極進(jìn)網(wǎng)絡(luò)設(shè)備配置基本手冊

1、ExtremeNetworksEXOSQuickGuideJustenoughtobedangerous iiiContentsTOC o 1-5 h zExtremeNetworks1EXOSCheatSheet錯(cuò)誤！未定義書簽 HYPERLINK l bookmark0 EXOSSwitchBasics1 HYPERLINK l bookmark2 Manuals1 HYPERLINK l bookmark4 ConnectingtotheSwitch1 HYPERLINK l bookmark6 BasicCLINavigation1 HYPERLINK l bookmark8 Port

2、numbering1System-levelComponents3Software3 HYPERLINK l bookmark10 Loadnewsoftware3Selectthenextimagetobebooted4 HYPERLINK l bookmark12 Reboot4Hardware4Typeofsystem4 HYPERLINK l bookmark14 PowerSupplies4 HYPERLINK l bookmark16 Fans4Serialnumbers4 HYPERLINK l bookmark18 Totalservicetime4Licenselevels4

3、 HYPERLINK l bookmark20 Date&timeinformation4 HYPERLINK l bookmark22 Filestorage4 HYPERLINK l bookmark34 ManagingConfigurations5Lookatthecurrentconfiguration5 HYPERLINK l bookmark24 CLIPaging5 HYPERLINK l bookmark26 BootingConfigurationFiles5 HYPERLINK l bookmark28 Savingaconfigurationfile5Backingup

4、aconfigfileto/fromaTFTPserver6 HYPERLINK l bookmark30 Resettheswitchtofactorydefaults6UsingPorts7 HYPERLINK l bookmark32 ConfiguringPortSpeedandDuplex7EnablingandDisablingPorts7ExaminingPortConfigurations7 HYPERLINK l bookmark36 VLAN/PortMembership7 HYPERLINK l bookmark38 PortUtilization7 HYPERLINK

5、l bookmark40 MonitorQoSbehavior7LinkAggregation8 HYPERLINK l bookmark42 LACP8UsingVLANs9 HYPERLINK l bookmark44 CreateaVLAN9 HYPERLINK l bookmark46 AssignanIPaddresstoaVLAN9 HYPERLINK l bookmark48 Assignan802.1QtagvaluetotheVLAN9 HYPERLINK l bookmark50 Addanddeleteportsto/fromaVLAN9 HYPERLINK l book

6、mark52 GiveaQoSprofiletoaVLAN10 HYPERLINK l bookmark54 ExaminingVLANs10 HYPERLINK l bookmark56 FDBOperations11IPRouting12 HYPERLINK l bookmark58 ShowtheRouteTable12 HYPERLINK l bookmark60 ShowtheIPInterfacesontheswitch12 HYPERLINK l bookmark62 TheARPCache12 HYPERLINK l bookmark64 EnableRouting12 HYP

7、ERLINK l bookmark66 CreateStatic/DefaultRoute13 HYPERLINK l bookmark68 OSPF13SettheOSPFrouterid13CreateanOSPFarea13SettheOSPFrouterpriority13TurnonOSPFforaVLAN13TurnoffOSPFforaVLAN13SeethestatusofOSPF13LookattheOSPFNeighbors13LookattheOSPFLSDB14VRRP14 HYPERLINK l bookmark70 ConfigureVRRP14 HYPERLINK

8、 l bookmark72 ExamineVRRP14 HYPERLINK l bookmark74 TurnonSNTP14 HYPERLINK l bookmark76 EnableWebAccess:14SNMP14SNMPSystemName14AdvancedConfigurationExamples15 HYPERLINK l bookmark78 EAPS15 HYPERLINK l bookmark80 TurnonaDHCPserveronatestVLAN15Bootprelay15Mirroring(SpanPort)16 EXOSCheatSheetEXOSSwitch

9、BasicsManualsThisisjustanunofficalcheatsheet.Thereslotsmoreinformationintheofficialmanuals.FromtheExtremeWebSiteW)HardwareInstallationGuidesoHowtoinstallthehardware,ofcourse,butalsotechnicalspecsonthegear(electricalpowerrequirements,heatgenerated,etc.CommandReferenceoDocumentsthesyntaxofeverycommand

10、andeveryoptionConceptsGuideoExplainsthetechnologiesandconceptsbehindthem.Probablythemostusefulmanual.oAppendixAexplainswhatsoftwarefeaturesaresupportedateachlicenselevelFromthesoftwareupdatesiteReleasenotesoDocumentsnewfeaturesandhardwareoExplainshowtoupgradesoftwareoHastheengineeringlimitsforthatre

11、leaseofcode.Forexample,howmanyIPv6routescanbelearnedbytheswitchrunningthatversionofcodecanbefoundinthereleasenotes.oBugsthathavebeenfixedandbugsthatExtremeknowsaboutoProbablythesecondmostusefulmanual.ConnectingtotheSwitchUseaDB9malenull-modem(laplink)cableSetthePCserialportto9600-n-8-1witheitherXON/

12、XOFFornoflowcontrolNote:Donotusehardwareflowcontrol.TheExtremeswitchdoesnotuseitandwillneverassertCT.SBasicCLINavigationDefaultlogin:adminwithnopassword.Useup/downarrowkeystoscrollthroughthecommandhistoryUseleft/rightarrowkeystoeditacommandUsetoseewhatcommandsareavailablenextUsetocompleteacommandort

13、oseewhatcommandsareavailablenextCommandscanbeabbreviatedsolongastheabbreviationisuniqueCommandsalwaysstartfromtherootlevel.EXOSdoesntchangecommandlevels.-#signsatthestartofthelineindicateacommentfollows(usuallyonlyseeninconfigurationfiles)PortnumberingInstandaloneswitches(notstacked,notinachassis),p

14、ortsareidentifiedbytheirnumbe1r,2,3,4,etc.Whenswitchesarestackedorforportsinachassis,portsareidentifiedby:,e.g1.:1,2:24,etc.Youcanuselistsofportsseparatedbycommas:1,17,23or1:1,2:27,3:23Youcanuseportranges:112or4:44:14.Inthelatercase,4:414alsoworks.Youcanalsomixthelistsandranges:14,23or4:414,5:7Syste

15、m-levelComponentsSoftwareEXOSswitchesstoretwoversionsofcodeinnon-volatileRAM.ThetwoversionsarecalledPrimaryandSecondary,butthatdoesnotmeanthatPrimaryistriedfirstandifitfailstoworkthenSecondaryistried.PrimaryandSecondaryarejustnames.The“showswitch”commandwillletyouseewhatversionsofsoftwareareloadedin

16、totheswitch,versiontheswitchisrunningon(“ImageBooted”),andwhatversionwillbeloadedthenexttimetheswitchboots(“ImageSelected”).VDB.1#showswitchSysName:VDBSysLocation:SysContact: HYPERLINK mailto:support support,ystemMAC:00:04:96:26:6D:76SystemType:X450e-48pSysHealthcheck:Enabled(Normal)Rec

17、overyMode:AllSystemWatchdog:EnabledCurrentTime:TueSep2022:13:162011Timezone:AutoDSTDisabledGMTOffset:0minutes,nameisUTC.BootTime:TueSep2022:11:282011BootCount:283NextReboot:NonescheduledSystemUpTime:1minute48secondsCurrentState:OPERATIONALImageSelected:primaryImageBooted:secondaryPrimaryver:Secondar

18、yver:7ConfigSelected:primary.cfgConfigBooted:primary.cfgprimary.cfgCreatedbyExtremeXOSversion278372bytessavedonTueAug3014:27:292011LoadnewsoftwareEXOSwontletyoureplaceyourbootedversion.Soifyoubootedonthesecondaryimage,youcanonlyloadnewcodeintotheprimaryimageslot.EXOSnowhandlestheslotselectionforyoua

19、utomatically.Setupatftpserverwiththenewsoftwareandthenloaditontotheswitchwiththecommanddownloadimagevrvr-defaultUnlessyouareactuallyusingthemanagementportintheback,youhavetoincludethe“vrv-drefault”businessattheendofthecommand.Heresanactualexampledownloadimage7summitX-.xosvrvr-defaultOnveryrareoccasi

20、ons,youmightalsoneedtoloadnewbootcodeontotheswitchbeforeyourunnewsoftware.Thereleasenoteswilltellyouifyourcurrentbootcodeiscompatible.Ifyoudoneedtodownloadanewbootrom,thendontdoitjustbecauseyoucan.However,eidfaynoeuwdboontreom,thecommandisalmostidentical:downloadbootrom7pmon_summitl-.xtrvrvr-default

21、SelectthenextimagetobebooteduseimageprimaryuseimagesecondaryRebootRebootHardwareTypeofsystemshowswitchPowerSuppliesshowpowerFansshowfansSerialnumbersshowversionSwitch:800190-00-020634G-00406Rev2.0BootROM:IMG:XGM2-1:N/AN/ARev0.0Image:ExtremeXOSversionv1252b6byrelease-manageronTueMar117:38:45P

22、ST2011BootROM:TotalservicetimeshowodometersServiceDaysFirstRecordedStartDateSwitch:X450e-48p493Sep-20-2006FieldReplaceableUnitsLicenselevelsshowlicenseDate&timeinformationshowswitchtellsthecurrentdateandtime,thetimezeone,andwhentheswitchwasbooted.FilestorageBecauseEXOSrunsonaLINUXkernel,thefilesyste

23、mcommandsareveryLINUX-like.DirectorylistingisCopyafile-cpRenameafilemvDeleteafilermManagingConfigurationsLookatthecurrentconfigurationshowconfigshowsthecurrentlyrunningconfiguration.Defaultconfigurationsettingsaresuppressed.IfyouwanttoseethemuseshowconfigdetailIfyouwanttoseetheconfigurationforaparti

24、cularmodule(e.g.vlan,IP,eaps,OSPF,etc.)youcanspecifyjustthatmoduleshowconfigospfCLIPagingBydefault,theCLIshowsyoua“page”of25linesatatimeandthenwaitsforyoutohitakeytocontinue.Thatcangetannoying,particularlyifyouhavesetyourterminalprogramtocapturetheoutputtoalogfile.Youcanturnoffthebydisplaywiththecom

25、manddisableclipagingWhenyouredonescrollingouttheconfigfile,turnthepagingfeaturebackonwiththecommandenableclipagingBootingConfigurationFilesEXOSallowsyoutostoreandusemultipleconfigurationfiles.showswitch-Seewhichconfigurationfilewasbooted(“Configbooted”)andwhichfilewillbeusedatthenextboot(“Configsele

26、cted”).Savingaconfigurationfilesaveconfig-willwritethecurrentconfigtowhicheverfileisspecifiedinC“onfigselected”.saveconfig-willwritethecurrentconfigtoanewfilenameandthenaskifyouwanttomakethenewfilethe“defaultdatabase”;doyouwanttoselectthsifileforbooting.Note:Eventhoughconfigfilesalwaysendin“.cfg”EXO

27、Swillcomplainifyouaddtheextension.Sojustgiveitthenameofthenewconfig.ExamplesaveconfigtestDoyouwanttosaveconfigurationtotest.cfg?(y/N)YesSavingconfigurationonmasterdone!Configurationsavedtotest.cfgsuccessfully.Thecurrentselecteddefaultconfigurationdatabasetobootupthesystem(primary.cfg)isdifferentthan

28、theonejustsaved(test.cfg).Doyouwanttomaketest.cfgthedefaultdatabase?(y/N)NoDefaultconfigurationdatabaseselectioncancelled.Backingupaconfigfileto/fromaTFTPservertftpputvrvr-defaultwritesafiletoatftpservertftpgetvrvr-defaultcopiesafilefromatftpserverExample:tftpputvrvr-defaulttest.cfgNote:Youdontspeci

29、fythe“.cfg”extensionwhensavingfiles,butyoudowanttospecifythe“.cfg”whenusingtftp.Note:EXOSconfigfilesarestoredasXML,whichcanbehardforushumanstoread.EXOSandRidgelineidentifynormalASCIIfileswithanextensionof“xsf”.SotouploadtheconfiginASCIIformat,usethecommanduploadconfigurationvrvr-defaultExample:uploa

30、dconfigurationnewscript.xsfvrvr-defaultThereisno“downloadconfiguration”commandsousetftpgettocopyanxsffilebackdowntotheswitch.Resettheswitchtofactorydefaultsunconfigureswitch一Resetseverythingbacktofactorydefaultsexceptfortheodometer,clock,anduseraccountsandpasswords.unconfigureswithall-Alsoresetstheu

31、seraccountsandpasswords.Note:Neithercommandwillaffectlicenselevelsorthestackingmodeofaswitch.UsingPortsConfiguringPortSpeedandDuplexconfigport1autooffspeed100duplexhalfconfigport1:1-1:5autooffspeed1000duplexfullconfigport22autoonEnablingandDisablingPortsenableport1disableport1:1-1:5ExaminingPortConf

32、igurationsshowportconfigshowport1:1-1:3configno-refreshNote:Theno-refreshshowsyouthescreenonceandexits.Otherwise,EXOSwillcontinuetoupdatethedisplay.showport3,4,9-12configno-refreshPortConfigurationPortVirtualrouterPortStateLinkStateAutoNegSpeedCfgActualDuplexCfgActualFlowCntrlLoadMasterMediaPriRed3V

33、R-DefaultERONAUTOAUTOUTP4VR-DefaultERONAUTOAUTOUTP9VR-DefaultERONAUTOAUTOUTP10VR-DefaultERONAUTOAUTOUTP11VR-DefaultERONAUTOAUTOUTP12VR-DefaultERONAUTOAUTOUTPindicatesPortDisplayNametruncatedpast8charactersLinkState:A-ActiveR-ReadyNP-PortnotpresentL-LoopbackPortState:D-Disabled,E-EnabledMedia:!-Unsup

34、portedOpticModuleMediaRed:*-useshowportinfodetailforredundantmediatypeVLAN/PortMembershipshowport1infodetailPortUtilizationshowportutilizationshowport1-3utilizationbandwidthshowport3:4,3:7utilizationpacketsshowport17utilizationbytesNote:theno-refreshoptionisnotsupportedwiththiscommandMonitorQoSbehav

35、iorshowport1qosmonitorno-refreshNote:YoucanonlymonitoroneportfromeachSummitStackorBD8Kmoduleatatime.LinkAggregationLinkAggregationisthestandardindustrytermforwhatCiscocallsEtherChannelandAvayacallsMultiLinkTrunking.TocreateaLAG,thecommandisenablesharinggroupingExamples:enablesharing1grouping1-2enabl

36、esharing5:3grouping5:3-5:4,6:3-6:4ToteardowntheLAG,usethecommanddisablesharingSomenotesonusingLAGsAlloftheportsmustmatchinspeedandduplex.Afteryoucreatethegroup,alloftheportsgetgroupedtogetherunderthemasterport.Themasterportneedstobeincludedintheportlist,soitwillappearinthecommandtwiceTheportsdonthav

37、etobecontiguous,buttheyshouldbeinorderfromlowesttohighestTheportsoneachswitchshouldtobeconnectedincorrespondingorderTrytospreadtheportsacrossdifferentunitsinastackordifferentmodulesinachassis.Thatway,ifoneoftheunitsgoesdown,thelinkwillstillstayup.Whensharingisenabled,themasterportwillremainamemberof

38、itsVLANsbuttheothermemberportswillberemovedfromtheirVLANsWhensharingisdisabled,themasterportwillremainamemberofitsVLANsbuttheothermemberportswillnotbelongtoanyVLANs.LACPTouseLACPwithaLAG,simplyaddtheLACPkeywordattheendofthecommandExamples:enablesharing1grouping1-2lacpenablesharing5:3grouping5:3-5:4,

39、6:3-6:4lacpTheLinkAggregationControlProtocolbringsseveraladvantagestoLinkAggregation,someofwhichincludeLACPgivesmuchbettervisibilityintotheLAGpartnerswitchAllowsyoutoaddanddeleteportswithouttearingdownthewholeLAGLAGrecoversfromportfailuresfasterwithLACPLACPcanonlybeaddedtoaLAGwhentheLAGisbuilt.Ifyou

40、createaLAGwithoutLACPandlaterdecideyouwanttoaddit,youhavetoteardowntheLAGandthenrebuilditusingLACPNOTE:,LACPmustbeenabledonbothendsbeforetheLAGwillcomeup.IfLACPisenabledononeendandnottheother,theportsontheLACPwillneverbeoperational.Soitseitherallornothing.UsingVLANsEXOSisveryVLAN-centric.Unlikeport-

41、basedoperatingsystems,mostoftheconfigurationinEXOStakesplaceattheVLANlevel.VLANsarecreated,thengivenIPaddresses,ports,802.1QtagvaluesandQoSsettingsInshort,theVLANmustbecreatedfirstandthenconfigured.OncetheVLANiscreated,yourefertoitdirectlybynamewhenyougiveitanIPaddress,addportstoit,etc.Infact,theVLA

42、Nnameismandatoryand(inmostcases)thekeyword“vlan”sioptional.Also,inEXOS,VLANsareusuallygivendescriptivenameslike“data”or“voice”or“wireless”insteadof“vlan2100”.Note:WhenconfiguringVLANs,the“vlan”keywordisoptionalCreateaVLANcreatevlanDatacreatevlanVoiceAssignanIPaddresstoaVLANYoucanusedotteddecimalsubn

43、etsorCIDRnotationwhenspecifyingsubnets.Ifnosubnetmaskisspecified,the“naturalmask”isassumed.#dotteddecimalsubnetnotationconfigvlanDataipaddress#CIDRsubnetsyntaxandabbreviationsconfVoiceipa/24Assignan802.1QtagvaluetotheVLANconfigDatatag10Addanddeleteportsto/fromaVLANInEXOS,therearetaggedportsanduntagg

44、edports.Ataggedportwillsendandreceive802.1Qtaggedpacketsto/fromaspecificVLAN.Anuntaggedportwillsenduntaggedtrafficto/fromaspecificVLAN.UntaggedPorts:BecausetheresnowaytodistinguishbetweenVLANswhenusinguntaggedtraffic,aportcanbeassignedasanuntaggedporttoonlyoneVLANatatime.Ifyouwantuntaggedtraffictogo

45、toadifferentVLAN,youhavetodeletetheportfromtheoldVLANbeforeyoucanaddittothenewoneasanuntaggedport.Ifyoudontspecifywhethertheportshouldbeaddedastagedoruntagged,untaggedisassumed.TaggedPorts:Becausetrafficcanbedistinguishedbasedonthe802.1Qtagvalue,aportcanbeassignedelaggedtomultipleVLANsatatime.Whicht

46、agvalueisusedisdeterminedbythe802.QtagvalueassignedtotheVLAN.MixingTaggedandUntaggedTraffic:EXOSfullysupportsthis.Thatis,aportcanbeanuntaggedmemberofoneVLANandataggedmemberofseveralotherVLANssimultaneously.#adduntaggedportstoaVLANconfigDataaddport1-12#addtaggedportsonmodule1toastackedswitchorchassis

47、configDataaddport2:45-48tagGiveaQoSprofiletoaVLANTherestoomuchtoexplainaboutQoSonEXOSswitchesforthisdocument.However,onethingtonoteisthathwenSummitStackswitchesareactuallystackedtogether,QP7(802.1pbitvalueof6)isreservedbythestackforstackingcontroltraffic.YouwontbeabletouseQP7inyourstacks.QoSProfiles

48、QP1andQP8arealwaysavailable.QP2-QP7havetobecreatedbeforetheycanbeused.createqosQP6configVoiceqosprofileQP6ExaminingVLANsTheshowvlancommandwillshowyoumostofwhatyouneedtoknowregardingallofyourVLANs,includingIPaddresses,theVLANID(802.1Qtag),howmanyportsareintheVLANandawealthofotherinformationshownwitha

49、seriesofflags.Intheexamplebelow,the“voice”vlanisconfiguredtoroute(IPForwardingEnabled),hasOSPFenabled,andisprotectedbyanEAPSring.showvlanNameVIDProtocolAddrFlagsProtoPortsVirtualActiverouter/Totaldata1100/24-foP-ANY0/18VR-DefaultDefault1ANY0/0VR-Defaultecv3999C-ANY0/2VR-DefaultMgmt4095AN

50、Y0/1VR-Mgmtridge3100/24-foP-ANY0/2VR-Defaultvoice2100/24-foP-ANY0/2VR-Defaultwireless41P-ANY0/8VR-DefaultFlags:(B)BFDEnabled,(c)802.1adcustomerVLAN,(C)EAPSControlVLAN,(d)NetLoginDynamicallycreatedVLAN,(D)VLANAdminDisabled,(E)ESRPEnabled,(f)IPForwardingEnabled,(F)LearningDisab

51、led,(i)ISISEnabled,(I)Inter-SwitchConnectionVLANforMLAG,(L)LoopbackEnabled,(l)MPLSEnabled,(m)IPmcForwardingEnabled,(M)TranslationMemberVLANorSubscriberVLAN,(n)IPMultinettingEnabled,(N)NetworkLoginVLAN,(o)OSPFEnabled,(O)FloodingDisabled,(p)PIMEnabled,(P)EAPSprotectedVLAN,(r)RIPEnabled,(R)Sub-VLANIPRa

52、ngeConfigured,(s)Sub-VLAN,(S)Super-VLAN,(t)TranslationVLANorNetworkVLAN,(T)MemberofSTPDomain,(V)VPLSEnabled,(v)VRRPEnabled,(W)VPWSEnabledTotalnumberofVLAN(s):7MoredetailedinformationonaparticularVLANisfoundwiththecommandshowvlanOr,becausethe“vlan”keywordisusuallyoptional,justFlags:(*)Active,(!)Disab

53、led,(g)LoadSharingport(b)Portblockedonthevlan,(m)Mac-Basedport(a)EgresstrafficallowedforNetLogin(u)EgresstrafficunallowedforNetLoginExampleshowdataVLANInterfacewithnamedatacreatedbyuserAdminState:EnabledTagging:Virtualrouter:VR-DefaultIPv4Forwarding:EnabledPrimaryIP:00/24IPv6Forwarding:DisabledIPv6:

54、None802.1QTag11Protocol:MatchallunfilteredprotocolsLoopback:NetLogin:DisabledDisabledQosProfile:QP1STPD:NoneEgressRateLimitDesignatedPort:NoneconfiguredPorts:18.Untag:(Numberofactiveports=0)25,26,27,28,29,30,32,33,34,35,36,37,39,40Tag:47,48bFloodRateLimitQosProfile:Noneconfigured31,38,FDBOperationss

55、howfdbtoseetheentireL2forwardingdatabaseshowfdbvlantoseetheFDBforoneVLANshowfdbportstoseetheFDBforasetofportsshowfdbtoseeinformationonaparticularMACTocleartheforwardingdatabasethecommandisclearfdbYoucanspecifyportsandvlansandparticularmacaddresseswhenclearing.IPRoutingShowtheRouteTableshowiprouteNot

56、e:iprouteisallonewordinEXOSShowtheIPInterfacesontheswitchshowipconfigNote:ipconfigisallonewordinEXOSTheARPCacheshowiparpshowiparpshowiparpshowiparpcleariparpcleariparpshowiparpNote:iparpisallonewordinEXOSEnableRoutingInEXOS,youhavetodotwothingsbeforeyourouteto/fromaVLANs:1.GivetheVLANanIPaddress2.En

57、ableIPforwardingIfyoujustgivetheVLANanIPaddress,youcanpingtheinterface,telnettoit,pointyourwebbrowseratit,butyoutheswitchwontrouteonthatVLAN.ToturnonroutingonaVLANenableipforwardingvlanToturnonipforwardingonalloftheVLANsatonceenableipforwardingNote:enableipforwardingonlyenablesroutingontheVLANs1.the

58、ninexistence2.andalsohaveIPaddressesIfyouenableipforwardingandthenlateraddaVLAN,IPforwardingwillnotbeenabledonthenewVLAN.YoullhavetoaddanIPaddressandthenturnonIPforwardingfortheVLAN.Note:justbecauseyoucanpingaVLANdoesnotmeanthatVLANhasIPforwardingenabled.AnEXOSswitchwillrespondtoapingtoanyofitsIPadd

59、ressesregardlessofthestateofIPforwarding.CreateStatic/DefaultRouteconfigiprouteadddefaultconfigiprouteadddefaultconfigiprouteadd/configiprouteadd10.1.8.x/24OSPFSettheOSPFrouteridconfigospfrouteridconfigospfrouteridenableospfNote:OSPFmustbedisabledfirstCreateanOSPFareacreateospfareaSettheOSPFrouterpr

60、iorityconfigospfvlanpriorityconfigospfdatapriority200Therangeis0through255,highernumberswin.Thedefaultsettingis1.Settingthevalueto0ensuresthattherouterisneverselectedasthedesignatedrouter(DR)orbackupdesignatedrouter(BDR).Note:youneedafullcorelicensetochangetheOSPFpriority.AnedgelicensedoesntsupportO