Deployment Guide

ManualsBrandsDell ManualsAccess PlatformsOS9

341

342

343

344

345

346

347

348

349

350

Table Of Contents

Dell EMC Networking Configuration Guide for the C9010 Series Version 9.14.2.1
About this Guide
- Audience
- Conventions
- Related Documents
Configuration Fundamentals
- Accessing the Command Line
- CLI Modes
  - Navigating CLI Modes
- The do Command
- Undoing Commands
- Obtaining Help
- Entering and Editing Commands
- Command History
- Filtering show Command Outputs
- Multiple Users in Configuration Mode
Getting Started
- Console Access
  - Serial Console
    - Accessing the Console Port
    - Pin Assignments
- Mounting an NFS File System
- Default Configuration
- Configuring a Host Name
- Accessing the System Remotely
- Configuring the Enable Password
- Manage Configuration Files
- Viewing Command History
- Upgrading the Dell Networking OS
Switch Management
- Configuring Privilege Levels
  - Removing a Command from EXEC Mode
  - Moving a Command from EXEC Privilege Mode to EXEC Mode
  - Allowing Access to CONFIGURATION Mode Commands
  - Allowing Access to the Following Modes
  - Applying a Privilege Level to a Username
  - Applying a Privilege Level to a Terminal Line
- Configuring Logging
  - Audit and Security Logs
  - Configuring Logging Format
  - Setting Up a Secure Connection to a Syslog Server
- Track Login Activity
  - Restrictions for Tracking Login Activity
  - Configuring Login Activity Tracking
  - Display Login Statistics
- Limit Concurrent Login Sessions
  - Restrictions for Limiting the Number of Concurrent Sessions
  - Configuring Concurrent Session Limit
  - Enabling the System to Clear Existing Sessions
- Enabling Secured CLI Mode
- Log Messages in the Internal Buffer
- Disabling System Logging
- Sending System Messages to a Syslog Server
  - Configuring a UNIX System as a Syslog Server
- Display the Logging Buffer and the Logging Configuration
- Changing System Logging Settings
- Configuring a UNIX Logging Facility Level
- Synchronizing Log Messages
- Enabling Timestamp on Syslog Messages
- File Transfer Services
  - Enabling the FTP Server
  - Configuring FTP Server Parameters
  - Configuring FTP Client Parameters
- Terminal Lines
  - Denying and Permitting Access to a Terminal Line
  - Configuring Login Authentication for Terminal Lines
- Setting Time Out of EXEC Privilege Mode
- Using Telnet to Access Another Network Device
- Lock CONFIGURATION Mode
- LPC Bus Quality Degradation
- Recovering from a Forgotten Password
- Ignoring the Startup Configuration and Booting from the Factory-Default Configuration
- Recovering from a Failed Start
- Restoring Factory-Default Settings
  - Restoring Factory-Default Boot Environment Variables
- Using Hashes to Verify Software Images Before Installation
- Verifying System Images on C9010 Components
  - When System Images on C9010 Components Do Not Match
  - Manually Resetting the System Image on a C9010 Component
  - Logging in to the Virtual Console of a C9010 Component
  - Booting the C9010 from an Image on a Network Server
  - Configuring C9010 Components to Boot from the RPM CP Image
- Viewing the Reason for Last System Reboot
802.1X
- The Port-Authentication Process
  - EAP over RADIUS
- Configuring 802.1X
- Important Points to Remember
- Enabling 802.1X
- Configuring dot1x Profile
- Configuring MAC addresses for a do1x Profile
- Configuring the Static MAB and MAB Profile
- Configuring Critical VLAN
- Configuring Request Identity Re-Transmissions
- Configuring a Quiet Period after a Failed Authentication
- Forcibly Authorizing or Unauthorizing a Port
- Re-Authenticating a Port
- Configuring Dynamic VLAN Assignment with Port Authentication
- Guest and Authentication-Fail VLANs
- Multi-Host Authentication
- Multi-Supplicant Authentication
- MAC Authentication Bypass
- Dynamic CoS with 802.1X
Access Control Lists (ACLs)
- IP Access Control Lists (ACLs)
- ACL Optimization to Increase Number of Supported IPv4 ACLs
  - Optimizing ACL for More Number of IPv4 ACL Rules
- IP Fragment Handling
  - IP Fragments ACL Examples
  - Layer 4 ACL Rules Examples
- Configure a Standard IP ACL
  - Configuring a Standard IP ACL Filter
- Configure an Extended IP ACL
  - Configuring Filters with a Sequence Number
    - Configure Filters, TCP Packets
    - Configure Filters, UDP Packets
  - Configuring Filters Without a Sequence Number
- Configure Layer 2 and Layer 3 ACLs
- Using ACL VLAN Groups
- Applying an IP ACL
- IP Prefix Lists
  - Configuration Task List for Prefix Lists
- ACL Remarks
  - Configuring a Remark
  - Deleting a Remark
- ACL Resequencing
  - Resequencing an ACL or Prefix List
- Route Maps
- Important Points to Remember
- Configuring a UDF ACL
- Hot-Lock Behavior
Bidirectional Forwarding Detection (BFD)
- How BFD Works
- Important Points to Remember
- Configure BFD
Border Gateway Protocol IPv4 (BGPv4)
- Autonomous Systems (AS)
- Sessions and Peers
  - Establish a Session
- Route Reflectors
- BGP Attributes
- Multiprotocol BGP
- Implement BGP
- Configuration Information
- BGP Configuration
- Enabling MBGP Configurations
  - Configure IPv6 NH Automatically for IPv6 Prefix Advertised over IPv4 Neighbor
- BGP Regular Expression Optimization
- Debugging BGP
- Sample Configurations
Content Addressable Memory (CAM)
- CAM Allocation
- Test CAM Usage
- View CAM-ACL Settings
- View CAM Usage
- Configuring CAM Threshold and Silence Period
- Return to the Default CAM Configuration
- CAM Optimization
- Applications for CAM Profiling
- Unified Forwarding Table (UFT) Modes
  - Configuring UFT Modes
Control Plane Policing (CoPP)
- CoPP Implementation
- CoPP Example
- Configure Control Plane Policing
- Troubleshooting CoPP Operation
Data Center Bridging (DCB)
- Enabling Data Center Bridging
- Ethernet Enhancements in Data Center Bridging
- QoS dot1p Traffic Classification and Queue Assignment
- SNMP Support for PFC and Buffer Statistics Tracking
- DCB Maps and its Attributes
  - Applying a DCB Map on a Line Card
- Data Center Bridging: Default Configuration
- Configuration Notes: PFC and ETS in a DCB Map
- Configuring Priority-Based Flow Control
  - Configuring Lossless Queues
- Configuring Enhanced Transmission Selection
  - Creating an ETS Priority Group
  - ETS Operation with DCBx
- Configure a DCBx Operation
- Verifying the DCB Configuration
- Performing PFC Using DSCP Bits Instead of 802.1p Bits
- PFC and ETS Configuration Examples
- Using PFC and ETS to Manage Data Center Traffic
  - Using PFC and ETS to Manage Converged Ethernet Traffic
  - Hierarchical Scheduling in ETS Output Policies
- Priority-Based Flow Control Using Dynamic Buffer Method
- Configuring the Dynamic Buffer Method
Debugging and Diagnostics
- Offline Diagnostics
  - Running Port Extender Offline Diagnostics on the Switch
  - Running Offline Diagnostics on a Standalone Switch
- TRACE Logs
  - Auto Save on Reload, Crash, or Rollover
  - Uploading Trace Logs
- Last Restart Reason
- show hardware Commands
- Environmental Monitoring
- Troubleshooting Packet Loss
- Accessing Application Core Dumps
- Mini Core Dumps
- Full Kernel Core Dumps
- Enabling TCP Dumps
- Accessing Port Extender Core and Mini Core Dumps
Dynamic Host Configuration Protocol (DHCP)
- DHCP Packet Format and Options
- Assign an IP Address using DHCP
- Implementation Information
- Configure the System to be a DHCP Server
- Configure the System to be a Relay Agent
- Configure the System to be a DHCP Client
  - DHCP Client on a Management Interface
  - DHCP Client Operation with Other Features
- DHCP Relay When DHCP Server and Client are in Different VRFs
  - Configuring Route Leaking between VRFs on DHCP Relay Agent
- Non-default VRF configuration for DHCPv6 helper address
- Configuring DHCP relay source interface
  - Global DHCP relay source IPv4 or IPv6 configuration
  - Interface level DHCP relay source IPv4 or IPv6 configuration
- Configure Secure DHCP
- Source Address Validation
Equal Cost Multi-Path (ECMP)
- ECMP for Flow-Based Affinity
- Managing ECMP Group Paths
- Creating an ECMP Group Bundle
- Modifying the ECMP Group Threshold
- BGP Multipath Operation with Link Bankwidth
- Dynamic Re-calculation of Link Bankwidth
- Weighted ECMP for Static Routes
- ECMP Support in L3 Host and LPM Tables
FCoE Transit
- Fibre Channel over Ethernet
- Ensure Robustness in a Converged Ethernet Network
- FIP Snooping on Ethernet Bridges
- FIP Snooping in a Switch Stack
- Using FIP Snooping
- Configuring FIP Snooping
- Displaying FIP Snooping Information
- FCoE Transit Configuration Example
FIPS Cryptography
- Configuration Tasks
- Preparing the System
- Enabling FIPS Mode
- Generating Host-Keys
- Monitoring FIPS Mode Status
- Disabling FIPS Mode
Flex Hash and Optimized Boot-Up
- Flex Hash Capability Overview
- Configuring the Flex Hash Mechanism
- LACP Fast Switchover
- Configuring LACP Fast Switchover
- LACP
- RDMA Over Converged Ethernet (RoCE) Overview
- Sample Configurations
- Preserving 802.1Q VLAN Tag Value for Lite Subinterfaces
Force10 Resilient Ring Protocol (FRRP)
- Protocol Overview
- FRRP Configuration
- Troubleshooting FRRP
- Sample Configuration and Topology
- FRRP Support on VLT
GARP VLAN Registration Protocol (GVRP)
- Configure GVRP
- Enabling GVRP Globally
- Enabling GVRP on a Layer 2 Interface
- Configure GVRP Registration
- Configure a GARP Timer
High Availability (HA)
- High Availability on Chassis
- High Availability in a PE Stack
- Online Insertion and Removal
- Hitless Behavior
- Graceful Restart
- Software Resiliency
- Control Plane Redundancy
Internet Group Management Protocol (IGMP)
- IGMP Protocol Overview
  - IGMP Version 2
    - Join a Multicast Group
      - Responding to an IGMP Query
      - Sending an Unsolicited IGMP Report
    - Leaving a Multicast Group
  - IGMP Version 3
    - Joining and Filtering Groups and Sources
    - Leaving and Staying in Groups
- Configure IGMP
- Viewing IGMP Enabled Interfaces
- Selecting an IGMP Version
- Viewing IGMP Groups
- Enabling IGMP Immediate-Leave
- IGMP Snooping
- Fast Convergence after MSTP Topology Changes
- Designating a Multicast Router Interface
Interfaces
- Port Numbering
- Interface Types
- View Basic Interface Information
- Resetting an Interface to its Factory Default State
- Enabling a Physical Interface
- Physical Interfaces
  - Port Pipes
  - Setting the Speed of Ethernet Interfaces
  - Configuration Task List for Physical Interfaces
  - Overview of Layer Modes
  - Configuring Layer 2 (Data Link) Mode
  - Configuring Layer 2 (Interface) Mode
  - Configuring Layer 3 (Network) Mode
  - Configuring Layer 3 (Interface) Mode
- Egress Interface Selection (EIS)
  - Configuring EIS
- Management Interfaces
  - Configuring a Dedicated Management Interface
  - Configuring a Management Interface on an Ethernet Port
- Port Extender Interfaces
- VLAN Interfaces
- Loopback Interfaces
- Null Interfaces
- Port Channel Interfaces
  - Port Channel Definition and Standards
  - Port Channel Benefits
  - Port Channel Implementation
  - 10/40 Gbps Interfaces in Port Channels
  - Configuration Tasks for Port Channel Interfaces
  - Creating a Port Channel
  - Adding a Physical Interface to a Port Channel
  - Reassigning an Interface to a New Port Channel
  - Configuring the Minimum Oper Up Links in a Port Channel
  - Adding or Removing a Port Channel from a VLAN
  - Assigning an IP Address to a Port Channel
  - Deleting or Disabling a Port Channel
  - Load Balancing Through Port Channels
  - Changing the Hash Algorithm
- Bulk Configuration
  - Interface Range
  - Bulk Configuration Examples
- Defining Interface Range Macros
  - Define the Interface Range
  - Choosing an Interface-Range Macro
- Monitoring and Maintaining Interfaces
  - Maintenance Using TDR
- Displaying Traffic Statistics on HiGig Ports
- Link Bundle Monitoring
- Monitoring HiGig Link Bundles
  - Enabling HiGig Link-Bundle Monitoring
- Non Dell-Qualified Transceivers
- Splitting QSFP Ports to SFP+ Ports
  - Converting a QSFP or QSFP+ Port to an SFP or SFP+ Port
- Configuring wavelength for 10–Gigabit SFP+ optics
- Link Dampening
  - Enabling Link Dampening
- Using Ethernet Pause Frames for Flow Control
  - Threshold Settings
  - Enabling Pause Frames
- Configure the MTU Size on an Interface
- Auto-Negotiation on Ethernet Interfaces
  - Set Auto-Negotiation Options
- Provisioning Combo Ports
- View Advanced Interface Information
  - Configuring the Interface Sampling Size
- Configuring the Traffic Sampling Size Globally
- Dynamic Counters
  - Clearing Interface Counters
Internet Protocol Security (IPSec)
- Configuring IPSec
IPv4 Routing
- IP Addresses
- Configuration Tasks for IP Addresses
- Assigning IP Addresses to an Interface
- Configuring Static Routes
- Configure Static Routes for the Management Interface
- Enabling Directed Broadcast
- Resolution of Host Names
- Enabling Dynamic Resolution of Host Names
- Specifying the Local System Domain and a List of Domains
- Configuring DNS with Traceroute
- ARP
- ICMP
  - Configuration Tasks for ICMP
  - Enabling ICMP Unreachable Messages
- ICMP Redirects
IPv6 Routing
- Protocol Overview
- IPv6 Implementation on the Dell Networking OS
- Configuring the LPM Table for IPv6 Extended Prefixes
- ICMPv6
- Path MTU Discovery
- IPv6 Neighbor Discovery
  - IPv6 Neighbor Discovery of MTU Packets
  - Configuring the IPv6 Recursive DNS Server
    - Debugging IPv6 RDNSS Information Sent to the Host
    - Displaying IPv6 RDNSS Information
- Secure Shell (SSH) Over an IPv6 Transport
- Configuration Tasks for IPv6
- Configuring IPv6 RA Guard
  - Configuring IPv6 RA Guard on an Interface
  - Monitoring IPv6 RA Guard
Intermediate System to Intermediate System
- IS-IS Protocol Overview
- IS-IS Addressing
- Multi-Topology IS-IS
- Graceful Restart
  - Timers
- Implementation Information
- Configuration Information
- IS-IS Metric Styles
- Configure Metric Values
- Sample Configurations
iSCSI Optimization
- iSCSI Optimization Overview
- Default iSCSI Optimization Values
- iSCSI Optimization Prerequisites
- Configuring iSCSI Optimization
- Displaying iSCSI Optimization Information
- Enable and Disable iSCSI Optimization
- Synchronizing iSCSI Sessions Learned on VLT-Lags with VLT-Peer
- Monitoring iSCSI Traffic Flows
- Information Monitored in iSCSI Traffic Flows
- Detection and Auto-Configuration for Dell EqualLogic Arrays
- Configuring Detection and Ports for Dell Compellent Arrays
- Application of Quality of Service to iSCSI Traffic Flows
Link Aggregation Control Protocol (LACP)
- Introduction to Dynamic LAGs and LACP
- LACP Configuration Tasks
- Shared LAG State Tracking
  - Configuring Shared LAG State Tracking
  - Important Points about Shared LAG State Tracking
- LACP Basic Configuration Example
  - Configure a LAG on ALPHA
Layer 2
- Manage the MAC Address Table
- MAC Learning Limit
- NIC Teaming
- Configure Redundant Pairs
- Far-End Failure Detection
Link Layer Discovery Protocol (LLDP)
- 802.1AB (LLDP) Overview
  - Protocol Data Units
- Optional TLVs
  - Management TLVs
    - IEEE Organizationally Specific TLVs
- TIA-1057 (LLDP-MED) Overview
  - TIA Organizationally Specific TLVs
- Configure LLDP
- CONFIGURATION versus INTERFACE Configurations
- Enabling LLDP
  - Disabling and Undoing LLDP
- Enabling LLDP on Management Ports
  - Disabling and Undoing LLDP on Management Ports
- Advertising TLVs
- Storing and Viewing Unrecognized LLDP TLVs
- Viewing the LLDP Configuration
- Viewing Information Advertised by Adjacent LLDP Neighbors
  - Examples of Viewing Information Advertised by Neighbors
- Configuring LLDPDU Intervals
- Configuring LLDP Notification Interval
- Configuring Transmit and Receive Mode
- Configuring a Time to Live
- Debugging LLDP
- Relevant Management Objects
Multicast Source Discovery Protocol (MSDP)
- Anycast RP
- Implementation Information
- Configure Multicast Source Discovery Protocol
  - Related Configuration Tasks
- Enable MSDP
- Manage the Source-Active Cache
- Accept Source-Active Messages that Fail the RFP Check
- Specifying Source-Active Messages
- Limiting the Source-Active Messages from a Peer
- Preventing MSDP from Caching a Local Source
- Preventing MSDP from Caching a Remote Source
- Preventing MSDP from Advertising a Local Source
- Logging Changes in Peership States
- Terminating a Peership
- Clearing Peer Statistics
- Debugging MSDP
- MSDP with Anycast RP
- Configuring Anycast RP
  - Reducing Source-Active Message Flooding
  - Specifying the RP Address Used in SA Messages
- MSDP Sample Configurations
Multiple Spanning Tree Protocol (MSTP)
- Spanning Tree Variations
  - Implementation Information
- Configure Multiple Spanning Tree Protocol
  - Related Configuration Tasks
- Enable Multiple Spanning Tree Globally
- Adding and Removing Interfaces
- Creating Multiple Spanning Tree Instances
- Influencing MSTP Root Selection
- Interoperate with Non-Dell Bridges
- Changing the Region Name or Revision
- Modifying Global Parameters
- Modifying the Interface Parameters
- Configuring an EdgePort
- Flush MAC Addresses after a Topology Change
- MSTP Sample Configurations
- Debugging and Verifying MSTP Configurations
Multicast Features
- Enabling IP Multicast
- Implementation Information
- First Packet Forwarding for Lossless Multicast
- Multicast Policies
  - IPv4 Multicast Policies
- Understanding Multicast Traceroute (mtrace)
- Printing Multicast Traceroute (mtrace) Paths
- Supported Error Codes
- mtrace Scenarios
Multicast Listener Discovery Protocol
- MLD timers
  - Reducing Host Response Burstiness
- Configuring MLD Version
- Clearing MLD groups
- Debugging MLD
- Explicit Tracking
- Reducing Leave Latency
- Displaying MLD groups table
- Displaying MLD Interfaces
- MLD Snooping
Object Tracking
- Object Tracking Overview
- Object Tracking Configuration
- Displaying Tracked Objects
Open Shortest Path First (OSPFv2 and OSPFv3)
- Protocol Overview
- OSPF Implementation
- Configuration Information
  - Configuration Task List for OSPFv2 (OSPF for IPv4)
- Sample Configurations for OSPFv2
- OSPFv3 NSSA
- Configuration Task List for OSPFv3 (OSPF for IPv6)
- MIB Support for OSPFv3
  - Viewing the OSPFv3 MIB
Per-VLAN Spanning Tree Plus (PVST+)
- Protocol Overview
- Implementation Information
- Configure Per-VLAN Spanning Tree Plus
- Enabling PVST+
- Disabling PVST+
- Influencing PVST+ Root Selection
- Modifying Global PVST+ Parameters
- Modifying Interface PVST+ Parameters
- Configuring an EdgePort
- PVST+ in Multi-Vendor Networks
- Enabling PVST+ Extend System ID
- PVST+ Sample Configurations
PIM Sparse-Mode (PIM-SM)
- Implementation Information
- Protocol Overview
- Configuring PIM-SSM
  - Related Configuration Tasks
- Enable PIM-SM
- Configuring S,G Expiry Timers
- Configuring a Static Rendezvous Point
  - Overriding Bootstrap Router Updates
- Configuring a Designated Router
- Electing an RP using the BSR Mechanism
- Creating Multicast Boundaries and Domains
- Enabling PIM-SM Graceful Restart
PIM Source-Specific Mode (PIM-SSM)
- Implementation Information
- Configure PIM-SMM
- Enabling PIM-SSM
- Use PIM-SSM with IGMP Version 2 Hosts
- Electing an RP using the BSR Mechanism
  - Enabling RP to Server Specific Multicast Groups
Policy-based Routing (PBR)
- Overview
- Implementing Policy-based Routing with Dell Networking OS
- Configuration Task List for Policy-based Routing
  - Apply a Redirect-list to an Interface using a Redirect-group
    - Show Redirect List Configuration
- Sample Configuration
Port Extenders (PEs)
- IEEE 802.1BR
- 802.1BR Terms and Definitions
- Enabling the Port Extender Feature
- Provisioning a Port Extender
  - Port Extender Limit
- PE Selection Logic
- Managing a Port Extender
- Preventing Loops on Port Extender Ports
- Upgrading a Port Extender
  - Auto-Upgrade of the OS Image
  - Manually Upgrading the OS Image
- De-provisioning a Port Extender
- Scheduling PE reboots
- Troubleshooting a Port Extender
- Supported Features
- Dual Homing
Port Extender (PE) Stacking
- Stack Management Roles
- Stack Master Election
- Important Points to Remember
- PE Stack Configuration
- Configuring the Unused PE Uplink Ports as Front-End Ports
  - Configuring Uplink Ports as Access Ports
  - Reverting the Access Port to Uplink Port
- Locating the Port Extender
- Troubleshooting a PE Stack
Port Monitoring
- Port Monitoring
- Remote Port Mirroring
- Encapsulated Remote-Port Monitoring
- Port Monitoring on VLT
Power over Ethernet (PoE)
- Configuring PoE or PoE+
  - Enabling PoE or PoE+ on a Port
  - Configuration Tasks for PoE or PoE+
- Manage Ports using Power Priority and the Power Budget
- Setting the Threshold Limit for the PoE Power Budget
- Advertising the Extended Power through MDI
- Advertising Extended Power Though dot3–TLVs
- Detecting Legacy Devices and Allocating Power
- Deploying Voice Over IP (VoIP)
- Managing PoE on the Port Extender
Private VLANs (PVLAN)
- Private VLAN Concepts
- Using the Private VLAN Commands
- Configuration Task List
- Private VLAN Configuration Example
- Inspecting the Private VLAN Configuration
Quality of Service (QoS)
- Implementation Information
- Port-Based QoS Configurations
- Policy-Based QoS Configurations
- DSCP Color Maps
- Enabling QoS Rate Adjustment
- Enabling Strict-Priority Queueing
- Weighted Random Early Detection
- Explicit Congestion Notification
- Using A Configurable Weight for WRED and ECN
- Pre-Calculating Available QoS CAM Space
- SNMP Support for Buffer Statistics Tracking
Routing Information Protocol (RIP)
- Protocol Overview
  - RIPv1
  - RIPv2
- Implementation Information
- Configuration Information
  - Configuration Task List
  - RIP Configuration Example
Remote Monitoring (RMON)
- Implementation Information
- Fault Recovery
Rapid Spanning Tree Protocol (RSTP)
- Protocol Overview
- Configuring Rapid Spanning Tree
- Important Points to Remember
  - RSTP and VLT
- Configuring Interfaces for Layer 2 Mode
- Enabling Rapid Spanning Tree Protocol Globally
- Adding and Removing Interfaces
- Modifying Global Parameters
  - Enabling SNMP Traps for Root Elections and Topology Changes
- Modifying Interface Parameters
- Influencing RSTP Root Selection
- Configuring an EdgePort
- Configuring Fast Hellos for Link State Detection
Security
- Role-Based Access Control
- AAA Accounting
  - Configuration Task List for AAA Accounting
- AAA Authentication
  - Configuration Task List for AAA Authentication
- AAA Authorization
  - Privilege Levels Overview
  - Configuration Task List for Privilege Levels
- RADIUS
- TACACS+
- Protection from TCP Tiny and Overlapping Fragment Attacks
- Enabling SCP and SSH
- Telnet
- VTY Line and Access-Class Configuration
- Two Factor Authentication (2FA)
- Configuring the System to Drop Certain ICMP Reply Messages
- Dell EMC Networking OS Security Hardening
Service Provider Bridging
- VLAN Stacking
- VLAN Stacking Packet Drop Precedence
- Dynamic Mode CoS for VLAN Stacking
  - Mapping C-Tag to S-Tag dot1p Values
- Layer 2 Protocol Tunneling
- Provider Backbone Bridging
sFlow
- Overview
- Implementation Information
- Enabling and Disabling sFlow
- Enabling and Disabling sFlow on an Interface
- sFlow Show Commands
- Configuring Specify Collectors
- Changing the Polling Intervals
- Back-Off Mechanism
- sFlow on LAG ports
- Enabling Extended sFlow
  - Important Points to Remember
Simple Network Management Protocol (SNMP)
- Protocol Overview
- Implementation Information
- Configuration Task List for SNMP
- Important Points to Remember
- Set up SNMP
  - Creating a Community
  - Setting Up User-Based Security (SNMPv3)
- Reading Managed Object Values
- Writing Managed Object Values
- Configuring Contact and Location Information using SNMP
- Configuring the CPU Utilization for SNMP Traps
- Configuring Threshold Memory Utilization for SNMP Traps
- Subscribing to Managed Object Value Updates using SNMP
- Enabling a Subset of SNMP Traps
- Enabling an SNMP Agent to Notify Syslog Server Failure
- Copy Configuration Files Using SNMP
  - Copying a Configuration File
  - Copying Configuration Files via SNMP
  - Copying the Startup-Config Files to the Running-Config
  - Copying the Startup-Config Files to the Server via FTP
  - Copying the Startup-Config Files to the Server via TFTP
  - Copy a Binary File to the Startup-Configuration
  - Additional MIB Objects to View Copy Statistics
  - Obtaining a Value for MIB Objects
- MIB Support to Display Reason for Last System Reboot
  - Viewing the Reason for Last System Reboot Using SNMP
- MIB Support to Display the Available Partitions on Flash
  - Viewing the Available Partitions on Flash
- MIB Support to Display Egress Queue Statistics
- MIB Support to Display Egress Queue Statistics
  - Viewing the ECMP Group Count Information
- MIB Support for entAliasMappingTable
  - Viewing the entAliasMappingTable MIB
- SNMP Support for WRED Green/Yellow/Red Drop Counters
- MIB Support for LAG
  - Viewing the LAG MIB
- MIB Support to Display Unrecognized LLDP TLVs
  - MIB Support to Display Reserved Unrecognized LLDP TLVs
    - Viewing the Details of Reserved Unrecognized LLDP TLVs
  - MIB Support to Display Organizational Specific Unrecognized LLDP TLVs
    - Viewing the Details of Organizational Specific Unrecognized LLDP TLVs
- MIB support for Port Security
  - Global MIB objects for port security
  - MIB support for interface level port security
    - Enabling and viewing SNMP for port security
  - MIB objects for configuring MAC addresses
    - Enabling and viewing SNMP for static MAC addresses
  - MIB objects for configuring MAC addresses
    - Viewing the Details of MAC addresses
- Manage VLANs using SNMP
  - Creating a VLAN
  - Assigning a VLAN Alias
  - Displaying the Ports in a VLAN
  - Add Tagged and Untagged Ports to a VLAN
- Managing Overload on Startup
- Enabling and Disabling a Port using SNMP
- Fetch Dynamic MAC Entries using SNMP
- Deriving Interface Indices
- Monitoring BGP sessions via SNMP
- Monitor Port-Channels
- Troubleshooting SNMP Operation
- Transceiver Monitoring
- Configuring SNMP context name
Storm Control
- Configure Storm Control
  - Configuring Storm Control from INTERFACE Mode
  - Configuring Storm Control from CONFIGURATION Mode
Spanning Tree Protocol (STP)
- Protocol Overview
- Configure Spanning Tree
- Important Points to Remember
- Configuring Interfaces for Layer 2 Mode
- Enabling Spanning Tree Protocol Globally
- Adding an Interface to the Spanning Tree Group
- Modifying Global Parameters
- Modifying Interface STP Parameters
- Enabling PortFast
- Preventing Network Disruptions with BPDU Guard
- Selecting STP Root
- STP Root Guard
  - Root Guard Scenario
  - Configuring Root Guard
- Enabling SNMP Traps for Root Elections and Topology Changes
- STP Loop Guard
  - Configuring Loop Guard
- Displaying STP Guard Configuration
SupportAssist
- Configuring SupportAssist Using a Configuration Wizard
- Configuring SupportAssist Manually
- Configuring SupportAssist Activity
- Configuring SupportAssist Company
- Configuring SupportAssist Person
- Configuring SupportAssist Server
- Viewing SupportAssist Configuration
System Time and Date
- Network Time Protocol
- Time and Date
Tunneling
- Configuring a Tunnel
- Configuring Tunnel Keepalive Settings
- Configuring a Tunnel Interface
- Configuring Tunnel allow-remote Decapsulation
- Configuring Tunnel source anylocal Decapsulation
- Multipoint Receive-Only Tunnels
  - Guidelines for Configuring Multipoint Receive-Only Tunnels
Upgrade Procedures
Uplink Failure Detection (UFD)
- Feature Description
- How Uplink Failure Detection Works
- UFD and NIC Teaming
- Important Points to Remember
- Configuring Uplink Failure Detection
- Clearing a UFD-Disabled Interface
- Displaying Uplink Failure Detection
- Sample Configuration: Uplink Failure Detection
Virtual LANs (VLANs)
- Default VLAN
- Port-Based VLANs
- VLANs and Port Tagging
- Configuration Task List
VLT Proxy Gateway
- Proxy Gateway in VLT Domains
- Configuring a Static VLT Proxy Gateway
- Configuring an LLDP VLT Proxy Gateway
Virtual Routing and Forwarding (VRF)
- VRF Overview
- VRF Configuration Notes
  - DHCP
- VRF Configuration
- Route Leaking VRFs
- Sample VRF Configuration
- Dynamic Route Leaking
  - Configuring Route Leaking with Filtering
  - Configuring Route Leaking without Filtering Criteria
Virtual Link Trunking (VLT)
- Overview
  - VLT on Core Switches
- VLT Terminology
- Important Points to Remember
- Configuration Notes
- Primary and Secondary VLT Peers
- RSTP and VLT
- VLT Bandwidth Monitoring
- VLT and High Availability
- VLT and IGMP Snooping
- VLT and Stacking
- VLT IPv6
- VLT Port Delayed Restoration
- PIM-Sparse Mode Support on VLT
- VLT Routing
  - VLT Unicast Routing
    - Configuring VLT Unicast
  - VLT Multicast Routing
    - Configuring VLT Multicast
- Non-VLT ARP Sync
- RSTP Configuration
  - Preventing Forwarding Loops in a VLT Domain
  - Sample RSTP Configuration
- Configuring VLT
  - Configuring a VLT Interconnect
  - Enabling VLT and Creating a VLT Domain
  - Configuring a VLT Backup Link
  - Configuring a VLT Port Delay Period
  - Reconfiguring the Default VLT Settings (Optional)
  - Connecting a VLT Domain to an Attached Access Device (Switch or Server)
  - Configuring a VLT VLAN Peer-Down (Optional)
  - Configuring Enhanced VLT (eVLT) (Optional)
  - VLT Sample Configuration
- eVLT Configuration Example
- PIM-Sparse Mode Configuration Example
- Verifying a VLT Configuration
- Additional VLT Sample Configurations
- Troubleshooting VLT
- Reconfiguring Stacked Switches as VLT
- Specifying VLT Nodes in a PVLAN
- Configuring a VLT VLAN or LAG in a PVLAN
  - Creating a VLT LAG or a VLT VLAN
  - Associating the VLT LAG or VLT VLAN in a PVLAN
- Proxy ARP Capability on VLT Peer Nodes
- VLT Nodes as Rendezvous Points for Multicast Resiliency
- Configuring VLAN-Stack over VLT
Virtual Router Redundancy Protocol (VRRP)
- VRRP Overview
- VRRP Benefits
- VRRP Implementation
- VRRP Configuration
  - Configuration Task List
- Sample Configurations
  - VRRP in a VRF Configuration
- Proxy Gateway with VRRP
Standards Compliance
- IEEE Compliance
- RFC and I-D Compliance
- MIB Location
X.509v3
- Introduction to X.509v3 certification
- X.509v3 support in Dell Networking OS
- Information about installing CA certificates
  - Installing CA certificate
- Information about Creating Certificate Signing Requests (CSR)
  - Creating Certificate Signing Requests (CSR)
- Information about installing trusted certificates
  - Installing trusted certificates
- Transport layer security (TLS)
  - Syslog over TLS
- Online certificate status protocol (OSCP)
- Verifying certificates
  - Verifying Server certificates
  - Verifying client certificates
- Event logging

To clear the number of SAV dropped packets on a particular interface, use the clear ip dhcp snooping source-

address-validation discard-counters interface interface command.

Dell>clear ip dhcp snooping source-address-validation discard-counters interface TenGigE

0/1

342 Dynamic Host Configuration Protocol (DHCP)