Users Guide

ManualsBrandsDell ManualsAccess PlatformsSmartFabric OS10 Documentation

1331

Table Of Contents

Dell EMC SmartFabric OS10 User Guide Release 10.5.2
Contents
About this guide
- Conventions
- Related Documents
- Documentation Feedback
Change history
Getting Started with Dell EMC SmartFabric OS10
- Switch with factory-installed OS10
- Baremetal switch with only ONIE installed
- Downgrade to Release 10.5.0.0 or earlier releases
  - Roll back from 10.5.2.0 or later release to 10.5.0.x or earlier release
- Downgrade to Release 10.5.1.0 or later releases
  - Rollback from 10.5.2.0 or later release to 10.5.1.0 or later release
- Switch deployment options
- Remote access
CLI Basics
- CONFIGURATION mode
- Check device status
  - Related Videos
- Command help
- Candidate configuration
- Copy running configuration
- Restore startup configuration
- Reload system image
- Filter show commands
- Common OS10 commands
Advanced CLI tasks
- Command alias
- Batch mode
  - batch
- Linux shell commands
- Using OS9 commands
  - feature config-os9-style
Dell EMC SmartFabric OS10 zero-touch deployment
- ZTD DHCP server configuration
- ZTD provisioning script
- ZTD CLI batch file
- Post-ZTD script
- ZTD commands
Dell EMC SmartFabric OS10 provisioning
- Using Ansible
- Example: Configure an OS10 switch using Ansible
SmartFabric Director
- Enable SmartFabric Director mode on a switch
- Support for SmartFabric Director
- gRPC Network Management Interface agent
- Lifecycle Management using SmartFabric Director
- SmartFabric Director commands
System management
- System banners
- User session management
  - User session management commands
- Telnet server
  - Telnet commands
    - ip telnet server enable
    - ip telnet server vrf
- Simple Network Management Protocol
- System clock
  - Time zones and UTC offset reference
  - System Clock commands
- Network Time Protocol
- Precision Time Protocol
- Synchronous Ethernet (SyncE)
- Dynamic Host Configuration Protocol
- Containers
- Low Latency Modes
  - Low Latency Modes CLI commands
    - show switching-mode
    - switching-mode cut-through
Interfaces
- Ethernet interfaces
- Unified port groups
- Z9264F-ON port-group profiles
- Port-groups on S5200F-ON switches
- L2 mode configuration
- L3 mode configuration
- Fibre Channel interfaces
  - Configuring wavelength
- Management interface
  - Management interface
- VLAN interfaces
- User-configured default VLAN
- VLAN scale profile
- Loopback interfaces
- Port-channel interfaces
  - Create port-channel
  - Add port member
  - Minimum links
  - Assign Port Channel IP Address
  - Remove or disable port-channel
  - Load balance traffic
  - Change hash algorithm
- Configure interface ranges
- Switch-port profiles
  - S4148-ON Series port profiles
  - S4148U-ON port profiles
- Configure negotiation modes on interfaces
- Configure breakout mode
- Breakout auto-configuration
- Reset default configuration
- Forward error correction
- Energy-efficient Ethernet
  - Enable energy-efficient Ethernet
  - Clear EEE counters
  - View EEE status/statistics
  - EEE commands
- View interface configuration
- Viewing journal logs
- High-power optical modules
  - High-power optical module commands
    - allow high-wattage-optics
    - show inventory media wattage
- Digital optical monitoring
  - Enable DOM and DOM traps
- Default MTU Configuration
- Configure polling interval for Ethernet interface counters
- Interface commands
  - channel-group
  - default interface
  - default vlan-id
  - description (Interface)
  - duplex
  - enable dom
  - enable dom traps
  - feature auto-breakout
  - fec
  - interface breakout
  - interface ethernet
  - interface loopback
  - interface mgmt
  - interface null
  - interface port-channel
  - interface range
  - interface vlan
  - link-bundle-utilization
  - link-bundle-monitor
  - mode
  - mode l3
  - mtu
  - negotiation
  - port mode Eth
  - port-group
  - profile
  - scale-profile vlan
  - show interface
  - show interface description
  - show interface phy-eth
  - show interface switchport
  - show inventory media
  - show inventory media details
  - show link-bundle-utilization
  - show port-channel summary
  - show port-group
  - show switch-port-profile
  - show system
  - show vlan
  - shutdown
  - speed (Fibre Channel)
  - speed (Management)
  - stats-monitor
  - switch-port-profile
  - switchport access vlan
  - switchport mode
  - switchport trunk allowed vlan
  - wavelength
  - default mtu
  - show default mtu
Fibre Channel
- Fibre Channel over Ethernet
  - Configure FIP snooping
- Terminology
- Virtual fabric
- Fibre Channel zoning
- F_Port on Ethernet
- Pinning FCoE traffic to a specific port of a port-channel
- Multiswitch fabric (E Port)
- Multi-hop FIP-snooping bridge
- Configuration guidelines
- NPIV Proxy Gateway cascading
- Support for untagged VLAN in FCoE
- Single FCF per vFabric
- F_Port commands
- NPG commands
- F_Port and NPG commands
- FIP-snooping commands
- FCoE commands
- Debug FC commands
  - debug fc
  - show debug fc
Layer 2
- 802.1X
- Far-end failure detection
- Link Aggregation Control Protocol
- Link Layer Discovery Protocol
- Media Access Control
- Spanning-tree protocol
- Virtual LANs
- Private VLANs
- Port monitoring
Layer 3
- Virtual routing and forwarding
- Bidirectional Forwarding Detection
- Border Gateway Protocol
- Equal cost multi-path
- IPv4 routing
- IPv6 routing
- Open shortest path first
- Object tracking manager
- Policy-based routing
- Virtual Router Redundancy Protocol
Multicast
- Important notes
- Configure multicast routing
- Multicast Commands
  - ip multicast-routing
- IPv4 multicast routing
- IPv4 multicast traffic reduction
- IPv6 multicast traffic reduction
  - Multicast Listener Discovery Protocol
    - MLD snooping
    - MLD snooping commands
VXLAN
- VXLAN concepts
- VXLAN as NVO solution
- Configure VXLAN
- L3 VXLAN route scaling
- DHCP relay on VTEPs
- View VXLAN configuration
- VXLAN MAC addresses
- VXLAN commands
- VXLAN MAC commands
- Example: VXLAN with static VTEP
- BGP EVPN for VXLAN
- Controller-provisioned VXLAN
UFT modes
- Configure UFT modes
  - IPv6 extended prefix routes
- UFT commands
Security
- Switch security
- Network security
OpenFlow
- OpenFlow logical switch instance
- OpenFlow controller
- OpenFlow version 1.3
- OpenFlow use cases
- Configure OpenFlow
  - Establish TLS connection
- OpenFlow commands
- OpenFlow-only mode commands
Access Control Lists
- IP ACLs
- MAC ACLs
- Control-plane ACLs
  - Control-plane ACL qualifiers
- IP fragment handling
- L3 ACL rules
- Assign sequence number to filter
- Delete ACL rule
- L2 and L3 ACLs
- Assign and apply ACL filters
- Ingress ACL filters
- Egress ACL filters
- VTY ACLs
- SNMP ACLs
- Clear access-list counters
- IP prefix-lists
- Route-maps
- Match routes
- Set conditions
- Continue clause
- ACL flow-based monitoring
- Enable flow-based monitoring
- View ACL table utilization report
  - Known behavior
- ACL logging
  - Important notes
  - IP ACL logging
  - Control-plane management ACL logging
- ACL commands
  - clear ip access-list counters
  - clear ipv6 access-list counters
  - clear mac access-list counters
  - deny
  - deny (IPv6)
  - deny (MAC)
  - deny icmp
  - deny icmp (IPv6)
  - deny ip
  - deny ipv6
  - deny tcp
  - deny tcp (IPv6)
  - deny udp
  - deny udp (IPv6)
  - description
  - ip access-group
  - ip access-list
  - ip as-path access-list
  - ip community-list standard deny
  - ip community–list standard permit
  - ip extcommunity-list standard deny
  - ip extcommunity-list standard permit
  - ip prefix-list description
  - ip prefix-list deny
  - ip prefix-list permit
  - ip prefix-list seq deny
  - ip prefix-list seq permit
  - ipv6 access-group
  - ipv6 access-list
  - ipv6 prefix-list deny
  - ipv6 prefix-list description
  - ipv6 prefix-list permit
  - ipv6 prefix-list seq deny
  - ipv6 prefix-list seq permit
  - logging access-list mgmt burst
  - logging access-list mgmt rate
  - mac access-group
  - mac access-list
  - permit
  - permit (IPv6)
  - permit (MAC)
  - permit icmp
  - permit icmp (IPv6)
  - permit ip
  - permit ipv6
  - permit tcp
  - permit tcp (IPv6)
  - permit udp
  - permit udp (IPv6)
  - remark
  - seq deny
  - seq deny (IPv6)
  - seq deny (MAC)
  - seq deny icmp
  - seq deny icmp (IPv6)
  - seq deny ip
  - seq deny ipv6
  - seq deny tcp
  - seq deny tcp (IPv6)
  - seq deny udp
  - seq deny udp (IPv6)
  - seq permit
  - seq permit (IPv6)
  - seq permit (MAC)
  - seq permit icmp
  - seq permit icmp (IPv6)
  - seq permit ip
  - seq permit ipv6
  - seq permit tcp
  - seq permit tcp (IPv6)
  - seq permit udp
  - seq permit udp (IPv6)
  - show access-group
  - show access-lists
  - show acl-table-usage detail
  - show control-plane logging
  - show ip as-path-access-list
  - show ip prefix-list
  - show logging access-list
- Route-map commands
  - continue
  - match as-path
  - match community
  - match extcommunity
  - match inactive-path-additive
  - match interface
  - match ip address
  - match ip next-hop
  - match ipv6 address
  - match ipv6 next-hop
  - match metric
  - match origin
  - match route-type
  - match tag
  - route-map
  - set comm-list add
  - set comm-list delete
  - set community
  - set extcomm-list add
  - set extcomm-list delete
  - set extcommunity
  - set local-preference
  - set metric
  - set metric-type
  - set next-hop
  - set origin
  - set tag
  - set weight
  - show route-map
Quality of service
- Classification
  - Data traffic classification
  - Control-plane policing
- Marking Traffic
- Queuing
- Policing traffic
- Coloring traffic
- Modifying packet fields
- Shaping traffic
- Bandwidth allocation
- Strict priority queuing
- Rate adjustment
- Configure quality of service
- Example 1: Traffic classification and bandwidth allocation in VXLAN topology using CoS value
- Example 2: Traffic classification and bandwidth allocation in VXLAN topology using CoS value on access ports and DSCP value on network ports
- Buffer management
  - Configure ingress buffer
  - Configure egress buffer
  - Deep Buffer mode
    - Configure Deep Buffer mode
- Congestion avoidance
- Storm control
- RoCE for faster access and lossless connectivity
  - Configure RoCE on the switch
  - RoCE for VXLAN over VLT
  - Buffer statistics tracking
- Port to port-pipe and MMU mapping
- QoS VXLAN usecases
- QoS VXLAN examples
- QoS commands
  - bandwidth
  - buffer-statistics-tracking
  - class
  - class-map
  - clear qos statistics
  - clear qos statistics type
  - control-plane
  - control-plane-buffer-size
  - flowcontrol
  - hardware deep-buffer-mode
  - match
  - match cos
  - match dscp
  - match precedence
  - match queue
  - match vlan
  - mtu
  - pause
  - pfc-cos
  - pfc-max-buffer-size
  - pfc-shared-buffer-size
  - pfc-shared-headroom-buffer-size
  - police
  - policy-map
  - priority
  - priority-flow-control mode
  - qos-group dot1p
  - qos-group dscp
  - qos-map traffic-class
  - qos-rate-adjust
  - queue-limit
  - queue bandwidth
  - queue qos-group
  - queue qos-group (Z9332F-ON)
  - random-detect (interface)
  - random-detect (queue)
  - random-detect color
  - random-detect ecn
  - random-detect ecn
  - random-detect pool
  - random-detect weight
  - service-policy
  - set cos
  - set dscp
  - set qos-group
  - shape
  - show class-map
  - show control-plane buffers
  - show control-plane buffer-stats
  - show control-plane info
  - show control-plane statistics
  - show hardware deep-buffer-mode
  - show interface priority-flow-control
  - show qos interface
  - show policy-map
  - show qos control-plane
  - show qos egress buffers interface
  - show qos egress buffer-statistics-tracking
  - show qos egress buffer-stats interface
  - show qos headroom-pool buffer-statistics-tracking
  - show qos ingress buffers interface
  - show qos ingress buffer-statistics-tracking
  - show qos ingress buffer-stats interface
  - show qos maps
  - show qos maps (Z9332F-ON)
  - show qos port-map details
  - show qos-rate-adjust
  - show qos service-pool buffer-statistics-tracking
  - show qos system
  - show qos system buffers
  - show qos wred-profile
  - show queuing statistics
  - system qos
  - trust dot1p-map
  - trust dscp-map
  - trust-map
  - wred
Virtual Link Trunking
- Terminology
- VLT domain
- VLT interconnect
- Graceful LACP with VLT
- Configure VLT
- Configure VRRP Active-Active mode
- Migrate VMs across data centers with eVLT
- View VLT information
- Delay-restore for orphan ports
  - Configuring delay-restore port - non-VLT
  - Configuring delay-restore orphan port - VLT
- Example: Configure RSPAN in VLT network
- VLT commands
Uplink Failure Detection
- Configure uplink failure detection
- Uplink failure detection on VLT
  - Sample configurations of UFD on VLT
- UFD commands
Converged data center services
- Priority flow control
- Enhanced transmission selection
- Data center bridging eXchange
- Internet small computer system interface
- Converged network DCB example
sFlow
- Enable sFlow
- Max-header size configuration
- Collector configuration
- Polling-interval configuration
- Sample-rate configuration
- Source interface configuration
- View sFlow information
- sFlow commands
Telemetry
- Telemetry terminology
- YANG-modeled telemetry data
- Configure telemetry
- View telemetry configuration
- Telemetry client authentication using TLS
- Telemetry commands
- Example: Configure streaming telemetry
RESTCONF API
- Configure RESTCONF API
- RESTCONF request of CLI command
  - Obtain RESTCONF API documentation from OS10
  - Translated RESTCONF requests example
- REST Token-Based Authentication
- CLI commands for RESTCONF API
- RESTCONF API tasks
  - View XML structure of CLI commands
  - RESTCONF API Examples
    - System
    - Interface
Troubleshoot Dell EMC SmartFabric OS10
- Diagnostic tools
- Recover Linux password
- Recover OS10 user name password
- Restore factory defaults
- SupportAssist
- Support bundle
- System monitoring
- Monitor CPU Utilization
  - CPU Utilization commands
- Monitor Memory Utilization
  - Memory Utilization commands
- Log into OS10 device
- Frequently asked questions
Support resources

Usage

Information

The no version of this command disables the host-based authentication.

Example

OS10(config)# ip ssh server hostbased-authentication

Supported

Releases

10.3.0E or later

ip ssh server kex

Configures the key exchange algorithms used in the SSH server.

Syntax

ip ssh server kex key-exchange-algorithm

Parameters key-exchange-algorithm — Enter the supported key exchange algorithms separated by a blank

space. The SSH server supports these key exchange algorithms:

● curve25519-sha256

● curve25519-sha256@libssh.org

● diffie-hellman-group1-sha1

● diffie-hellman-group14-sha1

● diffie-hellman-group16-sha512

● diffie-hellman-group-exchange-sha1

● diffie-hellman-group-exchange-sha256

● ecdh-sha2-nistp256

● ecdh-sha2-nistp384

● ecdh-sha2-nistp521

Default

● curve25519-sha256

● diffie-hellman-group14-sha1

● diffie-hellman-group-exchange-sha256

● ecdh-sha2-nistp256

● ecdh-sha2-nistp384

● ecdh-sha2-nistp521

Command Mode CONFIGURATION

Usage

Information

The no version of this command removes the configuration.

Example

OS10(config)# ip ssh server kex curve25519-sha256 diffie-hellman-group1-

sha1

Supported

Releases

10.3.0E or later

ip ssh server mac

Configures the hash message authentication code (HMAC) algorithms used in the SSH server.

Syntax

ip ssh server mac hmac-algorithm

Parameters hmac-algorithm — Enter the supported HMAC algorithms separated by a blank space. The SSH

server supports these HMAC algorithms:

● hmac-md5

● hmac-md5-96

● hmac-ripemd160

● hmac-sha1

● hmac-sha1-96

● hmac-sha2-256

● hmac-sha2-512

1338 Security