Dell Force10 Z9000 User manual

Dell Conguration Guide for the Z9000 System
9.7(0.0)

Notes, Cautions, and Warnings
NOTE: A NOTE indicates important information that helps you make better use of your computer.
CAUTION: A CAUTION indicates either potential damage to hardware or loss of data and tells you how to avoid the
problem.
WARNING: A WARNING indicates a potential for property damage, personal injury, or death.
Copyright ©2015 Dell Inc. All rights reserved. This product is protected by U.S. and international copyright and intellectual property laws. Dell™
and the Dell logo are trademarks of Dell Inc. in the United States and/or other jurisdictions. All other marks and names mentioned herein may be
trademarks of their respective companies.
2015 - 02
Rev. A00

Contents
1 About this Guide............................................................................................................ 29
Audience.......................................................................................................................................................................... 29
Conventions..................................................................................................................................................................... 29
Related Documents.......................................................................................................................................................... 29
2 Conguration Fundamentals......................................................................................... 30
Accessing the Command Line.......................................................................................................................................... 30
CLI Modes........................................................................................................................................................................30
Navigating CLI Modes................................................................................................................................................ 32
The do Command.............................................................................................................................................................34
Undoing Commands.........................................................................................................................................................35
Obtaining Help..................................................................................................................................................................35
Entering and Editing Commands...................................................................................................................................... 36
Command History.............................................................................................................................................................37
Filtering show Command Outputs.................................................................................................................................... 37
Multiple Users in Conguration Mode...............................................................................................................................38
3 Getting Started............................................................................................................. 39
Console Access................................................................................................................................................................39
Serial Console.............................................................................................................................................................39
Accessing the CLI Interface and Running Scripts Using SSH........................................................................................... 40
Entering CLI commands Using an SSH Connection....................................................................................................40
Executing Local CLI Scripts Using an SSH Connection.............................................................................................. 40
Default Conguration........................................................................................................................................................ 41
Conguring a Host Name..................................................................................................................................................41
Accessing the System Remotely....................................................................................................................................... 41
Accessing the System Remotely................................................................................................................................. 41
Congure the Management Port IP Address.............................................................................................................. 42
Congure a Management Route.................................................................................................................................42
Conguring a Username and Password...................................................................................................................... 42
Conguring the Enable Password.....................................................................................................................................43
Conguration File Management........................................................................................................................................43
Copy Files to and from the System.............................................................................................................................43
Mounting an NFS File System.................................................................................................................................... 44
Save the Running-Conguration................................................................................................................................ 45
Congure the Overload Bit for a Startup Scenario..................................................................................................... 46
Viewing Files.............................................................................................................................................................. 46
Managing the File System................................................................................................................................................ 47
Enabling Software Features on Devices Using a Command Option.................................................................................. 48
View Command History....................................................................................................................................................49
Upgrading Dell Networking OS.........................................................................................................................................49
Using HTTP for File Transfers.......................................................................................................................................... 49
3

Using Hashes to Validate Software Images.......................................................................................................................49
4 Management..................................................................................................................51
Conguring Privilege Levels.............................................................................................................................................. 51
Creating a Custom Privilege Level...............................................................................................................................51
Removing a Command from EXEC Mode................................................................................................................... 51
Moving a Command from EXEC Privilege Mode to EXEC Mode.................................................................................51
Allowing Access to CONFIGURATION Mode Commands............................................................................................51
Allowing Access to the Following Modes....................................................................................................................52
Applying a Privilege Level to a Username................................................................................................................... 53
Applying a Privilege Level to a Terminal Line...............................................................................................................54
Conguring Logging......................................................................................................................................................... 54
Audit and Security Logs............................................................................................................................................. 54
Conguring Logging Format .....................................................................................................................................56
Setting Up a Secure Connection to a Syslog Server...................................................................................................57
Log Messages in the Internal Buer................................................................................................................................. 58
Conguration Task List for System Log Management................................................................................................ 58
Disabling System Logging.................................................................................................................................................58
Sending System Messages to a Syslog Server................................................................................................................. 58
Conguring a UNIX System as a Syslog Server..........................................................................................................58
Changing System Logging Settings..................................................................................................................................59
Display the Logging Buer and the Logging Conguration............................................................................................... 59
Conguring a UNIX Logging Facility Level........................................................................................................................ 60
Synchronizing Log Messages............................................................................................................................................ 61
Enabling Timestamp on Syslog Messages........................................................................................................................ 62
File Transfer Services....................................................................................................................................................... 62
Conguration Task List for File Transfer Services....................................................................................................... 62
Enabling the FTP Server............................................................................................................................................ 62
Conguring FTP Server Parameters...........................................................................................................................63
Conguring FTP Client Parameters............................................................................................................................ 63
Terminal Lines...................................................................................................................................................................64
Denying and Permitting Access to a Terminal Line......................................................................................................64
Conguring Login Authentication for Terminal Lines...................................................................................................64
Setting Time Out of EXEC Privilege Mode.......................................................................................................................65
Using Telnet to get to Another Network Device............................................................................................................... 66
Lock CONFIGURATION Mode......................................................................................................................................... 66
Viewing the Conguration Lock Status.......................................................................................................................67
Recovering from a Forgotten Password on the Z9000 System........................................................................................ 67
Recovering from a Forgotten Enable Password on the Z9000................................................................................... 68
Recovering from a Failed Start on the Z9000 System......................................................................................................69
Restoring the Factory Default Settings............................................................................................................................ 69
Important Points to Remember.................................................................................................................................. 70
Restoring Factory Default Environment Variables....................................................................................................... 70
5 802.1X........................................................................................................................... 72
The Port-Authentication Process..................................................................................................................................... 73
4

EAP over RADIUS.......................................................................................................................................................74
Conguring 802.1X........................................................................................................................................................... 75
Related Conguration Tasks....................................................................................................................................... 75
Important Points to Remember........................................................................................................................................ 75
Enabling 802.1X................................................................................................................................................................ 76
Conguring Request Identity Re-Transmissions................................................................................................................ 77
Conguring a Quiet Period after a Failed Authentication............................................................................................ 78
Forcibly Authorizing or Unauthorizing a Port.................................................................................................................... 79
Re-Authenticating a Port..................................................................................................................................................79
Conguring Timeouts.......................................................................................................................................................80
Conguring Dynamic VLAN Assignment with Port Authentication....................................................................................81
Guest and Authentication-Fail VLANs.............................................................................................................................. 82
Conguring a Guest VLAN......................................................................................................................................... 83
Conguring an Authentication-Fail VLAN................................................................................................................... 83
6 Access Control Lists (ACLs)..........................................................................................85
IP Access Control Lists (ACLs).........................................................................................................................................85
CAM Usage................................................................................................................................................................86
Implementing ACLs on Dell Networking OS................................................................................................................86
IP Fragment Handling.......................................................................................................................................................88
IP Fragments ACL Examples...................................................................................................................................... 88
Layer 4 ACL Rules Examples...................................................................................................................................... 88
Congure a Standard IP ACL............................................................................................................................................89
Conguring a Standard IP ACL Filter..........................................................................................................................90
Congure an Extended IP ACL..........................................................................................................................................91
Conguring Filters with a Sequence Number.............................................................................................................. 91
Conguring Filters Without a Sequence Number........................................................................................................92
Congure Layer 2 and Layer 3 ACLs.................................................................................................................................93
Assign an IP ACL to an Interface...................................................................................................................................... 93
Applying an IP ACL...........................................................................................................................................................94
Counting ACL Hits......................................................................................................................................................94
Congure Ingress ACLs....................................................................................................................................................95
Congure Egress ACLs.....................................................................................................................................................96
Applying Egress Layer 3 ACLs (Control-Plane)...........................................................................................................96
IP Prex Lists....................................................................................................................................................................97
Implementation Information........................................................................................................................................ 97
Conguration Task List for Prex Lists....................................................................................................................... 98
ACL Resequencing.......................................................................................................................................................... 101
Resequencing an ACL or Prex List.......................................................................................................................... 102
Route Maps.................................................................................................................................................................... 103
Implementation Information...................................................................................................................................... 103
Important Points to Remember.......................................................................................................................................103
Conguration Task List for Route Maps.................................................................................................................... 103
Conguring Match Routes........................................................................................................................................105
Conguring Set Conditions....................................................................................................................................... 107
Congure a Route Map for Route Redistribution...................................................................................................... 108
5

Congure a Route Map for Route Tagging................................................................................................................108
Continue Clause........................................................................................................................................................108
Logging of ACL Processes..............................................................................................................................................109
Guidelines for Conguring ACL Logging.......................................................................................................................... 110
Conguring ACL Logging.................................................................................................................................................110
Flow-Based Monitoring Support for ACLs........................................................................................................................ 111
Behavior of Flow-Based Monitoring............................................................................................................................111
Enabling Flow-Based Monitoring..................................................................................................................................... 112
7 Access Control List (ACL) VLAN Groups and Content Addressable Memory (CAM).....114
Optimizing CAM Utilization During the Attachment of ACLs to VLANs........................................................................... 114
Guidelines for Conguring ACL VLAN groups..................................................................................................................115
Conguring ACL VLAN Groups and Conguring FP Blocks for VLAN Parameters...........................................................116
Conguring ACL VLAN Groups..................................................................................................................................116
Conguring FP Blocks for VLAN Parameters.............................................................................................................117
Viewing CAM Usage........................................................................................................................................................ 117
Allocating FP Blocks for VLAN Processes........................................................................................................................118
8 Bidirectional Forwarding Detection (BFD)....................................................................120
How BFD Works............................................................................................................................................................. 120
BFD Packet Format................................................................................................................................................... 121
BFD Sessions............................................................................................................................................................122
BFD Three-Way Handshake...................................................................................................................................... 123
Session State Changes............................................................................................................................................. 125
Important Points to Remember.......................................................................................................................................125
Congure BFD................................................................................................................................................................ 125
Congure BFD for Physical Ports..............................................................................................................................126
Congure BFD for Static Routes...............................................................................................................................129
Congure BFD for OSPF.......................................................................................................................................... 130
Congure BFD for OSPFv3.......................................................................................................................................132
Congure BFD for IS-IS............................................................................................................................................ 134
Congure BFD for BGP............................................................................................................................................ 136
Congure BFD for VRRP.......................................................................................................................................... 142
Conguring Protocol Liveness...................................................................................................................................145
Troubleshooting BFD.................................................................................................................................................145
9 Border Gateway Protocol IPv4 (BGPv4)...................................................................... 147
Autonomous Systems (AS)............................................................................................................................................. 147
Sessions and Peers......................................................................................................................................................... 149
Establish a Session....................................................................................................................................................149
Route Reectors.............................................................................................................................................................150
BGP Attributes................................................................................................................................................................ 151
Best Path Selection Criteria.......................................................................................................................................151
Weight...................................................................................................................................................................... 153
Local Preference.......................................................................................................................................................153
Multi-Exit Discriminators (MEDs)..............................................................................................................................154
6

Origin........................................................................................................................................................................155
AS Path.................................................................................................................................................................... 155
Next Hop..................................................................................................................................................................156
Multiprotocol BGP.......................................................................................................................................................... 156
Implement BGP with Dell Networking OS....................................................................................................................... 157
Additional Path (Add-Path) Support......................................................................................................................... 157
Advertise IGP Cost as MED for Redistributed Routes...............................................................................................157
Ignore Router-ID for Some Best-Path Calculations................................................................................................... 158
Four-Byte AS Numbers.............................................................................................................................................158
AS4 Number Representation.................................................................................................................................... 158
AS Number Migration............................................................................................................................................... 160
BGP4 Management Information Base (MIB)............................................................................................................. 161
Important Points to Remember..................................................................................................................................161
Conguration Information............................................................................................................................................... 162
BGP Conguration..........................................................................................................................................................162
Enabling BGP............................................................................................................................................................163
Conguring AS4 Number Representations................................................................................................................166
Conguring Peer Groups...........................................................................................................................................168
Conguring BGP Fast Fall-Over................................................................................................................................170
Conguring Passive Peering......................................................................................................................................172
Maintaining Existing AS Numbers During an AS Migration........................................................................................ 172
Allowing an AS Number to Appear in its Own AS Path..............................................................................................173
Enabling Graceful Restart..........................................................................................................................................174
Enabling Neighbor Graceful Restart..........................................................................................................................175
Filtering on an AS-Path Attribute.............................................................................................................................. 175
Regular Expressions as Filters................................................................................................................................... 177
Redistributing Routes................................................................................................................................................178
Enabling Additional Paths..........................................................................................................................................179
Conguring IP Community Lists................................................................................................................................179
Conguring an IP Extended Community List.............................................................................................................180
Filtering Routes with Community Lists.......................................................................................................................181
Manipulating the COMMUNITY Attribute.................................................................................................................. 181
Changing MED Attributes......................................................................................................................................... 183
Changing the LOCAL_PREFERENCE Attribute........................................................................................................183
Changing the NEXT_HOP Attribute..........................................................................................................................184
Changing the WEIGHT Attribute...............................................................................................................................184
Enabling Multipath.................................................................................................................................................... 185
Filtering BGP Routes................................................................................................................................................ 185
Filtering BGP Routes Using Route Maps...................................................................................................................186
Filtering BGP Routes Using AS-PATH Information.................................................................................................... 187
Conguring BGP Route Reectors............................................................................................................................187
Aggregating Routes.................................................................................................................................................. 188
Conguring BGP Confederations..............................................................................................................................188
Enabling Route Flap Dampening................................................................................................................................189
Changing BGP Timers............................................................................................................................................... 191
7

Enabling BGP Neighbor Soft-Reconguration...........................................................................................................192
Route Map Continue.................................................................................................................................................193
Enabling MBGP Congurations.......................................................................................................................................193
BGP Regular Expression Optimization............................................................................................................................ 194
Debugging BGP.............................................................................................................................................................. 194
Storing Last and Bad PDUs...................................................................................................................................... 195
Capturing PDUs........................................................................................................................................................196
PDU Counters...........................................................................................................................................................197
Sample Congurations.................................................................................................................................................... 197
10 Content Addressable Memory (CAM)........................................................................ 204
CAM Allocation.............................................................................................................................................................. 204
Test CAM Usage............................................................................................................................................................ 206
View CAM Proles......................................................................................................................................................... 206
View CAM-ACL Settings................................................................................................................................................ 207
View CAM Usage...........................................................................................................................................................208
CAM Optimization..........................................................................................................................................................209
Troubleshoot CAM Proling............................................................................................................................................209
CAM Prole Mismatches..........................................................................................................................................209
QoS CAM Region Limitation.....................................................................................................................................209
11 Control Plane Policing (CoPP).................................................................................... 210
Congure Control Plane Policing......................................................................................................................................211
Conguring CoPP for Protocols................................................................................................................................212
Conguring CoPP for CPU Queues.......................................................................................................................... 213
CoPP for OSPFv3 Packets....................................................................................................................................... 214
Conguring CoPP for OSPFv3..................................................................................................................................217
Show Commands......................................................................................................................................................218
12 Dynamic Host Conguration Protocol (DHCP).......................................................... 220
DHCP Packet Format and Options.................................................................................................................................220
Assign an IP Address using DHCP.................................................................................................................................. 222
Implementation Information............................................................................................................................................222
Congure the System to be a DHCP Server.................................................................................................................. 223
Conguring the Server for Automatic Address Allocation.........................................................................................223
Specifying a Default Gateway.................................................................................................................................. 225
Congure a Method of Hostname Resolution.......................................................................................................... 225
Using DNS for Address Resolution........................................................................................................................... 225
Using NetBIOS WINS for Address Resolution.......................................................................................................... 225
Creating Manual Binding Entries.............................................................................................................................. 225
Debugging the DHCP Server................................................................................................................................... 226
Using DHCP Clear Commands................................................................................................................................. 226
Congure the System to be a Relay Agent.....................................................................................................................226
Congure the System to be a DHCP Client....................................................................................................................228
DHCP Client on a Management Interface................................................................................................................ 228
DHCP Client Operation with Other Features............................................................................................................229
8

Congure the System for User Port Stacking (Option 230)...........................................................................................229
Congure Secure DHCP................................................................................................................................................ 230
Option 82.................................................................................................................................................................230
DHCP Snooping.......................................................................................................................................................230
Drop DHCP Packets on Snooped VLANs Only......................................................................................................... 233
Dynamic ARP Inspection.......................................................................................................................................... 234
Conguring Dynamic ARP Inspection.......................................................................................................................235
Source Address Validation.............................................................................................................................................. 236
Enabling IP Source Address Validation......................................................................................................................236
DHCP MAC Source Address Validation.....................................................................................................................237
Enabling IP+MAC Source Address Validation............................................................................................................237
Viewing the Number of SAV Dropped Packets......................................................................................................... 237
Clearing the Number of SAV Dropped Packets........................................................................................................ 238
13 Equal Cost Multi-Path (ECMP)..................................................................................239
ECMP for Flow-Based Anity....................................................................................................................................... 239
Conguring the Hash Algorithm............................................................................................................................... 239
Enabling Deterministic ECMP Next Hop...................................................................................................................239
Conguring the Hash Algorithm Seed...................................................................................................................... 239
Link Bundle Monitoring...................................................................................................................................................240
Managing ECMP Group Paths................................................................................................................................. 240
Creating an ECMP Group Bundle..............................................................................................................................241
Modifying the ECMP Group Threshold..................................................................................................................... 241
14 Enabling FIPS Cryptography...................................................................................... 243
Conguration Tasks........................................................................................................................................................243
Preparing the System.....................................................................................................................................................243
Enabling FIPS Mode.......................................................................................................................................................243
Generating Host-Keys.................................................................................................................................................... 244
Monitoring FIPS Mode Status........................................................................................................................................ 244
Disabling FIPS Mode...................................................................................................................................................... 245
15 Force10 Resilient Ring Protocol (FRRP).................................................................... 246
Protocol Overview..........................................................................................................................................................246
Ring Status.............................................................................................................................................................. 246
Multiple FRRP Rings.................................................................................................................................................247
Important FRRP Points.............................................................................................................................................247
Important FRRP Concepts....................................................................................................................................... 248
Implementing FRRP....................................................................................................................................................... 249
FRRP Conguration....................................................................................................................................................... 249
Creating the FRRP Group........................................................................................................................................ 249
Conguring the Control VLAN................................................................................................................................. 250
Conguring and Adding the Member VLANs............................................................................................................ 251
Setting the FRRP Timers......................................................................................................................................... 252
Clearing the FRRP Counters.................................................................................................................................... 252
Viewing the FRRP Conguration..............................................................................................................................252
9

Viewing the FRRP Information................................................................................................................................. 252
Troubleshooting FRRP....................................................................................................................................................253
Conguration Checks...............................................................................................................................................253
Sample Conguration and Topology............................................................................................................................... 253
16 GARP VLAN Registration Protocol (GVRP)............................................................... 255
Important Points to Remember......................................................................................................................................255
Congure GVRP............................................................................................................................................................ 255
Related Conguration Tasks.....................................................................................................................................256
Enabling GVRP Globally................................................................................................................................................. 256
Enabling GVRP on a Layer 2 Interface............................................................................................................................257
Congure GVRP Registration.........................................................................................................................................257
Congure a GARP Timer................................................................................................................................................258
17 Internet Group Management Protocol (IGMP)...........................................................259
IGMP Implementation Information..................................................................................................................................259
IGMP Protocol Overview............................................................................................................................................... 259
IGMP Version 2........................................................................................................................................................259
IGMP Version 3........................................................................................................................................................260
Congure IGMP............................................................................................................................................................. 263
Related Conguration Tasks..................................................................................................................................... 263
Viewing IGMP Enabled Interfaces.................................................................................................................................. 264
Selecting an IGMP Version.............................................................................................................................................264
Viewing IGMP Groups.................................................................................................................................................... 264
Adjusting Timers............................................................................................................................................................ 265
Adjusting Query and Response Timers.....................................................................................................................265
Adjusting the IGMP Querier Timeout Value..............................................................................................................266
Conguring a Static IGMP Group...................................................................................................................................266
Enabling IGMP Immediate-Leave................................................................................................................................... 266
IGMP Snooping.............................................................................................................................................................. 267
IGMP Snooping Implementation Information............................................................................................................ 267
Conguring IGMP Snooping.....................................................................................................................................267
Removing a Group-Port Association.........................................................................................................................267
Disabling Multicast Flooding.....................................................................................................................................268
Specifying a Port as Connected to a Multicast Router.............................................................................................268
Conguring the Switch as Querier........................................................................................................................... 268
Fast Convergence after MSTP Topology Changes.........................................................................................................269
Egress Interface Selection (EIS) for HTTP and IGMP Applications................................................................................ 269
Protocol Separation..................................................................................................................................................270
Enabling and Disabling Management Egress Interface Selection............................................................................... 271
Handling of Management Route Conguration......................................................................................................... 271
Handling of Switch-Initiated Trac...........................................................................................................................272
Handling of Switch-Destined Trac......................................................................................................................... 272
Handling of Transit Trac (Trac Separation)..........................................................................................................273
Mapping of Management Applications and Trac Type............................................................................................273
Behavior of Various Applications for Switch-Initiated Trac .................................................................................... 274
10