|
|
DLSw+ could provide redundancy prior to this feature in a Token Ring environment or via backup peers. When an end station on an Ethernet LAN had multiple active paths into a DLSw+ network, problems occurred (Figure 1).
The reason redundancy is not possible in an Ethernet environment is because, unlike Token Ring, it does not have a RIF field in its packet. The RIF notifies a router of the path a packet has traveled by tracking each ring number and bridge it travels through a path. If a bridge notices that the next ring matches a ring already in the RIF, then the frame is not copied on that ring. The RIF prevents:
Configuring redundancy with Ethernet switches provides a special challenge. When there are multiple DLSw+ routers on the same transparent bridged domain that can reach the same MAC address, problems are created because of the inherent manner in which switches handle and direct traffic.
When DLSw+ services to a transparent bridged domain (such as Ethernet), the local cache is populated with unreliable information. Because there is no RIF, the DLSw+ device has no way of determining whether the frame it receives is locally sourced or whether it originates from another DLSw+ device within the same transparent bridged domain. The DLSW+ router updates its local or remote cache based on whether it receives the packet from its LAN or from a WAN.
In Figure 1, assume end station X and end station Y are trying to communicate with each other. (Suppose X is a terminal and Y is a host.) The following sequence typically occurs:
As a result, a loss of connectivity occurs because Router A and Router B think device Y is local.
Redundant paths in an Ethernet environment also cause circuit contention. In Figure 1, assume Router A and Router B correctly update their caches with REMOTE reachability information for end station Y. The following sequence occurs:
As a result, Router C interprets the second CUR_cs as a duplicate circuit. It disallows the second circuit and as per RFC 1795, it tears down the original circuit, thereby permitting no data flow between the end systems.
Figure 2 shows an Ethernet-to-Ethernet design that causes undetected looping explorers. It is a problematic design because Ethernet does not have a RIF. The routers do not know whether a packet destined for an unknown MAC address originated on their own LAN or from another LAN. As a result, the explorer packet would loop back to the originating LAN, wasting bandwidth and creating unnecessary CPU overhead.
Ethernet redundancy with switch devices requires further changes because of the way in which switches handle and direct traffic. Switches direct traffic by observing a frame's SMAC and by observing from which port the frame arrives. They forward all traffic to a particular address from a specific port rather than flooding all of its ports. In a normal Ethernet environment, this method is sufficient because there can only be one unique path to any MAC address. However, this method does not work in an environment where there are multiple DLSW+ routers on the same transparent bridged domain that can reach the same MAC address (Figure 3).
Because Routers A and B are connected to different ports on the Ethernet switch, the switch sees traffic from one SMAC coming into multiple ports. The Ethernet switch thinks the MAC address of the Host appears on two different places on a LAN. This design breaks the Ethernet rule of having only one path to any MAC address. It gives the appearance of a bridging loop that the Spanning-Tree Protocol did not resolve. Because SNA is connection oriented, the session is eventually torn down.
The DLSw+ Ethernet Redundancy feature solves the circuit contention issue by designating a master router in a transparent bridged domain. All devices on a transparent bridged domain advertise their presence to a multicast MAC address. One of the peers is elected as the master router. This master router maintains a database of all circuits being handled by the DLSw+ devices within its domain. Each device on the transparent bridged maintains an LLC2 session with the master router and asks the master router for permission before starting or accepting a new DLSw+ circuit. Because the master router keeps a database of the circuits being handled, it prevents duplicate circuits from being created for the same SNA session.
In Figure 4, DLSw+ Routers A, B, and C are on the same transparent bridged domain. Router B is configured to be the master router.
The following sequence occurs:
When the circuit disconnects, Router A notifies master Router B by sending it a CIRCUIT_GONE (CKT_GONE) primitive. The master router then forwards the CKT_GONE primitive to the other devices on the LAN and removes the circuit from its CKT_TKN database. The only time a master router deletes a record is when it is notified by the device to which it granted the circuit or if there is a device failure and it loses its LLC2 session with that peer.
The DLSw+ Ethernet Redundancy feature enables more reliable local cache reachability information and decreases the chance for looping explorers. Normally, when DLSw+ devices receive a TEST frame they update their local or remote cache with the SMAC based on whether the packet came from its local LAN or off a WAN. As explained earlier in the document, in transparent bridged domains this can create a situation with unreliable reachability information. With the DLSw+ Ethernet Redundancy feature enabled, the SMAC of an explorer packet sent on the LAN is replaced by the DLSw+ router's own MAC address. When another router on the transparent bridged domain receives the explorer, it recognizes that the SMAC belongs to a DLSw+ router on its own LAN. Therefore it does not update its local reachability cache and it does not forward the explorer over any of its peer connections.
In Figure 4, DLSw+ Routers A, B, and C are on the same transparent bridged domain. The following sequence occurs:
The DLSw+ Ethernet Redundancy feature provides redundancy in a switched environment with MAC address mapping. MAC address mapping ensures that a particular SMAC is seen by the switch on only one port at a time. Furthermore, the routers monitor each other's MAC address mapping so that they adequately serve as each other's back up in the case of a router failure.
In Figure 5, Router A is configured to map MAC address M' (M prime) to MAC address M and Router B is configured to map MAC address M" (M double prime) to MAC address M. End device X is configured to use M' as its SNA DMAC and end device Y is configured to use M" as its SNA DMAC.
In Figure 5,the following sequence occurs:
In the case of a router failure, the other router detects the failure and seamlessly takes over the failed router's mapping responsibilities. In Figure 5, if Router A fails, the switch thinks it can still reach MAC address M' out the port that is connected to failed Router A. Router B takes over the mapping responsibilities for Router A by sending a TEST frame with SMAC M' and a multicast DMAC to the switch. The switch notes the SMAC M' and assumes the resource moved and updates its CAM table appropriately. Now end station X tries to reestablish its connection to the mainframe by sending out an XID poll to its configured DMAC M'. The switch knows to direct this frame out the port to which Router B is attached because of the TEST frame Router B sent earlier. Router B assumes the mapping responsibilities of Router A by mapping M' to M and continues its own mapping responsibilities of mapping M" to M.
When Router A recovers, master Router B realizes that Router A should be mapping M' to M. Both Routers cannot map M' to M simultaneously because the switch cannot handle multiple ports with reachability to the same MAC address. Master Router B, therefore, stops mapping M' to M and the existing sessions are taken down and recovered through Router A.
This feature is supported on the following platforms:
No MIBs are supported.
For descriptions of supported MIBs and how to use MIBs, see Cisco's MIB web site on CCO at http://www.cisco.com/public/sw-center/netmgmt/cmtk/mibs.shtml.
None.
Perform the following tasks to configure the DLSw+ Ethernet Redundancy feature:
| Command | Purpose |
|---|---|
Router(config-if)#dlsw transparent redundancy-enable | Enables the Ethernet Redundancy feature. |
All routers on any given transparent bridged domain should configure the same MAC multicast address in the dlsw transparent redundancy enable command.
| Command | Purpose |
|---|---|
Router(config)#dlsw transparent-switch support | Enables DLSw+ Ethernet Redundancy feature when using a switch device. |
Router(config-if)#dlsw transparent map | Configures a single destination MAC address to which multiple MAC addresses on a transparent bridged are mapped. |
Perform the following steps to verify that the Ethernet Redundancy feature is configured properly:
Step 1 Verify that the master router is configured correctly by issuing the show dlsw transparent neighbor command on the appropriate routers.
Step 2 Verify that the created MAC address to which all the Ethernet Redundancy routers are mapped is configured correctly by issuing the show dlsw transparent map command on all the routers configured for Ethernet Redundancy. By viewing the output you can also verify that a router is configured to backup another router's MAC address mapping functions.
Step 3 Verify that the cache of the routers is populating correctly by issuing the show dlsw reachability command on the Ethernet Redundancy routers.
Step 4 Verify that circuits are being established through the Ethernet ports by issuing the show dlsw circuits command.
Step 5 Verify that the master router has the correct circuits in its cache by issuing the show dlsw transparent cache command.
Step 6 Verify the number of circuits being handled by each of those peers by issuing the show dlsw peer command on the Ethernet redundancy routers.
| Command | Purpose |
|---|---|
show dlsw transparent cache | Displays the master circuit cache for each transparent bridged domain. |
show dlsw transparent map | Displays the MAC address mappings on the local router and any mappings for which the local router is acting as backup. |
show dlsw transparent neighbor | Displays DLSw+ neighbors in a transparent bridged domain. |
This section provides the following configuration examples:
Figure 6 shows that Router A, Router B, and Router C advertise their presence on the Ethernet via their Ethernet interfaces to the multicast MAC address 9999.9999.9999. Because Router B is the master router, it keeps a database of all circuits handled within the domain and grants or denies permission for new circuit requests for Router A and Router C. There is no special configuration required for the end stations or for the remote peer. Only the DLSw+ devices on the LAN need the extra configuration. Master Router B waits 1.5 seconds after it receives the first IWANTIT primitive before assigning the new SNA circuit to one of its ethernet redundancy peers because of the dlsw transparent timers sna 1500 command.
dlsw local-peer peer id 10.2.24.2 dlsw remote-peer 0 tcp 10.2.17.1 int e1 ip address 150.150.2.1 255.255.255.0 dlsw transparent redundancy-enable 9999.9999.9999
dlsw local-peer peer-id 10.2.24.3 dlsw remote-peer 0 tcp 10.1.12.1 int e1 ip address 150.150.2.3 255.255.255.0 dlsw transparent redundancy-enable 9999.9999.9999 master priority 1 dlsw transparent timers sna 1500
dlsw local-peer peer-id 10.2.24.4 dlsw remote-peer 0 tcp 10.2.17.1 int e1 ip address 150.150.2.3 255.255.255.0 dlsw transparent redundancy-enable 9999.9999.9999
dlsw local-peer peer-id 10.2.17.1 promiscuous
Figure 7 is a sample configuration of the DLSw+ Ethernet Redundancy feature in a switched environment. The ethernet switch sees the device with MAC address 4000.0010.0001 one port at a time because Router A and Router B have mapped different MAC addresses to it. This configuration is known as MAC-address mapping. Router A is configured so that MAC address 4000.0001.0000 maps to the actual device with MAC address 4000.0010.0001. Router B is configured so that MAC address 4000.0201.0001 maps to the actual device with MAC address 4000.0010.0001. Router A and B backup one another. Router A is configured as the master with a default priority of 100. Master Router A waits 1.5 seconds after it receives the first IWANTIT primitive before assigning the new SNA circuit to one of its ethernet redundancy peers because of the dlsw transparent timers sna 1500 command.
dlsw local peer peer-id 10.2.17.1 dlsw remote-peer 0 tcp 10.3.2.1 dlsw transparent switch-support int e 0 mac-address 4000.0000.0001 ip address 150.150.2.1 255.255.255.0 dlsw transparent redundancy-enable 9999.9999.9999 master-priority dlsw transparent map local-mac 4000.0001.0000 remote-mac 4000.0010.0001 neighbor4000.0000.0011 dlsw transparent timers sna 1500
dlsw local peer peer-id 10.2.17.2 promiscuous dlsw transport switch-support int e 1 mac-address 4000.0000.0011 ip address 150.150.3.1 255.255.255.0 dlsw transparent redundancy-enable 9999.9999.9999 dlsw transparent local-mac 4000.0201.0001 remote-mac 4000.0010.0001 neighbor4000.0000.0001
This section documents new commands. All other commands used with this feature are documented in the Cisco IOS Release 12.0 command references.
In Cisco IOS Release 12.0(1)T or later, you can search and filter the output for show and more commands. This functionality is useful when you need to sort through large amounts of output, or if you want to exclude output that you do not need to see.
To use this functionality, enter a show or more command followed by the "pipe" character (|), one of the keywords begin, include, or exclude, and an expression that you want to search or filter on:
command | {begin | include | exclude} regular-expression
Following is an example of the show atm vc command in which you want the command output to begin with the first line where the expression "PeakRate" appears:
show atm vc | begin PeakRate
For more information on the search and filter functionality, refer to the Cisco IOS Release 12.0(1)T feature module titled CLI String Search.
To enable MAC address mapping in a switch-based environment, use the dlsw transparent map interface configuration command. To disable MAC address mapping, use the no form of this command.
dlsw transparent map local mac mac address remote mac mac address
local mac mac address | MAC address that is created and given to the remote device. This MAC address is mapped to the actual MAC address that is specified in the remote mac mac address option. |
remote mac mac address | MAC address of the remote device. |
neighbor mac address | MAC address of the DLSw+ device that takes over mapping if the primary DLSw+ device becomes unavailable. |
Interface configuration
| Release | Modification |
|---|---|
12.0(5)T | This command was first introduced. |
Only the routers that are connected to the switch are configured for address mapping.
The following example maps MAC address 4000.1000.1234 to the actual device with the MAC address of 4000.3754.1000 and designates the DLSw+ device with MAC address 0000.0c12.0001 as backup:
dlsw transparent map local-mac 4000.1000.1234 remote mac 4000.3754.1000 neighbor 0000.0c12.0001
| Command | Description |
dlsw transparent-switch support | Configures the DLSw+ Ethernet Redundancy feature when using a switch device. Must be configured prior to the dlsw transparent map command. |
To configure transparent redundancy, use the dlsw transparent redundancy-enable interface configuration command. To disable transparent redundancy, use the no form of this command.
dlsw transparent redundancy-enable multicast-mac-address [master-priority value]
multicast-mac-address | MAC address to which all DLSw+ devices on a transparent bridged domain advertise their presence by sending the master present frame. |
master-priority value | (Optional) Configures the router as a master device. The valid range is 0 to 254. The lower the value, higher the priority. The default value is 100. |
Interface configuration
| Release | Modification |
|---|---|
12.0(5)T | This command was first introduced. |
The same multicast-mac-address must be configured on all DLSw+ devices within the same transparent bridged domain. All the DLSw+ devices advertise their presence via frames to this multicast-mac-address.
All routers in the transparent bridged domain compete and elect one master router. The master router is elected based on its master-priority value. In the case of equal master priority setting, the router with the lowest MAC address is the elected master router.
The following example configures Ethernet Redundancy with a master-priority of 100:
dlsw transparent redundancy-enable 9999.9999.9999 master-priority 100
| Command | Description |
show dlsw transparent neighbor | Displays whether the router with the lowest master priority is configured properly as the master router. This command displays all the neighbors within that transparent bridged domain. |
show dlsw transparent cache | Displays the content of the master's circuit cache. |
To enable the special support that is required for the interfaces connected to an ethernet switch with the dlsw transparent redundancy-enable command configured, use the dlsw transparent switch-support global configuration command. To disable dlsw transparent switch support, use the no form of this command.
dlsw transparent switch-supportThis command has no arguments or keywords.
Switch support is off.
Global configuration
| Release | Modification |
|---|---|
12.0(5)T | This command was first introduced. |
The dlsw transparent switch-support command must be configured before the dlsw transparent map command.
The following example configures Ethernet switch support:
dlsw transparent switch-support
| Command | Description |
dlsw transparent map | Maps multiple MAC addresses on a transparent bridged domain to a single destination MAC address. |
To configure the timeout value the master router waits for all requests for a circuit before giving the permission for a router for a circuit, use the dlsw transparent timers interface configuration command. To disable the timeout value, use the no form of this command.
dlsw transparent timers [netbios value | sna value]
netbios value | (Optional) Timeout value for the NetBIOS session. The valid range is 100 to 900 ms. The default value is 400 ms. |
sna value | (Optional) Timeout value for the SNA session. The valid range is 100 to 5000 ms. The default value is 1000 ms (1 second). |
The default NetBIOS value is 400 ms. The default SNA value is 1000 ms.
Interface configuration
| Release | Modification |
|---|---|
12.0(5)T | This command was first introduced. |
The dlsw transparent redundancy-enable command must be configured before the dlsw transparent timers command.
The following example configures the master router to wait 500 ms for a NetBIOS session before giving or denying permission to a router to create a circuit:
dlsw transparent timers netbios 500
| Command | Description |
dlsw transparent redundancy-enable | Enables the Ethernet Redundancy feature and configures the master router. |
To display the master circuit cache for each transparent bridged domain, use the show dlsw transparent cache privileged EXEC command.
show dlsw transparent cacheThis command has no arguments or keywords.
Privileged EXEC
Issue the show dlsw transparent cache command on the master router of the transparent bridged domain.
| Release | Modification |
|---|---|
12.0(5)T | This command was first introduced. |
The following is sample output from the show dlsw transparent cache command:
router#show dlsw transparent cache Interface Ethernet0/1 Circuit Cache local addr(lsap) remote addr(dsap) state Owner 0000.3028.92b6(08) 0007.0db1.238c(08) POSITIVE SELF 0000.3028.92b6(08) 0008.dec3.609e(12) NEGATIVE 0009.fa50.0b1c Total number of circuits in the Cache:2
To display MAC address mappings on the local router and any mappings for which the local router is acting as backup for a neighbor peer, use the show dlsw transparent map privileged EXEC command.
show dlsw transparent mapThis command has no arguments or keywords.
Privileged EXEC
| Release | Modification |
|---|---|
12.0(5)T | This command was first introduced. |
Issue the show dlsw transparent map command to ensure that the local MAC address is the address created in the dlsw transparent map command. The command should be issued on all the routers configured for the Ethernet Redundancy feature to ensure the local MAC addresses match.
The following is sample output from the show dlsw transparent map command on two routers configured for the Ethernet Redundancy feature:
router6#show dlsw transparent map
Interface Ethernet6/2
LOCAL Mac REMOTE MAC BACKUP
--------- ---------- ------
0008.dec3.0080 0008.dec3.609e 0007.7fb0.1080 STATIC
0008.dec3.0040 0008.dec3.609e 0007.7fb0.1080 DYNAMIC(Passive)
router7#show dlsw transparent map
Interface Ethernet0/1
LOCAL Mac REMOTE MAC BACKUP
--------- ---------- ------
0008.dec3.0080 0008.dec3.609e 0006.3a0a.1a55 DYNAMIC(Passive)
0008.dec3.0040 0008.dec3.609e 0006.3a0a.1a55 STATIC
The output from Router 6 and Router 7 shows the created MAC addresses are 0008.dec3.0080 and 0008.dec3.0040.
To display DLSw neighbors in a transparent bridged domain, use the show dlsw transparent neighbor privileged EXEC command.
show dlsw transparent neighborThis command has no arguments or keywords.
Privileged EXEC
| Release | Modification |
|---|---|
12.0(5)T | This command was first introduced. |
The following is sample output from the show dlsw transparent neighbor command:
router7#show dlsw transparent neighbor Interface ATM0.1 0006.e278.6c0e SELF Master 0009.fa50.0b1c Rcvd Master-Accepted VALID
The output shows that Router 7 is the master router whose MAC address is 0006.e278.6c0e. The other router, with a MAC address of 0009.fa50.0b1c, is a slave router on the common domain. The master router received a packet from the slave and notes the router is VALID
![]()
![]()
![]()
![]()
![]()
![]()
![]()
Posted: Mon Oct 18 14:10:06 PDT 1999
Copyright 1989-1999©Cisco Systems Inc.