Dell S4048-ON User manual

Dell Conguration Guide for the S4048–ON System
9.9(0.0)

Notes, cautions, and warnings
NOTE: A NOTE indicates important information that helps you make better use of your computer.
CAUTION: A CAUTION indicates either potential damage to hardware or loss of data and tells you how to avoid the
problem.
WARNING: A WARNING indicates a potential for property damage, personal injury, or death.
Copyright ©2015 Dell Inc. All rights reserved. This product is protected by U.S. and international copyright and intellectual property laws. Dell™
and the Dell logo are trademarks of Dell Inc. in the United States and/or other jurisdictions. All other marks and names mentioned herein may be
trademarks of their respective companies.
2015 - 09
Rev. A00

Contents
1 About this Guide............................................................................................................ 34
Audience.......................................................................................................................................................................... 34
Conventions..................................................................................................................................................................... 34
Related Documents.......................................................................................................................................................... 34
2 Conguration Fundamentals......................................................................................... 35
Accessing the Command Line.......................................................................................................................................... 35
CLI Modes........................................................................................................................................................................35
Navigating CLI Modes................................................................................................................................................ 37
The do Command.............................................................................................................................................................39
Undoing Commands.........................................................................................................................................................40
Obtaining Help..................................................................................................................................................................40
Entering and Editing Commands....................................................................................................................................... 41
Command History.............................................................................................................................................................42
Filtering show Command Outputs.................................................................................................................................... 42
Multiple Users in Conguration Mode...............................................................................................................................43
3 Getting Started............................................................................................................. 44
Console Access................................................................................................................................................................ 44
Serial Console.............................................................................................................................................................44
Accessing the CLI Interface and Running Scripts Using SSH........................................................................................... 45
Entering CLI commands Using an SSH Connection....................................................................................................45
Executing Local CLI Scripts Using an SSH Connection.............................................................................................. 45
Default Conguration....................................................................................................................................................... 46
Conguring a Host Name.................................................................................................................................................46
Accessing the System Remotely...................................................................................................................................... 46
Accessing the System Remotely................................................................................................................................ 46
Congure the Management Port IP Address.............................................................................................................. 47
Congure a Management Route.................................................................................................................................47
Conguring a Username and Password...................................................................................................................... 47
Conguring the Enable Password..................................................................................................................................... 47
Conguration File Management........................................................................................................................................48
Copy Files to and from the System.............................................................................................................................48
Mounting an NFS File System.................................................................................................................................... 49
Save the Running-Conguration................................................................................................................................ 50
Congure the Overload Bit for a Startup Scenario......................................................................................................51
Viewing Files............................................................................................................................................................... 51
Compressing Conguration Files................................................................................................................................ 52
Managing the File System................................................................................................................................................ 54
Enabling Software Features on Devices Using a Command Option.................................................................................. 55
View Command History....................................................................................................................................................55
Upgrading Dell Networking OS.........................................................................................................................................56
3

Using Hashes to Verify Software Images Before Installation.............................................................................................56
Using HTTP for File Transfers...........................................................................................................................................57
4 Management.................................................................................................................58
Conguring Privilege Levels............................................................................................................................................. 58
Creating a Custom Privilege Level..............................................................................................................................58
Removing a Command from EXEC Mode.................................................................................................................. 58
Moving a Command from EXEC Privilege Mode to EXEC Mode................................................................................58
Allowing Access to CONFIGURATION Mode Commands...........................................................................................58
Allowing Access to Dierent Modes...........................................................................................................................59
Applying a Privilege Level to a Username................................................................................................................... 60
Applying a Privilege Level to a Terminal Line................................................................................................................61
Conguring Logging.......................................................................................................................................................... 61
Audit and Security Logs.............................................................................................................................................. 61
Conguring Logging Format .....................................................................................................................................63
Display the Logging Buer and the Logging Conguration......................................................................................... 63
Setting Up a Secure Connection to a Syslog Server...................................................................................................64
Sending System Messages to a Syslog Server...........................................................................................................65
Track Login Activity..........................................................................................................................................................65
Restrictions for Tracking Login Activity...................................................................................................................... 65
Conguring Login Activity Tracking............................................................................................................................ 65
Display Login Statistics...............................................................................................................................................66
Limit Concurrent Login Sessions.......................................................................................................................................67
Restrictions for Limiting the Number of Concurrent Sessions.................................................................................... 67
Conguring Concurrent Session Limit.........................................................................................................................67
Enabling the System to Clear Existing Sessions..........................................................................................................67
Log Messages in the Internal Buer................................................................................................................................. 68
Conguration Task List for System Log Management................................................................................................ 68
Disabling System Logging.................................................................................................................................................68
Sending System Messages to a Syslog Server................................................................................................................. 69
Conguring a UNIX System as a Syslog Server..........................................................................................................69
Changing System Logging Settings..................................................................................................................................69
Display the Logging Buer and the Logging Conguration............................................................................................... 70
Conguring a UNIX Logging Facility Level......................................................................................................................... 71
Synchronizing Log Messages............................................................................................................................................72
Enabling Timestamp on Syslog Messages.........................................................................................................................72
File Transfer Services........................................................................................................................................................73
Conguration Task List for File Transfer Services........................................................................................................73
Enabling the FTP Server.............................................................................................................................................73
Conguring FTP Server Parameters........................................................................................................................... 73
Conguring FTP Client Parameters.............................................................................................................................74
Terminal Lines................................................................................................................................................................... 74
Denying and Permitting Access to a Terminal Line...................................................................................................... 74
Conguring Login Authentication for Terminal Lines................................................................................................... 75
Setting Timeout for EXEC Privilege Mode........................................................................................................................76
Using Telnet to get to Another Network Device................................................................................................................77
4

Lock CONFIGURATION Mode..........................................................................................................................................77
Viewing the Conguration Lock Status.......................................................................................................................78
Restoring the Factory Default Settings.............................................................................................................................78
Important Points to Remember.................................................................................................................................. 78
Restoring Factory Default Environment Variables....................................................................................................... 79
5 802.1ag.......................................................................................................................... 81
Ethernet CFM...................................................................................................................................................................81
Maintenance Domains...................................................................................................................................................... 82
Maintenance Points..........................................................................................................................................................82
Maintenance End Points...................................................................................................................................................83
Implementation Information..............................................................................................................................................83
Conguring the CFM........................................................................................................................................................84
Related Conguration Tasks....................................................................................................................................... 84
Enable Ethernet CFM.......................................................................................................................................................84
Creating a Maintenance Domain.......................................................................................................................................84
Creating a Maintenance Association.................................................................................................................................85
Create Maintenance Points.............................................................................................................................................. 85
Creating a Maintenance End Point............................................................................................................................. 85
Creating a Maintenance Intermediate Point................................................................................................................86
Displaying the MP Databases..................................................................................................................................... 86
Continuity Check Messages............................................................................................................................................. 87
Enabling CCM............................................................................................................................................................ 88
Enabling Cross-Checking............................................................................................................................................88
Sending Loopback Messages and Responses...................................................................................................................88
Sending Linktrace Messages and Responses................................................................................................................... 88
Caching Link Trace..................................................................................................................................................... 89
Enabling CFM SNMP Traps..............................................................................................................................................90
Displaying Ethernet CFM Statistics...................................................................................................................................91
6 802.1X........................................................................................................................... 93
Port-Authentication Process............................................................................................................................................ 94
EAP over RADIUS...................................................................................................................................................... 95
Conguring 802.1X........................................................................................................................................................... 96
Related Conguration Tasks....................................................................................................................................... 96
Important Points to Remember........................................................................................................................................ 96
Enabling 802.1X................................................................................................................................................................ 97
Conguring Request Identity Re-Transmissions................................................................................................................ 98
Conguring a Quiet Period after a Failed Authentication............................................................................................ 99
Forcibly Authorizing or Unauthorizing a Port.................................................................................................................. 100
Re-Authenticating a Port................................................................................................................................................ 100
Conguring Timeouts...................................................................................................................................................... 101
Conguring Dynamic VLAN Assignment with Port Authentication..................................................................................102
Guest and Authentication-Fail VLANs.............................................................................................................................103
Conguring a Guest VLAN........................................................................................................................................104
Conguring an Authentication-Fail VLAN................................................................................................................. 104
5

7 Access Control List (ACL) VLAN Groups and Content Addressable Memory (CAM).... 106
Optimizing CAM Utilization During the Attachment of ACLs to VLANs.......................................................................... 106
Guidelines for Conguring ACL VLAN Groups.................................................................................................................107
Conguring ACL VLAN Groups and Conguring FP Blocks for VLAN Parameters.......................................................... 107
Conguring ACL VLAN Groups................................................................................................................................. 107
Conguring FP Blocks for VLAN Parameters............................................................................................................108
Viewing CAM Usage.......................................................................................................................................................109
Allocating FP Blocks for VLAN Processes....................................................................................................................... 110
8 Access Control Lists (ACLs)..........................................................................................111
IP Access Control Lists (ACLs).........................................................................................................................................111
CAM Usage............................................................................................................................................................... 112
Implementing ACLs on Dell Networking OS............................................................................................................... 113
Important Points to Remember........................................................................................................................................114
Conguration Task List for Route Maps..................................................................................................................... 114
Conguring Match Routes.........................................................................................................................................116
Conguring Set Conditions........................................................................................................................................ 117
Congure a Route Map for Route Redistribution....................................................................................................... 118
Congure a Route Map for Route Tagging.................................................................................................................119
Continue Clause........................................................................................................................................................ 119
IP Fragment Handling...................................................................................................................................................... 119
IP Fragments ACL Examples.....................................................................................................................................120
Layer 4 ACL Rules Examples.....................................................................................................................................120
Congure a Standard IP ACL........................................................................................................................................... 121
Conguring a Standard IP ACL Filter.........................................................................................................................122
Congure an Extended IP ACL........................................................................................................................................123
Conguring Filters with a Sequence Number............................................................................................................ 123
Conguring Filters Without a Sequence Number...................................................................................................... 124
Congure Layer 2 and Layer 3 ACLs............................................................................................................................... 125
Assign an IP ACL to an Interface.....................................................................................................................................125
Applying an IP ACL......................................................................................................................................................... 125
Counting ACL Hits.................................................................................................................................................... 126
Congure Ingress ACLs...................................................................................................................................................126
Congure Egress ACLs....................................................................................................................................................127
Applying Egress Layer 3 ACLs (Control-Plane)..........................................................................................................128
IP Prex Lists..................................................................................................................................................................128
Implementation Information...................................................................................................................................... 129
Conguration Task List for Prex Lists......................................................................................................................129
ACL Resequencing..........................................................................................................................................................132
Resequencing an ACL or Prex List.......................................................................................................................... 133
Route Maps.................................................................................................................................................................... 134
Implementation Information...................................................................................................................................... 134
Logging of ACL Processes.............................................................................................................................................. 134
Guidelines for Conguring ACL Logging....................................................................................................................135
Conguring ACL Logging.......................................................................................................................................... 136
6

Flow-Based Monitoring Support for ACLs...................................................................................................................... 136
Behavior of Flow-Based Monitoring.......................................................................................................................... 137
Enabling Flow-Based Monitoring...............................................................................................................................138
Conguring UDF ACL..................................................................................................................................................... 139
9 Bidirectional Forwarding Detection (BFD)....................................................................142
How BFD Works............................................................................................................................................................. 142
BFD Packet Format.................................................................................................................................................. 143
BFD Sessions............................................................................................................................................................144
BFD Three-Way Handshake...................................................................................................................................... 145
Session State Changes............................................................................................................................................. 147
Important Points to Remember....................................................................................................................................... 147
Congure BFD................................................................................................................................................................ 147
Congure BFD for Physical Ports..............................................................................................................................148
Congure BFD for Static Routes............................................................................................................................... 151
Congure BFD for OSPF.......................................................................................................................................... 152
Congure BFD for OSPFv3.......................................................................................................................................154
Congure BFD for IS-IS............................................................................................................................................ 156
Congure BFD for BGP............................................................................................................................................ 158
Congure BFD for VRRP.......................................................................................................................................... 164
Conguring Protocol Liveness...................................................................................................................................167
Troubleshooting BFD.................................................................................................................................................167
10 Border Gateway Protocol IPv4 (BGPv4).................................................................... 169
Autonomous Systems (AS).............................................................................................................................................169
Sessions and Peers..........................................................................................................................................................171
Establish a Session.....................................................................................................................................................171
Route Reectors............................................................................................................................................................. 172
BGP Attributes................................................................................................................................................................173
Best Path Selection Criteria...................................................................................................................................... 173
Weight...................................................................................................................................................................... 175
Local Preference....................................................................................................................................................... 175
Multi-Exit Discriminators (MEDs)..............................................................................................................................176
Origin........................................................................................................................................................................ 177
AS Path.....................................................................................................................................................................177
Next Hop.................................................................................................................................................................. 178
Multiprotocol BGP...........................................................................................................................................................178
Implement BGP with Dell Networking OS....................................................................................................................... 179
Additional Path (Add-Path) Support......................................................................................................................... 179
Advertise IGP Cost as MED for Redistributed Routes...............................................................................................179
Ignore Router-ID in Best-Path Calculation.................................................................................................................180
Four-Byte AS Numbers.............................................................................................................................................180
AS4 Number Representation.................................................................................................................................... 180
AS Number Migration............................................................................................................................................... 182
BGP4 Management Information Base (MIB).............................................................................................................183
Important Points to Remember.................................................................................................................................183
7

Conguration Information............................................................................................................................................... 184
BGP Conguration..........................................................................................................................................................184
Enabling BGP............................................................................................................................................................185
Conguring AS4 Number Representations................................................................................................................188
Conguring Peer Groups...........................................................................................................................................189
Conguring BGP Fast Fall-Over................................................................................................................................192
Conguring Passive Peering..................................................................................................................................... 194
Maintaining Existing AS Numbers During an AS Migration........................................................................................ 194
Allowing an AS Number to Appear in its Own AS Path..............................................................................................195
Enabling Graceful Restart......................................................................................................................................... 196
Enabling Neighbor Graceful Restart.......................................................................................................................... 197
Filtering on an AS-Path Attribute.............................................................................................................................. 197
Regular Expressions as Filters...................................................................................................................................198
Redistributing Routes...............................................................................................................................................200
Enabling Additional Paths.........................................................................................................................................200
Conguring IP Community Lists................................................................................................................................201
Conguring an IP Extended Community List............................................................................................................ 202
Filtering Routes with Community Lists..................................................................................................................... 203
Manipulating the COMMUNITY Attribute................................................................................................................ 203
Changing MED Attributes........................................................................................................................................ 205
Changing the LOCAL_PREFERENCE Attribute.......................................................................................................205
Changing the NEXT_HOP Attribute.........................................................................................................................206
Changing the WEIGHT Attribute..............................................................................................................................206
Enabling Multipath................................................................................................................................................... 206
Filtering BGP Routes................................................................................................................................................ 207
Filtering BGP Routes Using Route Maps..................................................................................................................208
Filtering BGP Routes Using AS-PATH Information................................................................................................... 209
Conguring BGP Route Reectors...........................................................................................................................209
Aggregating Routes.................................................................................................................................................. 210
Conguring BGP Confederations..............................................................................................................................210
Enabling Route Flap Dampening................................................................................................................................ 211
Changing BGP Timers...............................................................................................................................................213
Enabling BGP Neighbor Soft-Reconguration...........................................................................................................213
Route Map Continue.................................................................................................................................................214
Enabling MBGP Congurations.......................................................................................................................................215
BGP Regular Expression Optimization............................................................................................................................ 216
Debugging BGP.............................................................................................................................................................. 216
Storing Last and Bad PDUs.......................................................................................................................................217
Capturing PDUs........................................................................................................................................................218
PDU Counters...........................................................................................................................................................219
Sample Congurations....................................................................................................................................................219
11 Content Addressable Memory (CAM).........................................................................225
CAM Allocation.............................................................................................................................................................. 225
Test CAM Usage............................................................................................................................................................ 227
View CAM-ACL Settings................................................................................................................................................ 227
8

View CAM Usage...........................................................................................................................................................229
CAM Optimization..........................................................................................................................................................229
Troubleshoot CAM Proling............................................................................................................................................229
CAM Prole Mismatches..........................................................................................................................................229
QoS CAM Region Limitation.....................................................................................................................................230
12 Control Plane Policing (CoPP)....................................................................................231
Congure Control Plane Policing.................................................................................................................................... 232
Conguring CoPP for Protocols............................................................................................................................... 233
Conguring CoPP for CPU Queues..........................................................................................................................234
CoPP for OSPFv3 Packets...................................................................................................................................... 235
Conguring CoPP for OSPFv3.................................................................................................................................238
Displaying CoPP Conguration ................................................................................................................................239
13 Data Center Bridging (DCB)....................................................................................... 241
Ethernet Enhancements in Data Center Bridging............................................................................................................241
Priority-Based Flow Control..................................................................................................................................... 242
Enhanced Transmission Selection.............................................................................................................................243
Data Center Bridging Exchange Protocol (DCBx).....................................................................................................244
Data Center Bridging in a Trac Flow...................................................................................................................... 244
Enabling Data Center Bridging........................................................................................................................................244
DCB Maps and its Attributes....................................................................................................................................245
Data Center Bridging: Default Conguration.................................................................................................................. 246
Conguring Priority-Based Flow Control........................................................................................................................ 246
Conguring Lossless Queues....................................................................................................................................247
Conguring PFC in a DCB Map......................................................................................................................................248
PFC Conguration Notes......................................................................................................................................... 248
PFC Prerequisites and Restrictions.......................................................................................................................... 249
Applying a DCB Map on a Port.......................................................................................................................................250
Conguring PFC without a DCB Map............................................................................................................................ 250
Conguring Lossless QueuesExample:...................................................................................................................... 251
Priority-Based Flow Control Using Dynamic Buer Method...........................................................................................252
Pause and Resume of Trac....................................................................................................................................252
Buer Sizes for Lossless or PFC Packets.................................................................................................................252
Behavior of Tagged Packets...........................................................................................................................................253
Conguration Example for DSCP and PFC Priorities......................................................................................................253
Using PFC to Manage Converged Ethernet Trac........................................................................................................ 254
Congure Enhanced Transmission Selection.................................................................................................................. 254
ETS Prerequisites and Restrictions...........................................................................................................................254
Creating an ETS Priority Group................................................................................................................................ 255
ETS Operation with DCBx........................................................................................................................................256
Conguring Bandwidth Allocation for DCBx CIN......................................................................................................256
Conguring ETS in a DCB Map................................................................................................................................ 257
Hierarchical Scheduling in ETS Output Policies.............................................................................................................. 258
Using ETS to Manage Converged Ethernet Trac.........................................................................................................259
Applying DCB Policies in a Switch Stack........................................................................................................................ 259
9

Congure a DCBx Operation..........................................................................................................................................259
DCBx Operation....................................................................................................................................................... 259
DCBx Port Roles...................................................................................................................................................... 260
DCB Conguration Exchange....................................................................................................................................261
Conguration Source Election...................................................................................................................................261
Propagation of DCB Information.............................................................................................................................. 262
Auto-Detection and Manual Conguration of the DCBx Version.............................................................................. 262
DCBx Example......................................................................................................................................................... 262
DCBx Prerequisites and Restrictions........................................................................................................................ 263
Conguring DCBx.................................................................................................................................................... 263
Verifying the DCB Conguration.....................................................................................................................................267
QoS dot1p Trac Classication and Queue Assignment................................................................................................. 277
Conguring the Dynamic Buer Method........................................................................................................................278
Sample DCB Conguration.............................................................................................................................................279
PFC and ETS Conguration Command Examples.................................................................................................... 280
14 Dynamic Host Conguration Protocol (DHCP)........................................................... 281
DHCP Packet Format and Options................................................................................................................................. 281
Assign an IP Address using DHCP.................................................................................................................................. 283
Implementation Information............................................................................................................................................283
Congure the System to be a DHCP Server.................................................................................................................. 284
Conguring the Server for Automatic Address Allocation.........................................................................................284
Specifying a Default Gateway.................................................................................................................................. 286
Congure a Method of Hostname Resolution.......................................................................................................... 286
Using DNS for Address Resolution........................................................................................................................... 286
Using NetBIOS WINS for Address Resolution.......................................................................................................... 286
Creating Manual Binding Entries.............................................................................................................................. 286
Debugging the DHCP Server....................................................................................................................................287
Using DHCP Clear Commands................................................................................................................................. 287
Congure the System to be a Relay Agent..................................................................................................................... 287
Congure the System to be a DHCP Client....................................................................................................................289
Conguring the DHCP Client System.......................................................................................................................289
DHCP Client on a Management Interface................................................................................................................ 290
DHCP Client Operation with Other Features............................................................................................................ 291
Congure the System for User Port Stacking (Option 230)...........................................................................................292
Congure Secure DHCP.................................................................................................................................................292
Option 82.................................................................................................................................................................292
DHCP Snooping....................................................................................................................................................... 293
Drop DHCP Packets on Snooped VLANs Only.........................................................................................................296
Dynamic ARP Inspection..........................................................................................................................................296
Conguring Dynamic ARP Inspection....................................................................................................................... 297
Source Address Validation..............................................................................................................................................298
Enabling IP Source Address Validation......................................................................................................................298
DHCP MAC Source Address Validation.................................................................................................................... 299
Enabling IP+MAC Source Address Validation........................................................................................................... 299
Viewing the Number of SAV Dropped Packets.........................................................................................................299
10