Monday, October 20, 2008

Howto admin HP 3500yl

1, In HP, form LACP trunk with Fortigate:
3500yl(config)#trunk 2,10,15-16,18 Trk2 LACP
3500yl(config)# sh trunks

Load Balancing

Port | Name Type | Group Type
---- + -------------------------------- --------- + ----- -----
2 | To_ControlPC_ 100/1000T | Trk2 LACP
10 | Hen_Trunk 100/1000T | Trk2 LACP
15 | Reserved 100/1000T | Trk2 LACP
16 | Reserved2 100/1000T | Trk2 LACP
18 | MINE_trunk 100/1000T | Trk2 LACP
===As long as the interface is up, it will be list here.

3500yl(config)# sh vlan 901

Status and Counters - VLAN Information - Ports - VLAN 901

802.1Q VLAN ID : 901
Name : VLAN901
Status : Port-based
Voice : No
Jumbo : No

Port Information Mode Unknown VLAN Status
---------------- -------- ------------ ----------
5 Tagged Learn Up
6 Tagged Learn Up
7 Tagged Learn Up
8 Tagged Learn Up
11 Tagged Learn Up
19 Tagged Learn Up
21 Tagged Learn Up
22 Tagged Learn Up
23 Tagged Learn Up
24 Tagged Learn Up
A1 Tagged Learn Up
A4 Tagged Learn Up
Trk1 Untagged Learn Down
Trk2 Tagged Learn Up =====> FGT use default setting (Active)

Wednesday, October 8, 2008

QinQ

5003A:
Custom -------(f2)5003A(f3)-------serviceProvider
BCM.1> dtag mode xe14 external
BCM.1> dtag mode xe15 internal
BCM.1> dtag show
port 1:xe0 double tag mode external (customer), tpid 0x8100
port 1:xe1 double tag mode external (customer), tpid 0x8100
port 1:xe2 double tag mode external (customer), tpid 0x8100
port 1:xe3 double tag mode external (customer), tpid 0x8100
port 1:xe4 double tag mode external (customer), tpid 0x8100
port 1:xe5 double tag mode external (customer), tpid 0x8100
port 1:xe6 double tag mode external (customer), tpid 0x8100
port 1:xe7 double tag mode external (customer), tpid 0x8100
port 1:xe8 double tag mode external (customer), tpid 0x8100
port 1:xe9 double tag mode external (customer), tpid 0x8100
port 1:xe10 double tag mode external (customer), tpid 0x8100
port 1:xe11 double tag mode external (customer), tpid 0x8100
port 1:xe12 double tag mode external (customer), tpid 0x8100
port 1:xe13 double tag mode external (customer), tpid 0x8100
port 1:xe14 double tag mode external (customer), tpid 0x8100
port 1:xe15 double tag mode internal (service provider), tpid 0x8100
port 1:xe16 double tag mode external (customer), tpid 0x8100
port 1:xe17 double tag mode external (customer), tpid 0x8100
port 1:xe18 double tag mode external (customer), tpid 0x8100
port 1:xe19 double tag mode external (customer), tpid 0x8100
BCM.1> exit

5003A-L-87 # sh switch fabric-channel interface f2
config switch fabric-channel interface
edit "f2"
set native-vlan 1901
set allowed-vlans 1,101-200,901-910,1901
next
end

5003A-L-87 # sh switch fabric-channel interface f3
config switch fabric-channel interface
edit "f3"
set allowed-vlans 1,60,901,1901
next
end

On FortiOS side, by default vlanforward is enabled that means when the interface got 802.1q packet and no vlan interface under it, it will just forward out to other interface.

==============================

Cisco 3550

interface FastEthernet0/21
switchport access vlan 1901
switchport mode dot1q-tunnel


HP:
As HP procurve got double vlan packet, it will change the vlanID to 4096 and that is.
In another word, it does not support dtag.
Avalanche can send out DTAG traffic, but only on client side.

Wednesday, October 1, 2008

Howto Windows AD

bbs.winos.cn


http://bbs.winos.cn/thread-39787-1-3.html

C:/net use //172.18.9.203/software * /user:zkang

After create GPO, Group Policy Object, we need to go to its' own property and apply this GPO to certain user groups which will be used.