|
|
This chapter describes the Integrated Local Management Interface (ILMI) protocol implementation within the ATM switch router.
This chapter includes the following sections:
This section describes configuring the ATM address and the LAN emulation configuration server (LECS) address, and displaying the ILMI configuration for the entire switch.
The ATM switch router ships with an autoconfigured ATM address. PNNI uses the autoconfigured address to construct a flat PNNI topology. ILMI uses the first 13 bytes of this address as the switch prefix that it registers with end systems. For a description of the autoconfigured ATM address and considerations when assigning a new address, refer to the Guide to ATM Technology.
Multiple addresses can be configured for a single switch, and this configuration can be used during ATM address migration. ILMI registers end systems with multiple prefixes during this period until an old address is removed. PNNI automatically summarizes all of the switch's prefixes in its reachable address advertisement.
To configure a new ATM address that replaces the previous ATM address, see the section "Configuring the ATM Address" in the chapter "Configuring ATM Routing and PNNI."
The ILMI access filter feature allows you to permit or deny certain ILMI registered addresses.
If end systems are allowed to register arbitrary addresses via ILMI, including addresses that do not match the ILMI prefixes used on the interface, a security hole may be opened. The ILMI access filter feature closes the security hole by permitting or denying ILMI registration of different classes of addresses.
The ILMI access filter allows you to configure two levels of access filters:
In either level, you can choose among the following options:
To configure global ILMI access filters, use the following global configuration command:
| Command | Purpose |
|---|---|
atm ilmi default-access permit {all | matching-prefix [all-groups | wellknown-groups]} | Configures an ILMI default access filter. |
The following example configures the global default access filter for ILMI address registration to allow well-known group addresses and addresses with matching prefixes:
Switch(config)# atm ilmi default-access permit matching-prefix wellknown-groups
See the command atm address-registration in the ATM Switch Router Command Reference publication for information on configuration of the individual interface access filter override.
To display the global ILMI default access configuration, use the following privileged EXEC command:
| Command | Purpose |
|---|---|
more system:running-config | Displays the global ILMI default access configuration. |
The following example displays the ILMI filter configuration for all ATM interfaces:
Switch# more system:running-config Building configuration... Current configuration: <information deleted> ! atm abr-mode efci atm lecs-address-default 47.0091.8100.0000.0040.0b0a.1281.0040.0b4e.d023.00 1 atm lecs-address-default 47.0091.8100.0000.0040.0b0a.1281.0040.0b07.4023.00 2
atm ilmi default-access permit matching-prefix atm address 47.0091.8100.0000.0040.0b0a.2b81.0040.0b0a.2b81.00 atm address 47.0091.8100.0000.0060.3e5a.7901.0060.3e5a.7901.00 atm router pnni statistics call node 1 level 56 lowest
To configure the LECS address advertised to the directly connected end nodes, use the following global configuration command:
| Command | Purpose |
|---|---|
atm lecs-address lecs-address [sequence-number] | Configures the switch LECS address. |
The sequence-number provides the position of this address in the ordered LECS address table.
The following example shows how to configure the LECS ATM address:
Switch(config)# atm lecs-address 47.0091.8100.0000.0000.0ca7.9e01.4000.0c81.9030.01
To display the switch ILMI configuration, use the following EXEC commands:
| Command | Purpose |
|---|---|
Displays the ATM addresses. | |
Displays the ILMI configuration. | |
Displays the ILMI status. |
The following example shows the ATM address and the LECS address:
Switch# show atm address Switch Address(es): 47.00918100000000000CA79E01.00000CA79E01.00 active 88.888888880000000000000000.000000005151.00 Soft VC Address(es): 47.0091.8100.0000.0000.0ca7.9e01.4000.0c81.0000.00 ATM0 47.0091.8100.0000.0000.0ca7.9e01.4000.0c81.8000.00 ATM3/0/0 47.0091.8100.0000.0000.0ca7.9e01.4000.0c81.8010.00 ATM3/0/1 47.0091.8100.0000.0000.0ca7.9e01.4000.0c81.8020.00 ATM3/0/2 47.0091.8100.0000.0000.0ca7.9e01.4000.0c81.8030.00 ATM3/0/3 47.0091.8100.0000.0000.0ca7.9e01.4000.0c81.9000.00 ATM3/1/0 47.0091.8100.0000.0000.0ca7.9e01.4000.0c81.9010.00 ATM3/1/1 47.0091.8100.0000.0000.0ca7.9e01.4000.0c81.9020.00 ATM3/1/2 47.0091.8100.0000.0000.0ca7.9e01.4000.0c81.9030.00 ATM3/1/3 ILMI Switch Prefix(es): 47.0091.8100.0000.0000.0ca7.9e01 88.8888.8888.0000.0000.0000.0000 ILMI Configured Interface Prefix(es): LECS Address(es): 47.0091.8100.0000.0000.0ca7.9e01.4000.0c81.9030.01 47.0091.8100.0000.0000.0ca7.9e01.4000.0c81.9030.02
The following example shows the ILMI configuration:
Switch# show atm ilmi-configuration Switch ATM Address (s) :
1122334455667788990112233445566778899000
LECS Address (s):
1122334455667788990011223344556677889900
ARP Server Address (s):
1122334455667788990011223344556677889900
The following example shows the ILMI status:
Switch# show atm ilmi-status Interface : ATM0 Interface Type : Local Configured Prefix(s) : 47.0091.8100.0000.0003.c386.b301 Interface : ATM3/0/0 Interface Type : Private NNI ILMI VCC : (0, 16) ILMI Keepalive : Disabled Configured Prefix(s) : 47.0091.8100.0000.0003.c386.b301 Interface : ATM3/0/3 Interface Type : Private NNI ILMI VCC : (0, 16) ILMI Keepalive : Disabled Configured Prefix(s) : 47.0091.8100.0000.0003.c386.b301
To configure an ILMI interface, perform the following tasks, beginning in global configuration mode:
| Step | Command | Purpose |
|---|---|---|
| 1 | interface atm card/subcard/port[.vpt#] | Specifies an ATM interface and enters interface configuration mode. |
| 2 | Enables ILMI autoconfiguration, including determination of interface protocol, version, and side. | |
| 3 | Configures ILMI address registration for a specified interface. | |
| 4 | atm ilmi-keepalive [seconds [retry number]] | Configures ILMI keepalive. |
The following example shows how to enable ILMI autoconfiguration on ATM interface 3/0/3:
Switch(config)# interface atm 3/0/3 Switch(config-if)# atm-autoconfiguration
The following example shows how to enable ATM address registration on ATM interface 3/0/3:
Switch(config)# interface atm 3/0/3 Switch(config-if)# atm address-registration
The following example shows how to configure the ILMI ATM interface 3/0/3 with a keepalive time of 20 seconds and retry count of 3:
Switch(config)# interface atm 3/0/3 Switch(config-if)# atm ilmi-keepalive 20 retry 3
In this example, the peer network element is polled every 20 seconds.
Proceed to the following section to confirm the ILMI interface configuration.
The ATM switch router allows configuration of per-interface ILMI address prefixes, so different address prefixes can be registered with end systems attached to different interfaces. When any per-interface ILMI address prefixes are configured, they override the prefix(es) derived from the first 13 bytes of the switch ATM address(es) for that specific interface.
Multiple ILMI address prefixes can be configured on each interface; for example, during ATM address migration.
To configure a per-interface ILMI address prefix, perform the following tasks, beginning in global configuration mode:
| Step | Command | Purpose |
|---|---|---|
| 1 | interface atm card/subcard/port[.vpt#] | Specifies an ATM interface and enters interface configuration mode. |
| 2 | atm prefix 13-byte-prefix | Configures the ILMI address prefix. |
The following example shows how to change the ATM address of the switch from the autoconfigured address 47.0091.8100.0000.0041.0b0a.1081.0041.0b0a.1081.00 to the new address 47.0091.8100.5670.0000.0000.1122.0041.0b0a.1081.00:
Switch(config)# atm address 47.0091.8100.5670.0000.0000.1122... Switch(config)# no atm address 47.0091.8100.0000.0041.0b0a.1081...
The following example shows how to configure an additional ATM address manually, or address prefix 47.0091.8100.0000.0003.c386.b301 on ATM interface 0/0/1:
Switch(config)# interface atm 0/0/1 Switch(config-if)# atm prefix 47.0091.8100.0000.0003.c386.b301
Use the show atm address command to display the ILMI address prefix configuration for all interfaces or a specific interface.
To display the ILMI address prefix configuration for all interfaces, use the following EXEC command:
| Command | Purpose |
|---|---|
Displays the interface ILMI address prefix configuration. |
The following example shows the ILMI address prefix configuration for all ATM interfaces:
Switch# show atm address Switch Address(es): 47.00918100000000410B0A1081.00410B0A1081.00 active 47.00918100000000603E5ADB01.00603E5ADB01.00 47.009181005670000000001122.00400B0A1081.00 Soft VC Address(es): 47.0091.8100.0000.0041.0b0a.1081.4000.0c80.0000.00 ATM0/0/0 47.0091.8100.0000.0041.0b0a.1081.4000.0c80.0000.63 ATM0/0/0.99 47.0091.8100.0000.0041.0b0a.1081.4000.0c80.0010.00 ATM0/0/1 47.0091.8100.0000.0041.0b0a.1081.4000.0c80.0020.00 ATM0/0/2 47.0091.8100.0000.0041.0b0a.1081.4000.0c80.0030.00 ATM0/0/3 47.0091.8100.0000.0041.0b0a.1081.4000.0c80.1000.00 ATM0/1/0 47.0091.8100.0000.0041.0b0a.1081.4000.0c80.1010.00 ATM0/1/1 47.0091.8100.0000.0041.0b0a.1081.4000.0c80.1020.00 ATM0/1/2 47.0091.8100.0000.0041.0b0a.1081.4000.0c80.1030.00 ATM0/1/3 47.0091.8100.0000.0041.0b0a.1081.4000.0c80.8000.00 ATM1/0/0 47.0091.8100.0000.0041.0b0a.1081.4000.0c80.8010.00 ATM1/0/1 47.0091.8100.0000.0041.0b0a.1081.4000.0c80.8020.00 ATM1/0/2 47.0091.8100.0000.0041.0b0a.1081.4000.0c80.8030.00 ATM1/0/3 47.0091.8100.0000.0041.0b0a.1081.4000.0c80.9000.00 ATM1/1/0 47.0091.8100.0000.0041.0b0a.1081.4000.0c80.9010.00 ATM1/1/1 47.0091.8100.0000.0041.0b0a.1081.4000.0c80.9020.00 ATM1/1/2 47.0091.8100.0000.0041.0b0a.1081.4000.0c80.9030.00 ATM1/1/3 ILMI Switch Prefix(es): 47.0091.8100.0000.0041.0b0a.1081 47.0091.8100.0000.0060.3e5a.db01 47.0091.8100.5670.0000.0000.1122 ILMI Configured Interface Prefix(es): LECS Address(es):
To show the ILMI interface configuration, use the following EXEC command:
| Command | Purpose |
|---|---|
show atm ilmi-status atm card/subcard/port | Shows the ILMI configuration on a per-port basis. |
The following example displays the ILMI status for ATM interface 3/0/0:
Switch# show atm ilmi-status atm 3/0/0 Interface : ATM3/0/0 Interface Type : Private NNI ILMI VCC : (0, 16) ILMI Keepalive : Disabled Configured Prefix(s) : 47.0091.8100.0000.0003.c386.b301
![]()
![]()
![]()
![]()
![]()
![]()
![]()
Posted: Mon May 8 18:20:16 PDT 2000
Copyright 1989 - 2000©Cisco Systems Inc.