Alcatel-Lucent OMNISWITCH 6600 Management Guide

Part No. 060180-10, Rev. E
March 2005

OmniSwitch 6600 Family

Switch Management Guide

www.alcatel.com

This user guide documents release 5.1.6 of the OmniSwitch 6600 Family.

The functionality described in this guide is subject to change without notice.

Copyright © 2005 by Alcatel Internetworking, Inc. All rights reserved. This document may not be repro­duced in whole or in part without the express written permission of Alcatel Internetworking, Inc.

®

Alcatel
and Alcatel OmniVista

and the Alcatel logo are registered trademarks of Alcatel. Xylan®, OmniSwitch®, OmniStack®,

®

are registered trademarks of Alcatel Internetworking, Inc.

OmniAccess™, Omni Switch/Router™, PolicyView™, RouterView™, SwitchManager™, VoiceView™,
WebView™, X-Cell™, X-Vision™, and the Xylan logo are trademarks of Alcatel Internetworking, Inc.

This OmniSwitch product contains components which may be covered by one or more of the following
U.S. Patents:

• U.S. Patent No. 6,339,830

• U.S. Patent No. 6,070,243

• U.S. Patent No. 6,061,368

• U.S. Patent No. 5,394,402

• U.S. Patent No. 6,047,024

• U.S. Patent No. 6,314,106

• U.S. Patent No. 6,542,507

26801 West Agoura Road

Calabasas, CA 91301

[phone] FAX [phone]

[e-mail]

US Customer Support—[phone]

International Customer Support—[phone]

Internet—http://eservice.ind.alcatel.com

ii OmniSwitch 6600 Family Switch Management Guide March 2005

Contents

About This Guide .......................................................................................................... xi

Supported Platforms .......................................................................................................... xi

Who Should Read this Manual? .......................................................................................xii

When Should I Read this Manual? ...................................................................................xii

What is in this Manual? .................................................................................................... xii

What is Not in this Manual? .............................................................................................xii

How is the Information Organized? ................................................................................xiii

Documentation Roadmap ................................................................................................xiii

Related Documentation .................................................................................................... xv

User Manual CD .............................................................................................................xvi

Technical Support ........................................................................................................... xvi

Chapter 1 Logging Into the Switch ............................................................................................1-1

In This Chapter ................................................................................................................1-1

Login Specifications ........................................................................................................1-2

Login Defaults .................................................................................................................1-2

Quick Steps for Logging Into the Switch ........................................................................1-3

Overview of Switch Login Components .........................................................................1-4

Management Interfaces ............................................................................................1-4

Logging Into the CLI .........................................................................................1-4

Using the WebView Management Tool ............................................................1-5

Using SNMP to Manage the Switch ..................................................................1-5

User Accounts ..........................................................................................................1-5

Using Telnet ....................................................................................................................1-6

Logging Into the Switch Via Telnet .........................................................................1-6

Starting a Telnet Session from the Switch ...............................................................1-6

Using FTP .......................................................................................................................1-7

Using FTP to Log Into the Switch ...........................................................................1-7

Using Secure Shell ..........................................................................................................1-8

Secure Shell Components .........................................................................................1-8

Secure Shell Interface ........................................................................................1-8

Secure Shell File Transfer Protocol ...................................................................1-8

Secure Shell Application Overview .........................................................................1-9

Secure Shell Authentication ...................................................................................1-10

Protocol Identification .....................................................................................1-10

Algorithm and Key Exchange .........................................................................1-10

OmniSwitch 6600 Family Switch Management Guide March 2005 iii

Contents

Authentication Phase .......................................................................................1-10

Connection Phase ............................................................................................1-11

Starting a Secure Shell Session ..............................................................................1-11

Closing a Secure Shell Session ..............................................................................1-13

Log Into the Switch with Secure Shell FTP ...........................................................1-13

Closing a Secure Shell FTP Session ......................................................................1-14

Modifying the Login Banner .........................................................................................1-15

Modifying the Text Display Before Login .............................................................1-16

Configuring Login Parameters ......................................................................................1-17

Configuring the Inactivity Timer ..................................................................................1-17

Enabling the DNS Resolver ..........................................................................................1-18

Verifying Login Settings ...............................................................................................1-18

Chapter 2 Managing System Files .............................................................................................2-1

In This Chapter ................................................................................................................2-1

File Management Specifications .....................................................................................2-2

Switch Administration Overview ....................................................................................2-3

File Transfer .............................................................................................................2-3

Switch Directories ....................................................................................................2-4

File and Directory Management ......................................................................................2-5

Using Wildcards .......................................................................................................2-7

Multiple Characters ...........................................................................................2-7

Single Characters ...............................................................................................2-7

Directory Commands ...............................................................................................2-8

Determining Your Location in the File Structure ..............................................2-8

Changing Directories .........................................................................................2-9

Displaying Directory Contents ........................................................................2-10

Making a New Directory .................................................................................2-11

Displaying Directory Contents Including Subdirectories ................................2-12

Copying an Existing Directory ........................................................................2-12

Removing a Directory and its Contents ...........................................................2-13

File Commands ......................................................................................................2-14

Creating or Modifying Files ............................................................................2-14

Copy an Existing File ......................................................................................2-14

Move an Existing File or Directory .................................................................2-15

Change File Attribute and Permissions ...........................................................2-16

Delete an Existing File ....................................................................................2-16

Managing Files on Non Primary Switches ......................................................2-16

Utility Commands ..................................................................................................2-17

Displaying Free Memory Space ......................................................................2-17

Performing a File System Check .....................................................................2-17

Deleting the Entire File System .......................................................................2-18

Loading Software onto the Switch ................................................................................2-19

Using the Switch as an FTP Server ........................................................................2-19

Using the Switch as an FTP Client .........................................................................2-21

Using Secure Shell FTP .........................................................................................2-23

Closing a Secure Shell FTP Session ......................................................................2-23

ivOmniSwitch 6600 Family Switch Management Guide March 2005

Contents

Using Zmodem .......................................................................................................2-24

Registering Software Image Files .................................................................................2-26

Directories on the Switch .......................................................................................2-26

Using the Install Command ....................................................................................2-27

Available Image Files .............................................................................................2-28

Application Examples for File Management ................................................................2-29

Transferring a File to the Switch Using FTP .........................................................2-29

Creating a File Directory on the Switch .................................................................2-30

FTP Client Application Example ....................................................................2-31

Creating a File Directory Using Secure Shell FTP ................................................2-32

Transfer a File Using Secure Shell FTP .................................................................2-34

Closing a Secure Shell FTP Session ......................................................................2-34

Verifying Directory Contents ........................................................................................2-34

Setting the System Clock ..............................................................................................2-35

Setting Date and Time ............................................................................................2-35

Date ..................................................................................................................2-35

Time Zone .......................................................................................................2-35

Time .................................................................................................................2-36

Daylight Savings Time Configuration ...................................................................2-37

Enabling DST ..................................................................................................2-38

Chapter 3 Configuring Network Time Protocol (NTP) ..........................................................3-1

In This Chapter ................................................................................................................3-1

NTP Specifications ..........................................................................................................3-2

NTP Defaults Table .........................................................................................................3-2

NTP Quick Steps .............................................................................................................3-3

NTP Overview ................................................................................................................3-4

Stratum .....................................................................................................................3-5

Using NTP in a Network ..........................................................................................3-5

Authentication ..........................................................................................................3-7

Configuring NTP .............................................................................................................3-8

Configuring the OmniSwitch as a Client .................................................................3-8

NTP Servers .............................................................................................................3-9

Using Authentication ..............................................................................................3-10

Verifying NTP Configuration .......................................................................................3-11

Chapter 4 Managing CMM Directory Content ........................................................................4-1

In This Chapter ................................................................................................................4-1

CMM Specifications .......................................................................................................4-2

CMM Files ......................................................................................................................4-3

CMM Software Directory Structure .........................................................................4-3

Where is the Switch Running From? .................................................................4-4

Software Rollback Feature .......................................................................................4-4

Software Rollback Configuration Scenarios for a Single Switch .....................4-5

Redundancy ..............................................................................................................4-9

OmniSwitch 6600 Family Switch Management Guide March 2005 v

Contents

Redundancy Scenarios .......................................................................................4-9

Managing the Directory Structure (Non-Redundant) ...................................................4-13

Rebooting the Switch .............................................................................................4-13

Copying the Running Configuration to the Working Directory ............................4-15

Rebooting from the Working Directory .................................................................4-17

Copying the Working Directory to the Certified Directory ...................................4-20

Copying the Certified Directory to the Working Directory ...................................4-21

Show Currently Used Configuration ......................................................................4-22

Show Switch Files ..................................................................................................4-23

Managing Redundancy in a Stack .................................................................................4-24

Rebooting the Switch .............................................................................................4-24

Copying the Working Directory to the Certified Directory ...................................4-25

Synchronizing the Primary and Secondary CMMs ................................................4-26

Swapping the Primary CMM for the Secondary CMM .........................................4-28

Show Currently Used Configuration ......................................................................4-28

Emergency Restore of the boot.cfg File ........................................................................4-30

Can I Restore the boot.file While Running from Certified? ..................................4-30

Displaying CMM Conditions ........................................................................................4-31

Chapter 5 Using the CLI ...............................................................................................................5-1

CLI Specifications ...........................................................................................................5-2

CLI Overview ..................................................................................................................5-2

Online Configuration ................................................................................................5-2

Offline Configuration Using Configuration Files ....................................................5-3

Command Entry Rules and Syntax .................................................................................5-3

Text Conventions .....................................................................................................5-3

Using “Show” Commands .......................................................................................5-4

Using the “No” Form ...............................................................................................5-4

Using “Alias” Commands ........................................................................................5-4

Partial Keyword Completion ....................................................................................5-5

Command Help ...............................................................................................................5-5

Tutorial for Building a Command Using Help .........................................................5-7

CLI Services ....................................................................................................................5-9

Command Line Editing ............................................................................................5-9

Deleting Characters ...........................................................................................5-9

Recalling the Previous Command Line ...........................................................5-10

Inserting Characters .........................................................................................5-10

Syntax Checking ....................................................................................................5-11

Prefix Recognition ..................................................................................................5-11

Example for Using Prefix Recognition ...........................................................5-12

Prefix Prompt ...................................................................................................5-13

Command History ..................................................................................................5-13

Logging CLI Commands and Entry Results .................................................................5-15

Enabling Command Logging ..........................................................................5-15

Disabling Command Logging .........................................................................5-15

Viewing the Current Command Logging Status .............................................5-16

Viewing Logged CLI Commands and Command Entry Results ....................5-16

viOmniSwitch 6600 Family Switch Management Guide March 2005

Contents

Customizing the Screen Display ...................................................................................5-17

Changing the Screen Size .......................................................................................5-17

Changing the CLI Prompt ......................................................................................5-17

Displaying Table Information ................................................................................5-18

Filtering Table Information ....................................................................................5-19

Multiple User Sessions ..................................................................................................5-20

Listing Other User Sessions ...................................................................................5-20

Listing Your Current Login Session ......................................................................5-21

Terminating Another Session .................................................................................5-22

Application Example .....................................................................................................5-23

Using a Wildcard to Filter Table Information ........................................................5-23

Verifying CLI Usage .....................................................................................................5-24

Chapter 6 Working With Configuration Files .........................................................................6-1

In This Chapter ................................................................................................................6-1

Configuration File Specifications ...................................................................................6-2

Tutorial for Creating a Configuration File ......................................................................6-2

Quick Steps for Applying Configuration Files ...............................................................6-4

Setting a File for Immediate Application .................................................................6-4

Setting an Application Session for a Date and Time ...............................................6-4

Setting an Application Session for a Specified Time Period ...................................6-5

Configuration Files Overview .........................................................................................6-6

Applying Configuration Files to the Switch ............................................................6-6

Verifying a Timed Session ................................................................................6-6

Cancelling a Timed Session ..............................................................................6-7

Configuration File Error Reporting ...................................................................6-7

Setting the Error File Limit ...............................................................................6-8

Syntax Checking ................................................................................................6-8

Displaying a Text File ..............................................................................................6-9

Text Editing on the Switch .......................................................................................6-9

Invoke the “Vi” Editor .......................................................................................6-9

Creating Snapshot Configuration Files .........................................................................6-10

Snapshot Feature List .............................................................................................6-10

User-Defined Naming Options ........................................................................6-11

Editing Snapshot Files .....................................................................................6-11

Verifying File Configuration .........................................................................................6-14

Chapter 7 Managing Switch User Accounts ............................................................................7-1

In This Chapter ................................................................................................................7-1

User Database Specifications ..........................................................................................7-2

User Account Defaults ....................................................................................................7-2

Overview of User Accounts ............................................................................................7-3

Startup Defaults ........................................................................................................7-4

Quick Steps for Network Administrator User Accounts ..........................................7-5

Quick Steps for Creating Customer Login User Accounts ......................................7-6

OmniSwitch 6600 Family Switch Management Guide March 2005 vii

Contents

Default User Settings ...............................................................................................7-7

How User Settings Are Saved ..................................................................................7-7

Creating a User ................................................................................................................7-8

Removing a User ......................................................................................................7-8

User-Configured Password ......................................................................................7-8

Setting a Minimum Password Size ...........................................................................7-9

Configuring Password Expiration ............................................................................7-9

Default Password Expiration .............................................................................7-9

Specific User Password Expiration .................................................................7-10

Configuring Privileges for a User .................................................................................7-11

Setting Up SNMP Access for a User Account ..............................................................7-12

SNMP Access Without Authentication/Encryption ...............................................7-12

SNMP Access With Authentication/Encryption ....................................................7-13

Removing SNMP Access From a User ..................................................................7-13

Setting Up End-User Profiles ........................................................................................7-14

Creating End-User Profiles ....................................................................................7-15

Setting Up Port Ranges in a Profile .......................................................................7-15

Setting Up VLAN Ranges in a Profile ...................................................................7-15

Associating a Profile With a User ..........................................................................7-16

Removing a Profile From the Configuration ..........................................................7-16

Verifying the User Configuration .................................................................................7-16

Chapter 8 Managing Switch Security ........................................................................................8-1

In This Chapter ................................................................................................................8-1

Switch Security Specifications ........................................................................................8-2

Switch Security Defaults .................................................................................................8-2

Switch Security Overview ...............................................................................................8-3

Authenticated Switch Access ..........................................................................................8-4

AAA Servers—RADIUS or LDAP ..........................................................................8-4

Authentication-only—ACE/Server ..........................................................................8-4

Interaction With the User Database .........................................................................8-5

ASA and Authenticated VLANs ..............................................................................8-5

Configuring Authenticated Switch Access .....................................................................8-6

Quick Steps for Setting Up ASA ....................................................................................8-7

Setting Up Management Interfaces for ASA ..................................................................8-9

Enabling Switch Access .........................................................................................8-10

Configuring the Default Setting .............................................................................8-10

Using Secure Shell .................................................................................................8-11

Configuring Accounting for ASA .................................................................................8-12

Verifying the ASA Configuration .................................................................................8-13

viiiOmniSwitch 6600 Family Switch Management Guide March 2005

Contents

Chapter 9 Using WebView ...........................................................................................................9-1

In This Chapter ................................................................................................................9-1

WebView CLI Defaults ...................................................................................................9-2

Browser Setup .................................................................................................................9-2

WebView CLI Commands ..............................................................................................9-3

Enabling/Disabling WebView ..................................................................................9-3

Enabling/Disabling SSL ...........................................................................................9-3

Quick Steps for Setting Up WebView ............................................................................9-4

WebView Overview ........................................................................................................9-4

WebView Page Layout .............................................................................................9-4

Banner ................................................................................................................9-5

Toolbar ..............................................................................................................9-5

Feature Options .................................................................................................9-6

View/Configuration Area ..................................................................................9-6

Configuring the Switch With WebView .........................................................................9-7

Accessing WebView ................................................................................................9-7

Home Page ...............................................................................................................9-8

Configuration Page ...................................................................................................9-9

Global Configuration Page ................................................................................9-9

Table Configuration Page ................................................................................9-10

Table Features .................................................................................................9-12

Adjacencies ............................................................................................................9-16

WebView Help ..............................................................................................................9-17

General WebView Help .........................................................................................9-17

Specific-page Help .................................................................................................9-17

Chapter 10 Using SNMP ...............................................................................................................10-1

In This Chapter ..............................................................................................................10-1

SNMP Specifications ....................................................................................................10-2

SNMP Defaults .............................................................................................................10-2

Quick Steps for Setting Up An SNMP Management Station .......................................10-3

Quick Steps for Setting Up Trap Filters ........................................................................10-4

Filtering by Trap Families ......................................................................................10-4

Filtering by Individual Traps ..................................................................................10-5

SNMP Overview ...........................................................................................................10-6

SNMP Operations ..................................................................................................10-6

Using SNMP for Switch Management ...................................................................10-7

Setting Up an SNMP Management Station .....................................................10-7

SNMP Versions ......................................................................................................10-7

SNMPv1 ..........................................................................................................10-7

SNMPv2 ..........................................................................................................10-8

SNMPv3 ..........................................................................................................10-8

SNMP Traps Table .................................................................................................10-9

Using SNMP For Switch Security ..............................................................................10-26

OmniSwitch 6600 Family Switch Management Guide March 2005 ix

Contents

Community Strings (SNMPv1 and SNMPv2) .....................................................10-26

Configuring Community Strings ...................................................................10-26

Encryption and Authentication (SNMPv3) ..........................................................10-27

Configuring Encryption and Authentication .................................................10-27

Setting SNMP Security .................................................................................10-28

Working with SNMP Traps ........................................................................................10-29

Trap Filtering ........................................................................................................10-29

Filtering by Trap Families .............................................................................10-29

Filtering By Individual Trap ..........................................................................10-29

Authentication Trap ..............................................................................................10-30

Trap Management ................................................................................................10-30

Replaying Traps .............................................................................................10-30

Absorbing Traps ............................................................................................10-30

Sending Traps to WebView ...........................................................................10-30

SNMP MIB Information .............................................................................................10-31

MIB Tables ...........................................................................................................10-31

MIB Table Description ..................................................................................10-31

Industry Standard MIBs .......................................................................................10-32

Enterprise (Proprietary) MIBs ..............................................................................10-36

Verifying the SNMP Configuration ............................................................................10-39

Appendix A Software License and Copyright Statements .................................................... A-1

Alcatel License Agreement ............................................................................................ A-1

ALCATEL INTERNETWORKING, INC. (“AII”)

SOFTWARE LICENSE AGREEMENT ............................................................... A-1

Third Party Licenses and Notices ..................................................................................A-4

A. Booting and Debugging Non-Proprietary Software ..........................................A-4

B. The OpenLDAP Public License: Version 2.4, 8 December 2000 .....................A-4

C. Linux ..................................................................................................................A-5

D. GNU GENERAL PUBLIC LICENSE: Version 2, June 1991 .......................... A-5

E. University of California ...................................................................................A-10

F. Carnegie-Mellon University ............................................................................A-10

G. Random.c .........................................................................................................A-10

H. Apptitude, Inc. .................................................................................................A-11

I. Agranat .............................................................................................................A-11

J. RSA Security Inc. ............................................................................................A-11

K. Sun Microsystems, Inc. ....................................................................................A-11

L. Wind River Systems, Inc. ................................................................................A-12

M. Network Time Protocol Version 4 ...................................................................A-12

Index ...................................................................................................................... Index-1

xOmniSwitch 6600 Family Switch Management Guide March 2005

About This Guide

This OmniSwitch 6600 Family Switch Management Guide describes basic attributes of your switch and
basic switch administration tasks. The software features described in this manual are shipped standard with
your OmniSwitch 6600 Family switch. These features are used when readying a switch for integration into
a live network environment.

Supported Platforms

This information in this guide applies to the following products:

• OmniSwitch 6624

• OmniSwitch 6648

• OmniSwitch 6600-U24

• OmniSwitch 6600-P24

• OmniSwitch 6602-24

• OmniSwitch 6602-48

OmniSwitch 6600 Family switches are next generation enterprise edge/workgroup switches. The
OmniSwitch 6624 and 6602-24 offer 24 copper 10/100 ports, the 6600-P24 offers 24 copper 10/100 Power
over Ethernet (PoE) ports, the 6648 and 6602-48 offer 48 copper 10/100 ports, and the 6600-U24 offers 24
fiber 100 ports.

In addition, OmniSwitch 6624/6600-U24/6648 switches have one expansion port that can be used for a
Gigabit Ethernet uplink module and another expansion port that can be used for a Gigabit Ethernet uplink
or a stacking module while the 6602-24/6602-48 switches offer fixed Gigabit Ethernet uplinks and fixed
stacking ports. The stacking ports on all OmniSwitch 6600 Family switches allow two to eight
OmniSwitch 6600 Family switches to be configured as one virtual chassis known as a stack.

Note. All references to OmniSwitch 6624 and 6648 switches also apply to the OmniSwitch 6600-U24,
6600-P24, 6602-24, and 6602-48 unless specified otherwise.

Unsupported Platforms

The information in this guide does not apply to the following products:

• OmniSwitch 6800, 7700, 7800, or 8800

• OmniSwitch (original version with no numeric model name)

• Omni Switch/Router

• OmniStack

• OmniAccess

OmniSwitch 6600 Family Switch Management Guide March 2005 page xi

Who Should Read this Manual? About This Guide

Who Should Read this Manual?

The audience for this user guide is network administrators and IT support personnel who need to config­ure, maintain, and monitor switches and routers in a live network. However, anyone wishing to gain
knowledge on how fundamental software features are implemented in the OmniSwitch 6600 Family will
benefit from the material in this configuration guide.

When Should I Read this Manual?

Read this guide as soon as your switch is up and running and you are ready to familiarize yourself with
basic software functions. You should have already stepped through the first login procedures and read the
brief software overviews in the OmniSwitch 6600 Family Getting Started Guide.

You should have already set up a switch password and be familiar with the very basics of the switch soft­ware. This manual will help you understand the switch’s directory structure, the Command Line Interface
(CLI), configuration files, basic security features, and basic administrative functions. The features and
procedures in this guide will help form a foundation that will allow you to configure more advanced
switching features later.

What is in this Manual?

This configuration guide includes information about the following features:

• Basic switch administrative features, such as file editing utilities, procedures for loading new software,

and setting up system information (name of switch, date, time).

• Configurations files, including snapshots, off-line configuration, time-activated file download.

• The CLI, including on-line configuration, command-building help, syntax error checking, and line edit-

ing.

• Basic security features, such as switch access control and customized user accounts.

• SNMP

• Web-based management (WebView)

What is Not in this Manual?

The configuration procedures in this manual primarily use Command Line Interface (CLI) commands in
examples. CLI commands are text-based commands used to manage the switch through serial (console
port) connections or via Telnet sessions. This guide does include introductory chapters for alternative
methods of managing the switch, such as web-based (WebView) and SNMP management. However the
primary focus of this guide is managing the switch through the CLI.

Further information on WebView can be found in the context-sensitive on-line help available with that
application.

This guide does not include documentation for the OmniVista network management system. However,
OmniVista includes a complete context-sensitive on-line help system.

page xii OmniSwitch 6600 Family Switch Management Guide March 2005

About This Guide How is the Information Organized?

This guide provides overview material on software features, how-to procedures, and tutorials that will
enable you to begin configuring your OmniSwitch. However, it is not intended as a comprehensive refer­ence to all CLI commands available in the OmniSwitch. For such a reference to all OmniSwitch 6600
Family CLI commands, consult the OmniSwitch CLI Reference Guide.

How is the Information Organized?

Each chapter in this guide includes sections that will satisfy the information requirements of casual read­ers, rushed readers, serious detail-oriented readers, advanced users, and beginning users.

Quick Information. Most chapters include a specifications table that lists RFCs and IEEE specifications
supported by the software feature. In addition, this table includes other pertinent information such as mini­mum and maximum values and sub-feature support. Some chapters include a defaults table that lists the
default values for important parameters along with the CLI command used to configure the parameter.
Many chapters include Quick Steps sections, which are procedures covering the basic steps required to get
a software feature up and running.

In-Depth Information. All chapters include overview sections on software features as well as on selected
topics of that software feature. Topical sections may often lead into procedure sections that describe how
to configure the feature just described. Many chapters include tutorials or application examples that help
convey how CLI commands can be used together to set up a particular feature.

Documentation Roadmap

The OmniSwitch user documentation suite was designed to supply you with information at several critical
junctures of the configuration process. The following section outlines a roadmap of the manuals that will
help you at each stage of the configuration process. Under each stage, we point you to the manual or
manuals that will be most helpful to you.

Stage 1: Using the Switch for the First Time

Pertinent Documentation: OmniSwitch 6600 Family Getting Started Guide

Release Notes

A hard-copy OmniSwitch 6600 Family Getting Started Guide is included with your switch; this guide
provides all the information you need to get your switch up and running the first time. This guide provides
information on unpacking the switch, rack mounting the switch, installing uplink and stacking modules,
unlocking access control, setting the switch’s IP address, setting up a password, and setting up stacks. It
also includes succinct overview information on fundamental aspects of the switch, such as hardware
LEDs, the software directory structure, stacking, CLI conventions, and web-based management.

At this time you should also familiarize yourself with the Release Notes that accompanied your switch.
This document includes important information on feature limitations that are not included in other user
guides.

OmniSwitch 6600 Family Switch Management Guide March 2005 page xiii

Documentation Roadmap About This Guide

Stage 2: Gaining Familiarity with Basic Switch Functions

Pertinent Documentation: OmniSwitch 6600 Family Hardware Users Guide

OmniSwitch 6600 Family Switch Management Guide

Once you have your switch up and running, you will want to begin investigating basic aspects of its hard
ware and software. Information about OmniSwitch 6600 Family hardware is provided in the OmniSwitch
6600 Family Hardware Users Guide. This guide provides specifications, illustrations, and descriptions of
all hardware components—chassis, power supplies, uplink and stacking modules, and cooling fans. They
also include steps for common procedures, such as removing and installing switch components.

The OmniSwitch 6600 Family Switch Management Guide is the primary user guide for the basic software
features on a single switch. This guide contains information on the switch directory structure, basic file
and directory utilities, switch access security, SNMP, and web-based management. It is recommended that
you read this guide before connecting your switch to the network.

Note. The OmniSwitch 6600 Family Switch Management Guide was originally known as the “OmniSwitch
6624/6648 Switch Management Guide.”

Stage 3: Integrating the Switch Into a Network

Pertinent Documentation: OmniSwitch 6600 Family Network Configuration Guide

OmniSwitch 6600 Family Advanced Routing Configuration Guide

When you are ready to connect your switch to the network, you will need to learn how the OmniSwitch
implements fundamental software features, such as 802.1Q, VLANs, Spanning Tree, and network routing
protocols. The OmniSwitch 6600 Family Network Configuration Guide contains overview information,
procedures and examples on how standard networking technologies are configured in the OmniSwitch
6600 Family.

Note. The OmniSwitch 6600 Family Network Configuration Guide was originally known as the
“OmniSwitch 6624/6648 Network Configuration Guide.”

The OmniSwitch 6600 Family Advanced Routing Configuration Guide includes configuration information
for networks using Open Shortest Path First (OSPF).

Note. The OmniSwitch 6600 Family Advanced Routing Configuration Guide was originally known as the
“OmniSwitch 66/24/6648 Advanced Routing Configuration Guide”

Anytime

The OmniSwitch CLI Reference Guide contains comprehensive information on all CLI commands
supported by the switch. This guide includes syntax, default, usage, example, related CLI command, and
CLI-to-MIB variable mapping information for all CLI commands supported by the switch. This guide can
be consulted anytime during the configuration process to find detailed and specific information on each
CLI command.

page xiv OmniSwitch 6600 Family Switch Management Guide March 2005

About This Guide Related Documentation

Related Documentation

The following are the titles and descriptions of all the OmniSwitch 6600 Family user manuals:

• OmniSwitch 6600 Family Getting Started Guide

Describes the hardware and software procedures for getting an OmniSwitch 6600 Family switch up
and running. Also provides information on fundamental aspects of OmniSwitch software and stacking
architecture.

• OmniSwitch 6600 Family Hardware Users Guide

Complete technical specifications and procedures for all OmniSwitch 6600 Family chassis, power
supplies, fans, and uplink and stacking modules.

• OmniSwitch CLI Reference Guide

Complete reference to all CLI commands supported on the OmniSwitch 6600, 6800, 7700, 7800, and

8800. Includes syntax definitions, default values, examples, usage guidelines, and CLI-to-MIB vari­able mappings.

• OmniSwitch 6600 Family Switch Management Guide

Includes procedures for readying an individual switch for integration into a network. Topics include
the software directory architecture, image rollback protections, authenticated switch access, managing
switch files, system configuration, using SNMP, and using web management software (WebView).

• OmniSwitch 6600 Family Network Configuration Guide

Includes network configuration procedures and descriptive information on all the major software
features and protocols included in the base software package. Chapters cover Layer 2 information
(Ethernet and VLAN configuration), Layer 3 information, security options (authenticated VLANs),
Quality of Service (QoS), and link aggregation.

• OmniSwitch 6600 Family Advanced Routing Configuration Guide

Includes network configuration procedures and descriptive information on all the software features and
protocols included in the advanced routing software package OSPF.

• Technical Tips, Field Notices

Includes information published by Alcatel’s Customer Support group.

• Release Note

Includes critical Open Problem Reports, feature exceptions, and other important information on the
features supported in the current release and any limitations to their support.

OmniSwitch 6600 Family Switch Management Guide March 2005 page xv

User Manual CD About This Guide

User Manual CD

All user guides for the OmniSwitch 6600 Family are included on the User Manual CD that accompanied
your switch. This CD also includes user guides for other Alcatel data enterprise products. In addition, it
contains a stand-alone version of the on-line help system that is embedded in the OmniVista network
management application.

Besides the OmniVista documentation, all documentation on the User Manual CD is in
requires the Adobe Acrobat Reader program for viewing. Acrobat Reader freeware is available at
www.adobe.com.

Note. In order to take advantage of the documentation CD’s global search feature, it is recommended that
you select the option for searching PDF files before downloading Acrobat Reader freeware.

To verify that you are using Acrobat Reader with the global search option, look for the following button in
the toolbar:

Note. When printing pages from the documentation PDFs, de-select Fit to Page if it is selected in your
print dialog. Otherwise pages may print with slightly smaller margins.

PDF format and

Technical Support

An Alcatel service agreement brings your company the assurance of 7x24 no-excuses technical support.
You’ll also receive regular software updates to maintain and maximize your Alcatel product’s features and
functionality and on-site hardware replacement through our global network of highly qualified service
delivery partners. Additionally, with 24-hour-a-day access to Alcatel’s Service and Support web page,
you’ll be able to view and update any case (open or closed) that you have reported to Alcatel’s technical
support, open a new case or access helpful release notes, technical bulletins, and manuals. For more infor­mation on Alcatel’s Service Programs, see our web page at eservice.ind.alcatel.com, call us at 1-800-995­2696, or email us at [e-mail].

page xvi OmniSwitch 6600 Family Switch Management Guide March 2005

1 Logging Into the Switch

Logging into the switch may be done locally or remotely. Management tools include: the Command Line
Interface (CLI), which may be accessed locally via the console port, or remotely via Telnet; WebView,
which requires an HTTP client (browser) on a remote workstation; and SNMP, which requires an SNMP
manager (such as Alcatel’s OmniVista or HP OpenView) on the remote workstation. Secure sessions are
available using the Secure Shell interface. File transfers can be done via FTP or Secure Shell FTP.

In This Chapter

This chapter describes the basics of logging into the switch to manage the switch through the CLI. It
includes information about using Telnet, FTP, and Secure Shell for logging into the switch as well as
information about using the switch to start a Telnet or Secure Shell session on another device. It also
includes information about managing sessions and specifying a DNS resolver. For more details about the
syntax of referenced commands, see the OmniSwitch CLI Reference Guide.

Configuration procedures described in this chapter include:

• “Quick Steps for Logging Into the Switch” on page 1-3

• “Using Telnet” on page 1-6

• “Using FTP” on page 1-7

• “Using Secure Shell” on page 1-8

• “Modifying the Login Banner” on page 1-15

• “Configuring Login Parameters” on page 1-17

• “Enabling the DNS Resolver” on page 1-18

Management access is disabled (except through the console port) unless specifically enabled by a network
administrator. For more information about management access and methods, use the table here as a guide:

For more information about... See...

Enabling or “unlocking” management interfaces
on the switch

Authenticating users to manage the switch Chapter 8, “Managing Switch Security”

Creating user accounts directly on the switch Chapter 7, “Managing Switch User Accounts”

Using the CLI Chapter 5, “Using the CLI”

Using WebView to manage the switch Chapter 9, “Using WebView”

Getting Started Guide or

Chapter 8, “Managing Switch Security”

Using SNMP to manage the switch Chapter 10, “Using SNMP”

OmniSwitch 6600 Family Switch Management Guide March 2005 page 1-1

Login Specifications Logging Into the Switch

Login Specifications

Telnet clients supported Any standard Telnet client.

FTP clients supported Any standard FTP client.

HTTP (WebView) clients supported

Secure Shell clients supported Any standard Secure Shell client (Secure Shell

SNMP clients supported Any standard SNMP manager (such as HP Open-

– Internet Explorer for Windows NT, Windows

XP, and Windows 2000, version 5.5

– Netscape for Windows NT, Windows XP, and

Windows 2000, version 4.7
– Netscape for Sun OS 2.8, version 4.7
– Netscape for HP-UX 11.0, version 4.7.

Version 2).

Vie w).

Login Defaults

Access to managing the switch is always available for the admin user through the console port, even if
management access to the console port is disabled

Parameter Description Command Default

Session login attempts allowed
before the TCP connection is
closed.

session login-attempt 3 attempts

Timeout period allowed for
session login before the TCP
connection is closed.

Inactivity timeout period. The
length of time the switch can
remain idle during a login
session before the switch will
close the session.

session login-timeout 55 seconds

session timeout 4 minutes

page 1-2 OmniSwitch 6600 Family Switch Management Guide March 2005

Logging Into the Switch Quick Steps for Logging Into the Switch

Quick Steps for Logging Into the Switch

The following procedure assumes that you have set up the switch as described in your OmniSwitch Getting
Started Guide and Hardware Users Guide. Setup includes:

• Connecting to the switch via the console port.

• Setting up the Ethernet Management Port (EMP) through the switch’s boot prompt.

• Enabling (or “unlocking”) management interfaces types (Telnet, FTP, HTTP, SNMP, and Secure

Shell) through the aaa authentication command for the interface you are using. Note that Telnet, FTP,
and Secure Shell are used to log into the switch’s Command Line Interface (CLI). For detailed infor­mation about enabling session types, see Chapter 8, “Managing Switch Security.”

1 If you are connected to the switch via the console port, your terminal will automatically display the

switch login prompt. If you are connected remotely, you must enter the switch IP address in your Telnet,
FTP, or Secure Shell client (typically the IP address of the EMP). The login prompt then displays.

2 At the login prompt, enter the admin username. At the password prompt, enter the switch password.

(Alternately, you may enter any valid username and password.) The switch’s default welcome banner will
display, followed by the CLI prompt.

Welcome to the Alcatel OmniSwitch 6000
Software Version 5.1 Development, September 2, 2002.

Copyright(c), 1994-2002 Alcatel Internetworking Inc. All Rights reserved.

OmniSwitch(TM) is a trademark of Alcatel Internetworking, Inc. registered in the
United States Patent and Trademark Office.

You are now logged into the CLI. For information about changing the welcome banner, see “Modifying

the Login Banner” on page 1-15.

For information about changing the login prompt, see Chapter 5, “Using the CLI.”

For information about setting up additional user accounts locally on the switch, see Chapter 7, “Managing

Switch User Accounts.”

OmniSwitch 6600 Family Switch Management Guide March 2005 page 1-3

Overview of Switch Login Components Logging Into the Switch

Overview of Switch Login Components

Switch access components include access methods (or interfaces) and user accounts stored on the local
user database in the switch and/or on external authentication servers. Each access method, except the
console port, must be enabled or “unlocked” on the switch before users can access the switch through that
interface.

OmniSwitch

Authentication

Server

OmniSwitch 6648

OmniSwitch 6648

OmniSwitch 6648

local user
database

remote user

Login via Secure Shell, Telnet,
FTP, HTTP, or SNMP

local user

Login via the console port.

Switch Login Components

Management Interfaces

Logging into the switch may be done locally or remotely. Remote connections may be secure or insecure,
depending on the method. Management interfaces are enabled using the aaa authentication command.
This command also requires specifying the external servers and/or local user database that will be used to
authenticate users. The process of authenticating users to manage the switch is called Authenticated
Switch Access (ASA). Authenticated Switch Access is described in detail in Chapter 8, “Managing Switch

Security.”

An overview of management methods is listed here:

Logging Into the CLI

• Console port—A direct connection to the switch through the console port. The console port is always

enabled for the default user account. For more information about connecting to the console port, see
your OmniSwitch Hardware Users Guide.

• Telnet—Any standard Telnet client may be used for remote login to the switch. This method is not

secure. For more information about using Telnet to access the switch, see “Using Telnet” on page 1-6.

• FTP—Any standard FTP client may be used for remote login to the switch. This method is not secure.

See “Using FTP” on page 1-7.

• Secure Shell—Any standard Secure Shell client may be used for remote login to the switch. See

“Using Secure Shell” on page 1-8.

page 1-4 OmniSwitch 6600 Family Switch Management Guide March 2005

Logging Into the Switch Overview of Switch Login Components

Using the WebView Management Tool

• HTTP—The switch has a Web browser management interface for users logging in via HTTP. This

management tool is called WebView. For more information about using WebView, see Chapter 9,

“Using WebView.”

Using SNMP to Manage the Switch

• SNMP—Any standard SNMP browser may be used for logging into the switch. See Chapter 10,

“Using SNMP.”

User Accounts

User accounts may be configured and stored directly on the switch, and user accounts may also be config­ured and stored on an external authentication server or servers.

The accounts include a username and password. In addition, they also specify the user’s privileges or end­user profile, depending on the type of user account. In either case, the user is given read-only or read-write
access to particular commands.

• Local User Database

The user command creates accounts directly on the switch. See Chapter 7, “Managing Switch User

Accounts,”for information about creating accounts on the switch.

• External Authentication Servers

The switch may be set up to communicate with external authentication servers that contain user informa­tion. The user information includes usernames and passwords; it may also include privilege information or
reference an end-user profile name.

For information about setting up the switch to communicate with external authentication servers, see the
OmniSwitch 6600 Family Network Configuration Guide.

OmniSwitch 6600 Family Switch Management Guide March 2005 page 1-5

Using Telnet Logging Into the Switch

Using Telnet

Telnet may be used to log into the switch from a remote station. All of the standard Telnet commands are
supported by software in the switch. When Telnet is used to log in, the switch is acting as a Telnet server.

A Telnet session may also be initiated from the switch itself during a login session. In this case, the switch
is acting as a Telnet client.

Logging Into the Switch Via Telnet

Before you can log into the OmniSwitch using a Telnet interface, the telnet option of the aaa

authentication command must be enabled. Once enabled, any standard Telnet client may be used to log

into the switch. To log into the switch, open your Telnet application and enter the switch’s IP address (the
IP address will typically be the same as the one configured for the EMP). The switch’s welcome banner
and login prompt display.

Note. A Telnet connection is not secure. Secure Shell is recommended instead of Telnet or FTP as a
secure method of accessing the switch.

Starting a Telnet Session from the Switch

At any time during a login session on the switch, you can initiate a Telnet session to another switch (or
some other device) by using the telnet CLI command and the relevant IP address. The following shows an
example of telnetting to another OmniSwitch with an IP address of 10.255.10.123.

-> telnet 10.255.10.123
Trying 10.255.10.123...
Connected to 10.255.10.123.
Escape character is '^]'.
login :

Here, you must enter a valid username and password. Once login is completed, the OmniSwitch welcome
banner will display as follows:

login : admin
password :

Welcome to the Alcatel OmniSwitch 6000
Software Version 5.1.2.125, December 13, 2002.
Copyright(c), 1994-2002 Alcatel Internetworking, Inc. All Rights reserved.

OmniSwitch(TM) is a trademark of Alcatel Internetworking, Inc. registered
in the United States Patent and Trademark Office.

page 1-6 OmniSwitch 6600 Family Switch Management Guide March 2005

Logging Into the Switch Using FTP

Using FTP

The OmniSwitch can function as an FTP server. Any standard FTP client may be used.

Note. An FTP connection is not secure. Secure Shell is recommended instead of FTP or Telnet as a secure
method of accessing the switch.

Using FTP to Log Into the Switch

You can access the OmniSwitch with a standard FTP application. To login to the switch, start your FTP
client. Where the FTP client asks for “Name”, enter the IP address of your switch. Where the FTP client
asks for “User ID”, enter the username of your login account on the switch. Where the FTP client asks for
“Password”, enter your switch password.

Note. If you are using Authenticated Switch Access (ASA), the port interface must be authenticated for
FTP use and the username profile must have permission to use FTP. Otherwise the switch will not accept
an FTP login. For information about ASA, refer to Chapter 8, “Managing Switch Security.”

Note. You must use the binary mode (bin) to transfer image files via FTP.

OmniSwitch 6600 Family Switch Management Guide March 2005 page 1-7

Using Secure Shell Logging Into the Switch

Using Secure Shell

The OmniSwitch Secure Shell feature provides a secure mechanism that allows you to log in to a remote
switch, to execute commands on a remote device, and to move files from one device to another. Secure
Shell provides secure, encrypted communications even when your transmission is between two untrusted
hosts or over an unsecure network. Secure Shell protects against a variety of security risks including the
following:

• IP spoofing

• IP source routing

• DNS spoofing

• Interception of clear-text passwords and other data by intermediate hosts

• Manipulation of data by users on intermediate hosts

Note. The OmniSwitch supports Secure Shell Version 2 only.

Secure Shell Components

The OmniSwitch includes both client and server components of the Secure Shell interface and the Secure
Shell FTP file transfer protocol. SFTP is a subsystem of the Secure Shell protocol. All Secure Shell FTP
data are encrypted through a Secure Shell channel.

Since Secure Shell provides a secure session, the Secure Shell interface and SFTP are recommended
instead of the Telnet program or the FTP protocol for communications over TCP/IP for sending file
transfers. Both Telnet and FTP are available on the OmniSwitch but they do not support encrypted
passwords.

Note. Secure Shell may only be used to log into the switch to manage the switch. It cannot be used for
Layer 2 authentication through the switch.

Secure Shell Interface

The Secure Shell interface is invoked when you enter the ssh command. After the authentication process
between the client and the server is complete, the remote Secure Shell interface runs in the same way as
Telnet. Refer to “Starting a Secure Shell Session” on page 1-11 to for detailed information.

Secure Shell File Transfer Protocol

Secure Shell FTP is the standard file transfer protocol used with Secure Shell version 2. Secure Shell FTP
is an interactive file transfer program (similar to the industry standard FTP) which performs all file
transfer operations over a Secure Shell connection.

You invoke the Secure Shell FTP protocol by using the sftp command. Once the authentication phase is
completed, the Secure Shell FTP subsystem runs. Secure Shell FTP connects and logs into the specified
host, then enters an interactive command mode. Refer to “Starting a Secure Shell Session” on page 1-11
for detailed information.

page 1-8 OmniSwitch 6600 Family Switch Management Guide March 2005

Logging Into the Switch Using Secure Shell

Secure Shell Application Overview

Secure Shell is an access protocol used to establish secured access to your OmniSwitch. The Secure Shell
protocol can be used to manage an OmniSwitch directly or it can provide a secure mechanism for
managing network servers through the OmniSwitch.

The drawing below illustrates the Secure Shell being used as an access protocol replacing Telnet to
manage the OmniSwitch. Here, the user terminal is connected through the network to the switch.

Secure Shell

OmniSwitch 6648

OmniSwitch 6648

OmniSwitch 6648

Network

Terminal

OmniSwitch

Secure Shell Used as an Access Protocol

The drawing below shows a slightly different application. Here, a terminal connected to a single
OmniSwitch acting as a Secure Shell client as an entry point into the network. In this scenario, the client
portion of the Secure Shell software is used on the connecting OmniSwitch and the server portion of
Secure Shell is used on the switches or servers being managed.

Secure Shell

Terminal

Access Protocol

OmniSwitch 6648

OmniSwitch 6648

OmniSwitch 6648

OmniSwitch Secure

Shell Client

Network

Secure Shell

OmniSwitch 6648

OmniSwitch 6648

OmniSwitch 6648

Secure Shell

Server

OmniSwitch as a Secure Shell Client

OmniSwitch 6600 Family Switch Management Guide March 2005 page 1-9

Using Secure Shell Logging Into the Switch

Secure Shell Authentication

Secure Shell authentication is accomplished in several phases using industry standard algorithms and
exchange mechanisms. The authentication phase is identical for Secure Shell and Secure Shell SFTP. The
following sections describe the process in detail.

Protocol Identification

When the Secure Shell client in the OmniSwitch connects to a Secure Shell server, the server accepts the
connection and responds by sending back an identification string. The client will parse the server’s identi­fication string and send an identification string of its own. The purpose of the identification strings is to
validate that the attempted connection was made to the correct port number. The strings also declare the
protocol and software version numbers. This information is needed on both the client and server sides for
debugging purposes.

At this point, the protocol identification strings are in human-readable form. Later in the authentication
process, the client and the server switch to a packet-based binary protocol, which is machine readable
only.

Algorithm and Key Exchange

The OmniSwitch Secure Shell server is identified by one or several host-specific DSA keys. Both the
client and server process the key exchange to choose a common algorithm for encryption, signature, and
compression. This key exchange is included in the Secure Shell transport layer protocol. It uses a key
agreement to produce a shared secret that cannot be determined by either the client or the server alone. The
key exchange is combined with a signature and the host key to provide host authentication. Once the
exchange is completed, the client and the server turn encryption on using the selected algorithm and key.
The following elements are supported:

Host Key Type DSA

Cipher Algorithms AES, Blowfish, Cast, 3DES, Arcfour, Rijndael

Signature Algorithms MD5, SHA1

Compression Algorithms None Supported

Key Exchange Algorithms diffie-hellman-group-exchange-sha1

diffie-hellman-group1-sha1

Note. The OmniSwitch generates a 512 bit DSA host key at initial startup. The DSA key on the switch is
made up of two files contained in the /flash/network directory; the public key is called
ssh_host_dsa_key.pub, and the private key is called ssh_host_dsa_key. To generate a different DSA key,
use the Secure Shell tools available on your Unix or Windows system and copy the files to the /flash/
network directory on your switch. The new DSA key will take effect after the OmniSwitch is rebooted.

Authentication Phase

When the client tries to authenticate, the server determines the process used by telling the client which
authentication methods can be used. The client has the freedom to attempt several methods listed by the
server. The server will disconnect itself from the client if a certain number of failed authentications are
attempted or if a timeout period expires. Authentication is performed independent of whether the Secure
Shell interface or the SFTP file transfer protocol will be implemented.

page 1-10 OmniSwitch 6600 Family Switch Management Guide March 2005

Logging Into the Switch Using Secure Shell

Connection Phase

After successful authentication, both the client and the server process the Secure Shell connection
protocol. The OmniSwitch supports one channel for each Secure Shell connection. This channel can be
used for a Secure Shell session or a Secure Shell FTP session.

Starting a Secure Shell Session

To start a Secure Shell session from an OmniSwitch, issue the ssh command and identify the IP address
for the device you are connecting to.

Note. You can only use a host name instead of an IP address if the DNS resolver has been configured and
enabled. If not, you must specify an IP address. See Chapter 2, “Managing System Files,” for details.

Note. Use of the cmdtool OpenWindows support facility is not recommended over Secure Shell connec­tions with an external server.

The following command establishes a Secure Shell interface from the local OmniSwitch to IP address

11.333.30.135.

-> ssh 11.333.30.135
login as:

You must have a login and password that is recognized by the IP address you specify. When you enter
your login, the device you are logging in to will request your password as shown here.

-> ssh 11.333.10.135
login as: rrlogin1
rrlogin1's password for keyboard-interactive method:

Once the Secure Shell session is established, you can use the remote device specified by the IP address on
a secure connection from your OmniSwitch.

Note. The login parameters for Secure Shell session login parameters can be affected by the session login-

attempt and session login-timeout CLI commands.

OmniSwitch 6600 Family Switch Management Guide March 2005 page 1-11

Using Secure Shell Logging Into the Switch

The following drawing shows an OmniSwitch, using IP address 11.233.10.145, establishing a Secure Shell
session across a network to another OmniSwitch, using IP address 11.333.30.135. To establish this session
from the console in the figure below, you would use the CLI commands shown in the examples above.
Once you issue the correct password, you are logged into the OmniSwitch at IP address 11.333.30.135.

Console

OmniSwitch 6648

OmniSwitch 6648

OmniSwitch 6648

OmniSwitch

11.233.10.145

Secure Shell Session between Two OmniSwitches

OmniSwitch 6648

OmniSwitch 6648

OmniSwitch 6648

OmniSwitch

11.333.30.135

page 1-12 OmniSwitch 6600 Family Switch Management Guide March 2005

Logging Into the Switch Using Secure Shell

To view the parameters of the Secure Shell session, issue the who command. The following will display.

-> who

Session number = 0

User name = (at login),
Access type = console,
Access port = Local,
IP address = 0.0.0.0,
Read-only domains = None,
Read-only families = ,
Read-Write domains = None,
Read-Write families = ,
End-User profile =

Session number = 1

User name = rrlogin1,
Access type = ssh,
Access port = NI,
IP address = 11.233.10.145,
Read-only domains = None,
Read-only families = ,
Read-Write domains = All ,
Read-Write families = ,
End-User profile =

This display shows two sessions currently running on the remote OmniSwitch at IP address

11.333.30.135. Session number 0 is identified as the console session. Session number 1 indicates the
User name is rrlogin1, the IP address is 11.233.10.145, and the Access type is “ssh” which indicates a
Secure Shell session.

Closing a Secure Shell Session

To terminate the Secure Shell session, issue the exit command. The following will display:

-> exit
Connection to 11.333.30.135 closed.

Using the example shown above, this display indicates the Secure Shell session between the two switches
is closed. At this point, the user is logged into the local OmniSwitch at IP address 11.233.10.145.

Log Into the Switch with Secure Shell FTP

To open a Secure Shell FTP session from a local OmniSwitch to a remote device, proceed as follows:

1 Log on to the OmniSwitch and issue the sftp CLI command. The command syntax requires you to

identify the IP address for the device to which you are connecting. The following command establishes a
Secure Shell FTP interface from the local OmniSwitch to IP address 10.222.30.125.

-> sftp 10.222.30.125
login as:

2 You must have a login and password that is recognized by the IP address you specify. When you enter

your login, the device you are logging in to will request your password as shown here.

-> sftp 10.222.30.125
login as: rrlogin2
rrlogin2's password for keyboard-interactive method:

OmniSwitch 6600 Family Switch Management Guide March 2005 page 1-13

Using Secure Shell Logging Into the Switch

3 After logging in, you will receive the sftp> prompt. You may enter a question mark (?) to view

available Secure Shell FTP commands and their definitions as shown here.

sftp>?

Available commands:
cd path Change remote directory to 'path'
lcd path Change local directory to 'path'
chmod mode path Change permissions of file 'path' to 'mode'
help Display this help text
get remote-path [local-path] Download file
lls [path]] Display local directory listing
ln oldpath newpath Symlink remote file
lmkdir path Create local directory
lpwd Print local working directory
ls [path] Display remote directory listing
mkdir path Create remote directory
put local-path [remote-path] Upload file
pwd Display remote working directory
exit Quit sftp
quit Quit sftp
rename oldpath newpath Rename remote file
rmdir path Remove remote directory
rm path Delete remote file
symlink oldpath newpath Symlink remote file
version Show SFTP version
? Synonym for help

Note. Although Secure Shell FTP has commands similar to the industry standard FTP, the underlying
protocol is different. See Chapter 2, “Managing System Files,” for a Secure Shell FTP application exam­ple.

Closing a Secure Shell FTP Session

To terminate the Secure Shell FTP session, issue the exit command. The following will display:

-> exit
Connection to 11.333.30.135 closed.

This display indicates the Secure Shell FTP session with IP address 11.333.20.135 is closed. The user is
now logged into the OmniSwitch as a local device with no active remote connection.

page 1-14 OmniSwitch 6600 Family Switch Management Guide March 2005