Dell Fcx624 E Users Manual Configuration Guide
2015-02-09
: Dell Dell-Fcx624-E-Users-Manual-543953 dell-fcx624-e-users-manual-543953 dell pdf
Open the PDF directly: View PDF
Page Count: 1494 [warning: Documents this large are best viewed by clicking the View PDF Link!]
- Contents
- About This Document
- Getting Familiar with Management Applications
- Configuring Basic Software Features
- Configuring basic system parameters
- Entering system administration information
- Configuring Simple Network Management Protocol (SNMP) parameters
- Disabling Syslog messages and traps for CLI access
- Cancelling an outbound Telnet session
- Specifying a Simple Network Time Protocol (SNTP) server
- Setting the system clock
- Limiting broadcast, multicast, and unknown unicast traffic
- Configuring CLI banners
- Configuring a local MAC address for Layer 2 management traffic
- Configuring basic port parameters
- Assigning a port name
- Modifying port speed and duplex mode
- Enabling auto-negotiation maximum port speed advertisement and down-shift
- Modifying port duplex mode
- Configuring MDI/MDIX
- Disabling or re-enabling a port
- Configuring flow control
- Configuring symmetric flow control on PowerConnect B-Series FCX devices
- Configuring PHY FIFO Rx and Tx depth
- Configuring the IPG on PowerConnect Stackable devices
- Enabling and disabling support for 100BaseTX
- Enabling and disabling support for 100BaseFX
- Changing the Gbps fiber negotiation mode
- Modifying port priority (QoS)
- Dynamic configuration of Voice over IP (VoIP) phones
- Configuring port flap dampening
- Port loop detection
- Configuring basic system parameters
- Operations, Administration, and Maintenance
- Overview
- Determining the software versions installed and running on a device
- Image file types
- Viewing the contents of flash files
- Using SNMP to upgrade software
- Changing the block size for TFTP file transfers
- Rebooting
- Displaying the boot preference
- Loading and saving configuration files
- Replacing the startup configuration with the running configuration
- Replacing the running configuration with the startup configuration
- Logging changes to the startup-config file
- Copying a configuration file to or from a TFTP server
- Dynamic configuration loading
- Maximum file sizes for startup-config file and running-config
- Loading and saving configuration files with IPv6
- Scheduling a system reload
- Diagnostic error codes and remedies for TFTP transfers
- Testing network connectivity
- Software-based Licensing
- Software license terminology
- Software-based licensing overview
- Non-licensed features
- Licensed features and part numbers
- Configuration tasks
- Deleting a license
- Other licensing options available from the Brocade Software Portal
- Transferring a license
- Syslog messages and trap information
- Viewing information about software licenses
- Stackable Devices
- IronStack overview
- Building an IronStack
- IronStack topologies
- Software requirements
- IronStack construction methods
- Scenario 1 - Configuring a three-member IronStack in a ring topology using secure-setup
- Scenario 2 - Configuring a three-member IronStack in a ring topology using the automatic setup process
- Scenario 3 - Configuring a three-member IronStack in a ring topology using the manual configuration process
- Configuring an FCX IronStack
- Configuring PowerConnect B-Series FCX stacking ports
- Configuring a default stacking port to function as a data port
- Verifying an IronStack configuration
- Managing your IronStack
- Logging in through the CLI
- Logging in through Brocade Network Advisor
- Logging in through the console port
- IronStack management MAC address
- Removing MAC address entries
- CLI command syntax
- IronStack CLI commands
- Copying the flash image to a stack unit from the Active Controller
- Reloading a stack unit
- Controlling stack topology
- Managing IronStack partitioning
- MIB support for the IronStack
- Persistent MAC address
- Unconfiguring an IronStack
- Displaying IronStack information
- Adding, removing, or replacing units in an IronStack
- Renumbering stack units
- Syslog, SNMP, and traps
- Troubleshooting an IronStack
- Stack mismatches
- Image mismatches
- More about IronStack technology
- PowerConnect B-Series FCX hitless stacking
- Supported events
- Non-supported events
- Supported protocols and services
- Configuration notes and feature limitations
- What happens during a hitless stacking switchover or failover
- Standby Controller role in hitless stacking
- Support during stack formation, stack merge, and stack split
- Hitless stacking default behavior
- Hitless stacking failover
- Hitless stacking switchover
- Displaying information about hitless stacking
- Syslog messages for hitless stacking failover and switchover
- Displaying hitless stacking diagnostic information
- Monitoring Hardware Components
- Configuring IPv6 Management on PowerConnect B-Series FCXSwitches
- Configuring Spanning Tree Protocol (STP) Related Features
- Configuring Basic Layer 2 Features
- About port regions
- Enabling or disabling the Spanning Tree Protocol (STP)
- MAC learning rate control
- Changing the MAC age time and disabling MAC address learning
- Configuring static MAC entries
- Configuring VLAN-based static MAC entries
- Clearing MAC address entries
- Flow-based MAC address learning
- Enabling port-based VLANs
- Defining MAC address filters
- Locking a port to restrict addresses
- Displaying and modifying system parameter default settings
- TDynamic Buffer Allocation for an IronStack
- Remote Fault Notification (RFN) on 1G fiber connections
- Link Fault Signaling (LFS) for 10G
- Jumbo frame support
- Configuring Metro Features
- Configuring Uni-Directional Link Detection (UDLD) and Protected Link Groups
- Configuring Trunk Groups and Dynamic Link Aggregation
- Trunk group overview
- Configuring a trunk group
- CLI syntax for configuring consecutive ports in a trunk group
- CLI syntax for configuring non-consecutive ports in a trunk group
- Example 1: Configuring the trunk groups shown in Figure 78
- Example 2: Configuring a trunk group that spans two Gbps Ethernet modules in a chassis device
- Example 3: Configuring a multi-slot trunk group with one port per module
- Example 4: Configuring a trunk group of 10 Gbps Ethernet ports
- Additional trunking options
- Displaying trunk group configuration information
- Dynamic link aggregation
- IronStack LACP trunk group configuration example
- Examples of valid LACP trunk groups
- Configuration notes and limitations
- Adaptation to trunk disappearance
- Flexible trunk eligibility
- Enabling dynamic link aggregation
- How changing the VLAN membership of a port affects trunk groups and dynamic keys
- Additional trunking options for LACP trunk ports
- Link aggregation parameters
- Displaying and determining the status of aggregate links
- Clearing the negotiated aggregate links table
- Configuring single link LACP
- Configuring Virtual LANs (VLANs)
- VLAN overview
- Routing between VLANs
- Virtual routing interfaces (Layer 3 Switches only)
- Routing between VLANs using virtual routing interfaces (Layer 3 Switches only)
- Dynamic port assignment (Layer 2 Switches and Layer 3 Switches)
- Assigning a different VLAN ID to the default VLAN
- Assigning different VLAN IDs to reserved VLANs 4091 and 4092
- Assigning trunk group ports
- Configuring port-based VLANs
- Modifying a port-based VLAN
- Enable spanning tree on a VLAN
- Configuring IP subnet, IPX network and protocol-based VLANs
- Configuring IP subnet, IPX network, and protocol-based VLANs within port-based VLANs
- Configuring an IPv6 protocol VLAN
- Routing between VLANs using virtual routing interfaces (Layer 3 Switches only)
- Configuring protocol VLANs with dynamic ports
- Configuring uplink ports within a port-based VLAN
- Configuring the same IP subnet address on multiple port-based VLANs
- Configuring VLAN groups and virtual routing interface groups
- Configuring super aggregated VLANs
- Configuring 802.1Q-in-Q tagging
- Configuring private VLANs
- Dual-mode VLAN ports
- Displaying VLAN information
- Displaying VLANs in alphanumeric order
- Displaying system-wide VLAN information
- Displaying global VLAN information
- Displaying VLAN information for specific ports
- Displaying a port VLAN membership
- Displaying a port dual-mode VLAN membership
- Displaying port default VLAN IDs (PVIDs)
- Displaying PVLAN information
- Configuring GARP VLAN Registration Protocol (GVRP)
- Configuring MAC-based VLANs
- Overview
- Dynamic MAC-based VLAN
- Configuration notes and feature limitations
- Configuring MAC-based VLANs
- Using MAC-based VLANs and 802.1X security on the same port
- Configuring generic and Dell vendor-specific attributes on the RADIUS server
- Aging for MAC-based VLAN
- Disabling aging for MAC-based VLAN sessions
- Configuring the maximum MAC addresses per port
- Configuring a MAC-based VLAN for a static host
- Configuring MAC-based VLAN for a dynamic host
- Configuring dynamic MAC-based VLAN
- Configuring MAC-based VLANs using SNMP
- Displaying Information about MAC-based VLANs
- Displaying the MAC-VLAN table
- Displaying the MAC-VLAN table for a specific MAC address
- Displaying allowed MAC addresses
- Displaying denied MAC addresses
- Displaying detailed MAC-VLAN data
- Displaying MAC-VLAN information for a specific interface
- Displaying MAC addresses in a MAC-based VLAN
- Displaying MAC-based VLAN logging
- Clearing MAC-VLAN information
- Sample application
- Configuring Rule-Based IP Access Control Lists (ACLs)
- ACL overview
- How hardware-based ACLs work
- Configuration considerations
- Configuring standard numbered ACLs
- Configuring standard named ACLs
- Configuring extended numbered ACLs
- Configuring extended named ACLs
- Preserving user input for ACL TCP/UDP port numbers
- Managing ACL comment text
- Applying an ACL to a virtual interface in a protocol- or subnet-based VLAN
- Enabling ACL logging
- Enabling strict control of ACL filtering of fragmented packets
- Enabling ACL support for switched traffic in the router image
- Enabling ACL filtering based on VLAN membership or VE port membership
- Using ACLs to filter ARP packets
- Filtering on IP precedence and ToS values
- QoS options for IP ACLs
- ACL-based rate limiting
- ACL statistics
- Using ACLs to control multicast features
- Enabling and viewing hardware usage statistics for an ACL
- Displaying ACL information
- Troubleshooting ACLs
- Policy-based routing (PBR)
- Configuring Quality of Service
- Configuring Traffic Policies
- Configuring Base Layer 3 and Enabling Routing Protocols
- Configuring Port Mirroring and Monitoring
- Configuring Rate Limiting and Rate Shaping on PowerConnect B-Series FCX Switches
- Configuring IP Multicast Traffic Reduction for PowerConnect B-Series FCX Switches
- Enabling the Foundry Discovery Protocol (FDP) and Reading Cisco Discovery Protocol (CDP) Packets
- Configuring LLDP and LLDP-MED
- Terms used in this chapter
- LLDP overview
- LLDP-MED overview
- General operating principles
- MIB support
- Syslog messages
- Configuring LLDP
- Configuration notes and considerations
- Enabling and disabling LLDP
- Enabling support for tagged LLDP packets
- Changing a port LLDP operating mode
- Specifying the maximum number of LLDP neighbors
- Enabling LLDP SNMP notifications and syslog messages
- Changing the minimum time between LLDP transmissions
- Changing the interval between regular LLDP transmissions
- Changing the holdtime multiplier for transmit TTL
- Changing the minimum time between port reinitializations
- LLDP TLVs advertised by the Dell PowerConnect device
- Configuring LLDP-MED
- LLDP-MED attributes advertised by the Dell PowerConnect device
- Resetting LLDP statistics
- Clearing cached LLDP neighbor information
- Configuring IP Multicast Protocols
- Overview of IP multicasting
- Changing global IP multicast parameters
- Adding an interface to a multicast group
- PIM Dense
- PIM Sparse
- PIM Passive
- Passive multicast route insertion
- Configuring an IP tunnel
- Using ACLs to control multicast features
- Disabling CPU processing for select multicast groups
- Displaying the multicast configuration for another multicast router
- IGMP V3
- Default IGMP version
- Compatibility with IGMP V1 and V2
- Globally enabling the IGMP version
- Enabling the IGMP version per interface setting
- Enabling the IGMP version on a physical port within a virtual routing interface
- Enabling membership tracking and fast leave
- Setting the query interval
- Setting the group membership time
- Setting the maximum response time
- IGMP V3 and source specific multicast protocols
- Displaying IGMP V3 information on Layer 3 Switches
- Clearing IGMP statistics
- IGMP Proxy
- IP multicast protocols and IGMP snooping on the same device
- Configuring IP
- Basic configuration
- Overview
- Basic IP parameters and defaults – Layer 3 Switches
- Basic IP parameters and defaults – Layer 2 Switches
- Configuring IP parameters – Layer 3 Switches
- Configuring IP addresses
- Configuring Domain Name Server (DNS) resolver
- Configuring packet parameters
- Changing the router ID
- Configuring ARP parameters
- Configuring forwarding parameters
- Disabling ICMP messages
- Disabling ICMP Redirect Messages
- Configuring static routes
- Configuring a default network route
- Configuring IP load sharing
- Configuring IRDP
- Configuring RARP
- Configuring UDP broadcast and IP helper parameters
- Configuring BootP/DHCP relay parameters
- DHCP Server
- Displaying DHCP server information
- DHCP Client-Based Auto-Configuration and Flash image update
- Configuring IP parameters – Layer 2 Switches
- Displaying IP configuration information and statistics
- Configuring Multicast Listening Discovery (MLD) Snooping on PowerConnect B-Series FCX Switches
- Overview
- Configuring MLD snooping
- Configuring the hardware and software resource limits
- Disabling transmission and receipt of MLD packets on a port
- Configuring the global MLD mode
- Modifying the age interval
- Modifying the query interval (Active MLD snooping mode only)
- Configuring the global MLD version
- Configuring report control
- Modifying the wait time before stopping traffic when receiving a leave message
- Modifying the multicast cache (mcache) aging time
- Disabling error and warning messages
- Configuring the MLD mode for a VLAN
- Disabling MLD snooping for the VLAN
- Configuring the MLD version for the VLAN
- Configuring the MLD version for individual ports
- Configuring static groups to the entire VLAN or to individual ports
- Configuring static router ports
- Turning off static group proxy
- Enabling MLDv2 membership tracking and fast leave for the VLAN
- Configuring fast leave for MLDv1
- Enabling fast convergence
- Displaying MLD snooping information
- Clear MLD snooping commands
- Configuring RIP (IPv4)
- Configuring OSPF Version 2 (IPv4)
- Overview of OSPF
- OSPF graceful restart
- Configuring OSPF
- Configuration rules
- OSPF parameters
- Enabling OSPF on the router
- Assigning OSPF areas
- Assigning an area range (optional)
- Assigning interfaces to an area
- Modifying interface defaults
- Changing the timer for OSPF authentication changes
- Block flooding of outbound LSAs on specific OSPF interfaces
- Configuring an OSPF non-broadcast interface
- Assigning virtual links
- Modifying virtual link parameters
- Changing the reference bandwidth for the cost on OSPF interfaces
- Defining redistribution filters
- Preventing specific OSPF routes from being installed in the IP route table
- Modifying the default metric for redistribution
- Enabling route redistribution
- Disabling or re-enabling load sharing
- Configuring external route summarization
- Configuring default route origination
- Modifying SPF timers
- Modifying the redistribution metric type
- Modifying the administrative distance
- Configuring OSPF group Link State Advertisement (LSA) pacing
- Modifying OSPF traps generated
- Specifying the types of OSPF Syslog messages to log
- Modifying the OSPF standard compliance setting
- Modifying the exit overflow interval
- Configuring an OSPF point-to-point link
- Configuring OSPF graceful restart
- Clearing OSPF information
- Displaying OSPF information
- Displaying general OSPF configuration information
- Displaying CPU utilization statistics
- Displaying OSPF area information
- Displaying OSPF neighbor information
- Displaying OSPF interface information
- Displaying OSPF route information
- Displaying OSPF external link state information
- Displaying OSPF link state information
- Displaying the data in an LSA
- Displaying OSPF virtual neighbor information
- Displaying OSPF virtual link information
- Displaying OSPF ABR and ASBR information
- Displaying OSPF trap status
- Displaying OSPF graceful restart information
- Configuring BGP4 (IPv4)
- Overview of BGP4
- BGP4 graceful restart
- Basic configuration and activation for BGP4
- BGP4 parameters
- Memory considerations
- Basic configuration tasks
- Optional configuration tasks
- Changing the Keep Alive Time and Hold Time
- Changing the BGP4 next-hop update timer
- Enabling fast external fallover
- Changing the maximum number of paths for BGP4 load sharing
- Customizing BGP4 load sharing
- Specifying a list of networks to advertise
- Changing the default local preference
- Using the IP default route as a valid next hop for a BGP4 route
- Advertising the default route
- Changing the default MED (Metric) used for route redistribution
- Enabling next-hop recursion
- Changing administrative distances
- Requiring the first AS to be the neighbor AS
- Disabling or re-enabling comparison of the AS-Path length
- Enabling or disabling comparison of the router IDs
- Configuring the Layer 3 Switch to always compare Multi-Exit Discriminators (MEDs)
- Treating missing MEDs as the worst MEDs
- Configuring route reflection parameters
- Configuration notes
- Aggregating routes advertised to BGP4 neighbors
- Configuring BGP4 graceful restart
- BGP null0 routing
- Modifying redistribution parameters
- Filtering
- Configuring route flap dampening
- Globally configuring route flap dampening
- Using a route map to configure route flap dampening for specific routes
- Using a route map to configure route flap dampening for a specific neighbor
- Removing route dampening from a route
- Removing route dampening from a neighbor routes suppressed due to aggregation
- Displaying and clearing route flap dampening statistics
- Generating traps for BGP
- Displaying BGP4 information
- Displaying summary BGP4 information
- Displaying the active BGP4 configuration
- Displaying CPU utilization statistics
- Displaying summary neighbor information
- Displaying BGP4 neighbor information
- Displaying peer group information
- Displaying summary route information
- Displaying the BGP4 route table
- Displaying BGP4 route-attribute entries
- Displaying the routes BGP4 has placed in the IP route table
- Displaying route flap dampening statistics
- Displaying the active route map configuration
- Displaying BGP4 graceful restart neighbor information
- Updating route information and resetting a neighbor session
- Clearing traffic counters
- Clearing route flap dampening statistics
- Removing route flap dampening
- Clearing diagnostic buffers
- Configuring VRRP and VRRPE
- Overview
- Comparison of VRRP and VRRPE
- VRRP and VRRPE parameters
- Configuring basic VRRP parameters
- Configuring basic VRRPE parameters
- Note regarding disabling VRRP or VRRPE
- Configuring additional VRRP and VRRPE parameters
- Forcing a Master router to abdicate to a standby router
- Displaying VRRP and VRRPE information
- Configuration examples
- Securing Access to Management Functions
- Securing access methods
- Restricting remote access to management functions
- Using ACLs to restrict remote access
- Defining the console idle time
- Restricting remote access to the device to specific IP addresses
- Restricting access to the device based on IP or MAC address
- Defining the Telnet idle time
- Changing the login timeout period for Telnet sessions
- Specifying the maximum number of login attempts for Telnet access
- Changing the login timeout period for Telnet sessions
- Restricting remote access to the device to specific VLAN IDs
- Designated VLAN for Telnet management sessions to a Layer 2 Switch
- Device management security
- Disabling specific access methods
- Setting passwords
- Setting up local user accounts
- Configuring SSL security for the Web Management Interface
- Configuring TACACS/TACACS+ security
- How TACACS+ differs from TACACS
- TACACS/TACACS+ authentication, authorization, and accounting
- TACACS authentication
- TACACS/TACACS+ configuration considerations
- Enabling TACACS
- Identifying the TACACS/TACACS+ servers
- Specifying different servers for individual AAA functions
- Setting optional TACACS/TACACS+ parameters
- Configuring authentication-method lists for TACACS/TACACS+
- Configuring TACACS+ authorization
- Configuring TACACS+ accounting
- Configuring an interface as the source for all TACACS/TACACS+ packets
- Displaying TACACS/TACACS+ statistics and configuration information
- Configuring RADIUS security
- RADIUS authentication, authorization, and accounting
- RADIUS configuration considerations
- RADIUS configuration procedure
- Configuring Dell-specific attributes on the RADIUS server
- Enabling SNMP to configure RADIUS
- Identifying the RADIUS server to the Dell PowerConnect device
- Specifying different servers for individual AAA functions
- Configuring a RADIUS server per port
- Mapping a RADIUS server to individual ports
- Setting RADIUS parameters
- Configuring authentication-method lists for RADIUS
- Configuring RADIUS authorization
- Configuring RADIUS accounting
- Configuring an interface as the source for all RADIUS packets
- Displaying RADIUS configuration information
- Configuring authentication-method lists
- TCP Flags - edge port security
- Configuring SSH2 and SCP
- Configuring 802.1X Port Security
- IETF RFC support
- How 802.1X port security works
- Configuring 802.1X port security
- Configuring an authentication method list for 802.1X
- Setting RADIUS parameters
- Configuring dynamic VLAN assignment for 802.1X ports
- Dynamically applying IP ACLs and MAC address filters to 802.1X ports
- Enabling 802.1X port security
- Setting the port control
- Configuring periodic re-authentication
- Re-authenticating a port manually
- Setting the quiet period
- Specifying the wait interval and number of EAP-request/ identity frame retransmissions from the Dell PowerConnect device
- Specifying the wait interval and number of EAP-request/ identity frame retransmissions from the RADIUS server
- Specifying a timeout for retransmission of messages to the authentication server
- Initializing 802.1X on a port
- Allowing access to multiple hosts
- Defining MAC address filters for EAP frames
- Configuring VLAN access for non-EAP-capable clients
- Configuring 802.1X accounting
- Displaying 802.1X information
- Sample 802.1X configurations
- Using multi-device port authentication and 802.1X security on the same port
- Using the MAC Port Security Feature
- Configuring Multi-Device Port Authentication
- How multi-device port authentication works
- Using multi-device port authentication and 802.1X security on the same port
- Configuring multi-device port authentication
- Enabling multi-device port authentication
- Specifying the format of the MAC addresses sent to the RADIUS server
- Specifying the authentication-failure action
- Generating traps for multi-device port authentication
- Defining MAC address filters
- Configuring dynamic VLAN assignment
- Dynamically applying IP ACLs to authenticated MAC addresses
- Enabling source guard protection
- Clearing authenticated MAC addresses
- Disabling aging for authenticated MAC addresses
- Changing the hardware aging period for blocked MAC addresses
- Specifying the aging time for blocked MAC addresses
- Specifying the RADIUS timeout action
- Multi-device port authentication password override
- Limiting the number of authenticated MAC addresses
- Displaying multi-device port authentication information
- Displaying authenticated MAC address information
- Displaying multi-device port authentication configuration information
- Displaying multi-device port authentication information for a specific MAC address or port
- Displaying the authenticated MAC addresses
- Displaying the non-authenticated MAC addresses
- Displaying multi-device port authentication information for a port
- Displaying multi-device port authentication settings and authenticated MAC addresses
- Displaying the MAC authentication table for PowerConnect B-Series FCX devices
- Example configurations
- Configuring Web Authentication
- Overview
- Configuration considerations
- Configuration tasks
- Enabling and disabling web authentication
- Configuring the web authentication mode
- Configuring web authentication options
- Enabling RADIUS accounting for web authentication
- Changing the login mode (HTTPS or HTTP)
- Specifying trusted ports
- Specifying hosts that are permanently authenticated
- Configuring the re-authentication period
- Defining the web authentication cycle
- Limiting the number of web authentication attempts
- Clearing authenticated hosts from the web authentication table
- Setting and clearing the block duration for web authentication attempts
- Manually blocking and unblocking a specific host
- Limiting the number of authenticated hosts
- Filtering DNS queries
- Forcing re-authentication when ports are down
- Forcing re-authentication after an inactive period
- Defining the web authorization redirect address
- Deleting a web authentication VLAN
- Web authentication pages
- Displaying web authentication information
- Protecting Against Denial of Service Attacks
- Inspecting and Tracking DHCP Packets
- Dynamic ARP inspection
- DHCP snooping
- How DHCP snooping works
- System reboot and the binding database
- Configuration notes and feature limitations
- Configuring DHCP snooping
- Clearing the DHCP binding database
- Displaying DHCP snooping status and ports
- Displaying the DHCP snooping binding database
- Displaying DHCP binding entry and status
- DHCP snooping configuration example
- DHCP relay agent information (DHCP Option 82)
- IP source guard
- Securing SNMP Access
- Using Syslog
- Overview
- Displaying Syslog messages
- Configuring the Syslog service
- Displaying the Syslog configuration
- Disabling or re-enabling Syslog
- Specifying a Syslog server
- Specifying an additional Syslog server
- Disabling logging of a message level
- Changing the number of entries the local buffer can hold
- Changing the log facility
- Displaying Interface names in Syslog messages
- Displaying TCP or UDP port numbers in Syslog messages
- Retaining Syslog messages after a soft reboot
- Clearing the Syslog messages from the local buffer
- Syslog messages
- Network Monitoring
- Software Specifications