intellectual property laws. Dell™ and the Dell logo are trademarks of Dell Inc. in the United States and/or other
jurisdictions. All other marks and names mentioned herein may be trademarks of their respective companies.
2015 - 02
Rev. A00
Contents
1 About this Guide..................................................................................................37
Configure ACLs to Loopback........................................................................................................... 138
Applying an ACL on Loopback Interfaces........................................................................................138
IP Prefix Lists......................................................................................................................................139
AS Path.............................................................................................................................................. 190
Next Hop........................................................................................................................................... 190
Configuring an S5000 Switch Stack.................................................................................................912
Stack and Cable Requirements...................................................................................................912
Cables for Stacked Switches.......................................................................................................913
Accessing the Stack CLI..............................................................................................................914
Assigning a Priority to Stacked Switches....................................................................................914
Renumbering a Stack Unit.......................................................................................................... 914
Configuring Stacking Ports and Bringing Up a Stack.......................................................................915
Provisioning a Stack Unit..................................................................................................................920
Converting Four 10 GbE Ports to 40 GbE Ports for Stacking.........................................................920
Removing a Stack Group from Stacking Mode................................................................................921
Remove a Switch from a Stack.........................................................................................................921
Adding a Stack Unit........................................................................................................................... 921
Adding a Standalone Switch to a Stack............................................................................................922
Merging Two Stacks..........................................................................................................................923
Split a Stack....................................................................................................................................... 923
This guide describes the protocols and features supported on Dell Networking switches and routers by
the Dell Networking operating system (OS) and provides configuration instructions and examples for
implementing them.
The S5000 switch is available with Dell Networking OS version 9.1(1.0) and later version. It also supports
stacking.
Though this guide contains information on protocols, it is not intended to be a complete reference. This
guide is a reference for configuring protocols on Dell Networking systems. For complete information
about protocols, refer to other documentation including IETF Requests for Comment (RFCs). The
instructions in this guide cite relevant RFCs, and the Standards Compliance chapter contains a complete
list of the supported RFCs and Management Information Base files (MIBs).
Audience
This document is intended for system administrators who are responsible for configuring and maintaining
networks and assumes that you are knowledgeable in Layer 2 and Layer 3 networking technologies.
Conventions
This guide uses the following conventions to describe command syntax.
Keyword
parameterParameters are in italics and require a number or word to be entered in the CLI.
{X}Keywords and parameters within braces must be entered in the CLI.
[X]Keywords and parameters within brackets are optional.
x|yKeywords and parameters separated by a bar require you to choose one option.
x||yKeywords and parameters separated by a double bar allows you to choose any or
Keywords are in Courier (a monospaced font) and must be entered in the CLI as
listed.
all of the options.
Related Documents
For more information about the S5000 switch, refer to the following documents.
•Dell Networking S5000 Getting Started Guide
•Dell Networking S5000 Installation Guide
•Dell Command Line Reference Guide for the S5000 Switch
About this Guide
37
2
Configuration Fundamentals
The Dell Networking OS command line interface (CLI) is a text-based interface that you use to configure
interfaces and protocols.
The CLI is structured in modes for security and management purposes. Different sets of commands are
available in each mode, and you can limit user access to modes using privilege levels.
In Dell Networking OS, after you enable a command, it is entered into the running configuration file. You
can view the current configuration for the whole system or for a particular CLI mode. To save the current
configuration, copy the running configuration to another location. For more information, refer to Saving
the Running-Configuration.
Accessing the Command Line
Access the command line through a serial console port or a Telnet session as shown in the following
example.
When the system successfully boots, you enter the command line in EXEC mode (shown in bold).
NOTE: You must have a password configured on a virtual terminal line before you can Telnet into
the system. Therefore, you must use a console connection when connecting to the system for the
first time.
Logging into the System using Telnet
telnet 172.31.1.53
Trying 172.31.1.53...
Connected to 172.31.1.53.
Escape character is '^]'.
Login: username
Password:
Dell>
CLI Modes
Different sets of commands are available in each mode.
A command found in one mode cannot be executed from another mode (except for EXEC mode
commands preceded by the do command; for more information, refer to The do Command and EXEC
Privilege Mode commands).
You can set user access rights to commands and command modes using privilege levels; for more
information about privilege levels and security options, refer to Privilege Levels Overview.
The Dell Networking OS CLI is divided into three major mode levels:
38
Configuration Fundamentals
•EXEC mode — is the default mode and has a privilege level of 1, which is the most restricted level.
Only a limited selection of commands is available, notably the show commands, which allow you to
view system information.
•EXEC Privilege mode — has commands to view configurations, clear counters, manage configuration
files, run diagnostics, and enable or disable debug operations. The privilege level is 15, which is
unrestricted. You can configure a password for this mode; for more information, refer to Configuring
the Enable Password.
•CONFIGURATION mode — allows you to configure security features, time settings, set logging and
Beneath CONFIGURATION mode are sub-modes that apply to interfaces, protocols, and features. The
following example shows this sub-mode command structure. When configuring the chassis for the first
time, two sub-CONFIGURATION modes are important:
•INTERFACE sub-mode — is the mode in which you configure Layer 2 and Layer 3 protocols and IP
services specific to an interface. An interface can be physical (management interface, 10-Gigabit
Ethernet, 40-Gigabit Ethernet, or 2/4/8-Gigabit Universal Port) or logical (Loopback, Null, port
channel, or virtual local area network [VLAN]).
•LINE sub-mode — is the mode in which you to configure the console and virtual terminal lines.
NOTE: At any time, entering a question mark (?) displays the available command options. For
example, when you are in CONFIGURATION mode, entering the question mark first lists all the
available commands, including the possible sub-modes.
EXEC
EXEC Privilege
CONFIGURATION
AS-PATH ACL
INTERFACE
GIGABIT ETHERNET
TEN GIGABIT ETHERNET
FORTY GIGABIT ETHERNET
FIBRE CHANNEL
INTERFACE RANGE
LOOPBACK
MANAGEMENT ETHERNET
NULL
PORT-CHANNEL
VLAN
IP
IPv6
IP COMMUNITY-LIST
IP ACCESS-LIST
STANDARD ACCESS-LIST
EXTENDED ACCESS-LIST
LINE
CONSOLE
VIRTUAL TERMINAL
MAC ACCESS-LIST
MAC CONTROL-PLANE
MONITOR SESSION
MULTIPLE SPANNING TREE
Per-VLAN SPANNING TREE
RAPID SPANNING TREE
GVRP
LLDP
FIBRE CHANNEL
PREFIX-LIST
REDIRECT
ROUTE-MAP
The Dell Networking OS prompt changes to indicate the CLI mode.
The following table lists the CLI mode, its prompt, and information about how to access and exit the CLI
mode. Move linearly through the command modes, except for the end command which takes you
directly to EXEC Privilege mode and the exit command which moves you up one command mode level.
NOTE: Sub-CONFIGURATION modes all have the letters “conf” in the prompt with more modifiers
to identify the mode and slot/port information.
Table 1. Dell Networking OS Command Modes
CLI Command ModePromptAccess Command
EXEC
EXEC Privilege
CONFIGURATION
NOTE: Access all of the
following modes from
CONFIGURATION mode.
AS-PATH ACL
Gigabit Ethernet Interface
10 Gigabit Ethernet Interface
40 gigabit Ethernet Interface
Interface Range
Dell>
Dell#
Dell(conf)#
Dell(config-as-path)#ip as-path access-list
Dell(conf-if-gi-0/0)#
Dell(conf-if-te-0/0)#
Dell(conf-if-fo-1/0)#
Dell(conf-if-range)#
Access the router through the
console or Telnet.
•From EXEC mode, enter the
enable command.
•From any other mode, use
the end command.
•From EXEC privilege mode,
enter the configure
command.
•From every mode except
EXEC and EXEC Privilege,
enter the exit command.
interface (INTERFACE modes)
interface (INTERFACE modes)
interface (INTERFACE modes)
interface (INTERFACE modes)
Loopback Interface
Management Ethernet Interface
Null Interface
Port-channel Interface
Tunnel Interface
40
Dell(conf-if-lo-0)#
Dell(conf-if-ma-0/0)#
Dell(conf-if-nu-0)#
Dell(conf-if-po-0)#
Dell(conf-if-tu-0)#
interface (INTERFACE modes)
interface (INTERFACE modes)
interface (INTERFACE modes)
interface (INTERFACE modes)
interface (INTERFACE modes)
Configuration Fundamentals
CLI Command ModePromptAccess Command
VLAN Interface
STANDARD ACCESS-LIST
EXTENDED ACCESS-LIST
IP COMMUNITY-LIST
CONSOLE
VIRTUAL TERMINAL
STANDARD ACCESS-LIST
EXTENDED ACCESS-LIST
MULTIPLE SPANNING TREE
Per-VLAN SPANNING TREE Plus
PREFIX-LIST
Dell(conf-if-vl-0)#
Dell(config-std-nacl)#
interface (INTERFACE modes)
ip access-list standard (IP
ACCESS-LIST Modes)
Dell(config-ext-nacl)#
ip access-list extended (IP
ACCESS-LIST Modes)
Dell(config-community-
ip community-list
list)#
Dell(config-line-
line (LINE Modes)
console)#
Dell(config-line-vty)#
line (LINE Modes)
Dell(config-std-macl)#mac access-list standard
(MAC ACCESS-LIST Modes)
Dell(config-ext-macl)#mac access-list extended
(MAC ACCESS-LIST Modes)
Dell(config-mstp)#protocol spanning-tree
mstp
Dell(config-pvst)#protocol spanning-tree
pvst
Dell(conf-nprefixl)#ip prefix-list
RAPID SPANNING TREE
Dell(config-rstp)#protocol spanning-tree
rstp
GVRP
LLDP
FIBRE CHANNEL
REDIRECT
Dell (conf-gvrp)protocol gvrp
Dell (conf-lldp)protocol lldp
Dell (conf-fcoe)protocol fc
Dell (conf-redirect-
ip redirect-list
list)#
ROUTE-MAP
ROUTER BGP
ROUTER ISIS
ROUTER OSPF
ROUTER RIP
SPANNING TREE
TRACE-LIST
Dell (conf-route-map)#route-map
Dell(conf-router_bgp)#router bgp
Dell(conf-router_isis)#router isis
Dell(conf-router_ospf)#router ospf
Dell(conf-router_rip)#router rip
Dell(config-span)#protocol spanning-tree 0
Dell(conf-trace-acl)#ip trace-list
The following example shows how to change the command mode from CONFIGURATION mode to
PROTOCOL SPANNING TREE.
The S5000 switch uses following port numbering convention.
Odd-numbered ports are at the top and even-numbered ports are at the bottom of the I/O panel.
The following shows the fixed four 40GbE data ports and the four slots for pluggable modules on the
S5000 I/O panel. You can also use the 40GbE ports in 4 × 10GbE mode.
Figure 1. Port Numbering Convention
The S5000 supports the following possible modules:
•Twelve-Port Ethernet module (1G/10G speeds)
•Twelve-Port Universal Port module (2G/4G/8G/10G speeds)
You can install an Ethernet module in any slot (from 0 to 3) and a Universal Port module in slot 0 on the
I/O panel.
On the S5000, the valid stack-unit numbers are from 0 to 11. The valid port numbers for each interface
type are:
•1GbE: Ports from 0 to 47
•10GbE: Ports from 0 to 63
•40GbE: Ports 48, 52, 56, and 60
•Universal Port: Ports from 0 to 47
•Management: Port 0
•Fibre Channel: Ports from 0 to 11
The do Command
You can enter an EXEC mode command from any CONFIGURATION mode (CONFIGURATION,
INTERFACE, SPANNING TREE, and so on.) without having to return to EXEC mode by preceding the EXEC
mode command with the do command.
The following example shows the output of the do command.
-- Stack Info -Unit UnitType Status ReqTyp CurTyp Version Ports
---------------------------------------------------0 Management online S5000 S5000 9-0-1-0 64
1 Member not present
2 Member not present
3 Member not present
4 Member not present
5 Member not present
6 Member not present
7 Member not present
8 Member not present
9 Member not present
10 Member not present
11 Member not present
-- Module Info -Unit Module No Status Module Type Ports
When you enter a command, the command line is added to the running configuration file. Disable a
command and remove it from the running-config by entering the original command preceded by the no
command.
For example, to delete an ip address configured on an interface, use the no ip address ip-address
command, as shown in bold in the following example.
NOTE: To help you construct the “no” form of a command, use the help or ? command as
described in Obtaining Help.
shutdown
Dell(conf-if-te-5/1)#
Dell(conf-if-te-5/1)#show config
!
interface TenGigabitEthernet 5/1
no ip address
shutdown
Dell(conf-if-te-5/1)#
Layer 2 protocols are disabled by default. Enable them using the no disable command. For example, in
PROTOCOL SPANNING TREE mode, enter no disable to enable Spanning Tree.
no ip address
Configuration Fundamentals
43
Obtaining Help
Obtain a list of keywords and a brief functional description of those keywords at any CLI mode using
the ? or help command:
•To list the keywords available in the current mode, enter ? at the prompt or after a keyword.
•Enter ? after a prompt lists all of the available keywords. The output of this command is the same for
the help command.
•Enter ? after a partial keyword lists all of the keywords that begin with the specified letters.
•Enter [space]? after a keyword lists all of the keywords that can follow the specified keyword.
? Command Example
Dell#?
start Start Shell
capture Capture Packet
cd Change current directory
clear Reset functions
clock Manage the system clock
configure Configuring from terminal
copy Copy from one file to another
--More--
Keyword? Command Example
? after a partial keyword lists all of the keywords that begin with the specified letters.
Dell(conf)#cl?
class-map
clock
Dell(conf)#cl
Keyword ? Command Example
A keyword followed by [space]? lists all of the keywords that can follow the specified keyword.
Dell(conf)#clock ?
summer-time Configure summer (daylight savings) time
timezone Configure time zone
Dell(conf)#clock
Entering and Editing Commands
Notes for entering commands.
•The CLI is not case-sensitive.
•You can enter partial CLI keywords.
– Enter the minimum number of letters to uniquely identify a command. For example, you cannot
enter cl as a partial keyword because both the clock and class-map commands begin with the
letters “cl.” You can enter clo, however, as a partial keyword because only one command begins
with those three letters.
•The TAB key autocompletes keywords in commands. Enter the minimum number of letters to
uniquely identify a command.
•The UP and DOWN arrow keys display previously entered commands (refer to Command History).
•The BACKSPACE and DELETE keys erase the previous letter.
44
Configuration Fundamentals
•Key combinations are available to move quickly across the command line. The following table
describes these short-cut key combinations.
Short-Cut Key
Combination
CNTL-AMoves the cursor to the beginning of the command line.
CNTL-BMoves the cursor back one character.
CNTL-DDeletes character at cursor.
CNTL-EMoves the cursor to the end of the line.
CNTL-FMoves the cursor forward one character.
CNTL-ICompletes a keyword.
CNTL-KDeletes all characters from the cursor to the end of the command line.
CNTL-LRe-enters the previous command.
CNTL-NReturn to more recent commands in the history buffer after recalling commands
CNTL-PRecalls commands, beginning with the last command.
CNTL-RRe-enters the previous command.
CNTL-UDeletes the line.
CNTL-WDeletes the previous word.
Action
with CTRL-P or the UP arrow key.
CNTL-XDeletes the line.
CNTL-ZEnds continuous scrolling of command outputs.
Esc BMoves the cursor back one word.
Esc FMoves the cursor forward one word.
Esc DDeletes all characters from the cursor to the end of the word.
Command History
Dell Networking OS maintains a history of previously entered commands for each mode.
For example:
•When you are in EXEC mode, the UP and DOWN arrow keys display the previously entered EXEC
mode commands.
•When you are in CONFIGURATION mode, the UP or DOWN arrows keys recall the previously entered
CONFIGURATION mode commands.
Filtering show Command Outputs
Filter the output of a show command to display specific information by adding | [except | find |
grep | no-more | save]
The variable specified_text is the text for which you are filtering and it IS case sensitive unless you
use the
ignore-case sub-option.
specified_text after the command.
Configuration Fundamentals
45
The grep command accepts an ignore-case sub-option that forces the search to case-insensitive. For
example, the commands:
•show run | grep Ethernet returns a search result with instances containing a capitalized
“Ethernet,” such as interface TenGigabitEthernet 0/0.
•show run | grep ethernet would not return that search result because it only searches for
instances containing a non-capitalized “ethernet.”
•show run | grep Ethernet ignore-case returns instances containing both “Ethernet” and
“ethernet.”
The grep command displays only the lines containing specified text. The following example shows this
command used in combination with the do show stack-unit all stack-ports all pfc
NOTE: Dell Networking OS accepts a space or no space before and after the pipe. To filter a phrase
with spaces, underscores, or ranges, enclose the phrase with double quotation marks.
The except keyword displays text that does not match the specified text. The following example shows
this command used in combination with the do show stack-unit all stack-ports all pfc details | except 0 command.
Filtering Command Outputs with the except Command
Dell(conf)#do show stack-unit all stack-ports all pfc details | except 0
Admin mode is On
Admin is enabled
Local is enabled
Link Delay 45556 pause quantum
stack unit 1 stack-port all
Admin mode is On
Admin is enabled
The find keyword displays the output of the show command beginning from the first occurrence of
specified text. The following example shows this command used in combination with the do show
stack-unit all stack-ports all pfc details | find 0
command.
Filtering Command Outputs with the find Command
Dell(conf)#do show stack-unit all stack-ports all pfc details | find 0
stack unit 0 stack-port all
Admin mode is On
Admin is enabled
Local is enabled
Link Delay 45556 pause quantum
0 Pause Tx pkts, 0 Pause Rx pkts
stack unit 1 stack-port all
46
Configuration Fundamentals
The display command displays additional configuration information.
The no-more command displays the output all at once rather than one screen at a time. This is similar to
terminal length command except that the no-more option affects the output of the specified
the
command only.
The save command copies the output to a file for future reference.
NOTE: You can filter a single command output multiple times. The save option must be the last
option entered. For example: Dell# command | grep regular-expression | except
Dell Networking OS notifies all users when there are multiple users logged in to CONFIGURATION mode.
A warning message indicates the username, type of connection (console or VTY), and in the case of a VTY
connection, the IP address of the terminal on which the connection was established. For example:
•On the system that telnets into the switch, this message appears:
% Warning: The following users are currently configuring the system:
User "<username>" on line console0
•On the system that is connected over the console, this message appears:
% Warning: User "<username>" on line vty0 "10.11.130.2" is in configuration
mode
If either of these messages appears, Dell Networking recommends coordinating with the users listed in
the message so that you do not unintentionally overwrite each other’s configuration changes.
Configuration Fundamentals
47
3
Getting Started
This chapter helps you get started using the S5000.
Accessing Ports
The S5000 has two management ports available for system access — a console port and a universal serial
bus (USB)-B port.
The USB-B port acts the same as the console port. The terminal settings are the same for both access
ports.
Accessing the RJ-45/RS-232 Console Port
The RS-232/RJ-45 console port is labeled on the lower left-hand side of the S5000 system as you face
the Utility side of the chassis.
NOTE: Before starting this procedure, be sure that you have a terminal emulation program already
installed on your PC.
Figure 2. RS-232/RJ-45 Console Port
To access the console port, follow these steps.
1.Install an RJ-45 copper cable into the console port. Use a rollover (crossover) cable to connect the
S5000 console port to a terminal server.
2.Connect the other end of the cable to the DTE terminal server.
3.Terminal settings on the console port cannot be changed in the software and are set as follows:
•9600 baud rate
•No parity
•8 data bits
•1 stop bit
48
Getting Started
•No flow control
Pin Assignments
You can connect to the console using a RJ-45 to RJ-45 rollover cable and a RJ-45 to DB-9 female DTE
adapter to a terminal server (for example, a PC).
The pin assignments between the console and a DTE terminal server are as follows:
Table 2. Pin Assignments Between the Console and a DTE Terminal Server
Console PortRJ-45 to RJ-45
Rollover Cable
SignalRJ-45 PinoutRJ-45 PinoutDB-9 PinSignal
RTS188CTS
NC276DSR
TxD362RxD
GND455GND
GND545GND
RxD633TxD
NC724DTR
CTS817RTS
RJ-45 to RJ-45
Rollover Cable
RJ-45 to DB-9
Adapter
Terminal Server
Device
Accessing the CLI Interface and Running Scripts Using
SSH
In addition to the capability to access a device using a console connection or a Telnet session, you can
also use SSH for secure, protected communication with the device. You can open an SSH session and run
commands or script files. This method of connectivity is supported with S4810, S4048–ON, S3048–ON,
S4820T, and Z9000 switches and provides a reliable, safe communication mechanism.
Entering CLI commands Using an SSH Connection
You can run CLI commands by entering any one of the following syntax to connect to a switch using the
preconfigured user credentials using SSH:
ssh username@hostname <CLI Command>
or
echo <CLI Command> | ssh admin@hostname
The SSH server transmits the terminal commands to the CLI shell and the results are displayed on the
screen non-interactively.
Executing Local CLI Scripts Using an SSH Connection
You can execute CLI commands by entering a CLI script in one of the following ways:
Getting Started
49
ssh username@hostname <CLIscript.file>
or
cat < CLIscript.file > | ssh admin@hostname
The script is run and the actions contained in the script are performed.
Following are the points to remember, when you are trying to establish an SSH session to the device to
run commands or script files:
•There is an upper limit of 10 concurrent sessions in SSH. Therefore, you might expect a failure in
executing SSH-related scripts.
•To avoid denial of service (DoS) attacks, a rate-limit of 10 concurrent sessions per minute in SSH is
devised. Therefore, you might experience a failure in executing SSH-related scripts when multiple
short SSH commands are executed.
•If you issue an interactive command in the SSH session, the behavior may not really be interactive.
•In some cases, when you use an SSH session, when certain show commands such as show tech-
support
truncated and not displayed. This may cause one of the commands to fail for syntax error. In such
cases, if you add few newline characters before the failed command, the output displays completely.
Execution of commands on CLI over SSH does not notice the errors that have occurred while executing
the command. As a result, you cannot identify, whether a command has failed to be processed. The
console output though is redirected back over SSH.
produce large volumes of output, sometimes few characters from the output display are
Default Configuration
A version of Dell Networking OS is pre-loaded onto the chassis; however, the system is not configured
when you power up for the first time (except for the default hostname, which is Dell). You must
configure the system using the CLI.
Accessing the USB-B Console Port
When you connect the USB-B port, it becomes the primary connection and, when the system is
connected, it sends all messages to the USB-B drive.
The terminal settings are the same for the USB-B port and the console port.
1.Power on the PC (Dell Networking recommends using the XP operating system).
2.Connect the USB-A end of cable into an available USB port on the PC.
3.Connect the USB-B end of cable into the USB-B console port on the S5000.
4.Power on the S5000.
5.Install the necessary USB device drivers (you need an internet connection). For assistance, contact
Dell Networking Technical Support.
6.Open your terminal software emulation program to access the S5000.
7.Set the terminal connection settings.
•9600 baud rate
•No parity
•8 data bits
•1 stop bit
50
Getting Started
•No flow control
The command line interface (CLI) prompt appears (Dell>_) when you are connected to the S5000.
NOTE: Only one of the console ports can be active at a time; by default, the USB console takes
priority over the RJ-45 console. When a USB host (PC) is plugged into the USB console port, the
hardware automatically switches over to use the USB console. When the USB cable is removed or
the PC deactivates the USB connection, the hardware automatically switches to the RJ-45 console
interface.
Booting Process
After you set up the S5000 as described in the installation procedure in the S5000 Getting Started Guide,
the switch boots up.
The following example shows an example of the completed boot process.
Completed Boot Process
U-Boot 2012.04(Dell Networking)
Built by build at tools-sjc-01 on Tue Jan 15 0:50:03 2013
S5000 Boot Selector Label 1.3.0.0m
CPU0: P2020, Version: 2.1, (0x80e20021)
Core: E500, Version: 5.1, (0x80211051)
.
<lines skipped>
.
Board: S5000 Dell CPU
CPLD: S5000 CPLD Rev 41
Board Revision 1
.
<lines skipped>
.
Boot Selector set to Bootflash Partition A image...
Verifying Copyright Information..success for Image - 0
Boot Selector: Booting Bootflash Partition A image...
Copying stage-2 loader from 0x800000 to 0x7f800000(size = 0x200000)
F10 Boot Image selection DONE.
## Starting application at 0x7F800090 ...
U-Boot 2012.04(Dell Networking)
Built by build at tools-sjc-01 on Thu Mar 14 16:45:06 2013
S5000 Boot Loader Label 1.3.1.1p
<lines skipped>
.
Mgmt MAC Addr: 5C:F9:DD:EF:0A:42
SF: Detected W25Q128 with page size 4 KiB, total 16 MiB
Hit any key to stop autoboot: 0
Loading POST from Bootflash Partition A
## Starting application at 0x78000000 ...
.
.
<lines skipped>
.
auto-booting...
Booting PRIMARY configuration...
boot device : tftp
file name : Dell-SH-9-0-1-0.bin
Management Etherenet IP address : 10.11.210.35/16
Server IP address : 10.11.8.13
Default Gateway IP address : 10.11.210.63
Getting Started
51
Management Etherenet MAC address : 5C:F9:DD:EF:0A:42
Management ethernet Port Configuration: Auto Negotiate
Using e1000#0 device
TFTP from server 10.11.8.13; our IP address is 10.11.210.35
Filename 'Dell-SH-9-0-1-0.bin'.
Load address: 0x6400000
Loading: #
Detected Dell image. Downloading only kernel...(8268092 bytes)
################################################################
#################################################################
#################################################################
#################################################################
#################################################################
#################################################################
#################################################################
#################################################################
############################################
done
Bytes transferred = 8269244 (7e2dbc hex)
Booting Dell image
<lines skipped>
.
.
RELEASE IMAGE HEADER DATA :
--------------------------
Release Image Created 2013/4/15 - 18:11:28
SOFTWARE IMAGE HEADER DATA :
----------------------------
Software Image[1] Img file Name : CPRPLP-RPM-AP-9-0-1-0.bin
Software Image[2] Img file Name : NBSDPCPRPLP-RPM-AP-9-0-1-0.bin
00:00:38: %STKUNIT0-M:CP %RAM-6-ELECTION_ROLE: Stack unit 0 is transitioning to
Management unit.
00:00:39: %STKUNIT0-M:CP %CHMGR-5-STACKUNITDETECTED: Stack unit 0 present
00:00:44: %S5000:0 %POLLMGR-2-USER_FLASH_STATE: USB flash disk missing in
'usbflash:'
00:03:01: %STKUNIT0-M:CP %CHMGR-5-MODULE_INSERTED: FC module has been inserted
in stack-unit 0
optional slot 0
00:03:01: %STKUNIT0-M:CP %CHMGR-5-MODULE_INSERTED: SFP+ module has been
inserted in stack-unit 0
optional slot 1
00:03:01: %STKUNIT0-M:CP %CHMGR-5-MODULE_INSERTED: SFP+ module has been
inserted in stack-unit 0
optional slot 2
00:03:01: %STKUNIT0-M:CP %CHMGR-5-MODULE_INSERTED: SFP+ module has been
inserted in stack-unit 0
optional slot 3
00:03:01: %STKUNIT0-M:CP %CHMGR-5-CHECKIN: Checkin from Stack unit 0 (type
S5000, 64 ports)
00:03:02: %STKUNIT0-M:CP %CHMGR-2-FANTRAY_UP: Fan Tray 1 in unit 0 is up
00:03:02: %STKUNIT0-M:CP %CHMGR-2-FANTRAY_UP: Fan Tray 2 in unit 0 is up
00:03:03: %STKUNIT0-M:CP %CHMGR-0-PS_UP: Power supply 0 in unit 0 is up
00:03:04: %STKUNIT0-M:CP %CHMGR-0-PS_UP: Power supply 1 in unit 0 is up
00:03:04: %STKUNIT0-M:CP %CHMGR-5-STACKUNITUP: Stack unit 0 is up
00:03:05: %STKUNIT0-M:CP %CHMGR-5-SYSTEM_READY: System ready
00:03:05: %STKUNIT0-M:CP %RAM-5-STACK_STATE: Stack unit 0 is in Active State.
52
Getting Started
00:03:05: %STKUNIT0-M:CP %IFMGR-5-OSTATE_UP: Changed interface state to up: Ma
0/0
00:03:17: %STKUNIT0-M:CP %CHMGR-1-PSU_FAN_STATUS: Fan 0 in PSU 0 of Unit 0 is up
00:03:17: %STKUNIT0-M:CP %CHMGR-1-PSU_FAN_STATUS: Fan 0 in PSU 1 of Unit 0 is up
Dell>00:03:24: %STKUNIT0-M:CP %SEC-5-LOGIN_SUCCESS: Login successful for user
on line console
Dell>
Dell>
Dell>enable
Dell#
========== end of boot up process =============
Enter the Initial Configuration Information
To set up the switch, assign an IP address and other configuration information necessary for the switch to
communicate with the local routers and the Internet.
The minimal configuration provided here does not cover most of the features; it simply allows you to
perform other configuration tasks using a Telnet connection from your management network.
You need this information from your network administrator:
•Switch IP address
•Subnet mask (IP netmask)
•Default gateway (router)
•Enable secret password
•Enable password
•Telnet password
Configuring the Enable Password
Access EXEC Privilege mode using the enable command. EXEC Privilege mode is unrestricted by default.
Configure a password as a basic security measure.
There are two types of enable passwords:
•enable password stores the password in the running/startup configuration using a DES encryption
method.
•enable secret is stored in the running/startup configuration in using a stronger, MD5 encryption
method.
Dell Networking recommends using the enable secret password.
To configure an enable password, use the following command.
•Create a password to access EXEC Privilege mode.
CONFIGURATION mode
– level: is the privilege level, is 15 by default, and is not required.
Getting Started
53
– encryption-type: specifies how you are inputting the password, is 0 by default, and is not
required.
*0 is for inputting the password in clear text.
*7 is for inputting a password that is already encrypted using a DES hash. Obtain the encrypted
password from the configuration file of another S5000 switch.
*5 is for inputting a password that is already encrypted using an MD5 hash. Obtain the
encrypted password from the configuration file of another S5000 switch.
Configuring a Host Name
The host name appears in the prompt. The default host name is Dell.
•Host names must start with a letter and end with a letter or digit.
•Characters within the string can be letters, digits, and hyphens.
To create a host name, use the following command.
•Create a host name.
CONFIGURATION mode
hostname name
Example of the hostname Command
Dell(conf)#hostname R1
R1(conf)#
Navigating CLI Modes
The Dell prompt changes to indicate the CLI mode.
You must move linearly through the command modes, except for the end command which takes you
directly to EXEC Privilege mode and the exit command which moves you up one command mode level.
Default Configuration
A version of Dell Networking OS is pre-loaded onto the chassis; however, the system is not configured
when you power up for the first time (except for the default hostname, which is Dell). You must
configure the system using the CLI.
Configuring Layer 2 (Data Link) Mode
To enable Layer 2 data transmissions through an individual interface, use the switchport command in
INTERFACE mode
You cannot configure switching or Layer 2 protocols such as spanning tree protocol (STP) on an interface
unless the interface is set to Layer 2 mode.
1.Enable the interface.
INTERFACE mode
no shutdown
2.Place the interface in Layer 2 (switching) mode.
54
Getting Started
INTERFACE mode
switchport
To view the interfaces in Layer 2 mode, use the show interfaces switchport command in EXEC
mode.
Accessing the System Remotely
You can configure the system to access it remotely by Telnet or SSH. The system has a dedicated
management port and a management routing table that is separate from the IP routing table.
Configuring the system for Telnet is a three-step process:
1.Configure an IP address for the management port. Configure the Management Port IP Address
2.Configure a management route with a default gateway. Configure a Management Route
3.Configure a username and password. Configuring a Username and Password
Configure the Management Port IP Address
To access the system remotely, assign IP addresses to the management ports.
NOTE: Assign different IP addresses to each stack-unit’s management port.
1.Enter INTERFACE mode for the Management port.
CONFIGURATION mode
interface ManagementEthernet slot/port
•slot: the range is from 0 to 11.
•port: the range is 0.
2.Assign an IP address to the interface.
INTERFACE mode
ip address ip-address/mask
•ip-address: an address in dotted-decimal format (A.B.C.D).
•mask: a subnet mask in /prefix-length format (/ xx).
3.Enable the interface.
INTERFACE mode
no shutdown
Configure a Management Route
Define a path from the system to the network from which you are accessing the system remotely.
Management routes are separate from IP routes and are only used to manage the system through the
management port.
To configure a management route, use the following command.
•Configure a management route to the network from which you are accessing the system.
CONFIGURATION mode
Getting Started
55
management route ip-address/mask gateway
– ip-address: the network address in dotted-decimal format (A.B.C.D).
– mask: a subnet mask in /prefix-length format (/ xx).
– gateway: the next hop for network traffic originating from the management port.
Configuring a Username and Password
To access the system remotely, configure a system username and password.
To configure a system username and password, use the following command.
•Configure a username and password to access the system remotely.
CONFIGURATION mode
– encryption-type: specifies how you are inputting the password, is 0 by default, and is not
required.
*0 is for inputting the password in clear text.
*7 is for inputting a password that is already encrypted using a Type 7 hash. Obtaining the
encrypted password from the configuration of another S5000 switch.
Creating a Port-based VLAN
The default virtual local area network (VLAN) (VLAN 1) is part of the system startup configuration and
does not require configuration.
To configure a port-based VLAN, create the VLAN and then add physical interfaces or port channel (LAG)
interfaces to the VLAN.
•Configure a port-based VLAN (if the vlan-id is different from the default VLAN ID) and enter
INTERFACE VLAN mode.
CONFIGURATION mode
interface vlan vlan-id
After you create a VLAN, to activate the VLAN, assign interfaces in Layer 2 mode to the VLAN.
To view the configured VLANs, use the show vlan command in EXEC Privilege mode.
Assigning Interfaces to a VLAN
You can only assign interfaces in Layer 2 mode to a VLAN using the tagged and untagged commands.
To place an interface in Layer 2 mode, use the switchport command.
You can designate Layer 2 interfaces as tagged or untagged. When you place an interface in Layer 2
mode using the switchport command, the interface is automatically designated untagged and placed
in the default VLAN.
To view which interfaces are tagged or untagged and to view which VLAN the interfaces belong, use the
show vlan command. To view just the interfaces that are in Layer 2 mode, use the show interfaces
switchport
command in EXEC Privilege mode or EXEC mode.
56
Getting Started
To tag frames leaving an interface in Layer 2 mode, assign that interface to a port-based VLAN to tag it
with that VLAN ID.
1.Access the INTERFACE VLAN mode of the VLAN to which you want to assign the interface.
CONFIGURATION mode
interface vlan vlan-id
2.Enable an interface to include the IEEE 802.1Q tag header.
INTERFACE mode
tagged interface
3.To move untagged interfaces from the default VLAN to another VLAN, use the untagged command.
Access the INTERFACE VLAN mode of the VLAN to which you want to assign the interface.
CONFIGURATION mode
interface vlan vlan-id
4.Configure an interface as untagged. This command is available only in VLAN interfaces.
INTERFACE mode
untagged interface
Assigning an IP Address to a VLAN
VLANs are a Layer 2 feature. For two physical interfaces on different VLANs to communicate, assign an IP
address to the VLANs to route traffic between the two interfaces. The shutdown command in
INTERFACE mode does not affect Layer 2 traffic on the interface.
NOTE: You cannot assign an IP address to the default VLAN, which, by default, is VLAN1. To assign
another VLAN ID to the default VLAN, use the default vlan-id vlan-id command.
•Configure an IP address and mask on the interface.
INTERFACE mode
ip address ip-address mask [secondary]
Connect the S5000 to the Network
After you have completed the hardware installation and software configuration for the S5000 system, you
can connect to your company network by following your company’s cabling requirements.
Configure File Management
You can store on and access files from various storage media. Rename, delete, and copy files on the
system from the EXEC Privilege mode.
NOTE: Using flash memory cards in the system that have not been approved by Dell Networking
can cause unexpected system behavior, including a reboot.
Getting Started
57
Copying Files to and from the System
The command syntax for copying files is similar to UNIX. The copy command uses the format copy source-file-url destination-file-url.
NOTE: For a detailed description of the copy command, refer to the Dell Networking OS Command Line Reference Guide.
•To copy a local file to a remote system, combine the file-origin syntax for a local file location with the
file-destination syntax for a remote file location.
•To copy a remote file to Dell Networking system, combine the file-origin syntax for a remote file
location with the file-destination syntax for a local file location.
•You may not copy a file from one remote system to another.
•You may not copy a file from one location to the same location.
•When copying to a server, you can only use a hostname if a domain name server (DNS) server is
configured.
•After you insert a USB memory device into the USB port on an S5000 and enter the format usbflash:// command, to erase all existing files and reformat the file system on the device, allow
the process to run to completion before removing the device from the USB port. If you remove the
USB memory device before the formatting is complete, the Dell Networking OS may not recognize
the file system on the device.
Example of Copying a file to a Remote System
The following shows an example of using the copy command to save a file to an FTP server.
This feature enables you to quickly access data on an NFS mounted file system. You can perform file
operations on an NFS mounted file system using supported file commands.
This feature allows an NFS mounted device to be recognized as a file system. This file system is visible on
the device and you can execute all file commands that are available on conventional file systems such as
a Flash file system.
Before executing any CLI command to perform file operations, you must first mount the NFS file system
to a mount-point on the device. Since multiple mount-points exist on a device, it is mandatory to specify
the mount-point to which you want to load the system. The /f10/mnt/nfsdirectory is the root of all
mount-points.
To mount an NFS file system, perform the following steps:
Table 4. Mounting an NFS File System
File OperationSyntax
To mount an NFS file system:
The foreign file system remains mounted as long as the device is up and does not reboot. You can run
the file system commands without having to mount or un-mount the file system each time you run a
command. When you save the configuration using the write command, the mount command is saved
to the startup configuration. As a result, each time the device re-boots, the NFS file system is mounted
during start up.
•You cannot copy a file from one remote system to another.
•You cannot copy a file from one location to the same location.
•When copying to a server, you can only use a hostname if a domain name server (DNS) server is
configured.
Getting Started
59
Example of Copying a File to current File System
Dell#copy tftp://10.16.127.35/mashutosh/dv-maa-s4810-test nfsmount://
Destination file name [dv-maa-s4810-test]:
!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
!!!!!!!!!!!!!!!!!!!!!!!!!.!
44250499 bytes successfully copied
Dell#
Dell#copy ftp://10.16.127.35 nfsmount:
Source file name []: test.c
User name to login remote host: mashutosh
Example of Logging in to Copy from NFS Mount
Dell#copy nfsmount:///test flash:
Destination file name [test]: test2
!
5592 bytes successfully copied
Dell#
Dell#copy nfsmount:///test.txt ftp://10.16.127.35
Destination file name [test.txt]:
User name to login remote host: mashutosh
Password to login remote host:
!
Example of Copying to NFS Mount
Dell#copy flash://test.txt nfsmount:///
Destination file name [test.txt]:
!
15 bytes successfully copied
Dell#copy flash://ashu/capture.txt.pcap nfsmount:///
Destination file name [test.txt]:
!
15 bytes successfully copied
Dell#copy flash://ashu/capture.txt.pcap nfsmount:///ashutosh/snoop.pcap
!
24 bytes successfully copied
Dell#
Dell#copy tftp://10.16.127.35/mashutosh/dv-maa-s4810-test ?
flash: Copy to local file system ([flash://]filepath)
nfsmount: Copy to nfs mount file system (nfsmount:///filepath)
running-config remote host:
Destination file name [test.c]:
!
225 bytes successfully copied
Dell#
Saving the Running-Configuration
The running-configuration contains the current system configuration. Dell Networking recommends
coping your running-configuration to the startup-configuration.
The system uses the startup-configuration during boot-up to configure the system. The startupconfiguration is stored in the internal flash on the IOM by default, but you can save the startupconfiguration to a USB flash device or on a remote server.
NOTE: The commands in this section follow the same format as those in Copying Files to and from
the System but use the filenames startup-configuration and running-configuration. These
commands assume that current directory is the internal flash, which is the system default.
•Save the running-configuration to the startup-configuration on the internal flash.
60
Getting Started
EXEC Privilege mode
copy running-config startup-config
•Save the running-configuration to the usb flash on the IOM.
EXEC Privilege mode
copy running-config usbflash://filename
•Save the running-configuration to an FTP server.
EXEC Privilege mode
NOTE: When copying to a server, you can only use a hostname if you configured a DNS server.
Viewing Files
You can only view file information and content on local file systems.
To view a list of files or the contents of a file, use the following commands.
•View a list of files on the internal flash.
EXEC Privilege mode
dir flash:
•View a list of files on the usbflash.
EXEC Privilege mode
dir usbflash:
•View the contents of a file in the internal flash.
EXEC Privilege mode
show file flash://filename
•View the contents of a file in the usb flash.
EXEC Privilege mode
show file usbflash://filename
•View the running-configuration.
EXEC Privilege mode
show running-config
•View the startup-configuration.
Getting Started
61
EXEC Privilege mode
show startup-config
Example of the dir Command
The output of the dir command also shows the read/write privileges, size (in bytes), and date of
modification for each file.
Dell#dir
Directory of flash:
1 drwx 4096 Jan 01 1980 00:00:00 +00:00 .
2 drwx 2048 May 10 2011 14:45:15 +00:00 ..
3 drwx 4096 Feb 17 2011 00:28:00 +00:00 TRACE_LOG_DIR
4 drwx 4096 Feb 17 2011 00:28:02 +00:00 CORE_DUMP_DIR
5 d--- 4096 Feb 17 2011 00:28:02 +00:00 ADMIN_DIR
6 -rwx 1272 Apr 29 2011 16:15:14 +00:00 startup-config
7 -rwx 10093 Feb 17 2011 20:48:02 +00:00 abhi-jan26.cfg
8 -rwx 217155 Feb 22 2011 23:14:34 +00:00 show-tech-cfg.txt
9 -rwx 5162 Mar 02 2011 04:02:58 +00:00 runn-feb6
10 -rwx 10507 Mar 03 2011 01:17:16 +00:00 abhi-feb7.cfg
11 -rwx 4 May 06 2011 22:05:06 +00:00 dhcpBindConflict
12 -rwx 6900 Feb 17 2011 04:43:12 +00:00 startup-config.bak
13 -rwx 1244038 Feb 13 2011 04:27:16 +00:00 f10cp_sysd_110213042625.acore.gz
flash: 2143281152 bytes total (2123755520 bytes free)
--More--
View Configuration Files
Configuration files have three commented lines at the beginning of the file, as shown in the following
example, to help you track the last time any user made a change to the file, which user made the
changes, and when the file was last saved to the startup-configuration.
In the running-configuration file, if there is a difference between the timestamp on the “Last
configuration change,” and “Startup-config last updated,” you have made changes that have not been
saved and will not be preserved after a system reboot.
Example of the show running-config Command
Dell#show running-config
Current Configuration ...
! Version 9-0(1-0)
! Last configuration change at Mon Jun 10 21:20:04 2030 by admin
!
boot system stack-unit 0 primary system: B:
boot system stack-unit 0 secondary tftp://10.200.200.241/kp-diablo
boot system stack-unit 0 default tftp://10.11.200.241/kp-diablo
!
redundancy auto-synchronize full
!
service timestamps log datetime
!
hostname Dell
!
enable password 7 b125455cf679b208e79b910e85789edf
!
username admin password 7 1d28e9f33f99cf5c
!
stack-unit 0 provision S5000
!
The functionality to optimize and reduce the sizes of the configuration files is supported on the device.
You can compress the running configuration by grouping all the VLANs and the physical interfaces with
the same property. Support to store the operating configuration to the startup config in the compressed
mode and to perform an image downgrade without any configuration loss are provided.
You can create groups of VLANs using the interface group command. This command will create
non-existant VLANs specified in a range. On successful command execution, the CLI switches to the
interface group context. The configuration commands inside the group context will be the similar to that
of the existing range command.
Two existing exec mode CLIs are enhanced to display and store the running configuration in the
compressed mode.
show running-config compressed and write memory compressed
The compressed configuration will group all the similar looking configuration thereby reducing the size
of the configuration. For this release, the compression will be done only for interface related
configuration (VLAN & physical interfaces)
The following table describes how the standard and the compressed configuration differ:
int vlan 2
no ip address
no shut
int te 1/1
no ip address
switchport
shut
Dell# show running-config
<snip>
!
interface TenGigabitEthernet 1/1
int vlan 3
tagged te 1/1
no ip address
shut
int te 1/2
no ip address
shut
int vlan 4
tagged te 1/1
no ip address
shut
int te 1/3
no ip address
shut
int vlan 5
tagged te 1/1
no ip address
shut
int te 1/4
no ip address
shut
Dell# show running-config compressed
<snip>
!
interface TenGigabitEthernet 1/1
int vlan 100
no ip address
no shut
int te 1/10
no ip address
shut
int vlan 1000
ip address
1.1.1.1/16
no shut
int te 1/34
ip address
2.1.1.1/16
shut
Getting Started
63
no ip address
no ip address
switchport
shutdown
!
interface TenGigabitEthernet 1/2
no ip address
shutdown
!
interface TenGigabitEthernet 1/3
no ip address
shutdown
!
interface TenGigabitEthernet 1/4
no ip address
shutdown
!
interface TenGigabitEthernet 1/10
no ip address
shutdown
!
interface TenGigabitEthernet 1/34
ip address 2.1.1.1/16
shutdown
!
interface Vlan 2
no ip address
no shutdown
!
switchport
shutdown
!
Interface group TenGigabitEthernet 1/2 – 4 ,
TenGigabitEthernet 1/10
no ip address
shutdown
!
interface TenGigabitEthernet 1/34
ip address 2.1.1.1/16
shutdown
!
interface group Vlan 2 , Vlan 100
no ip address
no shutdown
!
interface group Vlan 3 – 5
tagged te 1/1
no ip address
shutdown
!
interface Vlan 1000
ip address 1.1.1.1/16
no shutdown
!
<snip>
Compressed config size – 27 lines.
interface Vlan 3
tagged te 1/1
64
Getting Started
no ip address
shutdown
!
interface Vlan 4
tagged te 1/1
no ip address
shutdown
!
interface Vlan 5
tagged te 1/1
no ip address
shutdown
!
interface Vlan 100
no ip address
no shutdown
!
interface Vlan 1000
ip address 1.1.1.1/16
no shutdown
Uncompressed config size – 52 lines
write memory compressed
The write memory compressed CLI will write the operating configuration to the startup-config file in the
compressed mode. In stacking scenario, it will also take care of syncing it to all the standby and member
units.
The following is the sample output:
Dell#write memory compressed
!
Jul 30 08:50:26: %STKUNIT0-M:CP %FILEMGR-5-FILESAVED: Copied running-config to
startup-config in flash by default
copy compressed-config
Getting Started
65
Copy one file, after optimizing and reducing the size of the configuration file, to another location. Dell
Networking OS supports IPv4 and IPv6 addressing for FTP, TFTP, and SCP (in the hostip field).
Managing the File System
The S5000 switch can use the internal Flash, external Flash, or remote devices to store files.
The system stores files on the internal Flash by default but can be configured to store files elsewhere.
To view file system information, use the following command.
•View information about each file system.
EXEC Privilege mode
show file-systems
The output of the show file-systems command in the following example shows the total capacity,
amount of free memory, file structure, media type, read/write privileges for each storage device in use.
Enabling Software Features on Devices Using a Command
Option
This capability to activate software applications or components on a device using a command is
supported on the S4810, S4820T, and S6000, platforms.
Starting with Release 9.4(0.0), you can enable or disable specific software functionalities or applications
that need to run on a device by using a command attribute in the CLI interface. This capability enables
effective, streamlined management and administration of applications and utilities that run on a device.
You can employ this capability to perform an on-demand activation or turn-off of a software component
or protocol. A feature configuration file that is generated for each image contains feature names denotes
whether this enabling or disabling method is available for such features. In 9.4(0.0), you can enable or
disable the VRF application globally across the system by using this capability.
You can activate VRF application on a device by using the feature vrf command in CONFIGURATION
mode.
NOTE: The no feature vrf command is not supported on any of the platforms.
To enable the VRF feature and cause all VRF-related commands to be available or viewable in the CLI
interface, use the following command. You must enable the VRF feature before you can configure its
related attributes.
Dell(conf)# feature vrf
Based on whether VRF feature is identified as supported in the Feature Configuration file, configuration
command feature vrf becomes available for usage. This command will be stored in running-configuration
and will precede all other VRF-related configurations.
NOTE: The MXL and Z9000 platforms currently do not support VRF. These platforms support only
the management and default VRFs, which are available by default. As a result, the feature vrf
command is not available for these platforms.
To display the state of Dell Networking OS features:
Dell#show feature
Example of show feature output
For a particular target where VRF is enabled, the show output is similar to the following:
Feature State
------------------------------
VRF enabled
View Command History
The command-history trace feature captures all commands entered by all users of the system with a time
stamp and writes these messages to a dedicated trace log buffer.
The system generates a trace message for each executed command. No password information is saved
to the file.
Getting Started
67
To view the command-history trace, use the show command-history command.
Example of the show command-history Command
Dell#show command-history
[5/18 21:58:32]: CMD-(TEL0):[enable]by admin from vty0 (10.11.68.5)
[5/18 21:58:48]: CMD-(TEL0):[configure]by admin from vty0 (10.11.68.5)
- Repeated 1 time.
[5/18 21:58:57]: CMD-(TEL0):[interface port-channel 1]by admin from vty0
(10.11.68.5)
[5/18 21:59:9]: CMD-(TEL0):[show config]by admin from vty0 (10.11.68.5)
[5/18 22:4:32]: CMD-(TEL0):[exit]by admin from vty0 (10.11.68.5)
[5/18 22:4:41]: CMD-(TEL0):[show interfaces port-channel brief]by admin from
vty0
(10.11.68.5)
Upgrading and Downgrading Dell Networking OS
To upgrade or downgrade Dell Networking OS, refer to the Release Notes for the version you want to
load on the system.
Using Hashes to Validate Software Images
You can use the MD5 message-digest algorithm or SHA256 Secure Hash Algorithm to validate the
software image on the flash drive, after the image has been transferred to the system, but before the
image has been installed. The validation calculates a hash value of the downloaded image file on system’s
flash drive, and, optionally, compares it to a Dell Networking published hash for that file.
The MD5 or SHA256 hash provides a method of validating that you have downloaded the original
software. Calculating the hash on the local image file, and comparing the result to the hash published for
that file on iSupport, provides a high level of confidence that the local copy is exactly the same as the
published software image. This validation procedure, and the verify {md5 | sha256} command to support
it, can prevent the installation of corrupted or modified images.
The verify {md5 | sha256} command calculates and displays the hash of any file on the specified local
flash drive. You can compare the displayed hash against the appropriate hash published on i-Support.
Optionally, the published hash can be included in the verify {md5 | sha256} command, which will display
whether it matches the calculated hash of the indicated file.
To validate a software image:
1.Download Dell Networking OS software image file from the iSupport page to the local (FTP or TFTP)
server. The published hash for that file is displayed next to the software image file on the iSupport
page.
2.Go on to the Dell Networking system and copy the software image to the flash drive, using the copy
command.
3.Run the verify {md5 | sha256} [ flash://]img-file [hash-value] command. For example, verify sha256
flash://FTOS-SE-9.5.0.0.bin
4.Compare the generated hash value to the expected hash value published on the iSupport page.
68
Getting Started
To validate the software image on the flash drive after the image has been transferred to the system, but
before the image has been installed, use the verify {md5 | sha256} [ flash://]img-file [hash-value]
command in EXEC mode.
•md5: MD5 message-digest algorithm
•sha256: SHA256 Secure Hash Algorithm
•flash: (Optional) Specifies the flash drive. The default is to use the flash drive. You can just enter the
image file name.
•hash-value: (Optional). Specify the relevant hash published on i-Support.
•img-file: Enter the name of the Dell Networking software image file to validate
Examples: Without Entering the Hash Value for Verification
MD5
Dell# verify md5 flash://FTOS-SE-9.5.0.0.bin
MD5 hash for FTOS-SE-9.5.0.0.bin: 275ceb73a4f3118e1d6bcf7d75753459
SHA256
Dell# verify sha256 flash://FTOS-SE-9.5.0.0.bin
SHA256 hash for FTOS-SE-9.5.0.0.bin:
e6328c06faf814e6899ceead219afbf9360e986d692988023b749e6b2093e933
Examples: Entering the Hash Value for Verification
MD5
Dell# verify md5 flash://FTOS-SE-9.5.0.0.bin 275ceb73a4f3118e1d6bcf7d75753459
MD5 hash VERIFIED for FTOS-SE-9.5.0.0.bin
SHA256
Dell# verify sha256 flash://FTOS-SE-9.5.0.0.bin
e6328c06faf814e6899ceead219afbf9360e986d692988023b749e6b2093e933
SHA256 hash VERIFIED for FTOS-SE-9.5.0.0.bin
Using HTTP for File Transfers
Stating with Release 9.3(0.1), you can use HTTP to copy files or configuration details to a remote server.
Use the copy source-file-url http://host[:port]/file-path command to transfer files to an external server.
Enter the following source-file-url keywords and information:
•To copy a file from the internal FLASH, enter flash:// followed by the filename.
•To copy the running configuration, enter the keyword running-config.
•To copy the startup configuration, enter the keyword startup-config.
•To copy a file on the external FLASH, enter usbflash:// followed by the filename.
Getting Started
69
4
Switch Management
This chapter explains the different protocols or services used to manage the S5000 switch.
Configuring Privilege Levels
Privilege levels restrict access to commands based on user or terminal line.
There are 16 privilege levels, of which three are pre-defined. The default privilege level is 1.
LevelDescription
Level 1Access to the system begins at EXEC mode, and EXEC mode commands are
limited to enable, disable, and exit.
Level 15Access to the system begins at EXEC Privilege mode, and all commands are
available.
Creating a Custom Privilege Level
Custom privilege levels start with the default EXEC mode command set. You can then customize privilege
levels 2 through 14 by:
•restricting access to an EXEC mode command
•moving commands from EXEC Privilege to EXEC mode
•allowing access to CONFIGURATION mode commands
•allowing access to INTERFACE, LINE, ROUTE-MAP, and ROUTER mode commands
A user can access all commands at his privilege level and below.
Removing a Command from EXEC Mode
To remove a command from the list of available commands in EXEC mode for a specific privilege level,
use the privilege exec command from CONFIGURATION mode.
In the command, specify a level greater than the level given to a user or terminal line, then the first
keyword of each command you wish to restrict.
Moving a Command from EXEC Privilege Mode to EXEC
Mode
To move a command from EXEC Privilege to EXEC mode for a privilege level, use the privilege exec
command from CONFIGURATION mode.
In the command, specify the privilege level of the user or terminal line and specify all keywords in the
command to which you want to allow access.
70
Switch Management
Allowing Access to CONFIGURATION Mode Commands
To allow access to CONFIGURATION mode, use the privilege exec level level configure
command from CONFIGURATION mode.
A user that enters CONFIGURATION mode remains at his privilege level and has access to only two
commands, end and exit. You must individually specify each CONFIGURATION mode command you
want to allow access to using the privilege configure level level command. In the command,
specify the privilege level of the user or terminal line and specify all the keywords in the command to
which you want to allow access.
Allowing Access to the Following Modes
This section describes how to allow access to the INTERFACE, LINE, ROUTE-MAP, and ROUTER modes.
Similar to allowing access to CONFIGURATION mode, to allow access to INTERFACE, LINE, ROUTE-MAP,
and ROUTER modes, first allow access to the command that enters you into the mode. For example, to
allow a user to enter INTERFACE mode, use the
gigabitethernet
Next, individually identify the INTERFACE, LINE, ROUTE-MAP or ROUTER commands to which you want
to allow access using the privilege {interface | line | route-map | router} level level command. In the command, specify the privilege level of the user or terminal line and specify all
the keywords in the command to which you want to allow access.
To remove, move or allow access, use the following commands.
The configuration in the following example creates privilege level 3. This level:
command.
privilege configure level level interface
•removes the resequence command from EXEC mode by requiring a minimum of privilege level 4
•moves the capture bgp-pdu max-buffer-size command from EXEC Privilege to EXEC mode by
requiring a minimum privilege level 3, which is the configured level for VTY 0
•allows access to CONFIGURATION mode with the banner command
•allows access to INTERFACE and LINE modes are allowed with no commands
•Remove a command from the list of available commands in EXEC mode.
CONFIGURATION mode
Dell(conf)#do show run priv
!
privilege exec level 3 capture
privilege exec level 3 configure
privilege exec level 4 resequence
privilege exec level 3 capture bgp-pdu
privilege exec level 3 capture bgp-pdu max-buffer-size
privilege configure level 3 line
privilege configure level 3 interface
Dell(conf)#do telnet 10.11.80.201
[telnet output omitted]
Dell#show priv
Current privilege level is 3.
Dell#?
capture Capture packet
configure Configuring from terminal
disable Turn off privileged commands
enable Turn on privileged commands
exit Exit from the EXEC
ip Global IP subcommands
monitor Monitoring feature
mtrace Trace reverse multicast path from destination to source
ping Send echo messages
quit Exit from the EXEC
show Show running system information
[output omitted]
Dell#config
[output omitted]
Dell(conf)#do show priv
Current privilege level is 3.
Dell(conf)#?
end Exit from configuration mode
exit Exit from configuration mode
interface Select an interface to configure
line Configure a terminal line
linecard Set line card type
Dell(conf)#interface ?
fastethernet Fast Ethernet interface
gigabitethernet Gigabit Ethernet interface
loopback Loopback interface
managementethernet Management Ethernet interface
null Null interface
port-channel Port-channel interface
range Configure interface range
sonet SONET interface
tengigabitethernet TenGigabit Ethernet interface
vlan VLAN interface
Dell(conf)#interface gigabitethernet 1/1
Dell(conf-if-gi-1/1)#?
end Exit from configuration mode
exit Exit from interface configuration mode
72
Switch Management
Dell(conf-if-gi-1/1)#exit
Dell(conf)#line ?
aux Auxiliary line
console Primary terminal line
vty Virtual terminal
Dell(conf)#line vty 0
Dell(config-line-vty)#?
exit Exit from line configuration mode
Dell(config-line-vty)#
Applying a Privilege Level to a Username
To set the user privilege level, use the following command.
•Configure a privilege level for a user.
CONFIGURATION mode
username username privilege level
Applying a Privilege Level to a Terminal Line
To set a privilege level for a terminal line, use the following command.
•Configure a privilege level for a terminal line.
Line mode
privilege level level
NOTE: When you assign a privilege level between 2 and 15, access to the system begins at EXEC
mode, but the prompt is hostname#, rather than hostname>.
Configuring Logging
The Dell Networking OS tracks changes in the system using event and error messages.
By default, Dell Networking OS logs these messages on:
•the internal buffer
•console and terminal lines
•any configured syslog servers
To disable logging, use the following commands.
•Disable all logging except on the console.
CONFIGURATION mode
no logging on
•Disable logging to the logging buffer.
CONFIGURATION mode
no logging buffer
•Disable logging to terminal lines.
CONFIGURATION mode
no logging monitor
Switch Management
73
•Disable console logging.
CONFIGURATION mode
no logging console
Log Messages in the Internal Buffer
All error messages, except those beginning with %BOOTUP (Message), are log in the internal buffer.
Configuration Task List for System Log Management
There are two configuration tasks for system log management:
•Disabling System Logging
•Sending System Messages to a Syslog Server
Disabling System Logging
By default, logging is enabled and log messages are sent to the logging buffer, all terminal lines, the
console, and the syslog servers.
To disable system logging, use the following commands.
•Disable all logging except on the console.
CONFIGURATION mode
no logging on
•Disable logging to the logging buffer.
CONFIGURATION mode
no logging buffer
•Disable logging to terminal lines.
CONFIGURATION mode
no logging monitor
•Disable console logging.
CONFIGURATION mode
no logging console
Sending System Messages to a Syslog Server
To send system messages to a syslog server by specifying the server, use the following command.
•Specify the server to which you want to send system messages. You can configure up to eight syslog
servers.
CONFIGURATION mode
logging {ip-address | hostname}
74
Switch Management
Configuring a UNIX System as a Syslog Server
To configure a UNIX System as a syslog server, use the following command.
•Configure a UNIX system as a syslog server by adding the following lines to /etc/syslog.conf on the
UNIX system and assigning write permissions to the file.
– Add line on a 4.1 BSD UNIX system. local7.debugging /var/log/ftos.log
– Add line on a 5.7 SunOS UNIX system. local7.debugging /var/adm/ftos.log
In the previous lines, local7 is the logging facility level and debugging is the severity level.
Changing System Logging Settings
You can change the default settings of the system logging by changing the severity level and the storage
location.
The default is to log all messages up to debug level, that is, all system messages. By changing the severity
level in the logging commands, you control the number of system messages logged.
To specify the system logging settings, use the following commands.
•Specify the minimum severity level for logging to the logging buffer.
CONFIGURATION mode
logging buffered level
•Specify the minimum severity level for logging to the console.
CONFIGURATION mode
logging console level
•Specify the minimum severity level for logging to terminal lines.
CONFIGURATION mode
logging monitor level
•Specify the minimum severity level for logging to a syslog server.
CONFIGURATION mode
logging trap level
•Specify the minimum severity level for logging to the syslog history table.
CONFIGURATION mode
logging history level
•Specify the size of the logging buffer.
CONFIGURATION mode
logging buffered size
•Specify the number of messages that Dell Networking OS saves to its logging history table.
CONFIGURATION mode
logging history size size
Switch Management
75
To view the logging buffer and configuration, use the show logging command in EXEC privilege mode,
as shown in the example for Display the Logging Buffer and the Logging Configuration.
To view the logging configuration, use the show running-config logging command in privilege
mode, as shown in the example for
Configuring a UNIX Logging Facility Level.
Display the Logging Buffer and the Logging
Configuration
To display the current contents of the logging buffer and the logging settings for the system, use the
show logging command in EXEC privilege mode.
Example of the show logging Command
Dell #show logging
Syslog logging: enabled
Console logging: level debugging
Monitor logging: level debugging
Buffer logging: level debugging, 50 Messages Logged, Size (40960 bytes)
Trap logging: level informational
Logging to 172.16.1.162
Logging to 10.10.10.4
Logging to 10.1.2.4
Logging to 172.31.1.4
Logging to 133.33.33.4
Apr 30 11:14:33: %STKUNIT1-M:CP %SYS-5-CONFIG_I: Configured from vty0
( 10.11.51.14 )by admin
Apr 30 10:13:08: %STKUNIT1-M:CP %SYS-5-CONFIG_I: Configured from vty0
( 10.11.51.14 )by admin
Apr 30 10:06:41: %STKUNIT1-M:CP %SEC-3-AUTHENTICATION_ENABLE_SUCCESS: Enable
password authentication
success on vty0 ( 10.11.51.14 )
Apr 30 10:06:36: %STKUNIT1-M:CP %SEC-5-LOGIN_SUCCESS: Login successful for user
admin on vty0
10.11.51.14)
Apr 26 12:02:48: %S5000:1 %IFAGT-5-STACK_PORT_LINK_DOWN: Changed stack port
state to down: 1/56
Apr 26 11:52:45: %S5000:1 %IFAGT-5-STACK_PORT_LINK_UP: Changed stack port state
to up: 1/56
Apr 26 11:51:13: %S5000:1 %IFAGT-5-STACK_PORT_LINK_DOWN: Changed stack port
state to down: 1/56
Apr 26 11:51:01: %S5000:1 %IFAGT-5-STACK_PORT_LINK_DOWN: Changed stack port
state to down: 1/48
Apr 26 11:48:57: %S5000:1 %IFAGT-5-STACK_PORT_LINK_UP: Changed stack port state
to up: 1/56
Apr 26 11:48:47: %S5000:1 %IFAGT-5-STACK_PORT_LINK_UP: Changed stack port state
to up: 1/48
Apr 26 11:43:52: %S5000:1 %IFAGT-5-STACK_PORT_LINK_DOWN: Changed stack port
state to down: 1/48
Apr 26 11:43:43: %S5000:1 %IFAGT-5-STACK_PORT_LINK_DOWN: Changed stack port
state to down: 1/56
Apr 26 11:33:08: %S5000:1 %IFAGT-5-STACK_PORT_LINK_UP: Changed stack port state
to up: 1/48
Apr 26 11:33:08: %S5000:1 %IFAGT-5-STACK_PORT_LINK_UP: Changed stack port state
to up: 1/56
Apr 25 11:07:15: %S5000:1 %IFAGT-5-REMOVED_OPTICS_PLUS: Optics SFP+ removed in
slot 1 port 2
Apr 25 11:07:14: %S5000:1 %IFAGT-5-REMOVED_OPTICS_PLUS: Optics
76
Switch Management
To view any changes made, use the show running-config logging command in EXEC privilege
mode, as shown in the example for Configuring a UNIX Logging Facility Level.
Configuring a UNIX Logging Facility Level
You can save system log messages with a UNIX system logging facility.
To configure a UNIX logging facility level, use the following command.
•Specify one of the following parameters.
CONFIGURATION mode
logging facility [facility-type]
– auth (for authorization messages)
– cron (for system scheduler messages)
– daemon (for system daemons)
– kern (for kernel messages)
– local0 (for local use)
– local1 (for local use)
– local2 (for local use)
– local3 (for local use)
– local4 (for local use)
– local5 (for local use)
– local6 (for local use)
– local7 (for local use)
– lpr (for line printer system messages)
– mail (for mail system messages)
– news (for USENET news messages)
– sys9 (system use)
– sys10 (system use)
– sys11 (system use)
– sys12 (system use)
– sys13 (system use)
– sys14 (system use)
– syslog (for syslog messages)
– user (for user programs)
– uucp (UNIX to UNIX copy protocol)
Example of the show running-config logging Command
To view nondefault settings, use the show running-config logging command in EXEC mode.
Dell#show running-config logging
!
logging buffered 524288 debugging
service timestamps log datetime msec
service timestamps debug datetime msec
!
You can configure Dell Networking OS to filter and consolidate the system messages for a specific line by
synchronizing the message output.
Only the messages with a severity at or below the set level appear. This feature works on the terminal and
console connections available on the system.
1.Enter LINE mode.
CONFIGURATION mode
line {console 0 | vty number [end-number] | aux 0}
Configure the following parameters for the virtual terminal lines:
•number: the range is from zero (0) to 9.
•end-number: the range is from 1 to 8.
You can configure multiple virtual terminals at one time by entering a number and an end-number.
2.Configure a level and set the maximum number of messages to print.
•level severity-level: the range is from 0 to 7. The default is 2. Use the all keyword to
include all messages.
•limit: the range is from 20 to 300. The default is 20.
To view the logging synchronous configuration, use the show config command in LINE mode.
Enabling Timestamp on Syslog Messages
By default, syslog messages do not include a time/date stamp stating when the error or message was
created.
To enable timestamp, use the following command.
•Add timestamp to syslog messages.
CONFIGURATION mode
Specify the following optional parameters:
– You can add the localtime keyword to include the localtime, msec, and show-timezone. If
you do not add the localtime keyword, the time is UTC.
78
Switch Management
– uptime: To view time since last boot.
If you do not specify a parameter, Dell Networking OS configures uptime.
To view the configuration, use the show running-config logging command in EXEC privilege mode.
To disable time stamping on syslog messages, use the no service timestamps [log | debug]
command.
File Transfer Services
With Dell Networking OS, you can configure the system to transfer files over the network using the file
transfer protocol (FTP).
One FTP application is copying the system image files over an interface on to the system; however, FTP is
not supported on virtual local area network (VLAN) interfaces.
For more information about FTP, refer to RFC 959, File Transfer Protocol.
NOTE: To transmit large files, Dell Networking recommends configuring the switch as an FTP
server.
Configuration Task List for File Transfer Services
The configuration tasks for file transfer services are:
•Enabling the FTP Server
•Configuring FTP Server Parameters
•Configuring FTP Client Parameters
Enabling the FTP Server
To enable the system as an FTP server, use the following command.
To view FTP configuration, use the show running-config ftp command in EXEC privilege mode.
After you enable the FTP server on the system, you can configure different parameters.
To specify the system logging settings, use the following commands.
•Specify the directory for users using FTP to reach the system.
Switch Management
79
CONFIGURATION mode
ftp-server topdir dir
The default is the internal flash directory.
•Specify a user name for all FTP users and configure either a plain text or encrypted password.
CONFIGURATION mode
Configure the following optional and required parameters:
– username: enter a text string.
– encryption-type: enter 0 for plain text or 7 for encrypted text.
– password: enter a text string.
NOTE: You cannot use the change directory (cd) command until you have configured ftp-
server topdir
To view the FTP configuration, use the show running-config ftp command in EXEC privilege mode.
.
Configuring FTP Client Parameters
To configure FTP client parameters, use the following commands.
•Enter the following keywords and slot/port or number information:
– For a Gigabit Ethernet interface, enter the GigabitEthernet keyword then the slot/port
information.
– For a loopback interface, enter the loopback keyword then a number between 0 and 16383.
– For a port channel interface, enter the port-channel keyword then a number from 1 to 255 for
TeraScale and ExaScale.
– For a 10-Gigabit Ethernet interface, enter the TenGigabitEthernet keyword then the slot/port
information.
– For a VLAN interface, enter the vlan keyword then a number from 1 to 4094.
– For a 40-Gigabit Ethernet interface, enter the fortyGigE keyword then the slot/port information.
CONFIGURATION mode
ip ftp source-interface interface
•Configure a password.
CONFIGURATION mode
ip ftp password password
•Enter a username to use on the FTP client.
CONFIGURATION mode
ip ftp username name
80
Switch Management
To view the FTP configuration, use the show running-config ftp command in EXEC privilege mode,
as shown in the example for Enabling the FTP Server.
Terminal Lines
You can access the system remotely and restrict access to the system by creating user profiles.
Terminal lines on the system provide different means of accessing the system. The console line (console)
connects you through the console port in the route processor modules (RPMs). The virtual terminal lines
(VTYs) connect you through a remote session to the system. The auxiliary line (aux) connects secondary
devices such as modems.
Denying and Permitting Access to a Terminal Line
Dell Networking recommends applying only standard access control lists (ACLs) to deny and permit
access to VTY lines.
•Layer 3 ACLs deny all traffic that is not explicitly permitted, but in the case of VTY lines, an ACL with
no rules does not deny traffic.
•You cannot use the show ip accounting access-list command to display the contents of an
ACL that is applied only to a VTY line.
To apply an IP ACL to a line, use the following command.
•Apply an ACL to a VTY line.
LINE mode
ip access-class access-list
Example of an ACL that Permits Terminal Access
To view the configuration, use the show config command in LINE mode.
Dell(config-std-nacl)#show config
!
ip access-list standard myvtyacl
seq 5 permit host 10.11.0.1
Dell(config-std-nacl)#line vty 0
Dell(config-line-vty)#show config
line vty 0
access-class myvtyacl
Dell Networking OS Behavior: Prior to Dell Networking OS version 7.4.2.0, in order to deny access on a
VTY line, apply an ACL and accounting, authentication, and authorization (AAA) to the line. Then users are
denied access only after they enter a username and password. Beginning in Dell Networking OS version
7.4.2.0, only an ACL is required, and users are denied access before they are prompted for a username
and password.
Configuring Login Authentication for Terminal Lines
You can use any combination of up to six authentication methods to authenticate a user on a terminal
line.
A combination of authentication methods is called a method list. If the user fails the first authentication
method, Dell Networking OS prompts the next method until all methods are exhausted, at which point
the connection is terminated. The available authentication methods are:
Switch Management
81
enable
line
local
none
radius
tacacs+
1.Configure an authentication method list. You may use a mnemonic name or use the keyword
default. The default authentication method for terminal lines is local and the default method list is
empty.
2.Apply the method list from Step 1 to a terminal line.
CONFIGURATION mode
login authentication {method-list-name | default}
3.If you used the line authentication method in the method list you applied to the terminal line,
configure a password for the terminal line.
LINE mode
Prompt for the enable password.
Prompt for the password you assigned to the terminal line. Configure a password
for the terminal line to which you assign a method list that contains the line
authentication method. Configure a password using the password command from
LINE mode.
Prompt for the system username and password.
Do not authenticate the user.
Prompt for a username and password and use a RADIUS server to authenticate.
Prompt for a username and password and use a TACACS+ server to authenticate.
password
Example of Terminal Line Authentication
In the following example, VTY lines 0 2 use a single authentication method, line.
EXEC time-out is a basic security feature that returns Dell Networking OS to EXEC mode after a period of
inactivity on the terminal lines.
To set time out, use the following commands.
82
Switch Management
•Set the number of minutes and seconds. The default is 10 minutes on the console and 30 minutes
on VTY. Disable EXEC time out by setting the time-out period to 0.
LINE mode
exec-timeout minutes [seconds]
•Return to the default time-out values.
LINE mode
no exec-timeout
Example of Setting the Time Out Period for EXEC Privilege Mode
The following example shows how to set the time-out period and how to view the configuration using
the show config command from LINE mode.
Dell(conf)#line con 0
Dell(config-line-console)#exec-timeout 0
Dell(config-line-console)#show config
line console 0
exec-timeout 0 0
Dell(config-line-console)#
Using Telnet to get to Another Network Device
To telnet to another device, use the following commands.
•Telnet to the stack-unit.You do not need to configure the management port on the stack-unit to be
able to telnet to it.
EXEC Privilege mode
telnet-peer-stack-unit
•Telnet to a device with an IPv4 or IPv6 address. If you do not enter an IP address, Dell Networking OS
enters a Telnet dialog that prompts you for one.
EXEC Privilege
telnet [ip-address]
If you do not enter an IP address, Dell Networking OS enters a Telnet dialog that prompts you for one.
Enter an IPv4 address in dotted decimal format (A.B.C.D).
Enter an IPv6 address in the format 0000:0000:0000:0000:0000:0000:0000:0000. Elision of zeros
is supported.
Example of the telnet Command for Device Access
Dell# telnet 10.11.80.203
Trying 10.11.80.203...
Connected to 10.11.80.203.
Exit character is '^]'.
Login:
Login: admin
Password:
Dell>exit
Dell#telnet 2200:2200:2200:2200:2200::2201
Switch Management
83
Trying 2200:2200:2200:2200:2200::2201...
Connected to 2200:2200:2200:2200:2200::2201.
Exit character is '^]'.
FreeBSD/i386 (freebsd2.dell.com) (ttyp1)
login: admin
Dell#
Lock CONFIGURATION Mode
Dell Networking OS allows multiple users to make configurations at the same time. You can lock
CONFIGURATION mode so that only one user can be in CONFIGURATION mode at any time (Message
2).
You can set two types of lockst: auto and manual.
•Set auto-lock using the configuration mode exclusive auto command from
CONFIGURATION mode. When you set auto-lock, every time a user is in CONFIGURATION mode, all
other users are denied access. This setting means that you can exit to EXEC Privilege mode, and reenter CONFIGURATION mode without having to set the lock again.
•Set manual lock using the configure terminal lock command from CONFIGURATION mode.
When you configure a manual lock, which is the default, you must enter this command each time you
want to enter CONFIGURATION mode and deny access to others.
Viewing the Configuration Lock Status
If you attempt to enter CONFIGURATION mode when another user has locked it, you may view which
user has control of CONFIGURATION mode using the show configuration lock command from
EXEC Privilege mode.
You can then send any user a message using the send command from EXEC Privilege mode.
Alternatively, you can clear any line using the
console session, the user is returned to EXEC mode.
Example of Locking CONFIGURATION Mode
Dell (conf)#configuration mode exclusive auto
Dell (conf)#exit
Feb 5 11:55:41: %STKUNIT0-M:CP %SYS-5-CONFIG_I: Configured from console
If another user attempts to enter CONFIGURATION mode while a lock is in place, the following appears
on their terminal (message 1): % Error: User "" on line console0 is in exclusive configuration mode.
If any user is already in CONFIGURATION mode when while a lock is in place, the following appears on
their terminal (message 2): % Error: Can't lock configuration mode exclusively since
the following users are currently configuring the system: User "admin" on line
vty1 ( 10.1.1.1 )
NOTE: The CONFIGURATION mode lock corresponds to a VTY session, not a user. Therefore, if you
configure a lock and then exit CONFIGURATION mode, and another user enters CONFIGURATION
mode, when you attempt to re-enter CONFIGURATION mode, you are denied access even though
you are the one that configured the lock.
.
clear command from EXEC Privilege mode. If you clear a
84
Switch Management
NOTE: If your session times out and you return to EXEC mode, the CONFIGURATION mode lock is
unconfigured.
View the Configuration Lock Status
If you attempt to enter CONFIGURATION mode when another user has locked it, you may view which
user has control of CONFIGURATION mode using the show configuration lock command from
EXEC Privilege mode.
You can then send any user a message using the send command from EXEC Privilege mode.
Alternatively, you can clear any line using the clear command from EXEC Privilege mode. If you clear a
console session, the user is returned to EXEC mode.
Recovering from a Forgotten Password
If you configure authentication for the console and you exit out of EXEC mode or your console session
times out, you are prompted for a password to re-enter.
Use the following commands if you forget your password.
1.Log onto the system using the console.
2.Power-cycle the chassis by switching off all of the power modules and then switching them back on.
3.Hit any key to abort the boot process. You enter uBoot immediately, as indicated by the => prompt.
(during bootup)
hit any key
4.Set the system parameters to ignore the startup configuration file when the system reloads.
BOOT USER mode
ignore startup-config
5.Recovering from a Forgotten Password
BOOT USER mode
reload
6.Copy startup-config.bak to the running config.
EXEC Privilege mode
copy flash://startup-config.bak running-config
7.Remove all authentication statements you might have for the console.
LINE mode
no authentication login no password
8.Save the running-config.
EXEC Privilege mode
copy running-config startup-config
Switch Management
85
Recovering from a Forgotten Enable Password
Use the following commands if you forget the enable password.
1.Log onto the system using the console.
2.Power-cycle the chassis by switching off all of the power modules and then switching them back on.
3.Hit any key to abort the boot process. You enter uBoot immediately, as indicated by the => prompt.
(during bootup)
hit any key
4.Set the system parameters to ignore the enable password when the system reloads.
BOOT USER mode
ignore enable-password
5.Reload the system.
BOOT USER mode
reload
6.Configure a new enable password.
CONFIGURATION mode
enable {secret | password}
7.Save the running-config to the startup-config.
EXEC Privilege mode
copy running-config startup-config ir write memory
Recovering from a Failed Start
An S5000 that does not start correctly might be attempting to boot from a corrupted Dell Networking OS
image or from a mis-specified location.
In this case, you can restart the system and interrupt the boot process to point the system to another
boot location. For more information about the Boot User commands, refer to the Boot User chapter in
the Dell Networking Command Line Reference Guide for the S5000.
1.Power-cycle the chassis (pull the power cord and reinsert it).
2.Press any key to abort the boot process and enter Boot User mode. The BOOT USER prompt
displays.
(during switch bootup)
Press ESC key
3.Configure the Dell Networking OS image and parameters to use when the switch reloads.
BOOT USER mode
boot change {primary | secondary | default}
86
Switch Management
Default: The S5000 boots using the primary parameters if they are valid. If the primary parameters are
not valid, the switch boots with the secondary parameters. If the secondary parameters are not valid,
it boots with the default parameters.
4.Assign an IP address to the Management Ethernet interface.
BOOT USER mode
interface management ethernet ip address ip-address
5.Assign an IP address as the default gateway for the switch.
BOOT USER mode
default gateway ip-address
6.Reload the switch.
BOOT USER mode
reload
Switch Management
87
5
802.1ag
Ethernet operations, administration, and maintenance (OAM) are a set of tools used to install, monitor,
troubleshoot, and manage Ethernet infrastructure deployments. Ethernet OAM consists of three main
areas:
•Ethernet local management Interface — (MEF-16 E-LMI)
Ethernet CFM
Ethernet CFM is an end-to-end per-service-instance Ethernet OAM scheme which enables: proactive
connectivity monitoring, fault verification, and fault isolation.
The service-instance regarding OAM for Metro/Carrier Ethernet is a virtual local area network (VLAN). This
service is sold to an end-customer by a network service provider. Typically the service provider contracts
with multiple network operators to provide end-to-end service between customers. For end-to-end
service between customer switches, connectivity must be present across the service provider through
multiple network operators.
Layer 2 Ethernet networks usually cannot be managed with IP tools such as internet control message
protocol (ICMP) Ping and IP Traceroute. Traditional IP tools often fail because:
•there are complex interactions between various Layer 2 and Layer 3 protocols such as spanning tree
protocol (STP), link aggregation group (LAG), virtual router redundancy protocol (VRRP), and
electronic commerce messaging protocol (ECMP) configurations.
•ping and traceroute are not designed to verify data connectivity in the network and within each node
in the network (such as in the switching fabric and hardware forwarding tables).
•when networks are built from different operational domains, access controls impose restrictions that
cannot be overcome at the IP level, resulting in poor fault visibility. There is a need for hierarchical
domains that are monitored and maintained independently by each provider or operator.
•routing protocols choose a subset of the total network topology for forwarding, making it hard to
detect faults in links and nodes that are not included in the active routing topology. This is made more
complex when using some form of traffic engineering (TE) based routing.
•network and element discovery and cataloging is not clearly defined using IP troubleshooting tools.
There is a need for Layer 2 equivalents to manage and troubleshoot native Layer 2 Ethernet networks.
With these tools, you can identify, isolate, and repair faults quickly and easily, which reduces operational
cost of running the network. OAM also increases availability and reduces mean time to recovery, which
allows for tighter service level agreements, resulting in increased revenue for the service provider.
88
802.1ag
In addition to providing end-to-end OAM in native Layer 2 Ethernet Service Provider/Metro networks, you
can also use CFM to manage and troubleshoot any Layer 2 network including enterprise, datacenter, and
cluster networks.
Maintenance Domains
Connectivity fault management (CFM) divides a network into hierarchical maintenance domains, as
shown in the following illustration.
A CFM maintenance domain is a management space on a network that a single management entity owns
and operates. The network administrator assigns a unique maintenance level (from 0 to 7) to each
domain to define the hierarchical relationship between domains. Domains can touch or nest but cannot
overlap or intersect as that would require management by multiple entities.
Figure 3. OAM Domains
Maintenance Points
Domains are comprised of logical entities called maintenance points.
A maintenance point is an interface demarcation that confines CFM frames to a domain. There are two
types of maintenance points:
•Maintenance end points (MEPs) — a logical entity that marks the end point of a domain.
•Maintenance intermediate points (MIPs) — a logical entity configured at a port of a switch that is an
intermediate point of a maintenance entity (ME). An ME is a point-to-point relationship between two
MEPs within a single domain. MIPs are internal to a domain, not at the boundary, and respond to CFM
only when triggered by linktrace and loopback messages. You can configure MIPs to snoop continuity
check Messages (CCMs) to build a MIP CCM database.
These roles define the relationships between all devices so that each device can monitor the layers under
its responsibility. Maintenance points drop all lower-level frames and forward all higher-level frames.
802.1ag
89
Figure 4. Maintenance Points
Maintenance End Points
A maintenance end point (MEP) is a logical entity that marks the end point of a domain.
There are two types of MEPs defined in 802.1ag for an 802.1 bridge:
•Up-MEP — monitors the forwarding path internal to a bridge on the customer or provider edge. On
Dell Networking systems, the internal forwarding path is effectively the switch fabric and forwarding
engine.
•Down-MEP — monitors the forwarding path external another bridge.
Configure Up-MEPs on ingress ports, ports that send traffic towards the bridge relay. Configure DownMEPs on egress ports, ports that send traffic away from the bridge relay.
Figure 5. Maintenance End Points
90
802.1ag
Implementation Information
Because the S5000 has a single MAC address for all physical/LAG interfaces, only one MEP is allowed per
MA (per VLAN or per MD level).
Configuring the CFM
To configure the CFM, follow these steps:
1.Configure the ecfmacl CAM region using the cam-acl command. Refer to Configure Ingress ACLs.
2.Enabling Ethernet CFM
3.Creating a Maintenance Domain
4.Creating a Maintenance Association
5.Create Maintenance Points
6.Use CFM tools:
a.Continuity Check Messages
b.Sending Loopback Messages and Responses
c.Sending Linktrace Messages and Responses
Related Configuration Tasks
•Enabling CFM SNMP Traps
•Displaying Ethernet CFM Statistics
Enabling Ethernet CFM
To enable the Ethernet CFM, use the following tasks.
1.Spawn the CFM process. No CFM configuration is allowed until the CFM process is spawned.
CONFIGURATION mode
ethernet cfm
2.Disable Ethernet CFM without stopping the CFM process.
ETHERNET CFM
disable
Creating a Maintenance Domain
Connectivity fault management (CFM) divides a network into hierarchical maintenance domains, as
shown in Maintenance Domains.
1.Create maintenance domain.
ETHERNET CFM mode
domain name md-level number
802.1ag
91
The range is from 0 to 7.
2.Display maintenance domain information.
EXEC Privilege mode
show ethernet cfm domain [name | brief]
Example of Viewing Configured Maintenance Domains
Dell# show ethernet cfm domain
Domain Name: customer
Level: 7
Total Service: 1
Services
MA-Name VLAN CC-Int X-CHK Status
My_MA 200 10s enabled
Domain Name: praveen
Level: 6
Total Service: 1
Services
MA-Name VLAN CC-Int X-CHK Status
Your_MA 100 10s enabled
Creating a Maintenance Association
A maintenance association (MA) is a subdivision of an MD that contains all managed entities
corresponding to a single end-to-end service, typically a virtual area network (VLAN).
An MA is associated with a VLAN ID.
•Create maintenance association.
ECFM DOMAIN mode
service name vlan vlan-id
Create Maintenance Points
Domains are comprised of logical entities called maintenance points. A maintenance point is an interface
demarcation that confines CFM frames to a domain.
There are two types of maintenance points:
•Maintenance End Points (MEPs) — a logical entity that marks the end point of a domain.
•Maintenance Intermediate Points (MIPs) — a logical entity configured at a port of a switch that
constitutes intermediate points of a Maintenance Entity (ME). An ME is a point-to-point relationship
between two MEPs within a single domain.
These roles define the relationships between all devices so that each device can monitor the layers under
its responsibility.
Creating a Maintenance End Point
A maintenance endpoint (MEP) is a logical entity that marks the endpoint of a domain.
There are two types of MEPs defined in 802.1ag for an 802.1 bridge:
92
802.1ag
•Up-MEP — monitors the forwarding path internal to a bridge on the customer or provider edge. On
Dell Networking systems, the internal forwarding path is effectively the switch fabric and forwarding
engine.
•Down-MEP — monitors the forwarding path external another bridge.
Configure Up-MEPs on ingress ports, ports that send traffic towards the bridge relay. Configure DownMEPs on egress ports, ports that send traffic away from the bridge relay.
100 cfm0 7 MEP Te 4/10 Enabled
test0 10 DOWN 00:01:e8:59:23:45
200 cfm1 6 MEP Te 4/10 Enabled
test1 20 DOWN 00:01:e8:59:23:45
300 cfm2 5 MEP Te 4/10 Enabled
test2 30 DOWN 00:01:e8:59:23:45
Creating a Maintenance Intermediate Point
Maintenance intermediate point (MIP) is a logical entity configured at a port of a switch that constitutes
intermediate points of a maintenance entity (ME).
An ME is a point-to-point relationship between two MEPs within a single domain. An MIP is not
associated with any MA or service instance, and it belongs to the entire MD.
1.Create a MIP.
INTERFACE mode
ethernet cfm mip domain {name | level } ma-name name
2.Display configured MEPs and MIPs.
EXEC Privilege mode
show ethernet cfm maintenance-points local [mep | mip]
Example of Viewing Configured MIPs
Dell#show ethernet cfm maintenance-points local mip
MAC Address: 00:01:e8:58:68:78
Domain Name: cfm0
MA Name: test0
Level: 7
VLAN: 10
MP ID: 900
Sender Chassis ID: Dell
MEP Interface status: Up
MEP Port status: Forwarding
Receive RDI: FALSE
MP Status: Active
Setting the MP Database Persistence
To set the database persistence, use the following command.
•Set the amount of time that data from a missing MEP is kept in the continuity check database.
ECFM DOMAIN mode
database hold-time minutes
The default is 100 minutes.
The range is from 100 to 65535 minutes.
94
802.1ag
Continuity Check Messages
Continuity check messages (CCM) are periodic hellos.
Continuity check messages:
•discover MEPs and MIPs within a maintenance domain
•detect loss of connectivity between MEPs
•detect misconfiguration, such as VLAN ID mismatch between MEPs
•to detect unauthorized MEPs in a maintenance domain
CCMs are multicast Ethernet frames sent at regular intervals from each MEP. They have a destination
address based on the MD level (01:80:C2:00:00:3X where X is the MD level of the transmitting MEP from
0 to 7). All MEPs must listen to these multicast MAC addresses and process these messages. MIPs may
optionally process the CCM messages the MEPs originate and construct a MIP CCM database.
MEPs and MIPs filter CCMs from higher and lower domain levels as described in the following table.
My levelBridge-relay sideConsumeDropAdd to MIP-DB and
My levelWire sideDropConsumeAdd to MIP-DB and
Greater than my
level
All the remote MEPs in the maintenance domain are defined on each MEP. Each MEP then expects a
periodic CCM from the configured list of MEPs. A connectivity failure is then defined as:
•Loss of three consecutive CCMs from any of the remote MEP, which indicates a network failure.
•Reception of a CCM with an incorrect CCM transmission interval, which indicates a configuration
error.
•Reception of a CCM with an incorrect MEP ID or MAID, which indicates a configuration or crossconnect error. This error could happen when different VLANs are cross-connected due to a
configuration error.
•Reception of a CCM with an MD level lower than the receiving MEP, which indicates a configuration
or cross-connect error.
•Reception of a CCM containing a port status/interface status TLV, which indicates a failed bridge or
aggregated port.
The continuity check protocol sends fault notifications (Syslogs, and SNMP traps, if enabled) whenever
you encounter any of these errors.
Bridge-relay side or
Wire side
DropDropDrop
forward
forward
ForwardForwardForward
802.1ag
95
Enabling CCM
To enable CCM, use the following commands.
1.Enable CCM.
ECFM DOMAIN mode
no ccm disable
The default is Disabled.
2.Configure the transmit interval (mandatory). The interval specified applies to all MEPs in the domain.
ECFM DOMAIN mode
ccm transmit-interval seconds
The default is 10 seconds.
Enabling Cross-Checking
To enable cross-checking, use the following commands.
1.Enable cross-checking.
ETHERNET CFM mode
mep cross-check enable
The default is Disabled.
2.Start the cross-check operation for an MEP
ETHERNET CFM mode
mep cross-check mep-id
3.Configure the amount of time the system waits for a remote MEP to come up before the cross-
check operation is started.
ETHERNET CFM mode
mep cross-check start-delay number
Sending Loopback Messages and Responses
Loopback message and response (LBM, LBR), also called Layer 2 Ping, is an administrative echo
transmitted by MEPs to verify reachability to another MEP or MIP within the maintenance domain. LBM
and LBR are unicast frames.
•Send a Loopback message
EXEC Privilege mode
ping ethernet domain name ma-name ma-name remote {mep-id | mac-addr macaddress} source {mep-id | port interface}
96
802.1ag
Sending Linktrace Messages and Responses
Linktrace message and response (LTM, LTR), also called Layer 2 Traceroute, is an administratively sent
multicast frame transmitted by MEPs to track, hop-by-hop, the path to another MEP or MIP within the
maintenance domain.
All MEPs and MIPs in the same domain respond to an LTM with a unicast LTR. Intermediate MIPs forward
the LTM toward the target MEP.
Figure 6. MPLS Core
Link trace messages carry a unicast target address (the MAC address of an MIP or MEP) inside a multicast
frame. The destination group address is based on the MD level of the transmitting MEP
(01:80:C2:00:00:3[8 to F]). The MPs on the path to the target MAC address reply to the LTM with an LTR,
and relays the LTM towards the target MAC until the target MAC is reached or TTL equals 0.
•Send a Linktrace message. Because the LTM is a Multicast message sent to the entire ME, there is no
need to specify a destination.
EXEC Privilege
traceroute ethernet domain
Caching Link Trace
After you execute a Link Trace command, the trace information can be cached so that you can view it
later without retracing.
To enable, set, display, and delete link trace caching, use the following commands.
•Enable Link Trace caching.
CONFIGURATION mode
traceroute cache
802.1ag
97
•Set the amount of time a trace result is cached.
ETHERNET CFM mode
traceroute cache hold-time minutes
The default is 100 minutes.
The range is from 10 to 65535 minutes.
•Set the size of the Link Trace Cache.
ETHERNET CFM mode
traceroute cache size entries
The default is 100.
The range is from 1 to 4095 entries.
•Display the Link Trace Cache.
EXEC Privilege mode
show ethernet cfm traceroute-cache
•Delete all Link Trace Cache entries.
EXEC Privilege mode
clear ethernet cfm traceroute-cache
Example of Viewing the Link Trace Cache
Dell#show ethernet cfm traceroute-cache
Traceroute to 00:01:e8:52:4a:f8 on Domain Customer2, Level 7, MA name Test2
with VLAN 2
An SNMP trap is sent only when one of the five highest priority defects occur.
Table 7. Five Highest Priority Defects
Priority DefectsTrap Message
Cross-connect defect
Error-CCM defect
%ECFM-5-ECFM_XCON_ALARM: Cross connect
fault detected by MEP 1 in Domain
customer1 at Level 7 VLAN 1000
%ECFM-5-ECFM_ERROR_ALARM: Error CCM
Defect detected by MEP 1 in Domain
customer1 at Level 7 VLAN 1000
98
802.1ag
Priority DefectsTrap Message
MAC Status defect
%ECFM-5-ECFM_MAC_STATUS_ALARM: MAC
Status Defect detected by MEP 1 in
Domain provider at Level 4 VLAN 3000
Remote CCM defect
%ECFM-5-ECFM_REMOTE_ALARM: Remote CCM
Defect detected by MEP 3 in Domain
customer1 at Level 7 VLAN 1000
RDI defect
%ECFM-5-ECFM_RDI_ALARM: RDI Defect
detected by MEP 3 in Domain customer1
at Level 7 VLAN 1000
Three values are given within the trap messages: MD Index, MA Index, and MPID. You can reference these
values against the output of the show ethernet cfm domain and show ethernet cfm maintenance-points local mep commands
To enable CFM SNMP traps, use the following command.
•Enable SNMP trap messages for Ethernet CFM.
CONFIGURATION mode
snmp-server enable traps ecfm
Example of Viewing CFM SNMP Trap Information
Dell#show ethernet cfm maintenance-points local mep