NW Switch Configuration Guide DX2000. NEC Scalable Modular Server. 1. Introduction. 2. System Configuration. 3. Layer1 Configuration

Size: px

Start display at page:

Download "NW Switch Configuration Guide DX2000. NEC Scalable Modular Server. 1. Introduction. 2. System Configuration. 3. Layer1 Configuration"

Evelyn Miles
5 years ago
Views:

1 NW Switch Configuration Guide NEC Scalable Modular Server DX Introduction 2. System Configuration 3. Layer1 Configuration 4. Layer2 Configuration Second edition November 2017 NEC Corporation 2017

2 Contents Contents Contents... 2 Warnings and Additions to This Document... 4 Security Note Introduction NW Switch Module Diagram Interface Number on CLI Initial VLAN Configuration Connecting to the Switch Console Port Accessing the CLI Default Account System Configuration Saving a system configuration Restore initial configuration Exporting Switch Configuration Importing Switch Configuration Show IP Address Show the Logging Configuring the System Clock Changing Password Configuring SNMP Creating Community Configuring SNMP Trap Show SNMP Trap Layer1 Configuration Show Interface Status Show Interface Status (detail) Configure QSFP+ Module Mode Layer2 Configuration VLAN Show VLAN Configuration Configuring VLAN (Trunk Port) Configuring VLAN (Access Port) Configuring VLAN (Native VLAN) Removing VLAN LACP Show LACP Information Configuring LACP Removing LACP Static LAG Show Static LAG Information Configuring Static LAG Removing Static LAG Spanning-Tree Show Spanning-Tree Information Changing Spanning-Tree mode Enable/Disable Spanning-Tree (Global) Enable/Disable Spanning-Tree (Interface) Flow Control Enabling/Disabling on QSFP+ Module Interface Enabling/Disabling on Module Slots DX2000 NW Switch Configuration Guide

3 4.6 TFO (Trigger Fail Over) Show TFO information Configuring TFO Removing TFO Revision Record DX2000 NW Switch Configuration Guide 3

4 Warnings and Additions to This Document Warnings and Additions to This Document 1. Unauthorized reproduction of the contents of this document, in part or in its entirety, is prohibited. 2. The contents of this document may change without prior notice. 3. Do not make copies or alter the document content without permission from NEC Corporation. 4. Every effort has been made to ensure the completeness of this document. However, if you have any concerns, or discover errors or omissions, please contact your retailer. 5. Regardless of article 4, NEC Corporation does not take responsibility for effects resulting from operations. 6. The sample values used in this document are not the actual values. Keep this document nearby so that you may refer to it as necessary. 4 DX2000 NW Switch Configuration Guide

5 Security Note Security Note Using a network controllable product with its default password may raise a serious risk as it may be hacked by some malicious third person. If a product is supplanted by a malware, it will face possibilities of not only information leakages, but also system damages obstructing its availability and/or integrity. Even if it does not cause damage to own system, the product may be used as a botnet to make a cyber-attack to some other systems. The default password on our product is provided only for the purpose of changing initial setting during its installation service. In first change of initial setting, please be sure to change the password. NEC Platforms, Ltd. shall not take any liability and responsibility for any damages arising from illegal access. If the new password is not strong (too short) or easily guessed (such as " ", "abcdefg", "password", "Administrator"), illegal access cannot be prevented. Please be sure to use a strong password (use 8 digits or longer, and including numerals, capital letters and small letters). <<How to change your password>> Refer to P Changing Password section. DX2000 NW Switch Configuration Guide 5

The figure below shows the NW Switch Module Diagram. The number 1 to 79, mgmt and internal show the physical ports.

6 1. Introduction 1. Introduction 1.1 NW Switch Module Diagram Two NW Switch modules are installed in a chassis. Each NW Switch module consists of external interfaces (40Gbps QSFP+ x8ports) and internal interfaces (for each CPU Slot 10Gbps x1). The figure below shows the NW Switch Module Diagram. The number 1 to 79, mgmt and internal show the physical ports. For more details, please refer to the next page. Note: Each NW Switch modules works individually. These NW Switch modules are not stackable. The NW Switch module doesn t support Direct Attach Cable. 6 DX2000 NW Switch Configuration Guide

7 1. Introduction 1.2 Interface Number on CLI This table shows the description of each interface to select on CLI. Interface Connected to Description Port1-Port44 Module Slots The Interface number corresponds to the Slot ID. Server Module LAN 10G Expansion Module LAN Port45-Port76 QSFP+ Modules For 40G mode, the lowest number of each port represents the interface. (Port45, 49, 53, 57, 61, 65, 69, 73) Port77 RJ45 Port Management LAN Port78 Interconnect interface to the Disabled as default. adjacent NW Switch module Port79 CSC - mgmt CPU for LAN-Switch NW Switch Module management Interface lo - For internal use internal - For internal use 1.3 Initial VLAN Configuration To separate the management LAN and data LAN, the interfaces are configured as follows by LAN switch software. Port1-Port44 Port45-Port76 Internal Port78 Interface VLAN1 (untagged) VLAN4092 (tagged) LAN1 (untagged) VLAN4092 (untagged) VLAN1 (untagged) VLAN Configuration User can access to BMC from the management LAN only because the BMC is configured as VLAN4092. The modules below can be accessed from management LAN (Port77). NW Switch Module management Interface (Console) CSC BMC The modules below can be accessed from QSFP+ Modules interfaces (Port45-Port76). Server Modules (exclude BMC) 10G Expansion Modules DX2000 NW Switch Configuration Guide 7

8 1. Introduction 1.4 Connecting to the Switch Console Port To connect to the switch CLI using the console port, configure the serial port of terminal with the following settings. Baud rate: Data bits: 8 Stop bits: 1 Parity: none Flow control: none 1.5 Accessing the CLI To login to the switch CLI, login at the prompt as admin/admin (default username and password) using serial console, telnet or ssh. Linux (Switch) (0) login: admin Password: ZebOS-XP version IPIRouter 11/20/15 18:06:09 Switch> 1.6 Default Account To login to the LAN-Switch CLI, use an account below. Username: Password: admin admin Note: For security reasons, change the above default settings (Username and Password) to the ones appropriate in your network environment. Refer to P5 Security Note for details. 8 DX2000 NW Switch Configuration Guide

9 2. System Configuration 2. System Configuration 2.1 Saving a system configuration You can save the current configuration using the following command. Switch#write Building configuration... [OK] Reboot or shutdown the NW Switch Module without saving will discard the changes. 2.2 Restore initial configuration To restore the default configuration, use the following commands. Switch#configure terminal Enter configuration commands, one per line. End with CNTL/Z. Switch(config)#system restore default-config This task requires reboot system, do you want to continue? (y/n):y Note: This command will automatically reboot the NW Switch Module. 2.3 Exporting Switch Configuration You can export saved configuration from the NW Switch Module to an external server by TFTP using the following commands. (Save the configuration (execute write ) before exporting the configuration.) Example: To export configuration file named startup-config to TFTP server (IP address ), Switch#copy startup-config tftp Enter IP: Enter port [69]:69 Enter filename:startup-config * User can also use the command below copy startup-config tftp tftp:// /startup-config DX2000 NW Switch Configuration Guide 9

10 2. System Configuration 2.4 Importing Switch Configuration You can import a previously exported configuration file from an external server by TFTP using the following commands. Switch#copy tftp startup-config Enter IP: Enter port [69]:69 Enter filename: startup-config Copy Success... You need to reboot the NW Switch Module ( reload command) to enable the new configuration. * User can also use the command below copy tftp tftp:// /startup-config startup-config 2.5 Show IP Address To show the management IP address, Switch>show interface mgmt Interface mgmt Scope: both Hardware is Management Ethernet Current HW addr: ff Physical: ff Logical:(not set) index 2 metric 1 mtu 1500 duplex-full no switchport <UP,BROADCAST,RUNNING,ALLMULTI,MULTICAST> VRF Binding: Not bound Bandwidth 96k IPV4 DHCP client is enabled <client-id=mgmt, hostname=n/a>. IPV6 DHCP IA-NA client is enabled. inet /21 broadcast inet6 fe80::211:22ff:fe33:44ff/64 input packets 00, bytes 00, multicast packets 00 broadcast packets 00 FCS error 00 UndersizeErrors 00 OverSizeErrors 00 output packets 00, bytes 00, multicast packets 00 broadcast packets DX2000 NW Switch Configuration Guide

11 2. System Configuration 2.6 Show the Logging To show the event log. Switch>show logging logfile 2.7 Configuring the System Clock To configure the system clock to be synchronized with an NTP server, Switch#configure terminal Switch(config)#ntp server To configure the time-zone, Switch#configure terminal Switch(config)#set time-zone Japan If NTP is unused, configure the clock manually using clock command. Shutdown or reboot of the switch resets the system clock. Switch#configure terminal Switch(config)#no ntp enable Switch(config)#exit Switch#clock set 12:00:00 1 january 2016 To show the system clock, Switch#show clock 12:00:03 UTC Fri Jan Changing Password To change admin user password, Switch#configure terminal Enter configuration commands, one per line. End with CNTL/Z. Switch(config)#username-remote admin password admin123 DX2000 NW Switch Configuration Guide 11

12 2. System Configuration 2.9 Configuring SNMP Creating Community To create community (named public) with read-write access, Switch(config)#snmp-server community public rw Configuring SNMP Trap To configure SNMP Trap, Switch(config)#snmp-server host traps version 2c public Show SNMP Trap To show SNMP Trap information, Switch>show snmp host Host Port Version Level Type SecName c noauth trap public 12 DX2000 NW Switch Configuration Guide

13 3. Layer1 Configuration 3. Layer1 Configuration 3.1 Show Interface Status To show the interface status, use the show interface description command. Protocol column shows the current link status. Switch>show interface description Interface Status Protocol Description lo up up mgmt up up Port1 up up Port2 up up Port3 up up Port4 up up Port5 up up Port6 up up Port7 up up Port8 up up Port9 up up : : : Port39 up up Port40 up up Port41 up up Port42 up up Port43 up up Port44 up up Port45 up up Port49 up up Port53 up up Port57 up up Port61 up up Port65 up up Port69 up up Port73 up up Port77 up up Port78 administratively down down vlan0.1 up up vlan up up DX2000 NW Switch Configuration Guide 13

14 3. Layer1 Configuration 3.2 Show Interface Status (detail) To show the detail interface status, Switch>show interface Port1 Interface Port1 Scope: both Hardware is Ethernet Current HW addr: Physical: Logical:(not set) index 5001 metric 1 mtu 9750 duplex-full Port Mode is trunk <UP,BROADCAST,ALLMULTI,MULTICAST> VRF Binding: Not bound DHCP client is disabled. input packets 00, bytes 00, multicast packets 00 broadcast packets 00 FCS error 00 UndersizeErrors 00 OverSizeErrors 00 output packets 00, bytes 00, multicast packets 00 broadcast packets Configure QSFP+ Module Mode To configure QSFP+ Module mode, use bandwidth command. Example: To change Port45-Port48 from 40G x1 to 10G x4, Switch#configure terminal Enter configuration commands, one per line. End with CNTL/Z. Switch(config)#interface Port45 Switch(config-if)#bandwidth 10g Example: To change Port45-Port48 from 10G x4 to 40G x1, Switch#configure terminal Enter configuration commands, one per line. End with CNTL/Z. Switch(config)#interface Port45 Switch(config-if)#bandwidth 40g Note: Default Mode is 40G x1. Changing the interface mode will reset parts of the interface configuration. 14 DX2000 NW Switch Configuration Guide

15 4. Layer2 Configuration 4. Layer2 Configuration 4.1 VLAN Show VLAN Configuration To show the VLAN configuration, Switch>show vlan brief Bridge VLAN ID Name State Oper Status Member ports H/W Status (u)-untagged, (t)-tagged ======= ======= ============ ======= =========== ============================ default 1 default ACTIVE Up Port1(u) Port2(u) Port3(u) Port4(u) Port5(u) Port6(u) Port7(u) Port8(u) Port9(u) Port10(u) Port11(u) Port12(u) Port13(u) Port14(u) Port15(u) Port16(u) Port17(u) Port18(u) Port19(u) Port20(u) Port21(u) Port22(u) Port23(u) Port24(u) Port25(u) Port26(u) Port27(u) Port28(u) Port29(u) Port30(u) Port31(u) Port32(u) Port33(u) Port34(u) Port35(u) Port36(u) Port37(u) Port38(u) Port39(u) Port40(u) Port41(u) Port42(u) Port43(u) Port44(u) Port45(u) Port49(u) Port53(u) Port57(u) Port61(u) Port65(u) Port69(u) Port73(u) Port78(u) default 4092 VLAN4092 ACTIVE Up internal(u) Port1(t) Port2(t) Port3(t) Port4(t) Port5(t) Port6(t) Port7(t) Port8(t) Port9(t) Port10(t) Port11(t) Port12(t) Port13(t) Port14(t) Port15(t) Port16(t) Port17(t) Port18(t) Port19(t) Port20(t) Port21(t) Port22(t) Port23(t) Port24(t) Port25(t) Port26(t) Port27(t) Port28(t) Port29(t) Port30(t) Port31(t) Port32(t) Port33(t) Port34(t) Port35(t) Port36(t) Port37(t) Port38(t) Port39(t) Port40(t) Port41(t) Port42(t) Port43(t) Port44(t) DX2000 NW Switch Configuration Guide 15

16 4. Layer2 Configuration Configuring VLAN (Trunk Port) VLAN configuration for trunk port is described in the following steps, 1. Creating VLAN 2. Change the port mode to trunk 3. Assign the interface to VLAN (1) Creating VLAN To create the VLAN, Switch#configure terminal Enter configuration commands, one per line. End with CNTL/Z. Switch(config)#vlan 100 state enable (2) Changing to Trunk Port To change the port mode from access port to trunk port, Switch(config)#interface Port45 witch(config)#shutdown Switch(config-if)#switchport mode trunk (3) Assign the interfaces to VLAN To assign the interfaces to VLAN, Switch(config-if)#switchport trunk allowed vlan add 100 Switch(config-if)#no shutdown 16 DX2000 NW Switch Configuration Guide

17 4. Layer2 Configuration Configuring VLAN (Access Port) VLAN configuration for access port is described in the following steps, 1. Creating VLAN 2. Change the port mode to access 3. Assign the ports to VLAN (1) Creating VLAN To create the VLAN, Switch#configure terminal Enter configuration commands, one per line. End with CNTL/Z. Switch(config)#vlan 100 state enable (2) Change to Access Port To change the port mode from access port to trunk port, Switch(config)#interface Port45 witch(config)#shutdown Switch(config-if)#switchport mode access (3) Assign the interfaces to VLAN To assign the interfaces to VLAN, Switch(config-if)#switchport access vlan 100 Switch(config-if)#no shutdown Configuring VLAN (Native VLAN) To configure the Native VLAN for trunk Port, Switch#configure terminal Enter configuration commands, one per line. End with CNTL/Z. Switch(config)#vlan 101 state enable Switch(config)#interface Port1 Switch(config-if)#switchport trunk allowed vlan add 101 Switch(config-if)#switchport trunk native vlan 101 DX2000 NW Switch Configuration Guide 17

18 4. Layer2 Configuration Removing VLAN Removing VLAN configuration is described in the following steps, 1. Removing VLAN Assignment 2. Deleting VLAN (1) Removing VLAN Assignment To remove VLAN Assignment, Switch(config)#interface range Port1-44 Switch(config-if)#switchport trunk allowed vlan remove 100 (2) Deleting VLAN To delete VLAN, Switch#configure terminal Enter configuration commands, one per line. End with CNTL/Z. Switch(config)#no vlan DX2000 NW Switch Configuration Guide

19 4. Layer2 Configuration 4.2 LACP Show LACP Information To show LACP information, Switch>show etherchannel % Lacp Aggregator: po10 % Member: Port45 Port Configuring LACP To configure LACP with following parameters, Port Member Etherchannel Name Mode :Port45 Port49 :po10 (Using channel-group 10 will create an interface named po10.) :Active Switch(config)#interface Port45 Switch(config-if)#channel-group 10 mode active Switch(config-if)#exit Switch(config)#interface Port49 Switch(config-if)#channel-group 10 mode active Removing LACP To remove the LACP configuration, Switch(config)#interface Port45 Switch(config-if)#no channel-group Switch(config-if)#exit Switch(config)#interface Port49 Switch(config-if)#no channel-group DX2000 NW Switch Configuration Guide 19

20 4. Layer2 Configuration 4.3 Static LAG Show Static LAG Information To show Static LAG information, Switch>show static-channel-group % Static Aggregator: sa1 % Member: Port53 Port Configuring Static LAG To configure Static LAG with following parameters, Port Member Etherchannel Name :Port53 Port57 :sa1 (Using channel-group 1 will create an interface named sa1.) Switch(config)#interface Port53 Switch(config-if)#static-channel-group 1 Switch(config-if)#exit Switch(config)#interface Port57 Switch(config-if)#static-channel-group Removing Static LAG To remove the LACP configuration, Switch(config)#interface Port53 Switch(config-if)#no static-channel-group Switch(config-if)#exit Switch(config)#interface Port57 Switch(config-if)#no static-channel-group 20 DX2000 NW Switch Configuration Guide

21 4. Layer2 Configuration 4.4 Spanning-Tree Show Spanning-Tree Information To show the information of Spanning-Tree, use show spanning-tree command. Switch>show spanning-tree % Default: Bridge up - Spanning Tree Enabled - topology change detected % Default: Root Path Cost 0 - Root Port 0 - Bridge Priority % Default: Forward Delay 15 - Hello Time 2 - Max Age 20 - Transmit Hold Count 6 % Default: Root Id ff % Default: Bridge Id ff % Default: last topology change Tue Aug 4 14:33: % Default: 2 topology change(s) - last topology change Tue Aug 4 14:33: % Default: portfast bpdu-filter disabled % Default: portfast bpdu-guard disabled % Default: portfast errdisable timeout disabled % Default: portfast errdisable timeout interval 300 sec % Default: spanning-tree loop-guard disabled % Port1: Port Number Ifindex Port Id Role Disabled - State Discarding % Port1: Designated Path Cost 0 % Port1: Configured Path Cost Add type Explicit ref count 1 % Port1: Designated Port Id 0 - Priority % Port1: Message Age 0 - Max Age 0 % Port1: Hello Time 0 - Forward Delay 0 % Port1: Forward Timer 0 - Msg Age Timer 0 - Hello Timer 0 - topo change timer 0 % Port1: forward-transitions 1 % Port1: Version Rapid Spanning Tree Protocol - Received None - Send RSTP % Port1: No portfast configured - Current portfast off % Port1: bpdu-guard default - Current bpdu-guard off % Port1: bpdu-filter default - Current bpdu-filter off % Port1: no root guard configured - Current root guard off % Port1: Configured Link Type point-to-point - Current point-to-point % Port1: No auto-edge configured - Current port Auto Edge off DX2000 NW Switch Configuration Guide 21

22 4. Layer2 Configuration Changing Spanning-Tree mode To change Spanning-Tree mode to STP, Switch(config)#spanning-tree mode stp-vlan-bridge To change Spanning-Tree mode to MSTP, Switch(config)#spanning-tree mode mstp To change Spanning-Tree mode to RSTP, Switch(config)#spanning-tree mode rstp-vlan-bridge Enable/Disable Spanning-Tree (Global) To disable spanning-tree of the switch, Switch(config)#spanning-tree shutdown To enable spanning-tree of the switch, Switch(config)#no spanning-tree shutdown Enable/Disable Spanning-Tree (Interface) To disable spanning-tree of Port45, Switch(config)#interface Port45 Switch(config-if)#spanning-tree disable To enable spanning-tree of Port45, Switch(config)#interface Port45 Switch(config-if)#spanning-tree enable 22 DX2000 NW Switch Configuration Guide

23 4. Layer2 Configuration 4.5 Flow Control Enabling/Disabling on QSFP+ Module Interface To enable flow control on QSFP+ Module Interfaces (Port45-76), use flowcontrol command. Example: To enable flowcontrol on Port45 Switch#configure terminal Enter configuration commands, one per line. End with CNTL/Z. Switch(config)#interface Port45 Switch(config-if)#flowcontrol both To disable flow control on QSFP+ Module Interface (Port45-76), use flowcontrol command. Example: To disable flowcontrol on Port45 Switch#configure terminal Enter configuration commands, one per line. End with CNTL/Z. Switch(config)#interface Port45 Switch(config-if)#no flowcontrol Enabling/Disabling on Module Slots Flow control of Module Slots (Port1-44) is configured by auto-negotiation. To disable or enable flow control, configure the OS setting of the Server Module. DX2000 NW Switch Configuration Guide 23

24 4. Layer2 Configuration 4.6 TFO (Trigger Fail Over) TFO feature allows the switch to detect link failure on the uplink ports (MPG : Monitor Port Group) and to propagate the failure to the downlink ports (CPG : Control Port Group) You can choose following interfaces as MPG. QSFP+ Ports (Port45-Port76) RJ45 Port (Port77) LAG Ports (LAG members consist of QSFP+ ports) You can choose following interfaces as CPG. Internal Ports (Port1-Port44) You can choose only one MPG on Each FOG (Fail Over Group). You can also configure the number of physical interfaces (tfc) to make CPG down when a LAG port is configured as MPG. 24 DX2000 NW Switch Configuration Guide

25 4. Layer2 Configuration Show TFO information To show the TFO configuration, Switch>show tfo Failover Group 1 : Enable No. of links to trigger failover : 0 MPG Port CPG Port po10 Port1 Port2 Port3 Port4 Port5 Port6 Port7 Port8 Port9 Port10 Port11 Port12 Port13 Port14 Port15 Port16 : : Port35 Port36 Port37 Port38 Port39 Port40 Port41 Port42 Port43 Port44 No. of times MPG link failure : 0 No. of times MPG link recovered : 0 No. of times MPG link in blocking state : 1 No. of times MPG link in forwarding state : 0 No. of times CPG got auto disabled : 1 No. of times CPG got auto enable : 0 DX2000 NW Switch Configuration Guide 25

26 4. Layer2 Configuration Configuring TFO To configure TFO with following parameters, Failover Group : 1 MPG : po10 (LACP) CPG : Port1-Port44 tfc : 1 Switch(config)#tfo enable Switch(config)#fog 1 enable Switch(config)#interface po10 Switch(config-if)#fog 1 type mpg Switch(config-if)#exit Switch(config)#interface range Port1-44 Switch(config-if)#fog 1 type cpg Switch(config-if)#exit Switch(config)#fog 1 tfc Removing TFO To remove TFO in the preceding section, Switch(config)#fog 1 disable Switch(config)#interface po10 Switch(config-if)#no fog 1 type mpg Switch(config-if)#exit Switch(config)#interface range Port1-44 Switch(config-if)#no fog 1 type cpg Switch(config-if)#exit Switch(config)#no fog 1 26 DX2000 NW Switch Configuration Guide

27 Revision Record Revision Record Date Issued February 2016 November 2017 Description Newly created Add Security Note 1.1 NW Switch Module Diagram added Note 1.6 Default Account added Note DX2000 NW Switch Configuration Guide 27

28 NEC Scalable Modular Server DX2000 NW Switch Configuration Guide November 2017 NEC Corporation 7-1 Shiba 5-Chome, Minato-Ku Tokyo , Japan NEC Corporation 2017 The contents of this manual may not be copied or altered without the prior written permission of NEC Corporation.

Configuring Virtual Port Channels

Configuring Virtual Port Channels This chapter contains the following sections: Information About vpcs, page 1 Guidelines and Limitations for vpcs, page 10 Configuring vpcs, page 11 Verifying the vpc Configuration, page 25 vpc Default