-
Router Products Configuration Guide
-
About This Manual
-
Router Product Overview
-
Understanding the User Interface
-
Loading System Images, Microcode Images, and Configuration File
-
Configuring Terminal Lines and Modem Support
-
Managing the System
-
Configuring ATM
-
Configuring DDR
-
Configuring SMDS
-
Configuring X.25
-
Configuring Apollo Domain
-
Configuring AppleTalk
-
Configuring Banyan VINES
-
Configuring DECnet
-
Configuring ISO-CLNS
-
Configuring XNS
-
Configuring Transparent Bridging
-
Configuring Source-Route Bridging
-
Configuring Remote Source-Route Bridging
-
Configuring DLSw+
-
Configuring STUN and BSTUN
-
Configuring LLC2 and SDLC Parameters
-
Configuring DSPU and SNA Service Point
-
Configuring APPN
-
Table Of Contents
Cisco's Implementation of VINES
Enable VINES Routing on the Router
Enable VINES Routing on an Interface
Enable Concurrent Routing and Bridging
Enable VINES on Serverless Networks
Control Access to the VINES Network
Configure VINES Network Parameters
Control the Display of Host Addresses
Control the Base of Host Addresses
Control RTP and SRTP Routing Updates
Enable VINES Single Route on the Router
Control the Forwarding of Broadcast Packets
Monitor and Maintain the VINES Network
Typical VINES Network Configuration Example
Serverless Network Configuration Example
Configuring Banyan VINES
The Banyan Virtual Network System (VINES) protocol is a networking system for personal computers. This proprietary protocol was developed by Banyan Systems, Inc. and is derived from the Xerox Network System (XNS) protocol. Our implementation of VINES has been designed in conjunction with Banyan.
This chapter describes how to configure VINES and provides configuration examples. For a complete description of the commands mentioned in this chapter, refer to the "Banyan VINES Commands" chapter in the Router Products Command Reference publication.
Cisco's Implementation of VINES
Cisco's implementation of Banyan VINES provides routing of VINES packets on all media types. Although the software automatically determines a metric value that it uses for routing updates based on the delay set for the interface, this software implementation allows you to customize the metric. Cisco's implementation also offers address resolution to respond to address requests and broadcast address propagation. Media Access Control (MAC)-level echo support is also available for Ethernet, IEEE 802.2, Token Ring, and Fiber Distributed Data Interface (FDDI) media. Name-to-address mapping for VINES host names also is supported, as are access lists to filter packets to or from a specific network.
VINES Addresses
VINES network-layer addresses are 48-bit addresses that consist of a network number (better described as a server number) and a subnetwork number (better described as a host number). In this manual, VINES addresses are expressed in the format network:host.
The network number identifies a VINES logical network, which consists of a single server and a group of client nodes. The network number is 32 bits (4 bytes) long and is the serial number of the service node. Figure 16-1 shows two logical networks: network 1 and network 2.
Figure 16-1 VINES Logical Network
The subnetwork number is 16 bits (2 bytes) long. For service nodes, the subnetwork number is always 1. For client nodes, it can have a value from 0x8001 through 0xFFFE.
The following is an example of a VINES network address:
3000577A:0001In this address, the server number, or more specifically, the serial number of the service node, is 3000577A and the host number is 0001, indicating that this is a service node. Both portions of the address are expressed in hexadecimal.
VINES Configuration Task List
To configure VINES routing, complete the tasks in the following sections. At a minimum, you must complete the tasks described in the section "Configure VINES Routing."
•
Control Access to the VINES Network
•
•
See the end of this chapter for configuration examples.
Configure VINES Routing
To configure VINES routing, first enable it on the router, then enable it on each interface. These are the only two tasks you must perform.
If you are configuring a VINES serverless network, you must also configure the router to respond to Address Resolution Protocol (ARP) address requests. You probably also will want to configure it for serverless support.
Enable VINES Routing on the Router
To enable VINES routing on the router, perform the following task in global configuration mode:
Enabling VINES routing on the router starts the VINES Routing Table Protocol (RTP) by default.
To enable Sequenced Routing Update Protocol (SRTP), you must perform the following tasks in global configuration mode:
Step 1
vines routing [address]
Step 2
vines srtp-enabled
For an example of how to enable VINES routing, see the section "Typical VINES Network Configuration Example" later in this chapter.
Enable VINES Routing on an Interface
After you have enabled VINES on the router, enable it on each interface that will handle VINES traffic. When you enable VINES processing on a specified interface, you can optionally set the metric for that interface. The metric sets the distance to another router or client accessible through that interface. The routing table uses metrics to determine which interface provides the best routing path. If you do not specify a metric, the system automatically chooses a reasonable value that is based on the interface type. The metrics are chosen to match as closely as possible the numbers that a Banyan server would choose for the same type and speed of interface.
To enable VINES routing on an interface other than a serial interface, perform the following task starting in EXEC mode:
To enable VINES routing on a serial interface, perform the following tasks in interface configuration mode:
Step 1
show interfaces1
Step 2
vines metric [whole [fractional]]
1 This command is documented in the "Interface Commands" chapter in the Router Products Command Reference publication.
For a list of metric values, refer to the "Banyan VINES Commands" chapter in the Router Products Command Reference publication.
Enable Concurrent Routing and Bridging
You can route VINES on some interfaces and transparently bridge it on other interfaces simultaneously. To do this, you must enable concurrent routing and bridging. To enable concurrent routing and bridging for the router, perform the following task in global configuration mode:
Enable concurrent routing and bridging for the router.
bridge crb1
1 This command is documented in the "Transparent Bridging Commands" chapter of the Router Products Command Reference publication
Enable VINES on Serverless Networks
No special configuration is necessary for serverless Banyan VINES networks, such as separate networks of clients and servers connected by routers. On serverless networks, the router provides special processing for certain broadcast packets and certain packets directed at the router. This allows clients on the serverless network to find the services that are provided by a server on another network. This special processing is especially important when two networks, one with a server and one without a server, are connected to the same router.
Client systems on VINES networks are assigned network addresses dynamically. When a VINES client boots, it has no knowledge of its address or preferred server. Immediately after it initializes its hardware interface, the client sends a broadcast request asking a server to provide it with a network-layer address. One of our routers will respond to this broadcast request if there are no VINES servers on the physical network segment. The router then assigns an address to the network client. (In previous releases, the router would not respond by default.) The router generates a unique network number for the client based on its own VINES address. If the router assigns an address to a client, the router then acts as a network communication service provider for that client. A VINES file server must still be present somewhere on the network in order for the client to connect to all other network services.
For an example of how to configure VINES routing for various network topologies that include serverless networks, see the section "Serverless Network Configuration Example" later in this chapter.
Control Access to the VINES Network
To control access to VINES networks, you create access lists and then apply them to filters on individual interfaces. An access list is a list of VINES network numbers that is maintained by the router. The list controls access to or from a particular interface. Access lists are useful for providing network security.
There are two types of VINES access lists that you can use to filter routed traffic:
•
•
VINES has a third type of access list, called a simple access list, that restricts traffic based on source address and source address mask. This type of access list is used to decide which stations to accept time updates from, not to filter traffic. Simple access lists have numbers from 201 to 300.
You can define two types of filters on VINES networks:
•
•
Keep the following points in mind when configuring VINES network access control:
•
•
•
•
•
To control access to VINES network, perform the following tasks:
Step 1
Step 2
To create a VINES access list, perform one or more of the following tasks in global configuration mode:
To apply an access list to an interface, perform the following task in interface configuration mode. Remember that you can apply only one access list to each interface.
For an example of how to create a VINES access list, see the section "Access List Example" later in this chapter.
Configure VINES Network Parameters
To configure VINES network parameters, perform one or more of the tasks in the following sections:
•
•
•
•
•
Select an Encapsulation Type
You can choose a MAC-level encapsulation type for each Ethernet, Token Ring, and IEEE 802.2 interface. This controls the type of encapsulation used by the router when sending broadcast packets.
To select an encapsulation type, perform the following task in interface configuration mode:
Note
Control the Display of Host Addresses
By default, you enter VINES addresses as numerical values. Also, addresses are displayed numerically in the output of the show, ping, and trace commands. You can assign a host name to each VINES address. Names are easier to remember and type. Assigning a host name allows you to enter the name instead of the address, and it means that the name instead of the numeric address is displayed in output.
To assign a host name to a VINES network address, perform the following task in global configuration mode:
Control the Base of Host Addresses
By default, VINES addresses are represented as hexadecimal numbers. This applies to both the input of addresses and the representation of addresses in output from the router. You can configure the router to display addresses in decimal for consistency with Banyan network management displays.
Names are always preferred when printing addresses. If a name is not available, the address will be printed as a number in the base specified.
To display VINES addresses as decimal numbers, perform the following task in global configuration mode:
Control RTP Routing Updates
You can control the routing updates sent by the router in the following ways:
•
90 seconds. The routing update interval should be the same on all VINES-speaking entities on the same physical network.
Note
•
•
To control routing update frequency and propagation, perform one or both of the following tasks in interface configuration mode:
Change the frequency of sending routing updates.
vines update interval seconds
Change how routing information is propagated.
vines update deltas
Note
To control the content of transmitted or received routing updates, or to control the source address of received routing updates, perform one or more of the following tasks in interface configuration mode:
To disable split horizon when generating regular periodic routing updates and to disable flash updates to indicate topology change for a changed route, perform the following tasks in global configuration mode:
To disable split horizon on networks that are not fully connected mesh interfaces like X.25 and Frame Relay, perform the following task in interface configuration mode:
Note
When vines enhancements is disabled in global configuration mode, vines split-horizon for RTP routing updates is disabled on all interfaces; however, one may still see vines split-horizon as enabled on the VINES interface when show vines interface interface command is entered. Split horizon remains enabled because vines split-horizon on individual VINES interface, in addition to controlling RTP updates, also controls whether or not retransmission of broadcasts is permitted on the receiving interface.
Note
Control RTP and SRTP Routing Updates
The VINES Routing Table Protocol (RTP) sends several types of messages, including redirect messages. If the router detects that a suboptimal path between two nodes is being used, it sends redirect messages to the nodes to indicate the better path.
To control the frequency of redirect messages on a specified interface, perform the following task in interface configuration mode:
Disable Fast Switching
Fast switching allows higher throughput by switching packets using a cache created by previous packets. Fast switching also provides load sharing on a per-packet basis. Fast switching is enabled by default on all interfaces on which it is supported. Fast switching is not supported on serial interfaces using encapsulations other than High-Level Data Link Control (HDLC).
Packet transfer performance is generally better when fast switching is enabled. However, you might want to disable fast switching in order to save memory space on interface cards and to help avoid congestion when high-bandwidth interfaces are writing large amounts of information to low-bandwidth interfaces.
To disable fast switching on an interface, perform the following task in interface configuration mode:
Set the Time
Banyan VINES servers synchronize time across the entire network by sending zero-hop and two-hop broadcast messages. The router software can process and generate time-synchronization messages. It can also retrieve the local time and place it into the VINES time system (which is most useful when running NTP locally) and can use the VINES time system to set a local clock. It is also possible to provide the router with a list of up to 20 destinations for time messages.
To set the VINES network time, perform one or more of the following tasks in global configuration mode:
For an example of how to set VINES time, see the section "Time-of-Day Service Example" later in this chapter.
Enable VINES Single Route on the Router
VINES single route maintains a single route to the router. VINES single route can be enabled at any time after VINES routing has been enabled. If a VINES connection experiences slow performances due to low window size or cannot handle out-of-sequence packets, enable VINES single route. To set VINES single route on the router, perform the following task in global configuration mode:
Configure Static Routes
VINES uses the Routing Table Protocol (RTP) to determine the best path when several paths to a destination exist. RTP then dynamically updates the routing table. However, you might want to add static routes to the routing table to explicitly specify paths to certain destinations.
The decision to use a static route or a dynamic route is always determined by the relative metric numbers. Be careful when assigning static routes. If a static route is assigned with a better metric than the dynamic routes and the links associated with the static routes are lost, traffic may stop being forwarded, even though an alternative route might be available.
To add a static route to the routing table, perform the following task in global configuration mode:
Add a static route to the routing table.
vines route number address [whole [fractional]]
You can configure static routes that can be overridden by dynamically learned routes. These are referred to as floating static routes. You can use a floating static route to create a path of last resort that is used only when no dynamic routing information is available.
To avoid the possibility of a routing loop occurring, by default floating static routes are not redistributed into other dynamic protocols. Floating static routes must not be advertised on interfaces that are paths to the destination. To configure a floating static route, assign a metric to the static route that is worse (higher) than all dynamic routes.
To add a floating static route to the routing table, perform the following task in global configuration mode:
Add a floating static route to the routing table.
vines route number address [whole [fractional]]
Configure Static Paths
You can specify static paths to neighbor stations on the network. This is useful for testing VINES networks with test equipment that does not generate hello packets.
To add a static path to a neighbor station, perform the following task in interface configuration mode:
Add a static path to the neighbor station.
vines neighbor address mac-address encapsulation [whole [fractional]]
Control the Forwarding of Broadcast Packets
Normally, the router decides whether to forward a broadcast packet on an interface based on the presence of local servers and on the settings of both the "hop count" and "class" fields of the VINES IP header. If there are any local servers present, the router follows the normal rules of VINES IP and forwards the broadcast after examining both the "hop count" and "class" fields. If there are no local servers present, then the "class" field is ignored when making the forwarding decision. You can override this default behavior in either of two ways. The first override is to have the router always ignore the "class" field and make the broadcast forwarding decision solely based on hop count. The second override is to have the router never ignore the "class" field and always make the broadcast forwarding decision based upon both the "class" and "hop count" fields.
To have the router modify how it forwards broadcast packets, perform the following task in interface configuration mode:
Configure VINES over WANs
You can configure VINES over X.25, Frame Relay, and SMDS networks. To do this, configure the address mappings as described in the appropriate chapter of this publication. You can also configure VINES over HDLC and PPP; address maps are not necessary for these two protocols. You can fast switch VINES over serial interfaces configured for HDLC, Frame Relay, PPP, SMDS, and ATM.
Monitor and Maintain the VINES Network
To monitor and maintain a VINES network, perform one or more of the following tasks at the EXEC prompt:
If you find that two routers have the same VINES network address, you can have the routers dynamically recompute their addresses. To do this, perform the following task in global configuration mode on each of the two routers:
VINES Configuration Examples
Use the configuration examples in the following sections to help in configuring VINES routing on your network:
•
•
Typical VINES Network Configuration Example
Figure 16-2 illustrates how to configure a simple VINES network.
Figure 16-2 VINES Simple Configuration
The following is an example configuration for Routers A and B:
vines routing!interface ethernet 0vines metric 2!interface ethernet 1vines metric 2Serverless Network Configuration Example
The following examples illustrate how to configure VINES routing for various network topologies that include serverless networks. The first example illustrates how to configure a simple serverless network (see Figure 16-3). Note that this is no longer any different from the configuration of a network that has servers.
Figure 16-3 VINES Serverless Configuration
Configuration for Router A
vines routing!interface ethernet 0vines metric 2!interface serial 0vines metric 45Configuration for Router B
vines routing!interface ethernet 0vines metric 2!interface serial 0vines metric 45The configuration in Figure 16-4 has an X.25 interface instead of an HDLC serial line, and it also has multiple versions of VINES software running at the same time. Again, note that there is no longer any difference from the configuration of a network that has servers.
Figure 16-4 VINES Serverless X.25 Configuration
Configuration for Router A
vines routing!interface ethernet 0vines metric 2!interface serial 0vines metric 55Configuration for Router B
vines routing!interface ethernet 0vines metric 2!interface serial 0vines metric 55The configuration in Figure 16-5 has an FDDI interface instead of a serial line. It also has the servers for the different VINES versions on different physical networks and has a requirement that the clients to be able to run any VINES version. The best way to configure this topology would be the following configuration.
Figure 16-5 VINES Complex Serverless Configuration
Configuration for Router A
vines routing!interface ethernet 0vines metric 2vines serverless broadcast!interface fddi 0vines metric 1Configuration for Routers B and C
vines routing!interface ethernet 0vines metric 2!interface fddi 0vines metric 1The broadcast keyword on the vines serverless command on server A causes it to forward packets onto the FDDI ring as broadcasts instead of sending them to either Router B or Router C. This allows the default serverless processing on both routers to forward the frame from the FDDI ring to the Ethernet network.
Access List Example
Figure 16-6 illustrates how to configure an access list that filters all packets between two VINES servers. For this example, the servers in the upper left and lower right corners are configured.
Figure 16-6 VINES Access-List Configuration
On Router B, you would set up the following configuration:
vines routingvines access-list 1 deny IP 274113:1 0:0 274111:1 0:0vines access-list 1 permit IP 0:0 FFFFFFFF:FFFF 0:0 FFFFFFFF:FFFF!interface ethernet 0vines metric 2vines access-group 1!interface fddi 0vines metric 1The first line in the access list prohibits any communication between the two servers, while the second line allows all other communication to pass through the router.
If you wanted to allow only mail traffic between these two servers, you would need the following configuration. Port 4 is the VINES Mail port.
vines routingvines access-list 101 permit IPC 274113:1 0:0 0 FFFF 274111:1 0:0 4 0vines access-list 101 permit IPC 274111:1 0:0 4 0 274113:1 0:0 0 FFFFvines access-list 101 deny IP 274111:1 0:0 274113:1 0:0vines access-list 101 permit IP 0:0 FFFFFFFF:FFFF 0:0 FFFFFFFF:FFFF!interface ethernet 0vines metric 2vines access-group 101!interface fddi 0vines metric 1The first line in the access list allows mail messages being sent from the server in the lower right to the server in the upper left. The second line allows mail messages in the other direction. The third line prohibits all other communication between these two servers. The last line allows all other communication to pass through the router.
Time-of-Day Service Example
The following example, using the configuration shown in Figure 16-6, illustrates how to configure the "Time of Day" support in a VINES network. Router C also is configured as a NTP server and will provide time to the VINES network.
Configuration for Routers A and B
vines routing!interface ethernet 0vines metric 2!interface fddi 0vines metric 1!vines access-list 201 permit 30001234:1 0:0vines access-list 201 deny 0:0 FFFFFFFF:FFFFvines time access-group 201vines time participatevines time set-systemConfiguration for Router C
vines routing!interface ethernet 0vines metric 2!interface fddi 0vines metric 1!ntp peer 128.9.2.129vines time participatevines time use-systemThe access list on Routers A and B is not absolutely necessary. It prevents the routers from learning the time from anyone other than Router C. The reason this is not very important is that each time message from Router C will override any time that has been previously learned (because of the vines time use-system command).
