This document is protected by copyright and distributed under licenses restricting its use, copying,
distribution, and decompilation. No part of this document may be reproduced in any form by any means
without prior written authorization of Blade Network T echnologies, Inc. Documentation is provided “as
is” without warranty of any kind, either express or implied, including any kind of implied or express
warranty of non-infringement or the implied warranties of merchantability or fitness for a particular
purpose.
U.S. Government End Users: This document is provided with a “commercial item” as defined by F AR
2.101 (Oct. 1995) and contains “commercial technical data” and “commercial software documentation” as
those terms are used in F AR 12.211-12.212 (Oct. 1995). Govern ment End Users are authorized to use this
documentation only in accordance with those rights and restrictions set forth herein, consistent with F AR
12.211- 12.212 (Oct. 1995), DF ARS 227.7202 ( JUN 1995) and DF ARS 252.227-7015 (Nov . 1995).
Blade Network Techn ologies, Inc. reserves the right to change any products described herein at any time,
and without notice. Blade Network T echnologies, Inc. assumes no responsibility or liability arisin g from
the use of products described herein, except as expressly agreed to in writing by Blade Network
Technologies, Inc. The use and purchase of this produc t does not convey a license under any patent rights,
trademark rights, or any other intellectual property rights of Blade Network T echnologies, Inc.
Originated in the USA.
Alteon OS, and Alteon are trademarks of Nortel Networks, Inc. in the United States and certain other
countries. Cisco
®
and EtherChannel® are registered trademarks of Cisco Syst ems, Inc. in the United S tates
and certain other countries. Any other trademarks appearing in this manual are owned by their respective
companies.
240M2420, April 2007
Contents
Preface 13
Who Should Use This Book 14
How This Book Is Organized 15
Typographic Conventions 16
How to Get Help 17
The Command Line Interface 19
Connecting to the Switch 20
Management Module Setup 20
Factory-Default vs. MM assigned IP Addresses 20
Default Gateway 21
Configuring management module for switch access 21
Connecting to the Switch via Telnet 23
Running Telnet 23
Establishing an SSH Connection 24
Running SSH 25
Accessing the Switch 26
Setup Versus CLI 28
Command Line History and Editing 29
Idle Timeout 29
First-Time Configuration 31
Using the Setup Utility 32
Information Needed For Setup 32
Starting Setup When You Log In 32
Stopping and Restarting Setup Manually 34
Stopping Setup 34
Restarting Setup 34
Setup Part 1: Basic System Configuration 34
Setup Part 2: Port Configuration 36
40M2420, April 20073
Alteon OS Command Reference
Setup Part 3: VLANs 38
Setup Part 4: IP Configuration 39
IP Interfaces 39
Default Gateways 40
IP Routing 41
Setup Part 5: Final Steps 41
Optional Setup for Telnet Support 42
Setting Passwords 43
Changing the Default Administrator Password 43
Changing the Default User Password 45
Menu Basics 47
The Main Menu 48
Menu Summary 49
Global Commands 50
Command Line History and Editing 53
Command Line Interface Shortcuts 54
SNMPv3 Dump Information 68
BladeCenter Chassis Information 69
General System Information 70
Show Recent Syslog Messages 72
User Status 73
Layer 2 Information 74
Contents40M2420, April 2007
4
FDB Information 76
Show All FDB Information 77
Clearing Entries from the Forwarding Database 77
Link Aggregation Control Protocol Information 78
Show all LACP Information 78
802.1x Information 80
Spanning Tree Information 82
RSTP/MSTP Information 85
Common Internal Spanning Tree Information 88
Trunk Group Information 91
VLAN Information 91
Layer 3 Information 93
IP Routing Information 95
Show All IP Route Information 96
ARP Information 98
Show All ARP Entry Information 99
ARP Address List Information 99
BGP Information 100
BGP Peer information 100
BGP Summary information 101
Show all BGP Information 101
OSPF Information 102
OSPF General Information 103
OSPF Interface Information 104
OSPF Database Information 104
OSPF Information Route Codes 106
Routing Information Protocol Information 107
RIP Routes Information 107
Show RIP User Configuration 107
IP Information 108
IGMP Multicast Group Information 109
IGMP Group Information 110
IGMP Multicast Router Port Information 110
IGMP Mrouter Information 111
VRRP Information 112
Quality of Service Information 113
802.1p Information 113
Access Control List Information 115
Link Status Information 116
Port Information 117
Logical Port to GEA Port Mapping 118
System Host Log Configuration 177
SSH Server Configuration 178
RADIUS Server Configuration 179
TACACS+ Server Configuration 181
LDAP Server Configuration 184
NTP Server Configuration 186
System SNMP Configuration 188
SNMPv3 Configuration 190
User Security Model Configuration 192
SNMPv3 View Configuration 193
View-based Access Control Model Configuration 194
SNMPv3 Group Configuration 196
SNMPv3 Community Table Configuration 197
SNMPv3 Target Address Table Configuration 198
SNMPv3 Target Parameters Table Configuration 199
SNMPv3 Notify Table Configuration 200
System Access Configuration 201
Management Networks Configuration 203
User Access Control Configuration 204
System User ID Configuration 205
Strong Password Configuration 206
HTTPS Access Configuration 207
Port Configuration 208
Port Link Configuration 210
Temporarily Disabling a Port 211
Port ACL Configuration 211
ACL Port Metering Menu 212
Re-Mark Menu 213
Re-Marking In-Profile Menu 214
Update User Priority Menu 215
Re-Marking Out-of-Profile Menu 216
Layer 2 Configuration 217
Alteon OS Command Reference
Contents
740M2420, April 2007
Alteon OS Command Reference
802.1x Configuration 219
802.1x Global Configuration 220
802.1x Guest VLAN Configuration 222
802.1x Port Configuration 223
Rapid Spanning Tree Protocol/
Multiple Spanning Tree Protocol Configuration 225
Common Internal Spanning Tree Configuration 227
CIST Bridge Configuration 228
CIST Port Configuration 229
Spanning Tree Configuration 231
Spanning Tree Bridge Configuration 233
Spanning Tree Port Configuration 235
Forwarding Database Configuration 237
Static FDB Configuration 238
Trunk Configuration 239
IP Trunk Hash Configuration 240
IP Trunk Hash 240
LACP Configuration 242
LACP Port Configuration 243
Layer 2 Failover Configuration 244
IGMP Group Maintenance 347
IGMP Multicast Routers Maintenance 348
Contents40M2420, April 2007
10
Uuencode Flash Dump 349
TFTP System Dump Put 350
Clearing Dump Information 350
Panic Command 351
Unscheduled System Dumps 351
Alteon OS Syslog Messages 353
Alteon OS SNMP Agent 365
Working with Switch Images and
Configuration Files 368
Loading a new switch image 369
Loading a saved switch configuration 370
Saving the switch configuration 370
Saving a switch dump 371
Glossary 373
Index 1
Alteon OS Command Reference
Contents
1140M2420, April 2007
Alteon OS Command Reference
Contents40M2420, April 2007
12
Preface
The Alteon OS Command Reference describes how to configure and use the Alteon OS
software with your Layer 2/3 GbE Switch Module.
For documentation on installing the switches physically, see the Installation Guide for
your GbE Switch Module. For details about configuration and operation of your GbE Switch
Module, see the Alteon OS Application Guide.
40M2420, April 200713
Alteon OS Command Reference
Who Should Use This Book
This Command Reference is intended for network installers and system administrators engaged
in configuring and maintaining a network. The administrator should be familiar with Ethernet
concepts, IP addressing, the IEEE 802.1d Spanning Tree Protocol, and SNMP configuration
parameters.
Preface40M2420, April 2007
14
Alteon OS Command Reference
How This Book Is Organized
Chapter 1 “The Command Line Interface,” describes how to connect to the switch and access
the information and configuration menus.
Chapter 2 “First-Time Configuration
,” describes how to use the Setup utility for initial
switch configuration and how to change the system passwords.
Chapter 3 “Menu Basics
,” provides an overview of the menu system, including a menu map,
global commands, and menu shortcuts.
Chapter 4 “The Information Menu,” shows how to view switch configuration parameters.
Chapter 5 “The Statistics Menu,” shows how to view switch performance statistics.
Chapter 6 “The Configuration Menu,” shows how to configure switch system parameters,
ports, VLANs, Spanning Tree Protocol, SNMP, Port Mirroring, IP Routing, Port T runking, and
more.
Chapter 7 “The Operations Menu,” shows how to use commands which affect switch per-
formance immediately, but do not alter permanent switch configurations (such as temporarily
disabling ports). The menu describes how to activate or deactivate optional software features.
Chapter 8 “The Boot Options Menu,” describes the use of the primary and alternate switch
images, how to load a new software image, and how to reset the software to factory defaults.
Chapter 9 “The Maintenance Menu,” shows how to generate and access a dump of critical
switch state information, how to clear it, and how to clear part or all of the forwarding database.
Appendix A, “Alteon OS Syslog Messages,” shows a listing of syslog messages.
Appendix B, “Alteon OS SNMP Agent,” lists the Management Interface Bases (MIBs ) s u p -
ported in the switch software.
“Glossary” includes definitions of terminology used throughout the bo ok.
“Index” includes pointers to the description of the key words used throughout the book.
Preface
1540M2420, April 2007
Alteon OS Command Reference
Typographic Conventions
The following table describes the typographic styles used in this book.
Table 1 Typographic Conventions
Typeface or
Symbol
AaBbCc123This type is used for names of commands,
AaBbCc123This bold type appears in command exam-
<AaBbCc123> This italicized type appears in command
[ ]Command items shown inside brackets are
MeaningExample
files, and directories used within the text.
It also depicts on-screen computer output and
prompts.
ples. It shows text that must be typed in
exactly as shown.
examples as a parameter placeholder. Replace
the indicated text with the appropriate real
name or value when using the command. Do
not type the brackets.
This also shows book titles, special terms, or
words to be emphasized.
optional and can be used or excluded as the
situation demands. Do not type the brackets.
View t he readme.txt file.
Main#
Main# sys
To establish a T elnet session, enter:
host# telnet<IP address>
Read your User’ s Guide thoroughly.
host# ls [-a]
Preface40M2420, April 2007
16
Alteon OS Command Reference
How to Get Help
If you need help, service, or technical assistance, see the “Getting help and technical
assistance” appendix in the Layer 2/3 GbE Switch Module for IBM BladeCenter
Installation Guide.
Preface
1740M2420, April 2007
Alteon OS Command Reference
Preface40M2420, April 2007
18
CHAPTER 1
The Command Line Interface
Your GbE Switch Module (GbESM) is ready to perform basic switching functions right out of the
box. Some of the more advanced features, however, require some administrative configuration
before they can be used effectively.
The extensive Alteon OS switching software included in your switch provides a variety of
options for accessing and configuring the switch:
A built-in, text-based command line interface and menu system for access via a Telnet ses-
sion or serial-port connection
SNMP support for access through network management software such as IBM Director or
HP OpenView
Alteon OS Browser-Based Interface (BBI)
The command line interface is the most direct method for collecting switch information and
performing switch configuration. Using a basic terminal, you are presented with a hierarchy of
menus that enable you to view information and statistics about the switch, and to perform any
necessary configuration.
This chapter explains how to access the Command Line Interface (CLI) for the switch.
40M2420, April 200719
Alteon OS Command Reference
Connecting to the Switch
You can access the command line interface in any one of the following ways:
Using a Telnet via the management module
Usin g a Telnet connection over the network
Using a SSH connection to securely log into another computer over a network
Usin g a serial co nnection using the serial port on the GbESM
Management Module Setup
The BladeCenter GbE Switch Module is an integral subsystem within the overall BladeCenter
system. The BladeCenter chassis includes a management module (MM) as the central element
for overall chassis management and control.
You can use the 100 Mbps Ethernet port on the management module to configure and manage
the GbE Switch Module. The GbE Switch Module communicates with the management module through its internal port 15 (MG T1) and port 16 (MGT2), which you can access through the
Ethernet port on the management module. The factory default settings will permit only management and control access to the switch module through the Ethernet port on the management
module, or the built-in serial port. You can use the six external 10/100/1000 Mbps Ethernet
ports on the switch module for management and control of the switch by selecting this mode as
an option through the management module configuration utility program (see the appli cable
BladeCenter Installation and User ’s Guide publications for more information).
Factory-Default vs. MM assigned IP Addresses
Each GbE Switch Module must be assigned its own Internet Protocol address, which is used
for communication with an SNMP network manager or other transmission control protocol /
Internet Protocol (TCP/IP) applications (for example, BootP or TFTP). The factory-default IP
address is 10.90.90.9x, where x corresponds to the number of the bay into which the GbE
Chapter 1: The Command Line Interface40M2420, April 2007
20
Alteon OS Command Reference
Switch Module is installed. For additional information, see the Installation Guide). The management module assigns an IP address of 192.168.70.1xx, where xx corresponds to the number
of the bay into which each GbE Switch Module is installed, as shown in the following table:
Table 1-1 GbESM IP addresses, based on switch-module bay numbers
Bay numberFactory-default IP address IP address assigned by MM
Bay 110.90.90.91192.168.70.127
Bay 210.90.90.92192.168.70.128
Bay 310.90.90.94192.168.70.129
Bay 410.90.90.97192.168.70.130
NOTE – Switch Modules installed in Bay 1 and Bay 2 connect to server NICs 1 and 2, respectively. However , Windows operating systems show that Switch Modules installed in Bay 3 and
Bay 4 connect to server NICs 4 and 3, respectively.
Default Gateway
The default Gateway IP address determines where packets with a destination address outside
the current subnet should be sent. Usually, the default Gateway is a router or host acting as an
IP gateway to handle connections to other subnets of other TCP/IP networks. If you want to
access the GbE Switch Module from outside your local network, use the management module
to assign a default Gateway address to the GbE Switch Module. Choose I/O Module Tasks > Configuration from the navigation pane on the left, and enter the default Gateway IP address
(for example, 192.168.70.125). Click Save.
Configuring management module for switch access
Complete the following initial configuration steps:
1.Connect the Ethernet port of the management module to a 10/100 Mbps network (with
access to a management station) or directly to a management station.
2.Access and log on to the management module, as described in the BladeCenter Manage-
ment Module User’s Guide. The management module provides the appropriate IP
addresses for network access (see the applicable BladeCenter Installation and User’s Guide publications for more information).
3.Select Configuration on the I/O Module Tasks menu on the left side of the BladeCenter
Management Module window. See Figure 1-1.
Chapter 1: The Command Line Interface
2140M2420, April 2007
Alteon OS Command Reference
Figure 1-1 Switch management on the BladeCenter management module
4.You can use the default IP addresses provided by the management module, or you can
assign a new IP address to the switch module through the management module. You can
assign this IP address through one of the following methods:
Manually through the BladeCenter management module
Autom a ticall y through the IBM Director Configuration Wizard (available in
Director release 4.21)
NOTE – If you change the IP address of the GbE Switch Module, make sure that the switch
module and the management module both reside on the same subnet.
Chapter 1: The Command Line Interface40M2420, April 2007
22
Alteon OS Command Reference
5.Enable the following features in the management module:
This setting is required if you want to access the management network through the external ports on the GbE Switch Module.
The default value is Disabled for both features. If these features are not already enabled,
change the value to Enabled, then Save.
NOTE – In Advanced Configuration > Advanced Setup, enable “Preserve new IP configura-
tion on all switch resets,” to retain the switch’s IP interface when you restore factory defaults.
This setting preserves the management port’s IP address in the management module’s memory,
so you maintain connectivity to the management module after a reset.
You can now start a Telnet session, Browser-Based Interface (Web) session, a Secure Shell session, or a secure HTTPS session to the GbE Switch Module.
Connecting to the Switch via Telnet
Use the management module to access the GbE Switch Module through Telnet. Choose
I/O Module T asks > Configuration from the navigation pane on the left. Select a bay number
and click Advanced Configuration > Start Telnet/Web Session > St a r t Telnet Session. A
Telnet window opens a connection to the Switch Module (requires Java 1.4 Plug-i n).
Once that you have configured the GbE Switch Module with an IP address and gateway, you
can access the switch from any workstation connected to the management network. Telnet
access provides the same options for user and administrator access as those available through
the management module, minus certain Telnet and management commands.
To establish a Telnet connection with the switch, run the Telnet program on your workstation
and issue the Telnet command, followed by the switch IP address:
telnet <switch IP address>
Running Telnet
Once the IP parameters on the GbE Switch Module are configured, you can access the CLI using
a T elnet connection. From the management module, you can establish a T elnet connection with
the switch.
You will then be prompted to enter a passw ord as explained on page 27.
Chapter 1: The Command Line Interface
2340M2420, April 2007
Alteon OS Command Reference
Establishing an SSH Connection
Although a remote network administrator can manage the configuration of a GbE Switch Module
via Telnet, this method does not provide a secure connection. The SSH (Secure Shell) protocol
enables you to securely log into another computer over a network to execute commands
remotely . As a secure alternative to us ing Telnet to manage switch configuration, SSH ensures
that all data sent over the network is encrypted and secure.
The switch can do only one session of key/cipher generation at a time. Thus, a SSH/SCP client
will not be able to login if the switch is doing key generation at that time or if another client
has just logged in before this client. Similarly, the system will fail to do the key generation if a
SSH/SCP client is logging in at that time.
The supported SSH encryption and authentication methods are listed below.
Server Host Authentication: Client RSA-authenticates the switch in the beginning of
every connection.
Key Exchange: RSA
Encryption: 3DES-CBC, DES
User Authentication: Local password authentication, Radius
The following SSH clients have been tested:
SSH 1.2.23 and SSH 1.2.27 for Linux (freeware)
SecureCRT 3.0.2 and SecureCRT 3.0.3 (Van Dyke Technologies, Inc.)
F-Secu re SSH 1.1 fo r Windows (Data Fellows)
NOTE – The Alteon OS implementation of SSH is based on SSH version 1.5 and supports SSH-
1.5-1.X.XX. SSH clients of other versions (especially Version 2) are not supported.
Chapter 1: The Command Line Interface40M2420, April 2007
24
Alteon OS Command Reference
Running SSH
Once the IP parameters are configured and the SSH service is turned on the GbE Switch Module,
you can access the command line interface using an SSH connection. The default setting for
SSH access is disabled.
T o establish an SSH connection with the switch, run the SSH program on your workstation by
issuing the SSH command, followed by the switch IP address:
>> # ssh <switch IP address>
or, if SecurID authentication is required, use the following command:
>> # ssh -1 ace <switch IP address>
You will then be prompted to enter your user nam e and password.
Chapter 1: The Command Line Interface
2540M2420, April 2007
Alteon OS Command Reference
Accessing the Switch
To enable better switch management and user accountability, three levels or classes of user
access have been implemented on the
agement functions, and screens increase as needed to perform various switch management
tasks. Conceptually, access classes are defined as follows:
User interaction with the switch is completely passive—nothing can be changed on the
GbE Switch Module. Users may display information that has no security or privacy implica-
tions, such as switch statistics and current operational state information.
GbE Switch Module. Levels of access to CLI, Web man-
Operators can only effect temporary changes on the
will be lost when the switch is rebooted/reset. Operators have access to the switch management features used for daily switch operations. Because any changes an operator
makes are undone by a reset of the swit ch, operators cannot severely impact switch operation.
Administrators are the only ones that may make permanent changes to the switch configu-
ration—changes that are persistent across a reboot/reset of the switch. Administrators can
access switch functions to configure and troubleshoot problems on the
Because administrators can also make temporary (operator-level) changes as well, they
must be aware of the interactions between temporary and permanent changes.
Access to switch functions is controlled through the use of unique surnames and passwords.
Once you are connected to the switch via local Telnet, remote Telnet, or SSH, you are
prompted to enter a password. The default user names/password for each access level are listed
in the following table.
GbE Switch Module. These changes
GbE Switch Module.
Chapter 1: The Command Line Interface40M2420, April 2007
26
Alteon OS Command Reference
NOTE – It is recommended that you change default switch passwords after initial configuration
and as regularly as required under your network security po lici es. For more information, see
“Setting Passwords” on page 43.
Table 1-2 User Access Levels
User AccountDescription and Tasks Performed Password
UserThe User has no direct responsibility for switch management.
He or she can view all switch status information and statistics,
but cannot make any configuration changes to the switch.
OperatorThe Operator manages all functions of the switch. The
Operator can reset ports, except the management ports.
Administrator
The superuser Administrator has complete access to all me nus,
information, and configuration commands on the GbE Switch
Module, including the ability to change both the user and
administrator passwords.
user
oper
admin
NOTE – With the exception of the “admin” user, access to each user level can be disabled by
setting the password to an empty value.
Chapter 1: The Command Line Interface
2740M2420, April 2007
Alteon OS Command Reference
Setup Versus CLI
Once the administrator password is verified, you are given complete access to the switch. If the
switch is still set to its factory default configuration, the system will ask whether you w ish to
run Setup (see Chapter 2, “First-Time Configuration”), a utility designed to help you through
the first-time configuration process. If the switch has already been configured, the Main Menu
of the CLI is displayed instead.
The following table shows the Main Menu with administrator privileges.
[Main Menu]
info - Information Menu
stats - Statistics Menu
cfg - Configuration Menu
oper - Operations Command Menu
boot - Boot Options Menu
maint - Maintenance Menu
diff - Show pending config changes [global command]
apply - Apply pending config changes [global command]
save - Save updated config to FLASH [global command]
revert - Revert pending or applied changes [global command]
exit - Exit [global command, always available]
NOTE – If you are accessing a user account, some menu options will not be available.
Chapter 1: The Command Line Interface40M2420, April 2007
28
Alteon OS Command Reference
Command Line History and Editing
For a description of global commands, shortcuts, and command line editing functions, see
“Menu Basics” on page 47.”
Idle Timeout
By default, the switch will disconnect your Telnet session after five minutes of inactivity. This
function is controlled by the idle timeout par ameter, which can be set from 1 to 60 minutes. For
information on changing this parameter, see “System Configuration” on page 174.
Chapter 1: The Command Line Interface
2940M2420, April 2007
Alteon OS Command Reference
Chapter 1: The Command Line Interface40M2420, April 2007
30
Loading...
+ 352 hidden pages
You need points to download manuals.
1 point = 1 manual.
You can buy points or you can get point for every manual you upload.