Connectivity Guide

ManualsBrandsDell ManualsAccess PlatformsSmartFabric OS10 Documentation

301

302

303

304

305

306

307

308

309

310

Table Of Contents

OS10 Enterprise Edition User Guide Release 10.4.3.0
Getting Started
- Supported Hardware
- Download OS10 image and license
- Installation using ONIE
  - Automatic installation
  - Manual installation
- Log into OS10
- Install OS10 license
- Zero-touch deployment
- Remote access
- CLI Basics
- Common commands
System management
- OS10 upgrade
  - Boot system partition
  - Upgrade commands
- System banners
- User session management
  - User session management commands
- Telnet server
  - Telnet commands
    - ip telnet server enable
    - ip telnet server vrf
- Simple Network Management Protocol
- System clock
  - System Clock commands
- Network Time Protocol
- Dynamic Host Configuration Protocol
Interfaces
- Ethernet interfaces
- Unified port groups
- Z9264F-ON port-group profiles
- L2 mode configuration
- L3 mode configuration
- Fibre Channel interfaces
- Management interface
- VLAN interfaces
- User-configured default VLAN
- VLAN scale profile
- Loopback interfaces
- Port-channel interfaces
  - Create port-channel
  - Add port member
  - Minimum links
  - Assign Port Channel IP Address
  - Remove or disable port-channel
  - Load balance traffic
  - Change hash algorithm
- Configure interface ranges
- Switch-port profiles
  - S4148-ON Series port profiles
  - S4148U-ON port profiles
- Configure breakout mode
- Breakout auto-configuration
- Forward error correction
- Energy-efficient Ethernet
  - Enable energy-efficient Ethernet
  - Clear EEE counters
  - View EEE status/statistics
  - EEE commands
- View interface configuration
- Digital optical monitoring
  - Enable DOM and DOM traps
- Interface commands
  - channel-group
  - default vlan-id
  - description (Interface)
  - duplex
  - enable dom
  - enable dom traps
  - feature auto-breakout
  - fec
  - interface breakout
  - interface ethernet
  - interface loopback
  - interface mgmt
  - interface null
  - interface port-channel
  - interface range
  - interface vlan
  - link-bundle-utilization
  - mode
  - mode l3
  - mtu
  - port mode Eth
  - port-group
  - profile
  - scale-profile vlan
  - show interface
  - show inventory media
  - show link-bundle-utilization
  - show port-channel summary
  - show port-group
  - show switch-port-profile
  - show system
  - show vlan
  - shutdown
  - speed (Fibre Channel)
  - speed (Management)
  - switch-port-profile
  - switchport access vlan
  - switchport mode
  - switchport trunk allowed vlan
Fibre Channel
- Terminology
- Virtual fabric
- Fibre Channel zoning
- F_Port on Ethernet
- Pinning FCoE traffic to a specific port of a port-channel
- Multi-hop FIP-snooping bridge
- Configuration guidelines
- F_Port commands
- NPG commands
- F_Port and NPG commands
- FIP-snooping commands
- FCoE commands
Layer 2
- 802.1X
- Far-end failure detection
- Link Aggregation Control Protocol
- Link Layer Discovery Protocol
- Media Access Control
- Multiple Spanning-Tree
- Rapid per-VLAN spanning-tree plus
- Rapid Spanning-Tree Protocol
- Virtual LANs
- Port monitoring
Layer 3
- Virtual routing and forwarding
- Bidirectional Forwarding Detection
- Border Gateway Protocol
- Equal cost multi-path
- IPv4 routing
- IPv6 routing
- Open shortest path first
- Object tracking manager
- Policy-based routing
- Virtual Router Redundancy Protocol
Multicast
- Important notes
- Configure multicast routing
- Unknown multicast flood control
  - Enable multicast flood control
- Multicast Commands
  - multicast snooping flood-restrict
- Internet Group Management Protocol
- Multicast Listener Discovery Protocol
  - MLD snooping
  - MLD snooping commands
- Protocol Independent Multicast
VXLAN
- VXLAN concepts
- VXLAN as NVO solution
- Configure VXLAN
- L3 VXLAN route scaling
- DHCP relay on VTEPs
- View VXLAN configuration
- VXLAN MAC addresses
- VXLAN commands
- VXLAN MAC commands
- Example: VXLAN with static VTEP
- BGP EVPN for VXLAN
- Controller-provisioned VXLAN
UFT modes
- Configure UFT modes
  - IPv6 extended prefix routes
- UFT commands
Security
- User re-authentication
- Password strength
- Role-based access control
- Assign user role
- Bootloader Protection
- Linuxadmin User Configuration
- RADIUS authentication
- RADIUS over TLS authentication
- TACACS+ authentication
- Unknown user role
- SSH server
- Virtual terminal line
  - Control access to VTY
- Enable AAA accounting
- Enable user lockout
- Limit concurrent login sessions
- Enable login statistics
- Privilege levels overview
  - Configure privilege levels for users
  - Configure enable password
- Audit log
- Security commands
  - aaa accounting
  - aaa authentication login
  - aaa re-authenticate enable
  - boot protect disable username
  - boot protect enable username password
  - clear logging audit
  - crypto ssh-key generate
  - disable
  - enable
  - enable password
  - ip access-class
  - ip radius source-interface
  - ip tacacs source-interface
  - ipv6 access-class
  - ip ssh server challenge-response-authentication
  - ip ssh server cipher
  - ip ssh server enable
  - ip ssh server hostbased-authentication
  - ip ssh server kex
  - ip ssh server mac
  - ip ssh server password-authentication
  - ip ssh server port
  - ip ssh server pubkey-authentication
  - ip ssh server vrf
  - line vty
  - logging audit enable
  - login concurrent-session limit
  - login-statistics enable
  - password-attributes
  - password-attributes max-retry lockout-period
  - privilege
  - radius-server host
  - radius-server host tls
  - radius-server retransmit
  - radius-server timeout
  - radius-server vrf
  - show boot protect
  - show crypto ssh-key
  - show ip ssh
  - show logging audit
  - show login-statistics
  - show privilege
  - show running-configuration privilege
  - show users
  - system-user linuxadmin disable
  - system-user linuxadmin password
  - tacacs-server host
  - tacacs-server timeout
  - tacacs-server vrf
  - username password role
  - username sshkey
  - username sshkey filename
  - userrole inherit
- X.509v3 certificates
  - X.509v3 concepts
  - Public key infrastructure
  - Manage CA certificates
  - Request and install host certificates
  - Self-signed certificates
  - Security profiles
  - Cluster security
  - X.509v3 commands
  - Example: Configure RADIUS over TLS with X.509v3 certificates
OpenFlow
- OpenFlow logical switch instance
- OpenFlow controller
- OpenFlow version 1.3
- OpenFlow use cases
- Configure OpenFlow
  - Establish TLS connection
- OpenFlow commands
- OpenFlow-only mode commands
Access Control Lists
- IP ACLs
- MAC ACLs
- Control-plane ACLs
  - Control-plane ACL qualifiers
- IP fragment handling
- L3 ACL rules
- Assign sequence number to filter
- Delete ACL rule
- L2 and L3 ACLs
- Assign and apply ACL filters
- Ingress ACL filters
- Egress ACL filters
- Clear access-list counters
- IP prefix-lists
- Route-maps
- Match routes
- Set conditions
- Continue clause
- ACL flow-based monitoring
- Enable flow-based monitoring
- View ACL table utilization report
  - Known behavior
- ACL logging
  - Important notes
- ACL commands
  - clear ip access-list counters
  - clear ipv6 access-list counters
  - clear mac access-list counters
  - deny
  - deny (IPv6)
  - deny (MAC)
  - deny icmp
  - deny icmp (IPv6)
  - deny ip
  - deny ipv6
  - deny tcp
  - deny tcp (IPv6)
  - deny udp
  - deny udp (IPv6)
  - description
  - ip access-group
  - ip access-list
  - ip as-path access-list
  - ip community-list standard deny
  - ip community–list standard permit
  - ip extcommunity-list standard deny
  - ip extcommunity-list standard permit
  - ip prefix-list description
  - ip prefix-list deny
  - ip prefix-list permit
  - ip prefix-list seq deny
  - ip prefix-list seq permit
  - ipv6 access-group
  - ipv6 access-list
  - ipv6 prefix-list deny
  - ipv6 prefix-list description
  - ipv6 prefix-list permit
  - ipv6 prefix-list seq deny
  - ipv6 prefix-list seq permit
  - mac access-group
  - mac access-list
  - permit
  - permit (IPv6)
  - permit (MAC)
  - permit icmp
  - permit icmp (IPv6)
  - permit ip
  - permit ipv6
  - permit tcp
  - permit tcp (IPv6)
  - permit udp
  - permit udp (IPv6)
  - remark
  - seq deny
  - seq deny (IPv6)
  - seq deny (MAC)
  - seq deny icmp
  - seq deny icmp (IPv6)
  - seq deny ip
  - seq deny ipv6
  - seq deny tcp
  - seq deny tcp (IPv6)
  - seq deny udp
  - seq deny udp (IPv6)
  - seq permit
  - seq permit (IPv6)
  - seq permit (MAC)
  - seq permit icmp
  - seq permit icmp (IPv6)
  - seq permit ip
  - seq permit ipv6
  - seq permit tcp
  - seq permit tcp (IPv6)
  - seq permit udp
  - seq permit udp (IPv6)
  - show access-group
  - show access-lists
  - show acl-table-usage detail
  - show ip as-path-access-list
  - show ip community-list
  - show ip extcommunity-list
  - show ip prefix-list
  - show logging access-list
- Route-map commands
  - continue
  - match as-path
  - match community
  - match extcommunity
  - match interface
  - match ip address
  - match ip next-hop
  - match ipv6 address
  - match ipv6 next-hop
  - match metric
  - match origin
  - match route-type
  - match tag
  - route-map
  - set comm-list add
  - set comm-list delete
  - set community
  - set extcomm-list add
  - set extcomm-list delete
  - set extcommunity
  - set local-preference
  - set metric
  - set metric-type
  - set next-hop
  - set origin
  - set tag
  - set weight
  - show route-map
Quality of service
- Configure quality of service
- Ingress traffic classification
  - Data traffic classification
  - Control-plane policing
- Egress traffic classification
- Policing traffic
- Mark Traffic
- Color traffic
- Modify packet fields
- Shaping traffic
- Bandwidth allocation
- Strict priority queuing
- Rate adjustment
- Buffer management
- Congestion avoidance
- Storm control
- RoCE for faster access and lossless connectivity
- QoS commands
Virtual Link Trunking
- Terminology
- VLT domain
- VLT interconnect
- Graceful LACP with VLT
- Configure VLT
- VRRP Optimized Forwarding
- Migrate VMs across data centers
- View VLT information
- VLT commands
Uplink Failure Detection
- Configure uplink failure detection
- Uplink failure detection on VLT
  - Sample configurations of UFD on VLT
- UFD commands
Converged data center services
- Priority flow control
- Enhanced transmission selection
- Data center bridging eXchange
- Internet small computer system interface
- Converged network DCB example
sFlow
- Enable sFlow
- Max-header size configuration
- Collector configuration
- Polling-interval configuration
- Sample-rate configuration
- Source interface configuration
- View sFlow information
- sFlow commands
Telemetry
- Telemetry terminology
- YANG-modeled telemetry data
- Configure telemetry
- View telemetry configuration
- Telemetry commands
- Example: Configure streaming telemetry
RESTCONF API
- Configure RESTCONF API
- CLI commands for RESTCONF API
- RESTCONF API tasks
  - View XML structure of CLI commands
  - RESTCONF API Examples
    - System
    - Interface
Troubleshoot OS10
- Diagnostic tools
- Password recovery
- Restore factory defaults
- SupportAssist
- Support bundle
  - Event notifications
  - generate support-bundle
- System monitoring
- Log into OS10 device
- Frequently asked questions
Support resources

1. Enter an instance number in CONFIGURATION mode.

spanning tree mst configuration

2. Enter the MST instance number in MULTIPLE-SPANNING-TREE mode, from 0 to 63.

instance instance-number

3. Enter the VLAN and IDs to participate in the MST instance in MULTIPLE-SPANNING-TREE mode, from 1 to 4096.

instance vlan-id

Create MST instances

OS10(config)# spanning-tree mst configuration

OS10(conf-mst)# name force10

OS10(conf-mst)# revision 100

OS10(conf-mst)# instance 1 vlan 2-10

OS10(conf-mst)# instance 2 vlan 11-20

OS10(conf-mst)# instance 3 vlan 21-30

View VLAN instance mapping

OS10# show spanning-tree mst configuration

Region Name: force10

Revision: 100

MSTI VID

0 1,31-4093

1 2-10

2 11-20

3 21-30

View port forwarding/discarding state

OS10# show spanning-tree msti 0 brief

Spanning tree enabled protocol msti with force-version mst

MSTI 0 VLANs mapped 1,31-4093

Executing IEEE compatible Spanning Tree Protocol

Root ID Priority 32768, Address 3417.4455.667f

Root Bridge hello time 2, max age 20, forward delay 15, max hops 20

Bridge ID Priority 32768, Address 90b1.1cf4.a523

Configured hello time 2, max age 20, forward delay 15, max hops 20

CIST regional root ID Priority 32768, Address 90b1.1cf4.a523

CIST external path cost 500

Interface Designated

Name PortID Prio Cost Sts Cost Bridge ID PortID

-----------------------------------------------------------------------------------

ethernet1/1/1 128.260 128 200000000 BLK 0 32768 90b1.1cf4.a523 128.260

ethernet1/1/2 128.264 128 200000000 BLK 0 32768 90b1.1cf4.a523 128.264

ethernet1/1/3 128.268 128 200000000 BLK 0 32768 90b1.1cf4.a523 128.268

ethernet1/1/4 128.272 128 200000000 BLK 0 32768 90b1.1cf4.a523 128.272

ethernet1/1/5 128.276 128 500 FWD 0 32768 3417.4455.667f 128.146

ethernet1/1/6 128.280 128 500 BLK 0 32768 3417.4455.667f 128.150

ethernet1/1/7 128.284 128 200000000 BLK 0 32768 90b1.1cf4.a523 128.284

ethernet1/1/8 128.288 128 200000000 BLK 0 32768 90b1.1cf4.a523 128.288

ethernet1/1/9 128.292 128 200000000 BLK 0 32768 90b1.1cf4.a523 128.292

ethernet1/1/10 128.296 128 200000000 BLK 0 32768 90b1.1cf4.a523 128.296

ethernet1/1/11 128.300 128 200000000 BLK 0 32768 90b1.1cf4.a523 128.300

ethernet1/1/12 128.304 128 200000000 BLK 0 32768 90b1.1cf4.a523 128.304

ethernet1/1/13 128.308 128 200000000 BLK 0 32768 90b1.1cf4.a523 128.308

ethernet1/1/14 128.312 128 200000000 BLK 0 32768 90b1.1cf4.a523 128.312

ethernet1/1/15 128.316 128 200000000 BLK 0 32768 90b1.1cf4.a523 128.316

ethernet1/1/16 128.320 128 200000000 BLK 0 32768 90b1.1cf4.a523 128.320

ethernet1/1/17 128.324 128 200000000 BLK 0 32768 90b1.1cf4.a523 128.324

ethernet1/1/18 128.328 128 200000000 BLK 0 32768 90b1.1cf4.a523 128.328

ethernet1/1/19 128.332 128 200000000 BLK 0 32768 90b1.1cf4.a523 128.332

ethernet1/1/20 128.336 128 200000000 BLK 0 32768 90b1.1cf4.a523 128.336

ethernet1/1/21 128.340 128 200000000 BLK 0 32768 90b1.1cf4.a523 128.340

ethernet1/1/22 128.344 128 200000000 BLK 0 32768 90b1.1cf4.a523 128.344

ethernet1/1/23 128.348 128 200000000 BLK 0 32768 90b1.1cf4.a523 128.348

ethernet1/1/24 128.352 128 200000000 BLK 0 32768 90b1.1cf4.a523 128.352

306

Layer 2