Configuration Considerations

The switch configuration depends on whether you use Zero Touch Deployment or factory default mode.

Zero Touch Deployment Configuration

With Zero Touch Deployment, the switch configuration consists of the following:

The ssh and sshd boot configuration flags are enabled by default.
All ports are Private VLAN isolated ports.
VLAN 4048 is created as an onboarding-vlan for host-only connectivity for In Band management. All front panel ports are members of VLAN 4048.
In Band management is enabled.
Dynamic Host Configuration Protocol (DHCP) client requests are cycled between In Band and Out of Band ports, except on the 5320 Series. 5320 Series supports In Band management only.
If the switch resets after the IP address is obtained from the DHCP Server, the entire DHCP process does not need to be repeated. Instead, the switch can directly send the DHCP Request to the DHCP Server for the IP stored in the /intflash/dhcp/dhclient.leases file.
Out of Band management is enabled, except on the 5320 Series. 5320 Series supports In Band management only.
All ports are administratively enabled.
IQAgent is enabled by default.
Zero Touch Provisioning Plus (ZTP+) for ExtremeCloud IQ Site Engine onboarding is enabled by default.
Zero Touch Fabric Configuration is initiated.
After the Zero Touch Fabric establishes successfully, the onboarding VLAN 4048 is automatically assigned to onboarding I-SID 15999999.

For more information about IQAgent, see ExtremeCloud IQ Support.

Factory Default Mode

The switch continues to support the boot configuration flag boot config flags factorydefaults to return an existing switch to factory default configuration.

Note

Zero Touch Deployment does not run on a switch returned to factory default configuration in this manner.

For more information, see Boot Sequence.

The factory default boot configuration flag supports the following behaviors:

Table 1. Factory default boot configuration flag parameters
Parameter	Action
no parameter used	Removes the configuration files, primary and secondary config file names, all user account passwords, digital certificates, IKE/OSPF/IS-IS keys, and SNMP communities. All ports are disabled and assigned to VLAN 1. License files are not removed.
config-only	Boots the switch with a blank configuration. This parameter preserves configuration files, primary and secondary configuration file names, user accounts and passwords, digital certificates, IKE/OSPF/IS-IS keys, license files, and SNMP communities. All ports are disabled and assigned to VLAN 1. Use this parameter as a temporary troubleshooting option to test or investigate if something is wrong with the configuration without permanently removing the configuration files, user accounts, and other preserved items.
reset-all-files	Equivalent to a switch that ships from the factory. The switch has no configuration files, default user accounts, default security mode, Auto-sense-enabled ports, and performs a ZTP+ configuration after reboot. The 30-day factory license is also reset. If required, you must revoke the license file. Note: You can also use the unconfigure switch command to achieve the same behavior.
zero-touch	Boots the switch with a default configuration that enables Auto-sense. This parameter resets secure files but keeps the security mode and performs a ZTP+ configuration after reboot. License files are not removed.
zero-touch-config-only	Boots the switch with a blank configuration that enables Auto-sense and performs a ZTP+ configuration. This parameter preserves configuration files, primary and secondary configuration file names, user accounts and passwords, digital certificates, IKE/OSPF/IS-IS keys, license files, and SNMP communities. All ports are disabled and assigned to VLAN 1. Use this parameter as a temporary troubleshooting option to test or investigate if something is wrong with the configuration without permanently removing the configuration files, user accounts, and other preserved items.

For more information, see: