Dell Force10 Z9000- User Manual

ip route bfd (for S6000) .................................................................................................................... 174 S6000 ........................................................................................................................................... 174 Conf...

service-class dot1p-mapping ...........................................................................................................392 Z9000 S4810 S4820T ................................................................................................................. 392 service-class bandwidth-...

33 Storm Control ..................................................................................................... 427 Important Points to Remember ....................................................................................................... 427 show storm-control unknown-unicast ........

Z-Series S4810 S4820T .............................................................................................................. 447 lacp ungroup member-independent ...............................................................................................448 Z-Series S4810 S4820T .............

FC Flex IO Modules Overview .......................................................................................................... 477 FC Flex IO Module Capabilities and Operations .............................................................................. 478 Guidelines for Working with FC F...

1 About this Document This document describes the new functionalities and enhancements in the Dell Networking OS Release version 9.3.0.0. All of the behavioral-changes and new features are covered in this single, consolidated Addendum. Use this document in conjunction with the hardware and software ...

x||y Keywords and parameters separated by a double bar allows you to choose any or all of the options. Related Documents For more information about the Dell Networking S4810, S4820T, S6000, Z9000, MXL 10/40GbE Switch, and the I/O Aggregator systems, refer the following documents corresponding to eac...

3 ACL VLAN Groups and Content Addressable Memory (CAM) This chapter describes the ACL VLAN group and CAM enhancements, and contains the following sections: • Optimizing CAM Utilization During the Attachment of ACLs to VLANs • Allocating FP Blocks for VLAN Processes Optimizing CAM Utilization During ...

the ACL VLAN groups present on the system, an appropriate error message is displayed. The ACL manager application processes the following parameters when you enter an acl-vlan-group command: • Whether the CAM profile is set in VFP• Whether the maximum number of groups in the system is exceeded• Whet...

counters, Open Flow, ACL optimization) can be allocated virtual flow processing slices at a point in time. • The maximum number of VLANs that you can configure as a member of ACL VLAN groups is limited to 512 on the S4180, Z9000, and MXL switches if two slices are allocated. If only one virtual flow...

3. Apply an egress IP ACL to the ACL VLAN group.CONFIGURATION (conf-acl-vl-grp) mode ip access-group { group name } out implicit-permit 4. Add VLAN member(s) to an ACL VLAN group.CONFIGURATION (conf-acl-vl-grp) mode member vlan { VLAN-range } 5. Display all the ACL VLAN Groups or display a specific ...

4. View the number of flow processor (FP) blocks that is allocated for the different VLAN services.EXEC Privilege mode Dell#show cam-usage switch Linecard|Portpipe| CAM Partition | Total CAM | Used CAM |Available CAM ========|========|=================|=============|=============| ============== 11 ...

• To allocate the number of FP blocks for VLAN iSCSI counters , use the cam-acl-vlan vlaniscsi <0-2> command. • To allocate the number of FP blocks for ACL VLAN optimization feature, use the cam-acl-vlan vlanaclopt <0-2> command. You can use the no version of these commands to reset the ...

The ACL application sends the ACL logging configuration information and other details, such as the action, sequence number, and the ACL parameters that pertains to that ACL entry. The ACL service collects the ACL log records and records the following attributes per log message. • For non-IP packets,...

• A timer control of 30 seconds is present in the ACL agent module, the expiry of which causes the log records that are collocted until that time are transmitted to the ACL manager for logging. An inter-process communication (IPC) message is sent to the ACL manager by the ACL agent when a maximum of...

• Use the no deny {ipv6-protocol-number | icmp | ipv6 | tcp | udp} command Parameters log (OPTIONAL) Enter the keyword log to enable the triggering of ACL log messages. threshold-in msgs count (OPTIONAL) Enter the threshold-in-msgs keyword followed by a value to indicate the maximum number of ACL lo...

When a packet arrives at a port that is being monitored, the packet is validated against the configured ACL rules. If the packet matches an ACL rule, the system examines corresponding flow processor to perform the action specified for that port. If mirroring action is set in the flow processor entry...

Enabling Flow-Based Monitoring Flow-based monitoring is supported on the S4810, S4820T, S6000, Z9000, I/O Aggregator, and MXL platforms. Flow-based monitoring conserves bandwidth by monitoring only specified traffic instead all traffic on the interface. This feature is particularly useful when looki...

6 Data Center Bridging (DCB) This chapter describes the DCB enhancements and contains the following sections: • Managing Hardware Buffer Statistics • Configuring WRED and ECN Attributes • Enabling Buffer Statistics Tracking • Configuring DCB Maps and its Attributes • Data Center Bridging: Default Co...

Step Task Command Command Mode FTOS(config-if-te-0/0)# dcb-map SAN_A_dcb_map1 Repeat Steps 1 and 2 to apply a DCB map to more than one port.You cannot apply a DCB map on an interface which has been already configured for PFC using the pfc priority command or which is already configured for lossless ...

Step Task Command Command Mode 1 Enter INTERFACE Configuration mode. interface { tengigabitEthernet slot / port | fortygigabitEthernet slot / port } CONFIGURATION 2 Open a DCB map and enter DCB map configuration mode. dcb-map name INTERFACE 3 Disable PFC. no pfc mode on DCB MAP 4 Return to interface...

Configuring PFC and ETS in a DCB Map An S6000 switch supports the use of a DCB map in which you configure priority-based flow control and enhanced transmission selection settings. To configure PFC and ETS parameters, you must apply a DCB map on an S6000 interface. This functionality is supported on ...

• When you apply a DCB map, an error message displays if:• Link-level flow control is already enabled on an interface. You cannot enable PFC and link-level flow control at the same time on an interface. • In a switch stack, configure all stacked ports with the same PFC configuration.• FTOS allows yo...

• The configuration of bandwidth allocation and strict-queue scheduling is not supported at the same time for a priority group. • Bandwidth assignment : By default, equal bandwidth is assigned to each dot1p priority in a priority group. To configure the bandwidth assigned to the port queues associat...

• If you configure more than one priority group as strict priority, the higher numbered priority queue is given preference when scheduling data traffic. dcb-map Create a DCB map to configure priority flow control (PFC) and enhanced transmission selection (ETS) on Ethernet ports that support converge...

priority-group bandwidth pfc Configure the ETS bandwidth allocation and PFC mode used to manage port traffic in an 802.1p priority group. S4810, S6000, and FC Flex IO Modules with MXL and I/O Aggregator Syntax priority-group group-num {bandwidth percentage | strict- priority} pfc {on | off} Paramete...

PG:1 TSA:ETS BW:50 PFC:ON Priorities:3 Related Commands dcb-map — creates a DCB map to configure PFC and ETS parameters and applies the PFC and ETS settings on Ethernet ports. Priority-Based Flow Control Using Dynamic Buffer Method Priority-based flow control using dynamic buffer spaces is supported...

Total buffer (lossy + lossless)(in KB): 7787--Total buffer space for lossy and lossless queues PFC total buffer (in KB): 6526 --Indicates the total buffer (configured or default) PFC shared buffer (in KB): 832--Indicates the shared buffer (Configured or default) PFC available buffer ( in KB): 5694--...

8. Create a QoS policy buffer and enter the QoS Policy Buffer Configuration mode to configure the no-drop queues, ingress buffer size, buffer limit for pausing, and buffer offset limit for resuming.CONFIGURATION mode S4810-YU-MR-FTOS(conf)# qos-policy-buffer testS4810-YU-MR-FTOS (conf-qos-policy-buf...

7 Egress Interface Selection (EIS) for HTTP and IGMP Applications The functionality to configure the egress interface selection (EIS) mechanism is supported on the S4810, S4820T, S6000, and Z9000 platforms. You can now use EIS to isolate the management and front-end port domains for HTTP and IGMP tr...

Table 1. Association Between Applications and Port Numbers Application Name Port Number Client Server SSH 22 Supported Supported Sflow-Collector 6343 Supported SNMP 162 for SNMP Traps (client),161 for SNMP MIB response (server) Supported NTP 123 Supported DNS 53 Supported FTP 20/21 Supported Support...

• In this mode, you can run the “application” and “no application” commands• Applications can be configured/unconfigured as management applications using the “application”/ “no application” Cli. All configured applications is considered as management applications and the rest of them as non-manageme...

• In the netstat output, the prefix “mgmt” is added to routes in the EIS table so that the user can distinguish between routes in the EIS Routing table and default routing table. • If the management port IP address is removed, the corresponding connected route is removed from both the EIS routing ta...

Handling of Switch-Destined Traffic • All traffic received on the management port destined to the management port IP address or received on the front end port destined to the front end IP address is processed by the switch • If source TCP/UDP port number matches a configured EIS or non-EIS managemen...

Mapping of Management Applications and Traffic Type The following table summarizes the behavior of applications for various types of traffic when the management egress interface selection feature is enabled. Table 2. Mapping of Management Applications and Traffic Type Traffic type / Application type...

8 Flex Hash and Optimized Boot-Up This chapter describes the Flex Hash and fast-boot enhancements and contains the following sections: • Optimizing the Boot Time • Flex Hash Capability Overview • Preserving 802.1Q VLAN Tag Value for Lite Subinterfaces Flex Hash Capability Overview This functionality...

You can cause the system to include the fields present at the offsets that you define (from the start of the L4 header) as a part of LAG and ECMP computation. Also, you can specify whether the IPv4 or IPv6 packets must be operated with the Flex Hash mechanism. Example S4810-YU-MR-FTOS(conf)# load-ba...

Configuring Fast Boot and LACP Fast Switchover To configure the optimized booting time functionality, and quicker aggregation and convergence of member ports of a port- channel bundle, perform the following steps. This procedure is supported on the S6000 platform. 1. Enable the system to be restarte...

image, after the kernel initialization is complete. Therefore, the forwarding plane match occurs at a later time than the stage at which the match occurs when fast boot capability is not configured.The following sections describe the working behavior of applications when fast boot functionality is e...

LACP Fast Switchover For the fastboot functionality, the operation of LACP has been optimized. These LACP optimizations are applicable even when fast boot mechanism is not activated when a system reload is performed. These enhancements are controlled using the fast-switchover option that is availabl...

1. The ‘wait-while’ timer is not started in the ‘waiting’ state of the MUX state machine. The standard recommends waiting for some time for additional ports to try to join the aggregator as that may potentially cause the original port to be unselected or be placed in a ‘standby’ state. However, FTOS...

At the egress interface, the VLAN ID is appended to the packet and transmitted out of the interface as a tagged packet with the dot1Q value preserved.RDMA is a technology using which a virtual machine (VM) can directly transfer information the memory of another VM, thereby enabling VMs to be connect...

VLAN ID to be preserved (in the hardware or the OS application) when a VLAN ID used for encapsulation is associated with a physical/Port-channel interface. Normal VLANs and VLAN encapsulation can exist simultaneously and any non-unicast traffic received on a normal vlan is not flooded using lite-sub...

9 Interfaces This chapter describes the interfaces-related enhancements and contains the following sections: • Enabling the Management Address TLV on All Interfaces of an Aggregator • Enhanced Validation of Interface Ranges Enabling the Management Address TLV on All Interfaces of an Aggregator The m...

Using the Configured Source IP Address in ICMP Messages This functionality to enable ICMP messages, such as ICMP unreachable or ICMP error messages, to be sent with the configured ICMP source interface IP address address instead of the front-end port IP address for traceroute command output listing ...

Traceroute works by sending packets with gradually increasing TTL value, starting with TTL value = 1. The first router receives the packet, decrements the TTL value and drops the packet because it then has a TTL value of zero. The router sends an ICMP Time Exceeded message back to the source. The ne...

Command Modes CONFIGURATION Command History Version 9.3.0.0 Introduced on the S4810, S4820T, S6000, Z9000, and MXL platforms. Usage Information You can enable the mechanism to configure the source or the originating interface from which the packet (the device that generates the ICMP error messages) ...

Example FTOS(conf)#ipv6 icmp source-interface tengigabitethernet 0/0 FTOS(conf)# Configuring the Duration to Establish a TCP Connection This procedure is supported on the S4810, S4820T, S6000, Z9000, I/O Aggregator, and MXL platforms. You can configure the amount of time for which the device must wa...

Usage Information You can configure the amount of time for which the device must wait before it attempts to establish a TCP connection. Using this capability, you can limit the wait times for TCP connection requests. Upon responding to the initial SYN packet that requests a connection to the router ...

11 Link Aggregation Groups (LAGs) This chapter describes the link aggregation control protocol (LACP) and link aggregation group (LAG) enhancements and contains the following sections: • Configuring the Uplink Speed of Interfaces as 40 Gigabit Ethernet • Configuring the Minimum Number of Links to be...

Enabling the Verification of Member Links Utilization in a LAG Bundle To examine the working efficiency of the LAG bundle interfaces, do the following 1. The functionality to detect the working efficiency of the LAG bundle interfaces is automatically activated on all the port channels, except the po...

Field Description Alarm State Indicates whether an alarm is generated if overutilization of the port channel occurred. Possible values are Active and Inactive Interface Slot and port number, and the type of the member interface of the port channel Line Protocol Indicates whether the interface is adm...

You can use this optimal, cohesive capability in your network environment to detect whether the configured applications or utilities are causing traffic to be unevenly distributed on a higig link bundle for best performance. This capability to monitor the port channel bundles is applicable for any p...

12 Miscellaneous Settings This chapter contains several, diversified behavioral-changes and enhancements that apply to this release. • Default Host Name Change • hostname (for Changes to Default) Setting a Threshold for Switching to the SPT The functionality to specify a threshold for switchover to ...

Defaults See Parameters Command Modes CONFIGURATION Command History Version 9.3.(0.0) Introduced on S6000. Related Commands show bfd neighbors – displays the BFD neighbor information on all interfaces or a specified interface. Configure BFD for Static Routes Configuring BFD for static routes is supp...

Establishing Sessions for Static Routes Sessions are established for all neighbors that are the next hop of a static route. Figure 1. Establishing Sessions for Static Routes To establish a BFD session, use the following command. • Establish BFD sessions for all neighbors that are the next hop of a s...

13 Microsoft Network Load Balancing This functionality is supported on the S4810, S4820T, S6000, Z9000, and MXL platforms. Network Load Balancing (NLB) is a clustering mechanism that is implemented by Microsoft on Windows 2000 Server and Windows Server 2003 operating systems. NLB uses a distributed ...

With NLB, the data frame is forwarded to all the servers for them to perform load-balancing. NLB Multicast Mode Scenario Consider a sample topology in which four servers, namely S1 through S4, are configured as a cluster or a farm. This set of servers is connected to a Layer 3 switch, which in turn ...

• When a port is added to the VLAN, the port automatically receives traffic if the feature is enabled. Old ARP entries are not deleted or updated. • When a member port is deleted, its ARP entries are also deleted from the CAM.• Port channels in the VLAN also receive traffic.• There is no impact on t...

14 Quality of Service (QoS) This chapter describes the QoS enhancements and contains the following sections: • Classifying Packets Based on a Combination of DSCP Code Points and VLAN IDs • Specifying Policy-Based Rate Shaping in Packets Per Second • Managing Hardware Buffer Statistics • Classifying ...

rate in pps, the peak burst size must also be configured as a measure of number of packets. Similarly, if you configure the peak rate in Kbps, the peak burst size must also be configured as a measure of bytes. Configuring Policy-Based Rate Shaping The capability to configure rate shaping for QoS out...

such cases, you can use ECN in conjunction with WRED to resolve this problem of dropping of packets under congested conditions.Using ECN, instead of entirely dropping the packets when the network experiences excessive traffic, the packets are marked for transmission at a later time after the network...

• When WRED is configured on the global service-pool (regardless of whether ECN on global service- pool is configured), and one or more queues have WRED enabled and ECN disabled, WRED is effective for the minimum of the thresholds between the queue thresholed and the service pool threshold. • When W...

To configure the weight factor for WRED and ECN capabilities, global buffer pools for multiple queues, and associating a service class with ECN marking, perform the following: 1. Configure the weight factor for computation of average-queue size. This weight value applies to front-end ports.QOS-POLIC...

You can use the service-policy input policy-name layer 2 command in Interface Configuration mode to apply an input policy map to Layer 3 physical interfaces.To apply a Layer 2 policy on Layer 3 interfaces, perform the following: 1. Configure an interface with an IP address or a VLAN subinterfaceCONF...

2. Configure the threshold weight of the shared buffer for the queues you want. In this example, this setting is configured for queues 5 and 7. Dell(conf-if-te-0/8)#Service-class buffer shared-threshold-weight queue5 4 queue7 6 Enabling Buffer Statistics Tracking This functionality is supported on t...

To create IP VLAN and DSCP values as match criteria in a Layer 3 class map, and to associate the class map with a policy map that is linked to a service queue, perform the following: 1. Create a match-any or a match-all Layer 3 class map, depending on whether you want the packets to meet all or any ...

wred weight Configure the weight factor for computation of average-queue size. This weight value applies to front- end ports. This mechanism to configure a weight for WRED and ECN functionality for front-end ports is supported on the S6000 and Z9000 platforms. S6000Z9000 Syntax [no] wred weight numb...

Command Modes CONFIGURATION mode Command History Version 9.3.0.0 Introduced on the S6000 and Z9000 platforms Usage Information You can add or remove ECN marking configuration on a list of queues on all backplane ports. All of the configured attributes apply to all the backplane ports and are for eac...

separating the starting and ending queue numbers with a hyphen backplane Specify that the ECN marking configured for each queue applies to backplane ports Default By default, ECN marking is disabled on all queues. Command Modes CONFIGURATION mode Command History Version 9.3.0.0 Introduced on the Z90...

15 Management Port Media Converter The capability to configure management media port converter is supported on the S6000 platform. Starting with Dell Networking OS Release 9.3.0.0, copper Ethernet network management connectivity for power distribution units (PDUs) is supported, without the need to p...

Working of the Management Port Media Converter QSFP EEPROM content is accessed to detect this special media converter and based on this identification performed, a new optic type is used to differentiate this optic type from the other optics. This new optic type is displayed in the appropriate show ...

16 Security for M I/O Aggregator Security features are supported on the M I/O Aggregator.This chapter describes several ways to provide access security to the Dell Networking system.For details about all the commands described in this chapter, refer to the Security chapter in the Dell Networking OS ...

Usage Information By default, the Enable password is used. If you configure aaa authentication enable default , FTOS uses the methods defined for Enable access instead. Methods configured with the aaa authentication enable command are evaluated in the order they are configured. If authentication fai...

Command History Version 9.3.0.0 Introduced on the M I/O Aggregator. Related Commands line — applies an authentication method list to the designated terminal lines. ip access-list standard — names (or selects) a standard access list to filter based on the IP address. ip access-list extended — names (...

This is the banner FTOS con0 now available Press RETURN to get started. 4d21h6m: %RPM0-P:CP %SEC-5-LOGIN_SUCCESS: Login successful for user on line console This is the banner FTOS> Related Commands banner login — sets a banner for login connections to the system. banner motd — sets a Message of t...

<cr> FTOS(conf)#banner login keyboard-interactive Enter TEXT message. End with the character '%'. This is the banner% FTOS(conf)#end FTOS#exit 13d21h9m: %RPM0-P:CP %SEC-5-LOGOUT: Exec session is terminated for user on line console This is the banner FTOS con0 now available Press RETURN to get ...

debug radius View RADIUS transactions to assist with troubleshooting. Syntax debug radius To disable debugging of RADIUS, use the no debug radius command. Defaults Disabled. Command Modes EXEC Privilege Command History Version 9.3.0.0 Introduced on the M I/O Aggregator. debug tacacs+ To assist with ...

ip radius source-interface Specify an interface’s IP address as the source IP address for RADIUS connections. Syntax ip radius source-interface interface To delete a source interface, use the no ip radius source-interface command. Parameters interface Enter the following keywords and slot/port or nu...

• For a Gigabit Ethernet interface, enter the keyword GigabitEthernet then the slot/port information. • For Loopback interfaces, enter the keyword loopback then a number from zero (0) to 16838. • For the Null interface, enter the keywords null 0 . • For a Port Channel interface, enter the keywords p...

Usage Information To define a password for the level to which you are assigning privilege or access, use the enable password command. privilege level (LINE mode) Change the access level for users on the terminal lines. Syntax privilege level level To delete access to a terminal line, use the no priv...

Usage Information To configure any number of RADIUS server hosts for each server host that is configured, use this command. FTOS searches for the RADIUS hosts in the order they are configured in the software.The global default values for the timeout , retransmit , and key optional parameters are app...

show privilege View your access level. Syntax show privilege Command Modes • EXEC• EXEC Privilege Command History Version 9.3.0.0 Introduced on the M I/O Aggregator. Example FTOS#show privilege Current privilege level is 15 FTOS# Related Commands privilege level (CONFIGURATION mode) — assigns access...

Command History Version 9.3.0.0 Introduced on the M I/O Aggregator. Usage Information The key configured with this command must match the key configured on the TACACS+ daemon. timeout login response Specify how long the software waits for the login input (for example, the user name and password) bef...

You can use the MOTD banner to indicate to users of critical upcoming events such as a lab shutdown of devices or of any circuit-level maintenance or downtime that is upcoming so that they can plan and schedule their accessibility to the device , based on the network outages and system reboots. You ...

and password credentials cannot be verified. Only the console port behaves this way, and does so to ensure that users are not locked out of the system if network-wide issue prevents access to these servers. 1. Define an authentication method-list ( method-list-name ) or specify the default. CONFIGUR...

Enabling AAA Authentication — RADIUS To enable authentication from the RADIUS server, and use TACACS as a backup, use the following commands. 1. Enable RADIUS and set up TACACS as backup.CONFIGURATION mode aaa authentication enable default radius tacacs 2. Establish a host address and password.CONFI...

• Access-Reject — the RADIUS server does not authenticate the user. If an error occurs in the transmission or reception of RADIUS packets, you can view the error by enabling the debug radius command. Transactions between the RADIUS server and the client are encrypted (the users’ passwords are not se...

Auto-Command You can configure the system through the RADIUS server to automatically execute a command when you connect to a specific line. The auto-command command is executed when the user is authenticated and before the prompt appears to the user. • Automatically execute a command. auto-command P...

• Create a method list with RADIUS and TACACS+ as authorization methods. CONFIGURATION mode aaa authorization exec { method-list-name | default} radius tacacs+ Typical order of methods: RADIUS, TACACS+, Local, None.If RADIUS denies authorization, the session ends (RADIUS must not be the last method ...

If you want to change an optional parameter setting for a specific host, use the radius-server host command. To change the global communication settings to all RADIUS server hosts, refer to Setting Global Communication Parameters for all RADIUS Server Hosts . To view the RADIUS configuration, use th...

TACACS+ FTOS supports terminal access controller access control system (TACACS+ client, including support for login authentication. Configuration Task List for TACACS+ The following list includes the configuration task for TACACS+ functions. • Choosing TACACS+ as the Authentication Method • Monitori...

First bold line: Server key purposely changed to incorrect value.Second bold line: User authenticated using the secondary method. Example of a Failed Authentication FTOS(conf)# FTOS(conf)#do show run aaa ! aaa authentication enable default tacacs+ enable aaa authentication enable LOCAL enable tacacs...

When configuring a TACACS+ server host, you can set different communication parameters, such as the key password. Example of Specifying a TACACS+ Server Host FTOS# FTOS(conf)# FTOS(conf)#ip access-list standard deny10 FTOS(conf-std-nacl)#permit 10.0.0.0/8 FTOS(conf-std-nacl)#deny any FTOS(conf)# FTO...

Command Authorization The AAA command authorization feature configures FTOS to send each configuration command to a TACACS server for authorization before it is added to the running configuration. By default, the AAA authorization commands configure the system to check both EXEC mode and CONFIGURATI...

show ip ssh The following example shows using the ip ssh server version 2 command to enable SSH version 2 and the show ip ssh command to confirm the setting. Specifying an SSH Version FTOS(conf)#ip ssh server version 2 FTOS(conf)#do show ip ssh SSH server : disabled. SSH server version : v2. Passwor...

• ip ssh rsa-authentication : add keys for the RSA authentication. • show crypto : display the public part of the SSH host-keys. • show ip ssh client-pub-keys : display the client public keys used in host-based authentication. • show ip ssh rsa-authentication : display the authorized-keys for the RS...

Hostbased Authentication : disabled. RSA Authentication : disabled. Using RSA Authentication of SSH The following procedure authenticates an SSH client based on an RSA key using RSA authentication. This method uses SSH version 2. 1. On the SSH client (Unix machine), generate an RSA key, as shown in ...

7. Bind shosts and rhosts to host-based authentication. CONFIGURATION mode ip ssh pub-key-file flash: //filename or ip ssh rhostsfile flash: //filename Example of Creating shosts admin@Unix_client# cd /etc/ssh admin@Unix_client# ls moduli sshd_config ssh_host_dsa_key.pub ssh_host_key.pub ssh_host_rs...

In this case, verify that host-based authentication is set to “Yes” in the file ssh_config (root permission is required to edit this file): permission denied (host based). If the IP address in the RSA key does not match the IP address from which you attempt to log in, the following message appears. ...

Configure local authentication globally and configure access classes on a per-user basis.FTOS can assign different access classes to different users by username. Until users attempt to log in, FTOS does not know if they will be assigned a VTY line. This means that incoming users always see a login p...

VTY MAC-SA Filter Support FTOS supports MAC access lists which permit or deny users based on their source MAC address. With this approach, you can implement a security policy based on the source MAC address.To apply a MAC ACL on a VTY line, use the same access-class command as IP ACLs. The following...

17 Simple Network Management Protocol (SNMP) This chapter describes the SNMP enhancements and contains the following sections: • FIPS Compatibility Support for SNMPv3 SNMPv3 Compliance With FIPS This functionality is supported on the S4810, S4820T, S6000, Z9000, I/O Aggregator, and MXL platforms. SN...

18 Stacking This chapter describes the stacking enhancements and contains the following sections: • Configuring the Uplink Speed of Interfaces as 40 Gigabit Ethernet Configuring the Uplink Speed of Interfaces as 40 Gigabit Ethernet You can configure the I/O Aggregator switch in standalone, VLT, and ...

19 Virtual Link Trunking (VLT) This chapter describes the VLT enhancements and contains the following sections: • VLT Nodes as Rendezvous Points for Multicast Resiliency • Specifying VLT Nodes in a PVLAN • Proxy ARP Capability on VLT Peer Nodes Specifying VLT Nodes in a PVLAN You can configure VLT p...

Whenever a change occurs in the VLAN mode of one of the peers, this modification in setting is synchronized with the other peers and depending on the validation mechanism that is initiated for MAC synchronization of VLT peers, MAC addresses learned on a particular VLAN are synchronized and made cons...

VLT LAG Mode PVLAN Mode of VLT VLAN ICL VLAN Membership Mac Synchronization Peer1 Peer2 Peer1 Peer2 Trunk Access Primary/Normal Secondary No No Configuring a VLT VLAN or LAG in a PVLAN You can configure the VLT peers or nodes in a private VLAN (PVLAN). Because the VLT LAG interfaces are terminated o...

7. Enter the port-channel number that acts as the interconnect trunk.VLT DOMAIN CONFIGURATION mode peer-link port-channel id-number The range is from 1 to 128. 8. (Optional) To configure a VLT LAG Enter the VLAN ID number of the VLAN where the VLT forwards packets received on the VLTi from an adjace...

8. Map secondary VLANs to the selected primary VLAN.INTERFACE VLAN mode private-vlan mapping secondary-vlan vlan-list The list of secondary VLANs can be: – Specified in comma-delimited ( VLAN-ID,VLAN-ID ) or hyphenated-range format ( VLAN-ID- VLAN-ID ). – Specified with this command even before they...

Proxy ARP Capability on VLT Peer Nodes The proxy ARP functionality on VLT peer nodes is supported on the S4810, S4820T, Z9000, I/O Aggregator, and MXL platforms. Proxy ARP enables hosts with knowledge of the network to accept and forward packets from hosts that contain no knowledge of the network. P...

hardware address in the ARP response contains the VLT peer MAC address. Proxy ARP is supported for both unicast and broadcast ARP requests. Control packets other than ARP requests destined to the VLT peers that reach the undesired and incorrect VLT node are dropped if the ICL link is down. Further p...

Usage Information The dcb-policy output stack-unit all command overwrites any previous dcb-policy output stack-unit stack-unit-id configurations. Similarly, a dcb-policy output stack-unit stack-unit-id command overwrites any previous dcb-policy output stack-unit all configuration. You can apply a DC...

Parameters config-source | auto-downstream | auto-upstream | manual Enter the DCBX port role, where: • config-source : configures the port to serve as the configuration source on the switch. • auto-upstream : configures the port to receive a peer configuration. The configuration source is elected fr...

Defaults Auto Command Modes INTERFACE PROTOCOL LLDP Command History Version 9.2(0.0) Introduced on the M I/O Aggregator. This command is supported in Programmable-Mux (PMUX) mode only. Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Usage Information DCBX requires that you enable L...

description Enter a text description of the DCB policy (PFC input or ETS output). Syntax description text To remove the text description, use the no description command. Parameters text Enter the description of the output policy. The maximum is 32 characters. Defaults none Command Modes • DCB INPUT ...

show dcb Displays the data center bridging status, the number of PFC-enabled ports, and the number of PFC- enabled queues. Syntax show dcb [stack-unit unit-number ] Parameters unit number Enter the DCB unit number. The range is from 0 to 5. Command Modes EXEC Privilege Command History Version 9.2(0....

Protocol State: In-Sync Peer DCBX Status: ---------------- DCBX Operational Version is 0 DCBX Max Version Supported is 255 Sequence Number: 2 Acknowledgment Number: 2 Total DCBX Frames transmitted 27 Total DCBX Frames received 6 Total DCBX Frame errors 0 Total DCBX Frames unrecognized 0 show interfa...

Priority# Bandwidth TSA 0 13% ETS 1 13% ETS 2 13% ETS 3 13% ETS 4 12% ETS 5 12% ETS 6 12% ETS 7 12% ETS Remote Parameters: ------------------- Remote is disabled Local Parameters : ------------------ Local is enabled TC-grp Priority# Bandwidth TSA 0 0,1,2,3,4,5,6,7 100% ETS 1 0% ETS 2 0% ETS 3 0% ET...

Local FCOE PriorityMap is 0x8 Local ISCSI PriorityMap is 0x10 Remote FCOE PriorityMap is 0x8 Remote ISCSI PriorityMap is 0x8 Dell# show interfaces tengigabitethernet 0/49 pfc detail Interface TenGigabitEthernet 0/49 Admin mode is on Admin is enabled Remote is enabled Remote Willing Status is enabled...

show qos priority-groups Displays the ETS priority groups configured on the switch, including the 802.1p priority classes and ID of each group. Syntax show qos priority-groups Command Modes EXEC Privilege Command History Version 9.2(0.0) Introduced on the M I/O Aggregator. This command is supported ...

22 FIP Snooping In a converged Ethernet network, an MXL Switch can operate as an intermediate Ethernet bridge to snoop on Fibre Channel over Ethernet initialization protocol (FIP) packets during the login process on Fibre Channel over Ethernet (FCoE) forwarders (FCFs).Acting as a transit FIP snoopin...

23 High Availability (HA) High availability (HA) in the Dell Networking operating software (FTOS) is configuration synchronization to minimize recovery time in the event of a route processor module (RPM) failure. The feature is available on the S4810 S4820T platform.In general, a protocol is defined...

24 iSCSI Optimization Internet small computer system interface (iSCSI) optimization enables quality-of-service (QoS) treatment for iSCSI storage traffic.To configure and verify the iSCSI optimization feature, use the following Dell Networking operating software commands. advertise dcbx-app-tlv Confi...

Command History Version 9.2(0.0) Introduced on the M I/O Aggregator. This command is supported in Programmable-Mux (PMUX) mode only. Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. iscsi cos Set the QoS policy that is applied to the iSCSI flows. Syntax iscsi cos {enable | disable |...

iscsi enable Globally enable iSCSI optimization. Syntax iscsi enable To disable iSCSI optimization, use the no iscsi enable command. Parameters enable Enter the keyword enable to enable the iSCSI optimization feature. Defaults Disabled. Command Modes CONFIGURATION Command History Version 9.2(0.0) In...

Command Modes INTERFACE Command History Version 9.2(0.0) Introduced on the M I/O Aggregator. This command is supported in Programmable-Mux (PMUX) mode only. Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. iscsi target port Configure the iSCSI target ports and optionally, the IP add...

• iSCSI optimization requires configuring two ingress ACL groups The ACL groups are allocated after iSCSI Optimization is configured. (refer to When to Use CAM Profiling ). Configuring iSCSI Optimization To configure iSCSI optimization, use the following commands. 1. For a non-DCB environment: Enabl...

25 Interfaces The commands in this chapter are supported by Dell Networking operating software (Dell).This chapter contains the following sections: • Basic Interface Commands • Port Channel Commands • Time Domain Reflectometer (TDR) • UDP Broadcast Basic Interface Commands The following commands are...

Usage Information Important Points to Remember: • Spaces between characters are not preserved after entering this command unless you enclose the entire description in quotation marks ( “ desc_text ” ). • Entering a text string after the description command overwrites any previous text string that yo...

Defaults Not configured. Command Modes CONFIGURATION Command History Version 9.2(0.0) Introduced on the M I/O Aggregator. This command is supported in Programmable-Mux (PMUX) mode only. Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Usage Information You cannot delete a physical i...

show vlan — displays the current VLAN configuration on the switch. shutdown — disables/enables the VLAN. tagged — adds a Layer 2 interface to a VLAN as a tagged interface.untagged — adds a Layer 2 interface to a VLAN as an untagged interface. keepalive Send keepalive packets periodically to keep an ...

Input Statistics: ... User Information Both sides of the link must have auto-negotiation enabled or disabled for the link to come up.The following details the possible speed and auto-negotiation combinations for a line between two 10/100/1000 Base-T Ethernet interfaces. Port 0 • auto-negotiation ena...

Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Usage Information Splitting a 40G port into 4x10G port is supported on standalone and stacked units. • You cannot use split ports as stack-link to stack an MXL Switch.• The split ports MXL switch unit cannot be a part of any stacked s...

interface port-channel Create a Port Channel interface, which is a link aggregation group (LAG) containing 16 physical interfaces on the XML switch. Syntax interface port-channel channel-number To delete a Port Channel, use the no interface port-channel channel- number command. Parameters channel-nu...

26 Internet Group Management Protocol (IGMP) The IGMP commands are supported by the Dell Networking operating software (FTOS) on the Z9000 S4810 S4820T platform.This chapter contains the following sections: • IGMP Commands • IGMP Snooping Commands IGMP Commands FTOS supports IGMPv1/v2/v3 and is comp...

Version 7.8.1.0 Introduced on the S-Series. Version 7.7.1.0 Introduced on the C-Series. E-Series legacy command ip igmp querier-timeout Change the interval that must pass before a multicast router decides that there is no longer another multicast router that should be the querier. Z9000 S4810 S4820T...

Command Modes INTERFACE Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide . The following is a list of the Dell Networking OS version history for this command. Version 9.0.2.0 Introduc...

• When enabled, IGMP snooping Querier does not start if there is a statically configured multicast router interface in the VLAN. • When enabled, IGMP snooping Querier starts after one query interval in case no IGMP general query (with IP SA lower than its VLAN IP address) is received on any of its V...

ip igmp snooping last-member-query-interval The last member query interval is the maximum response time inserted into Group-Specific queries sent in response to Group-Leave messages. Z9000 S4810 S4820TS6000 Syntax ip igmp snooping last-member-query-interval milliseconds To return to the default valu...

ip igmp snooping querier Enable IGMP querier processing for the VLAN interface. Z9000 S4810 S4820TS6000 Syntax ip igmp snooping querier To disable IGMP querier processing for the VLAN interface, use the no ip igmp snooping querier command. Defaults Not configured. Command Modes INTERFACE VLAN — (con...

Mode Function passive An interface is not in an active negotiating state in this mode. LACP runs on any link configured in the passive state. Ports in a passive state respond to negotiation requests from other ports that are in active states. Ports in a passive state respond to LACP packets off An i...

• Configuring the Minimum Oper Up Links in a Port Channel (optional) • Adding or Removing a Port Channel from a VLAN (optional) • Assigning an IP Address to a Port Channel (optional) • Deleting or Disabling a Port Channel (optional) • Load Balancing Through Port Channels (optional) Creating a Port C...

Output 81.60Mbits/sec, 133658 packets/sec Time since last interface status change: 04:31:57 FTOS> When more than one interface is added to a Layer 2-port channel, FTOS selects one of the active interfaces in the port channel to be the primary port. The primary port replies to flooding and sends p...

no ip address channel-member GigabitEthernet 1/8 no shutdown FTOS(conf-if-portch)#no chann gi 1/8 FTOS(conf-if-portch)#int port 5 FTOS(conf-if-portch)#channel gi 1/8 FTOS(conf-if-portch)#sho conf ! interface Port-channel 5 no ip address channel-member GigabitEthernet 1/8 shutdown FTOS(conf-if-portch...

no untagged port-channel id number • Identify which port channels are members of VLANs. EXEC Privilege mode show vlan Configuring VLAN Tags for Member Interfaces To configure and verify VLAN tags for individual members of a port channel, perform the following: 1. Configure VLAN membership on individ...

Related Commands protocol lldp (Configuration) — enables LLDP globally. debug lldp interface — debugs LLDP. show lldp neighbors — displays the LLDP neighbors. show running-config lldp — displays the LLDP running configuration. advertise dot3-tlv Advertise dot3 TLVs (Type, Length, Value). Syntax adve...

Command Modes CONFIGURATION (conf-lldp) Command History Version 9.2(0.0) Introduced on the M I/O Aggregator. This command is supported in Programmable-Mux (PMUX) mode only. Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Usage Information The command options system-capabilities , s...

Defaults none Command Modes EXEC Privilege Command History Version 9.2(0.0) Introduced on the M I/O Aggregator. This command is supported in Programmable-Mux (PMUX) mode only. Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. debug lldp interface To display timer events, neighbor add...

Defaults none Command Modes EXEC Privilege Command History Version 9.2(0.0) Introduced on the M I/O Aggregator. This command is supported in Programmable-Mux (PMUX) mode only. Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. disable Enable or disable LLDP. Syntax disable To enable L...

Command History Version 9.2(0.0) Introduced on the M I/O Aggregator. This command is supported in Programmable-Mux (PMUX) mode only. Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. mode To receive or transmit, set LLDP. Syntax mode {tx | rx} To return to the default, use the no mod...

Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Configure LLDP Configuring LLDP is a two-step process. 1. Enable LLDP globally. 2. Advertise TLVs out of an interface. Related Configuration Tasks • Viewing the LLDP Configuration • Viewing Information Advertised by Adjacent LLDP Agen...

multiplier LLDP multiplier configuration no Negate a command or set its defaults show Show LLDP configuration R1(conf-lldp)#exit R1(conf)#interface gigabitethernet 1/31 R1(conf-if-gi-1/31)#protocol lldp R1(conf-if-gi-1/31-lldp)#? advertise Advertise TLVs disable Disable LLDP protocol on this interfa...

Enabling LLDP on Management Ports LLDP on management ports is enabled by default. To enable LLDP on management ports, use the following command. 1. Enter Protocol LLDP mode.CONFIGURATION mode protocol lldp 2. Enable LLDP.PROTOCOL LLDP mode no disable Disabling and Undoing LLDP on Management Ports To...

Viewing the LLDP Configuration To view the LLDP configuration, use the following command. • Display the LLDP configuration. CONFIGURATION or INTERFACE mode show config Example of Viewing LLDP Global Configurations R1(conf)#protocol lldp R1(conf-lldp)#show config ! protocol lldp advertise dot1-tlv po...

Example of Viewing Details Advertised by Neighbors R1#show lldp neighbors detail ======================================================================== Local Interface Gi 1/21 has 1 neighbor Total Frames Out: 6547 Total Frames In: 4136 Total Neighbor information Age outs: 0 Total Frames Discarded:...

R1(conf-lldp)#show config ! protocol lldp advertise dot1-tlv port-protocol-vlan-id port-vlan-id advertise dot3-tlv max-frame-size advertise management-tlv system-capabilities system-description mode tx no disable R1(conf-lldp)# no mode R1(conf-lldp)#show config ! protocol lldp advertise dot1-tlv por...

! protocol lldp advertise dot1-tlv port-protocol-vlan-id port-vlan-id advertise dot3-tlv max-frame-size advertise management-tlv system-capabilities system-description no disable R1(conf-lldp)# Configuring a Time to Live The information received from a neighbor expires after a specific amount of tim...

30 Quality of Service (QoS) The Dell Networking operating software (FTOS) commands for quality of service (QoS) include traffic conditioning and congestion control. QoS commands are supported on the I/O Aggregator Z-Series S4810 S4820T platform.This chapter contains the following sections: • Global ...

Parameters number Enter the bandwidth-weight, as a percentage. The value must be a power of 2. The range is from 1 to 100. Defaults none Command Modes CONFIGURATION Command History Version 9.2(0.0) Introduced on the M I/O Aggregator. This command is supported in Programmable-Mux (PMUX) mode only. Ve...

qos-policy-output Create a QoS output policy. Syntax qos-policy-output qos-policy-name To remove an existing output QoS policy, use the no qos-policy-output qos- policy-name command. Parameters qos-policy-name Enter your output QoS policy name in character format (32 characters maximum). Defaults no...

NOTE: This option is available under policy-map- input only. qos-policy qos-policy-name (OPTIONAL) Enter the keywords qos-policy then the QoS policy name assigned to the queue in text format (32 characters maximum). This specifies the input QoS policy assigned to the queue under policy-map-input and...

Command History Version 8.3.16.1 Introduced on the MXL 10/40GbE Switch IO Module. Example Dell#show qos qos-policy-output Dell#show qos qos-policy-output Qos-policy-output qmap_out Bandwidth-percentage 10 Qos-policy-output qmap_wg Rate-shape 100 50 Wred yellow wy Wred green wg Dell# show qos statist...

Usage Information The following describes the show qos statistics command in the following example. Field (ED and EE) Description Queue # Queue Number Matched Pkts The number of packets that matched the class-map criteria. NOTE: When you configure trust , matched packet counters are not incremented ...

Example Dell#show qos wred-profile Wred-profile-name min-threshold max-threshold wred_drop 0 0 wred_ge_y 1024 2048 wred_ge_g 2048 4096 wred_teng_y 4096 8192 wred_teng_g 8192 16384 WRED1 2000 7000 wred Designate the WRED profile to yellow or green traffic. Syntax wred [[{yellow | green} profile-name ...

32 Simple Network Management Protocol (SNMP) and Syslog This chapter contains commands to configure and monitor the simple network management protocol (SNMP) v1/v2/v3 and Syslog. Both features are supported on the Z-Series S4810 S4820T platform.The chapter contains the following sections: • SNMP Com...

snmp-server enable command and the snmp-server host command for that host must be enabled. NOTE: For v1 / v2c trap configuration, if the community-string is not defined using the snmp-server community command prior to using this command, the default form of the snmp-server community command automati...

Version 7.5.1.0 Introduced on the C-Series. E-Series legacy command Related Commands show logging — displays logging settings and system messages in the internal buffer. logging Configure an IP address or host name of a Syslog server where logging messages are sent. Multiple logging servers of both ...

Usage Information Multiple logging servers of both IPv4 and/or IPv6 can be configured. Related Commands logging on — enables the logging asynchronously to logging buffer, console, Syslog server, and terminal lines. logging trap — enables logging to the Syslog server based on severity. logging buffer...

E-Series legacy command Usage Information When you decrease the buffer size, all messages stored in the buffer are lost. Increasing the buffer size does not affect messages stored in the buffer. Related Commands clear logging — clears the logging buffer. default logging buffered — returns the loggin...

Related Commands clear logging — clears the logging buffer. default logging console — returns the logging console parameters to the default setting. show logging — displays the logging setting and system messages in the internal buffer. logging monitor Specify which messages are logged to Telnet app...

logging source-interface Specify that the IP address of an interface is the source IP address of Syslog packets sent to the Syslog server. Z9000 S4810 S4820T Syntax logging source-interface interface To disable this command and return to the default setting, use the no logging source-interface comma...

show logging driverlog stack-unit Display the driver log for the specified stack member. S4810 S4820T Z9000 Syntax show logging driverlog stack-unit unit# Parameters stack-unit unit# Enter the keywords stack-unit followed by the stack member ID of the switch for which you want to display the driver ...

downstream disable links Configure the number of downstream links in the uplink-state group that are disabled if one upstream link in an uplink-state group goes down. S4810 S4820T Syntax downstream disable links { number |all} To revert to the default setting, use the no downstream disable links com...

interval seconds Enter the keyword interval to specify the time interval to send hello messages. The range is from 1 to 5 seconds. The default is 1 second. Defaults 1 second Command Modes VLT DOMAIN Command History This guide is platform-specific. For command information about other platforms, refer...

Version 8.3.19.0 Introduced on the S8420T. Version 8.3.12.0 Introduced on the S4810. Usage Information To delay the system from bringing up the VLT port for a brief period to allow IGMP Snooping and Layer 3 routing protocols to converge, use the delay-restore parameter. Use this feature: • after a V...

show vlt mismatch Display mismatches in VLT parameters. Z9000 S4810 S4820TS6000 Syntax show vlt mismatch Command Modes EXEC Command History This guide is platform-specific. For command information about other platforms, refer to the relevant Dell Networking OS Command Line Reference Guide . The foll...

vlt-peer-lag port-channel Associate the port channel to the corresponding port channel in the VLT peer for the VLT connection to an attached device. Z-Series S4810 S4820T Syntax vlt-peer-lag port-channel id-number Parameters id-number Enter the respective vlt port-channel number of the peer device. ...

• Provides fast convergence if either the link or a device fails.• Optimized forwarding with virtual router redundancy protocol (VRRP).• Provides link-level resiliency.• Assures high availability. CAUTION: Dell Networking does not recommend enabling Stacking and VLT simultaneously. If you enable bot...

aggregation are in Active-Active Load Sharing mode. This example provides the highest form of resiliency, scaling, and load balancing in data center switching networks.The following example shows stacking at the access, VLT in aggregation, and Layer 3 at the core.The aggregation layer is mostly in t...

• VLT domain — This domain includes both the VLT peer devices, VLT interconnect, and all of the port channels in the VLT connected to the attached devices. It is also associated to the configuration mode that you must use to assign VLT global parameters. • VLT peer device — One of a pair of devices ...

• Bulk Sync happens only for Global IPv6 Neighbors; Link-local neighbor entries are not synced.• If all of the following conditions are true, MAC addresses may not be synced correctly: – VLT peers use VLT interconnect (VLTi)– Sticky MAC is enabled on an orphan port in the primary or secondary peer– ...

• VLT and VRRP interoperability – In a VLT domain, VRRP interoperates with virtual link trunks that carry traffic to and from access devices (refer to Overview ). The VLT peers belong to the same VRRP group and are assigned master and backup roles. Each peer actively forwards L3 traffic, reducing th...

traffic assumes the role of the Primary Peer. If the original Primary Peer is restored, the VLT peer reassigned as the Primary Peer retains this role and the other peer must be reassigned as a Secondary Peer. Peer role changes are reported as SNMP traps. VLT Bandwidth Monitoring When bandwidth usage...

To route traffic to and from the multicast source and receiver, enable PIM on the L3 side connected to the PIM router using the ip pim sparse-mode command. Each VLT peer runs its own PIM protocol independently of other VLT peers. To ensure the PIM protocol states or multicast routing information bas...

• L3 routing is enabled on any VLAN with an admin state of up. NOTE: If the CAM is full, do not enable peer-routing. Configuring VLT Unicast To enable and configure VLT unicast, follow these steps. 1. Enable VLT on a switch, then configure a VLT domain and enter VLT-domain configuration mode.CONFIGU...

• When using factory default settings on a new switch deployed as a VLT node, packet loss may occur due to the requirement that all ports must be open. • ECMP is not compatible on VLT nodes using VLT multicast. You must use a single VLAN. Configuring VLT Multicast To enable and configure VLT multica...

Executing IEEE compatible Spanning Tree Protocol Root ID Priority 0, Address 0001.e88a.dff8 Root Bridge hello time 2, max age 20, forward delay 15 Bridge ID Priority 0, Address 0001.e88a.dff8 We are the root Configured hello time 2, max age 20, forward delay 15 Interface Designated Name PortID Prio ...

Isolated Q: U - Untagged, T - Tagged x - Dot1x untagged, X - Dot1x tagged G - GVRP tagged, M - Vlan-stack, H - Hyperpull tagged NUM Status Description Q Ports 10 Active U Po110(Fo 0/52) T Po100(Fo 0/56,60) Configuring Virtual Link Trunking (VLT Peer 2) Enable VLT and create a VLT domain with a backu...

interface Port-channel 11 no ip address switchport channel-member fortyGigE 1/18,22 no shutdown Troubleshooting VLT To help troubleshoot different VLT issues that may occur, use the following information. NOTE: For information on VLT Failure mode timing and its impact, contact your Dell Networking r...

36 Understanding and Working of the FC Flex IO Modules This chapter provides a generic, broad-level description of the operations and functionality of the Fiber Channel (FC) Flex IO module, and contains the following sections: • FC Flex IO Modules Overview • FC Flex IO Module Capabilities and Operat...

In a typical Fibre Channel storage network topology, separate network interface cards (NICs) and host bus adapters (HBAs) on each server (two each for redundancy purposes) are connected to LAN and SAN networks respectively. These deployments typically include a ToR SAN switch in addition to a ToR LA...

• A distance of up to 300 meters is supported at 8 Gbps for Fibre Channel traffic.• Multiple domains are supported in an NPIV proxy gateway (NPG).• You cannot configure the MXL and Aggregator switches in Stacking mode if the switches contain the FC Flex IO module. Similarly, FC Flex IO modules do no...

• When the Dell Networking OS sends FC frames (the initial FLOGI or FLOGO messages), or converts FLOGI to FDISC messages or processes any internally generated FC frames, the software computes and verifies the FC cyclic redundancy check (CRC) value before sending the frame to FC ports. • Fabric world...

Installing the Optics The following optical ports are supported on the FC Flex IO module using one of the supported breakout cables: • 4G or 8G Fibre Channel small form-factor pluggable plus (SFP+) optics module and LC connectors over a distance of 150 meters. • 4G or 8G Fibre Channel SFP+ optics mo...

If FC Flex IO modules are installed, the I/O Aggregator does not perform FIP snooping because the FIP frames are terminated on the switch for NPIV operations. However, on MXL Switches, you can configure the switch to operate in FIP Snooping or NPIV mode.If the MXL 10/40GbE Switch functions in the NP...

Installing and Configuring Flowchart for FC Flex IO Modules Understanding and Working of the FC Flex IO Modules 483

To see if a switch is running the latest Dell Networking OS version, use the show version command. To download a Dell Networking OS version, go to http://support.dell.com . Installation Site Preparation Before installing the switch or switches, make sure that the chosen installation location meets t...

37 Data Center Bridging (DCB) for FC Flex IO Modules Data center bridging (DCB) refers to a set of IEEE Ethernet enhancements that provide data centers with a single, robust, converged network to support multiple traffic types, including local area network (LAN), server, and storage traffic.The Fibr...

Field Description TSA Transmission scheduling algorithm used by the priority group: Enhanced Transmission Selection (ETS). BW Percentage of bandwidth allocated to the priority group. PFC PFC setting for the priority group: On (enabled) or Off. Priorities 802.1p priorities configured in the priority ...

DCBX Max Version Supported is 255 Sequence Number: 2 Acknowledgment Number: 2 Total DCBX Frames transmitted 27 Total DCBX Frames received 6 Total DCBX Frame errors 0 Total DCBX Frames unrecognized 0 ETS Commands The following ETS commands are supported on the FC Flex IO module installed in the M I/O...

equally distributed to nonstrict-priority groups which have no configured scheduler. Related Commands • qos-policy-output ets — creates a QoS output policy. • scheduler — schedules priority traffic in port queues. clear ets counters Clear all ETS TLV counters on an interface. Syntax clear ets counte...

7 - - 8 - - PFC Commands The following PFC commands are supported on the FC Flex IO module installed in the M I/O Aggregator and MXL 10/40GbE Switch, and S4810 and S6000 platforms. clear pfc counters Clear the PFC TLV counters and PFC statistics on an interface or stack unit. Syntax clear pfc counte...

38 Data Center Bridging (DCB) Data center bridging (DCB) is supported on the S4810 S4820T platform. NOTE: DCB is not supported when you use 10GBaseT ports for stacking. Ethernet Enhancements in Data Center Bridging The following section describes DCB. In the Dell Networking operating system (FTOS) v...

bytes that cannot recover from frame loss. To successfully transport storage traffic, data center Ethernet must provide no-drop service with lossless links. InterProcess Communication (IPC) traffic InterProcess Communication (IPC) traffic within high-performance computing clusters to share informati...

• PFC supports buffering to receive data that continues to arrive on an interface while the remote system reacts to the PFC operation. • PFC uses DCB MIB IEEE 802.1azd2.5 and PFC MIB IEEE 802.1bb-d2.2.• PFC is supported on specified 802.1p priority traffic (dot1p 0 to 7) and is configured per interf...

• Configuration of a peer device over a DCB link. DCBx requires the link layer discovery protocol (LLDP) to provide the path to exchange DCB parameters with peer devices. Exchanged parameters are sent in organizationally specific TLVs in LLDP data units. For more information, refer to Link Layer Dis...

For DCB to operate effectively, you can classify ingress traffic according to its dot1p priority so that it maps to different data queues. The dot1p-queue assignments used are shown in the following table.To enable DCB, enable either the iSCSI optimization configuration or the FCoE configuration. Fo...

dot1p Value in the Incoming Frame Egress Queue Assignment 1 0 2 0 3 1 4 2 5 3 6 3 7 3 Configure Enhanced Transmission Selection ETS provides a way to optimize bandwidth allocation to outbound 802.1p classes of converged Ethernet traffic. Different traffic types have different service needs. Using ET...

• ETS operates with legacy DCBx versions as follows: – In the CEE version, the priority group/traffic class group (TCG) ID 15 represents a non-ETS priority group. Any priority group configured with a scheduler type is treated as a strict-priority group and is given the priority-group (TCG) ID 15. – ...

6. Apply the QoS output policy with the bandwidth percentage for specified priority queues to an egress interface.INTERFACE mode service-policy output output-policy-name Configure a DCBx Operation DCB devices use data center bridging exchange protocol (DCBx) to exchange configuration information wit...

configured ports, the configuration of DCBx ports in Manual mode is saved in the running configuration.On a DCBx port in a manual role, all PFC, application priority, ETS recommend, and ETS configuration TLVs are enabled.When making a configuration change to a DCBx port in a Manual role, Dell Networ...

keeps the peer link up and continues to exchange DCBx packets. If a compatible peer configuration is later received, DCBx is enabled on the port. • If there is no configuration source, a port may elect itself as the configuration source. A port may become the configuration source if the following co...

configured version, including fast and slow transmit timers and message formats. If a DCBx frame with a different version is received, a syslog message is generated and the peer version is recorded in the peer status table. If the frame cannot be processed, it is discarded and the discard counter is...

• The CIN version of DCBx supports only PFC, ETS, and FCOE; it does not support iSCSI, backward congestion management (BCN), logical link down (LLDF), and network interface virtualization (NIV). Configuring DCBx To configure DCBx, follow these steps. For DCBx, to advertise DCBx TLVs to peers, enable...

5. On manual ports only : Configure the PFC and ETS TLVs advertised to DCBx peers. PROTOCOL LLDP mode [no] advertise DCBx-tlv {ets-conf | ets-reco | pfc} [ets-conf | ets-reco | pfc] [ets-conf | ets-reco | pfc] – ets-conf : enables the advertisement of ETS Configuration TLVs. – ets-reco : enables the...

Verifying the DCB Configuration To display DCB configurations, use the following show commands. Table 13. Displaying DCB Configurations Command Output show dot1p-queue mapping Displays the current 802.1p priority-queue mapping. show dcb [stack-unit unit-number ] Displays the data center bridging sta...

Field Description Total DCBx Frames received Number of DCBx frames received from remote peer port. Total DCBx Frame errors Number of DCBx frames with errors received. Total DCBx Frames unrecognized Number of unrecognizable DCBx frames received. PFC and ETS Configuration Examples This section contain...

dot1p Value in the Incoming Frame Priority Group Assignment 4 IPC 5 LAN 6 LAN 7 LAN The following describes the priority group-bandwidth assignment. Priority Group Bandwidth Assignment IPC 5% SAN 50% LAN 45% PFC and ETS Configuration Command Examples The following examples show PFC and ETS configura...

FTOS(conf-qos-policy-out)# bandwidth-percentage 5 FTOS(conf-qos-policy-out)# exit Example of Configuring a DCB Output Policy to Apply ETS (Bandwidth Allocation and Scheduling) to IPC, SAN, and LAN Priority Traffic FTOS(conf)# dcb-output ets FTOS(conf-dcb-out)# priority-group san qos-policy san FTOS(...

Field DescriptionFLOGI to complete on peer FC port), or Removed (port has been shut down). Members M I/O Aggregator and MXL 10/40GbE Switch with the FC Flex IO module Ethernet and FC ports that are members of the dedicated FCoE VLAN that carries storage traffic to the specified fabric. Example FTOS#...

LoginMethod : FLOGI Secs : 5593 Status : LOGGED_IN ENode[1]: ENode MAC : 00:10:18:f1:94:22 ENode Intf : Te 0/13 FCF MAC : 5c:f9:dd:ef:10:c9 Fabric Intf : Fc 0/0 FCoE Vlan : 1003 Fabric Map : fid_1003 ENode WWPN : 10:00:00:00:c9:d9:9c:cb ENode WWNN : 10:00:00:00:c9:d9:9c:cd FCoE MAC : 0e:fc:03:01:02:...

require an efficient and scalable bridging feature in order to access FC storage arrays, which an NPG provides. NPIV Proxy Gateway Operation Consider a sample scenario of NPG operation. An M1000e chassis configured as an NPG does not join a SAN fabric, but functions as an FCoE-FC bridge that forward...

NOTE: In each FCoE map, the fabric ID, FC-MAP value, and FCoE VLAN must be unique. Use one FCoE map to access one SAN fabric. You cannot use the same FCoE map to access different fabrics. When you configure an MXL 10/40GbE Switch and M I/O Aggregator with the FC Flex IO module as an NPG, FCoE transi...

Applying a DCB map on server-facing Ethernet ports You can apply a DCB map only on a physical Ethernet interface and can apply only one DCB map per interface. Step Task Command Command Mode 1 Enter interface configuration mode on a server-facing port or port channel to apply a DCB map.You cannot app...

The values for the FCoE VLAN, fabric ID and FC-MAP must be unique. Apply an FCoE map on downstream server-facing Ethernet ports and upstream fabric-facing Fibre Channel ports. Step Task Command Command Mode 1 Create an FCoE map which contains parameters used in the communication between servers and ...

Step Task Command Command Mode slot / port | port-channel num } 2 Apply the FCoE/FC configuration in an FCoE map on the Ethernet port. Repeat this step to apply an FCoE map to more than one port; for example:FTOS# interface tengigabitEthernet 0/0 FTOS(config-if-te-0/0)# fcoe-map SAN_FABRIC_A FTOS# i...

FTOS(config)# interface range fibrechannel 0/0 - 3 , fibrechannel 0/8 - 11 Enter the keywords interface range followed by an interface type and port range. A port range must contain spaces before and after the dash. Separate each interface type and port range with a space, comma, and space as shown ...

Table 18. Displaying NPIV Proxy Gateway Information Command Description show interfaces status Displays the operational status of Ethernet and Fibre Channel interfaces on an MXL 10/40GbE Switch and M I/O Aggregator with the FC Flex IO module NPG. show fcoe-map [ brief | map-name ] Displays the Fibre...

Ethernet ports - up (transmitting FCoE and LAN storage traffic) or down (not transmitting traffic).Fibre Channel ports - up (link is up and transmitting FC traffic) or down (link is down and not transmitting FC traffic), link-wait (link is up and waiting for FLOGI to complete on peer SW port), or re...

Config-State Indicates whether the configured FCoE and FC parameters in the FCoE map are valid: Active (all mandatory FCoE and FC parameters are correctly configured) or Incomplete (either the FC-MAP value, fabric ID, or VLAN ID are not correctly configured). Oper-State Operational status of link to...

Te 0/13 10:00:00:00:c9:d9:9c:cb 1003 Fc 0/0 fid_1003 FDISC LOGGED_IN Table 22. show npiv devices brief Field Descriptions Field Description Total NPIV Devices Number of downstream ENodes connected to a fabric over the MXL 10/40GbE Switch and M I/O Aggregator with the FC Flex IO module NPIV proxy gat...

Status : LOGGED_IN Table 23. show npiv devices Field Descriptions Field Description ENode [ number ] Server CNA that has successfully logged in to a fabric over an MXL 10/40GbE Switch and M I/O Aggregator with the FC Flex IO module Ethernet port in ENode mode. Enode MAC MAC address of a server CNA p...