Lenovo ThinkSystem NE1032 User manual
Lenovo NE1032 Switch
Quickstart Guide
Document Version 1.0: 10/2018
© Scale Computing 2018 1
Table of Contents
Introduction 3
Requirements 3
Connect to the Switch 4
Over the Network 4
Console 4
CLI Mode Basics 5
Set the Management IP 6
Management Configuration Example 6
Management VLAN Configuration Example 6
Update the Firmware 7
General Configuration 9
Set the Enable Mode Password 9
Generate New SSH keys 9
Set AAA Maximum Attempts 9
Create Additional Users 9
Set NTP 9
Set DNS 10
Create VLANs 10
Verify Spanning Tree 10
Logging 11
Port Configuration 12
Switchport Access Mode 12
Switchport Hybrid Mode 12
Switchport Trunk Mode 12
Link Layer Discovery Protocol 13
Feedback & Support 14
Document Feedback 14
Technical Support and Resources 14
Disclaimer 14
© Scale Computing 2018 2
Introduction
This guide provides general configuration examples. The configurations found here may not be applicable for all
environments. Consult Lenovo’s official documentation for further information in regards to your environment's
unique configuration.
Requirements
●This guide was written for CNOS version 10.8.1.0. If you are on a lesser version, update to match 10.8.1.0
due to command syntax changes.
●A Terminal Emulation program, such as PuTTY.
●(Optional) Mini-USB B male to USB A male cable.
© Scale Computing 2018 3
Connect to the Switch
Over the Network
By default, the management interface is set to request a DHCP address. If DHCP is available, check your leases on
your DHCP server to determine the IP address of the switch. Using an SSH client, you may log in to the switch over
the network. The default username is admin, and the default password is admin.
Console
Using a terminal emulator, such as PuTTY, connect the provided USB adapter to the port shown below.
Set your console settings as follows:
Default baud rate = 9,600 bps
Character size = 8 characters
Parity = none
Stop bits = 1
Data bits = 8
Flow control = none
The default username is admin and the default password is admin.
© Scale Computing 2018 4
CLI Mode Basics
Configuration for the NE1032 is performed through a CLI interface. As a reference:
> = unprivileged mode
# = privileged mode
(config)# = global configuration mode
(config-if)# = interface configuration mode
(config-vrf)# = virtual routing and forwarding configuration mode
Upon login you will be in the unprivileged mode. To enter privileged mode:
> enable
#
NOTE
You can use ? to display what commands are available in the current mode.
In order to configure the switch we need to enter global configuration mode. This mode is used for settings that
aren’t specific to the switch ports.
# conf t
(config)#
Configuration of switch ports is performed in interface configuration mode. To return to the previous configuration
level:
(config-if)# exit
(config)#
© Scale Computing 2018 5
Set the Management IP
The management network should be separated from any data networks and have physically independent hardware
supporting it. The goal of the management network is to maintain remote access to network equipment should a
configuration change interrupt the data networks. Optionally, you may use a VLAN interface instead.
Management Configuration Example
> en
# conf t
(config)# int mgmt0
(config)# ip addr 10.205.13.252 255.255.255.0
(config)# vrf context management
(config-vrf)# ip route 0.0.0.0/0 10.205.13.1
Management VLAN Configuration Example
> en
# conf t
(config)# interface vlan 1
(config-if)# ip address 10.205.13.252 255.255.255.0
(config-if)# exit
(config)# ip route 0.0.0.0/0 10.205.13.1
© Scale Computing 2018 6
Update the Firmware
Download the Latest Firmware
Download the zip file here.
Unzip the archive. Rename the extracted folder to ne1032 and place it in your local user home directory. Make sure
your firewall will allow port 22, or turn it off temporarily. If you are using a linux machine, ensure sshd is running.
# copy sftp sftp://10.205.105.202//home/cdraper/ne1032/NE1032-CNOS-10.8.1.0.imgs system-
image all vrf management
Output should appear as follows:
Confirm download operation? (y/n) [n] y
Download in progress
Enter Username:user
[email protected]'s password:
sftp> progress
Progress meter enabled
sftp> get /home/user/ne1032/NE1032-CNOS-10.8.1.0.imgs /tmp/ORCA/image.30383
/home/user/ne1032/NE1032-CNOS-10.8.1.0.imgs 6% 12MB 2.0MB/s 01:22
ETAN/home/user/ne1032/NE1032-CNOS-10.8.1.0.imgs 8% 15MB 1.9MB/s 01:24
ETAN/home/user/ne1032/NE1032-CNOS-10.8.1.0.imgs 100% 175MB 1.6MB/s 01:47
Copy Success
Install image...This takes about 90 seconds. Please wait
Check image signature succeeded
Extracting image: 100%
Installing system image to slot 1:
Installing image: 100%
Extracting image: 100%
Installing uboot:
Updating flash: 100%
Extracting image: 100%
Installing NOS Kernel:
Updating flash: 100%
Extracting image: 100%
Installing NOS DFT:
Updating flash: 100%
Extracting image: 100%
Installing NOS RFS:
Updating flash: 100%
© Scale Computing 2018 7
Boot image installation succeeded.
OS image installation succeeded.
Boot loader now contains Software Version 10.8.1.0
Standby image now contains Software Version 10.8.1.0
Switch is currently set to boot active image.
Do you want to change that to the standby image? (y/n) [n] y
Reboot the switch to load the new firmware:
# reload
© Scale Computing 2018 8
General Configuration
Set the Enable Mode Password
(config)# enable password SOMEPASS
Generate New SSH keys
# conf t
(config)# no feature ssh
(config)# ssh key rsa length 4096 force
(config)# ssh login-attempts 3
(config)# feature ssh
Set AAA Maximum Attempts
Authentication, authorization, and accounting features determine what resources users have access to, and where to
check for that user’s credentials. Here, we are setting failed login attempts to be logged and the maximum number of
login attempts to 25.
(config)# aaa authentication login error-enable
(config)# aaa local authentication attempts max-fail 25
Create Additional Users
The network-admin account type has full administrative rights to the switch. The network-operator is a limited
account type.
(config)# username <ADMIN> role network-admin password <PASSWORD>
(config)# username <USER> role network-operator password <PASSWORD>
Set NTP
Any internal or external NTP server that is accessible on your network should work.
(config)# feature ntp
(config)# ntp server 10.205.13.2
© Scale Computing 2018 9
Set DNS
Any internal DNS server that is accessible on your network should work.
(config)# ip name-server 10.205.13.3 vrf default
Create VLANs
You may create VLANs individually as follows:
(config)# vlan 2
(config-vlan)# name SCALEBACKPLANE
Or, you may create multiple VLANs at once using a range:
(config)# vlan 1-10
Verify Spanning Tree
(config)# sh spanning-tree
Ensure that the spanning tree protocol supports rapid convergence. By default the NE1032 uses rapid-pvst.
VLAN0001
spanning-tree enabled protocol rapid-pvst
ROOT ID priority 32769
address a48c.db96.7f00
This bridge is the root
Hello Time 2 Max age 20 Forward Delay 15
BRIDGE ID priority 32769 (32768 sys-id-ext 1)
address a48c.db96.7f00
Hello Time 2 Max age 20 Forward Delay 15
Interface Role Sts cost Prio.Nbr Type
---------------- ---- --- --------- ------------- ----------------------
Ethernet1/1 Desg FWD 2 128.410001 point-to-point
Ethernet1/2 Desg FWD 2 128.410002 point-to-point
Ethernet1/3 Desg FWD 2 128.410003 point-to-point
Ethernet1/4 Desg FWD 2 128.410004 point-to-point
© Scale Computing 2018 10
Logging
Troubleshooting relies heavily on inspecting the switch logs. In this example, we are setting logging to debug level
and storing them locally, allocating the maximum size possible for local storage of the logs.
(config)# logging logfile switch_log 6 size 10485760
(config)# show logging logfile
If there is a remote syslog server available:
(config)# no logging logfile
(config)# logging server 10.205.13.36 6 vrf data
(config)# logging server 10.205.13.36 protocol tcp port 5002
© Scale Computing 2018 11
Port Configuration
By default, all ports are in access mode for VLAN 1. If you are not utilizing VLANs in your environment, you will not
need to configure the VLAN settings for the switch ports further. We recommend isolating backplane ports for Scale
Computing equipment to a VLAN other than 1 using access mode.
Switchport Access Mode
Access mode allows only one VLAN to be configured for a switch port. Use this mode when connecting an end
device that is unaware of VLANs, such as the Scale Computing node backplane ports.
(config)# interface ethernet 1/1
(config-if)# switchport mode access
(config-if)# switchport access vlan 10
Switchport Hybrid Mode
Hybrid mode is used when an interface needs to carry multiple VLANs, such as the Scale Computing LAN ports. If
your VMs need access to specific VLANs other than what the Scale Computing node itself resides upon, you will
need to tag those VLANs. In this example, the Scale Computing appliance is being managed on VLAN 5. The
management interface is unaware of VLANs and thus needs to be untagged traffic. Note that VLAN 5 is omitted from
the list of egress-tagged VLANs.
(config)# interface ethernet 1/1
(config-if)# switchport mode hybrid
(config-if)# switchport hybrid native vlan 5
(config-if)# switchport hybrid allowed vlan 1-10
(config-if)# switchport hybrid egress-tagged vlan 1,2,3,4,6,7,8,9,10
(config-if)# show interface eth1/1 switchport
(config-if)# show running-config interface ethernet1/1
Switchport Trunk Mode
Trunk mode is also used when an interface needs to carry multiple VLANs. Trunk mode configuration is less explicit
than Hybrid mode. In the following configuration example, the Scale Computing appliance is being managed on
VLAN 5.
(config)# interface ethernet 1/1
(config-if)# switchport mode trunk
(config-if)# switchport trunk allowed vlan all
(config-if)# switchport trunk native vlan 5
(config-if)# show interface eth1/1 switchport
(config-if)# show running-config interface ethernet1/1
© Scale Computing 2018 12
Link Layer Discovery Protocol
LLDP is very useful for troubleshooting and network mapping.
(config)# interface ethernet 1/1
(config-if)# lldp transmit
(config-if)# lldp receive
(config-if)# lldp trap-notification
(config-if)# end
To view information about neighboring network devices:
# show lldp neighbors [detail]
# show lldp interface all
© Scale Computing 2018 13
Feedback & Support
Document Feedback
Scale Computing welcomes your suggestions for improving our documentation. Please send your feedback to
Technical Support and Resources
There are many technical support resources available for use. Access this document, and many others, at
http://www.scalecomputing.com/support/login/.
Disclaimer
Switches are not covered under the support and warranty for the Scale Computing HC3 system. Scale Computing is
not responsible for any issues arising from the use of this guide. Any and all questions, issues, or concerns
regarding switch configuration should be addressed with the switch manufacturer directly.
© Scale Computing 2018 14
Other manuals for ThinkSystem NE1032
3
Table of contents
Other Lenovo Switch manuals
Lenovo
Lenovo ThinkSystem NE1032 User manual
Lenovo
Lenovo Flex System EN2092 User manual
Lenovo
Lenovo SI4093 User manual
Lenovo
Lenovo RackSwitch G8272 User manual
Lenovo
Lenovo ThinkSystem NE0152T User manual
Lenovo
Lenovo RackSwitch G8264 User manual
Lenovo
Lenovo ThinkSystem NE1032 User manual
Lenovo
Lenovo H415 User manual
Lenovo
Lenovo RackSwitch G8264 User guide
Lenovo
Lenovo RackSwitch G8264 Installation manual
Lenovo
Lenovo BladeCenter Virtual Fabric 10Gb Switch... User manual
Lenovo
Lenovo ThinkSystem NE10032O RackSwitch User manual
Lenovo
Lenovo RackSwitch G8272 User manual
Lenovo
Lenovo RackSwitch G8124E User manual
Lenovo
Lenovo ThinkSystem NE1032T User manual
Lenovo
Lenovo ThinkSystem NE1072T User manual
Lenovo
Lenovo Flex System Fabric CN4093 User guide
Lenovo
Lenovo ThinkSystem NE2580O RackSwitch User manual
Lenovo
Lenovo RackSwitch G8264CS User guide
Lenovo
Lenovo B6505 User manual
