{{page>:menu}} ====== Extreme Networks ====== *http://www.extremenetworks.com/products/summit-x250e.aspx *http://www.curtis-lamasters.com/2007/07/18/cisco-vs-extreme-networks-switching-commands/ *[[http://www.extremenetworks.com/products/policy-manager.aspx|EPM policy manager]] *{{:extreme:exoscommandref12_0.pdf|}} *{{:extreme:exosconcepts12_0.pdf|}} ===== Konfigurace===== *ukáže nastavení ipshow ipconfig *zapnutí http enable web http *nastavení IPconfigure vlan "Default" ipaddress 10.10.204.123/24 *nastavení jménaconfigure snmp sysName AB-03_3.28 configure snmp add community readonly lanfebocl1 *vytvoření vlan create vlan data configure vlan "data" tag 204 *nastavení času a zony configure sntp-client primary 10.151.1.10 vr "VR-Default" configure timezone 60 autodst begins every last sunday march at 2 00 ends every last sunday october at 3 00 *zapnutí routováníenable ipforwarding vlan Default *konfigruace trunk portu configure vlan default add port 1 untagged configure vlan data add port 1 tagged configure vlan voice add port 1 tagged *přiřadí portu 4 vlanu **data**configure vlan data add port 4 untagged *nastavení def. gwconfigure iproute add default 10.151.1.10 *vlan MGMTconfigure vlan Mgmt ipaddress 10.10.204.222 255.255.0.0 configure iproute add default 10.10.30.30 vr vr-mgmt *DHCP relay (ip helper) configure bootprelay add enable bootprelay config bootprelay dhcp-agent info option unconfig bootprelay dhcp-agent info check enable bootprelay ipv4 vlan Default enable bootprelay ipv4 vlan technologie enable bootprelay ipv4 vlan Wifi_Fehrer enable bootprelay ipv4 vlan Wifi_Guest *záloha aktuálního configu na tftp v ASCII formátuupload configuration 10.10.10.10 configbackup.xsf vr "VR-Default" *záloha plného konfigutftp put ip.ad.re.sa vr "VR-Default" primary.cfg cilovy_nazev.cfg *smazání configuUnconf switch all ==== ACL ==== *http://documentation.extremenetworks.com/exos/EXOS_All/ACL/r_acl-rule-syntax-details.shtml *https://support.dce.felk.cvut.cz/mediawiki/index.php/Extreme_Networks_XOS_Commands *editace politiky použitím VI editoruedit policy *příklad politiky # this line is a comment @description "This line is a description for the denyping.pol" entry ping_deny_echo-request { if { protocol icmp; icmp-type echo-request; } then { deny; count pingcount_deny; } } *ukázání politikyshow policy *kontrola politikycheck policy ... *reload politiky - pokud se změní politka editor, je potřeba refreshrefresh policy ... *přidání politiky na vlan/portconfigure access-list vlan "Fehrer" *odebrání politiky z vlanunconfigure access-list VLAN116-in ==== Zálohování ==== *nejprve se vytvoří skript delete upm profile backup_config create upm profile backup_config set var FILENAME Nectec_100.23 tftp put 10.151.1.44 vr "VR-Default" primary.cfg $(FILENAME).cfg upload configuration 10.151.1.44 $(FILENAME).xsf vr "VR-Default" . *následně se vytvoří timer, který bude skript pravidelně spouštět delete upm timer backup_config_timer create upm timer backup_config_timer configure upm timer backup_config_timer profile backup_config configure upm timer backup_config_timer at 07 15 2013 01 00 00 every 604800 configure upm timer backup_config_timer after 10 every 86400 enable upm profile backup_config *nakonec provedeme ruční spuštění skriptu a uložení konfigurace show upm timer run upm profile "backup_config" save y ==== Aktualizace XOS ==== *nahrát nový XOS do secondary partitionX450e-24p.2 # download image 10.10.100.1 xtreme/summitX-12.6.1.3.xos secondary Do you want to install image after downloading? (y - yes, n - no, - cancel) Yes Downloading to Switch................................................................................................... This image will be used only after rebooting the switch! Installing to secondary partition! Installing to Switch................................................................................................................................................... *nastavit sekundární partition jako bootovacíX450e-24p.2 # use image secondary *''reboot'' ==== Stacking ==== *http://documentation.extremenetworks.com/exos_22.3/EXOS_21_1/Stacking/t_configure-stack.shtml#task-4183__enable_stacking *show licenses Enabled License Level: Advanced Edge Enabled Feature Packs: DirectAttach *různé příkazy enable stacking-support show stacking stack-portss show stacking show stacking configuration enable stacking – zapne stackování *konfigurace alternativní IP, priority a nastavení master configure stacking slot 1 alternate-ip-address 10.10.204.201/16 10.10.30.30 configure stacking slot 2 alternate-ip-address 10.10.204.202/16 10.10.30.30 configure stacking slot 1 priority 1 configure stacking slot 2 priority 2 configure stacking slot 1 master-capability on configure stacking slot 2 master-capability on *přepnutí master/backup - dojde k reloadu!!run failover *jak to vypadá při nabíhání: * Slot-2 CoreStack.31.2 # sh stacking Stack Topology is a Ring Active Topology is a Ring Node MAC Address Slot Stack State Role Flags ------------------ ---- ----------- ------- --- *00:04:96:9a:61:1d 2 Active Master CA- 00:04:96:9a:60:b6 1 Active Standby CA- * - Indicates this node Flags: (C) Candidate for this active topology, (A) Active Node (O) node may be in Other active topology * Slot-2 CoreStack.31.2 # sh stacking Stack Topology is a Ring Active Topology is a Ring Node MAC Address Slot Stack State Role Flags ------------------ ---- ----------- ------- --- *00:04:96:9a:61:1d 2 Active Master CA- 00:04:96:9a:60:b6 1 Active Backup CA- * - Indicates this node Flags: (C) Candidate for this active topology, (A) Active Node (O) node may be in Other active topology