Voice VLAN в ExtremeXOS

У каталистов все просто - voice vlan. У extreme summit сложнее. Ставим vlan с тегом и конфигурим LLDP, чтобы телефон схватил именно тегированный vlan.

enable lldp ports 1-48
configure lldp port 1-48 advertise vendor-specific med capabilities
configure lldp port 1-48 advertise vendor-specific dot1 vlan-name vlan VLAN0022_IPPHONES
configure lldp port 1-48 advertise vendor-specific med power-via-mdi
configure lldp port 1-48 advertise vendor-specific med policy application voice vlan VLAN0022_IPPHONES dscp 46
Configure lldp port 1-48 advertise system-capabilities
Configure lldp port 1-48 advertise vendor-specific dot1 port-protocol-vlan-id vlan VLAN0022_IPPHONES

Смотреть тут - https://gtacknowledge.extremenetworks.com/articles/How_To/How-to-configure-LLDP-for-Extreme-switches-to-recognize-IP-phones и тут - http://www.extremenetworks.ru/blog/ip-telefonyi-i-kommutatoryi-extreme-ispolzuya-lldp/

PBR in Extreme summit switch

* Int.X460-Core.4 # edit policy police_vlan8_pbr
entry permit_local_00 {
if {
   source-address 192.168.0.0/16;
   destination-address 192.168.0.0/16;
   } then {
     permit;
}
}

entry permit_local_01 {
if {
   source-address 192.168.0.0/16;
   destination-address 10.0.0.0/8;
   } then {
     permit;
}
}

entry permit_local_02 {
if {
   source-address 192.168.0.0/16;
   destination-address 172.168.0.0/12;
   } then {
     permit;
}
}

entry redirect_local_00 {
if {
   source-address 192.168.253.0/24;
   } then {
   redirect 10.255.255.41;
}
}


configure access-list police_vlan8_pbr vlan "VLAN8_USERS-NEW" ingress 
unconfigure access-list police_vlan8_pbr ingress

===

Policy-Based Redirection Redundancy

Multiple Next-hop Support

As discussed above, Layer 3 and Layer 2 policy-based redirect support only one next-hop for one

policy-based entry. Multiple next-hops with different priorities can be configured. A higher priority is

denoted with a higher number; for example, “priority 5” has a higher precedence than “priority 1.” When

a high priority next-hop becomes unreachable, another preconfigured next-hop, based on priority,

replaces the first. This is done by first creating a flow-redirect name that is used to hold next-hop

information. User-created flow-redirect names are not case-sensitive.

Use the following command:

create flow-redirect flow_redirect_name

To delete the flow-redirect name, use:

delete flow-redirect flow_redirect_name

Then information for each next-hop, including a defined priority, is added one by one to the new flowredirect

name. Use the following command:

configure flow-redirect flow_redirect_name add nexthop ipaddress priority number

===

An example.
We want to redirect all traffic from 10.91.0.48/28 to address 10.91.0.234

create flow-redirect redir1
configure flow-redirect redir1 add nexthop 10.91.0.234 priority 100
configure flow-redirect redir1 nexthop 10.91.0.234 ping health-check interval 60 miss 3

Create an ACL:
entry subnet1 {
if match all {
source-address 10.91.0.48/28 ;
} then {
permit;
redirect-name redir1;
}
}

configure access-list redir1 vlan "vlan_name" ingress


That will redirect traffic in this vlan only from subnet 10.91.0.48/28 to 10.91.0.234.

https://community.extremenetworks.com/extreme/topics/help_required_for_l3_policy_based_redirect_summit_x460_24t_exos_12_5-mb5hr

Summit x450 mirroring

Кстати вот вам пример рекомендованной настройки мирроинга для X450:

Пример, конфигурирования:
create vlan "LOM2"
configure vlan LOM2 tag 202
configure vlan LOM2 ipaddress 172.26.131.146 255.255.255.240
conf LOM2 add ports 21
conf LOM2 add port 23 tagged
conf mirroring mode enhanced
create vlan "test_mirr"
configure vlan test_mirr tag 333 remote-mirroring
ena mirroring to port-list 5,6 loopback-port 7 remote-tag 333
conf mirroring add vlan "LOM2"
conf vlan "test_mirr" add ports 3 tagged
conf vlan "test_mirr" add ports 4
en ipforwarding
enable jumbo-frame ports 5
enable jumbo-frame ports 6
enable jumbo-frame ports 7
disable learning port 3
disable learning port 4

Вырезка из мана.

enable mirroring to port
enable mirroring to [port [tagged | untagged] | port-list
loopback-port [tagged | untagged]] {remote-tag }
For BlackDiamond 20800 series switches only:
enable mirroring to [port | port-list ] [tagged |
untagged] {remote-tag }
Description
Dedicates a port on the switch to be the mirror output port, or the monitor port.

port Specifies the mirror output port.
port-list Specifies the list of ports where traffic is to be mirrored.
loopback-port Specifies an otherwise unused port required when mirroring to a port-list. The
loopback-port is not available for switching user data traffic.
NOTE: This parameter is not used on BlackDiamond 20800 series switches.
port Specifies a single loopback port that is used internally to provide this feature.
tagged Specifies the mirror output, or monitor, port is tagged.
NOTE: This parameter is available only on the BlackDiamond 10808,
BlackDiamond 12800, and BlackDiamond 20800 series switches.
untagged Specifies the mirror output, or monitor, port is untagged.
NOTE: This parameter is available only on the BlackDiamond 10808,
BlackDiamond 12800, and BlackDiamond 20800 series switches.
remote-tag Specifies the value of the VLAN ID used by the mirrored packets when
egressing the monitor port.