Building Sandbox 9

This page describes any important-like things that happen in setting up the Sandbox 9. Eventually, OpenFlow will be used with SB9.

Overview

This is the strategy regarding this department:

1. Set up static VLANs based on ORBIT network infrastructure convention.
2. introduce virtual switching once the OpenFlow controller can be implemented.

Preliminary setup based on ORBIT Network Infrastructure

As of now (6/26/09), we still have not began work on a controller. Without the controller, the virtual switches are nonfunctional, so we first begin by trying to build Sandbox 9 using static VLANs and legacy firmware.

On the NEC switch, 3 VLANS and a trunk are assigned in the following manner:

• port 1-4 : CM (VLAN 3)
• port 5-8 : Control (VLAN 27)
• port 9-12 : Data (VLAN 28)
• port 55-58 : trunk

DHCP Relay Agents

No IP relay agents are needed for DHCP because these are only required when the dhcp server lives on one vlan, and hosts on another vlan need its service. In the case of this switch, dhcp comes from beyond the firewall, and comes in from the trunk.

Static VLAN Configuration

The steps assume you are already logged in and in privileged mode on the switch. Configuration of the CM VLAN (VLAN 3) is shown here.

1. Create and name VLAN

   (config)# vlan 3
   !(config-vlan)# name "CM"
   !(config-vlan)# exit
   

2. Assign ports to VLAN. Unfortunately, you have to configure one port at a time. Luckily, you can pull back old commands by using the up arrow key.

   !(config)# interface gi 0/1
   !(config-if)# switchport mode access
   !(config-if)# switchport acc vlan 3
   !(config)# interface gi 0/2
   !(config-if)# switchport mode access
   !(config-if)# switchport acc vlan 3
   !(config)# interface gi 0/3
   !(config-if)# switchport mode access
   !(config-if)# switchport acc vlan 3
   !(config)# interface gi 0/4
   !(config-if)# switchport mode access
   !(config-if)# switchport acc vlan 3
   

3. After repeating the steps for the Control and Data VLANs, configure the trunk ports:

   !(config-if)# interface gi 0/45
   !(config-if)# switchport mode trunk
   !(config-if)# switchport trunk allowed vlan 3,27,28
   !(config-if)# interface gi 0/46
   !(config-if)# switchport mode trunk
   !(config-if)# switchport trunk allowed vlan 3,27,28
   !(config-if)# interface gi 0/47
   !(config-if)# switchport mode trunk
   !(config-if)# switchport trunk allowed vlan 3,27,28
   !(config-if)# interface gi 0/48
   !(config-if)# switchport mode trunk
   !(config-if)# switchport trunk allowed vlan 3,27,28
   !(config-if)# exit
   !(config)# save
   (config)# exit
   

Setup

A host is connected to a Control VLAN port (0/7), and the dhcp comes from trunk port 0/48. It will be able to bind to an address from Control, but not from any other VLAN.