New and Enhanced Features in AlliedWare Plus 5.4.4 Major and Minor Versions » SBx8100 Series » SBx908 Series » x900 Series » x610 Series » x510 Series » IX5 » x310 Series » x230 Series » x210 Series » 5.4.4-0.1 » 5.4.4-1.1 » 5.4.4-2.3 » 5.4.4-3.
Acknowledgments This product includes software developed by the University of California, Berkeley and its contributors. Copyright ©1982, 1986, 1990, 1991, 1993 The Regents of the University of California. All rights reserved. This product includes software developed by the OpenSSL Project for use in the OpenSSL Toolkit. For information about this see www.openssl.org/ Copyright ©1998-2008 The OpenSSL Project. All rights reserved.
Contents AlliedWare Plus Version 5.4.4-3.5.......................... 1 Introduction .............................................................................................................................................. 2 New Features and Enhancements .................................................................................................... 4 Enhancements to Processing of Next-hop Updates ........................................................... 4 Login Security Enhancements .............
Release Licensing...........................................................................................................................57 Important Considerations Before Upgrading to this Version ...............................................58 Licensing ...........................................................................................................................................58 Upgrading a VCStack..........................................................................................
VCStacks......................................................................................................................................... 117 AMF External Removable Media ........................................................................................... 117 AMF Interaction with QoS and ACLs.................................................................................... 118 NTP and AMF .......................................................................................................
Forming or extending a VCStack .......................................................................................... 267 AMF software version compatibility .................................................................................... 268 Upgrading all switches in an AMF network ...................................................................... 268 Changes in this Version....................................................................................................................
AlliedWare Plus Version 5.4.4-3.5 For SwitchBlade x8100 Series, SwitchBlade x908, x900 Series, x610 Series, x510 Series, IX5-28GPX, x310 Series, x230 Series and x210 Series Switches Contents Introduction .............................................................................................................................................. 2 New Features and Enhancements ....................................................................................................
Introduction This section of this release note describes the new features and enhancements in AlliedWare Plus software version 5.4.4-3.5 since version 5.4.4-2.3. For more information, see the Software Reference for your switch. Software file details for this version are listed in Table 1 below. Caution: Software version 5.4.4-3.5 requires a release license for the SBx908 and SBx8100 switches. If you are using either of these switches, ensure that your switch has a 5.4.
Caution: Using a software version file for the wrong switch model may cause unpredictable results, including disruption to the network. Information in this release note is subject to change without notice and does not represent a commitment on the part of Allied Telesis, Inc. While every effort has been made to ensure that the information contained within this document and the features and changes described are accurate, Allied Telesis, Inc.
New Features and Enhancements Software version 5.4.4-3.5 includes all the new features that have been added to AlliedWare Plus since the release of 5.4.4-1.1. This section summarizes the new features in 5.4.4-3.5. For more information about all features on the switch, see the Software Reference for your switch. Unless otherwise stated, all new features and enhancements are available on all switch models running this version of AlliedWare Plus.
Logging of attempts to set release files When a user attempts to set a primary or backup release file (using the boot system command), the switch now sends a failure or success message to the logging system. The error message has a log severity level of “warning” and the success message has a severity level of “notice”. Delay between password attempts On a switch whose bootloader is set to security level 3, a 4 second gap is now required between attempts to re-enter a password.
Web Authentication Unmatched Proxy Setting Detection By default, AlliedWare Plus Web Authentication intercepts the supplicant’s initial TCP port 80 connection to a web page and sends it the Web Authentication login page. You can also specify any additional TCP port numbers that the web authentication server is to intercept by using the auth-web-server intercept-port command. In this way, Web Authentication can intercept packets going to a proxy server by adding the port number of the proxy server.
Important Considerations Before Upgrading to this Version Licensing From software version 5.4.4-0.4 onwards, AlliedWare Plus software releases need to be licensed for SBx908 and SBx8100 switches. If you are upgrading the software on your SBx908 or SBx8100 switch, please ensure you have a 5.4.4 license on your switch. To obtain a license, contact your authorized Allied Telesis support center. You will need to provide the MAC addresses of the switches you want to license.
ISSU (In-Service Software Upgrade) This version does not support ISSU: You cannot use ISSU to upgrade to this minor software version. AMF software version compatibility We strongly recommend that all switches in an AMF network run the same software release. If this is not possible, switches running this minor version are compatible with: ■ x210 Series switches running version 5.4.4-1.2 (but not earlier versions) ■ other AlliedWare Plus switches running version 5.4.3-2.6 and later or any 5.4.4-x.
Licensing this Software Version on an SBx908 Switch Release licenses are applied with the license certificate command, then validated with the show license or show license brief commands. Follow these steps: ■ Obtain the MAC address for a switch ■ Obtain a release license for a switch ■ Apply a release license on a switch ■ Confirm release license application Step 1: Obtain the MAC address for a switch A release license is tied to the MAC address of the switch.
From version 5.4.
Licensing this Software Version on a Control Card for an SBx8100 Series Switch Release licenses are applied with the license certificate command, then validated with the show license or show license brief commands.
Entering a valid release license changes the console message displayed about licensing: 11:04:56 awplus IMI[1696]: SFL: The current software is not licensed. awplus# license certificate demo1.csv A restart of affected modules may be required. Would you like to continue? (y/n): y 11:58:14 awplus IMI[1696]: SFL: The current software is licensed. Exiting unlicensed mode. Stack member 1 installed 1 license 1 license installed.
Installing this Software Version Caution: Software version 5.4.4-2.3 requires a release license for the SBx908 and SBx8100 switches. If you are using either of these switches, ensure that your switch has a 5.4.4 release license certificate before you upgrade. Contact your authorized Allied Telesis support center to obtain a license. For details, see “Licensing this Software Version on an SBx908 Switch” on page 9 and “Licensing this Software Version on a Control Card for an SBx8100 Series Switch” on page 11.
Return to Privileged Exec mode and check the boot settings, by using the commands: awplus(config)# exit awplus# show boot 5. Reboot using the new software version. awplus# reload 14 New and Enhanced Features in AlliedWare Plus 5.4.
Installing the GUI This section describes how to install and set up the AlliedWare Plus GUI using an SD card, a USB storage device, or a TFTP server. The version number in the GUI Java applet filename (.jar) gives the earliest version of the software file (.rel) that the GUI can operate with.
6. Copy the GUI file onto your switch from the TFTP server, SD card, or USB storage device. TFTP server: Use the command: awplus# copy tftp:/// flash:/ SD card: use the command: awplus# copy card:/ flash:/ USB storage device: use the command: awplus# copy usb:/ flash:/ where is the IP address of the TFTP server, and where is the filename of the GUI Java applet. 7. Ensure the HTTP service is enabled on your switch.
AlliedWare Plus Version 5.4.4-2.3 For SwitchBlade x8100 Series, SwitchBlade x908, x900 Series, x610 Series, x510 Series, IX5-28GPX, x310 Series, x230 Series and x210 Series Switches Contents Introduction ............................................................................................................................................18 Key New Features and Enhancements..........................................................................................20 Web-Authentication Enhancements ......
Introduction This release note describes the new features and enhancements in AlliedWare Plus software version 5.4.4-2.3 since version 5.4.4-1.1. For more information, see the Software Reference for your switch. Software file details for this version are listed in Table 1 below. Caution: Software version 5.4.4-2.3 requires a release license for the SBx908 and SBx8100 switches. If you are using either of these switches, ensure that your switch has a 5.4.4 release license certificate before you upgrade.
Caution: Using a software version file for the wrong switch model may cause unpredictable results, including disruption to the network. Information in this release note is subject to change without notice and does not represent a commitment on the part of Allied Telesis, Inc. While every effort has been made to ensure that the information contained within this document and the features and changes described are accurate, Allied Telesis, Inc.
Key New Features and Enhancements Software version 5.4.4-2.3 includes all the new features that have been added to AlliedWare Plus since the release of 5.4.4-1.1. This section summarizes the key new features. For more information about all features on the switch, see the Software Reference for your switch. Unless otherwise stated, all new features and enhancements are available on all switch models running this version of AlliedWare Plus.
■ Previously, you could set the HTTPS port number for the web authentication server. Now, you no longer need to set the port number and the default port number 443 is used. As a result, the auth-web-server sslport command has been deleted. ■ The default behavior of web-authentication packet forwarding has changed. Previously, packet forwarding for port authentication was disabled by default. Now, ARP, DHCP, DNS forwarding for port authentication are enabled by default.
Stack-Local-VLANs Enhancements Network data VLANs are shared by the stack and use the stack's virtual MAC address. Consequently only the stack master is able to respond to messages such as ARP or ICMP requests. One disadvantage of this is that although network administrators can ping the whole stack to determine its operational status, such pinging will not provide status information for individual stack members. Stack-local-VLANs provide a solution to this problem.
Table 1-1: Configuring Stack-Local-VLANs on a Two Member Stack Description (cont.) Enter interface configuration mode for port 2.0.24. Prompt (cont.) Command (cont.) awplus(config)# interface port2.0.24 Set the port to access mode. awplus(config-if)# switchport mode access Add this port to member 2’s local VLAN. awplus(config-if)# switchport access vlan 4002 Step 4. Apply the IP address 192.168.1.1/24 to VLAN 4001 Enter global configuration mode.
Important Considerations Before Upgrading to this Version Licensing From software version 5.4.4-0.4 onwards, AlliedWare Plus software releases need to be licensed for SBx908 and SBx8100 switches. If you are upgrading the software on your SBx908 or SBx8100 switch, please ensure you have a 5.4.4 license on your switch. To obtain a license, contact your authorized Allied Telesis support center. You will need to provide the MAC addresses of the switches you want to license.
ISSU (In-Service Software Upgrade) This version does not support ISSU: You cannot use ISSU to upgrade to this minor software version. AMF software version compatibility We strongly recommend that all switches in an AMF network run the same software release. If this is not possible, switches running this minor version are compatible with: ■ x210 Series switches running version 5.4.4-1.2 (but not earlier versions) ■ other AlliedWare Plus switches running version 5.4.3-2.6 and later or any 5.4.4-x.
Licensing this Software Version on an SBx908 Switch Release licenses are applied with the license certificate command, then validated with the show license or show license brief commands. Follow these steps: ■ Obtain the MAC address for a switch ■ Obtain a release license for a switch ■ Apply a release license on a switch ■ Confirm release license application Step 1: Obtain the MAC address for a switch A release license is tied to the MAC address of the switch.
From version 5.4.
Licensing this Software Version on a Control Card for an SBx8100 Series Switch Release licenses are applied with the license certificate command, then validated with the show license or show license brief commands.
Entering a valid release license changes the console message displayed about licensing: 11:04:56 awplus IMI[1696]: SFL: The current software is not licensed. awplus# license certificate demo1.csv A restart of affected modules may be required. Would you like to continue? (y/n): y 11:58:14 awplus IMI[1696]: SFL: The current software is licensed. Exiting unlicensed mode. Stack member 1 installed 1 license 1 license installed.
Installing this Software Version Caution: Software version 5.4.4-2.3 requires a release license for the SBx908 and SBx8100 switches. If you are using either of these switches, ensure that your switch has a 5.4.4 release license certificate before you upgrade. Contact your authorized Allied Telesis support center to obtain a license.
Return to Privileged Exec mode and check the boot settings, by using the commands: awplus(config)# exit awplus# show boot 5. Reboot using the new software version. awplus# reload New and Enhanced Features in AlliedWare Plus 5.4.
Installing the GUI This section describes how to install and set up the AlliedWare Plus GUI using an SD card, a USB storage device, or a TFTP server. The version number in the GUI Java applet filename (.jar) gives the earliest version of the software file (.rel) that the GUI can operate with.
6. Copy the GUI file onto your switch from the TFTP server, SD card, or USB storage device. TFTP server: Use the command: awplus# copy tftp:/// flash:/ SD card: use the command: awplus# copy card:/ flash:/ USB storage device: use the command: awplus# copy usb:/ flash:/ where is the IP address of the TFTP server, and where is the filename of the GUI Java applet. 7. Ensure the HTTP service is enabled on your switch.
34 New and Enhanced Features in AlliedWare Plus 5.4.
Authentication Commands Authentication Commands Contents auth-web forward .................................................................................................................................36 auth-web-server host-name .............................................................................................................38 auth-web-server login-url..................................................................................................................
Authentication Commands auth-web forward This command enables the web authentication packet forwarding feature on the interface specified. This command also enables ARP forwarding, and adds forwarded packets to the TCP or UDP port number specified. Use the no variant of this command disables or deletes the packet forwarding feature on the interface.
Authentication Commands To add the TCP forwarding port 137 on auth config-group student, use the following commands: awplus# configure terminal awplus(config)# auth config-group student awplus(config-auth-group)# auth-web forward tcp 137 To disable the ARP forwarding feature on auth config-group student, use the following commands: awplus# configure terminal awplus(config)# auth config-group student awplus(config-auth- no auth-web forward arp group)# To delete the TCP forwarding port 137 on auth config-g
Authentication Commands auth-web-server host-name This command assigns a hostname to the web authentication server. Use the no variant of this command to remove the hostname from the web authentication server. Syntax auth-web-server host-name no auth-web-server host-name Default Parameter Description URL string of the hostname The web authentication server has no hostname.
Authentication Commands auth-web-server login-url This command sets the web-authentication login page URL. Use the no variant of this command to delete the set URL. Syntax auth-web-server login-url no auth-web-server login-url Default Mode Examples Parameter Description Set login page URL The built-in login page is set by default. Global Configuration To set http://example.com/login.
Authentication Commands auth-web-server page logo This command sets the type of logo that will be displayed on the web authentication page. Use the no variant of this command to set the logo type to auto. Syntax auth-web-server page logo {auto|default|hidden} no auth-web-server page logo Default Mode Examples Parameter Description auto Display the custom logo if installed; otherwise display the default logo default Display the default logo hidden Hide the logo Logo type is auto by default.
Authentication Commands auth-web-server page sub-title This command sets the custom sub-title on the web authentication page. Use the no variant of this command to reset the sub-title to its default. Syntax auth-web-server page sub-title {hidden|text } no auth-web-server page sub-title Default Mode Examples Parameter Description hidden Hide the sub-title Text string of the sub-title "Allied-Telesis" is displayed by default.
Authentication Commands auth-web-server page success-message This command sets the success message on the web-authentication page. Use the no variant of this command to remove the success message. Syntax auth-web-server page success-message text no auth-web-server page success-message Default Mode Examples Parameter Description Text string of the success message No success message is set by default.
Authentication Commands auth-web-server page title This command sets the custom title on the web authentication page. Use the no variant of this command to remove the custom title. Syntax auth-web-server page title {hidden|text
} no auth-web-server page title Default Mode Examples Parameter Description hidden Hide the title Text string of the title “Web Access Authentication Gateway” is displayed by default.Authentication Commands auth-web-server page welcome-message This command sets the welcome message on the web-authentication page. Use the no variant of this command to remove the welcome message. Syntax auth-web-server page welcome-message text no auth-web-server page welcome-message Default Mode Examples Parameter Description Text string of the welcome message No welcome message is set by default.
Authentication Commands auth-web-server ssl This command enables HTTPS protocol or both HTTP protocol and HTTPS protocol for the web authentication server feature. When both protocols are enabled, HTTP packet is redirected to HTTP server and HTTPS packet is redirected to HTTPS server respectively. Use the no variant of this command to disable HTTPS protocol.
Authentication Commands auth-web-server ssl intercept-port Use this command to register HTTPS intercept port numbers when the HTTPS server uses custom port number (not TCP port number 443). Note that you need to use the auth-web-server intercept-port command to register HTTP intercept port numbers. Use the no variant of this command to delete registered port number.
Authentication Commands show auth-web-server This command shows the web authentication server configuration and status on the switch. Syntax Mode Examples show auth-web-server Privileged Exec To display web authentication server configuration and status, use the command: awplus# show auth-web-server Figure 1: Example output from the show auth-web-server command on the console.
Authentication Commands show auth-web-server page This command displays the web-authentication page configuration and status. Syntax Mode Examples show auth-web-server page Privileged Exec To show the web-authentication page information, use the command: awplus# show auth-web-server page Figure 2: Example output from the show auth-web-server page command on the console.
Stack-Local-VLANs Commands Stack-Local-VLANs Commands Contents vlan mode stack-local-vlan................................................................................................................50 New and Enhanced Features in AlliedWare Plus 5.4.
Stack-Local-VLANs Commands vlan mode stack-local-vlan This command enables you to create stack-local-VLANs and use ICMP to monitor and diagnose issues within specific members of the stack. When a VLAN is added using this method, all its traffic will be trapped to and processed by the CPU of the specific local stack member, rather than the CPU of the stack master. The no variant of this command destroys the specified VLAN.
AlliedWare Plus Version 5.4.4-1.1 For SwitchBlade x8100 Series, SwitchBlade x908, x900 Series, x610 Series, x510 Series, IX5-28GPX, x310 Series, x230 Series, and x210 Series Switches Contents Introduction ............................................................................................................................................52 New Products in 5.4.4-1.1...................................................................................................................
Introduction This release note describes the new features and enhancements in AlliedWare Plus software version 5.4.4-1.1 since version 5.4.4-0.1. For more information, see the Software Reference for your switch. Software file details for this version are listed in Table 1 below. Caution: Software version 5.4.4-1.1 requires a release license for the SBx908 and SBx8100 switches. If you are using either of these switches, ensure that your switch has a 5.4.4 release license certificate before you upgrade.
Caution: Using a software version file for the wrong switch model may cause unpredictable results, including disruption to the network. Information in this release note is subject to change without notice and does not represent a commitment on the part of Allied Telesis, Inc. While every effort has been made to ensure that the information contained within this document and the features and changes described are accurate, Allied Telesis, Inc.
New Products in 5.4.4-1.1 AlliedWare Plus version 5.4.4-1.1 supports the following products that are new since 5.4.4-0.1. x230 Series Enterprise PoE+ Gigabit Edge Switches The Allied Telesis x230-GP Series of Layer 2+ Gigabit switches offer an impressive set of features in a compact design. Power over Ethernet Plus (PoE+) capability makes them ideal for powering access and security devices at the network edge.
Table 3: x310 Series models and port specifications Product 10/100BASET (RJ-45) Copper Ports 100/1000 Combo Uplink Ports 1 Gigabit Stacking Ports PoE Capable Ports Switching Capacity Forwarding Rate AT-x310-26FT 24 2 2 - 12.8 Gbps 6.5 Mpps AT-x310-50FT 48 2 2 - 17.6 Gbps 10.1 Mpps AT-x310-26FP 24 2 2 24 12.8 Gbps 6.5 Mpps AT-x310-50FP 48 2 2 48 17.6 Gbps 10.
Key New Features and Enhancements Software version 5.4.4-1.1 includes all the new features that have been added to AlliedWare Plus since the release of 5.4.4-0.1. This section summarizes the key new features. For a list of all new and enhanced features and commands, see “Changes in this Version” on page 60. For more information about all features on the switch, see the Software Reference for your switch.
Node provisioning Node cleaning You can now pre-configure, or provision, a port for a future node before it is added to the network. A provisioned node can be created as a new unique entity, or can be cloned using the backup data from an existing node. When you add the new node to the provisioned port in the AMF network, its configuration is automatically loaded from the information stored in the backup media, with no further effort from you.
Important Considerations Before Upgrading to this Version Licensing From software version 5.4.4-0.4 onwards, AlliedWare Plus software releases need to be licensed for the SBx908 and SBx8100 switches. If you are upgrading the software on your SBx908 or SBx8100 switch, please ensure you have a 5.4.4 license on your switch. To obtain a license, contact your authorized Allied Telesis support center. You will need to provide the MAC addresses of the switches you want to license.
AMF software version compatibility We strongly recommend that all switches in an AMF network run the same software release. If this is not possible, switches running this minor version are compatible with switches running version 5.4.3-2.6 and later, or any 5.4.4-x.x version. Upgrading all switches in an AMF network This version supports upgrades across AMF networks.
Changes in this Version Table 4 on page 60 lists all new and modified commands in this version and shows which chapter of the Software References has details of each command. Table 5 on page 65 lists new and modified features in this version. Table 6 on page 66 lists new and modified SNMP (Simple Network Management Protocol) MIBs (Management Information Bases) in this version.
x210 x230 x310 IX5 x510 x610 x900 SBx908 SBx8100 CFC400 SBx8100 CFC960 Table 4: New and modified commands in 5.4.4-1.1 Software Reference Chapter Command Status Description atmf provision New N N N N N Y N Y Y Y AMF Commands This command tells an AMF port to expect that a new node will be connected to it later, and tells it the name of the expected node. This command needs to be run in Interface Configuration mode on master nodes only.
x210 x230 x310 IX5 x510 x610 x900 SBx908 SBx8100 CFC400 SBx8100 CFC960 Table 4: New and modified commands in 5.4.4-1.1 Software Reference Chapter Command Status Description atmf provision node delete New N N N N N Y N Y Y Y AMF Commands This command is available on master nodes only and removes files that would otherwise download onto a provisioned node.
x210 x230 x310 IX5 x510 x610 x900 SBx908 SBx8100 CFC400 SBx8100 CFC960 Table 4: New and modified commands in 5.4.4-1.1 Software Reference Chapter Command Status Description show atmf links statistics Modified N N N N N Y N Y Y Y AMF Commands In addition to its original function, this command is now also able to display the AMF link configuration and packet exchange statistics for a specified interface.
x210 x230 x310 IX5 x510 x610 x900 SBx908 SBx8100 CFC400 SBx8100 CFC960 Table 4: New and modified commands in 5.4.4-1.1 Software Reference Chapter Command Status type issu New N N N N N N N N N Y Trigger Commands This new command configures a trigger that will activate if the automatic phase of the ISSU process enters one of the following selectable states: upgraded, completed, or aborted. exception coredump size Deleted Y N N Y Y Y Y Y Y Y Logging Commands This command has been deprecated in 5.
Feature Status Cable fault locator New IX5 x210 x230 x310 x510 x610 x900 SBx908 SBx8100 CFC400 SBx8100 CFC960 Table 5: New and modified features in 5.4.4-1.1 Software Reference Chapter N N N N Y N N N N N Cable Fault Locator Introduction Description The Cable Fault Locator (CFL) is a new diagnostic tool that can detect faults in a port’s connection cable or its terminations.
Feature Status AT-CHASSIS-MIB New 66 IX5 x210 x230 x310 x510 x610 x900 SBx908 SBx8100 CFC400 SBx8100 CFC960 Table 6: New MIBs in 5.4.4-1.1 Software Reference Chapter Description N N N N N N N N N Y SNMP MIBs A number of new objects have been added to this MIB. These relate to chassis card version (for ISSU), chassis mapping tables, and card IDs. New and Enhanced Features in AlliedWare Plus 5.4.
Licensing this Software Version on an SBx908 Switch Release licenses are applied with the license certificate command, then validated with the show license or show license brief commands. Follow these steps: ■ Obtain the MAC address for a switch ■ Obtain a release license for a switch ■ Apply a release license on a switch ■ Confirm release license application Step 1: Obtain the MAC address for a switch A release license is tied to the MAC address of the switch.
From version 5.4.
Licensing this Software Version on a Control Card for an SBx8100 Series Switch Release licenses are applied with the license certificate command, then validated with the show license or show license brief commands.
Entering a valid release license changes the console message displayed about licensing: 11:04:56 awplus IMI[1696]: SFL: The current software is not licensed. awplus# license certificate demo1.csv A restart of affected modules may be required. Would you like to continue? (y/n): y 11:58:14 awplus IMI[1696]: SFL: The current software is licensed. Exiting unlicensed mode. Stack member 1 installed 1 license 1 license installed.
Installing this Software Version Caution: Software version 5.4.4-1.1 requires a release license for the SBx908 and SBx8100 switches. If you are using either of these switches, ensure that your switch has a 5.4.4 release license certificate before you upgrade. Contact your authorized Allied Telesis support center to obtain a license.
Return to Privileged Exec mode and check the boot settings, by using the commands: awplus(config)# exit awplus# show boot 5. Reboot using the new software version. awplus# reload 72 New and Enhanced Features in AlliedWare Plus 5.4.
Installing the GUI This section describes how to install and set up the AlliedWare Plus GUI using an SD card, a USB storage device, or a TFTP server. The version number in the GUI Java applet filename (.jar) gives the earliest version of the software file (.rel) that the GUI can operate with.
6. Copy the GUI file onto your switch from the TFTP server, SD card, or USB storage device. TFTP server: Use the command: awplus# copy tftp:/// flash:/ SD card: use the command: awplus# copy card:/ flash:/ USB storage device: use the command: awplus# copy usb:/ flash:/ where is the IP address of the TFTP server, and where is the filename of the GUI Java applet. 7. Ensure the HTTP service is enabled on your switch.
Cable Fault Locator Introduction Cable Fault Locator Introduction Contents Introduction to the Cable Fault Locator .......................................................................................76 Capabilities.......................................................................................................................................76 TDR Operating Principles............................................................................................................
Cable Fault Locator Introduction Introduction to the Cable Fault Locator The Cable Fault Locator (CFL) is a cable diagnostic tool located within the switch. For a selected port, the CFL will display connection status or faults that exist in either the connecting cable itself, or its terminations. Capabilities The CFL is designed to operate on cable systems that utilize the following: ■ fixed copper ports, i.e. not using SFP type pluggable transceivers.
Cable Fault Locator Introduction Using the Cable Fault Locator To run a CFL diagnostics test, use the command, “test cable-diagnostics tdr interface” on page 82. This will return a prompt asking you to confirm whether or not you want to continue with the test. This confirmation prompt is generated because the link is unable to carry data during the test, typically taking between 1 and 2 seconds to complete. Example To run a CFL test on the cable inserted into port 1.0.
Cable Fault Locator Introduction 78 New and Enhanced Features in AlliedWare Plus 5.4.
Cable Fault Locator Commands Cable Fault Locator Commands Contents clear test cable-diagnostics tdr ........................................................................................................80 show test cable-diagnostics tdr.......................................................................................................81 test cable-diagnostics tdr interface................................................................................................
Cable Fault Locator Commands clear test cable-diagnostics tdr This command clears the results of the last cable test that was run. Syntax Mode Examples clear test cable-diagnostics tdr Privileged Exec To clear the results of a previous cable-diagnostics test use the following commands: awplus# clear test cable-diagnostics tdr 80 New and Enhanced Features in AlliedWare Plus 5.4.
Cable Fault Locator Commands show test cable-diagnostics tdr This command displays the results of the last cable-diagnostics test that was run using the TDR (Time Domain Reflectometry) on a fixed copper cable port.
Cable Fault Locator Commands test cable-diagnostics tdr interface This command applies the Cable Fault Locator’s (CFL) cable-diagnostics tests to twisted pair data cables for a selected port. The tests will detect either correct, short circuit, or open, circuit terminations. For more information on running the CFL, see the Cable Fault Locator Introduction chapter. The test can take several seconds to complete. See the related show command to display the test results.
ISSU Introduction ISSU Introduction Contents Introduction to ISSU.............................................................................................................................84 Operating Requirements ............................................................................................................84 Key Concepts...................................................................................................................................84 ISSU Operation........................
ISSU Introduction Introduction to ISSU The In-Service Software Upgrade feature (ISSU) enables you to upgrade the software running on the Controller Fabric Cards (CFCs) residing in either a standalone x8100 switch, or stacked using x8100 VCStack Plus, while still forwarding data traffic. Operating Requirements ISSU is supported on the SwitchBlade x8100 Series chassis (or VCStack Plus). ISSU support is subject to the following conditions: ■ Your Controller Fabric cards must be CFC960.
ISSU Introduction ISSU Operation During the ISSU process, each CFC within either the chassis, or VCS Plus stack, is sequentially rebooted. For this process, ISSU sets the boot system configuration to boot using the release being upgraded to. When the stack is then rebooted, the CFCs start with the newly applied release. Initially, ISSU gathers information about each of the CFC nodes within the stack. It uses this information to record which CFCs have been upgraded and which are yet to be upgraded.
ISSU Introduction For ISSU to progress, the above conditions must be met and there must be no pre-existing ISSU operation in progress. If ISSU is unable to progress, a warning message will be printed to the console. Similarly, when using VCStack Plus, if one of the chassis has only a single CFC, the console will first display a warning message followed by a confirmation message. The diagram of Figure 1 on page 86 illustrates ISSU’s automatic phase.
ISSU Introduction Manual Phase This phase comprises rebooting each of the line cards. The diagram shown in Figure 2 on page 87 illustrates ISSU’s manual phase.
ISSU Introduction Use the issu boot command to complete the automatic phase of the ISSU operation. Example To upgrade a system with a release file in the Flash, SBx81CFC960-5.4.5-1.2.rel, use the command: awplus# issu boot SBx81CFC960-5.4.5-1.2 Initiating the ISSU Manual Phase In order to complete the ISSU process all the LIFs must be rebooted. You use the reboot card command to successively reboot each line card in your switch.
ISSU Introduction Output This is a sample output from the show issu command following a fault condition. awplus#show issu ISSU configuration: Node rejoin timeout Abort timeout : 10 mins (default) : 45 mins (default) ISSU state Old boot release New boot release Process started Process elapsed Abort reason chassis : : : : : : Aborted SBx81CFC960-5.4.4-1.1.rel SBx81CFC960-5.4.4-1.2.rel Fri May 23 14:54:11 2014 00:50:56 the rebooting CFC failed to rejoin the Progress on CFCs: card 1.5 card 1.6 card 2.
ISSU Introduction Automating the ISSU Process Using Triggers You will probably want to upgrade your software at a convenient time for your operation. One possibility is to upgrade the CFCs during a time when technical staff are available and use the automatic phase of ISSU to eliminate, or at least reduce, system downtime. Then use triggers to apply the line card upgrades for a period when the network has either a low usage, or a scheduled maintenance period.
ISSU Introduction Step 2: Write scripts and create the triggers Example One From the show output, the AT-SBx81GP24 line cards in card slots 1.1 and 2.1 need to be rebooted. You decide that a good time to do this is Sunday at 1:00 a.m. Create the following script “lif.scp” that will reboot these cards: Write the Script Create the Trigger enable reboot card 1.1 y wait 120 reboot card 2.
ISSU Introduction 92 New and Enhanced Features in AlliedWare Plus 5.4.
ISSU Commands ISSU Commands Contents issu boot ...................................................................................................................................................94 issu abort-timeout ................................................................................................................................95 issu rejoin-timeout................................................................................................................................96 show issu.....
ISSU Commands issu boot To perform an ISSU, you must have a chassis (or VCStack Plus) with more than one CFC960 (Controller Fabric Card). Note that ISSU will not run with CFC400 cards, nor will it run if there is already an ISSU process in progress. Therefore a new ISSU cannot start until all CFC960s and LIFs (Line Interace cards) are running with the same software release.
ISSU Commands issu abort-timeout This command configures the ISSU abort timeout. This is the time period that the ISSU process waits for an acknowledgment that all CFCs have rebooted. If the ISSU process fails to receive all acknowledgments within the specified timeout period, it will abort the process. The no variant of this command resets ISSU abort timeout to its default value.
ISSU Commands issu rejoin-timeout This command configures the ISSU CFC rejoin timeout that will be applied to each CFC. Following a reboot, this timeout sets the period that the ISSU process will wait for each CFC to join the chassis. If any of the CFC cards fail to rejoin the chassis within the period configured by this command, the ISSU process is aborted. The no variant of this command resets ISSU node rejoin timeout to its default value. Note The ISSU process will only operate with CFC960 cards.
ISSU Commands show issu This command shows the ISSU configuration and its process status. Syntax Mode Example show issu Privileged Exec To display the ISSU state, use the command: awplus# show issu Output This is a sample output from the show issu command ISSU configuration: CFC rejoin timeout : 10 mins (default) Abort timeout : 45 mins (default) ISSU state : Upgrading Standby Old boot release : SBx81CFC960-5.4.4-1.1.rel New boot release : SBx81CFC960-5.4.4-1.2.
ISSU Commands show boot This command displays the current boot configuration. We recommend that the currently running release is set as the current boot image. ISSU will not execute if there is no current boot image. Syntax Mode show boot Privileged Exec Note When running ISSU, this command will compare the software versions that are running on each of the CFCs.
ISSU Commands Figure 3: Example output from the show boot command awplus#show boot Boot configuration ---------------------------------------------------------------Current software : SBx81CFC960-5.4.4-1.2.rel Current boot image : flash:/SBx81CFC960-5.4.4-1.2.rel Backup boot image : flash:/SBx81CFC960-5.4.4-1.1.rel Default boot config: flash:/default.cfg Current boot config: flash:/my.cfg (file exists) Backup boot config: flash:/backup.
ISSU Commands show card Use this command to display information about current and provisioned slots for chassis line cards or control cards. Note that when ISSU is actively rebooting CFCs an asterisk is displayed beside a line card’s state to indicate that the card is not running the same software version as its Active Master CFC. An explanation line is also added at the end of the display.
ISSU Commands Table 2: Parameters in the output of the show card command (cont.) Parameter Description State The current state of the card. One of the following: Booting The card is currently loading its software release. Initializing The card has loaded its software release and is currently initializing software processes. Joining The card is communicating with other cards and is currently in the process of joining the chassis or VCStack Plus.
ISSU Commands show card detail Note This command can be found in the System Configuration and Monitoring Commands chapter. Use this command to display detailed information about current and provisioned chassis, line cards, or control cards, and to display software version information.
ISSU Commands Figure 5: Example output from the show card detail command (cont.) Type State Uptime Bootloader Version Mac Address Software Version AT-SBx81CFC960 Online (Active) eccd.6d9e.330e 5.4.4-1.2 Card 1.6: -------------------------------------------------------------------------------Type AT-SBx81CFC960 State Online (Standby) Uptime Bootloader Version Mac Address eccd.6d9e.3310 Software Version 5.4.4-1.2 Chassis management subnet address 192.168.255.
ISSU Commands Table 3: Parameters in the output of the show card detail command Parameter Description Card Chassis number and slot number where the card is installed. Type Product name of the card installed in the slot. If no card is installed, but one has been provisioned, then the provisioned board class is displayed, for example “ge24“. If no card has been installed or provisioned then “-“ is displayed. State The current state of the card.
ISSU Commands show system This command displays general system information about the device, including the hardware installed, memory, and software versions loaded. It also displays location and contact details when these have been set. Note that this command will also display a warning message when ISSU is in progress. For information on output options, see “Controlling “show” command output” in the Getting Started chapter.
ISSU Commands show version This command displays the version number and copyright details of the current AlliedWare PlusTM OS your device is running. The show output now displays a message whenever ISSU is running. For information on output options, see “Controlling “show” command output” in the Getting Started chapter.
ISSU Commands type issu This new command configures a trigger that will activate if the automatic phase of the ISSU process enters one of the following selectable states: upgraded, completed, or aborted. Caution Syntax Mode Related Commands ISSU trigger scripts that use any type other than “ISSU Completed” must not place the switch into Configuration Mode. type issu [cfcs-upgraded|completed|aborted] Parameter Description cfcs-upgraded Activates when the CFCs are upgraded, i.e.
ISSU Commands 108 New and Enhanced Features in AlliedWare Plus 5.4.
AMF Introduction and Configuration AMF Introduction and Configuration Contents Introduction to AMF.......................................................................................................................... 110 AMF Supported Products and Software Versions .................................................................. 110 Key Benefits of AMF........................................................................................................................... 111 Unified Command-Line ..
AMF Introduction and Configuration Introduction to AMF The Allied Telesis Management Framework (AMF) is a suite of features that combine to simplify network management across all supported network switches from the core to the edge. AMF also provides simplified switch recovery and firmware upgrade management. The primary function of AMF is to reduce the management and maintenance overhead on a network, while improving on responsiveness and handling of switch failures within the network.
AMF Introduction and Configuration Key Benefits of AMF The key benefits of AMF include its unified command-line, simple configuration backup and recovery process, and time-saving rolling firmware upgrade. Unified Command-Line The conventional means of configuring and controlling AlliedWare Plus (AW+) switches is to use their text-based command-line interface (CLI). In existing networks, the CLI is available via a serial console port and also to remote login sessions such as SSH.
AMF Introduction and Configuration Node Provisioning It is generally undesirable to have unconfigured devices connected to the network. Node provisioning enables you to preconfigure a port ready to accept and automatically configure a “clean” (as new) device for connection at a later date. This is achieved by storing the future node's configuration in the master node's backup files ready to be loaded to the new device when connected. 112 New and Enhanced Features in AlliedWare Plus 5.4.
AMF Introduction and Configuration AMF Terminology and Introduction This section contains a glossary of terminology used to describe AMF networking. AMF Network Conceptually an AMF network is a collection of interconnected network switch nodes. This interconnection in turn comprises a hierarchy of network domains. These terms are explained in more detail later in this chapter.
AMF Introduction and Configuration Node Interconnection Nodes can connect either horizontally using crosslinks, or vertically using Uplinks/ Downlinks. This is shown in the illustration below: Figure 1: AMF Uplinks, Downlinks, and Crosslinks Core Domain AMF link (Uplink) MF A er mb Me de no AMF crosslink AMF link (Downlink) AMF links, of either type, are used to pass AMF management traffic between nodes; however, they can also carry other network traffic.
AMF Introduction and Configuration Hop-Count The vertical distance of a domain from the core domain is known as its Hop-Count. The illustration“Core distance hop-counts between domains” on page 115 shows the relationship between nodes, domains and core distance (hop-count).
AMF Introduction and Configuration AMF Network Operational Concepts Retention and Use of the ‘Manager’ Username The default username for an AlliedWare Plus login is “manager”, with a documented default password. Users should change this password on all their nodes to provide login security. It is possible to add new usernames and passwords to nodes, but to retain the ability to centrally manage the network, usernames should be uniformly configured across all AMF nodes within the AMF network.
AMF Introduction and Configuration AMF Restricted-Login By default, a user logged into any node on an AMF network is able to manage any other node by using either working-sets or atmf remote login (provided the login username exists on all nodes). Where the access provided by this feature is too wide, or contravenes network security restrictions, this access can be limited by running the command “atmf restricted-login” on page 207.
AMF Introduction and Configuration AMF Interaction with QoS and ACLs It's important that ACL and QoS rules do not block any traffic on VLANs 4091 and 4092 because they are the default AMF control VLANs. Similarly, ACL and QoS rules should not block any Layer 3 traffic on 172.31.0.* or 172.31.128.* these being the default AMF management traffic subnets. Packets with protocol type 0xfbae and BPDU packets that use the MAC address: 0180.c200.002e should also not be blocked.
AMF Introduction and Configuration You can then check that the nodes have synchronised with the NTP server using the show ntp status command, for example: awplus# show ntp status awplus#show ntp status Clock is synchronized, stratum 13, reference is 172.31.0.1 actual frequency is 7.1420 PPM, precision is 2**-18 reference time is d7bba834.19f1a68f (16:48:52.101 utc Thu Sep 11 2014) clock offset is -1.286 msec, root delay is 2.237 msec root dispersion is 45.
AMF Introduction and Configuration . Table 2: Configure the AMF master node Description Prompt Command Step 1. Set the host name. Enter Global Configuration mode Set the host name (awplus#) awplus(config)#) configure terminal hostname AMF_Master Note that host names are used as the AMF node name and MUST BE UNIQUE within the AMF network. Step 2. Set the AMF network name. Set the AMF network name.
AMF Introduction and Configuration . Table 3: Configure the first member node (Member1) Description Prompt Command Step 1. Set the host name. Enter Global Configuration mode Set the host name (awplus#) awplus(config)#) configure terminal hostname Member1 Note that host names are used as the AMF node name and MUST BE UNIQUE within the AMF network. Step 2. Set the AMF network name. Set the AMF network name to atmf1.
AMF Introduction and Configuration . Table 4: Configure the first member node (Member2) Description Prompt Command Step 1. Set the host name. Enter Global Configuration mode Set the host name awplus#) awplus(config)#) configure terminal hostname Member2 Note that host names are used as the AMF node name and MUST BE UNIQUE within the AMF network. Step 2. Set the AMF network name. Set the AMF network name to atmf1.
AMF Introduction and Configuration Table 5: Configure the first member node (Member3) Description Prompt Command Step 1. Set the host name. Enter Global Configuration mode Set the host name (awplus#) awplus(config)#) configure terminal hostname Member3 Note that host names are used as the AMF node name and MUST BE UNIQUE within the AMF network. Step 2. Set the AMF network name. Set the AMF network name to atmf1.
AMF Introduction and Configuration . Table 6: Configure the first member node (Member4) Description Prompt Command Step 1. Set the host name. Enter Global Configuration mode Set the host name (awplus#) awplus(config)#) configure terminal hostname Member4 Note that host names are used as the AMF node name and MUST BE UNIQUE within the AMF network. Step 2. Set the AMF network name. Set the AMF network name to atmf1.
AMF Introduction and Configuration AMF Tunneling (Virtual Links) AMF Tunneling enables you to extend your local uplinks and downlinks across a wide area network. The tunneled data is then wrapped in a Layer 3 IP packet for transmission across a wide area IP network. A simple AMF tunnel is shown in “AMF virtual link” on page 125. Switches 1 and 2 encapsulate the Layer 2 AMF uplink and downlink data and wrap this inside a Layer 3 IP packet to enable it to traverse an IP Network.
AMF Introduction and Configuration Configuring a virtual link The Layer 2 tunnel created by the command atmf virtual-link id ip remote-id remote-ip command on page 208 enables a local AMF session to appear to pass transparently across a Wide Area Network (WAN) such as the Internet. The addresses configured as the local and remote tunnel IP addresses must have IP connectivity to each other.
AMF Introduction and Configuration Virtual link - configuration example This example is based on the network shown in the illustration Figure 5 on page 125. In this example, the virtual link traffic flows between 192.168.1.1 at the local end and 192.168.2.1 at the remote end. Subnet 192.168.1.1 exists on vlan10. Note that because this policy is being applied to incoming traffic, the switch IP address should match destination address in the ACL.
AMF Introduction and Configuration Table 7: Set QoS CoS for an AMF tunneling switch(cont.) Description Prompt Command Return to config mode Host-A(config-if)# exit Step 3. Add policy map vlink to port 1.0.10 Set port 1.0.10 for configuring Host-A(config)# interface port 1.0.10 Set the port to access mode Host-A(config-if)# switchport mode access Associate the port with VLAN10 Host-A(config-if)# switchport access vlan10 Add policy map vlink to port 1.0.
AMF Introduction and Configuration Verifying the AMF Network To check that all nodes have joined the AMF network use the show atmf command on page 218 with the summary parameter. You can run this command from any node in an AMF network.
AMF Introduction and Configuration Use the show atmf links command on page 229 to check information on individual AMF links: Figure 9: Checking output with the show atmf links command switch1# show atmf links ATMF Links Brief: Local Link Port ATMF Adjacent Adjacent Link Port Type Status State Node Ifindex State -------------------------------------------------------------------------------sa1 Crosslink Up TwoWay Building_1 4501 Forwarding 1.1.1 Downlink Up Full Bld1_Floor_1 5001 Forwarding 1.1.
AMF Introduction and Configuration Configuring Multiple Nodes at the Same Time: the Unified CLI The unified CLI is a central component of AMF. It provides you with a configuration and display interface that can control a selected collection of nodes, or the entire AMF network, from a single point. This control is provided through the atmf working-set command. The working-set An AMF working-set is a set of nodes that can be collectively configured from a single device.
AMF Introduction and Configuration Working-Set Groups AMF contains the ability to have working-set groups, so that it is not always necessary to use a comma separated list to specify a working-set. AMF working-set groups can be split into two types: ■ Automatic ■ User-defined Automatic working-set groups There are three automatic working-set groups that will exist on every AMF network: 1. All—all nodes within the AMF network. 2. Current—the current working-set of nodes.
AMF Introduction and Configuration If you specify a partially invalid working-set node list or group list, only the valid nodes or groups will join the working set. If you specify a completely invalid working-set, you will create a working-set containing no nodes.
AMF Introduction and Configuration Here is an example output of the show arp command run from a working-set: atmf1[4]#show arp ======= Master: ======= IP Address 172.31.0.1 172.31.0.3 172.31.0.10 MAC Address eccd.6d7d.a542 0000.cd2b.0329 0000.cd37.0163 Interface ATMF ATMF ATMF Port sa1 sa1 sa1 Type dynamic dynamic dynamic MAC Address eccd.6d03.10f9 Interface ATMF Port sa4 Type dynamic MAC Address 0000.cd37.1050 Interface ATMF Port sa1 Type dynamic MAC Address 0000.cd37.
AMF Introduction and Configuration atmf1[4]# show card ======= Master: ======= Slot Card Type State ----------------------------------------------1 AT-SBx81GP24 Online 2 AT-SBx81GP24 Online 3 AT-SBx81GP24 Online 4 AT-SBx81XS6 Online 5 AT-SBx81CFC400 Online (Active) 6 7 8 9 10 11 12 ----------------------------------------------=============================== x510_1, x908_VCS_1, x908_VCS_2: =============================== % Invalid input detected at '^' marker.
AMF Introduction and Configuration Interactive Commands It is inappropriate to execute interactive commands simultaneously across multiple nodes within a working-set. These commands can only be executed on the local node working-set or on a working-set with a single member. When any interactive commands are entered from within a working-set they will give an error: atmf1[4]# ping 4.2.2.
AMF Introduction and Configuration AMF Backups AMF backups are a valuable part of AMF network operation. They are the mechanism by which AMF master nodes update their records of the AMF network. By default, AMF master nodes are configured to perform automatic scheduled backups of the entire AMF network once per day at 3.00am. AMF backups can be stored on remote file servers or external removable media such as USB sticks or SD cards. These backup files can be used in the recovery of a failed node.
AMF Introduction and Configuration 2. Terminate any backup already in process. 3. Verify that it is safe to remove the media by checking that backups are disabled and that there are no backups currently in progress. Figure 11: Example of the safe external storage media removal procedure master1#conf t master1(config)#no atmf backup enable master1(config)#exit master1#atmf backup stop master1#show atmf backup Scheduled Backup ...... Schedule ............ Next Backup Time .... Backup Media ..........
AMF Introduction and Configuration Below is example output from the show atmf backup command entered after the backup has completed. Figure 13: Example output from the show atmf backup command entered after backup was completed AMF_Master#show atmf backup Scheduled Backup ...... Enabled Schedule ............ 1 per day starting at 03:00 Next Backup Time .... 13 Dec 2013 03:00 Backup Media .......... USB (Total 3692.6MB, Free 1651.1MB) Current Action ........ Idle Started ............. Current Node ........
AMF Introduction and Configuration When a CFC failure event occurs, the trigger type chassis active-CFC-fail will activate. The following example shows how the above scripted steps can be automatically applied if this event occurs. Example 2 This example shows a trigger script configuration for the SBx8100: Master1# conf t Master1(config)# trigger 1 Master1(config-trigger)# type chassis active-CFC-fail Master1(config-trigger)# script 1 triggered-atmfbackup.
AMF Introduction and Configuration To create a working-set containing all AMF master nodes, first manually select all AMF masters using the atmf working-set command: Master# atmf working-set Master1,Master2 NetworkName[2]# conf t NetworkName[2](config)# trigger 1 This command displays an output screen similar to the one shown below: ========================================= Master1, Master2 ============================================== Working set join ATMF1[2]# On the SBx908, enter the following confi
AMF Introduction and Configuration Backing up to Remote Servers System backup data can be held on up to two remote backup servers rather than on the master node’s external media. These servers are used for both backup and recovery. Each AMF master supports a maximum of two remote file servers. The remote backup file servers are mounted on the Master’s file system using SSH and appear as folders. Configuring a backup to a remote server First configure the servers.
AMF Introduction and Configuration Figure 14: Output from the show atmf backup command showing the configuration of two remote backup file servers x900a#show atmf backup Scheduled Backup ...... Enabled Schedule ............ 24 per day starting at 14:25 Next Backup Time .... 19 May 2014 11:25 Backup Bandwidth ...... Unlimited Backup Media .......... FILE SERVER (Total 503837.5MB, Free 186818.0MB) Server Config ......... Synchronization ..... Synchronized Last Run .......... 19 May 2014 11:09:50 1 ..........
AMF Introduction and Configuration Node Recovery Automatic Node Recovery With AMF, you can replace a failed node with another device and let AMF automatically load the appropriate configuration onto the replacement device. For this to work, the replacement device must have no configuration file.
AMF Introduction and Configuration Automatic node recovery is not intended to recover multiple nodes simultaneously. If multiple nodes have failed, recover them one at a time. Caution Do not make any changes to the device's configuration while a node recovery is underway. A log message will appear on the console or other VTY session indicating when recovery has finished (whether successfully or with errors). This message can also be found by viewing the log with the show log command.
AMF Introduction and Configuration A clean device is one that has had its previous configuration components removed. The process of cleaning is required when replacing a failed device with one that, although in working condition, has been used previously and still retains components of its previous configuration. If you keep on-site spares, store them with clean configurations and current releases.
AMF Introduction and Configuration Figure 18: Example output showing manual recovery amf1#atmf recover x510_1 Master This command will erase ALL flash contents.
AMF Introduction and Configuration AMF Safe Configuration If AMF automatic node recovery fails, AMF contains a safety net feature that puts the replacement node into a safe configuration state. This is to prevent an unconfigured device from joining the network and creating loops. Detecting AMF Safe Configuration Operation A log message will be generated when AMF safe configuration is applied. This message will appear in the log some time after the startup sequence.
AMF Introduction and Configuration Figure 20: Example output from the show running-config command for a device in AMF safe configuration mode awplus#show running-config ... ! vlan database vlan 4090 name atmf_node_recovery_safe_vlan vlan 4090 state disable ! interface port1.1.1-1.1.4 shutdown switchport switchport mode trunk switchport trunk allowed vlan add 4090 switchport trunk native vlan none ! interface port1.1.
AMF Introduction and Configuration awplus(config-if)# no shutdown awplus(config-if)# exit awplus(config-if)# vlan database awplus(config-if)# no vlan 4090 awplus(config-if)# end In order to retain connectivity to the AMF network, AMF link and crosslink settings should not be changed. In the example above you can see that port1.1.5is an automatically configured AMF link. You can also see the error message indicating it was skipped by the switchport mode access command.
AMF Introduction and Configuration Rolling-Reboot Firmware Upgrade The rolling-reboot firmware upgrade feature enables nodes within an AMF network to be rebooted and upgraded in a rolling sequence so that downtime and management overheads are minimized. First, specify a set of nodes within the AMF network using the atmf working-set command, then use the atmf reboot-rolling command.
AMF Introduction and Configuration Here is an example of a Rolling-reboot firmware upgrade summary report: ================================================================================== ATMF Rolling Reboot Complete Node Name Reboot Status Release Name Release Status ---------------------------------------------------------------------------------Node1 Rebooted x510-main-20121018-2.rel Upgraded Node2 Rebooted x900-main-20121018-2.rel Upgraded Node3 Rebooted x900-main-20121018-2.
AMF Introduction and Configuration Performing a Rolling-Reboot Upgrade To perform a Rolling-reboot firmware upgrade on all nodes in the AMF network, first select all nodes using the default working-set group all: SBSBx8100# atmf working-set group all SBSBx8100, SBx908-VCS1, SBx908-VCS2, x510_1, x510_2: Working set join Next, using the atmf reboot-rolling command, specify the path to the release files to use for the upgrade.
AMF Introduction and Configuration ===================================================================== Copying Release : x510-main-20121203-1.rel to x510_1 Updating Release : x510-main-20121203-1.rel information on x510_1 ===================================================================== ATMF Rolling Reboot: Rebooting x510_1 ==================================================================== 02:14:13 SBSBx8100 ATMF[1973]: x510_1 has left. 4 members in total.
AMF Introduction and Configuration Node Provisioning You can pre-configure, or provision, a port for a future node before the node is added to the network. A provisioned node can be created as a new unique entity, or can be cloned using the backup data from an existing node. When you connect the new node to the provisioned port in the AMF network, its configuration is loaded from the information stored in the backup media.
AMF Introduction and Configuration These two methods can briefly be described as: 1. Using the command “atmf provision node create” on page 193. This command creates an “empty” directory to which release and configuration files can be added for use on a future node. You can copy configuration and release files from existing switches into the new directory.
AMF Introduction and Configuration Table 8: Procedure for creating a provisioned node and configuring its adjacent node(s) Step a. Enter Privileged Exec mode Member_4>enable Step b. Set the name of the provisioned node to “future_node” Member_4#atmf provision node future_node create Step c.
AMF Introduction and Configuration Step g. Configure the port node(s) that will be connected to the provisioned node. In this example, port1.0.3 on member4 is being configured as an AMF link and to expect the provisioned node future_node Member_4#configure terminal Member_4(config)#interface port1.0.
AMF Introduction and Configuration The following example shows the expected output when a provisioned node named future_node joins the AMF network to replace a node called member_5. 21:57:35 awplus ATMF[999]: ATMF network detected 21:57:35 awplus ATMF[999]: ATMF safe config applied (forwarding disabled) 21:57:45 awplus ATMF[999]: Shutting down all non ATMF ports 21:57:45 awplus ATMF[999]: member_5 has left. 0 member in total. 21:57:45 x510-2 ATMF[999]: future_node has joined. 1 member in total.
AMF Introduction and Configuration 160 New and Enhanced Features in AlliedWare Plus 5.4.
AMF Commands AMF Commands Contents Introduction ......................................................................................................................................... 163 AMF Naming Convention ........................................................................................................ 163 atmf backup ......................................................................................................................................... 164 atmf backup bandwidth...............
AMF Commands show atmf tech ................................................................................................................................... 244 show atmf working-set .................................................................................................................... 246 show debugging atmf...................................................................................................................... 247 show debugging atmf packet ...................................
AMF Commands Introduction This chapter provides an alphabetical reference for AMF commands. AMF Naming Convention When AMF is enabled on a switch, it will automatically be assigned a host name. If a host name has already been assigned, by using the command “hostname”, this will remain. If however, no host name has been assigned, then the name applied will be the prefix, host_ followed (without a space) by the MAC address of the device. For example, a device whose MAC address is 0016.76b1.
AMF Commands atmf backup This command can only be applied to a master node. It manually schedules an AMF backup to start at a specified time and to execute a specified number of times per day. Use the no variant of this command to disable the schedule. Syntax atmf backup {default| frequency <1-24>} no atmf backup enable Default Parameter Description default Restore the default backup schedule. Sets the time of day to apply the first backup, in hours and minutes.
AMF Commands atmf backup bandwidth This command sets the maximum bandwidth in kilobytes per second (kBps) available to the AMF backup process. This command enables you to restrict the bandwidth that is utilized for downloading file contents during a backup. Note This command will only run on an AMF master. An error message will be generated if the command is attempted on node that is not a master.
AMF Commands atmf backup delete This command removes the backup file from the external media of a specified AMF node. Syntax Mode Example atmf backup delete Parameter Description The AMF node name of the backup file to be deleted. Privileged Exec To delete the backup file from node2, use the following command: Node_1# atmf backup delete node2 Related Commands 166 show atmf backup atmf backup now atmf backup stop New and Enhanced Features in AlliedWare Plus 5.4.
AMF Commands atmf backup enable This command enables automatic AMF backups on the AMF master node that you are connected to. By default, automatic backup starts at 3:00 AM. However, this schedule can be changed by the atmf backup command on page 164. Note that backups are initiated and stored only on the master nodes. Use the no variant of this command to disable any AMF backups that have been scheduled and previously enabled.
AMF Commands atmf backup now This command initiates an immediate AMF backup of either all AMF members, or a selected AMF member. Note that this backup information is stored in the external media on the master node of the switch on which this command is run, even though the selected AMF member may not be a master node. Syntax atmf backup now [] Parameter Description or The name of the AMF member to be backed up - as set by the command hostname.
AMF Commands Example 3 To initiate from AMF_master_1 an immediate backup of all AMF member nodes, use the following command: AMF_Master_1# amf backup now Example 4 To initiate an immediate backup of the node with the host-name “office_annex” and store the configuration on both masters, use the following process: From the AMF_master_1, set the working-set to comprise only of the automatic group, master nodes.
AMF Commands atmf backup server This command configures remote file servers as the destination for AMF backups. Use the no variant of this command to remove the destination server(s). When all servers are removed the system will revert to backup from external media. Syntax atmf backup server id {1|2} username [path |port <1-65535>] no atmf backup server id {1|2} Defaults Parameter Description id Remote server backup server identifier.
AMF Commands To configure server 1 with an ipv4 address and a username of backup1, use the commands: AMF_Master_1# configure terminal AMF_Master_1(config)# atmf backup server id 1 192.168.1.
AMF Commands atmf backup stop Running this command stops a backup that is currently running on the master node you are logged onto. Note that if you have two masters and want to stop both, then you can either run this command separately on each master node, or add both masters to a working set, and issue this command to the working set. Syntax atmf backup stop Mode Privileged Exec Usage This command is used to halt an AMF backup that is in progress.
AMF Commands atmf backup synchronize For the master node you are connected to, this command initiates a system backup of files from the node’s active remote file server to its backup remote file server. Note that this process happens automatically each time the network is backed up.
AMF Commands atmf cleanup This command erases all data from NVS and all data from Flash excluding the following: ■ The current release file and its /flash/.release file ■ The backup release file and /flash/.backup file ■ v1 license files /flash/.configs/.swfeature.lic ■ v2 license files /flash/.configs/.sw_v2.lic It then reboots to put the device in a clean state ready to be used as a replacement node on a provisioned port.
AMF Commands atmf distribute firmware This command can be used to upgrade software one AMF node at a time. A URL can be selected from any media location. The latest compatible release for a node will be selected from this location. Several procedures are performed to ensure the upgrade will succeed. This includes checking the current node release boots from flash. If there is enough space on flash the software release is copied to flash on the new location.
AMF Commands Output Retrieving data from SW_Team1 Retrieving data from SW_Team2 Retrieving data from SW_Team3 ATMF Firmware Upgrade: Node Name New Release File Status ---------------------------------------------------------------SW_Team1 x510-main-20140204-2.rel Release ready SW_Team2 x610-main-20140204-2.rel Release ready SW_Team3 x610-main-20140204-2.
AMF Commands atmf domain vlan The AMF domain vlan is one of the internal VLANs that are used to communicate information about the state of the AMF network between nodes. AMF uses its internal VLANS (the management VLAN and the domain VLAN) to communicate its inter nodal network status information. These VLANs must be reserved for AMF and not used for other purposes. When an AMF network is first created all its nodes are assigned a domain VLAN with a default (domain) VID of 4091.
AMF Commands To reset the AMF domain VLAN to its default of 4091, use the following commands: VCF-1# configure terminal VCF-1(config)# no atmf domain vlan atmf enable This command manually enables (turns on) the AMF feature for the switch being configured. Use the no variant of this command to disable (turn off) the AMF feature on the member node. Syntax atmf enable no atmf enable Default Once AMF is configured, the AMF feature starts automatically when the switch starts up.
AMF Commands atmf group (membership) This command configures a switch to be a member of one or more AMF groups. Groups exist in three forms: Implicit Groups, Automatic Groups, and User-defined Groups. ■ Implicit Groups « all - All nodes in the AMF « current - The current working-set « local - The originating node. Note that the Implicit Groups do not appear in show group output. ■ Automatic Groups - These are defined by hardware architecture, e.g. x510, x610, x900, x8100.
AMF Commands Example To specify the switch to become a member of AMF groups named, Marketing, Sales, and Building_2, use the following command: VCF-1# configure terminal VCF-1(config)# atmf group marketing,sales,building_2 First add the nodes “master_node1” and “member_node_1” to the working-set: master_node# atmf working-set master_node1,member_node_1 This command returns the following output confirming that the nodes “master_node” and “node_2” are now part of the working-set: ==================== mast
AMF Commands atmf log-verbose This command limits the number of log messages displayed on the console or permanently logged. Syntax atmf log-verbose <1-3> no atmf log-verbose Default Parameter Description <1-3> The verbose limitation (3 = noisiest, 1 = quietest) The default log display is 3. Usage This command is intended for use in large networks where verbose output can make the console unusable for periods of time while nodes are joining and leaving.
AMF Commands atmf management subnet This command is used to assign a subnet that will be allocated to the AMF management and domain management VLANs. From the address space defined by this command, two subnets are created, a management subnet component and a domain component, as explained in the Usage section of this command description. AMF uses these internal IPv4 subnets when exchanging its inter nodal status packets.
AMF Commands Examples To change the AMF management subnet address on node VCF-1 to 172.25.0.0: VCF-1# configure terminal VCF-1(config)# atmf management subnet 172.25.0.0 To change the AMF management subnet address on node VCF-1 back to its default of 172.31.0.0: VCF-1# configure terminal VCF-1(config)# no atmf management subnet New and Enhanced Features in AlliedWare Plus 5.4.
AMF Commands atmf management vlan The AMF management VLAN is created when the AMF network is first initiated and is assigned its default VID of 4092. This command enables you to change the VID from this default value. The AMF management vlan is one of the internal VLANs that are used to communicate information about the state of the AMF network between nodes. AMF uses its internal VLANS (such as the management VLAN and the domain VLAN) to communicate its inter nodal network status information.
AMF Commands To reset the AMF domain VLAN to its default of 4092, use the following commands: VCF-1# configure terminal VCF-1(config)# no atmf management vlan Related Commands atmf domain vlan show atmf New and Enhanced Features in AlliedWare Plus 5.4.
AMF Commands atmf master This command configures the switch to be an AMF master node and automatically creates an AMF master group. The master node is considered to be the core of the AMF network, and must be present for the AMF to form. The AMF master has its node depth set to 0. Note that the node depth vertical distance is determined by the number of uplinks/ downlinks that exist between the node and its master. An AMF master node must be present for an AMF network to form.
AMF Commands atmf network-name This command applies an AMF network name to a (prospective) AMF node. In order for an AMF network to be valid, its network-name must be configured on at least two nodes, one of which must be configured as a master and have an AMF License applied. These nodes may be connected using either AMF downlinks or crosslinks. For more information on configuring an AMF master node, see “atmf master” on page 186. Use the no variant of this command to remove the AMF network name.
AMF Commands atmf provision This command configures a specified port on an AMF node to accept a provisioned node, via an AMF link, some time in the future. Use the no variant of this command to remove the provisioning on the node. Syntax atmf provision [] no atmf provision Default Parameter Description The name of the provisioned node that will appear on the AMF network in the future. No provision.
AMF Commands atmf provision node clone This command sets up a space on the backup media for use with a provisioned node and copies into it almost all files and directories from a chosen backup or provisioned node. Alternatively, you can set up a new, unique provisioned node by using the command atmf provision node create. Syntax atmf provision node clone Parameter Description The name that will be assigned to the clone when connected.
AMF Commands To confirm that a new provisioned node has been cloned, use the command: switch1# show atmf backup The output from this command is shown in Figure 2, below, and shows the details of the new provisioned node switch3. Figure 2: Sample output from the show atmf backup command switch1#show atmf backup Scheduled Backup ...... Schedule ............ Next Backup Time .... Backup Bandwidth ...... Backup Media .......... Server Config ......... Synchronization ..... Last Run .......... 1 ..............
AMF Commands atmf provision node configure boot config This command sets the configuration file to use during the next boot cycle. This command can also set a backup configuration file to use if the main configuration file cannot be accessed for an AMF provisioned node. To unset the boot configuration or the backup boot configuration use the no boot command. Use the no variant of this command to set back to the default.
AMF Commands atmf provision node configure boot system This command sets the release file that will load onto a specified provisioned node during the next boot cycle. This command can also set the backup release file to be loaded for an AMF provisioned node. To unset the boot system release file or the backup boot release file use the no boot command. Use the no variant of this command to set back to the default. This command can only be run on amf master nodes.
AMF Commands atmf provision node create This command sets up an empty directory on the backup media for use with a provisioned node. This directory can have configuration and release files copied to it from existing switches. Alternatively, the configuration files can be created by the user. An alternative way to create a new provisioned node is with the command atmf provision node clone. This command can only run on amf master nodes.
AMF Commands Figure 3: Sample output from the show atmf backup command switch1#show atmf backup Scheduled Backup ...... Schedule ............ Next Backup Time .... Backup Bandwidth ...... Backup Media .......... Server Config ......... Synchronization ..... Last Run .......... 1 .................. 2 .................. Current Action ........ Started ............. Current Node ........ Enabled 1 per day starting at 03:00 02 Jan 2014 03:00 Unlimited USB (Total 7446.0MB, Free 7315.
AMF Commands atmf provision node delete This command deletes files that have been created for loading onto a provisioned node. It can only be run on master nodes. Syntax atmf provision node delete Parameter Description The name of the provisioned node to be deleted. Mode Privileged Exec Usage This command is only available on master nodes in the AMF network.
AMF Commands Figure 4: Sample output showing the show atmf backup command switch1#show atmf backup Scheduled Backup ...... Schedule ............ Next Backup Time .... Backup Bandwidth ...... Backup Media .......... Server Config ......... Synchronization ..... Last Run .......... 1 .................. 2 .................. Current Action ........ Started ............. Current Node ........ Enabled 1 per day starting at 03:00 01 Jan 2014 03:00 Unlimited USB (Total 7446.0MB, Free 7297.
AMF Commands atmf provision node license-cert This command is used to set up the license certificate for a provisioned node. The certificate file usually has all the license details for the network, and can be stored anywhere in the network. This command makes a hidden copy of the certificate file and stores it in the space set up for the provisioned node on AMF backup media.
AMF Commands Figure 5: Sample output from the show atmf provision nodes command switch1#show atmf provision nodes ATMF Provisioned Node Information: Backup Media .............: SD (Total 3827.0MB, Free 3481.
AMF Commands atmf provision node locate This command changes the present working directory to the directory of a provisioned node. This makes it easier to edit files and create a unique provisioned node in the backup. This command can only be run on amf master nodes. Syntax atmf provision node locate Parameter Description The name of the provisioned node. Mode Privileged Exec Usage This command is only available on master nodes in the AMF network.
AMF Commands atmf reboot-rolling This command enables you to reboot the nodes in an AMF working-set, one at a time, as a rolling sequence in order to minimize downtime. Once a rebooted node has finished running its configuration and its ports are up, it re-joins the AMF network and the next node is rebooted. By adding the url parameter, you can also upgrade your switches’ software one AMF node at a time. The force command enforces a node reboot even if a previous node does not rejoin the AMF network.
AMF Commands Several checks are performed to ensure the upgrade will succeed. These include checking the current node release boots from flash. If there is enough space on flash, the software release is copied to flash to a new location on each node as it is processed. The new release name will be updated using the “boot system ” command, and the old release will become the backup release file.
AMF Commands When the reboot has completed, a number of status screens appear. The selection of these screens will depend on the parameters set.
AMF Commands Example 2 To update firmware releases, use the following command: Node_1# atmf working-set group all ATMF_NETWORK[9]# atmf reboot-rolling card:/5.4.3/x*-5.4.3-*.rel . ATMF Rolling Reboot Nodes: Timeout Node Name (Minutes) New Release File Status -------------------------------------------------------------SW_Team1 8 x510-5.4.3-0.5.rel Release Ready SW_Team2 10 x510-5.4.3-0.5.rel Release Ready SW_Team3 8 --Not Supported HW_Team1 6 --Incompatible Bld2_Floor_1 6 x900-5.4.3-0.5.
AMF Commands atmf recover This command is used to manually initiate the recovery (or replication) of an AMF node, usually when a node is being replaced. The recovery/replication process involves loading the configuration file for a node that is either about to be replaced or has experienced some problem. The configuration file of the device being replaced is selected by the nodename parameter, and the master node holding the configuration file is specified by the parameter .
AMF Commands atmf recover led-off This command turns off the recovery failure flashing port LEDs. It reverts the LED’s function to their normal operational mode, and in doing so assists with resolving the recovery problem. You can repeat this process until the recovery failure has been resolved. For more detailed information see “Recovery progress indication” on page 145.
AMF Commands atmf remote-login Use this command to remotely login to other AMF nodes in order to run commands as if you were a local user of that node. Syntax atmf remote-login [user ] Parameter Description User name. Node name. Mode Privileged Exec (This command will only run at privilege level 15) Usage You do not need a valid login on the local device in order to run this command. The session will take you to the enable prompt on the new device.
AMF Commands atmf restricted-login This command restricts the use of the “atmf working-set” on page 210 command on all AMF master nodes to privilege 15 users only. Once entered on any AMF master node, this command will propagate across the network. Note that once you have run this command, certain other commands that utilize the AMF working-set command, such as the include, atmf reboot-rolling and show atmf group members commands, will operate only on master nodes.
AMF Commands atmf virtual-link id ip remote-id remote-ip This command creates one or more Layer 2 tunnels that enable AMF nodes to transparently communicate across a wide area network using Layer 2 connectivity protocols. Once connected through the tunnel, the remote member will have the same AMF capabilities as a directly connected AMF member. Use the no variant of this command to remove the specified virtual link. Syntax atmf virtual-link id <1-32> ip remote-id <1-32> remote-ip
AMF Commands The tunneled link may operate via external (non AlliedWare Plus) routers in order to provide wide area network connectivity. However in this configuration, the routers perform a conventional router to router connection. The protocol tunneling function is accomplished by the AMF nodes.
AMF Commands atmf working-set The AMF working-set command enables you to execute commands across an individually listed set (or preselected group) of AMF nodes. Group selection is made using the atmf group (membership) command on page 179. This command opens a session on multiple network devices. When you change the working set to anything other than the local device, the prompt will change to the AMF network name, followed by the size of the working set, shown in square brackets.
AMF Commands Note This command adds the implicit group “all” to the working set, where “all” comprises all nodes in the AMF.
AMF Commands debug atmf This command enables the AMF debugging facilities, and displays information that is relevant (only) to the current node. The detail of the debugging displayed depends on the parameters specified. If no additional parameters are specified, then the command output will display all AMF debugging information, including link events, topology discovery messages and all notable AMF events.
AMF Commands To debug all AMF database debugging, use the command: node_1# debug atmf database To debug all AMF neighbor debugging, use the command: node_1# debug atmf neighbor To debug all AMF error debugging, use the command: node_1# debug atmf error To debug all AMF facilities, use the command: node_1# debug atmf all Related Commands no debug all New and Enhanced Features in AlliedWare Plus 5.4.
AMF Commands debug atmf packet This command configures AMF Packet debugging parameters. The debug only displays information relevant to the current node.
AMF Commands Parameter Description pkts The actual number of packets filter Sets debug to filter packets node Sets the filter on packets for a particular Node The name of the remote node interface Sets the filter to dump packets from an interface (portx.x.x) on the local node ifname Interface port or virtual-link pkt-type Sets the filter on packets with a particular AMF packet type 1 Crosslink Hello BPDU packet with crosslink links information. Enter 1 to select this packet type.
AMF Commands Examples To set a packet debug on node 1 with level 1 and no timeout, use the command: node_1# debug atmf packet direction tx timeout 0 To set a packet debug with level 3 and filter packets received from AMF node 1: node_1# debug atmf packet direction tx level 3 filter node_1 To enable send and receive 500 packets only on vlink1 for packet types 1, 7, and 11, use the command: node_1# debug atmf packet num-pkts 500 filter interface vlink1 pkt-type 1 7 11 Example This example applies the d
AMF Commands erase factory-default This command erases all data from NVS and all data from flash excluding the following: ■ The current release file and its /flash/.release file ■ The backup release file and /flash/.backup file ■ v1 license files /flash/.configs/.swfeature.lic ■ v2 license files /flash/.configs/.sw_v2.lic The device is then rebooted and returns the switch to its factory default condition. The switch can then bu used for automatic node recovery.
AMF Commands show atmf Displays information about the current AMF node. Syntax Default show atmf [summary|tech|nodes|session] Parameter Description summary Displays summary information about the current AMF node. tech Displays global AMF information. nodes Displays a list of AMF nodes together with brief details. session Displays information on an AMF session. Only summary information is displayed.
AMF Commands Figure 9: Output from the show atmf nodes command Node Information: * = Local device SC = Switch Configuration: C = Chassis S = Stackable N = Standalone Node Device AMF Node Name Type Master SC Parent Depth -------------------------------------------------------------------------------Building_1 AT-SBx8112 Y C 0 * Building_2 x900-12XT/S Y N 0 Bld1_Floor_1 SwitchBlade x908 N S Building_1 1 Bld1_Floor_2 x600-24Ts/XP N N Building_1 1 Bld2_Floor_1 x610-24Ts-POE+ N N Building_1 1 SW_Team1 x510-28
AMF Commands The AMF tech command collects all the AMF commands, and displays them. You can use this command when you want to see an overview of the AMF network.
AMF Commands Table 1: Parameter definitions from the show atmf tech command Parameter Definition Node ID A Unique identifier assigned to a Node on an AMF network. Node Depth The number of nodes in path from this node to level of the AMF root node. It can be thought of as the vertical depth of the AMF network from a particular node to the zero level of the AMF root node. Domain State The state of Node in a Domain in AMF network as Controller/Backup. Recovery State The AMF node recovery status.
AMF Commands show atmf backup This command displays information about AMF backup status for all the nodes in an AMF network. It can only be run on amf master nodes. Syntax Mode Example 1 show atmf backup [logs|server-status|synchronize [logs]] Parameter Description logs Displays detailed log information. server-status Displays connectivity diagnostics information for each configured remote file server.
AMF Commands Example 2 To display the AMF backup information with the optional parameter server-status, use the command: Node_1# show atmf backup server-status Node1#sh atmf backup server-status Id Last Check State ------------------------------------1 186 s File server ready 2 1 s SSH no route to host Table 2: Parameter definitions from the show atmf backup server-status command Parameter Definition Scheduled Backup Indicates whether AMF backup scheduling is enabled or disabled.
AMF Commands show atmf detail This command displays details about an AMF node. It can only be run on amf master nodes. Syntax Mode Example 1 show atmf [detail] Parameter Description detail Displays output in greater depth.
AMF Commands Table 3: Parameter definitions from the show atmf details command Parameter Definition Domain State The state of Node in a Domain in AMF network as Controller/Backup. Recovery State The AMF node recovery status. Indicates whether a node recovery is in progress on this device - Auto, Manual, or None. Management VLAN The VLAN created for traffic between Nodes of different domain (up/down links). ■ VLAN ID - In this example VLAN 4092 is configured as the Management VLAN.
AMF Commands show atmf group This command can be used to display the group membership within to a particular AMF node. It can also be used with the working-set command to display group membership within a working set. Each node in the AMF is automatically added to the group that is appropriate to its hardware architecture, e.g. x510, x610. Nodes that are configured as masters are automatically assigned to the master group. You can create arbitrary groups of AMF members based on your own selection criteria.
AMF Commands A typical output screen from this command is shown below: ATMF group information master, poe, x8100 ========================================= node-1, node-2, node33, node-4, node-5, node-6: ============================================== ATMF group information sysadmin, x8100 ATMF-Test-NETWORK[6]# This confirms that the six nodes (node_1 to node6) are now members of the working-set and that these nodes reside within the AMF-Test-Network.
AMF Commands show atmf group members This command will display all group memberships within an AMF working-set. Each node in the AMF working set is automatically added to automatic groups which are defined by hardware architecture, e.g. x510, x610. Nodes that are configured as masters are automatically assigned to the master group. User can define arbitrary groupings of AMF members based on their own criteria, which can be used to select groups of nodes.
AMF Commands show atmf links This command displays brief information about AMF links on a switch, such as link status and adjacent nodes. Provisioned node names will be displayed with a trailing * character, and will not have an entry under Adjacent Ifindex. This command can only be run on amf master nodes.
AMF Commands Note You can manage your show output, or make it more selective, by using a command modifier. For information on using show-command modifiers, see “Controlling “show” Command Output” in the “Getting Started” chapter of your switch’s Software Reference. Related Commands 230 no debug all clear atmf links statistics show atmf show atmf nodes New and Enhanced Features in AlliedWare Plus 5.4.
AMF Commands show atmf links detail This command displays detailed information on all the links configured in the AMF network. It can only be run on amf master nodes. Syntax Mode Example show atmf links [detail] Parameter Description detail Detailed AMF links information. User Exec To display the AMF link details use this command: switch1# show atmf links detail The output from this command will display all the internal data held for AMF links.
AMF Commands Figure 15: Sample output from the show atmf links detail command (cont.) Port Ifindex VR ID Port Status Port State Port BPDU Receive Count : : : : : : port2.0.2 6002 0 Down Init 0 Link State Entries: Node.Ifindex Building_1.4501 Transaction ID MAC Address eccd.6d03.10e3 Link State : Building_2.4501 : 3 - 3 : 0014.2299.137d : Full - Full Domain Nodes Tree: Node Links on Node Link 0 Building_1.4501 Forwarding State Node Links on Node Link 0 Building_1.
AMF Commands Figure 15: Sample output from the show atmf links detail command (cont.) Downlink Domain Information: Domain Domain Controller Domain Controller MAC Number of Links Number of Links Up Number of Links on This Node Links are Blocked Node Transaction List Node Transaction ID Domain List Domain Node Ifindex Transaction ID Flags Domain Node Ifindex Transaction ID Flags : : : : : : : Bld2_Floor_1's domain Bld2_Floor_1 eccd.6d3f.
AMF Commands Table 7: Parameter definitions from the show atmf links detail command output Parameter Definition Port Status Shows status of the local port on the Node as UP/DOWN. Adjacent Node Shows Adjacent AMF Node to this Node. Adjacent IfIndex Shows interface on the Adjacent AMF Node connected to this Node. Link State Shows state of AMF link Forwarding/Blocking.
AMF Commands Table 7: Parameter definitions from the show atmf links detail command output(cont.) Parameter Definition Uplink Information Show all uplink entries. ■ Waiting for Sync - Flag if uplinks are currently waiting for synchronization. ■ Transaction ID - Shows transaction id of the local node. ■ Number of Links - Number of up downlinks in the domain. ■ Number of Local Uplinks - Number of uplinks on this node to the parent domain. ■ Originating Node - Node originating the uplink information.
AMF Commands Table 7: Parameter definitions from the show atmf links detail command output(cont.) Parameter Definition Up/Downlink Ports Information Shows all the configured up and down link ports on this node: ■ Port - Name of the local port. ■ Ifindex - Interface index of the local port. ■ VR ID - Virtual router id for the local port. ■ Port Status - Shows status of the local port on the Node as UP/DOWN. ■ Port State - AMF state of the local port. ■ Adjacent Node - nodename of the adjacent node.
AMF Commands show atmf links statistics This command displays details of the AMF links configured on the device and also displays statistics about the AMF packet exchanges between the devices. It is also possible to display the AMF link configuration and packet exchange statistics for a specified interface.
AMF Commands Figure 16: Sample output from the show atmf links statistics command switch1# show atmf links statistics ATMF Statistics: Receive Transmit --------------------------------------------------------------Crosslink Hello 7 14 Crosslink Hello Domain 18 38 Crosslink Hello Uplink 3 12 Hello Link 32 31 Hello Neighbor 55 57 Hello Stack 0 0 Database Description 12 112 Database Request 5 4 Database Reply 0 5 Database Update 35 9 Database Update Bitmap 0 10 Database Acknowlegde 112 74 Transmit Fails 0 0 D
AMF Commands Table 8: Parameter definitions from the show atmf links statistics command output Parameter Definition Receive Shows a count of AMF protocol packets received per message type. Transmit Shows the number of AMF protocol packets transmitted per message type. Database Entries Shows the number of AMF elements existing in the distributed database. Database Full Ages Shows the number of times the entries aged in the database.
AMF Commands show atmf memory This command displays a summary of the AMF memory usage. It can only be run on amf master nodes.
AMF Commands Figure 18: Sample output from the show atmf memory command (cont.
AMF Commands show atmf nodes This command displays all nodes currently configured within the AMF network. It displays a topographical representation of the network infrastructure. This command displays a summary of all virtual links currently in the running configuration. Syntax Mode Example show atmf nodes Privileged Exec To display AMF information for all nodes in the AMF, use the command: node_1# show atmf nodes Figure 19: Sample output from the show atmf nodes command.
AMF Commands show atmf provision nodes This command displays information about each provisioned node with details about date and time of creation, boot and configuration files available in the backup, and license files present in the provisioned backup. This includes nodes that have joined the network but are yet to run their first backup. This command can only be run on amf master nodes.
AMF Commands show atmf tech This command collects and displays all the AMF command output. The command can thus be used to display a complete picture of an AMF network. Syntax Mode Example show atmf tech Privileged Exec To display output for all AMF commands, use the command: NodeName# show atmf tech Figure 21: Sample output from the show atmf tech command.
AMF Commands Table 9: Parameter definitions from the show atmf tech command Parameter Definition ATMF Status Shows status of AMF feature on the Node as Enabled/Disabled. Network Name The name of the AMF network to which this node belongs. Node Name The name assigned to the node within the AMF network. Role The role configured on the switch within the AMF - either master or member. Current ATMF Nodes A count of the AMF nodes in the AMF network.
AMF Commands show atmf working-set This command displays the nodes that form the current AMF working-set. Syntax Mode Example show atmf working-set Privileged Exec To show current members of the working-set, use the command: ATMF_NETWORK[6]# show atmf working-set Figure 22: Sample output from the show atmf working-set command.
AMF Commands show debugging atmf This command shows the debugging modes status for AMF. Syntax Mode Example show debugging atmf User Exec and Global Configuration To display the AMF debugging status, use the command: node_1# show debugging atmf Figure 23: Sample output from the show debugging atmf command.
AMF Commands show debugging atmf packet This command shows details of AMF Packet debug command. Syntax Mode Example show debugging atmf packet User Exec and Global Configuration To display the AMF packet debugging status, use the command: node_1# show debug atmf packet Figure 24: Sample output from the show debugging atmf packet command. ATMF packet debugging is on === ATMF Packet Debugging Parameters=== Node Name: x900 Port name: port1.0.
AMF Commands show running-config atmf This command displays the running system information that is specific to AMF. Syntax Mode Example show running-config atmf User Exec and Global Configuration To display the current configuration of AMF, use the following commands: node_1# show running-config atmf Related Commands show running-config New and Enhanced Features in AlliedWare Plus 5.4.
AMF Commands switchport atmf-crosslink This command configures the selected port or (statically) aggregated link to be an AMF crosslink. Running this command will automatically place the port or static aggregator into trunk mode (i.e. switchport mode trunk). The connection between two AMF masters must utilize a crosslink. Crosslinks are used to carry the AMF control information between master nodes.
AMF Commands Example 2B To make static aggregator sa1 an AMF crosslink, use the following commands for good practice: Node_1# configure terminal Node_1(config)# interface sa1 Node_1(config-if)# switchport atmf-crosslink Node_1(config-if)# switchport trunk allowed vlan add 2 Node_1(config-if)# switchport trunk native vlan none In this example VLAN 2 is assigned to the static aggregator, and the native VLAN (VLAN 1) is explicitly excluded from the aggregated ports and the crosslink assigned to it.
AMF Commands switchport atmf-link This command enables you to configure a port or aggregator to be an AMF uplink/ downlink. Running this command will automatically place the port or aggregator into trunk mode. Use the no variant of this command to remove any AMF-link that may exist for the selected port or aggregated link. Syntax switchport atmf-link no switchport atmf-link Mode Example Interface Configuration To make a switchport 1.0.
AMF Commands type atmf node This command configures a trigger to be activated at an AMF node join event or leave event. Syntax Mode Example 1 type atmf node {join|leave} Parameter Description join AMF node join event. leave AMF node leave event. Trigger Configuration To configure trigger 5 to activate at an AMF node leave event, use the following commands.
AMF Commands Display the trigger configurations AMF-Net[3]# show trigger This command returns the following display: ======= node1: ======== TR# Type & Details Description Ac Te Tr Repeat #Scr Days/Date ------------------------------------------------------------------------------001 Periodic (2 min) Periodic Status Chk Y N Y Continuous 1 smtwtfs 005 ATMF node (leave) E-mail on ATMF Exit Y N Y Continuous 1 smtwtfs ------------------------------------------------------------------------------- ==========
AMF Commands undebug atmf This command is an alias for the no variant of the debug atmf command on page 212. The IPv4 addresses shown may include those specified for documentation purposes in RFC 5737: 192.0.2.0/24, 198.51.100.0/24, 203.0.113.0/24. These addresses should not be used for practical networks (other than for testing purposes), nor should they appear in any public network. New and Enhanced Features in AlliedWare Plus 5.4.
AMF Commands 256 New and Enhanced Features in AlliedWare Plus 5.4.
AlliedWare Plus Version 5.4.4-0.1 For SwitchBlade x8100 Series, SwitchBlade x908, x900 Series, x610 Series, x510 Series, IX5-28GPX, and x210 Series Switches Contents Introduction ......................................................................................................................................... 258 New Products ...................................................................................................................................... 260 x210 Series Enterprise Edge Switches .
Introduction This release note describes the new features and enhancements in AlliedWare Plus software version 5.4.4 since version 5.4.3-0.1. For more information, see the Software Reference for your switch. Software file details for this version are listed in Table 1-1 below. Caution: Software version 5.4.4 requires a release license. Ensure that you load your license certificate onto each switch before you upgrade. Contact your authorized Allied Telesis support center to obtain a license.
Caution: Using a software version file for the wrong switch model may cause unpredictable results, including disruption to the network. Information in this release note is subject to change without notice and does not represent a commitment on the part of Allied Telesis, Inc. While every effort has been made to ensure that the information contained within this document and the features and changes described are accurate, Allied Telesis, Inc.
New Products AlliedWare Plus version 5.4.4 supports the following products that are new since 5.4.3-0.1. x210 Series Enterprise Edge Switches The x210 Series is a reliable and value-packed solution for today’s networks. With a choice of 9-port, 16-port and 24-port versions, each with one or more SFP uplinks, the x210 Series switches are ideal for applications at the edge of the network where security and manageability are the key requirements.
*Stacking ports can be configured as additional 1G/10G Ethernet ports when the switch is not stacked. For more information on the x510 GPX Series switches, see the x510 Series Data Sheet, Installation Guide and Software Reference. These documents are available from our website at alliedtelesis.com/switches/x510. x510-28GSX Stackable Fiber Gigabit Switch The AT-x510-28GSX provides an advanced feature set for fiber networks, with 24 x 100/ 1000X fiber access ports and 4 x 1G/10G SFP+ uplink ports.
*Stacking ports can be configured as additional 1G/10G Ethernet ports when the switch is not stacked. For more information on the x510DP-52GTX switch, see the x510 Series Data Sheet, Installation Guide and Software Reference. These documents are available from our website at alliedtelesis.com/switches/x510dp-52gtx. IX5-28GPX High Availability Video Surveillance PoE+ Switch The IX5-28GPX provides a high performing and scalable solution for today’s networks.
The SwitchBlade x8106 is a compact, high-performing, scalable solution providing an extensive range of connectivity options. Dual control cards are partnered with four line cards, or a single control card can be used with five line cards. Gigabit and 10 Gigabit line card options ensure a system capable of meeting the requirements of today’s networks, and the flexibility to expand when required. For more information on the SBx8106 switch, see the SBx8100 Data Sheet, Installation Guide and Software Reference.
For more information about the SBx81GT40, see our website at alliedtelesis.com/switches/sbx8100. 264 New and Enhanced Features in AlliedWare Plus 5.4.
Key New Features and Enhancements Software version 5.4.4 includes all the new features that have been added to AlliedWare Plus since the release of 5.4.3-0.1. This includes all features that were released in 5.4.3 minor releases. This section summarizes the key new features. For a list of all new and enhanced features and commands, see “Changes in this Version” on page 269. For more information about all features on the switch, see the Software Reference for your switch.
BGP4+ Border Gateway Protocol (BGP) for IPv6 is an exterior gateway protocol, often used between gateway hosts on the Internet. It enables gateways to exchange routing information and so to advertise, learn, and choose the best paths inside the Internet. Software version 5.4.4 supports BGP4+ for IPv6, as well as BGP for IPv4. BGP4+ is supported on x610 Series, x900 Series, SwitchBlade x908, and SwitchBlade x8100 Series switches.
Important Considerations Before Upgrading to this Version Licensing For software version 5.4.4-0.1 to 5.4.4-0.3, AlliedWare Plus software releases require a license on all products. From software version 5.4.4-0.4 onwards, AlliedWare Plus software releases require a license on SBx8100 and SBx908 Series switches only. Before upgrading your software, please obtain a license from your authorized Allied Telesis support center. You will need to provide the MAC addresses of the switches you want to license.
AMF software version compatibility We strongly recommend that all switches in an AMF network run the same software release. If this is not possible, switches running this minor version are compatible with switches running version 5.4.3-2.6 and later, or any 5.4.4-0.x version. Upgrading all switches in an AMF network This version supports upgrades across AMF networks.
Changes in this Version Table 6 below lists new and modified features in this version. Table 7 on page 274 below lists all new and modified commands in this version and shows which chapter of the Software References has details of each command. Table 8 on page 288 below lists new and modified SNMP (Simple Network Management Protocol) MIBs (Management Information Bases) in this version.
SBx8100 SBx908 x900 x610 x510 IX5 x210 Table 6: New and modified features in 5.4.4 Software Reference Chapter Feature Status Allied Telesis Management Framework New Y P1 P1 P1 P1 P1 P1 AMF The Allied Telesis Management Introduction and Framework (AMF) is a suite of features Configuration that combine to simplify network management across all supported network switches from the core to the edge. BGP4+ New N N N P1 P1 P1 P1 BGP and BGP4+ Software version 5.4.
SBx8100 SBx908 x900 x610 x510 Status IX5 Feature x210 Table 6: New and modified features in 5.4.4(cont.) Software Reference Chapter Description DHCP Modified N N N P1 P1 P1 Y Internet Protocol You can now configure DHCP Relay to Operation With (IP) Addressing forward packets within a VRF Lite VRF Lite and Protocols instance. DHCP messages between DHCP Clients and a DHCP Server are then able to be relayed between VLAN interfaces within a VRF Lite instance.
SBx8100 SBx908 x900 x610 x510 Status IX5 Feature x210 Table 6: New and modified features in 5.4.4(cont.) Software Reference Chapter Description Two-step New Authentication Y Y P1 P1 Y Y Y Authentication Support for Two-step Authentication Introduction and has been added. Two-step Configuration Authentication improves security by requiring two forms of authentication.
If your existing configurations include commands modified or deprecated in this version (see the Status column), check whether you need to modify these configurations. For full command descriptions, modes and examples, see the appropriate Software Reference for your switch. New and Enhanced Features in AlliedWare Plus 5.4.
SBx8100 SBx908 x900 x610 x510 IX5 x210 Table 7: New and modified commands in 5.4.4 Software Reference Chapter Command Status Description show dot1x Modified Y Y P1 P1 Y Y Y 802.1X Commands This command displays authentication information for 802.1X port authentication. It now includes output for the new commands auth connect-timeout period and auth two-step enable. show dot1x interface Modified Y Y P1 P1 Y Y Y 802.1X Commands This command displays authentication information for 802.
SBx8100 SBx908 x900 x610 x510 Status IX5 Command x210 Table 7: New and modified commands in 5.4.4(cont.) Software Reference Chapter Description show atmf links New Y Y P1 Y P1 P1 P1 AMF Commands This new command displays details about an AMF node. show atmf links New statistics Y Y P1 Y P1 P1 P1 AMF Commands In addition to its original function, this command is now also able to display the AMF link configuration and packet exchange statistics for a specified interface.
SBx8100 SBx908 x900 x610 x510 Status IX5 Command x210 Table 7: New and modified commands in 5.4.4(cont.) Software Reference Chapter Description auth-web-server New intercept-port Y Y P1 P1 Y Y Y Authentication Commands This command registers any additional TCP port numbers that the web authentication server is to intercept. copy proxyautoconfig-file New Y Y P1 P1 Y Y Y Authentication Commands This command downloads the proxy auto configuration (PAC) file to your switch.
SBx8100 SBx908 x900 Modified x610 bgp router-id x510 Status IX5 Command x210 Table 7: New and modified commands in 5.4.4(cont.) Software Reference Chapter Description N N N P1 P1 P1 P1 BGP and BGP4+ This command now configure the Commands router identifier for BGP and BGP4+. Note you must specify an IPv4 address with this when used for BG4+. clear bgp (ASN) Modified N N N P1 P1 P1 P1 BGP and BGP4+ The unicast and multicast parameter Commands options have been removed in this release.
SBx8100 SBx908 x900 x610 x510 IX5 x210 Table 7: New and modified commands in 5.4.4(cont.) Software Reference Chapter Command Status Description clear ip bgp flap-statistics Modified N N N P1 P1 P1 P1 BGP and BGP4+ The unicast and multicast parameter Commands options have been removed in this release. clear ip bgp peer-group Modified N N N P1 P1 P1 P1 BGP and BGP4+ The unicast and multicast parameter Commands options have been removed in this release.
SBx8100 SBx908 x900 x610 x510 IX5 x210 Table 7: New and modified commands in 5.4.4(cont.) Software Reference Chapter Command Status Description neighbor collideestablished Modified N N N P1 P1 P1 P1 BGP and BGP4+ This command specifies a BGP or Commands BGP4+ neighbor, which is already in an ‘established’ state, for conflict resolution when a TCP connection collision is detected.
SBx8100 SBx908 x900 x610 x510 IX5 x210 Table 7: New and modified commands in 5.4.4(cont.) Software Reference Chapter Command Status Description neighbor nexthop-self Modified N N N P1 P1 P1 P1 BGP and BGP4+ This command now configures the Commands BGP or BGP4+ router as the next hop for a BGP or BGP4+ speaking neighbor or peer group. neighbor overridecapability Modified N N N P1 P1 P1 P1 BGP and BGP4+ This command now overrides a Commands capability negotiation result for BGP and BGP4+.
SBx8100 SBx908 x900 x610 x510 Status IX5 Command x210 Table 7: New and modified commands in 5.4.4(cont.) Software Reference Chapter Description neighbor soft- Modified reconfiguration inbound N N N P1 P1 P1 P1 BGP and BGP4+ This command now configures the Commands switch to start storing all updates from the BGP or BGP4+ neighbor, without any consideration of any inward filtering policy that might be applied to the connection with this BGP or BGP4+ neighbor.
SBx8100 SBx908 x900 x610 x510 IX5 x210 Table 7: New and modified commands in 5.4.4(cont.) Software Reference Chapter Command Status Description show bgp ipv6 community New N N N P1 P1 P1 P1 BGP and BGP4+ This command displays routes that Commands match specified communities within an IPv6 environment. show bgp ipv6 community-list New N N N P1 P1 P1 P1 BGP and BGP4+ This command display routes that Commands match the given community-list within an IPv6 environment.
SBx8100 SBx908 x900 x610 x510 IX5 x210 Table 7: New and modified commands in 5.4.4(cont.) Software Reference Chapter Command Status Description show ip bgp neighbors Modified N N N P1 P1 P1 P1 BGP and BGP4+ This command now has separate IPv6 Commands address and IPv4 address parameters, to support BGP on both IPv4 and IPv6. The new parameters have been available since version 5.4.3-2.5.
SBx8100 SBx908 x900 x610 x510 Status IX5 Command x210 Table 7: New and modified commands in 5.4.4(cont.) Software Reference Chapter Description show ip bgp Modified neighbors rcvdmsgs N N N P1 P1 P1 P1 BGP and BGP4+ IPv6 address and IPv4 address Commands parameters are available with the show ip bgp neighbors rcvd-msgs command with BGP4+ feature licensing for IPv6 available since AlliedWare Plus 5.4.3-2.5 release.
SBx8100 SBx908 x900 x610 x510 IX5 x210 Table 7: New and modified commands in 5.4.4(cont.) Software Reference Chapter Command Status ip name-server Modified N N N P1 P1 P1 Y IP Addressing and Protocol Commands This command adds IPv4 or IPv6 DNS server addresses. This command has been modified to provide VRF Lite capability, allowing a specific VRF Lite instance.
SBx8100 SBx908 x900 x610 x510 IX5 x210 Table 7: New and modified commands in 5.4.4(cont.) Software Reference Chapter Command Status ipv6 access-list (named) New N Y Y Y P P P IPv6 Hardware Access Control List (ACL) Commands This command creates a new IPv6 hardware access-list, or selects an existing IPv6 hardware access-list to add a filter to it.
SBx8100 SBx908 x900 x610 x510 IX5 x210 Table 7: New and modified commands in 5.4.4(cont.) Software Reference Chapter Command Status Description show license brief member Modified N Y Y Y Y Y Y Licensing Commands This command displays summarized information about a specific software license, or all software feature licenses enabled on either a specific stack member or all stack members.
SBx8100 SBx908 x900 New x610 show system mac x510 Status IX5 Command x210 Table 7: New and modified commands in 5.4.4(cont.) Software Reference Chapter Y Y Y Y Y Y Y System Configuration and Monitoring Commands Description This command displays the physical MAC address available on a stack, or a standalone switch, or a chassis. This command also shows the virtual MAC address for a stack if the stack virtual MAC address feature is enabled with the stack virtual-mac command.
Licensing this Software Version on an x210 Series, IX5-28GPX, x510 Series, x610 Series, x900 Series or SBx908 Switch Release licenses are applied with the license certificate command, then validated with the show license or show license brief commands.
Step 4: Confirm release license application On a stand-alone switch, use the commands show license or show license brief to confirm release license application. On a stacked switch, use the command show license member or show license brief member to confirm release license application. From version 5.4.4, the show license command displays the base feature license and any other feature and release licenses installed on AlliedWare Plus switches.
Licensing this Software Version on a Control Card on an SBx8100 Series Switch Release licenses are applied with the license certificate command, then validated with the show license or show license brief commands.
Entering a valid release license changes the console message displayed about licensing: 11:04:56 awplus IMI[1696]: SFL: The current software is not licensed. awplus#license certificate demo1.csv A restart of affected modules may be required. Would you like to continue? (y/n): y 11:58:14 awplus IMI[1696]: SFL: The current software is licensed. Exiting unlicensed mode. Stack member 1 installed 1 license 1 license installed.
Installing this Software Version Caution: Software version 5.4.4 requires a release license. Ensure that you load your license certificate onto each switch before you upgrade. Contact your authorized Allied Telesis support center to obtain a license. For details, see: ■ “Licensing this Software Version on an x210 Series, IX5-28GPX, x510 Series, x610 Series, x900 Series or SBx908 Switch” on page 289 and ■ “Licensing this Software Version on a Control Card on an SBx8100 Series Switch” on page 291.
5. Reboot using the new software version. awplus# reload 294 New and Enhanced Features in AlliedWare Plus 5.4.
Installing the GUI This section describes how to install and set up the AlliedWare Plus GUI using an SD card, a USB storage device, or a TFTP server. The version number in the GUI Java applet filename (.jar) gives the earliest version of the software file (.rel) that the GUI can operate with.
6. Copy the GUI file onto your switch from the TFTP server, SD card, or USB storage device. TFTP server: Use the command: awplus# copy tftp:/// flash:/ SD card: use the command: awplus# copy card:/ flash:/ USB storage device: use the command: awplus# copy usb:/ flash:/ where is the IP address of the TFTP server, and where is the filename of the GUI Java applet. 7. Ensure the HTTP service is enabled on your switch.