Nortel Networks BMD00007 User Manual

TM
Alteon OS
Command Reference
Nortel 10Gb Uplink Ethernet Switch Module for IBM BladeCenter® Version 1.2
Part Number: BMD00007, November 2007
2350 Mission College Blvd.
Santa Clara, CA 95054 www.bladenetwork.net
Suite 600
Alteon OS Command Reference
Copyright © 2007 Blade Network T echnologies, Inc., 2350 Mission College Blvd., Suite 600, Santa Clara, California, 95054, USA. All rights reserved. Part Number: BMD00007.
This document is protected by copyright and distributed under licenses restricting its use, copying, distribution, and decompilation. No part of this document may be reproduced in any form by any means without prior written authorization of Blade Network T echnologies, Inc. Documentation is provided “as is” without warranty of any kind, either express or implied, including any kind of implied or express warranty of non-infringement or the implied warranties of merchantability or fitness for a particular purpose.
U.S. Government End Users: This document is provided with a “commercial item” as defined by F AR
2.101 (Oct. 1995) and contains “commercial technical data” and “commercial software documentation” as those terms are used in F AR 12.211-12.212 (Oct. 1995). Govern ment End Users are authorized to use this documentation only in accordance with those rights and restrictions set forth herein, consistent with F AR
12.211- 12.212 (Oct. 1995), DF ARS 227.7202 ( JUN 1995) and DF ARS 252.227-7015 (Nov . 1995). Blade Network Techn ologies, Inc. reserves the right to change any products described herein at any time,
and without notice. Blade Network T echnologies, Inc. assumes no responsibility or liability arisin g from the use of products described herein, except as expressly agreed to in writing by Blade Network Technologies, Inc. The use and purchase of this produc t does not convey a license under any patent rights, trademark rights, or any other intellectual property rights of Blade Network T echnologies, Inc.
Originated in the USA. Alteon OS, and Alteon are trademarks of Nortel Networks, Inc. in the United States and certain other
countries. Cisco
®
and EtherChannel® are registered trademarks of Cisco Syst ems, Inc. in the United S tates and certain other countries. Any other trademarks appearing in this manual are owned by their respective companies.
2 BMD00007, November2007

Contents

Preface 13
Who Should Use This Book 14 How This Book Is Organized 15 Typographic Conventions 16 How to Get Help 17
The Command Line Interface 19
Connecting to the Switch 20
Management Module Setup 20 Factory-Default vs. MM assigned IP Addresses 20 Default Gateway 21 Configuring management module for switch access 21 Connecting to the Switch via Telnet 23
Running Telnet 23
Establishing an SSH Connection 24
Running SSH 25 Accessing the Switch 26 Setup Versus CLI 28 Command Line History and Editing 29 Idle Timeout 29
First-Time Configuration 31
Using the Setup Utility 32
Information Needed For Setup 32 Starting Setup When You Log In 33 Stopping and Restarting Setup Manually 34
Stopping Setup 34
Restarting Setup 34
Setup Part 1: Basic System Configuration 34 Setup Part 2: Port Configuration 36
BMD00007, November 2007 3
Alteon OS Command Reference
Setup Part 3: VLANs 38
Setup Part 4: IP Configuration 39
IP Interfaces 39 Default Gateways 40
IP Routing 41 Setup Part 5: Final Steps 41 Optional Setup for Telnet Support 42
Setting Passwords 43
Changing the Default Administrator Password 43 Changing the Default User Password 45
Menu Basics 47
The Main Menu 48 Menu Summary 49 Global Commands 50 Command Line History and Editing 53 Command Line Interface Shortcuts 54
Command Stacking 54 Command Abbreviation 54 Tab Completion 54
The Information Menu 55
Information Menu 56 System Information 58
SNMPv3 System Information Menu 59
SNMPv3 USM User Table Information 61
SNMPv3 View Table Information 62
SNMPv3 Access Table Information 63
SNMPv3 Group Table Information 64
SNMPv3 Community Table Information 64
SNMPv3 Target Address Table Information 65
SNMPv3 Target Parameters Table Information 66
SNMPv3 Notify Table Information 67
SNMPv3 Dump Information 68 BladeCenter Chassis Information 69 General System Information 70 Show Recent Syslog Messages 72 User Status 73
Contents BMD00007, November 2007
4
Layer 2 Information 74
FDB Information 76
Show All FDB Information 77 Clearing Entries from the Forwarding Database 77
Link Aggregation Control Protocol Information 78
Show all LACP Information 78
GVRP Information 79
Show GVRP VLAN Database Information 80 Show GID State Machine Information 81 Show GID Port Ring Information 82
802.1x Information 83 Spanning Tree Information 85 RSTP/MSTP Information 88 Common Internal Spanning Tree Information 91 Trunk Group Information 93 VLAN Information 94
Layer 3 Information 95
IP Routing Information 97
Show All IP Route Information 98
ARP Information 100
Show All ARP Entry Information 101 ARP Address List Information 102
BGP Information 102 BGP Peer information 103 BGP Summary information 103
Show all BGP Information 104
OSPF Information 105
OSPF General Information 106 OSPF Interface Information 107 OSPF Database Information 107 OSPF Information Route Codes 109
Routing Information Protocol Information 110
RIP Routes Information 110 Show RIP User Configuration 111
IP Information 112 IGMP Multicast Group Information 113 IGMP Group Information 114 IGMP Multicast Router Port Information 114 IGMP Mrouter Information 115 VRRP Information 116 Quality of Service Information 117
Alteon OS Command Reference
Contents
5BMD00007, November 2007
Alteon OS Command Reference
802.1p Information 117 Access Control List Information 119
Link Status Information 120 Port Information 121 Fiber Port Transceiver Status 123 Information Dump 123
The Statistics Menu 125
Statistics Menu 125 Port Statistics 127
802.1x Authenticator Statistics 128
802.1x Authenticator Diagnostics 129 Bridging Statistics 131 Ethernet Statistics 133 Interface Statistics 136 Interface Protocol Statistics 138 Link Statistics 138
Layer 2 Statistics 139
FDB Statistics 139 LACP Statistics 141 GVRP Statistics 142
Layer 3 Statistics 144
IP Statistics 147 Route Statistics 149 ARP statistics 149 DNS Statistics 150 ICMP Statistics 150 TCP Statistics 153 UDP Statistics 155 IGMP Statistics 156 OSPF Statistics 157
OSPF Global Statistics 158 VRRP Statistics 162 Routing Information Protocol Statistics 163
Management Processor Statistics 164
MP Packet Statistics 165 TCP Statistics 166 UCB Statistics 167 CPU Statistics 167
ACL Statistics 168
ACL Statistics 168
Contents BMD00007, November 2007
6
SNMP Statistics 169 NTP Statistics 173 Statistics Dump 174
The Configuration Menu 175
Configuration Menu 176 Viewing, Applying, and Saving Changes 177
Viewing Pending Changes 177 Applying Pending Changes 178 Saving the Configuration 178
System Configuration 179
System Host Log Configuration 182 SSH Server Configuration 183 RADIUS Server Configuration 185 TACACS+ Server Configuration 187 LDAP Server Configuration 190 NTP Server Configuration 192 System SNMP Configuration 193 SNMPv3 Configuration 195
User Security Model Configuration 197 SNMPv3 View Configuration 198 View-based Access Control Model Configuration 199 SNMPv3 Group Configuration 201 SNMPv3 Community Table Configuration 202 SNMPv3 Target Address Table Configuration 203 SNMPv3 Target Parameters Table Configuration 204 SNMPv3 Notify Table Configuration 205
System Access Configuration 206
Management Networks Configuration 208 User Access Control Configuration 209 System User ID Configuration 210 Strong Password Configuration 211 HTTPS Access Configuration 212
Port Configuration 213
Port Link Configuration 215 Temporarily Disabling a Port 216 Port ACL Configuration 216
Alteon OS Command Reference
Contents
7BMD00007, November 2007
Alteon OS Command Reference
Layer 2 Configuration 217
802.1x Configuration 219
802.1x Global Configuration 220
802.1x Guest VLAN Configuration 222
802.1x Port Configuration 223 Rapid Spanning Tree Protocol/ Multiple Spanning Tree Protocol Configuration 225 Common Internal Spanning Tree Configuration 227
CIST Bridge Configuration 228 CIST Port Configuration 229
Spanning Tree Configuration 231
Spanning Tree Bridge Configuration 233
Spanning Tree Port Configuration 235 Forwarding Database Configuration 237 Static FDB Configuration 237 GVRP Configuration 238 GVRP Port Configuration 239 Trunk Configuration 240 IP Trunk Hash Configuration 241
IP Trunk Hash 241 LACP Configuration 243
LACP Port Configuration 244 Layer 2 Failover Configuration 245
Failover Trigger Configuration 246
Auto Monitor Configuration 247 VLAN Configuration 248 Protocol-based VLAN Configuration 250 Private VLAN Configuration 252
Layer 3 Configuration 253
IP Interface Configuration 255 Default Gateway Configuration 256 IP Static Route Configuration 258 IP Multicast Route Configuration 259 ARP Configuration 260
ARP Static Configuration 261 IP Forwarding Configuration 262 Network Filter Configuration 263 Routing Map Configuration 264
IP Access List Configuration 266
Autonomous System Filter Path 267
Contents BMD00007, November 2007
8
Routing Information Protocol Configuration 268
Routing Information Protocol Interface Configuration 269
Open Shortest Path First Configuration 271
Area Index Configuration 273 OSPF Summary Range Configuration 274 OSPF Interface Configuration 275 OSPF Virtual Link Configuration 277 OSPF Host Entry Configuration 278 OSPF Route Redistribution Configuration 279 OSPF MD5 Key Configuration 280
Border Gateway Protocol Configuration 281
BGP Peer Configuration 283 BGP Redistribution Configuration 285 BGP Aggregation Configuration 286
IGMP Configuration 287
IGMP Snooping Configuration 288 IGMP Version 3 Configuration 289 IGMP Relay Configuration 290 IGMP Relay Multicast Router Configuration 291 IGMP Static Multicast Router Configuration 292 IGMP Filtering Configuration 293 IGMP Filter Definition 294 IGMP Filtering Port Configuration 295 IGMP Advanced Configuration 296
Domain Name System Configuration 297 Bootstrap Protocol Relay Configuration 298 VRRP Configuration 299
Virtual Router Configuration 301 Virtual Router Priority Tracking Configuration 303 Virtual Router Group Configuration 304 Virtual Router Group Priority Tracking Configuration 306 VRRP Interface Configuration 307 VRRP Tracking Configuration 308
Quality of Service Configuration 309
802.1p Configuration 310 DSCP Configuration 311
Access Control List Configuration 312
ACL Configuration 313 Ethernet Filtering Configuration 314 IP version 4 Filtering Configuration 315 TCP/UDP Filtering Configuration 317
Alteon OS Command Reference
Contents
9BMD00007, November 2007
Alteon OS Command Reference
ACL Metering Configuration 318 Re-Mark Configuration 319
Re-Marking In-Profile Configuration 320
Update User Priority Configuration 321
Re-Marking Out-of-Profile Configuration 322 Packet Format Filtering Configuration 322 ACL Group Configuration 323
Port Mirroring Configuration 324
Port-Mirroring Configuration 325
Setup 326 Dump 326 Saving the Active Switch Configuration 327 Restoring the Active Switch Configuration 327
The Operations Menu 329
Operations Menu 330
Operations-Level Port Options 332 Operations-Level Port 802.1x Options 333 Operations-Level VRRP Options. 334 Operations-Level IP Options 334 Operations-Level BGP Options 335 Protected Mode Options 336
The Boot Options Menu 339
Boot Menu 340 Scheduled Reboot of the Switch 340
Scheduled Reboot Menu 340
Updating the Switch Software Image 341
Loading New Software to Your Switch 341
Using the BBI 341
Using the CLI 343 Selecting a Software Image to Run 344 Uploading a Software Image from Your Switch 345
Selecting a Configuration Block 346 Resetting the Switch 347
Accessing the ISCLI 347
The Maintenance Menu 349
Maintenance Menu 350
System Maintenance 352
Contents BMD00007, November 2007
10
Forwarding Database Maintenance 353 Debugging Options 354 ARP Cache Maintenance 355 IP Route Manipulation 356 IGMP Maintenance 357
IGMP Group Maintenance 358 IGMP Multicast Routers Maintenance 359
Uuencode Flash Dump 360 TFTP System Dump Put 361 Clearing Dump Information 361 Panic Command 362
Unscheduled System Dumps 362
Alteon OS Syslog Messages 363
Alteon OS SNMP Agent 375
Working with Switch Images and Configuration Files 378
Loading a new switch image 379 Loading a saved switch configuration 380 Saving the switch configuration 380 Saving a switch dump 381
Alteon OS Command Reference
Glossary 383
Index 385
Contents
11BMD00007, November 2007
Alteon OS Command Reference
Contents BMD00007, November 2007
12

Preface

The Alteon OS Command Reference describes how to configure and use the Alteon OS soft­ware with your Nortel 10Gb Uplink Ethernet Switch Module (GbE Switch Module).
For documentation on installing the switches physically, see the Installation Guide for your GbE Switch Module. For details about configuration and operation of your GbE Switch Mod­ule, see the Alteon OS Application Guide.
BMD00007, November 2007 13
Alteon OS Command Reference

Who Should Use This Book

This Command Reference is intended for network installers and system administrators engaged in configuring and maintaining a network. The administrator should be familiar with Ethernet concepts, IP addressing, the IEEE 802.1d Spanning Tree Protocol, and SNMP configuration parameters.
Preface BMD00007, November 2007
14
Alteon OS Command Reference

How This Book Is Organized

Chapter 1 “The Command Line Interface,” describes how to connect to the switch and access
the information and configuration menus.
Chapter 2 “First-Time Configuration
,” describes how to use the Setup utility for initial
switch configuration and how to change the system passwords.
Chapter 3 “Menu Basics
,” provides an overview of the menu system, including a menu map,
global commands, and menu shortcuts.
Chapter 4 “The Information Menu,” shows how to view switch configuration parameters. Chapter 5 “The Statistics Menu,” shows how to view switch performance statistics. Chapter 6 “The Configuration Menu,” shows how to configure switch system parameters,
ports, VLANs, Spanning Tree Protocol, SNMP, Port Mirroring, IP Routing, Port T runking, and more.
Chapter 7 “The Operations Menu,” shows how to use commands which affect switch per-
formance immediately, but do not alter permanent switch configurations (such as temporarily disabling ports). The menu describes how to activate or deactivate optional software features.
Chapter 8 “The Boot Options Menu,” describes the use of the primary and alternate switch
images, how to load a new software image, and how to reset the software to factory defaults.
Chapter 9 “The Maintenance Menu,” shows how to generate and access a dump of critical
switch state information, how to clear it, and how to clear part or all of the forwarding database.
Appendix A, “Alteon OS Syslog Messages,” shows a listing of syslog messages. Appendix B, “Alteon OS SNMP Agent,” lists the Management Interface Bases (MIBs ) s u p -
ported in the switch software.
“Glossary” includes definitions of terminology used throughout the bo ok.
“Index includes pointers to the description of the key words used througho ut the bo ok.
Preface
15BMD00007, November 2007
Alteon OS Command Reference

Typographic Conventions

The following table describes the typographic styles used in this book.
Table 1 Typographic Conventions
Typeface or Symbol
AaBbCc123 This type is used for names of commands,
AaBbCc123 This bold type appears in command exam-
<AaBbCc123> This italicized type appears in command
[ ] Command items shown inside brackets are
Meaning Example
files, and directories used within the text. It also depicts on-screen computer output and
prompts.
ples. It shows text that must be typed in exactly as shown.
examples as a parameter placeholder. Replace the indicated text with the appropriate real name or value when using the command. Do not type the brackets.
This also shows book titles, special terms, or words to be emphasized.
optional and can be used or excluded as the situation demands. Do not type the brackets.
View t he readme.txt file.
Main#
Main# sys
To establish a Telnet session, enter:
host# telnet <IP address>
Read your User’ s Guide thoroughly.
host# ls [-a]
Preface BMD00007, November 2007
16
Alteon OS Command Reference

How to Get Help

If you need help, service, or technical assistance, see the “Getting help and technical assis­tance” appendix in the Nortel 10Gb Uplink Ethernet Switch Module for IBM BladeCenter Installation Guide.
Preface
17BMD00007, November 2007
Alteon OS Command Reference
Preface BMD00007, November 2007
18
CHAPTER 1

The Command Line Interface

Your GbE Switch Module (GbESM) is ready to perform basic switching functions right out of the box. Some of the more advanced features, however, require some administrative configuration before they can be used effectively.
The extensive Alteon OS switching software included in your switch provides a variety of options for accessing and configuring the switch:
A built-in, text-based command line interface and menu system for access via a Telnet ses-
sion or serial-port connection
SNMP support for access through network management software such as IBM Director or
HP OpenView
Alteon OS Browser-Based Interface (BBI)
The command line interface is the most direct method for collecting switch information and performing switch configuration. Using a basic terminal, you are presented with a hierarchy of menus that enable you to view information and statistics about the switch, and to perform any necessary configuration.
This chapter explains how to access the Command Line Interface (CLI) for the switch.
BMD00007, November 2007 19
Alteon OS Command Reference

Connecting to the Switch

You can access the command line interface in any one of the following ways:
Using a Telnet via the management moduleUsin g a Telnet connection over the networkUsing a SSH connection to securely log into another computer over a networkUsin g a serial co nnection using the serial port on the GbESM

Management Module Setup

The BladeCenter GbE Switch Module is an integral subsystem within the overall BladeCenter system. The BladeCenter chassis includes a management module (MM) as the central element for overall chassis management and control.
You can use the 100-Mbps Ethernet port on the management module to configure and manage the GbE Switch Module. The GbE Switch Module communicates with the management mod­ule(s) through its internal port 15 (MGT), which you can access through the Ethernet port on each management module. The factory default settings will permit only management and con­trol access to the switch module through the Ethernet port on the management module, or the built-in serial port. You can use the four external Ethernet ports on the switch module for man­agement and control of the switch by selecting this mode as an option through the management module configuration utility program (see the applicable BladeCenter Installation and User’s Guide publications for more information).
NOTE – Support for both management modules is included within the single management port (MGT). The MGT port dynamically connects to the active management module.

Factory-Default vs. MM assigned IP Addresses

Each GbE Switch Module must be assigned its own Internet Protocol address, which is used for communication with an SNMP network manager or other transmission control protocol / Internet Protocol (TCP/IP) applications (for example, BootP or TFTP). The factory-default IP address is 10.90.90.9x, where x corresponds to the number of the bay into which the GbE
The Command Line Interface BMD00007, November 2007
20
Alteon OS Command Reference
Switch Module is installed. For additional information, see the Installation Guide). The man­agement module assigns an IP address of 192.168.70.1xx, where xx corresponds to the number of the bay into which each GbE Switch Module is installed, as shown in the following table:
Table 1-1 GbESM IP addresses, based on switch-module bay numbers
Bay number Factory-default IP address IP address assigned by MM
Bay 1 10.90.90.91 192.168.70.127 Bay 2 10.90.90.92 192.168.70.128 Bay 3 10.90.90.94 192.168.70.129 Bay 4 10.90.90.97 192.168.70.130
NOTE – Switch Modules installed in Bay 1 and Bay 2 connect to server NICs 1 and 2, respec­tively. However , Windows operating systems show that Switch Modules installed in Bay 3 and Bay 4 connect to server NICs 4 and 3, respectively.

Default Gateway

The default Gateway IP address determines where packets with a destination address outside the current subnet should be sent. Usually, the default Gateway is a router or host acting as an IP gateway to handle connections to other subnets of other TCP/IP networks. If you want to access the GbE Switch Module from outside your local network, use the management module to assign a default Gateway address to the GbE Switch Module. Choose I/O Module Tasks > Configuration from the navigation pane on the left, and enter the default Gateway IP address (for example, 192.168.70.125). Click Save.

Configuring management module for switch access

Complete the following initial configuration steps:
1. Connect the Ethernet port of the management module to a 10/100 Mbps network (with
access to a management station) or directly to a management station.
2. Access and log on to the management module, as described in the BladeCenter Manage-
ment Module User’s Guide. The management module provides the appropriate IP addresses for network access (see the applicable BladeCenter Installation and User’s Guide publications for more information).
3. Select Configuration on the I/O Module Tasks menu on the left side of the BladeCenter
Management Module window. See Figure 1-1.
The Command Line Interface
21BMD00007, November 2007
Alteon OS Command Reference
Figure 1-1 Switch management on the BladeCenter management module
4. You can use the default IP addresses provided by the management module, or you can
assign a new IP address to the switch module through the management module. You can assign this IP address through one of the following methods:
Manually through the BladeCenter management moduleAutom a ticall y through the IBM Director Configuration Wizard (available in
Director release 4.21)
NOTE – If you change the IP address of the GbE Switch Module, make sure that the switch module and the management module both reside on the same subnet.
The Command Line Interface BMD00007, November 2007
22
Alteon OS Command Reference
5. Enable the following features in the management module:
External Ports (I/O Module Tasks > Admin/Power/Restart > Advance Setup)External management over all ports (Configuration > Advanced Configuration)
This setting is required if you want to access the management network through the exter­nal ports on the GbE Switch Module.
The default value is Disabled for both features. If these features are not already enabled, change the value to Enabled, then Save.
NOTE – In Advanced Configuration > Advanced Setup, enable “Preserve new IP configura- tion on all switch resets,” to retain the switch’s IP interface when you restore factory defaults. This setting preserves the management port’s IP address in the management module’s memory, so you maintain connectivity to the management module after a reset.
You can now start a Telnet session, Browser-Based Interface (Web) session, a Secure Shell ses­sion, or a secure HTTPS session to the GbE Switch Module.

Connecting to the Switch via Telnet

Use the management module to access the GbE Switch Module through Telnet. Choose I/O Module T asks > Configuration from the navigation pane on the left. Select a bay number and click Advanced Configuration > Start Telnet/Web Session > Sta r t Telnet Session. A Telnet window opens a connection to the Switch Module (requires Java 1.4 Plug-in).
Once that you have configured the GbE Switch Module with an IP address and gateway, you can access the switch from any workstation connected to the management network. Telnet access provides the same options for user and administrator access as those available through the management module, minus certain Telnet and management commands.
To establish a Telnet connection with the switch, run the Telnet program on your workstation and issue the Telnet command, followed by the switch IP address:
telnet <switch IP address>
Running Telnet
Once the IP parameters on the GbE Switch Module are configured, you can access the CLI using a T elnet connection. From the management module, you can establish a T elnet connection with the switch.
You will then be prompted to enter a password as explained on page 26.
The Command Line Interface
23BMD00007, November 2007
Alteon OS Command Reference

Establishing an SSH Connection

Although a remote network administrator can manage the configuration of a GbE Switch Module via Telnet, this method does not provide a secure connection. The SSH (Secure Shell) protocol enables you to securely log into another computer over a network to execute commands remotely . As a secure alternative to us ing Telnet to manage switch configuration, SSH ensures that all data sent over the network is encrypted and secure.
The switch can do only one session of key/cipher generation at a time. Thus, a SSH/SCP client will not be able to login if the switch is doing key generation at that time or if another client has just logged in before this client. Similarly, the system will fail to do the key generation if a SSH/SCP client is logging in at that time.
The supported SSH encryption and authentication methods are listed below.
Server Host Authentication: Client RSA-authenticates the switch in the beginning of
every connection.
Key Exchange: RSAEncryption: 3DES-CBC, DESUser Authentication: Local password authentication, Radius
The following SSH clients have been tested:
SSH 1.2.23 and SSH 1.2.27 for Linux (freeware)SecureCRT 3.0.2 and SecureCRT 3.0.3 (Van Dyke Technolo gies, Inc.)F-Secu re SSH 1.1 fo r Windows (Data Fellows)
NOTE – The Alteon OS implementation of SSH is based on SSH version 1.5 and supports SSH-
1.5-1.X.XX. SSH clients of other versions (especially Version 2) are not supported.
The Command Line Interface BMD00007, November 2007
24
Alteon OS Command Reference
Running SSH
Once the IP parameters are configured and the SSH service is turned on the GbE Switch Module, you can access the command line interface using an SSH connection. The default setting for SSH access is disabled.
T o establish an SSH connection with the switch, run the SSH program on your workstation by issuing the SSH command, followed by the switch IP address:
>> # ssh <switch IP address>
If SecurID authentication is required, use the following command:
>> # ssh -1 ace <switch IP address>
You will then be prompted to enter yo ur user name and password.
The Command Line Interface
25BMD00007, November 2007
Alteon OS Command Reference

Accessing the Switch

To enable better switch management and user accountability, three levels or classes of user access have been implemented on the agement functions, and screens increase as needed to perform various switch management tasks. Conceptually, access classes are defined as follows:
User interaction with the switch is completely passive—nothing can be changed on the
GbE Switch Module. Users may display information that has no security or privacy implica-
tions, such as switch statistics and current operational state information.
GbE Switch Module. Levels of access to CLI, Web man-
Operators can make temporary changes on the
GbE Switch Module. These changes are lost
when the switch is rebooted/reset. Operators have access to the switch management fea­tures used for daily switch operations. Because any changes an operator makes are undone by a reset of the switch, operators cannot severely impact switch operation.
Administrators are the only ones that may make permanent changes to the switch configu-
ration—changes that are persistent across a reboot/reset of the switch. Administrators can access switch functions to configure and troubleshoot problems on the
GbE Switch Module.
Because administrators can also make temporary (operator-level) changes as well, they must be aware of the interactions between temporary and permanent changes.
Access to switch functions is controlled through the use of unique surnames and passwords. Once you are connected to the switch via local Telnet, remote Telnet, or SSH, you are prompted to enter a password. The default user names/password for each access level are listed in the following table.
NOTE – It is recommended that you change default switch passwords after initial configuration and as regularly as required under your network security policies. For more information, see
“Setting Passwords” on page 43.
Table 1-2 User Access Levels
User Account Description and Tasks Performed Password
User The User has no direct responsibility for switch management.
He or she can view all switch status information and statistics, but cannot make any configuration changes to the switch.
user
Operator The Operator manages all functions of the switch. The
Operator can reset ports, except the management port.
The Command Line Interface BMD00007, November 2007
26
oper
Alteon OS Command Reference
Table 1-2 User Access Levels
User Account Description and Tasks Performed Password
Administrator
The superuser Administrator has complete access to all me nus, information, and configuration commands on the GbE Switch Module, including the ability to change both the user and administrator passwords.
admin
NOTE – With the exception of the “admin” user, access to each user level can be disabled by setting the password to an empty value.
The Command Line Interface
27BMD00007, November 2007
Alteon OS Command Reference

Setup Versus CLI

Once the administrator password is verified, you are given complete access to the switch. If the switch is still set to its factory default configuration, the system will ask whether you w ish to run Setup (see Chapter 2, “First-Time Configuration”), a utility designed to help you through the first-time configuration process. If the switch has already been configured, the Main Menu of the CLI is displayed instead.
The following table shows the Main Menu with administrator privileges.
[Main Menu] info - Information Menu stats - Statistics Menu cfg - Configuration Menu oper - Operations Command Menu boot - Boot Options Menu maint - Maintenance Menu diff - Show pending config changes [global command] apply - Apply pending config changes [global command] save - Save updated config to FLASH [global command] revert - Revert pending or applied changes [global command] exit - Exit [global command, always available]
NOTEIf you are accessing a user account, some menu options will not be available.
The Command Line Interface BMD00007, November 2007
28
Alteon OS Command Reference

Command Line History and Editing

For a description of global commands, shortcuts, and command line editing functions, see
“Menu Basics” on page 47.”

Idle Timeout

By default, the switch will disconnect your Telnet session after five minutes of inactivity. This function is controlled by the idle timeout par ameter, which can be set from 1 to 60 minutes. For information on changing this parameter, see “System Configuration” on page 179.
The Command Line Interface
29BMD00007, November 2007
Alteon OS Command Reference
The Command Line Interface BMD00007, November 2007
30
Loading...
+ 360 hidden pages