Extreme Networks
Konfigurace
- ukáže nastavení ip
show ipconfig
- zapnutí http
enable web http
- nastavení IP
configure vlan "Default" ipaddress 10.10.204.123/24
- nastavení jména
configure snmp sysName AB-03_3.28 configure snmp add community readonly lanfebocl1
- vytvoření vlan
create vlan data configure vlan "data" tag 204
- nastavení času a zony
configure sntp-client primary 10.151.1.10 vr "VR-Default" configure timezone 60 autodst begins every last sunday march at 2 00 ends every last sunday october at 3 00
- zapnutí routování
enable ipforwarding vlan Default
- konfigruace trunk portu
configure vlan default add port 1 untagged configure vlan data add port 1 tagged configure vlan voice add port 1 tagged
- přiřadí portu 4 vlanu data
configure vlan data add port 4 untagged
- nastavení def. gw
configure iproute add default 10.151.1.10
- vlan MGMT
configure vlan Mgmt ipaddress 10.10.204.222 255.255.0.0 configure iproute add default 10.10.30.30 vr vr-mgmt
- DHCP relay (ip helper)
configure bootprelay add <ip_address> enable bootprelay config bootprelay dhcp-agent info option unconfig bootprelay dhcp-agent info check enable bootprelay ipv4 vlan Default enable bootprelay ipv4 vlan technologie enable bootprelay ipv4 vlan Wifi_Fehrer enable bootprelay ipv4 vlan Wifi_Guest
- záloha aktuálního configu na tftp v ASCII formátu
upload configuration 10.10.10.10 configbackup.xsf vr "VR-Default"
- záloha plného konfigu
tftp put ip.ad.re.sa vr "VR-Default" primary.cfg cilovy_nazev.cfg
- smazání configu
Unconf switch all
ACL
- editace politiky použitím VI editoru
edit policy <filename>
- příklad politiky
# this line is a comment @description "This line is a description for the denyping.pol" entry ping_deny_echo-request { if { protocol icmp; icmp-type echo-request; } then { deny; count pingcount_deny; } }
- ukázání politiky
show policy
- kontrola politiky
check policy ...
- reload politiky - pokud se změní politka editor, je potřeba refresh
refresh policy ...
- přidání politiky na vlan/port
configure access-list <filename> vlan "Fehrer"
- odebrání politiky z vlan
unconfigure access-list VLAN116-in
Zálohování
- nejprve se vytvoří skript
delete upm profile backup_config create upm profile backup_config set var FILENAME Nectec_100.23 tftp put 10.151.1.44 vr "VR-Default" primary.cfg $(FILENAME).cfg upload configuration 10.151.1.44 $(FILENAME).xsf vr "VR-Default" .
- následně se vytvoří timer, který bude skript pravidelně spouštět
delete upm timer backup_config_timer create upm timer backup_config_timer configure upm timer backup_config_timer profile backup_config configure upm timer backup_config_timer at 07 15 2013 01 00 00 every 604800 configure upm timer backup_config_timer after 10 every 86400 enable upm profile backup_config
- nakonec provedeme ruční spuštění skriptu a uložení konfigurace
show upm timer run upm profile "backup_config" save y
Aktualizace XOS
- nahrát nový XOS do secondary partition
X450e-24p.2 # download image 10.10.100.1 xtreme/summitX-12.6.1.3.xos secondary Do you want to install image after downloading? (y - yes, n - no, <cr> - cancel) Yes Downloading to Switch................................................................................................... This image will be used only after rebooting the switch! Installing to secondary partition! Installing to Switch...................................................................................................................................................
- nastavit sekundární partition jako bootovací
X450e-24p.2 # use image secondary
reboot
Stacking
- show licenses
Enabled License Level: Advanced Edge Enabled Feature Packs: DirectAttach - různé příkazy
enable stacking-support show stacking stack-portss show stacking show stacking configuration enable stacking – zapne stackování
- konfigurace alternativní IP, priority a nastavení master
configure stacking slot 1 alternate-ip-address 10.10.204.201/16 10.10.30.30 configure stacking slot 2 alternate-ip-address 10.10.204.202/16 10.10.30.30 configure stacking slot 1 priority 1 configure stacking slot 2 priority 2 configure stacking slot 1 master-capability on configure stacking slot 2 master-capability on
- přepnutí master/backup - dojde k reloadu!!
run failover
- jak to vypadá při nabíhání:
* Slot-2 CoreStack.31.2 # sh stacking Stack Topology is a Ring Active Topology is a Ring Node MAC Address Slot Stack State Role Flags ------------------ ---- ----------- ------- --- *00:04:96:9a:61:1d 2 Active Master CA- 00:04:96:9a:60:b6 1 Active Standby CA- * - Indicates this node Flags: (C) Candidate for this active topology, (A) Active Node (O) node may be in Other active topology * Slot-2 CoreStack.31.2 # sh stacking Stack Topology is a Ring Active Topology is a Ring Node MAC Address Slot Stack State Role Flags ------------------ ---- ----------- ------- --- *00:04:96:9a:61:1d 2 Active Master CA- 00:04:96:9a:60:b6 1 Active Backup CA- * - Indicates this node Flags: (C) Candidate for this active topology, (A) Active Node (O) node may be in Other active topology
