• Author / Uploaded
• Radhames Fernandez

Citation preview

ExtremeXOS Operations and Configuration Lab Guide with PuTTY, Rev.12.1

Extreme Networks, Inc. 3585 Monroe Street Santa Clara, California 95051 (888) 257-3000 (408) 579-2800 http://www.extremenetworks.com Part number: DOC-01665 Rev 02

AccessAdapt, Alpine, BlackDiamond, ESRP, Ethernet Everywhere, Extreme Enabled, Extreme Ethernet Everywhere, Extreme Networks, Extreme Standby Router Protocol, Extreme Turbodrive, Extreme Velocity, ExtremeWare, ExtremeWorks, ExtremeXOS, the Go Purple Extreme Solution, Sentriant, ServiceWatch, ScreenPlay, Summit, SummitStack, Unified Access Architecture, Unified Access RF Manager, UniStack, Universal Port, the Extreme Networks logo, the Alpine logo, the BlackDiamond logo, the Extreme Turbodrive logo, the Summit logos, the Powered by ExtremeXOS logo, and the Color Purple, among others, are trademarks or registered trademarks of Extreme Networks, Inc. or its subsidiaries in the United States and/or other countries. Adobe, Flash, and Macromedia are registered trademarks of Adobe Systems Incorporated in the U.S. and/or other countries. AutoCell is a trademark of AutoCell. Avaya is a trademark of Avaya, Inc. Merit is a registered trademark of Merit Network, Inc. Internet Explorer is a registered vctrademark of Microsoft Corporation. Mozilla Firefox is a registered trademark of the Mozilla Foundation. sFlow is a registered trademark of sFlow.org. Solaris and Java are trademarks of Sun Microsystems, Inc. in the U.S. and other countries. Specifications are subject to change without notice. All other registered trademarks, trademarks, and service marks are property of their respective owners. © 2009 Extreme Networks, Inc. All Rights Reserved.

ii

ExtremeXOS™ Operation and Configuration, Rev. 12.1

Table of Contents PuTTY Console Configuration Student Objectives .................................................................................................................... vii Part 1: Clear the Registry ........................................................................................................... vii Part 2: Fill the Registry with Extreme’s Saved Sessions................................................................ viii Part 3: Run the PuTTY Executable............................................................................................... ix Part 4: Establish Initial Connection to the Virtual PC ..................................................................... xi Part 5: Virtual PC Tips ............................................................................................................... xii

Lab 1: Initial Switch Configuration Lab Student Objectives ..................................................................................................................... Part 1: Logging In, Initializing, and Configuring the Switch Name................................................... Part 2: Adding Users and Saving the Configuration........................................................................ Part 3: Limiting CLI Sessions, Failed Logins, and Telnet Access .....................................................

1 2 6 8

Lab 2: Switch Management Lab Student Objectives ................................................................................................................... Part 1: Verifying the Switch Status and Configuration .................................................................. Part 2: Configuring IP Access.................................................................................................... Part 3: Backing Up Configuration Files and Downloading Images .................................................. Part 4: Editing ASCII-formatted Configuration Files on a PC ......................................................... Part 5: Editing ASCII-formatted Configuration Files on the Switch ................................................ Part 6: Accessing the Bootstrap and BootRom Menus ..................................................................

13 14 15 17 21 23 26

Lab 3: Layer 1 Configuration Lab Student Objectives ................................................................................................................... Part 1: Setting Up for Auto-Negotiation, Half-Duplex, and Full-Duplex .......................................... Part 2: Auto-Negotiation, Half-Duplex, and Full-Duplex ............................................................... Part 3: Configuring the Client Workstation and Testing the Default Gateway................................... Part 4: Configuring Dynamic Address-based Load Sharing............................................................ Part 5: Enabling the Link-Layer Discovery Protocol ......................................................................

29 30 31 33 37 43

Lab 4: Configuring a Stacked Switch Demonstration........................................................................ 45

ExtremeXOS™ Operation and Configuration, Rev. 12.1

iii

Table of Contents

Lab 5: Layer 2 Forwarding Lab Student Objectives ................................................................................................................... 47 Part 1: Setting Up for Populating the Forwarding Database .......................................................... 48 Part 2: Populating the Forwarding Database................................................................................ 49 Part 3: Locking Learning............................................................................................................51 Part 4: Limiting Learning .......................................................................................................... 55 Part 5: Enabling Extreme Link Status Monitoring ........................................................................ 57

Lab 6: Port-based VLAN Configuration Lab Student Objectives ................................................................................................................... Part 1: Setting Up for Creating a Port-Based VLAN...................................................................... Part 2: Creating a Port-Based VLAN ........................................................................................... Part 3: Adding Ports to a VLAN ................................................................................................. Part 4: Configuring the Client Workstation .................................................................................. Part 5: Extending the VLAN Across Multiple Switches .................................................................

59 60 61 62 63 66

Lab 7: Tagged VLAN Configuration Lab Student Objectives ................................................................................................................... 69 Part 1: Setting Up for Configuring a Tagged VLAN and Adding Tagged and Untagged Ports ............. 70 Part 2: Configuring the Client Workstation .................................................................................. 71 Part 3: Configuring a Tagged VLAN and Adding Tagged and Untagged Ports ..................................75 Part 4: Adding a Second Tagged VLAN and Trunked Ports ........................................................... 77 Part 5: Adding Additional Tagged Ports ...................................................................................... 79 Part 6: Reconfiguring the Client Workstation............................................................................... 81

Lab 8: Spanning Tree Configuration Lab Student Objectives ................................................................................................................... Part 1: Setting Up for Spanning Tree Configuration ..................................................................... Part 2: Configuring the Client Workstation .................................................................................. Part 3: Creating and Validating a Spanning Tree Domain.............................................................. Part 4: Changing and Validating Bridge Priority ...........................................................................

83 85 86 90 94

Lab 9: Basic EAPS Configuration Lab Student Objectives ................................................................................................................... 97 Part 1: Creating the EAPS Control VLAN..................................................................................... 99 Part 2: Creating and Configuring the EAPS Domain ................................................................... 101 Part 3: Verifying the EAPS Domain Configuration and Operation ................................................. 102 Part 4: Configuring the Client Workstation ................................................................................ 103 Part 5: Testing the EAPS Configuration .................................................................................... 107

iv

ExtremeXOS™ Operation and Configuration, Rev. 12.1

Table of Contents

Lab 10: Static Route/IP Forwarding Configuration Lab Student Objectives .................................................................................................................111 Part 1: Setting Up for Creating Router Interfaces ...................................................................... 112 Part 2: Creating Router Interfaces.............................................................................................113 Part 3: Enabling IP Forwarding and Creating a Default Route ..................................................... 115 Part 4: Configuring the Client Workstation ................................................................................ 117 Part 5: Verifying and Testing IP Forwarding and the Static Route................................................ 121

Lab 11: Routing Information Protocol (RIP) Configuration Lab Student Objectives ................................................................................................................. Part 1: Setting Up for Verifying the Router Interfaces ................................................................ Part 2: Verifying the Router Interfaces...................................................................................... Part 3: Enabling IP Forwarding and Adding VLANs to RIP .......................................................... Part 4: Enabling RIP and Verifying Protocol Operation ............................................................... Part 5: Configuring the Client Workstation ................................................................................ Part 6: Verifying and Testing IP Forwarding and RIP.................................................................

123 124 125 126 128 132 136

Lab 12: Open Shortest Path First (OSPF) Configuration Lab Student Objectives ................................................................................................................. Part 1: Setting Up for Verifying the Router Interfaces ................................................................ Part 2: Verifying the Router Interfaces...................................................................................... Part 3: Enabling IP Forwarding and Configuring OSPF ............................................................... Part 4: Enabling OSPF and Verifying the Protocol Operation ....................................................... Part 5: Configuring the Client Workstation ................................................................................ Part 6: Verifying and Testing IP Forwarding and OSPF ...............................................................

139 140 141 142 145 147 151

Lab 13: Netlogin Using Local MAC Address Authentication Configuration Lab Student Objectives ................................................................................................................. 155 Part 1: Setting up for Netlogin ................................................................................................ 156 Part 2: Configuring the Client Workstation ................................................................................ 157 Part 3: Displaying the Network Login Configuration ................................................................... 161 Part 4: Configuring the Network Login VLAN............................................................................. 161 Part 5: Configuring MAC Address Authentication....................................................................... 161 Part 6: Managing the Authorized MAC Addresses ...................................................................... 162 Part 7: Testing the Configuration .............................................................................................163 Part 8: Just in Case.... ............................................................................................................164

ExtremeXOS™ Operation and Configuration, Rev. 12.1

v

Table of Contents

Lab 14: Universal Port Configuration Lab Student Objectives .................................................................................................................169 Part 1: Setting Up for Loading and Validating the Netlogin Configuration ....................................170 Part 2: Loading and Validating the Netlogin Configuration.......................................................... 171 Part 3: Configuring the Client Workstations............................................................................... 173 Part 4: Creating the Universal Port Profiles and Binding to an Event ...........................................181 Part 5: Universal Port, Netlogin, and MAC-Based Authentication ................................................ 183 Part 6: Triggering and Validating the Event Profile..................................................................... 184

Lab 15: Quality of Service (QoS) Configuration Lab Student Objectives ................................................................................................................. Part 1: Creating the EAPS Control VLAN................................................................................... Part 2: Configuring the Client Workstations............................................................................... Part 3: Best-Effort Traffic Modeling ......................................................................................... Part 4: Configuring Quality of Service, Assigning it to a VLAN, and Verifying Priority Service .........

189 191 193 199 202

Lab 16: Switch Diagnostics Lab Student Objectives ................................................................................................................. Part 1: Resetting the Switch to Factory Default ......................................................................... Part 2: Monitoring Processes................................................................................................... Part 3: Terminating and Restarting Processes ........................................................................... Part 4: Running Normal Diagnostics ........................................................................................ Part 5: Running Extended Diagnostics .....................................................................................

205 206 208 210 211 214

Lab 17: Network Troubleshooting Lab Student Objectives ................................................................................................................. 217 Part 1: Setting Up the Lab Switch ...........................................................................................218 Part 2: Configuring the Client Workstation ................................................................................219 Error Identification and Resolution Worksheet ...........................................................................223

Appendix A: Lab Network Diagrams .............................................................................................. 225

vi

ExtremeXOS™ Operation and Configuration, Rev. 12.1

PuTTY Console Configuration PuTTY, developed by Simon Tatham, is a client program for the SSH, Telnet, and Rlogin network protocols that are used to run a remote session on a computer, over a network. PuTTY implements the client end of that session: that is, the end at which the session is displayed, rather than the end at which it runs. We are using SSH and host keys for maximum security. Saved sessions, which contain a full set of configuration options plus a host name and protocol, have been preconfigured to provide quick access to switches and virtual PCs used in the labs. Follow the instructions below to configure PuTTY, which enables access to the lab switches and virtual PCs.

Student Objectives In this lab, you will: ●

Clear the Simon Tatham directory from the registry (do this only if it already exists on your PC).

●

Fill the registry with Extreme’s saved sessions by opening PuTTY_master.reg.

●

Run the PuTTY executable.

●

Load preconfigured PuTTY profile settings and select the proper key.

●

Establish an initial connection to your switch and virtual PC.

Part 1: Clear the Registry 1 The instructor provides the two required PuTTY files via jump drive. Move those files directly onto your desktop. They are extreme_puttyA.reg (or extreme_puttyB.reg) and putty.exe. 2 The instructor provides the remote authentication password and assigns student numbers SS_1 through SS_6. Remote authentication password for this class is: _______________________. You are assigned SS - _____. 3 From the Start Menu, choose Run... In the run window type regedit and click OK.

ExtremeXOS™ Operation and Configuration, Rev. 12.1

vii

PuTTY Console Configuration

4 To clear any previous version of Saved Sessions/Keys from the registry. When the Registry Editor window opens look for Simon Tatham in the registry. Navigate to: My Computer > HKEY_CURRENT_USER > Software > Simon Tatham 5 To clear any previous version of Saved Sessions/Keys from the registry - look for Simon Tatham in the registry. If you do not have an entry for Simon Tatham in your registry proceed to step 7. 6 Highlight Simon Tatham; right-click and select Delete.

Part 2: Fill the Registry with Extreme’s Saved Sessions 7 Double-click on the extreme-puttyA.reg (or extreme-puttyB.reg) file on your desktop.

viii

ExtremeXOS™ Operation and Configuration, Rev. 12.1

PuTTY Console Configuration 8 When you see this message click Yes.

9 When you see this message click OK.

Part 3: Run the PuTTY Executable 10 Double-click on the Putty.exe application on your desktop. Notice that there are many preconfigured Saved Sessions as shown below:

 

ExtremeXOS™ Operation and Configuration, Rev. 12.1

ix

PuTTY Console Configuration

11 Using the number assigned to you by the instructor, SS-1 through SS-6, double-click on SS- {your number} in the Saved Sessions window. 12 When you see the PuTTY Security Alert window open- click Yes.

13 When the switch console window opens, enter [the remote authentication password obtained from your instructor] then press Enter twice. 14 To log on to the switch, enter the following: Login: admin password: no password -- press Enter again, this brings up SS-X (Student Switch-1 shown).

x

ExtremeXOS™ Operation and Configuration, Rev. 12.1

PuTTY Console Configuration

Part 4: Establish Initial Connection to the Virtual PC The RD-X Saved Session allows you to tunnel through and connect to your Virtual PCs. 15 Double-click on Putty.exe then double-click on RD-X in Saved Sessions. Enter [the remote authentication password obtained from your instructor] then press Enter twice.. When the $ appears the Remote Desktop Connection Tunnel is open. Leave this window open.

16 Go to your Start Menu > Programs > Accessories > Remote Desktop Connection. 17 In the Computer: window enter: 127.0.0.1:101X, where X is the number assigned by your instructor (1-6), and select Connect. This example shows Student One's Virtual PC.

18 When Log On to Windows prompt appears, type User Name: student and Password: student

ExtremeXOS™ Operation and Configuration, Rev. 12.1

xi

PuTTY Console Configuration Once connected, you can control your Virtual PC as long as the RD-X tunnel remains open. This completes the initial connection to your switch and a Virtual PC. You will use this pre-configured connection throughout the course. Proceed with the lab when directed by your instructor.

Part 5: Virtual PC Tips Closing the virtual machine connection: ●

If you choose to close the remote desktop connection to 127.0.0.101X, the best practice is to logoff the virtual PC using Start Menu > Logoff.

Rebooting the virtual machine(ALT-CTRL-END): ●

xii

If for some reason the virtual machine needs to be rebooted, hold down on the ALT-CTRL-END keys and then select the Shutdown tab and choose restart.

ExtremeXOS™ Operation and Configuration, Rev. 12.1

1

Initial Switch Configuration Lab

Student Objectives This lab provides you with hands-on experience using the Command Line Interface (CLI) to configure secure user accounts. At the end of this lab, you will be able to: ●

Login to the switch

●

Assign a name to the switch

●

Create a new user account

●

Save changes to the active switch configuration

●

Change, test, verify, and reset user access settings

●

Change and verify SNMP access privileges

●

Change and verify Telnet settings

Figure 1: Initial Switch Configuration Lab

Refer to the values in Table 1 to configure switch parameters for this lab.

ExtremeXOS™ Operation and Configuration, Rev. 12.1

1

Initial Switch Configuration Lab

Table 1: Lab Groups and Switch Names Lab Group Number

Functional Name

Switch Name

1

Sales Management

SAM_1

2

Executive Staff

EXC_2

3

Accounting

ACT_3

4

Manufacturing Floor

MFG_4

5

Engineering

ENG_5

6

Human Resources

HUR_6

Part 1: Logging In, Initializing, and Configuring the Switch Name In this exercise you will enter configuration parameters for your switch. 1 Maximize the switch console window or launch your switch’s saved session profile and login with the credentials admin and no password, press the Enter key.

2 At the command prompt enter: unconfigure switch all

3 Enter y when asked this question: Restore all factory defaults and reboot? (y/N)

2

ExtremeXOS™ Operation and Configuration, Rev. 12.1

Initial Switch Configuration Lab 4 A switch that is in the process of booting, displays the following: Loading EXOS Image ...| Running Image ... Starting ExtremeXOS 12.1.0b61 Copyright (C) 1996-2008 Extreme Networks. All rights reserved. Protected by US Patent Nos: 6,678,248; 6,104,700; 6,766,482; 6,618,388; 6,034,957; 6,859,438; 6,912,592; 6,954,436; 6,977,891; 6,980,550; 6,981,174; 7,003,705; 7,017,082; 7,046,665; 7,126,923; 7,142,509; 7,149,217; 7,152,124; 7,154,861; 7,245,619; 7,245,629; 7,269,135. (pending-AAA) login:

The (pending-AAA) login: prompt is a restricted login made available while the switch is still in the process of loading remaining software components. Logging in at this point will not provide access to switch management and configuration, and attempting to use standard login accounts will result in failure. Wait until you see the following prompt before proceeding: Authentication Service (AAA) on the master node is now available for login.

5 Press the Enter key until the system displays the login prompt. 6 Enter admin. The password prompt displays. 7 The switch will not have an admin password configured. Press the Enter key. The following displays: This switch currently has all management methods enabled for security reasons. Please answer these questions about the security settings you would like to use. Telnet is enabled by default. Telnet is unencrypted and has been the trget of security exploits in the past. Would you like to disable Telnet? [y/N]

8 Enter n and press the Enter key. The following displays: SNMP access is enabled by default. SNMP uses no encryption, SNMPv3 can be configured to eliminate this problem. Would you like to disable SNMP? [y/N]:

9 Enter y and press the Enter key. 10 The following displays: All ports are enabled by default. In some secure applications, it maybe more desirable for the ports to be turned off. Would you like unconfigured ports to be turned off by default? [y/N]:

11 Enter y and press the Enter key.

ExtremeXOS™ Operation and Configuration, Rev. 12.1

3

Initial Switch Configuration Lab 12 When asked to change the default failsafe account username and password, enter no and press the Enter key. 13 When asked if you would like to permit failsafe account access via the management port enter no. A message outlining actions that would increase the security of your network follows, then the command line prompt appears again. 14 Display the default switch management configuration, by entering the following command: show management The following displays: CLI idle timeout CLI max number of login attempts CLI max number of sessions CLI paging CLI space-completion CLI configuration logging CLI scripting CLI scripting error mode CLI persistent mode Telnet access SSH access all) Total Read Only Communities Total Read Write Communities RMON SNMP access SNMP Traps SNMP v1/v2c TrapReceivers SNMP stats: 0 SNMP traps:

: : : : : : : : : : : :

Enabled (20 minutes) 3 8 Enabled (this session only) Disabled (this session only) Disabled Disabled (this session only) Ignore-Error (this session only) Persistent (this session only) Enabled (tcp port 23 vr all) Access Profile : not set Disabled (Key invalid, tcp port 22 vr

: : : : : : : :

Access Profile : not set 1 1 Disabled Disabled Access Profile Name : not set Enabled None

InPkts 0

OutPkts

Gets Sent

GetNexts 0 Sets AuthTraps Enabled

0 0

0

Errors 0

AuthErrors

0

15 Configure the SNMP system name of the switch, by entering the following command: configure snmp sysname Where is the switch name identified for your lab group in Table 1. 16 The command line prompt with the new system name displays. * X450a-24t.2 # configure snmp sysname * .3 #

17 Verify that all the data ports are disabled, by entering the following command: show ports configuration

4

ExtremeXOS™ Operation and Configuration, Rev. 12.1

Initial Switch Configuration Lab The system displays the configurable physical attributes for each port on the switch as shown below: Port Configuration Monitor Wed Feb 20 20:43:20 2008 Port Virtual Port Link Auto Speed Duplex Flow Load Media router State State Neg Cfg Actual Cfg Actual Cntrl Master Pri Red =============================================================================== 1 VR-Default D R ON AUTO AUTO UTP 2 VR-Default D R ON AUTO AUTO UTP 3 VR-Default D R ON AUTO AUTO UTP 4 VR-Default D R ON AUTO AUTO UTP 5 VR-Default D R ON AUTO AUTO UTP 6 VR-Default D R ON AUTO AUTO UTP 7 VR-Default D R ON AUTO AUTO UTP 8 VR-Default D R ON AUTO AUTO UTP 9 VR-Default D R ON AUTO AUTO UTP 10 VR-Default D R ON AUTO AUTO UTP 11 VR-Default D R ON AUTO AUTO UTP 12 VR-Default D R ON AUTO AUTO UTP 13 VR-Default D R ON AUTO AUTO UTP 14 VR-Default D R ON AUTO AUTO UTP 15 VR-Default D R ON AUTO AUTO UTP 16 VR-Default D R ON AUTO AUTO UTP =============================================================================== Link Status : A-Active, R-Ready, NP-Port Not Present, L-Loopback Port State: D-Disabled, E-Enabled, Media: !-Unsupported Optic Module 0->Clear Counters U->page up D->page down ESC->exit

18 Press the Esc key. Display the login session, by entering the following command: show session The switch reports all active sessions, including the user name, they type of access, and the level of authorization as shown below: CLI # Login Time User Type Auth Auth Location ================================================================================ *1 Wed Feb 20 20:36:31 2008 admin console local dis serial

19 Enable SNMP access to the switch, by entering the following command: enable snmp access 20 Display the switch management configuration, by entering the following command: show management

ExtremeXOS™ Operation and Configuration, Rev. 12.1

5

Initial Switch Configuration Lab The following displays: CLI idle timeout CLI max number of login attempts CLI max number of sessions CLI paging CLI space-completion CLI configuration logging CLI scripting CLI scripting error mode CLI persistent mode Telnet access SSH access Total Read Only Communities Total Read Write Communities RMON SNMP access SNMP Traps SNMP v1/v2c TrapReceivers SNMP stats: SNMP traps:

InPkts 0 Gets 0 Sent 0

: : : : : : : : : : : : : : : : : : : :

Enabled (20 minutes) 3 8 Enabled (this session only) Disabled (this session only) Disabled Disabled (this session only) Ignore-Error (this session only) Persistent (this session only) Enabled (tcp port 23 vr all) Access Profile : not set Disabled (Key invalid, tcp port 22 vr all) Access Profile : not set 1 1 Disabled Enabled Access Profile Name : not set Enabled None

OutPkts 0 Errors 0 GetNexts 0 Sets 0 AuthTraps Enabled

AuthErrors 0

21 Notice the new configuration setting for SNMP access, it is now enabled.

Part 2: Adding Users and Saving the Configuration In this exercise you will create additional users and save your configuration as the primary. 1 Create a new administrator level user account, by entering the following command: create account admin ADMIN_X Where X is your lab group number assigned in Table 1. The system displays the following prompt: Password:

2 Leave the password blank by pressing the Enter key again. The following prompt displays: Reenter Password:

3 Press the Enter key again. 4 Verify the new user account information by entering the following command: show accounts

6

ExtremeXOS™ Operation and Configuration, Rev. 12.1

Initial Switch Configuration Lab The user account information displays: User Name Access LoginOK Failed -------------------------------- ------ ------admin R/W 1 user RO 0 ADMIN_X R/W 0

-----0 0 0

5 Save the configuration to nonvolatile storage, by entering the following command: save primary 6 The following displays: No default configuration database has been selected to boot up the system. Save configuration will set the new configuration as the default database. The configuration file primary.cfg already exists. Do you want to save configuration to primary.cfg and overwrite it? (y/n)

7 Enter y. The following displays: Saving configuration ........ done! Configuration saved to primary.cfg successfully.

8 Log out of the switch, by entering the following command: logout The login prompt displays. 9 Login as the new user, ADMIN_X, created in Part 2, Step 1 above. Remember that both login names and passwords are case-sensitive. 10 Display the login session, by entering the following command: show session The following displays: CLI # Login Time User Type Auth Auth Location ================================================================================ *2 Mon Aug 25 10:26:47 2008 ADMIN_X console local dis serial

ExtremeXOS™ Operation and Configuration, Rev. 12.1

7

Initial Switch Configuration Lab

Part 3: Limiting CLI Sessions, Failed Logins, and Telnet Access In this exercise you will set controls for login sessions. This includes setting the maximum number of CLI sessions per user, the number of times a user can log in incorrectly, and Telnet access parameters. 1 Display the switch management configuration, by entering the following command: show management CLI idle timeout CLI max number of login attempts CLI max number of sessions CLI paging CLI space-completion CLI configuration logging CLI scripting CLI scripting error mode CLI persistent mode Telnet access SSH access Total Read Only Communities Total Read Write Communities RMON SNMP access SNMP Traps SNMP v1/v2c TrapReceivers SNMP stats: SNMP traps:

InPkts 0 Gets 0 Sent 0

: : : : : : : : : : : : : : : : : : : :

Enabled (20 minutes) 3 8 Enabled (this session only) Disabled (this session only) Disabled Disabled (this session only) Ignore-Error (this session only) Persistent (this session only) Enabled (tcp port 23 vr all) Access Profile : not set Disabled (Key invalid, tcp port 22 vr all) Access Profile : not set 1 1 Disabled Enabled Access Profile Name : not set Enabled None

OutPkts 0 Errors 0 GetNexts 0 Sets 0 AuthTraps Enabled

AuthErrors 0

2 Notice the configuration settings for CLI max number of login attempts, CLI max number of sessions, and Telnet access. 3 Limit the number of CLI sessions to 2, by entering the following command: configure cli max-sessions 2 4 Limit the number of login attempts to two, by entering the following command: configure cli max-failed-logins 2 5 Limit Telnet connections to the virtual router VR-MGMT, by entering the following command: configure telnet vr vr-mgmt 6 Enable the lockout on login failure feature, by entering the following command: configure account ADMIN_X password-policy lockout-on-login-failures on Where ADMIN_X is the name of the account created in Part 2, Step 1.

8

ExtremeXOS™ Operation and Configuration, Rev. 12.1

Initial Switch Configuration Lab 7 Display the switch management configuration, by entering the following command: show management CLI idle timeout CLI max number of login attempts CLI max number of sessions CLI paging CLI space-completion CLI configuration logging CLI scripting CLI scripting error mode CLI persistent mode Telnet access SSH access Total Read Only Communities Total Read Write Communities RMON SNMP access SNMP Traps SNMP v1/v2c TrapReceivers SNMP stats: SNMP traps:

InPkts 0 Gets 0 Sent 0

: : : : : : : : : : : : : : : : : : : :

Enabled (20 minutes) 2 2 Enabled (this session only) Disabled (this session only) Disabled Disabled (this session only) Ignore-Error (this session only) Persistent (this session only) Enabled (tcp port 23 vr VR-Mgmt) Access Profile : not set Disabled (Key invalid, tcp port 22 vr all) Access Profile : not set 1 1 Disabled Enabled Access Profile Name : not set Enabled None

OutPkts 0 Errors 0 GetNexts 0 Sets 0 AuthTraps Enabled

AuthErrors 0

8 Notice the configuration changes between this display and the previous for CLI max number of login attempts, CLI max number of sessions, and Telnet access. 9 Save the configuration to nonvolatile storage, by entering the following command: save primary The following displays: The configuration file primary.cfg already exists. Do you want to save configuration to primary.cfg and overwrite it? (y/n)

10 Enter y. The following displays: Saving configuration ........ done! Configuration saved to primary.cfg successfully.

11 Log out of the switch, by entering the following command: logout The system displays the login prompt. 12 Attempt to log in as the new user created in Part 2, Step 1 above, but use an invalid password (the current password is null). Remember that both login names and passwords are case-sensitive. 13 Repeat the login attempt with an invalid password. After the second failed login attempt, the following message displays: Login incorrect Maximum number of login attempts reached! Account locked out! Please contact the administrator to remove the lock.

ExtremeXOS™ Operation and Configuration, Rev. 12.1

9

Initial Switch Configuration Lab 14 Log back in using the original admin credentials: user name: admin password: 15 Display the user account information for the switch by entering the following command: show accounts The system displays the user account information as shown below: User Name Access LoginOK -------------------------------- ------ ------admin R/W 2 user RO 0 ADMIN_X* R/W 1 (*) - Account locked

Failed -----0 0 2

16 Clear the lock on the flagged account by entering the following command: clear account ADMIN_X lockout 17 Restore the number of CLI sessions to 8, by entering the following command: configure cli max-sessions 8 18 Restore Telnet connections to the all virtual routers, by entering the following command: configure telnet vr all 19 Display the switch management configuration, by entering the following command: show management The following displays: CLI idle timeout CLI max number of login attempts CLI max number of sessions CLI paging CLI space-completion CLI configuration logging CLI scripting CLI scripting error mode CLI persistent mode Telnet access SSH access Total Read Only Communities Total Read Write Communities RMON SNMP access SNMP Traps SNMP v1/v2c TrapReceivers SNMP stats: SNMP traps:

InPkts 0 Gets 0 Sent 0

: : : : : : : : : : : : : : : : : : : :

Enabled (20 minutes) 2 8 Enabled (this session only) Disabled (this session only) Disabled Disabled (this session only) Ignore-Error (this session only) Persistent (this session only) Enabled (tcp port 23 vr all) Access Profile : not set Disabled (Key invalid, tcp port 22 vr all) Access Profile : not set 1 1 Disabled Enabled Access Profile Name : not set Enabled None

OutPkts 0 Errors 0 GetNexts 0 Sets 0 AuthTraps Enabled

AuthErrors 0

20 Notice the entries for CLI max number of sessions and Telnet access. 21 Save the configuration to nonvolatile storage, by entering the following command: save primary

10

ExtremeXOS™ Operation and Configuration, Rev. 12.1

Initial Switch Configuration Lab The following displays:

No default configuration database has been selected to boot up the system. Save configuration will set the new configuration as the default database. The configuration file primary.cfg already exists. Do you want to save configuration to primary.cfg and overwrite it? (y/N)

22 Enter y. The following displays: Saving configuration ........ done! Configuration saved to primary.cfg successfully.

23 Log out of the switch, by entering the following command: logout

ExtremeXOS™ Operation and Configuration, Rev. 12.1

11

Initial Switch Configuration Lab

12

ExtremeXOS™ Operation and Configuration, Rev. 12.1

2

Switch Management Lab

Student Objectives This lab provides you with a hands-on experience configuring the switch for basic IP management and to transfer configuration files. At the end of this lab, you will be able to: ●

Identify ExtremeXOS software, switch boot images, and configuration files.

●

Save the switch configuration.

●

Assign an IP address to a VLAN.

●

Backup the switch configuration.

●

Upload the current configuration as a command script.

●

Edit and load command scripts.

●

Download a software image.

Figure 1: Switch Management Lab

ExtremeXOS™ Operation and Configuration, Rev. 12.1

13

Switch Management Lab Refer to the values in Table 1 to configure switch parameters for this lab.

Table 1: Lab Groups and VLAN IP Addresses Lab Group

Functional Name

Switch Name

VLAN Name

VLAN IP Address

1

Sales Management

SAM_1

Mgmt

192.168.0.11/24

2

Executive Staff

EXC_2

Mgmt

192.168.0.12/24

3

Accounting

ACT_3

Mgmt

192.168.0.13/24

4

Manufacturing Floor

MFG_4

Mgmt

192.168.0.14/24

5

Engineering

ENG_5

Mgmt

192.168.0.15/24

6

Human Resources

HUR_6

Mgmt

192.168.0.16/24

Part 1: Verifying the Switch Status and Configuration 1 Log into the switch and load the baseline configuration for this lab by entering the following command: use configuration Lab_ECF02-X Where X is your lab group number found in Table 1. 2 Reboot the switch by entering the following command: reboot If there were any unsaved changes on the switch, indicated with an asterisk (*) preceding the command line label, the system will display the following: Do you want to save configuration changes to currently selected configuration file (XXXXXX.cfg) and reboot? (y - save and reboot, n - reboot without save, - cancel command)

3 Enter n to reboot without save. If there were no unsaved changes on the switch, the system will display the following:

Are you sure you want to reboot the switch? (y/N)

4 Enter y to reboot the switch if this message appears. When the boot process is complete, the switch displays the following: Authentication Service (AAA) on the master node is now available for login.

5 Press the Enter key to bring up the login prompt. Enter admin and press the Enter key. The switch will then display the following prompt for the password: login: admin password:

6 Press the Enter key again (by default, there is no password). You are now ready to begin configuring the switch.

14

ExtremeXOS™ Operation and Configuration, Rev. 12.1

Switch Management Lab 7 Display the switch status by entering the following command: show switch The following is a generic example of the system display: SysName: SysLocation: SysContact: System MAC:

SysHealth check: Recovery Mode: System Watchdog:

Enabled (Normal) All Enabled

Current Time: Timezone: Boot Time: Boot Count: Next Reboot:

Wed Feb 20 00:37:24 2008 [Auto DST Disabled] GMT Offset: 0 minutes, name is UTC. Fri Feb 15 00:00:00 2008 1 None scheduled

Current State: Image Selected: Image Booted: Primary ver: Secondary ver:

OPERATIONAL primary primary 12.1.0.0 12.1.0.0

Config Selected: Config Booted:

primary.cfg Factory Default

primary.cfg

Created by ExtremeXOS version 12.1.0.0 99316 bytes saved on Tue Feb 19 16:34:27 2008

[email protected], +1 888 257 3000 NN:NN:NN:NN:NN:NN

8 For your switch, notice the entries for the following parameters: system name, MAC address, system boot time, software image selected, software image booted, switch configuration selected, switch configuration booted, and the date the primary configuration was last saved.

Part 2: Configuring IP Access This exercise shows you how to assign an IP address to the management VLAN and save the configuration. 1 Display the status of the dedicated management VLAN by entering the following command: show vlan mgmt

ExtremeXOS™ Operation and Configuration, Rev. 12.1

15

Switch Management Lab The following displays: VLAN Interface with name Mgmt created by user Admin State: Enabled Tagging: 802.1Q Tag 4095 Virtual router: VR-Mgmt IPv6: None STPD: None Protocol: Match all unfiltered protocols Loopback: Disabled NetLogin: Disabled QosProfile: None configured Flood Rate Limit QosProfile: None configured Ports: 1. (Number of active ports=1) Untag: Mgmt-port on Mgmt is down

2 Assign an IP address to VLAN Mgmt by entering the following command: configure vlan mgmt ipaddress 192.168.0.1X/24 Where X is the value assigned to each lab group in Table 1. Correctly configuring the interface results in the following message being displayed: IP interface for VLAN Mgmt has been created.

3 Verify the IP address and mask of VLAN Mgmt by entering the following command: show vlan mgmt Now the default VLAN configuration displays with the Primary IP address and mask: VLAN Interface with name Mgmt created by user Admin State: Enabled Tagging: 802.1Q Tag 4095 Virtual router: VR-Mgmt Primary IP : 192.168.0.1X/24 IPv6: None STPD: None Protocol: Match all unfiltered protocols Loopback: Disabled NetLogin: Disabled QosProfile: None configured Flood Rate Limit QosProfile: None configured Ports: 1. (Number of active ports=1) Untag: Mgmt-port on Mgmt is active

4 Use PING to test for IP connectivity between the lab switch and the TFTP server. At the command prompt, enter the following: ping vr vr-mgmt 192.168.0.101 5 Notice that, because the mgmt VLAN is not a member of the default virtual router, the virtual router vr-mgmt must be specified in the command. 6 Display the history of commands for the current session by entering the following command: history The command history displays. 7 Use the command recall function by pressing the up arrow key to display the show switch command again and press the Enter key. The switch management configuration displays.

16

ExtremeXOS™ Operation and Configuration, Rev. 12.1

Switch Management Lab 8 Save the base lab configuration to nonvolatile storage, by entering the following command: save configuration switch_X Where X is your lab group number found in Table 1. If the system informs you that this config already exists and asks if you wish to save it - enter yes.

The configuration file switch_X.cfg already exists. Do you want to save configuration to switch_X.cfg and overwrite it? (y/N) Yes Saving configuration on master ......... done! Configuration saved to switch_X.cfg successfully.

9 Enter n at the following prompt because we do not want to make this the default configuration: The current selected default configuration database to boot up the system (Lab_ECF02-X.cfg) is different than the one just saved (switch_X.cfg). Do you want to make switch_4.cfg the default database? (y/N) No

The following displays: Default configuration database selection cancelled.

Part 3: Backing Up Configuration Files and Downloading Images In this exercise you will use the copy command to back up files and download configuration files from a TFTP server. 1 Copy the primary configuration file used in the Initial Switch Configuration Lab by entering the following command: cp primary.cfg switch_X.cfg Where X is the value assigned to your group in Table 1. 2 Enter y at the following prompt: Copy config primary.cfg to config switch_X.cfg on switch? (y/N) Yes

3 Verify the file has been created by entering the following command: ls

ExtremeXOS™ Operation and Configuration, Rev. 12.1

17

Switch Management Lab The following is a sample file list display: -rw-rw-rw-rw-rw-rw-rw-r--r--rw-r--r--rw-rw-rw-rw-r--r--rw-rw-rw-rw-rw-rw-

1 1 1 1 1 1 1 1

root root root root root root root root

0 0 0 0 0 0 0 0

136986 117497 1400 2341 114209 67 114231 114231

Jun Aug Jul Jul Aug Jul Aug Aug

13 20 28 28 8 11 25 28

08:09 09:26 14:20 14:22 08:37 02:44 09:58 11:12

Lab_IGP06-4.cfg Lab_NTLGN-4.cfg MFG_4a.xsf MFG_4b.xsf TFTPMAN-4.cfg pim-crp.pol primary.cfg switch_X.cfg

4 Rename the test file, by entering the following command: mv switch_X.cfg newname.cfg 5 Enter y at the following prompt: Rename config switch_X.cfg to config newname.cfg on switch? (y/N) Yes

6 Verify the file has been created by entering the following command: ls The list of files displays: -rw-rw-rw-rw-rw-rw-rw-r--r--rw-r--r--rw-rw-rw-rw-rw-rw-rw-r--r--rw-rw-rw-

1 1 1 1 1 1 1 1

root root root root root root root root

0 0 0 0 0 0 0 0

136986 117497 1400 2341 114209 114231 67 114231

Jun Aug Jul Jul Aug Aug Jul Aug

13 20 28 28 8 28 11 25

08:09 09:26 14:20 14:22 08:37 11:12 02:44 09:58

Lab_IGP06-4.cfg Lab_NTLGN-4.cfg MFG_4a.xsf MFG_4b.xsf TFTPMAN-4.cfg newname.cfg pim-crp.pol primary.cfg

7 Remove the file by entering the following command: rm newname.cfg Enter y at the following prompt:

Remove newname.cfg from switch? (y/n)

8 Verify the file has been removed, by entering the following command: ls The list of files displays: -rw-rw-rw-rw-rw-rw-rw-r--r--rw-r--r--rw-rw-rw-rw-r--r--rw-rw-rw-

18

1 1 1 1 1 1 1

root root root root root root root

0 0 0 0 0 0 0

136986 117497 1400 2341 114209 67 114231

Jun Aug Jul Jul Aug Jul Aug

13 20 28 28 8 11 25

08:09 09:26 14:20 14:22 08:37 02:44 09:58

Lab_IGP06-4.cfg Lab_NTLGN-4.cfg MFG_4a.xsf MFG_4b.xsf TFTPMAN-4.cfg pim-crp.pol primary.cfg

ExtremeXOS™ Operation and Configuration, Rev. 12.1

Switch Management Lab 9 Backup the current configuration to a TFTP server by entering the following command: tftp 192.168.0.101 -v vr-mgmt -p -l primary.cfg -r upload_X.cfg The file transfer progress displays: Uploading upload_X.cfg to 192.168.0.101 ......done!

NOTE Wait here until the instructor verifies that the configuration file has been successfully copied to the TFTP upload directory.

10 Upon the instructor’s direction, download the first image file by entering the following command: download image 192.168.0.101 summitX450-11.6.4.11.xos vr vr-mgmt secondary Enter n at the following prompt: Do you want to install image after downloading? (y - yes, n - no, - cancel)

The following displays: Downloading to Switch.....................................................

11 Verify that the secondary software image version is on the switch by entering the following command: show switch 12 Install the downloaded image to the secondary image location by entering the following command: install image summitX450-11.6.4.11.xos secondary The following displays: Installing to Switch............................................................... ................................................................................... ...................................................................................

13 Verify the secondary software image version on the switch by entering the following command: show switch

ExtremeXOS™ Operation and Configuration, Rev. 12.1

19

Switch Management Lab The following displays: SysName: SysLocation: SysContact: System MAC: System Type:

SAM_1

SysHealth check: Recovery Mode: System Watchdog:

Enabled (Normal) All Enabled

Current Time: Timezone: Boot Time: Boot Count: Next Reboot: System UpTime:

Thu Aug 28 14:44:04 2008 [Auto DST Disabled] GMT Offset: 0 minutes, name is UTC. Thu Aug 28 09:04:44 2008 233 None scheduled 5 hours 39 minutes 20 seconds

Current State: Image Selected: Image Booted: Primary ver: Secondary ver:

OPERATIONAL secondary primary 12.1.1.4 11.6.4.11

[email protected], +1 888 257 3000 00:04:96:27:B7:57 X450a-24t

14 Restore the current image by entering the following command to download the second image file: download image 192.168.0.101 summitX-12.1.1.4.xos vr vr-mgmt secondary Enter n at the following prompt: Do you want to install image after downloading? (y - yes, n - no, - cancel)

The following displays: Downloading to Switch...............................................

15 Verify that the secondary software image version is on the switch by entering the following command: show switch 16 Install the downloaded image to the secondary image location by entering the following command: install image summitX-12.1.1.4.xos secondary The following displays: Installing to Switch............................................................... ................................................................................... ...................................................................................

17 Verify the secondary software image version on the switch by entering the following command: show switch

20

ExtremeXOS™ Operation and Configuration, Rev. 12.1

Switch Management Lab The following displays: SysName: SysLocation: SysContact: System MAC: System Type:

SAM_1

SysHealth check: Recovery Mode: System Watchdog:

Enabled (Normal) All Enabled

Current Time: Timezone: Boot Time: Boot Count: Next Reboot: System UpTime:

Thu Aug 28 14:44:04 2008 [Auto DST Disabled] GMT Offset: 0 minutes, name is UTC. Thu Aug 28 09:04:44 2008 233 None scheduled 5 hours 39 minutes 20 seconds

Current State: Image Selected: Image Booted: Primary ver: Secondary ver:

OPERATIONAL secondary primary 12.1.1.4 12.1.1.4

[email protected], +1 888 257 3000 00:04:96:27:B7:57 X450a-24t

Part 4: Editing ASCII-formatted Configuration Files on a PC In this exercise you will learn how to edit your configuration files and change your system contact information. 1 Upload the current configuration in ASCII format to a TFTP server on your network by entering the following command: upload configuration 192.168.0.101 DL-switch_X.xsf vr vr-mgmt Where X is the value assigned to your group in Table 1. The following displays: Uploading DL-switch_X.xsf to 192.168.0.101 ... done!

NOTE The instructor will demonstrate how to use a text editor to edit the configuration and change the system contact (SysContact) information in an uploaded file.

2 Download a pre-modified configuration file by entering the following command: tftp get 192.168.0.101 vr vr-mgmt ECF02_test_download.xsf ECF02.xsf

ExtremeXOS™ Operation and Configuration, Rev. 12.1

21

Switch Management Lab The following displays:

Downloading ECF02.xsf to switch... done!

3 Show the list of files on the switch and verify that ECF02.xsf is there: ls 4 Verify the current system contact by entering the following command: show switch The following display is an example from Lab Group 1’s switch: SysName: SysLocation: SysContact: System MAC: System Type:

SAM_1

SysHealth check: Recovery Mode: System Watchdog:

Enabled (Normal) All Enabled

Current Time: Timezone: Boot Time: Boot Count: Next Reboot: System UpTime:

Thu Aug 28 14:44:04 2008 [Auto DST Disabled] GMT Offset: 0 minutes, name is UTC. Thu Aug 28 09:04:44 2008 233 None scheduled 5 hours 39 minutes 20 seconds

Current State: Image Selected: Image Booted: Primary ver:

OPERATIONAL primary primary 12.1.1.4

[email protected], +1 888 257 3000 00:04:96:27:B7:57 X450a-24t

5 Load the ASCII-formatted configuration file on the switch, by entering the following command which is case-sensitive: load script ECF02.xsf Commands in the script display. Ignore any error messages. 6 Verify the new system contact by entering the following command: show switch

22

ExtremeXOS™ Operation and Configuration, Rev. 12.1

Switch Management Lab The following display is an example from Lab Group 1’s switch: SysName: SysLocation: SysContact: System MAC: System Type:

SAM_1

SysHealth check: Recovery Mode: System Watchdog:

Enabled (Normal) All Enabled

Current Time: Timezone: Boot Time: Boot Count: Next Reboot: System UpTime:

Thu Aug 28 14:21:31 2008 [Auto DST Disabled] GMT Offset: 0 minutes, name is UTC. Thu Aug 28 09:04:28 2008 547 None scheduled 5 hours 17 minutes 3 seconds

Current State: Image Selected: Image Booted:

OPERATIONAL primary primary

Extreme Networks tames chaos at the edge! 00:04:96:27:B6:61 X450a-24t

7 Delete the script file by entering the following command: rm ECF02.xsf Enter y at the following prompt: Remove ECF02.xsf from switch? (y/N)

Part 5: Editing ASCII-formatted Configuration Files on the Switch 1 Create a new command script by entering the following command: edit script newscript.xsf 2 This will launch the on-switch vi editor. Type i to begin inserting text. Immediately after, enter the following and use quotes around the functional name: configure snmp syslocation “” Where is one of the six found posted at the beginning of this lab in Table 1 (“Sales Management”, “Executive Staff”, “Manufacturing Floor”, “Accounting”, “Engineering”, “Human Resources”). Press the Esc key to enter vi command mode; then exit and save the file by entering the vi command :wq 3 Display all the files on the switch to verify the new file was created by entering the following command: ls

ExtremeXOS™ Operation and Configuration, Rev. 12.1

23

Switch Management Lab The following displays:

-rw-r--r--rw-r--r--rw-rw-rw-

1 root 1 root 1 root

0 0 0

47 Aug 28 14:18 newscript.xsf 67 Jul 11 02:44 pim-crp.pol 114231 Aug 25 09:58 primary.cfg

4 Verify the current system location by entering the following command: show switch The following display is an example from Lab Group 1’s switch: SysName: SysLocation: SysContact: System MAC: System Type:

SAM_1

SysHealth check: Recovery Mode: System Watchdog:

Enabled (Normal) All Enabled

Current Time: Timezone: Boot Time: Boot Count: Next Reboot: System UpTime:

Thu Aug 28 14:21:31 2008 [Auto DST Disabled] GMT Offset: 0 minutes, name is UTC. Thu Aug 28 09:04:28 2008 547 None scheduled 5 hours 17 minutes 3 seconds

Current State: Image Selected: Image Booted:

OPERATIONAL primary primary

Extreme Networks tames chaos at the edge! 00:04:96:27:B6:61 X450a-24t

5 Load the newscript.xsf script by entering the following command: load script newscript.xsf 6 Verify the new system location by entering the following command: show switch

24

ExtremeXOS™ Operation and Configuration, Rev. 12.1

Switch Management Lab The following display is an example from Lab Group 1’s switch: SysName: SysLocation: SysContact: System MAC: System Type:

SAM_1 Sales Management Extreme Networks tames chaos at the edge! 00:04:96:27:B6:61 X450a-24t

SysHealth check: Recovery Mode: System Watchdog:

Enabled (Normal) All Enabled

Current Time: Timezone: Boot Time: Boot Count: Next Reboot: System UpTime:

Thu Aug 28 14:27:28 2008 [Auto DST Disabled] GMT Offset: 0 minutes, name is UTC. Thu Aug 28 09:04:28 2008 547 None scheduled 5 hours 23 minutes

Current State: Image Selected: Image Booted: Primary ver:

OPERATIONAL primary primary 12.1.1.4

7 Delete the script file by entering the following command: rm newscript.xsf Enter y at the following prompt: Remove newscript.xsf from switch? (y/N)

8 Save the configuration to nonvolatile memory by entering the following command: save primary Enter y at the following prompt: Do you want to save configuration to primary.cfg and overwrite it? (y/N) Yes Saving configuration on master ....... done! Configuration saved to primary.cfg successfully.

Enter y at the following prompt:

The current selected default configuration database to boot up the system (Lab_ECF02-X.cfg) is different than the one just saved (primary.cfg). Do you want to make primary.cfg the default database? (y/N) Yes The selected configuration will take effect after the next switch reboot.

ExtremeXOS™ Operation and Configuration, Rev. 12.1

25

Switch Management Lab

Part 6: Accessing the Bootstrap and BootRom Menus In this exercise you will reboot the switch and access the bootstrap and bootrom menus to load an alternate image. 1 Reboot the switch by entering the following command: reboot 2 Enter y at the following prompt: Are you sure you want to reboot the switch? (y/n)

The following displays: Sending SIGTERM to all processes. Sending SIGKILL to all processes. Please stand by while rebooting the system.

3 While the switch is rebooting, hold down the SPACE key. The switch resets and displays the following bootstrap prompt: BootStrap>

4 Enter h to display the help menu: boot enable h help ? loader reboot rz

boot a loader enable features on-line help on-line help on-line help Sets which BootLoader BootStrap will boot Reboot system (hard reset) zmodem download

5 Boot the switch by entering the following command: boot The following displays:

Starting Default Bootloader ...

6 While the switch is rebooting, hold down the SPACE key. The switch resets and displays the following bootRom prompt: BootRom>

26

ExtremeXOS™ Operation and Configuration, Rev. 12.1

Switch Management Lab 7 Enter h to display the help menu: boot loader reboot rz show config enable h help ? hi dir cd pwd ping configip showip download

boot an image Sets which BootLoader BootStrap will boot Reboot system (hard reset) zmodem download display information select configuration enable features on-line help on-line help on-line help display command history list contents of CF directory change working CF directory print working CF directory ping remote host configure the bootloader ip address show the configuration of the bootloader ip address download an image

8 Boot the switch by entering the following command: boot The switch completes a normal boot cycle.

ExtremeXOS™ Operation and Configuration, Rev. 12.1

27

Switch Management Lab

28

ExtremeXOS™ Operation and Configuration, Rev. 12.1

3

Layer 1 Configuration Lab

Student Objectives This lab provides you with hands-on experience to configure physical port parameters, create a dynamic Link Aggregation group that uses the address-based aggregation algorithm, and enable LLDP. At the end of this lab, you will be able to: ●

Configure and test auto-negotiation and port duplexing

●

Create a dynamic Link Aggregation group that uses the address-based algorithm

●

Verify the Link Aggregation operation

●

Enable LLDP

●

Verify LLDP operation

Figure 1: Layer 1 Configuration Lab

ExtremeXOS™ Operation and Configuration, Rev. 12.1

29

Layer 1 Configuration Lab Refer to the values listed in Table 1 to configure switch parameters for this lab.

Table 1: Lab Groups and VLAN IP Addresses Lab Group

Switch Name

VLAN Name

VLAN IP Address

Lab Group PC IP Address

1

SAM_1

Default

10.0.1.11/24

10.0.1.21/24

2

EXC_2

Default

10.0.1.12/24

10.0.1.22/24

3

ACT_3

Default

10.0.1.13/24

10.0.1.23/24

4

MFG_4

Default

10.0.1.14/24

10.0.1.24/24

5

ENG_5

Default

10.0.1.15/24

10.0.1.25/24

6

HUR_6

Default

10.0.1.16/24

10.0.1.26/24

Part 1: Setting Up for Auto-Negotiation, Half-Duplex, and Full-Duplex 1 Log into the switch and load the baseline configuration for this lab by entering the following command: use configuration Lab_ECF03-X Where X is your lab group number found in Table 1. 2 Reboot the switch by entering the following command: reboot If there were any unsaved changes on the switch, indicated with an asterisk (*) preceding the command line label, the system will display the following: Do you want to save configuration changes to currently selected configuration file (XXXXXX.cfg) and reboot? (y - save and reboot, n - reboot without save, - cancel command)

3 Enter n to reboot without save. If there were no unsaved changes on the switch, the system will display the following:

Are you sure you want to reboot the switch? (y/N)

4 Enter y to reboot the switch if this message appears. When the boot process is complete, the switch displays the following: Authentication Service (AAA) on the master node is now available for login.

30

ExtremeXOS™ Operation and Configuration, Rev. 12.1

Layer 1 Configuration Lab 5 Press the Enter key to bring up the login prompt. Enter admin and press the Enter key. The switch will then display the following prompt for the password: login: admin password:

6 Press the Enter key again (by default, there is no password). You are now ready to begin configuring the switch.

Part 2: Auto-Negotiation, Half-Duplex, and Full-Duplex 1 Assign your IP address to the Default VLAN by entering the following command: configure vlan default ipaddress 10.0.1.1X/24 Where X is the address and subnet mask assigned to VLAN Default for your lab group as shown in Table 1. 2 Enable port 13 by entering the following command: enable ports 13 3 Use the PING command to verify that the switch can communicate with Core Switch A by entering the following: ping 10.0.1.1 The following displays: Ping(ICMP) 10.0.1.1: 4 packets, 8 data bytes, interval 1 second(s). 16 bytes from 10.0.1.1: icmp_seq=0 ttl=255 time=10 ms 16 bytes from 10.0.1.1: icmp_seq=1 ttl=255 time=7.051 ms 16 bytes from 10.0.1.1: icmp_seq=2 ttl=255 time=1.933 ms 16 bytes from 10.0.1.1: icmp_seq=3 ttl=255 time=2.007 ms

4 Turn off auto negotiation, set the speed to 10 Mbps, and set the duplex to half by entering the following command: configure port 13 auto off speed 10 duplex half 5 Use the PING command again to test if the switch can still communicate with the upstream switch: ping 10.0.1.1 The following displays: Ping(ICMP) 10.0.1.1: 4 packets, 8 data bytes, interval 1 second(s). 44 bytes from 10.0.1.11: icmp_seq=3 Destination Host Unreachable --- 10.0.1.1 ping statistics --4 packets transmitted, 0 received, 100% loss round-trip min/avg/max = 0/0/0 ms

6 Turn auto negotiation back on, by entering the following command: configure port 13 auto on

ExtremeXOS™ Operation and Configuration, Rev. 12.1

31

Layer 1 Configuration Lab 7 Use the PING command again to see if connectivity to Core Switch A has been restored: ping 10.0.1.1 The following displays: Ping(ICMP) 10.0.1.1: 4 packets, 8 data bytes, interval 1 second(s). 16 bytes from 10.0.1.1: icmp_seq=0 ttl=255 time=7.494 ms 16 bytes from 10.0.1.1: icmp_seq=1 ttl=255 time=1.811 ms 16 bytes from 10.0.1.1: icmp_seq=2 ttl=255 time=6.866 ms 16 bytes from 10.0.1.1: icmp_seq=3 ttl=255 time=6.970 ms --- 10.0.1.1 ping statistics --4 packets transmitted, 4 received, 0% loss round-trip min/avg/max = 1/5/7 ms

32

ExtremeXOS™ Operation and Configuration, Rev. 12.1

Layer 1 Configuration Lab

Part 3: Configuring the Client Workstation and Testing the Default Gateway The following instructions will guide you in setting up the client workstation. If your RD-X connection to PC 127.0.0.1:101X is still open but minimized, skip to step 6. 1 From your laptop, launch the PuTTY utility:

2 Launch the remote desktop tunnel by double-clicking on the RD_X saved session.

3 The utility opens a secure session window displaying the student login ID and the public key. The tunnel is complete when the $ prompt appears:

ExtremeXOS™ Operation and Configuration, Rev. 12.1

33

Layer 1 Configuration Lab 4 From your computer's Start menu, open the Accessories folder and launch the Remote Desktop Connection utility:

5 Enter the combined IP address and unique port number identifying the target lab PC in the format 127.0.0.1:101X, where X is the lab group number assigned in Table 1:

6 Enter the login and password credentials. For all lab stations, the User Name is student and the Password is student:

34

ExtremeXOS™ Operation and Configuration, Rev. 12.1

Layer 1 Configuration Lab 7 From the Lab PC desktop, open the Lab Networking Addressing folder. Double-click on the Config_ECF03-X batch file, where X is your lab group number assigned in Table 1

This batch file will automatically configure the PC IP address. The following screen will appear while the file executes, and then close automatically when it terminates:

8 To confirm the workstation IP address, from the Start menu, click on the Run option. In the Run dialog box enter cmd to open a Command window:

ExtremeXOS™ Operation and Configuration, Rev. 12.1

35

Layer 1 Configuration Lab 9 In the command window, display the IP interface information on the PC by entering the following command: ipconfig The system displays the following:

Notice that the Lab Network interface has been assigned your lab group PC's IP address and mask found in Table 1. This completes the setup of the Lab Group PC.

36

ExtremeXOS™ Operation and Configuration, Rev. 12.1

Layer 1 Configuration Lab

Part 4: Configuring Dynamic Address-based Load Sharing In this exercise you will create a dynamic link aggregation group and verify that dynamic load sharing is configured and operating correctly. 1 Wait until the instructor has loaded the config file for this part of the lab before proceeding. 2 On instructor’s direction enable switch port 24, the port connected to the lab PC, by entering the following command: enable ports 24 3 Open a DOS window on the Lab Group PC and use the PING command to verify that the PC can communicate with the lab switch by entering the following: ping 10.0.1.1X Where X is your lab group number found in Table 1. The following displays: Pinging 10.0.1.1X with 32 bytes of data: Reply Reply Reply Reply

from from from from

10.0.1.1X: 10.0.1.1X: 10.0.1.1X: 10.0.1.1X:

bytes=32 bytes=32 bytes=32 bytes=32

time=2ms timeping 10.0.6.2 Pinging 10.0.6.2 with 32 bytes of data: Reply Reply Reply Reply

from from from from

10.0.6.2: 10.0.6.2: 10.0.6.2: 10.0.6.2:

bytes=32 bytes=32 bytes=32 bytes=32

time=2ms time