Lenovo ThinkSystem NE1032 User manual





Lenovo NE1032 Switch
Quickstart Guide



















Document Version 1.0: 10/2018



© Scale Computing 2018 1


Table of Contents

Introduction 3
Requirements 3
Connect to the Switch 4
Over the Network 4
Console 4
CLI Mode Basics 5
Set the Management IP 6
Management Configuration Example 6
Management VLAN Configuration Example 6
Update the Firmware 7
General Configuration 9
Set the Enable Mode Password 9
Generate New SSH keys 9
Set AAA Maximum Attempts 9
Create Additional Users 9
Set NTP 9
Set DNS 10
Create VLANs 10
Verify Spanning Tree 10
Logging 11
Port Configuration 12
Switchport Access Mode 12
Switchport Hybrid Mode 12
Switchport Trunk Mode 12
Link Layer Discovery Protocol 13
Feedback & Support 14
Document Feedback 14
Technical Support and Resources 14
Disclaimer 14

 



© Scale Computing 2018 2


Introduction
This guide provides general configuration examples. The configurations found here may not be applicable for all
environments. Consult Lenovo’s official documentation for further information in regards to your environment's
unique configuration.


Requirements
●This guide was written for CNOS version 10.8.1.0. If you are on a lesser version, update to match 10.8.1.0
due to command syntax changes.
●A Terminal Emulation program, such as PuTTY.
●(Optional) Mini-USB B male to USB A male cable.









 



© Scale Computing 2018 3


Connect to the Switch
Over the Network
By default, the management interface is set to request a DHCP address. If DHCP is available, check your leases on
your DHCP server to determine the IP address of the switch. Using an SSH client, you may log in to the switch over
the network. The default username is admin, and the default password is admin.


Console
Using a terminal emulator, such as PuTTY, connect the provided USB adapter to the port shown below.



Set your console settings as follows:
Default baud rate = 9,600 bps
Character size = 8 characters
Parity = none
Stop bits = 1
Data bits = 8
Flow control = none

The default username is admin and the default password is admin.

 



© Scale Computing 2018 4


CLI Mode Basics
Configuration for the NE1032 is performed through a CLI interface. As a reference:
> = unprivileged mode
# = privileged mode
(config)# = global configuration mode
(config-if)# = interface configuration mode
(config-vrf)# = virtual routing and forwarding configuration mode

Upon login you will be in the unprivileged mode. To enter privileged mode:
> enable
#


NOTE

You can use ? to display what commands are available in the current mode.

In order to configure the switch we need to enter global configuration mode. This mode is used for settings that
aren’t specific to the switch ports.
# conf t
(config)#

Configuration of switch ports is performed in interface configuration mode. To return to the previous configuration
level:
(config-if)# exit
(config)#

 



© Scale Computing 2018 5


Set the Management IP
The management network should be separated from any data networks and have physically independent hardware
supporting it. The goal of the management network is to maintain remote access to network equipment should a
configuration change interrupt the data networks. Optionally, you may use a VLAN interface instead.

Management Configuration Example
> en
# conf t
(config)# int mgmt0
(config)# ip addr 10.205.13.252 255.255.255.0
(config)# vrf context management
(config-vrf)# ip route 0.0.0.0/0 10.205.13.1


Management VLAN Configuration Example
> en
# conf t
(config)# interface vlan 1
(config-if)# ip address 10.205.13.252 255.255.255.0
(config-if)# exit
(config)# ip route 0.0.0.0/0 10.205.13.1



 



© Scale Computing 2018 6


Update the Firmware
Download the Latest Firmware
Download the zip file here.

Unzip the archive. Rename the extracted folder to ne1032 and place it in your local user home directory. Make sure
your firewall will allow port 22, or turn it off temporarily. If you are using a linux machine, ensure sshd is running.
# copy sftp sftp://10.205.105.202//home/cdraper/ne1032/NE1032-CNOS-10.8.1.0.imgs system-
image all vrf management

Output should appear as follows:
Confirm download operation? (y/n) [n] y
Download in progress
Enter Username:user
[email protected]'s password:
sftp> progress
Progress meter enabled
sftp> get /home/user/ne1032/NE1032-CNOS-10.8.1.0.imgs /tmp/ORCA/image.30383
/home/user/ne1032/NE1032-CNOS-10.8.1.0.imgs 6% 12MB 2.0MB/s 01:22
ETAN/home/user/ne1032/NE1032-CNOS-10.8.1.0.imgs 8% 15MB 1.9MB/s 01:24
ETAN/home/user/ne1032/NE1032-CNOS-10.8.1.0.imgs 100% 175MB 1.6MB/s 01:47
Copy Success
Install image...This takes about 90 seconds. Please wait
Check image signature succeeded
Extracting image: 100%
Installing system image to slot 1:
Installing image: 100%
Extracting image: 100%
Installing uboot:
Updating flash: 100%
Extracting image: 100%
Installing NOS Kernel:
Updating flash: 100%
Extracting image: 100%
Installing NOS DFT:
Updating flash: 100%
Extracting image: 100%
Installing NOS RFS:
Updating flash: 100%



© Scale Computing 2018 7


Boot image installation succeeded.
OS image installation succeeded.
Boot loader now contains Software Version 10.8.1.0
Standby image now contains Software Version 10.8.1.0
Switch is currently set to boot active image.
Do you want to change that to the standby image? (y/n) [n] y

Reboot the switch to load the new firmware:
# reload



 



© Scale Computing 2018 8


General Configuration
Set the Enable Mode Password
(config)# enable password SOMEPASS


Generate New SSH keys
# conf t
(config)# no feature ssh
(config)# ssh key rsa length 4096 force
(config)# ssh login-attempts 3
(config)# feature ssh


Set AAA Maximum Attempts
Authentication, authorization, and accounting features determine what resources users have access to, and where to
check for that user’s credentials. Here, we are setting failed login attempts to be logged and the maximum number of
login attempts to 25.
(config)# aaa authentication login error-enable
(config)# aaa local authentication attempts max-fail 25


Create Additional Users
The network-admin account type has full administrative rights to the switch. The network-operator is a limited
account type.
(config)# username <ADMIN> role network-admin password <PASSWORD>
(config)# username <USER> role network-operator password <PASSWORD>


Set NTP
Any internal or external NTP server that is accessible on your network should work.
(config)# feature ntp
(config)# ntp server 10.205.13.2



© Scale Computing 2018 9


Set DNS
Any internal DNS server that is accessible on your network should work.
(config)# ip name-server 10.205.13.3 vrf default


Create VLANs
You may create VLANs individually as follows:
(config)# vlan 2
(config-vlan)# name SCALEBACKPLANE

Or, you may create multiple VLANs at once using a range:
(config)# vlan 1-10


Verify Spanning Tree
(config)# sh spanning-tree

Ensure that the spanning tree protocol supports rapid convergence. By default the NE1032 uses rapid-pvst.
VLAN0001
spanning-tree enabled protocol rapid-pvst
ROOT ID priority 32769
address a48c.db96.7f00
This bridge is the root
Hello Time 2 Max age 20 Forward Delay 15
BRIDGE ID priority 32769 (32768 sys-id-ext 1)
address a48c.db96.7f00
Hello Time 2 Max age 20 Forward Delay 15
Interface Role Sts cost Prio.Nbr Type
---------------- ---- --- --------- ------------- ----------------------
Ethernet1/1 Desg FWD 2 128.410001 point-to-point
Ethernet1/2 Desg FWD 2 128.410002 point-to-point
Ethernet1/3 Desg FWD 2 128.410003 point-to-point
Ethernet1/4 Desg FWD 2 128.410004 point-to-point






© Scale Computing 2018 10