN and is transmitted in output port with the tag frame tagged in VLAN ID

assigned to service VLAN.


Uplink → Downlink Untagged N/A N/A

Tagged

(VID＝Service VLAN)

Transfer Tagged

(VID＝Service

VLAN)

Tagged

(VID ≠ Service

VLAN)

N/A N/A

Tagged (VID=4094)

Uplink→Downlink Port Group 1

Service VLAN (VID=4094)

Port Group 2



Tagged (VID=4094)

Tagged (VID=4094)

Tagged (VID=4094)

Port Group 3



33

In downlink to downlink, downlink to uplink communication, the tagged frame with tag is received by

the VLAN ID assigned to the service VLAN in the input port. Frame without tag and the tagged frame

with tag of VLAN ID other than service VLAN, is treated as a frame of different corresponding group

definition. The received frame is sent by tagged frame of VLAN ID assigned to service VLAN in the

output port transferred in the service VLAN.


Downlink → Downlink Untagged N/A N/A

Tagged

(VID = Service VLAN)

Transfer Tagged

(VID ＝Service

VLAN)

Tagged

(VID≠ Service

VLAN)

N/A N/A

Downlink → Uplink Untagged N/A N/A

Tagged

(VID＝Service VLAN)

Transfer Tagged

(VID ＝Service

VLAN)

Tagged

(VID ≠ Service

VLAN)

N/A N/A

Tagged (VID=4094)

Downlink→Uplink

Port Group 1

Service VLAN (VID=4094)

Port Group 2



Tagged (VID=4094)

Port Group 3


Downlink→Downlink

Tagged (VID=4094)

Tagged (VID=4094)



34


Service VLAN is not defined in the default.

7.4 Precautions

Uplink- set of service is shared with VLAN Port group or VLAN group and port assigned to service VLAN

limits the efficiency required for execution of relay process in the switch by software for the definition

which includes multiple port group and VLAN group. When the performance is necessary, enable the

‘isolate’ settings by using the service LAN or by using the independent uplink-set which is not assigned

to the port group and VLAN group in the uplink set of service VLAN.

7.5 Creation/deletion of service VLAN

At the time of creation of service VLAN, uplink-set, the VLAN ID of the tagged frame sent received by

the downlink port and uplink-set is specified. The down-link port is not assigned to the service VLAN

when the service VLAN is created. The VLAN ID specified at the time of creation, does not use the ID

already assigned to the service LAN and service VLAN.

The assigned uplink-set is released when service VLAN is deleted. When the downlink port is assigned

to a group other than service VLAN, it is always included in that group. It changes to ‘Disabled’ when

not included in group other than service VLAN. After defining the service VLAN, VLAN ID, uplink-set

cannot be changed.

If it is to be changed, delete the service VLAN once and redefine it.

The maximum number of service VLAN that can be defined is 1000.

7.6 Addition/ deletion of down link port

When downlink port is assigned to the service VLAN, the down-link port can already be included in

port group, VLAN group, service LAN, and service VLAN.

When the downlink port is to be deleted from the service VLAN, Specify the service VLAN to be deleted

and carry out deletion.



35

Chapter 8 Spanning tree function

When using uplink-port in the IBP, it should be handled as 1 port in the uplink-set, and loop

configuration is not generated so that only 1 uplink-set should be included in the port group/VLAN

group. Therefore, the spanning tree function is not supported.

Chapter 9 Linkaggregation function, mirror function

Linkaggregation or the mirror function can be set in individual ports in IBP.

The port which can be set in linkaggregation and the mirror port are shown below.

Settings to uplink port

Setting items Status of uplink port

Assigned to uplink-set Not assigned to uplink-set

Linkaggregation Settings not possible Settings possible

Mirror Settings not possible Settings possible

Settings to downlink port

Setting items Status of downlink port

Assigned to uplink-set Not assigned to uplink-set

Linkaggregation Settings possible Settings possible

Mirror Settings not possible Settings possible

However, the uplink port and the downlink port cannot be set in the same group for linkaggregation.

In addition, when linkaggregation is configured at the downlink port, it should be assigned to the

same port group or VLAN group.

Also, various settings of the linkaggregation (mode, algorithm) can be changed only in

linkaggregation individually set in the port. Settings cannot be changed in linkaggregation used in

the uplink-set.



36

Chapter 10 VLAN which can be used with IBP

VLAN which can be used with IBP is shown below.

VLAN Port group VLAN group Service LAN Service VLAN

1 enable enable enable*2 enable*2

2-1005 enable enable enable*2 enable*2

1006-1023*1 Tag frame

cancellation

Command error

Tag frame

cancellation

Command error

Tag frame

cancellation

Command error

Tag frame

cancellation

1024*1 Tag frame

cancellation

Command error

Tag frame

cancellation

Command error

Tag frame

cancellation

Command error

Tag frame

cancellation

1025-4093 enable enable enable*2 enable*2

4094 enable enable enable*2 enable*2

*1 As the range of VLAN ID 1006 ~1024 are used by IBP system, it cannot be used.

*2 VLAN ID which can be specified with Service LAN and Service VLAN is limited to the one not

specified in defined Service LAN and Service VLAN.



37

Chapter 11 Software relay

When the definition of the service LAN, service VLAN has a port which is assigned to multiple port

group, multiple VLAN group, port group, and VLAN group, for the frame of this service LAN and service

VLAN, the relay processing is done with software.

The conditions which become software relay are as follows.

Group Type Condition Configuration Example

Service LAN Isolate option is disabled Configuration Example 1

Service VLAN The uplink-set is shared by port group and VLAN

group

Configuration Example 2

The 'isolate' option is disabled when the

uplink-set is only for service VLAN

Configuration Example 3

構成例 1

port-group A

port-group B

uplinkdownlink

svc-lan Aisolate disable

構成例 3

port-group A

vlan-group B

uplinkdownlink

svc-vlan Bisolate disable

構成例 2

vlan-group A

vlan-group B

uplinkdownlink

svc-vlan Aisolate enable or disable

1. svc-lanをisolate enableに変更 1. svc-vlanのuplinkを専用ポートに変更2. svc-vlanをisolate enableに変更

1. svc-vlanをisolate enableに変更

Hardware中継に変更するには？

(default設定) (default設定)(default設定)

Service LAN, service VLAN that crosses over the port group, VLAN group has a group definition for

management, therefore it is preferable to assign the uplink port for exclusive use. In addition, there is

a security problem in carrying out the communication between the downlink ports of different groups.

Therefore it is necessary to set it in such a way that communication between the downlink ports is not

permissible.

Configuration

Example 1 Configuration

Example 2

Configuration

Example 3

1. change to enable the

isolate option of svc-lan

(default setting)

1.change to exclusive use port the

uplink of svc-vlan

2.change to enable the isolate

option of svc-vlan

(default setting)

1.change to enable the

isolate option of svc-vlan

(default setting)

To change to hardware relay ?



38

Cautions are provided for functions given below, in service LAN and service VLAN which have become a

software relay.

No. Function name Operational outline

1 IGMP Snooping Though the IGMP snooping function is set to enable, it operates as

disabled.

2 Flow Control In the ports that are used by the groups that become software relay

targets, the ports that receive the frame relayed by this group do not

transmit the Pause frame.

3

Jumbo Frame The frame (without Tag) which exceeds 1518 octets is not supported. Up

to 1522 octes are supported for the frame with Tag.

In port in the group of service LAN and service VLAN which has become a software relay target, if there

exists a port which relays the frame above the bandwidth of the port, the frame of software relay is

not sent by output port and is cancelled. The example when the frame of the software relay is

cancelled is shown below.

port-group A

port-group B

uplinkdownlink


frame

frame

drop

port-group A

port-group B

uplinkdownlink


出力ポートの帯域以上のframeを印加

frame

drop

出力ポートの帯域を100%使用している状態

出力ポートの帯域を100%使用していない状態

中継されない

State that is not

using 100% of the

bandwidth of the

output port

State that is using

100% of the

bandwidth of the

output port

the frame above the

bandwidth of the

output port

Not relayed



39

Chapter 12 isolate option operation

Execute communication (isolate disable)/ do not execute communication (isolate enable) between

the downlink ports in each group can be set by the isolate option for port group, VLAN group, service

LAN and service VLAN. But, there are 2 or more group definitions by which the port is shared. When

the setting of the isolate option is different in each group, the setting of isolate option Disable is given

priority. The communication between the downlink ports might become possible on the side where

the isolate option was set to Enable. In this paragraph, communication operation is described when

service LAN and service VLAN are defined to share the port with port group/ VLAN group.

Operation when isolate setting is default in both port group and service VLAN is shown below.

Port Group (isolate Disable)

Service VLAN (isolate Enable)

Service1 (VLAN Id 20)


server1

server5

server2

server3

server4

Group1 (tagged and untagged)VLAN 20

VLAN 30

server1 and server2 can communicate internally through the IBP by VLAN 20


server 1 to 4 can communicate internally through the IBP (tagged and untagged)

When the communication between the downlink ports is prohibited in the port group, the isolate

setting of port group is changed to Enable.



40

Port Group (isolate Enable)




server1

server5

server2

server3

server4


VLAN 30

server1 and server2 NOT communicate internally through the IBP by VLAN 20

server3 and server4 NOT communicate internally through the IBP by VLAN 30

server 1 to 4 NOT communicate internally through the IBP (tagged and untagged)

Other combination operations are shown below.


Service VLAN (isolate Disable)



server1

server5

server2

server3

server4


VLAN 30



server 1 to 4 can communicate internally through the IBP (tagged and untagged)



41

Port Group (isolate Enable)

Service VLAN (isolate Disable)



server1

server5

server2

server3

server4


VLAN 30



server1 and server2 can communicate internally through the IBP (tagged and untagged)


Group1はService1,

Service2のダウンリンクポート間で通信が可能な動作をする

However, operation is executed as set by the isolate option for service LAN and service VLAN that

become software relay targets, and it is operated independently of the settings of communication

between downlink ports in port group and VLAN group which share the port.

When the isolate setting of the port group is Disable like the example given below, the

communication normally becomes possible between Server 1 and Server 2 in Group 1 as for the frame

of service LAN.

Group1server1

server5

server2

server3

server4

Service1 (VLAN 30)

VLAN 30

VLAN 30

VLAN 30


server 1 to 4 NOT communicate internally through the IBP by VLAN 30

(except server1 and server2)



Since service LAN becomes software relay targets due to the addition of downlink port of Group 2 in

service LAN, frame of service LAN cannot carry out communication between server 1 and server 2

which is influenced by isolate setting of Port Group.

In Group1, the communication between

the downlink ports of Service1 and

Service2 becomes possible.



42

Group1

Group2

server1

server5

server2

server3

server4Service1 (VLAN 30) Software中継

VLAN 30

VLAN 30

VLAN 30



server 1 to 4 NOT communicate internally through the IBP by VLAN 30


Service LAN (isolate Enable)

Software relay



43

Chapter 13 IGMP Snooping operation When multiple groups are configured in IBP and IGMP Snooping enabled/disabled groups are mixed; if

multicast is registered in the group where IGMP Snooping is enabled, operate the frames that have

same VLAN ID and same multicast address as to that multicast registered in the group where IGMP

Snooping is disabled as if IGMP Snooping is enabled. When using same VLAN ID and same multicast

address in multiple groups, set same IGMP Snooping settings in all the groups to be used. An example

is shown below.

Operation when IGMP Snooping is set to enabled in all the groups wherein same {VLAN ID, MAC} is

used.

port-group A

port-group B

IGMP Snooping: Enable


IGMP Membership Report Multicast {VLAN ID, MAC}

Multicast {VLAN ID, MAC}

IGMP Membership Report

• 同一VLAN ID、同一MACアドレスを持つマルチキャストパケットを受信

– Port Group A: リスナーポートにマルチキャストパケットを送信

– Port Group B: リスナーポートにマルチキャストパケットを送信

Operations when IGMP Snooping enabled/Disabled are mixed in the groups wherein same {VLAN ID,

MAC} is used.

port-group A

port-group B


IGMP Snooping: Disable



• 同一VLAN ID、同一MACアドレスを持つマルチキャストパケットを受信

– Port Group Aでリスナーポートが認識されていない状態

» Port Group A: マルチキャストパケットをfloodingしない

» Port Group B: マルチキャストパケットをflooding

– Port Group Aでリスナーポートが認識された状態

» Port Group A: リスナーポートにマルチキャストパケットを送信

» Port Group B: マルチキャストパケットをfloodingしない

port-group A

port-group B


IGMP Snooping: Disable



IGMP Report

リスナーポート認識前リスナーポート認識後

Receive a multicast packet with the same VLAN ID, the same MAC address

- Port Group A: Send multicast packets to the listener port

- Port Group B: Send multicast packets to the listener port

Receive a multicast packet with the same VLAN ID, the same MAC address

- State that is not recognize the listener port in Port Group A

>> Port Group A: Multicast packets are not flooded

>> Port Group B: Multicast packets are flooded

- State that is recognized the listener port in Port Group A

>> Port Group A: Send multicast packets to the listener port

>> Port Group B: Multicast packets are not flooded

Before recognizing the listener port After recognizing the listener port



44

Chapter 14 Authentication function

IEEE 802.1x authentication, MAC address authentication functions are supported in the IBP. Port

that can be specified in the authenticated port is only downlink port. Moreover, ports only of

service LAN and service VLAN wherein port groups, VLAN groups are not assigned cannot use

Untag frames, therefore, authentication function is disabled. After the successful authentication

by the authentication function, both Untag, Tag frames can be used. When RADIUS server is

installed on the outer side and remote authentication is executed, VLAN ID notified by the

RADIUS server is discarded.

Setting items Settings Remarks

Authentication function IEEE802.1x authentication

MAC address authentication

Authenticated port Downlink port Settings disabled for

application port

Authentication method Authentication as per the Port

VLAN ID assigned to the

terminal (Supplicant)

- User cannot specify as it is

automatically assigned by IBP

認証成功前

port-group

Authentication port

Untag

Tag

X

X

認証成功後

port-group

Authentication port

Untag

Tag

Untag

Tag

認証portからのフレームは破棄

認証portではUntag, Tagフレーム共に使用可能

認証に成功していないportへは中継されない

Untag

Tag

認証に成功すると認証portへ中継される

Frame from the authentication

port is discarded Frame is not relayed

to the port that has

not been successfully

authenticated

Both untag frame and tag

frame from the authentication

port can be used

Frame is relayed to

the authentication

port to be successfully

authenticated

Before the authentication is successful

After successful authentication



45

Chapter 15 Default settings

Default settings are as follows.

Function Parameters Default values

pager pager Disable

Uplink Set Uplink Set Name default

Note: Specify when newly created

Link State Enable

Port Backup Disable

Backup Port None

Failback Time 60

Change Notify Enable

IGMP Snooping Enable

LACP Disable

Port Group Port Group Name default


Uplink Set default


Downlink port None

isolate Disable

VLAN Group VLAN Group Name -

VLAN ID -

Uplink Set -

Downlink port None

isolate Disable

Service LAN Service LAN Name -

VLAN ID -

Uplink Set -

Downlink port None

isolate Enable

Service VLAN Service VLAN Name -

VLAN ID -

Uplink Set -

Downlink port None

isolate Enable

PRIMERGY 10/40GbE Connection Blade 18/8+2 IBP Function...

Documents

Transcript of PRIMERGY 10/40GbE Connection Blade 18/8+2 IBP Function...