Module 1

EAPS Review
ENS 15.1: Advanced Switch Operation and Configuration.

EAPS Review
Student Objectives
Identify the EAPS ring elements.
Describe the EAPS domain and VLAN relationship.
Identify the control VLAN configuration rules.
Describe EAPS fault detection & restoration.
Identify the steps to create an EAPS ring.
Configure EAPS.
Verify the EAPS configuration and status.

Slide 2

EAPS Overview
EAPS Review
ENS 15.1: Advanced Switch Operation and Configuration.

Ethernet Automatic Protection Switching

EAPS is a simple Layer 2 loop prevention protocol designed
to operate in networks where fast failover is essential
EAPS is ideal for:
Service providers providing resilient Ethernet transport for customers
Data centers requiring an always on resilient service
Enterprise customers with a Voice Over IP infrastructure

EAPS Provides:
Sub 50 millisecond failover which is virtually undetectable by end-users
Easy to setup and understand
Point and click provisioning from within Ridgeline
Simple configuration steps from within the CLI

Centralized management when using Ridgeline

Slide 4

Predictable operation

Standard Enterprise Design

Identify the network loops
Floor 2 - Edge
SummitX450e

SummitX450e

SummitX450e

SummitX450e

3rd Network Loop

Floor 1 - Edge
nd Network Loop
2nd

SummitStack1

SummitStack2

SummitStack3

SummitStack4

Data Center Server Farm

SummitX650
Top of Rack Switch

SummitX650
Top of Rack Switch

Data Center - Core

BD8K1
Slide 5

BD8K2

1stst Network Loop

Standard Enterprise Design with EAPS

EAPS domain created for each network loop
Floor 2 - Edge
SummitX450e

SummitX450e

SummitX450e

SummitX450e

EAPS Domain #3

Floor 1 - Edge
EAPS Domain #2
SummitStack1

SummitStack2

SummitStack3

SummitStack4

Data Center Server Farm

SummitX650
Top of Rack Switch

SummitX650
Top of Rack Switch

Data Center - Core

BD8K1
Slide 6

BD8K2

EAPS Domain #1

Standard Enterprise Design with EAPS

EAPS elements added for each domain: node type, primary and
secondary ports (secondary port on the master will block)
Floor 2 - Edge

Transit

S X

Transit

P 1:1 Master 4:1 S X

SummitX450e

Master

SummitX450e

Transit

Transit

EAPS Domain #3

Transit

Transit

EAPS Domain #2

SummitX450e

SummitX450e

Floor 1 - Edge

SummitStack1

SummitStack2

SummitStack3

SummitStack4

Data Center Server Farm

S X
Master

P
Transit

SummitX650
Top of Rack Switch

SummitX650
Top of Rack Switch

S
S

Data Center - Core

Transit
S

Transit
Transit

BD8K1
Slide 7

S
P
P
P

P
P
P

Transit
Transit

Transit

BD8K2

EAPS Domain #1

EAPS Domain and VLAN Relationship

Each link can carry one or more domains.
For every EAPS domain, a control VLAN needs to be created
to carry all EAPS control traffic.
An EAPS domain can contain several protected VLANs.
R
CONT

OL

ECTE
PROT
D
D
ECTE
PROT
R
CONT

IN
DOMA

OL

ECTE
PROT
D
D
ECTE
PROT

IN
D OM A

LINK
Slide 8

EAPS Operation
EAPS Review
ENS 15.1: Advanced Switch Operation and Configuration.

EAPS Operation - Configuration

Each switch in the domain is configured with the following elements:
Node type
Primary & secondary ports
Control VLAN

The Master node is responsible for transmitting hello packets

Transmitted through the primary port (default setting)

Floor 1 - Edge

hello packet
P

Transit

SummitStack1

Master

S X

SummitStack2

Transit

SummitStack3

BD8K1
Slide 10

BD8K

SummitStack4

Data Center - Core

Transit

Transit

Transit

BD8K2

EAPS Domain #2

EAPS Operation
The master node transmits hello packets within the control
VLAN every second
Defined by the EAPS domains hello timer
Default is 1 second
Values are from 100 milliseconds to 15 seconds

Floor 1 - Edge

Transit

SummitStack1

Master
chk

S X

SummitStack2

Transit

SummitStack3

BD8K1
Slide 11

SummitStack4

Data Center - Core

Transit

Transit

Transit

BD8K2

EAPS Domain #2

EAPS Operation Link Failure

On detecting a link failure, the transit node transmits a links down
packet through its other ring port
The master declares the domain has failed and unblocks its secondary
port sending a flush FDB packet out both ring ports
The master continues to transmit hello packets
Floor 1 - Edge
P

Transit

P flsh
Master
chkflsh S X

SummitStack1

SummitStack2

Transit

SummitStack3

Data Center - Core

Transit

BD8K1
Slide 12

SummitStack4

Transit
dwn

dwn
Transit
BD8K2

EAPS Domain #2

EAPS Operation Link Restoration

On link restoration, the transit node transmits a pre-forwarding packet
through its other ring port. The domain state is links up
The master continues to transmit hello packets and waits until it
receives a hello packet before it declares the domain complete
The master then blocks its secondary port and sends a flush FDB
packet
and then continues to transmit hello packets
Floor
1 - Edge
P

Transit

P flsh
Master
chkflsh S X

SummitStack1

SummitStack2

Transit

SummitStack3

Data Center - Core

Transit

BD8K1
Slide 13

SummitStack4

Transit
pre

pre
Transit
BD8K2

EAPS Domain #2

Configuring EAPS
EAPS Review
ENS 15.1: Advanced Switch Operation and Configuration.

EAPS Configuration Steps

VLAN Configuration
Ensure any VLANs to be protected by EAPS contain the tagged ring ports for
each domain created
Create a control VLAN for each domain and ensure they contain the tagged
ring ports for each specific domain (Maximum of 2 ports in each control VLAN)

EAPS Configuration
Create an EAPS domain
Configure one switch as a master node. All other switches will be transit nodes
Configure the primary port and secondary port for each switch
Add the designated control VLAN to the EAPS domain
Add the protected VLANs to the EAPS domain
Enable the EAPS domain
Repeat steps 1 through 6 for each EAPS domain required
Finally enable EAPS globally
Slide 15

EAPS Configuration Overview (Domain #2)

The control VLAN (VLAN ctrl-2will have a tag of 102
Ports 1:1 and 4:1 for the SummitStacks will be added to the ctrl-2 VLAN as
tagged ports
Ports 1:1 and 2:1 for the BD8Ks will be added to the ctrl-2 VLAN as tagged
ports

Floor
The
VLAN (VLAN data) has a tag of 10
1 - protected
Edge
The above
ports must
be Master
addedS tagged
to theSdata
VLAN
on each
switch,
P
Transit
S
P
P
Transit
P
Transit S
EAPS Domain #2
along withSummitStack1
any end-userSummitStack2
ports. End-user
ports are usually
untagged.
SummitStack3
SummitStack4
1:1

4:1

1:1

4:1

1:1

4:1

1:1

VLAN: ctrl-2
802.1Q Tag: 102
EAPS Domain: ed-2

Data Center - Core

1:1

1:1

Transit 2:1 P

BD8K1
Slide 16

Transit

2:1

BD8K2

4:1

Configuring EAPS (SummitStack2) - 1

To create an EAPS domain:
create eaps <eapsDomain>

To configure the EAPS mode:

configure eaps <eapsDomain>
mode [master | transit]

To configure the ring ports:

configure eaps <eapsDomain>
primary <pri_port>
configure eaps <eapsDomain>
secondary <sec_port>

To configure the control VLAN:

configure eaps <eapsDomain>
add control <vlan>

To add the protected VLANs:

configure eaps <eapsDomain>
add protected <vlan>
Slide 17

SummitStack2.1 #
* SummitStack2.2
* SummitStack2.3
* SummitStack2.4
* SummitStack2.5
* SummitStack2.6

create eaps
# configure
# configure
# configure
# configure
# configure

ed-2
eaps
eaps
eaps
eaps
eaps

ed-2
ed-2
ed-2
ed-2
ed-2

mode master
primary 1:1
secondary 4:1
add control ctrl-2
add protected data

Configuring EAPS (SummitStack2) - 2

To enable an EAPS domain:
enable eaps <eapsDomain>

To enable EAPS globally:

enable eaps

To verify EAPS globally:

show eaps

To verify the EAPS domain:

show eaps <eapsDomain>

Slide 18

* SummitStack2.7 # enable eaps ed-2

* SummitStack2.8 # enable eaps
* SummitStack2.9 # show eaps

EAPS Enabled: Yes

EAPS Fast-Convergence: Off
EAPS Display Config Warnings: On
EAPS Multicast Add Ring Ports: Off
EAPS Multicast Send IGMP Query: On
EAPS Multicast Temporary Flooding: Off
EAPS Multicast Temporary Flooding Duration: 15 sec
Number of EAPS instances: 3
# EAPS domain configuration :
---------------------------------------------------------------------Domain
State
Mo En Pri
Sec
Control-Vlan VID
---------------------------------------------------------------------ed-2
Complete
M
Y
1:1
4:1
ctrl-2
(102 )
---------------------------------------------------------------------* SummitStack2.10 # show eaps ed-2

Name: ed-2
State: Complete
Running: Yes
Enabled: Yes
Mode: Master
Primary port:
1:1
Port status: Up
Tag status: Ta
Secondary port: 4:1
Port status: Blocked
Tag status: Ta
Hello timer interval: 1 sec 0 millisec
Fail timer interval: 3 sec
Fail Timer expiry action: Send alert
Last valid EAPS update: None till now.
EAPS Domain has following Controller Vlan:
Vlan Name
VID
ctrl-2
102
EAPS Domain has following Protected Vlan(s):
Vlan Name
VID
data
10
Number of Protected Vlans: 1

Configuring EAPS (SummitStack2) - 3

To rename an EAPS domain:
configure eaps <eapsDomain>
name <new_name>

To change the ring ports:

disable eaps <eapsDomain>
unconfigure eaps <eapsDomain>
primary <pri_port>
unconfigure eaps <eapsDomain>
secondary <sec_port>
Remember to re-enable EAPS when the new
ring ports have been assigned

To configure the fail timer expiry action:

configure eaps <eapsDomain>
failtime expiry action [sendalert | open-secondary-port]

To verify the changes:

show eaps <eapsDomain>
Slide 19

* SummitStack2.11
* SummitStack2.12
* SummitStack2.13
* SummitStack2.14
* SummitStack2.15
* SummitStack2.16
* SummitStack2.17
* SummitStack2.18
port
* SummitStack2.19

#
#
#
#
#
#
#
#

conf eaps ed-2 name ed-3

disable eaps ed-3
unconfigure eaps ed-2 primary
unconfigure eaps ed-2 secondary
configure eaps ed-2 primary 4:1
configure eaps ed-2 secondary 1:1
enable eaps ed-3
configure ed-3 failtime expiry-action open-sec

# show eaps ed-3

Name: ed-3
State: Complete
Running: Yes
Enabled: Yes
Mode: Master
Primary port:
4:1
Port status: Up Tag status: Tagged
Secondary port: 1:1
Port status: Blocked
Tag status
Hello timer interval: 1 sec 0 millisec
Fail timer interval: 3 sec
Fail Timer expiry action: Open secondary port
Last update: From Master Id 00:04:96:20:b1:2d, at Fri May 6 10:
2012
EAPS Domain has following Controller Vlan:
Vlan Name
VID
ctrl-2
102
EAPS Domain has following Protected Vlan(s):
Vlan Name
VID
data
10
Number of Protected Vlans: 1

EAPS Review Summary

You should now be able to:
Identify the EAPS ring elements.
Describe the EAPS domain and VLAN relationship.
Identify the control VLAN configuration rules.
Describe EAPS fault detection & restoration.
Identify the steps to create an EAPS ring.
Configure EAPS.
Verify the EAPS configuration and status

Slide 20

Lab 1 - EAPS Lab (Single Ring)

This lab exercise tests your ability to configure an EAPS
domains on top of a single ring topology.
Lab Group PC

Lab Data
192.168.X.101

EAPS edX

5
dataX
192.168.X.11
controlX
3
SwitchX
1

dataX
192.168.X.1

X
controlX
13

CoreSwitch
-A

controlX
13

dataX
192.168.X.2
CoreSwitch
-B

Slide 21

 2012 Extreme Networks, Inc.

All rights reserved