nw switch configuration guide - nec...6 dx2000 nw switch configuration guide 1. introduction 1.1 nw...

NEC Scalable Modular Server

DX2000

NW Switch Configuration Guide

Second edition

November 2017

© NEC Corporation 2017

1. Introduction 2. System Configuration 3. Layer1 Configuration

4. Layer2 Configuration

Contents

DX2000 NW Switch Configuration Guide 2

Contents

Contents ................................................................................................................................................................ 2

Warnings and Additions to This Document ............................................................................................................ 4

Security Note ......................................................................................................................................................... 5

1. Introduction ....................................................................................................................................................... 6 1.1 NW Switch Module Diagram .............................................................................................................. 6 1.2 Interface Number on CLI .................................................................................................................... 7 1.3 Initial VLAN Configuration .................................................................................................................. 7 1.4 Connecting to the Switch Console Port .............................................................................................. 8 1.5 Accessing the CLI .............................................................................................................................. 8

1.6 Default Account .................................................................................................................................. 8

2. System Configuration ........................................................................................................................................ 9 2.1 Saving a system configuration ........................................................................................................... 9 2.2 Restore initial configuration ................................................................................................................ 9 2.3 Exporting Switch Configuration .......................................................................................................... 9

2.4 Importing Switch Configuration ........................................................................................................ 10 2.5 Show IP Address .............................................................................................................................. 10 2.6 Show the Logging ............................................................................................................................ 11 2.7 Configuring the System Clock .......................................................................................................... 11 2.8 Changing Password ......................................................................................................................... 11 2.9 Configuring SNMP ........................................................................................................................... 12

2.9.1 Creating Community .......................................................................................................... 12 2.9.2 Configuring SNMP Trap ..................................................................................................... 12 2.9.3 Show SNMP Trap............................................................................................................... 12

3. Layer1 Configuration ....................................................................................................................................... 13 3.1 Show Interface Status ...................................................................................................................... 13 3.2 Show Interface Status (detail) .......................................................................................................... 14 3.3 Configure QSFP+ Module Mode ...................................................................................................... 14

4. Layer2 Configuration ....................................................................................................................................... 15 4.1 VLAN ................................................................................................................................................ 15

4.1.1 Show VLAN Configuration ................................................................................................. 15 4.1.2 Configuring VLAN (Trunk Port) .......................................................................................... 16 4.1.3 Configuring VLAN (Access Port) ........................................................................................ 17 4.1.4 Configuring VLAN (Native VLAN) ...................................................................................... 17 4.1.5 Removing VLAN ................................................................................................................ 18

4.2 LACP ................................................................................................................................................ 19 4.2.1 Show LACP Information ..................................................................................................... 19

4.2.2 Configuring LACP .............................................................................................................. 19 4.2.3 Removing LACP ................................................................................................................ 19

4.3 Static LAG ........................................................................................................................................ 20 4.3.1 Show Static LAG Information ............................................................................................. 20 4.3.2 Configuring Static LAG....................................................................................................... 20 4.3.3 Removing Static LAG ......................................................................................................... 20

4.4 Spanning-Tree ................................................................................................................................. 21 4.4.1 Show Spanning-Tree Information ....................................................................................... 21 4.4.2 Changing Spanning-Tree mode ......................................................................................... 22 4.4.3 Enable/Disable Spanning-Tree (Global) ............................................................................. 22 4.4.4 Enable/Disable Spanning-Tree (Interface) ......................................................................... 22

4.5 Flow Control ..................................................................................................................................... 23 4.5.1 Enabling/Disabling on QSFP+ Module Interface ................................................................ 23 4.5.2 Enabling/Disabling on Module Slots ................................................................................... 23


4.6 TFO (Trigger Fail Over) .................................................................................................................... 24 4.6.1 Show TFO information ....................................................................................................... 25 4.6.2 Configuring TFO................................................................................................................. 26 4.6.3 Removing TFO ................................................................................................................... 26

Revision Record .................................................................................................................................................. 27

Warnings and Additions to This Document


Warnings and Additions to This Document

1. Unauthorized reproduction of the contents of this document, in part or in its entirety, is prohibited.

2. The contents of this document may change without prior notice.

3. Do not make copies or alter the document content without permission from NEC Corporation.

4. Every effort has been made to ensure the completeness of this document. However, if you have any

concerns, or discover errors or omissions, please contact your retailer.

5. Regardless of article 4, NEC Corporation does not take responsibility for effects resulting from

operations.

6. The sample values used in this document are not the actual values.

Keep this document nearby so that you may refer to it as necessary.

Security Note


Security Note

Using a network controllable product with its default password may raise a serious risk as it may be hacked by

some malicious third person. If a product is supplanted by a malware, it will face possibilities of not only

information leakages, but also system damages obstructing its availability and/or integrity. Even if it does not

cause damage to own system, the product may be used as a botnet to make a cyber-attack to some other

systems.

The default password on our product is provided only for the purpose of changing initial setting during its installation

service. In first change of initial setting, please be sure to change the password. NEC Platforms, Ltd. shall not take

any liability and responsibility for any damages arising from illegal access.

If the new password is not strong (too short) or easily guessed (such as "123456789", "abcdefg", "password",

"Administrator"), illegal access cannot be prevented. Please be sure to use a strong password (use 8 digits or

longer, and including numerals, capital letters and small letters).

<<How to change your password>>

Refer to P11 2.8 Changing Password section.

1. Introduction


1. Introduction

1.1 NW Switch Module Diagram

Two NW Switch modules are installed in a chassis. Each NW Switch module consists of external interfaces

(40Gbps QSFP+ x8ports) and internal interfaces (for each CPU Slot 10Gbps x1).

The figure below shows the NW Switch Module Diagram.

The number 1 to 79, “mgmt” and “internal” show the physical ports. For more details, please refer to the next page.

Note:

Each NW Switch modules works individually. These NW Switch modules are not stackable.

The NW Switch module doesn’t support Direct Attach Cable.

1. Introduction


1.2 Interface Number on CLI

This table shows the description of each interface to select on CLI.

Interface Connected to Description

Port1-Port44 Module Slots

• Server Module LAN

• 10G Expansion Module LAN

The Interface number corresponds to the Slot ID.

Port45-Port76 QSFP+ Modules For 40G mode, the lowest number of each port

represents the interface.

(Port45, 49, 53, 57, 61, 65, 69, 73)

Port77 RJ45 Port Management LAN

Port78 Interconnect interface to the

adjacent NW Switch module

Disabled as default.

Port79 CSC -

mgmt CPU for LAN-Switch NW Switch Module management Interface

lo - For internal use

internal - For internal use

1.3 Initial VLAN Configuration

To separate the management LAN and data LAN, the interfaces are configured as follows by LAN switch software.

Interface VLAN Configuration

Port1-Port44 VLAN1 (untagged)

VLAN4092 (tagged)

Port45-Port76 LAN1 (untagged)

Internal VLAN4092 (untagged)

Port78 VLAN1 (untagged)

User can access to BMC from the management LAN only because the BMC is configured as VLAN4092.

The modules below can be accessed from management LAN (Port77).

NW Switch Module management Interface (Console)

CSC

BMC

The modules below can be accessed from QSFP+ Modules interfaces (Port45-Port76).

Server Modules (exclude BMC)

10G Expansion Modules

1. Introduction


1.4 Connecting to the Switch Console Port

To connect to the switch CLI using the console port, configure the serial port of terminal with the following settings.

Baud rate: 115200

Data bits: 8

Stop bits: 1

Parity: none

Flow control: none

1.5 Accessing the CLI

To login to the switch CLI, login at the prompt as admin/admin (default username and password) using serial

console, telnet or ssh.

Linux 3.2.40 (Switch) (0)

login: admin

Password:

ZebOS-XP version 1.2.0 IPIRouter 11/20/15 18:06:09

Switch>

1.6 Default Account

To login to the LAN-Switch CLI, use an account below.

Username： admin

Password： admin

Note:

For security reasons, change the above default settings (Username and Password) to the ones

appropriate in your network environment.

Refer to P5 “Security Note” for details.

2. System Configuration



2.1 Saving a system configuration

You can save the current configuration using the following command.

Switch>enable

Switch#write

Building configuration...

[OK]

Reboot or shutdown the NW Switch Module without saving will discard the changes.

2.2 Restore initial configuration

To restore the default configuration, use the following commands.

Switch>enable

Switch#configure terminal

Enter configuration commands, one per line. End with CNTL/Z.

Switch(config)#system restore default-config

This task requires reboot system,

do you want to continue? (y/n):y

Note: This command will automatically reboot the NW Switch Module.

2.3 Exporting Switch Configuration

You can export saved configuration from the NW Switch Module to an external server by TFTP using the following

commands.

(Save the configuration (execute “write”) before exporting the configuration.)

Example:

To export configuration file named “startup-config” to TFTP server (IP address 192.168.7.254),

Switch>enable

Switch#copy startup-config tftp

Enter IP:192.168.7.254

Enter port [69]:69

Enter filename:startup-config

* User can also use the command below

copy startup-config tftp tftp://192.168.7.254/startup-config



2.4 Importing Switch Configuration

You can import a previously exported configuration file from an external server by TFTP using the following

commands.

Switch#copy tftp startup-config

Enter IP:192.168.7.254

Enter port [69]:69

Enter filename: startup-config

Copy Success...

You need to reboot the NW Switch Module (“reload” command) to enable the new configuration.

* User can also use the command below

copy tftp tftp://192.168.7.254/startup-config startup-config

2.5 Show IP Address

To show the management IP address,

Switch>show interface mgmt

Interface mgmt

Scope: both

Hardware is Management Ethernet Current HW addr: 0011.2233.44ff

Physical:0011.2233.44ff Logical:(not set)

index 2 metric 1 mtu 1500 duplex-full

no switchport

<UP,BROADCAST,RUNNING,ALLMULTI,MULTICAST>

VRF Binding: Not bound

Bandwidth 96k

IPV4 DHCP client is enabled <client-id=mgmt, hostname=n/a>.

IPV6 DHCP IA-NA client is enabled.

inet 192.168.1.177/21 broadcast 192.168.7.255

inet6 fe80::211:22ff:fe33:44ff/64

input packets 00, bytes 00,

multicast packets 00 broadcast packets 00

FCS error 00 UndersizeErrors 00 OverSizeErrors 00

output packets 00, bytes 00,




2.6 Show the Logging

To show the event log.

Switch>show logging logfile

2.7 Configuring the System Clock

To configure the system clock to be synchronized with an NTP server,

Switch>enable


Switch(config)#ntp server 192.168.7.254

To configure the time-zone,

Switch>enable


Switch(config)#set time-zone Japan

If NTP is unused, configure the clock manually using clock command.

Shutdown or reboot of the switch resets the system clock.

Switch>enable


Switch(config)#no ntp enable

Switch(config)#exit

Switch#clock set 12:00:00 1 january 2016

To show the system clock,

Switch>enable

Switch#show clock

12:00:03 UTC Fri Jan 01 2016

2.8 Changing Password

To change admin user password,

Switch>enable



Switch(config)#username-remote admin password admin123



2.9 Configuring SNMP

2.9.1 Creating Community

To create community (named public) with read-write access,

Switch(config)#snmp-server community public rw

2.9.2 Configuring SNMP Trap

To configure SNMP Trap,

Switch(config)#snmp-server host 192.168.7.254 traps version 2c public

2.9.3 Show SNMP Trap

To show SNMP Trap information,

Switch>show snmp host

-----------------------------------------------------------------------------------

Host Port Version Level Type SecName

-----------------------------------------------------------------------------------

192.168.7.254 162 2c noauth trap public




3.1 Show Interface Status

To show the interface status, use the “show interface description” command.

“Protocol” column shows the current link status.

Switch>show interface description

Interface Status Protocol Description

lo up up

mgmt up up

Port1 up up

Port2 up up

Port3 up up

Port4 up up

Port5 up up

Port6 up up

Port7 up up

Port8 up up

Port9 up up

: : :

Port39 up up

Port40 up up

Port41 up up

Port42 up up

Port43 up up

Port44 up up

Port45 up up

Port49 up up

Port53 up up

Port57 up up

Port61 up up

Port65 up up

Port69 up up

Port73 up up

Port77 up up

Port78 administratively down down

vlan0.1 up up

vlan0.4092 up up



3.2 Show Interface Status (detail)

To show the detail interface status,

Switch>show interface Port1

Interface Port1

Scope: both

Hardware is Ethernet Current HW addr: 0011.2233.4457

Physical:0011.2233.4457 Logical:(not set)

index 5001 metric 1 mtu 9750 duplex-full

Port Mode is trunk

<UP,BROADCAST,ALLMULTI,MULTICAST>

VRF Binding: Not bound

DHCP client is disabled.

input packets 00, bytes 00,


FCS error 00 UndersizeErrors 00 OverSizeErrors 00

output packets 00, bytes 00,


3.3 Configure QSFP+ Module Mode

To configure QSFP+ Module mode, use “bandwidth” command.

Example:

To change Port45-Port48 from 40G x1 to 10G x4,

Switch>enable



Switch(config)#interface Port45

Switch(config-if)#bandwidth 10g

Example:

To change Port45-Port48 from 10G x4 to 40G x1,

Switch>enable




Switch(config-if)#bandwidth 40g

Note: Default Mode is 40G x1.

Changing the interface mode will reset parts of the interface configuration.




4.1 VLAN

4.1.1 Show VLAN Configuration

To show the VLAN configuration,

Switch>show vlan brief

Bridge VLAN ID Name State Oper Status Member ports

H/W Status (u)-Untagged, (t)-Tagged

======= ======= ============ ======= =========== ============================

default 1 default ACTIVE Up Port1(u) Port2(u) Port3(u)

Port4(u) Port5(u) Port6(u)
















Port73(u) Port78(u)

default 4092 VLAN4092 ACTIVE Up internal(u) Port1(t) Port2(t)

Port3(t) Port4(t) Port5(t)
















4.1.2 Configuring VLAN (Trunk Port)

VLAN configuration for trunk port is described in the following steps,

1. Creating VLAN

2. Change the port mode to trunk

3. Assign the interface to VLAN

(1) Creating VLAN

To create the VLAN,

Switch>enable



Switch(config)#vlan 100 state enable

(2) Changing to Trunk Port

To change the port mode from access port to trunk port,


witch(config)#shutdown

Switch(config-if)#switchport mode trunk

(3) Assign the interfaces to VLAN

To assign the interfaces to VLAN,

Switch(config-if)#switchport trunk allowed vlan add 100

Switch(config-if)#no shutdown



4.1.3 Configuring VLAN (Access Port)

VLAN configuration for access port is described in the following steps,

1. Creating VLAN

2. Change the port mode to access

3. Assign the ports to VLAN

(1) Creating VLAN

To create the VLAN,

Switch>enable




(2) Change to Access Port

To change the port mode from access port to trunk port,


witch(config)#shutdown

Switch(config-if)#switchport mode access

(3) Assign the interfaces to VLAN

To assign the interfaces to VLAN,

Switch(config-if)#switchport access vlan 100

Switch(config-if)#no shutdown

4.1.4 Configuring VLAN (Native VLAN)

To configure the Native VLAN for trunk Port,

Switch>enable





Switch(config-if)#switchport trunk allowed vlan add 101

Switch(config-if)#switchport trunk native vlan 101



4.1.5 Removing VLAN

Removing VLAN configuration is described in the following steps,

1. Removing VLAN Assignment

2. Deleting VLAN

(1) Removing VLAN Assignment

To remove VLAN Assignment,

Switch(config)#interface range Port1-44

Switch(config-if)#switchport trunk allowed vlan remove 100

(2) Deleting VLAN

To delete VLAN,

Switch>enable



Switch(config)#no vlan 100



4.2 LACP

4.2.1 Show LACP Information

To show LACP information,

Switch>show etherchannel

% Lacp Aggregator: po10

% Member:

Port45

Port49

4.2.2 Configuring LACP

To configure LACP with following parameters,

Port Member ：Port45、Port49

Etherchannel Name ：po10

(Using “channel-group 10” will create an interface named “po10”.)

Mode ：Active


Switch(config-if)#channel-group 10 mode active

Switch(config-if)#exit


Switch(config-if)#channel-group 10 mode active

4.2.3 Removing LACP

To remove the LACP configuration,


Switch(config-if)#no channel-group



Switch(config-if)#no channel-group



4.3 Static LAG

4.3.1 Show Static LAG Information

To show Static LAG information,

Switch>show static-channel-group

% Static Aggregator: sa1

% Member:

Port53

Port57

4.3.2 Configuring Static LAG

To configure Static LAG with following parameters,

Port Member ：Port53、Port57

Etherchannel Name ：sa1

(Using “channel-group 1” will create an interface named “sa1”.)


Switch(config-if)#static-channel-group 1



Switch(config-if)#static-channel-group 1

4.3.3 Removing Static LAG

To remove the LACP configuration,


Switch(config-if)#no static-channel-group



Switch(config-if)#no static-channel-group



4.4 Spanning-Tree

4.4.1 Show Spanning-Tree Information

To show the information of Spanning-Tree, use show spanning-tree command.

Switch>show spanning-tree

% Default: Bridge up - Spanning Tree Enabled - topology change detected

% Default: Root Path Cost 0 - Root Port 0 - Bridge Priority 32768

% Default: Forward Delay 15 - Hello Time 2 - Max Age 20 - Transmit Hold Count 6

% Default: Root Id 80000011223344ff

% Default: Bridge Id 80000011223344ff

% Default: last topology change Tue Aug 4 14:33:38 2015

% Default: 2 topology change(s) - last topology change Tue Aug 4 14:33:38 2015

% Default: portfast bpdu-filter disabled

% Default: portfast bpdu-guard disabled

% Default: portfast errdisable timeout disabled

% Default: portfast errdisable timeout interval 300 sec

% Default: spanning-tree loop-guard disabled

% Port1: Port Number 905 - Ifindex 5001 - Port Id 8389 - Role Disabled - State Discarding

% Port1: Designated Path Cost 0

% Port1: Configured Path Cost 20000000 - Add type Explicit ref count 1

% Port1: Designated Port Id 0 - Priority 128 -

% Port1: Message Age 0 - Max Age 0

% Port1: Hello Time 0 - Forward Delay 0

% Port1: Forward Timer 0 - Msg Age Timer 0 - Hello Timer 0 - topo change timer 0

% Port1: forward-transitions 1

% Port1: Version Rapid Spanning Tree Protocol - Received None - Send RSTP

% Port1: No portfast configured - Current portfast off

% Port1: bpdu-guard default - Current bpdu-guard off

% Port1: bpdu-filter default - Current bpdu-filter off

% Port1: no root guard configured - Current root guard off

% Port1: Configured Link Type point-to-point - Current point-to-point

% Port1: No auto-edge configured - Current port Auto Edge off



4.4.2 Changing Spanning-Tree mode

To change Spanning-Tree mode to STP,

Switch(config)#spanning-tree mode stp-vlan-bridge

To change Spanning-Tree mode to MSTP,

Switch(config)#spanning-tree mode mstp

To change Spanning-Tree mode to RSTP,

Switch(config)#spanning-tree mode rstp-vlan-bridge

4.4.3 Enable/Disable Spanning-Tree (Global)

To disable spanning-tree of the switch,

Switch(config)#spanning-tree shutdown

To enable spanning-tree of the switch,

Switch(config)#no spanning-tree shutdown

4.4.4 Enable/Disable Spanning-Tree (Interface)

To disable spanning-tree of Port45,


Switch(config-if)#spanning-tree disable

To enable spanning-tree of Port45,


Switch(config-if)#spanning-tree enable



4.5 Flow Control

4.5.1 Enabling/Disabling on QSFP+ Module Interface

To enable flow control on QSFP+ Module Interfaces (Port45-76), use flowcontrol command.

Example:

To enable flowcontrol on Port45

Switch>enable




Switch(config-if)#flowcontrol both

To disable flow control on QSFP+ Module Interface (Port45-76), use flowcontrol command.

Example:

To disable flowcontrol on Port45

Switch>enable




Switch(config-if)#no flowcontrol

4.5.2 Enabling/Disabling on Module Slots

Flow control of Module Slots (Port1-44) is configured by auto-negotiation. To disable or enable flow control,

configure the OS setting of the Server Module.



4.6 TFO (Trigger Fail Over)

TFO feature allows the switch to detect link failure on the uplink ports (MPG : Monitor Port Group) and to propagate

the failure to the downlink ports (CPG : Control Port Group)

You can choose following interfaces as MPG.

QSFP+ Ports (Port45-Port76)

RJ45 Port (Port77)

LAG Ports (LAG members consist of QSFP+ ports)

You can choose following interfaces as CPG.

Internal Ports (Port1-Port44)

You can choose only one MPG on Each FOG (Fail Over Group).

You can also configure the number of physical interfaces (tfc) to make CPG down when a LAG port is configured as

MPG.



4.6.1 Show TFO information

To show the TFO configuration,

Switch>show tfo

Failover Group 1 : Enable

No. of links to trigger failover : 0

MPG Port CPG Port

---------------------------

po10 Port1

Port2

Port3

Port4

Port5

Port6

Port7

Port8

Port9

Port10

Port11

Port12

Port13

Port14

Port15

Port16

:

:

Port35

Port36

Port37

Port38

Port39

Port40

Port41

Port42

Port43

Port44

No. of times MPG link failure : 0

No. of times MPG link recovered : 0

No. of times MPG link in blocking state : 1

No. of times MPG link in forwarding state : 0

No. of times CPG got auto disabled : 1

No. of times CPG got auto enable : 0



4.6.2 Configuring TFO

To configure TFO with following parameters,

Failover Group : 1

MPG : po10 (LACP)

CPG : Port1-Port44

tfc : 1

Switch(config)#tfo enable

Switch(config)#fog 1 enable

Switch(config)#interface po10

Switch(config-if)#fog 1 type mpg



Switch(config-if)#fog 1 type cpg


Switch(config)#fog 1 tfc 1

4.6.3 Removing TFO

To remove TFO in the preceding section,

Switch(config)#fog 1 disable

Switch(config)#interface po10

Switch(config-if)#no fog 1 type mpg



Switch(config-if)#no fog 1 type cpg


Switch(config)#no fog 1

Revision Record


Revision Record

Date Issued Description

February 2016 Newly created

November 2017 Add Security Note

1.1 NW Switch Module Diagram added Note

1.6 Default Account added Note

NEC Scalable Modular Server

DX2000

NW Switch

Configuration Guide

November 2017

NEC Corporation

7-1 Shiba 5-Chome, Minato-Ku

Tokyo 108-8001, Japan

©NEC Corporation 2017

The contents of this manual may not be copied or altered without the prior written

permission of NEC Corporation.

nw switch configuration guide - nec...6 dx2000 nw switch configuration guide 1. introduction 1.1 nw...

Documents