Note The commands for configuring the RSM, RSFC, and MSM are the same.

Viewing the RSM’s Running Configuration

To view the RSM’s running configuration, use the show running−config command as shown here:

Coriolis5000RSM# show running−config

Building configuration…

Current configuration:

!

version 11.2

no service udp−small−servers no service tcp−small−servers

!

hostname Coriolis5000RSM

!

enable book1234

!

!

interface Vlan1

ip address 130.77.20.15 255.255.254.0

!

interface Vlan2

ip address 130.77.20.15 255.255.254.0

!

interface Vlan3

ip address 130.77.20.16 255.255.254.0 shutdown

!

router eigrp 100 network 130.77.0.0 no auto−summary

!

ip default−gateway 130.77.20.254 no ip classless

snmp−server community public RO snmp−server community private RW

!

line con 0 line aux 0 line vty 0 4

password book1234 login

!

end

Coriolis5000RSM#

Configuring InterVLAN Routing on an RSM

Before you configure the RSM, you must configure the switch as a VTP server and assign a VTP domain name. You must also configure the ISL trunk links and assign the switch ports on each switch to the appropriate VLAN. To configure the RSM for interVLAN routing, use the following steps:

1. Start a session on the RSM for module 5:

Coriolis5002> (enable) session 5 Trying Router−5…

Connected to Router−5. Escape character is Ô^]’.

2. Create one VLAN interface for each VLAN configured on the switch:

127

RSM1>enable RSM1#configure terminal

Enter configuration commands, one per line. End with CNTL/Z. RSM1(config)#interface vlan 2

RSM1(config−if)#

%LINEPROTO−5−UPDOWN: Line protocol on Interface Vlan2, changed state to down

3. Assign IP addresses to the VLAN interfaces:

RSM1(config−if)#ip address 172.20.52.33 255.255.255.224 RSM1(config−if)#no shutdown

%LINEPROTO−5−UPDOWN: Line protocol on Interface Vlan2, changed state to up RSM1(config−if)#interface vlan 3

RSM1(config−if)#

Repeat these steps for each VLAN. After you successfully configure the network, all end stations should be able to communicate with one another. Communication between hosts in the same VLAN is handled only by the switches. All interVLAN traffic must be routed by the RSM.

Configuring IPX InterVLAN Routing on the RSM

To configure interVLAN routing for IPX, perform these steps in Global Configuration mode:

1. Enable IPX routing on the router:

RSM1(config)#ipx routing

2. Specify an IPX routing protocol, in this example IPX RIP:

RSM1(config)#ipx router rip RSM1(config−ipx−router)#network all

3. Specify a VLAN interface on the RSM:

RSM1(config−ipx−router)#interface vlan50

4. Assign a network number to the VLAN and an encapsulation method; then exit:

RSM1(config−if)#ipx network 50 encapsulation snap

RSM1(config−if)#^Z

RSM1#

Configuring AppleTalk InterVLAN Routing on an RSM

To configure interVLAN routing for AppleTalk, perform these tasks beginning in Global Configuration mode:

1. Enable AppleTalk routing on the router:

RSM1#configure terminal

Enter configuration commands, one per line. End with CNTL/Z. RSM1(config)#appletalk routing

2. Specify a VLAN interface number on the RSM and assign a cable range to the VLAN:

RSM1(config)#interface vlan100 RSM1(config−if)#appletalk cable−range 200−200

3. Assign a zone name to the VLAN; then exit:

Router(config−if)#appletalk zone artdept

Router(config−if)#^Z

128

Router#

Viewing the RSM Configuration

Just as on a router, you use the show running−config to view the running configuration:

Coriolis5000RSM# show running−config

Building configuration…

Current configuration:

!

version 11.2

no service udp−small−servers no service tcp−small−servers

!

hostname Coriolis5000RSM

!

enable book1234

!

!

interface Vlan1

ip address 130.77.20.15 255.255.254.0

!

interface Vlan2

ip address 130.77.20.15 255.255.254.0

!

interface Vlan3

ip address 130.77.20.16 255.255.254.0

Assigning a MAC Address to a VLAN

In Interface Configuration mode, you can assign a MAC address to the interface by using the mac−address command. Use the 48−bit IEEE MAC address written as a dotted triplet of four−digit hexadecimal numbers, as shown here:

Coriolis5000RSM(config−if)#mac−address 0040.0b03.5d6f

Coriolis5000RSM(config−if)#exit

Viewing the MAC Addresses

To see the MAC addresses assigned to each VLAN, use the following command:

CoriolisRSM5000> (enable) show cam dynamic

* = Static Entry. + = Permanent Entry. # = System Entry. R = Router Entry. X = Port Security Entry

VLAN Dest MAC/Route Des [CoS] Destination Ports or VCs

———————————————————————————— ——————————————————————————

129

Total Matching CAM Entries Displayed = 7

Configuring Filtering on an Ethernet Interface

To configure protocol filtering for IP only, follow these steps:

1.To configure protocol filtering on the Ethernet, Fast Ethernet, or Gigabit Ethernet ports, you must first enable protocol filtering on the switch. To enable protocol filtering, use this command in Privileged mode:

Coriolis5002 (enable) set protocolfilter enable

2. Configure port 2 on module 2 to filter all traffic unless it is IP based:

Coriolis5002(enable) set port protocol 2/2 ip on IP protocol set to on mode on module 2/2. Coriolis5002>(enable)

3. Do the same for port 3 on module 2:

Coriolis5002>(enable) set port protocol 2/3 ip on

IP protocol set to on mode on module 2/3.

Coriolis5002>(enable)

Configuring Port Security on an Ethernet Module

To enable port security on a switch interface, use the following steps:

1. Enable port security on the desired ports. Optionally, you can specify the secure MAC address:

set port security mod_num/port_num {enable|disable} [mac_address]

2. Add MAC addresses to the list of secure addresses:

set port security module number/port number mac_address

Here’s an example of using this command:

130