Installation Guide
Table Of Contents
- Extreme Routing MLX Series Hardware Installation Guide
- Preface
- About This Document
- Product Overview
- ExtremeRouting MLX Series device overview
- MLX Series router applications
- Hardware features
- MLX Series router modules
- Management modules
- Interface modules
- 2x100GbE CFP2 optics based high density module
- PBIF Recovery
- 2x100GbE CFP2 P2010 specifications
- 2x100GbE CFP2 DDR3 SDRAM memory specifications
- BR-MLX-10GX20-X2 and BR-MLX-100GX2-CFP2-X2 Router Software
- BR-MLX-10GX20-X2 and BR-MLX-100GX2-CFP2-X2 scalability for IPv4 and IPv6 routes
- MLX Series 2x100G XPP ILKN monitoring
- MLX Series CPU threshold monitoring
- MLX Series BR-MLX-10Gx4-M IPsec and IKEv2
- MLX Series Encryption and Decryption of IPv4 Unicast Data and Control Packets
- MLX Series IKEv2 Authentication
- MLX Series IPsec and IKEv2 configuration
- MLX Series Configuring Global IKEv2 Options
- MLX Series Configuring the IKEv2 Proposal
- MLX Series Configuring the IKEv2 Policy
- MLX Series Configuring the IKEv2 Profile
- MLX Series Configuring the IKEv2 authentication proposal
- MLX Series Configuring the IPsec Proposal
- MLX Series Configuring the IPsec Profile
- MLX Series IKEv2 Show Commands
- MLX Series IKEv2 Clear Commands
- MLX-10GX4-IPSEC-M Forwarding
- MLX Series 2x100G XPP ILKN monitoring
- 10Gx24-port interface module
- MLX 24-port 10Gbps (BR-MLX-10Gx24-DM) Interface Modules
- 8x10GE-X interface modules
- Gen-1 10Gx2 and 10Gx4 Ethernet interface modules
- BR-MLX-10GX4-X and BR-MLX-10Gx4-X-ML interface module LEDs
- Gen-1.1 4-port 10 Gbps Ethernet interface modules
- 8-port 10 Gbps M and D interface modules
- 24-port 1 Gbps Ethernet copper RJ-45 interface module
- 24-port 1 Gbps fiber interface module
- 20-port 100/1000 Ethernet interface module
- 20-port 10/100/1000 Ethernet interface module
- NI-MLX-1Gx48-T-A interface module
- BR-MLX-40Gx4-M 4-port 40GbE module
- Auto-tuning links
- Forward Error Correction mode
- Switch fabric modules
- High-speed switch fabric modules
- CFP2 to QSFP28 conversion module
- Power supplies
- Rack mounting brackets
- Cooling system for MLX Series routers
- NIBI-16-FAN-EXH-A high-speed fan assemblies
- Rack mount kit
- Supported software features
- Installing an ExtremeRouting MLX Series device
- Pre-Installation notice for the ExtremeRouting MLX chassis bundles
- Installation precautions
- Installing 2x100GbE CFP2 interface modules
- Installing BR-MLX-10Gx24-DM interface modules
- Installing an MLXe-4 router
- Installing an MLX-8 router
- Installing an MLXe-16 router
- Mounting the MLX-4, MLX-8 or MLX-16 router in a 4-post rack or EIA rack
- Installing an MLXe-32 router
- Preparing the installation site
- MLXe-32 router shipping carton contents
- Unpacking your MLXe-32 router
- Installing an MLXe-32 router in an EIA rack
- Installing modules in the MLXe-32 router
- MLXe-32 router cable management
- Accessing modules for service
- Installing power supplies in an MLXe-32 router
- Connecting AC power
- Connecting DC power
- Removing the MLXe-32 router DC power supplies
- Final steps
- Attaching a management station
- Activating the power source
- Verifying proper operation
- Using Extreme Structured Cabling Components
- Cable cinch overview
- mRJ21 procedures
- RJ-45 procedures
- Cable cinch with one group of RJ-45 cables
- Cable cinch with two groups of RJ-45 cables
- Cable cinch with three groups of RJ-45 cables
- Cable cinch with four groups of RJ-45 cables
- Cable cinch with five groups of RJ-45 cables
- Cable cinch with six groups of RJ-45 cables
- Cable cinch with seven groups of RJ-45 cables
- Cable cinch with eight groups of RJ-45 cables
- Connecting a Router to a Network Device
- Managing Routers and Modules
- Managing the device
- Disabling and re-enabling power to interface modules
- Monitoring I2C failures on management modules
- Displaying device status and temperature readings
- Displaying the Syslog configuration and static and dynamic buffers
- Router Headless State by MP Presence from LP
- Rolling Reboot
- Line Module Configuration Deletion in Interactive Boot Mode
- Managing switch fabric modules
- Managing the cooling system
- Managing interface modules
- Configuring interface module boot parameters
- Synchronizing the software image between management modules and interface modules
- Changing the boot source
- Specifying an immediate boot
- Specifying an immediate boot from the auxiliary flash slots on the management module
- Specifying an immediate boot from management module flash memory
- Specifying an immediate boot from flash memory on the interface module
- Specifying an immediate boot from a TFTP server
- Specifying an immediate interactive boot
- Configuring an automatic boot
- Configuring an automatic boot from the auxiliary flash slot on the management module
- Configuring an automatic boot from flash memory on the management module
- Configuring an automatic boot from flash memory on the interface module
- Configuring an automatic boot from a TFTP server
- Configuring an automatic interactive boot
- Changing priority of slots for interface modules
- Disabling and re-enabling power to interface modules
- Configuring interface module boot parameters
- Monitoring Link Status
- Traffic Manager XPP link monitoring
- Using alarms to collect and monitor device status
- Displaying MR2 management module memory usage
- Enabling and disabling management module CPU usage calculations
- Displaying management module CPU usage
- Removing MAC address entries
- IPv6 ND Proxy
- DRBG Health Test on IPsec LP
- Managing the device
- Maintenance and Field Replacement
- Maintenance and field replacement overview
- Hardware maintenance schedule
- Replacing a management module
- Replacing an interface module
- Replacing a switch fabric module
- Replacing a fiber-optic transceiver
- Replacing a power supply
- Replacing fan assemblies
- Hardware Specifications
- ExtremeRouting MLX Series Chassis Bundles
- Regulatory Statements
- Caution and Danger Notices
MLX Series CPU Threshold Monitoring sysmon task-threshold
The threshold time is congured using the global conguration command sysmon task-threshold <time> for the active
MP and all LPs, and will be available across resets.
Syntax
sysmon task-threshold time
no sysmon task-threshold time
Used to uncongure the threshold value.
Parameters
time
Sets the threshold-time in milliseconds.
Modes
Global conguration
Examples
The following conguration example congures the task-threshold to default 60ms:
device(config)#sysmon task-threshold 60
Task threshold-time is set to default value 60ms.
The following
conguration example sets the task-threshold to 50ms:
device(config)#sysmon task-threshold 50
Task threshold-time is set to 50ms.
When hold time exceeds the
congured threshold, i.e. 20ms for sfm_mgr task, the below syslog gets generated:
Nov 26 14:12:11:I:System: High CPU condition on MP, task name=sfm_mgr, max hold time=29ms, count =11
Nov 26 14:07:11:I:System: High CPU condition on MP, task name=sfm_mgr, max hold time=29ms, count =1
History
Release version Command history
Extreme NetIron software R05.8.00 This command was introduced.
MLX Series BR-MLX-10Gx4-M IPsec and IKEv2
The MLX Series router is located on the perimeter of connections to external networks. Encryption and decryption is supported for IPv4
unicast data and control packets transmitted or received from external networks, using IPSec FPGA and IKEv2 protocols for the MLX
Series BR-MLX-10Gx4-M-IPSEC.
The Public Key Infrastructure (PKI) provides a security infrastructure for secure communication. Each PKI peer holds a Digital Certicate
which holds multiple attributes that ensure the entity can be trusted, and can support secure communication.
• IPSec FPGA protocol for the MLX Series BR-MLX-10Gx4-M-IPSEC provides hardware based data encryption and decryption.
• IKEv2 protocol for the MLX Series BR-MLX-10Gx4-M-IPSEC is used to setup and manage secure tunnels across external
networks.
PKI uses the asymmetric encryption algorithm; two dierent keys are used to encrypt and decrypt data. The key pair consists of a private
key and a public key. The private key must be kept secret, while the public key can be distributed. Data encrypted by one of the two keys
can only be decrypted by the other. Data encrypted with a public key cannot be decrypted using a public key and vice versa. Users of a
public key are condent that the associated private key is owned by the correct remote subject.
MLX Series router modules
Extreme Routing MLX Series Hardware Installation Guide
44 9035627-01