VOSS User Guide Version 8.10
>
Secure Shell
>
Configure Secure Shell using CLI
> Enable DSA Authentication
Published September 2023
Search this document
Print this page
Email this page
View PDF
Previous
Next
About this Document
Purpose
Conventions
Text Conventions
Documentation and Training
Help and Support
Send Feedback
New in this Document
Notice about Feature Support
Installation and Commissioning Documentation
Zero Touch Capabilities
Auto-sense
Auto-sense Port States
DHCP Port Snooping
Auto-sense Configuration using CLI
Enable Auto-sense on Port(s)
Disable Auto-sense on Port(s)
Configure Auto-sense IS-IS Level 1 Metric
Configure the Auto-sense Wait Interval Globally
Configure the Auto-sense Wait Interval for a Port
Configure Auto-sense IS-IS Authentication
Configure Auto-sense Access Ports
Disable Auto-sense DHCP Server Detection
Configure the Auto-sense Onboarding I-SID on the Switch
Configure a Auto-sense Global Data I-SID
Configure an Auto-sense Port Data I-SID
Configure Layer 2 Trusted Auto-sense Ports
Configure EAPoL Authentication Requirements for Auto-sense Fabric Attach Clients
Configure Auto-sense Fabric Attach (FA) Authentication
Configure an I-SID for Auto-sense Fabric Attach Clients
Configure a Management I-SID for Auto-sense Fabric Attach Proxy Switches
Display Auto-sense Configuration on the Switch
Configure Maximum EAP Clients on Auto-sense Ports
Configure Maximum MAC Clients on Auto-sense Ports
Configure Maximum NEAP Clients on Auto-sense Ports
Display Maximum EAP and NEAP Clients Configured on Auto-sense Enabled Ports
Auto-sense Configuration using EDM
Auto-sense Global Configuration using EDM
Enable LLDP Authentication of IP Phones
Configure Auto-sense Voice Information for IP Phones
Disable Auto-sense DHCP Server Detection
Configure Auto-sense Onboarding I-SID Globally
Configure the Auto-sense Wait Interval Globally
Configure Auto-sense Data I-SID Globally
Configure Layer 2 Trusted Auto-sense Ports
Configure Auto-sense IS-IS Authentication
Configure Auto-sense Access Ports
Configure Auto-sense for Fabric Attach
Configure Maximum MAC Clients on Auto-sense Ports using EDM
Configure Maximum EAP Clients on Auto-sense Ports using EDM
Configure Maximum NEAP Clients on Auto-sense Ports using EDM
Configure Level 1 Metric for Auto-sense
Auto-sense Port Configuration using EDM
View or Modify the Auto-sense Port Configuration
Enable Auto-sense on Port(s)
Disable Auto-sense on Port(s)
Configure an Auto-sense Data I-SID on a Port
Configure the Auto-sense Wait Interval for a Port
Auto-sense Logical Flowcharts
Auto-sense Fabric NNI
Auto-sense UNI Client without NAC
Auto-sense UNI Client with NAC
Auto-sense Voice without NAC
Auto-sense Voice with NAC
Auto-sense FA Proxy Switch
Auto-sense FA WAP, Camera, or OVS without NAC
Auto-sense FA WAP, Camera, or OVS with NAC
Automatic Channelization with Auto-sense
IP Phone Support
Auto-sense Voice
IP Phone Configuration using CLI
Configure Auto-sense Voice Information for IP Phones
Enable Auto-sense LLDP Authentication of IP Phones
Configure LLDP Vendor Specific Information
View LLDP Vendor Specific Information
View LLDP Neighbor Vendor Specific Information
Enable LLDP Voice Authentication on a Specific Port
IP Phone Configuration using EDM
View Vendor Specific Call Server Information
View Vendor Specific File Server Information
Zero Touch Deployment
Configuration Considerations
Zero Touch Provisioning Plus
ZTP+ Phases of Operation
ZTP+ Considerations
Configuring ZTP+ using the CLI
View ZTP+ Status
Zero Touch Fabric Configuration
Default IS-IS Parameters
Establishing IS-IS Adjacencies
LLDP Fabric Connect TLV
Configuration Example to Create an IS-IS Adjacency between the VSP 8600 Series and Auto-sense Switches
Segmented Management
Migration to Segmented Management Instance
Interface Types
CLIP
OOB
VLAN
Management Applications
DHCP Client for Segmented Management Instance
DHCP Client Restrictions
DHCP Option 43
DHCP Option 43 Configuration Examples
Dynamic Change Options for Segmented Management Instance Attributes
Segmented Management Instance Configuration using the CLI
Migrate a VLAN or CLIP IP address to the Segmented Management Instance
Configure a Segmented Management Instance Using quick-config-mgmt Utility
Create a Segmented Management Instance
Delete a Segmented Management Instance
Configure the DHCP Client for a Segmented Management Instance
Configure an IP Address for a Segmented Management Instance
Configure a Segmented Management Instance Interface as Default Topology IP
Configure Static Routes for a Management Instance
Configure Fragmented ICMP Packet Filtering on a Segmented Management Instance
View Fragmented ICMP packet filtering Statistics on a Segmented Management Instance
Configure MAC-offset for a Management VLAN Instance
Configure Management VLAN and VOSS Routing VLAN Coexistence Through Propagation
Change Management Instance Attributes
View Segmented Management Instance Information
View IP Address Information for a Segmented Management Instance
View Segmented Management Instance Statistics
Redistribution of CLIP Segmented Management Instance Examples
Segmented Management Instance Configuration using EDM
Migrate an IP Address to a Segmented Management Instance
Configure a Segmented Management Instance
Configure DHCP Client for a Segmented Management Instance
View IPv4 ARP Information for a Segmented Management Instance
View IPv6 ND Information for a Segmented Management Instance
Configure IPv4 Static Routes for a Management Instance
Configure IPv6 Static Routes for a Management Instance
View IPv4 Operational Routes for a Segmented Management Instance
View IPv6 Operational Routes for a Segmented Management Instance
View Topology IP for a Segmented Management Instance
Configure an IP Address for a Segmented Management Instance
Configure an IPv6 Address for a Segmented Management Instance
View Segmented Management Instance Statistics
View IP Address Statistics for a Segmented Management Instance
View IPv6 Address Statistics for a Segmented Management Instance
View IP ICMP Statistics for a Segmented Management Instance
View IPv6 ICMP Statistics for a Segmented Management Instance
View UDP Statistics for a Segmented Management Instance
View TCP Statistics for a Segmented Management Instance
View TCP Connections and UDP Endpoints Statistics for a Segmented Management Instance
Basic Administration
Fundamentals
advanced-feature-bandwidth-reservation Boot Flag
spbm-config-mode boot flag
nni-mstp boot config flag
System Connections
Boot Sequence
System logon
System Flags
Secure and Nonsecure Protocols
Client and Server Support
Password encryption
Enterprise Device Manager
Enterprise Device Manager access
Default user name and password
TLS server for secure HTTPS
Basic Configuration
Connect a Terminal
Changing passwords
Configuring system identification
Configuring the CLI Banner
Configure the Date
Enable Remote Access Services
Using Telnet to Log on to the Device
Enable the Web Management Interface
Enable the Web Server RO User
Configure the TLS Protocol Version
Access the Switch Through the Web Interface
Configure the Minimum Version of the TLS Protocol
Saving the configuration
Backing up configuration files
Resetting the platform
Remove a Software Build
Verification
Verify Boot Configuration Flags
Verify the Software Release
Display local alarms
Display log files
Basic Administration Procedures using CLI
Restart the platform
Resetting the platform
Shutting Down the System
Configure the Default Ping and Traceroute Context
Calculating the File Checksum
Resetting system functions
Sourcing a Configuration
Using the USB Device
Save a File to an External USB Device
Back Up and Restore the Compact Flash to an External USB Device
Copy Configuration and Log Files from a USB Device to Intflash
Display the Contents of a USB File
Move a File to or from a USB Device
Delete a file from a USB Device
Back Up Configuration Files to ZIP
Backing up configuration files to a ZIP file
Restore Configuration Files from a ZIP File
Basic administration procedures using EDM
Reset the Platform
Show the MTU for the System
Save the Configuration
Boot parameter configuration using the CLI
Modify the Boot Sequence
Configuring the remote host logon
Changing the primary or secondary boot configuration files
Display the Boot Configuration
Configure Serial Port Devices
Boot Flag Configuration using CLI
Reserve Bandwidth for Advanced Features
Display Advanced Feature Bandwidth Reservation Ports
Enable Debugging of the Configuration File During System Start
Enable Debug Mode
Enable a Switch as a DvR Leaf Node
Enable Factory Default Behavior
Return an Existing Configuration to Factory Defaults
Enable Flow Control
Enable IP Directed Broadcast
Enable System Logging
Enable MSTP and VLAN Configuration on NNI ports
Enable Automatic Reboot
Enable SPBM and IS-IS Configuration on the Switch
Configure the Syslog Output Format
Enable Trace Logs
Disable Syntax Checking of the Configuration File
Run-time process management using CLI
Configuring the time zone
Configure the Run-time Environment
Configuring CLI logging
Configure System Parameters
Configuring system message control
Extending system message control
Hardware status using EDM
Configure Polling Intervals
View Module Information
View Module Storage Usage
View Power Supply Parameters
View Power Supply Information
View System Temperature Information
View Chassis Temperatures
Command Line Interface
Command Line Interface Fundamentals
CLI Command Modes
Special CLI Command Modes
Default User Names and Passwords for CLI
Documentation convention for the port variable
Command Completion
default command operator
no command operator
GREP with CLI show command
Timestamp in show command outputs
Authentication for Privileged EXEC Command Mode
CLI Procedures
Logging on to the software
View the Configuration
Saving the configuration
Configure the Web Server
Using GREP CLI show command filters
Enterprise Device Manager
Enterprise Device Manager Fundamentals
Supported Browsers
Enterprise Device Manager Access
Default User Name and Password for EDM
Device Physical View
EDM Window
Navigation Pane
Menu Bar
Toolbar
Content Pane
EDM user session extension
EDM interface procedures
Connect to EDM
Configure the Web Management Interface
Use the chassis shortcut menu
Use the port shortcut menu
Use a table-based tab
Monitor Multiple Ports and Configuration Support
Open Folders and Tabs
Undock and dock tabs
Installing EDM help files
File Management in EDM
Copy a File
Display Storage Use
Display Internal Flash File Information
Display USB File Information
Image Management
Image Upgrades
Image Naming Conventions
Firmware Update And Verification With Digital Signed Certificate
Interfaces
File Storage Options
Before You Upgrade
Important Upgrade Note for Systems using IPv6 Static Neighbors
Pre-upgrade Instructions for IS-IS Metric Type
VLAN and MLT Upgrade Considerations
Digital Certificate Upgrade Considerations
Fast PoE and Perpetual PoE Upgrade Considerations
Calculate and Verify the MD5 Checksum for a File on the Switch
Calculate and Verify the MD5 Checksum for a File on a Client Workstation
Saving the Configuration
Upgrade the Software
Verifying the upgrade
Commit an Upgrade
Downgrade the Software
Remove a Software Build
Update the Complex Programmable Logic Device (CPLD) Image
Upgrade the Boot Loader Image
Address Resolution Protocol
Address Resolution Protocol
Reverse Address Resolution Protocol
ARP configuration using the CLI
Enabling ARP on a port or a VLAN
Enabling ARP proxy
View ARP Information
Configuring IP ARP static entries
Clearing ARP entries
Showing ARP table information
Configuring Gratuitous ARP
ARP configuration using Enterprise Device Manager
Enable or Disable ARP on a Port
Enable or Disable ARP on a VLAN
View ARP Entries
Create Static ARP Entries
Configure ARP Proxy
Alternative Routes
Route Preference
Preferences for Static Routes
Preferences for Dynamic Routes
Alternative Route Configuration using CLI
Enable IPv4 Alternative Routes
Enable IPv6 Alternative Routes
Alternative Route Configuration using EDM
Enable IPv4 Alternative Routes
Enable IPv6 Alternative Routes
IPv6 Alternative Routes Configuration Example
Application Telemetry
How Application Telemetry Works
Common Elements Between sFlow and Application Telemetry
Operational Considerations
Configuration Overview
Host Monitoring
Application Telemetry Configuration Using CLI
Configure the Agent IP Address
Configuring an Analytics Engine and Enabling Application Telemetry Globally
View Application Telemetry Counters
Clearing Application Telemetry Counters
Application Telemetry Configuration Using EDM
Enabling Application Telemetry Globally
Viewing Application Telemetry Counters
Clearing Application Telemetry Counters
Viewing Application Telemetry Status
Bidirectional Forwarding Detection
BFD Fundamentals
BFD Overview
BFD Operation
BFD States
BFD Configuration
BFD Considerations
BFD Configuration using CLI
Enable BFD Globally
Configure BFD on an IPv4 Interface
Configure BFD on an IPv6 Interface
Enable BFD at the BGP Application Level
Enable BFD at the OSPF Application Level
Configure BFD on an IPv4 Static Route
Configure BFD on an IPv6 Static Route
Clear BFD Session Statistics
Display BFD Global Configuration
Display BFD Configuration for an IPv4 Interface
Display BFD Configuration for an IPv6 Interface
Display BFD IPv4 Neighbor Information
Display BFD IPv6 Neighbor Information
Display BFD Statistics
BFD Configuration using EDM
Enable BFD Globally
Display BFD Sessions
Configure BFD for an IPv4 Interface on a Port
Configure BFD for an IPv6 Interface on a Port
Configure BFD for an IPv4 Interface on a VLAN
Configure BFD for an IPv6 Interface on a VLAN
Enable BFD for BGP Peers
Enable BFD for BGP Peer Groups
Enable BFD for BGPv6 Peers
Enable BFD for OSPF on an IPv4 Port Interface
Enable BFD for OSPF on an IPv4 VLAN Interface
Enable BFD for OSPF on an IPv6 Port Interface
Enable BFD for OSPF on an IPv6 VLAN Interface
Configure BFD on an IPv4 Static Route
Configure BFD on an IPv6 Static Route
Display BFD Performance Counters
BGP
BGP fundamentals
Autonomous Systems
BGP 4 Byte AS Support
Routing information consolidation
BGP Communities
BGP path attributes
BGP Route Selection
BGP and dampened routes
BGP Updates
Equal Cost Multipath
MD5 message authentication
BGP and route redistribution
BGP+
ECMP with BGP+
BGPv6
Circuitless IP
BGP Configuration Considerations and Limitations
BGP configuration using CLI
Configure BGP
Configure 4-byte AS numbers
Configure Aggregate Routes
Configure Allowed Networks
Configure BGP Peers or Peer Groups
Configure a BGP Peer or Peer Group Password
Configure Redistribution to BGP
Configure redistribution to BGP+ for VRF 0
Configure AS Path Lists
Configure Community Lists
Configure Extended Community Lists
Configure an AS Number for a Non-default VRF
BGP Verification Using CLI
Viewing BGP aggregate information
Viewing IPv6 BGP+ aggregate information
Viewing CIDR routes
View BGP Configuration
Viewing BGP confederation
Viewing flap-dampened routes
Viewing global flap-dampening configurations
Viewing imported routes
Viewing BGPv6 imported routes
View BGP Neighbors Information
Viewing BGPv6 neighbors information
Viewing BGP network configurations
Viewing IPv6 BGP+ network configurations
Viewing BGP peer group information
Viewing BGP redistributed routes
Viewing BGPv6 redistributed routes
View a Summary of BGP Configurations
Viewing a summary of BGPv6 configurations
Viewing BGP routes
Viewing BGPv6 routes
BGP configuration using EDM
Configure BGP
Configure 4-byte AS numbers
Viewing BGP Global Stats
Configure Aggregate Routes
Configure Aggregate IPv6 Routes
Configure Allowed Networks
Configure Allowed IPv6 Networks
Configure BGP Peers
Configure BGPv6 Peers
Configure Peer Groups
View IPv6 Community Attributes
Display Dampened Routes Information
Configure Redistribution to BGP
Configure Redistribution to BGPv6
View BGP+ or BGPv6 Route Summary Information
View BGP Route Summary
Configure an AS Path List
Configure a Community Access List
BGP Configuration Examples
IPv6 Tunnel Configurations for BGP+
eBGP+ peership between two switches with IPv6 Tunneling
iBGP+ peership on CLIP between two switches with IPv6 Tunneling
Native IPv6 eBGP peership between two switches on VRF
iBGP over User-created VRFs Configuration Example
Chassis Operations
Chassis operations fundamentals
Management Port
Entity MIB – Physical Table
Power Manager
Software Lock-up Detection
Jumbo frames
Multi-speed Ports
Auto-Negotiation
Default Auto-Negotiation Behavior
10/100/1000 Mbps Port Considerations
25 GbE Port Considerations
40 GbE Port Considerations
100 GbE Port Considerations
Auto-Negotiation Advertisements
SynOptics Network Management Protocol
Channelization
Feature Interaction with Channelization
Forward Error Correction
IEEE 802.3X Pause Frame Transmit
Auto MDIX
Chassis operations configuration using the CLI
Enabling jumbo frames
Configuring port lock
Configuring SONMP
View the Topology Message Status
Associating a port to a VRF instance
Configure Ethernet Ports with Auto-Negotiation
Configure Auto-Negotiation Advertisements
Configure IEEE 802.3X Pause Frame Transmit
Enable Channelization
Configure FEC on a Port
Configuring Serial Management Port Dropping
Configure Power to Module Slots
Enable the Locator LED
Enable or Disable the USB Port
View Fan Information
Configure Port Speed
Configure Port Speeds for All VIM Ports
Display Ports Speeds for All VIM Ports
View the Management Port Statistics
View Port Routing Statistics
Display Bridging Statistics for Specific Ports
Displaying Detailed Statistics for Ports
Chassis operations configuration using EDM
Edit System Information
Edit Chassis Information
View Physical Entities
View Entity Aliases
Viewing Entity Child Indexes
Configure System Flags
Configure Channelization
Configure Basic Port Parameters
Configure Basic Parameters on an Extreme Integrated Application Hosting Port
Configure IEEE 802.3X Pause Frame Transmit
View the Boot Configuration
Configure Boot Flags
Reserve Bandwidth for Advanced Features
Enable Jumbo Frames
Configure the Date and Time
Configure CP Limit
Configure CP Limit on an Extreme Integrated Application Hosting Port
Edit the Management Port Parameters
Automatically Reactivating the Port of the SLPP Shutdown
Edit Serial Port Parameters
Enable Port Lock
Lock a Port
View Power Information
View Power Status
View Fan Tray Information
View USB Port Information
View Topology Status Information
View the Topology Message Status
Configure a Forced Message Control Pattern
View Fan Information
Configure Port Speed for All VIM Ports
View Modular SSD Information
Graphing Chassis Statistics
Graphing Port Statistics
Viewing Chassis System Statistics
Viewing Chassis SNMP Statistics
Viewing Chassis IP Statistics
Viewing Chassis ICMP In Statistics
Viewing Chassis ICMP Out Statistics
Viewing Chassis TCP Statistics
Viewing Chassis UDP Statistics
Viewing Port Interface Statistics
Viewing Port Ethernet Errors Statistics
View Port Bridging Statistics
View Port Routing Statistics
Dynamic Host Configuration Protocol and User Datagram Protocol Configuration
DHCP option 82
DHCP Suboptions
Agent Operations
DHCP Relay for IPv6
DHCP Relay Network Topology and Workflow
UDP broadcast forwarding
DHCP Smart Relay for Secondary IP Interfaces
DHCP and UDP configuration using the CLI
Configure DHCP Parameters Globally
Show DHCP Relay Information
Configuring DHCP option 82
Configure DHCP Relay on a Port or VLAN
Displaying DHCP-relay Statistics for Specific Ports
Displaying DHCP-relay Statistics for all Interfaces
Configuring UDP broadcast forwarding
Configuring UDP protocols
Configuring a UDP port forward entry
Configuring the UDP port forwarding list
Showing UDP forward information
IPv6 DHCP Relay Configuration using CLI
Configure a DHCP Relay Forwarding Path
Configuring DHCP Relay for an interface
View DHCP Relay Information
Viewing IPv6 DHCP Relay Statistics
DHCP and UDP configuration using Enterprise Device Manager
Configure DHCP on a Brouter Port or a VRF Instance
Configure BootP/DHCP on a VLAN or VRF Instance
Configure DHCP Relay
Configure DHCP Relay on an IP Interface
Viewing DHCP Statistics for an Interface
Graphing DHCP Statistics for a Port
Viewing DHCP Statistics for a Port
Displaying DHCP-relay Statistics for Option 82
Graphing DHCP Statistics for a VLAN
Managing UDP forwarding protocols
Managing UDP forwarding
Creating the forwarding profile
Managing the broadcast interface
Viewing UDP endpoint information
IPv6 DHCP Relay Configuration using EDM
Configure a DHCP Relay Forwarding Path
Configuring DHCP Relay for an interface
Modifying DHCP Relay for a VLAN
Modifying DHCP Relay for a port
Viewing DHCP Statistics for an IPv6 Interface
Viewing IPv6 DHCP Relay Statistics for a Port
Domain Name Service
DNS fundamentals
DNS configuration using CLI
Configuring the DNS client
Querying the DNS host
DNS configuration using EDM
Configure the DNS Client
Query the DNS Host
Distributed Virtual Routing
Distributed Virtual Routing Fundamentals
DvR Domain
DvR Isolated Domains
DvR Controller
DvR Leaf Node
Eligibility Criteria for a Leaf Node
Summary of Controller and Leaf Node Functions
DvR backbone
DvR Backbone Members
DvR operation
ARP Learning
dvr-leaf-mode boot flag
In-band management
DvR deployment scenarios
DvR deployment in a single data center
DvR deployment in a dual data center
DvR Route Redistribution
Redistribution of IPv4 Local and Static Routes
Redistribution of Routes to OSPF or BGP
Route Redistribution and IS-IS Accept Policies
DvR Deployment for Wireless Roaming in Campus Deployments
Management I-SID Assignment to DvR Leaf
Using Ping or IP Traceroute for Hosts in the DvR-One-IP Subnet
DvR Restrictions
Configuration Restrictions on a DvR Controller
Configuration Limitations on a DvR Leaf
Restrictions on a DvR Isolated Controller
Migrate from VRRP to DvR
DvR-VRRP Coexistence
DvR and IPv6 VRRP Coexistence on the Same I-SID
Configuration Examples
DvR configuration using the CLI
Configure a DvR Controller
Configure an Isolated Controller on a DvR Isolated Domain
Variable Definitions
Disable Injection of Default Routes on a Controller
Configuring DvR route redistribution
Clearing DvR host entries
Configuring a DvR Leaf
Configuring vIST on a DvR Leaf node pair
Configure a Management VLAN on a DvR Leaf Node
Delete a Management VLAN on a DvR Leaf Node
Moving a vIST Leaf node pair from one domain to another
Move a vIST Controller Pair from One Domain to Another
Configure a non-DvR BEB to Join the DvR Backbone
Configure DvR-VRRP Coexistence
DvR show commands
View DvR Summary
Viewing members of a DvR domain
Viewing DvR interfaces
Viewing DvR host entries
Viewing DvR routes
Viewing DvR database information
Viewing DvR Backbone Entries
Viewing DvR backbone members
Viewing Layer 3 VSN information
Viewing DvR domain redistribution information
Configure a DvR Solution
DvR Configuration Using the EDM
Configure a DvR Controller or a DvR Leaf Globally
Configure DvR-VRRP Coexistence
View DvR Routes
View Members of a DvR Domain
View DvR Backbone Members
View Remote DvR Backbone Members
View DvR Interfaces
View DvR Host Entries
View Remote DvR Host Entries
Clear DvR Host Entries
View Layer 3 VSN Information
View the DvR Database
View the Remote DvR Database
View DvR Backbone Entries on a Controller
View Remote DvR Backbone Entries on a Controller
View DvR Multi-area SPB Backbone Entries on a Controller
View Remote DvR Multi-area SPB Backbone Entries on a Controller
Extensible Authentication Protocol over LAN
EAPoL
EAP terminology
EAP Configuration Considerations
Configuration Process
EAP System Requirements
EAP Dynamic VLAN Assignment
Multiple Host Multiple VLAN
Multiple Host Multiple VLAN Usage
EAP Functionality on Flex UNI Ports
EAP and Fabric Attach
MAC Move Detection on EAP Ports
Auto-sense Ports
RADIUS-Assigned VLAN or VLAN:ISID Bindings
RADIUS Configuration Prerequisites for EAP
RADIUS Accounting for EAP
RADIUS Dynamic User-Based Policies
NEAP host
NEAP Hosts on EAP Enabled Ports
NEAP MAC RADIUS Authentication
NEAP client
NEAP Client Re-Authentication
MAC Move for Authenticated Non-EAP Clients
NEAP MAC Learning and Authentication
EAP and NEAP Limitations
EAP and NEAP mac-max Settings
Example Scenarios
Multiple Host Single Authentication
EAP and NEAP MAC Clients on a Port with MHSA
Guest VLAN
Guest VLAN on a MHMV Port Usage Scenario
Guest VLAN on a MHSA Port Usage Scenario
Guest I-SID
EAP and NEAP separation
EAP and NEAP VLAN names
Fail Open VLAN with Continuity Mode
Fail Open I-SID with Continuity Mode
EAP Auto-ISID-Offset
Wake On LAN
EAPoL Configuration Using CLI
Globally enabling EAP on the device
Configure EAP on an Interface
Configuring EAP on a port
Configure an EAP-enabled RADIUS Server
Configure the Switch for EAP and RADIUS
Change the Authentication Status of a Port
Deleting an EAP-enabled RADIUS server
Configuring Fail Open VLAN
Display the Current EAP-Based Security Status
Displaying the port VLAN information
Configuring the format of the RADIUS password attribute when authenticating NEAP MAC addresses using RADIUS
Enabling RADIUS authentication of NEAP hosts on EAP enabled ports
Configuring the maximum MAC clients
Configuring maximum EAP clients
Configuring maximum NEAP clients
Configuring the Guest VLAN ID
Clearing NEAP session
Configuring EAP operational mode
Enabling dynamic changes to EAP sessions on a port
Configure EAP auto-isid-offset
Configure the Guest I-SID
Configure Fail Open I-SID
Configure Wake-On-LAN
Show the EAPoL Status of the Device
Show EAPoL Authenticator Statistics
View EAPoL Session Statistics
View Non-EAPoL MAC Information
View Port EAPoL Operation Statistics
EAP Configuration Using Enterprise Device Manager
Globally Configure EAP on the Server
Configure EAP on a Port
Configure EAP on an Extreme Integrated Application Hosting Port
Show the Port Access Entity Port Table
Show EAP Authentication
View Multihost Status Information
View EAP Session Statistics
Viewing EAPoL Authenticator Statistics
View NEAP MAC Information
View EAPoL Vendor Specific Attributes Information
ExtremeCloud IQ Support
ExtremeCloud IQ Agent Configuration Considerations
Zero Touch Deployment
DHCP Option 43 Support
Considerations
ExtremeCloud IQ Support Configuration using CLI
Configure ExtremeCloud IQ Agent
Configure Access to ExtremeCloud IQ
Configure Proxy Parameters
Display ExtremeCloud IQ Agent Information
Display ExtremeCloud IQ Agent Status
Reinstall ExtremeCloud IQ Agent Firmware
ExtremeCloud IQ Support Configuration using EDM
Configure ExtremeCloud IQ Agent
Extreme Integrated Application Hosting
Extreme Integrated Application Hosting
Extreme Integrated Application Hosting Ports
Connection Types
Link Flapping
Configuration Requirements
Third Party Virtual Machine
Fabric IPsec Gateway Fundamentals
Digital Certificates for Fabric IPsec Gateway
Egress Shaping for Fabric Extend Tunnels on Fabric IPsec Gateway
Operational Considerations and Restrictions
Virtual Services Configuration using CLI
Access a Virtual Service Console
Install a Virtual Service
Configure a Virtual Service
Shut Down a Virtual Service
Delete Virtual Service Resources
Uninstall a Virtual Service
Display Virtual Service Configuration
Display Virtual Service Installation Status
Display Virtual Services Resources
Run a VM command from Network Operating System (NOS) CLI
Copy VM Files
Change a VM User Password from Network Operating System (NOS) CLI
Upgrade a Virtual Service
Virtual Services Configuration using EDM
Viewing Virtual Services Resources
Configure a Virtual Service
Configuring Disks to be used by the Virtual Service
Configure Virtual Ports
Install a Virtual Service
Run a VM command from EDM
Copy VM Files
Change a VM User Password from EDM
Viewing Virtual Services Package File Information
Fabric IPsec Gateway Configuration using CLI
Upgrade a Fabric IPsec Gateway VM
Configure FTP Connection to an IP Address
Display the Default Directory on Fabric IPsec Gateway VM
Load Configuration File to Fabric IPsec Gateway VM
Ping an IP Address on Fabric IPsec Gateway VM
Configure Global Parameters on Fabric IPsec Gateway VM
Configure IPsec Tunnels on Fabric IPsec Gateway VM
Configure IPsec Compression
Enable Fragmentation Before Encryption on Fabric IPsec Gateway VM
Configure the Subject Identity on Fabric IPsec Gateway VM
Generate the Key Pair on Fabric IPsec Gateway VM
Configure a Trustpoint CA on Fabric IPsec Gateway VM
Generate the Certificate Signing Request on Fabric IPsec Gateway VM
Remove Keys and Certificates on Fabric IPsec Gateway VM
View the Certificate Details on Fabric IPsec Gateway VM
View the Certificate Configuration on Fabric IPsec Gateway VM
Configure Egress Shaping Rate for IPsec Tunnels on Fabric IPsec Gateway VM
Configure Logical Interface Tunnel on Fabric IPsec Gateway VM
Save Running Configuration to a File
Remove Configuration File from Fabric IPsec Gateway VM
Delete Global Configuration on Fabric IPsec Gateway VM
Delete IPsec Tunnel Configuration on Fabric IPsec Gateway VM
Delete Logical Interface Tunnel Configuration on Fabric IPsec Gateway VM
Display Data in a File on Fabric IPsec Gateway VM
Reboot Fabric IPsec Gateway VM
Reset Current Configuration on Fabric IPsec Gateway VM
Traceroute to an IP address on Fabric IPsec Gateway VM
Display the Default Configuration File on Fabric IPsec Gateway VM
Display IPsec Logs on Fabric IPsec Gateway
Display IPsec Routes on Fabric IPsec Gateway VM
Display IPsec Encryption Statistics on Fabric IPsec Gateway VM
Display the Status of IPsec Tunnels on Fabric IPsec Gateway VM
Displays the IPsec Configuration on the Fabric IPsec Gateway VM
Display the Logical Interface IPsec Configurations on the Fabric IPsec Gateway VM
Display Current Configuration on Fabric IPsec Gateway VM
Display Current Version of Fabric IPsec Gateway VM
Log Out of Fabric IPsec Gateway VM
Fabric Configuration Work Flow
Fabric Basics and Layer 2 Services
SPBM and IS-IS Infrastructure Fundamentals
spbm-config-mode boot flag
vxlan-gw-full-interworking-mode Boot Configuration Flag
MAC-in-MAC encapsulation
I-SID
BCBs and BEBs
VLANs without member ports
Basic SPBM network topology
E-Tree and Private VLAN topology
IS-IS
Standard TLVs
IS-IS Hierarchies
IS-IS PDUs
IS-IS Configuration Parameters
SPBM B-VLAN
Pre-populated FIB
RPFC
SPBM Unicast FIB
SPBM Restrictions
Network Load Balancing (NLB)
SPBM Script
Layer 2 Video Surveillance install script
IS-IS external metric
SPB Ethertype
Equal Cost Multipath Pathlist with Fabric Connect
FAN Transit
Auto-nickname for SPBM
Dynamic Nickname Assignment
MSTP-Fabric Connect Multi Homing
SPBM and IS-IS infrastructure configuration using CLI
Run the SPBM Script
Remove Existing SPBM Configuration
Configuring the IS-IS port interfaces using SPBM script
Removing specific IS-IS and MLT interfaces
Configure Minimum SPBM and IS-IS Parameters
Configure Minimum SPBM and IS-IS Parameters using auto-nni Command
Configure I-SIDs for Private VLANs
Displaying global SPBM parameters
Display Global IS-IS Parameters
Displaying IS-IS areas
Configuring SMLT parameters for SPBM
Configure Optional SPBM Parameters
Configuring optional IS-IS global parameters
Configuring Optional IS-IS Interface Level 1 Parameters
Display IS-IS Interface Parameters
Display the IP Unicast FIB, Unicast FIB, and Unicast Tree
Display IS-IS LSDB and Adjacencies
Display IS-IS Statistics and Counters
Run the Layer 2 Video Surveillance install script
Suspend Duplicate System ID Detection When Replacing a Switch
Configure Dynamic Nickname Assignment
Display Dynamic Nickname Assignment
Enable MSTP-Fabric Connect Multi Homing
Determine the Root Bridge in an MSTP-Fabric Connect Multi Homing Configuration
IS-IS external metric configuration using the CLI
Matching metric type for IS-IS routes
Setting metric type for IS-IS routes
Setting metric type for IS-IS routes using global redistribute command
SPBM and IS-IS infrastructure configuration using EDM
Configure Required SPBM and IS-IS Parameters
Displaying SPBM and IS-IS summary information
View the SPBM I-SID Information
View Level 1 Area Information
Configure SMLT Parameters for SPBM
Enable or Disable SPBM at the Global Level
Configuring SPBM parameters
Displaying SPBM nicknames
Configure Interface SPBM Parameters
Configure SPBM on an Interface
View the IP Unicast FIB
View the IPv6 Unicast FIB
View the Unicast FIB
View LSP Summary Information
View IS-IS Adjacencies
Configure IS-IS Global Parameters
Configuring system-level IS-IS parameters
View IS-IS System Statistics
Configure IS-IS Interfaces
Configure IS-IS Interface Level Parameters
View IS-IS Interface Counters
View IS-IS interface control packets
View Statistical Graph of IS-IS Interface Counters
View Statistical Graph of IS-IS Interface Sending Control Packet
View Statistical Graph of IS-IS Interface Receiving Control Packets
Configure an IS-IS Manual Area
Configure Dynamic Nickname Assignment
SPBM configuration examples
Basic SPBM configuration example
Ethernet and MLT configuration
IS-IS SPBM global configuration
IS-IS SPBM Interface Configuration
Verify SPBM Operations
Fabric Extend
Fabric Extend and ONA
Logical IS-IS Interface
Parallel Tunnel Support for Fabric Extend
IPsec Compression
IS-IS Hello Padding
IPsec Fragmentation Before Encryption
Adjusting the TCP Maximum Segment Size
Types of Fabric Extend Deployments
Fabric Extend Tunnel IS-IS MTU
IPsec Source IP Address Per Tunnel Interface
Fabric Extend Considerations
ONA Considerations
Fabric Extend configuration using the CLI
Configure Fabric Extend
Configure Fabric Extend on VSP 4450 Series
Configure Fabric Extend Over IPsec
Configure Static Source IP Address for IPsec Tunnel
Configure DHCP Source IP Address for IPsec Tunnel
Configure ESP Cipher Suite for IPsec
Disable IPsec Compression
Configure IS-IS Hello Padding
Enable IPsec Fragmentation Before Encryption
Disable IPsec Fragmentation Before Encryption
Adjust the TCP Maximum Segment Size
Displaying Fabric Extend over IPsec tunnel status
Configure BFD on a Fabric Extend Tunnel
Display IS-IS Logical Interfaces
Display BFD Fabric Extend Neighbor Information
Configure Global Source IP Address for IPsec Tunnel
Configure Destination IP Address for IPsec Tunnel
Fabric Extend Configuration using EDM
Configure Fabric Extend Tunnels
Configure Fabric Extend Logical Interfaces
Configure Fabric Extend Logical Interfaces for Native Support
Configure Fabric Extend Logical Interfaces for ONA Support
Adjust the TCP Maximum Segment Size
Display the Logical Interface Next Hop
Fabric Extend Configuration Examples
Fabric Extend over IP using the GRT
Fabric Extend over IP using a VRF
Fabric Extend over VPLS
Fabric Extend over Layer 2 Pseudowire
Fabric Extend with ONAs in the Core and Branches
Fabric Extend Over IPsec
Fabric Attach
FA Zero Touch Client Attachment
Fabric Attach Components
Fabric Attach Server
FA Proxies and FA Clients
Fabric Attach operation
FA TLVs
FA Element Discovery
FA data processing
FA Server and I-SID-to-VLAN Assignments
FA management
FA message authentication and integrity protection
Fabric Attach and Switched UNI
Fabric Attach Deployment Scenarios
Fabric Attach Considerations
Fabric Attach Configuration using the CLI
Configure Fabric Attach Globally
Configuring Fabric Attach discovery timeout
Configuring Fabric Attach assignment timeout
Enabling Fabric Attach on an interface
Configuring FA message authentication on an interface
Configuring the FA authentication key on an interface
Configure FA Management on a Port or MLT
View Fabric Attach Global Configuration Status
Viewing Fabric Attach interface configuration
Viewing Fabric Attach Discovered Elements
Viewing Fabric Attach I-SID-to-VLAN Assignments
Viewing Fabric Attach Statistics
Display Learned LLDP Neighbors
Display Switched UNI (ELAN) I-SID Information
Enabling or disabling FA Zero Touch Client Attachment
Displaying FA Zero Touch Client Attachment
Fabric Attach configuration using the EDM
Configure Fabric Attach Globally
Configure Fabric Attach I-SID-to-VLAN Assignments
Configure Fabric Attach Interface-level Settings
Viewing Fabric Attach discovered elements
Viewing FA statistics
View Global FA Statistics Graphically
View FA Port Statistics Graphically
Inserting a Zero Touch Client
Configure FA Zero Touch Client Auto Attach
Fabric Attach configuration examples
Configure a Fabric Attach Solution
Configure Fabric Attach in an SMLT
Endpoint Tracking
ExtremeCloud IQ - Site Engine Integration
Deployment Examples
Configuration Fundamentals
Configure Endpoint Tracking Using CLI
Configure Endpoint Tracking Interfaces
Configure Endpoint Tracking Globally
Configure Endpoint Tracking Visibility Mode
Display Endpoint Tracking Configuration Information
Configure Endpoint Tracking Using EDM
Configure Endpoint Tracking Interfaces
Configure Endpoint Tracking Globally
Display Binding Information
Multi-area SPB
Area Virtual Node
Remote IS-IS Instance
Multi-area SPB Redistribution and Policies
Layer 2 Redistribution
Layer 3 Unicast Redistribution
Multicast over SPB Redistribution
Distributed Virtual Routing Backbone Redistribution
Multi-area SPB Considerations and Restrictions
Duplicate System IDs Between IS-IS Areas
Duplicate Nick-Names Between IS-IS Areas
Multi-area SPB Configuration using CLI
Multi-area SPB Configuration Flow
Configure Remote IS-IS Multi-area SPB Nickname for an SPBM Instance
Configure Remote IS-IS Manual Area
Configure Remote IS-IS System ID
Configure an IS-IS Area Name
Configure IS-IS Multi-area SPB Virtual Node
Configure Remote IS-IS Hello Authentication on a Port
Configure Remote IS-IS Layer 1 Designated Router Priority on a Port
Configure Remote IS-IS Hello Interval on a Port
Configure Remote IS-IS Hello Multiplier on a Port
Configure Remote IS-IS SPBM Parameters on a Port
Enable Remote IS-IS on a Port
Enable Remote IS-IS Router Configuration Globally
Configure Multi-area SPB Layer 2 I-SID List
Configure Multi-area SPB Layer 2 I-SID Redistribution
Configure IS-IS Multi-area SPB IPv4 Unicast Redistribution
Configure IS-IS Multi-area SPB IPv6 Unicast Redistribution
Configure IS-IS Multi-area SPB IPv4 Unicast Redistribution on a VRF Instance
Configure IS-IS Multi-area SPB IPv6 Unicast Redistribution on a VRF Instance
Configure Multi-area SPB DvR Backbone Redistribution
Configure Multi-area SPB Layer 2 Multicast Snooping Redistribution
Configure Multi-area SPB IPv4 Routed Multicast Redistribution
Configure IS-IS Multi-area SPB IPv4 Routed Multicast Redistribution on a VRF Instance
Configure Multi-area Flags Functionality
Configure Multi-area SPB IPv4 Static I-SID Routed Multicast Redistribution
Variable Definitions
Multi-area SPB Verification using CLI
Display the Remote IS-IS SPBM Nickname Configuration
Display IS-IS Remote Area Configuration
Display IS-IS Area Configuration
Display IS-IS Area Virtual Node Configuration
Display IS-IS Multi-area SPB Layer 2 I-SID List Information
Display IS-IS Multi-area SPB I-SID Redistribution Configuration
Display IS-IS Multi-area SPB IPv4 Redistribution Configuration
Display IS-IS Multi-area SPB IPv6 Redistribution Configuration
Display IS-IS Multi-area SPB DvR Configuration
Display IS-IS Multi-area SPB Layer 2 Multicast Snooping Redistribution Configuration
Multi-area SPB Configuration using EDM
Configure Multi-area SPB Layer 2 I-SID List
Configure Layer 2 Multi-area SPB I-SID Redistribution
Configure Multi-area SPB Layer 2 Multicast I-SID Redistribution for Home Area
Configure Multi-area SPB L2 Multicast I-SID List Redistribution for Home Area
Apply Multi-area SPB Layer 2 Multicast Redistribution in Home Area
Configure Multi-area SPB Layer 2 Multicast I-SID Redistribution for Remote Area
Configure Multi-area SPB L2 Multicast I-SID List Redistribution for Remote Area
Apply Multi-area SPB Layer 2 Multicast Redistribution in Remote Area
Configure Multi-area SPB Layer 3 Redistribution in Home Area
Configure Multi-area SPB Layer 3 Redistribution in Remote Area
Configure Multi-area SPB Layer 3 Static I-SID Routed Multicast Redistribution Policy in Home Area
Configure Multi-area SPB Layer 3 Static I-SID Routed Multicast Redistribution Policy in Remote Area
Configure Multi-area SPB DvR Redistribution
Display Remote IS-IS and SPBM Summary
Configure Remote IS-IS Global Parameters
Configure Remote IS-IS Interfaces
Configure Remote IS-IS Interface Level Parameters
Configure Remote SPBM on an Interface
View Statistical Graph of Remote IS-IS Interface Counters
View Statistical Graph of Remote IS-IS Interface Sending Control Packets
View Statistical Graph of Remote IS-IS Interface Receiving Control Packet
Configure Remote IS-IS Manual Area
View Level 1 Remote Area Information
View Remote LSP Summary Information
View Remote IS-IS Adjacencies
Configure IS-IS Area Virtual Node
Configure Remote IS-IS Area Virtual Node
Configure Remote SPBM Parameters
Configure Remote SPBM Parameters on the Interface
View Remote SPBM I-SID Information
View Remote SPBM Nicknames
View Remote IP Unicast FIB
View Remote IPv6 Unicast FIB
View Remote Unicast FIB
View Remote Multicast FIB
View Remote IP Multicast over Fabric Connect Routes
View UNI Ports for remote IP Multicast Routes
View Remote IS-IS System Statistics
View Remote IS-IS Interface Counters
View Remote IS-IS Interface Control Packets
View the Remote I-SID Forwarding Database
Multi-area SPB Configuration Example
Layer 2 VSN configuration
Layer 2 VSN configuration fundamentals
SPBM Layer 2 VSN
Fabric Connect Service Types
Transparent Port UNI
Transparent Port UNI over vIST
Switched UNI
SPBM sample operation—L2 VSN
Layer 2 VSN configuration using the CLI
Configure SPBM Layer 2 VSN
Configure a Global I-SID Name
Displaying C-VLAN I-SID information
Configuring an SPBM Layer 2 Transparent Port UNI
View all Configured I-SIDs
View C-MACs Learned on T-UNI Ports for an I-SID
Viewing I-SID maximum MAC-limit
Configure an SPBM Layer 2 Switched UNI on an MLT
Configuring an SPBM Layer 2 Switched UNI on a Port
View All Configured Switched UNI I-SIDs
Display C-VLAN and Switched UNI I-SID Information
Layer 2 VSN configuration using EDM
Configuring SPBM Layer 2 VSN
Displaying the remote MAC table for a C-VLAN
Configure UNI
Associate a Port and MLT with an I-SID for Elan Transparent
Viewing the I-SID forwarding database
Associate a Port and MLT with an I-SID for Elan
Viewing the I-SID interface
Modify Global I-SID Name
Layer 2 VSN configuration examples
Layer 2 VSN Configuration Example
Verifying Layer 2 VSN operation
Layer 2 VSN Example with VLAN ID Translation
Inter-VSN Routing Configuration
Inter-VSN routing configuration fundamentals
Inter-VSN routing
Inter-VSN routing configuration using the CLI
Configure SPBM Inter-VSN Routing
Inter-VSN routing configuration using EDM
Configure BEBs for Inter-VSN Routing
Configure BCBs for Inter-VSN Routing
Inter-VSN Routing Configuration Example
Inter-VSN Routing with SPBM Configuration Example
Verifying Inter-VSN Routing operation
SBPM Reference Architectures
Campus Architecture
Large data center architecture
Solution-Specific Reference Architectures
Fabric Layer 3 Services
IP Shortcuts Configuration
IP Shortcuts configuration fundamentals
SPBM IP Shortcuts
SPBM IPv6 Shortcuts
IPv6 Shortcuts Dependency on IPv4 Shortcuts
Circuitless IPv6 (CLIPv6)
Migrating the GRT to IPv6 Shortcuts
IPv6 Shortcut Restrictions and Considerations
ECMP with IS-IS
ECMP within IS-IS routes
ECMP Impact on IS-IS Route Selection for Inter-VRF Routes with vIST
IS-IS IP Redistribution Policies
IS-IS Accept Policies
IS-IS Accept Policies and DvR
IS-IS Accept Policy Filters
IS-IS Accept Policies for the GRT and VRFs
IS-IS Accept Policies for Inter-VRF Route Redistribution
IS-IS Accept Policy Considerations
Route Preference
Route Metric
IP Shortcuts configuration using the CLI
Configuring SPBM IPv4 Shortcuts
Configure SPBM IPv6 Shortcuts
Configure Inter-VRF IPv4 Accept Policies on VRFs
Configure Inter-VRF IPv6 Accept Policies on VRFs
Configure IS-IS Accept Policies
View IS-IS Accept Policy Information
Configure IPv6 IS-IS Accept Policies
Displaying IPv6 IS-IS Accept Policy Information
IP Shortcuts configuration using EDM
Configure SPBM IP Shortcuts
Configuring IPv4 IS-IS redistribution
Configure IPv6 IS-IS Redistribution
Applying IPv4 IS-IS accept policies globally
Configure an IPv4 IS-IS Accept Policy for a Specific Advertising BEB
Configure an IS-IS Accept Policy to Apply for a Specific I-SID
Configure an IPv4 IS-IS Accept Policy for a Specific Advertising BEB and I-SID
Configure an I-SID List for an IPv4 IS-IS Accept Policy
Configure an IPv4 IS-IS Accept Policy for a Specific I-SID List
Configure an IPv4 IS-IS Accept Policy for a Specific Advertising BEB and I-SID-list
Apply IPv6 IS-IS Accept Policies Globally
Configuring an IPv6 IS-IS Accept Policy for a specific Advertising BEB
Configuring an IPv6 IS-IS Accept Policy for a specific I-SID
Configuring an IPv6 IS-IS accept policy for a specific advertising BEB and I-SID
Configure an I-SID List for an IPv6 IS-IS Accept Policy
Configuring an IPv6 IS-IS Accept Policy for a specific I-SID List
Configuring an IPv6 IS-IS Accept Policy for a specific Advertising BEB and I-SID List
IP Shortcuts SPBM Configuration Example
Layer 3 VSN Configuration
Layer 3 VSN Configuration Fundamentals
SPBM Layer 3 VSN
Enable/disable ICMP Response on VRFs/Layer 3 VSNs
Layer 3 VSN configuration using the CLI
Configure SPBM IPv4 Layer 3 VSN
Configure SPBM IPv6 Layer 3 VSN using CLI
Display SPBM IPv6 Unicast Forwarding Information Base
Display IS-IS Link State Database Information
Layer 3 VSN configuration using EDM
Configure SPBM IPv4 Layer 3 VSN
Configuring SPBM IPv6 Layer 3 VSN using EDM
Layer 3 VSN configuration example
VRF green configuration
VRF red configuration
Verifying Layer 3 VSN operation
Layer 3 Video Surveillance
Layer 3 Video Surveillance install script
Run the Layer 3 Video Surveillance install script
Internet Key Exchange
IKEv2
Using IKE for Secure AAA Server Communication
Restrictions
IKE Configuration using CLI
Configure an IKE Phase 1 Profile
Create an IKE Phase 1 Policy
Configuring profile to be used for IKE Phase 1 policy
Configure IKE Phase 2 Perfect Forward Secrecy
Configure the IKE Authentication Method
Configure Dead-Peer Detection Timeout
Enable the Admin State of IKE Phase 1 Policy
Display IKE Profiles
Display IKE Policies
Display IKE Security Association
Configure an IKEv2 Profile
Display IKEv2 Profiles
Configure x509 Certificate Identity
IKE Configuration using EDM
Configure Digital Certificate Subject Name
Configure IKE Phase 1 Profile
Configure IKEv2 Profile
Configure IKE Phase 1 Policy
Display IKE Phase 1 Security Association
Display IKE V2 Security Association
IP Multicast
IP multicast fundamentals
Enabling multicast on the switch
Overview of IP multicast
IP Multicast over Fabric Connect
Internet Group Management Protocol
IGMP Layer 2 Querier
IGMP Layer 2 Querier limitations
Multicast access control
Multicast stream limitation feature
Multicast Router Discovery protocol
Multicast flow distribution over MLT
Multicast virtualization
Protocol Independent Multicast-Sparse Mode
Rendezvous point router
Bootstrap router
Shared trees and shortest-path trees
Receiver Joining a Group
Receiver leaving a group
Source sending packets to a group
Required elements for PIM-SM operation
PIM-SM simplified example
PIM-SM Static Source Groups
Join and prune messages
Register and register-stop messages
PIM-SMLT
Protocol Independent Multicast-Source Specific Multicast
SSM features
PIM-SSM architecture
PIM-SSM Static Source Groups
Implementation of SSM and IGMP
Configuration limitations
PIM passive interfaces
Multicast route statistics
IP multicast network design
Multicast scalability design rules
IP multicast address range restrictions
Multicast MAC Address Mapping Considerations
Dynamic multicast configuration changes
IGMPv3 backward compatibility
TTL in IP multicast packets
Multicast MAC filtering
Guidelines for multicast access policies
Split-subnet and multicast
Protocol Independent Multicast-Sparse Mode guidelines
PIM-SM and PIM-SSM Scalability
PIM General Requirements
PIM and Shared Tree to Shortest Path Tree Switchover
PIM Traffic Delay and SMLT Peer Reboot
Circuitless IP for PIM-SM
PIM-SM and Static RP
Static RP and Auto-RP
Static RP and RP Redundancy
Unsupported Static RP Configurations
Rendezvous Point Router Considerations
Layer 3 Multicast Extended VLANS
PIM-SM Design and the BSR Hash Algorithm
Candidate RP Considerations
PIM-SM Receivers and VLANs
PIM Network with Non-PIM Interfaces
Source Filtering
Protocol Independent Multicast-Source Specific Multicast guidelines
Multicast for Multimedia
Layer 3 switch clustering and multicast SMLT
General guidelines
Multicast triangle topology
Square and full-mesh topology multicast guidelines
SMLT and multicast traffic issues
Protocol Independent Multicast over IPv6
PIM-SM over IPv6 features
Operational note for PIM-SM over IPv6
IPv6 interface multiple addresses
IP multicast configuration and DvR
IP multicast basic configuration using CLI
Configuring IP multicast in SMLT topologies
Configure PIM-SM Globally
Enable IPv6 PIM-SM Globally
Configure Global IPv6 PIM-SM Properties
Configure PIM on a VLAN
Configuring PIM on a port
Configuring SSM globally
Configuring IPv6 SSM globally
Configuring IGMP on a VLAN
Configure IGMP Ports
Configuring IGMP on a VRF
View IP Multicast Threshold Exceeded Statistics
IP multicast basic configuration using EDM
Configuring multicast on the switch
Enable IPv4 PIM-SM Globally
Enable IPv6 PIM-SM Globally
Enabling PIM on a port
Enabling IPv6 PIM on a port
Enable SSM Globally
Enable IPv6 SSM globally
Enabling PIM on a VLAN interface
Enabling IPv6 PIM on a VLAN interface
Configuring IGMP parameters on a port
Configuring IGMP parameters on a VLAN
Multicast Listener Discovery
MLD Fundamentals
MLD versions
MLD Querier
MLD snooping
MLD snooping configuration guidelines and restrictions
Limitations
MLD Configuration Using the CLI
Configuring MLD trap generation
Configuring MLD log status
Configuring MLD version
Configuring the MLD last listener query interval
Configuring the MLD query interval
Configuring the MLD query maximum response time
Configuring the MLD robustness
Enabling MLD snooping on a VLAN
Enabling MLD ssm-snooping on a VLAN
Display MLD Snooping Configuration Status
Display MLD Snooping Tracing Information
Display MLD Interface Information
Displaying MLD system parameters
Display MLD Cache Information
Display the MLD Group Information
View IPv6 MLD Host Cache
MLD Configuration Using EDM
Configuring MLD globally
Viewing the MLD SSM global information
MLD interface configuration
Configuring an MLD interface
Configuring MLD on a port
Configuring MLD on a VLAN
Configuring MLD snooping
Viewing the MLD snoop trace information
Viewing the MLD cache information
Viewing the MLD V2 cache information
Viewing IPv6 MLD host cache
Viewing the MLD source information
Viewing the MLD sender information
Viewing the MLD group information
PIM Configuration Using the CLI
Changing the interface status to passive
Changing the interface status to active
Configuring the PIM virtual neighbor
Configuring a candidate rendezvous point
Configuring static RP
Configuring IPv6 PIM static RP
Configuring a candidate BSR on a port
Configuring a candidate BSR on a VLAN
Enabling square-SMLT globally
PIM Configuration Using EDM
Enabling static RP
Enabling IPv6 static RP
Configuring a static RP
Configuring an IPv6 static RP entry
Viewing the active RP
Viewing the IPv6 active RP
Configuring a candidate bootstrap router
Viewing current BSR information
Changing VLAN interface type
Editing PIM interface parameters
Editing IPv6 PIM interface parameters
Configuring the PIM virtual neighbor
Viewing PIM-SM neighbor parameters
Viewing IPv6 PIM-SM neighbor parameters
Viewing IPv6 Neighbor Secondary Address
Viewing RP set parameters
Configuring a candidate RP
Enabling square-SMLT globally
Viewing IPv6 RP set parameters
Viewing IPv6 Mroute interface information
Viewing IPv6 Mroute next hop information
Configuring resource usage counter for IPv6 Mroute
Viewing IPv6 multicast route information
IGMP Configuration Using the CLI
Configuring multicast stream limitation on an Ethernet port
Configuring multicast stream limitation on a VLAN
Configuring VLAN multicast stream limitation members
Configuring multicast router discovery options
Configure Explicit Host Tracking
Configuring IGMP static members
Configuring SSM dynamic learning and range group
Changing the SSM range group
Configuring the SSM map table
Configuring multicast access control for an IGMP Ethernet port
Configuring multicast access control for a VLAN
Configuring Fast Leave Mode
Enabling fast leave mode on a port
Configuring IGMP fast leave members on a VLAN
Enable IGMP Layer 2 Querier
Enable IGMP Layer 2 Querier Address
IGMP configuration using EDM
Enabling IGMP snoop on a VLAN
Configuring IGMP interface static members
Configuring the SSM map table
Configure SSM Range and Global Parameters
Configuring multicast stream limitation on an interface
Configuring multicast stream limitation on a VLAN
Configuring multicast stream limitation on a port
Configuring multicast stream limitation members
Deleting multicast stream limitation member
Configuring the IGMP interface
Configuring IGMP sender entries
Configuring Fast Leave Mode
Configuring multicast access control for an interface
Viewing IGMP cache information
Viewing IGMPv3 cache
Viewing and editing multicast router discovery information
Viewing the IGMP router source list
Viewing IGMP snoop information
View IGMP Snoop Trace Information
View IGMP Group Information
Route management using the CLI
Configuring multicast stream limits
Configuring multicast static source groups
Configuring IP multicast software forwarding
Configuring the resource usage counter for multicast streams
Configuring prefix lists
Route management using EDM
View Multicast Route Information
View Multicast Next-Hop Information
View Multicast Interface Information
Adding new static source groups
Editing static source groups
Configuring IP multicast software forwarding
Configuring mroute stream limit
Configuring Mroute Stream Limit on an Extreme Integrated Application Hosting Port
Configuring resource usage counter for multicast streams
Multicast route statistics configuration using the CLI
Enabling IP multicast route statistics
Clearing IP multicast route statistics
Monitor IP Multicast Route Statistics
Enabling IPv6 multicast route statistics
Clearing IPv6 multicast route statistics
Monitoring IPv6 multicast route statistics
Multicast route statistics configuration using EDM
Enabling IP multicast route statistics
Viewing IP multicast route statistics
Enabling IPv6 multicast route statistics
Viewing IPv6 multicast route statistics
IP Multicast over Fabric Connect
IP Multicast over Fabric Connect basic configuration
IP Multicast over Fabric Connect Fundamentals
IP Multicast over Fabric Connect
IP Multicast over Fabric Connect and Universal Plug and Play Filtering
How IP Multicast over Fabric Connect works
IP Multicast config-lite for Fabric Connect
BEB as IGMP Querier
Switch Clustering at the Edge of the SPBM Network
Considerations when you connect an IP Multicast over Fabric Connect network to a PIM network
IP Multicast over Fabric Connect restrictions
SPBM Multicast FIB
Universal Plug and Play Filtering
IP Multicast over Fabric Connect Configuration using the CLI
Enabling IP Multicast over Fabric Connect globally
Display IP Multicast over Fabric Connect information
Configure IP Multicast config-lite for Fabric Connect
Display the Multicast FIB
Configure Universal Plug and Play (uPnP) Filtering
View uPnP Filtering information on an IGMP-enabled interface
IP Multicast over Fabric Connect configuration using EDM
Configure IP Multicast over Fabric Connect Globally
View IP Multicast over Fabric Connect Routes
Configure IP Multicast config-lite for Fabric Connect
Displaying the UNI ports for IP multicast routes
Displaying the multicast FIB
IP Multicast over Fabric Connect configuration examples
IP multicast over Fabric Connect global configuration
IP Multicast over Fabric Connect Services Configuration
Layer 2 VSN Configuration Fundamentals
Layer 2 VSN IP Multicast over Fabric Connect
Layer 2 VSN Configuration using the CLI
Configuring Layer 2 VSN IP Multicast over Fabric Connect
View Layer 2 VSN IP Multicast over Fabric Connect information
View IGMP Information for Layer 2 VSN Multicast
View TLV Information for Layer 2 VSN IP Multicast over Fabric Connect
Layer 2 VSN Configuration using EDM
Viewing the IGMP interface table
Configure IP Multicast over Fabric Connect on a Layer 2 VSN
Layer 2 VSN with IP Multicast over Fabric Connect configuration example
IP Shortcuts Configuration
IP Multicast over Fabric Connect within the GRT
IP Shortcuts Configuration using the CLI
Configure IP Multicast over Fabric Connect within the GRT
Configuring the VRF timeout value
Configuring the Global Routing Table timeout value
Viewing IP Multicast over Fabric Connect within the GRT information
View IGMP Information for IP Multicast over Fabric Connect within the GRT
View TLV Information for IP Multicast over Fabric Connect within the GRT
IP Shortcuts configuration using the EDM
Configuring IP Multicast over Fabric Connect on a VLAN within the GRT
Configuring IP Multicast over Fabric Connect on a brouter port within the GRT
Configuring the Global Routing Table timeout value
IP multicast over SPBM within the GRT configuration example
Layer 3 VSN Fundamentals
Layer 3 VSN with IP Multicast over Fabric Connect
Layer 3 VSN Configuration using the CLI
Configure Layer 3 VSN with IP Multicast over Fabric Connect
View Layer 3 VSN with IP Multicast over Fabric Connect Information
View IGMP Information for Layer 3 VSN Multicast
View TLV Information for a Layer 3 VSN with IP Multicast over Fabric Connect
Layer 3 VSN Configuration using EDM
Enable MVPN for a VRF
Configuring IP Multicast over Fabric Connect on a VLAN for Layer 3
Configuring IP Multicast over Fabric Connect on a brouter port for a Layer 3 VSN
Configuring IGMP on a VLAN interface for a Layer 3 VRF
Layer 3 VSN with IP Multicast over Fabric Connect configuration example
IP SPB Multicast Policy Configuration
IP SPB Multicast Policy fundamentals
IP SPB Multicast Policy
Static Data I-SID
IP SPB Multicast Policy Configuration Using CLI
Create an IP SPB Multicast Policy
Variable Definitions
Display IS-IS SPBM Static I-SID IP Multicast Route Information
Variable Definitions
IP SPB Multicast Policy Configuration using EDM
Configure IP SPB Multicast Policy
Display Static Data I-SID IP Multicast Routes Information
IPFIX
IPFIX Fundamentals
IPFIX Configuration Using CLI
Enabling IPFIX Globally
Displaying IPFIX Global Status
Configure the IPFIX Aging Interval
Configure the IPFIX Collector
Displaying IPFIX Collector Information
Configuring an IPFIX Observation Domain
Display IPFIX Flows
IPFIX Configuration Using EDM
Enabling IPFIX Globally
Configure the IPFIX Collector
IPsec
IPsec Fundamentals
Authentication header
Encapsulating security payload
IPsec modes
Security association
Security policy
IPsec NAT-T
Digital Certificates for IPsec Authentication
IPsec Limitations
IPsec configuration using CLI
Create an IPsec Policy
Enable an IPsec Policy
Create an IPsec Security Association
Configure an IPsec Security Association
Configure an IPsec Policy
Link the IPsec Security Association to an IPsec Policy
Enable IPsec on an Interface
Link an IPsec Policy to an Interface
Configure the IPsec Initiator with the IPsec Responder Remote NAT IP Address
Configure an IPsec NAT-T Responder
Configure Public Key Infrastructure for IPsec Tunnels
Display IPsec Information on an Interface
Displaying configured IPsec policies
Displaying IPsec security association information
Display Logical Interface IPsec and Authentication Key
View IPSec Statistics
IPsec configuration using EDM
Create an IPsec Policy
Create an IPsec Security Association
Link the IPsec Security Association to an IPsec Policy
Enable IPsec on an IPv6 Interface
Enable IPsec on an IPv4 Interface
Link an IPsec Policy to an Interface
Configure IPsec NAT-T
Display IPsec Interface Statistics
Graphing IPsec Interface Statistics
Display Switch Level Statistics for IPsec-Enabled Interfaces
Configure IPsec for the OSPF Virtual Link
IPsec configuration examples
IPsec configuration example
IPsec with ICMPv6 configuration example
OSPFv3 IPsec configuration example
OSPFv3 virtual link IPsec configuration example
IPsec configuration of TCP
IPv4 Routing Basics
IP routing operations fundamentals
IP addressing
Subnet Addressing
Supernet Addressing and CIDR
IPv4 Interface State
Loopback
Static routes
Static Route Tables
Routing Protocols
Black Hole Static Routes
VLANs and routing
Virtual Routing Between VLANs
Brouter Ports
Equal Cost Multipath
IP Source Routing
Multihoming
IPv4 ICMP Broadcast
IP routing configuration using the CLI
Enabling routing globally or on a VRF instance
Enabling routing on an IP interface
Deleting a dynamically learned route
Configuring IP route preferences
Flushing routing tables by VLAN or port
Assign an IP address to a Port
Modify an Existing IP Interface
View Primary IP Addresses for all Router Interfaces
View the IPv4 and IPv6 Interface Configuration on a Port
Configure IP Routing Globally or for a VRF
Configure ECMP
Configure Static Routes
Configure a Black Hole Static Route
Configuring a default static route
Configure IPv4 Fragmented ICMP Packet Filtering
Enabling ICMP Router Discovery globally
Enabling or disabling IPv4 ICMP broadcast globally
Enabling or disabling IPv4 ICMP broadcast per VRF
View IPv4 ICMP Statistics
Configuring Router Discovery on a port or VLAN
Configure a CLIP Interface
Display BFD Configurations on the Loopback Interface
Display the IPv4 Global Configuration
Viewing TCP and UDP information
IP routing configuration using Enterprise Device Manager
Enable Routing for a Router or a VRF Instance
Delete a Dynamically-Learned Route
Configure IP Route Preferences
Flushing routing tables by VLAN
Flushing routing tables by port
Assign an IP Address to a Port
View Primary IP Addresses
View all IP Addresses
Modify the Administrative State of an IP Interface on a Brouter Port
Configure IP Routing Features Globally
Configure ECMP
Configure Static Routes
Delete a Static Route
Configure a Default Static Route
Configure a Black Hole Static Route
Viewing IP routes
Configuring ICMP Router Discovery globally
Configure the ICMP Router Discovery Table
Configuring ICMP Router Discovery for a Port
Configure ICMP Router Discovery on a VLAN
Configure a Circuitless IPv4 Interface
Enabling OSPF on a CLIP interface
Enabling PIM on a CLIP interface
Enable BFD on a CLIP interface
Viewing TCP global information
Viewing TCP connections information
Viewing TCP listeners information
IPv6 Routing Basics
Origins of IPv6
Advantages of IPv6
Comparison of IPv4 and IPv6
IPv6 packet
IPv6 header
IPv6 extension headers
IPv6 address component summary
IPv6 address formats
Address types
Unicast addresses
Multicast addresses
Anycast
IP address prefix
Interface ID
How to write an IPv6 address
ICMPv6
Path MTU discovery
Routing
Route scaling
IPv6 Circuitless IP
Equal Cost Multipath
ECMP with static routes
Disable IPv6 ICMP multicast
Viewing IPv6 Connections
IPv6 Basic Configuration using CLI
Enable the IPv6–Mode Boot Config Flag
Configure an IPv6 Static Neighbor Address
Configure an IPv6 Interface
Assign IPv6 Addresses to a Brouter Port or VLAN
Configure IPv6 Route Preferences
View Global IPv6 Information
Create IPv6 Static Routes
View Routes Information
Creating an IPv6 CLIP interface
Enabling IPv6 ECMP
Configuring maximum number of ECMP paths
Disable IPv6 ICMP Multicast
Configure IPv6 Fragmented ICMP Packet Filtering
View IPv6 ICMP Statistics
Enabling Stateless Address Autoconfiguration
Viewing IPv6 default routers
Configuring an IPv6 prefix list
Clear IPv6 Statistics
View IPv6 Statistics on an Interface
Viewing IPv6 Connections using CLI
View TCP and UDP Information
IPv6 Basic Configuration using EDM
Enable the IPv6–Mode Boot Config Flag
Configure IPv6 Globally
Viewing ICMP Statistics
Configure an IPv6 Interface
Viewing IPv6 Statistics for an Interface
Configuring an IPv6 brouter port interface
Configure an IPv6 VLAN Interface
Assigning IPv6 addresses to interfaces
Assigning IPv6 addresses to a brouter port interface
Assigning an IPv6 address to a VLAN
Create IPv6 Static Routes
Configuring IPv6 route preferences
View Route Information
View IPv6 Default Routers
Configure a Circuitless IPv6 Interface
Configuring IPv6 Prefix List
Configuring an IPv6 Route Policy
Configuring IPv6 Route Redistribution Policies
Viewing IPv6 Connections using EDM
Viewing TCP global information
Viewing TCP connections information
Viewing TCP listeners information
Viewing UDP endpoint information
IPv6 Neighbor Discovery
Neighbor Discovery
ND messages
Neighbor discovery cache
Router discovery
Host autoconfiguration
Neighbor Discovery Configuration using CLI
Configuring an IPv6 discovery prefix
Configuring route advertisement
Configure the Neighbor Cache
View Cached Destination Information
Neighbor Discovery Configuration using EDM
Configuring an IPv6 discovery prefix
Configuring an IPv6 discovery prefix port
Configuring an IPv6 discovery prefix on a VLAN
Configuring route advertisement
Configuring route advertisement on an IPv6 interface for a brouter port
Configuring route advertisement on an IPv6 interface for a VLAN
Configuring the neighbor cache
Viewing cached destination information
IPv6-in-IPv4 Tunneling
Tunneling
Manually configured tunnels
Limitations
Tunneling Configuration using CLI
Configuring a tunnel
View Tunnel Interfaces
Modifying tunnel hop limits
Tunneling Configuration using EDM
Configuring a tunnel
Modifying tunnel hop limits
Modifying tunnel hop limits for a specific tunnel
Viewing IPv6 addresses on a tunnel
IPv6 Tunnel Configuration Example
Key Health Indicators (KHI)
Key Health Indicators Using the CLI
Display KHI Performance Information
Displaying KHI Control Processor Information
View KHI Segmented Management Instance Information
Clear KHI Information
Displaying KHI Fabric Extend ONA Status
Displaying KHI Fabric Extend ONA Global Information
Key Health Indicators Using EDM
Clearing KHI Statistics
Displaying KHI Port Information
View KHI Segmented Management Instance Statistics Information
Layer 2 Security
Layer 2 Security for IPv4 and IPv6 Deployments
Dynamic ARP Inspection (DAI)
First Hop Security
DHCPv6 Security Concerns
DHCPv6 Guard
DHCPv6 Guard Policies Configuration
RA Guard
RA Guard policies description
Capturing and verifying FHS specific packets against the configured policies
FHS limitations
Guidelines for FHS configuration
DHCP Snooping and Neighbor Discovery inspection
IP Source Guard
IPSG Limitations
Layer 2 Security Configuration Using the CLI
DHCP Snooping Configuration Using CLI
Enable or Disable DHCP Snooping globally
Enable or Disable DHCP Snooping on a VLAN
Configure Trusted and Untrusted Ports
Display DHCP Snooping Global Configuration
Display DHCP Snooping Interface Information
Add Static Entries to DHCP Snooping Binding Table
Clear Entries from DHCP Snooping Binding Table
Display DHCP Snooping Binding Table Information
Dynamic ARP Inspection Configuration Using CLI
Enable or disable Dynamic ARP Inspection on a VLAN
Configuring Trusted and Untrusted Ports
Display Dynamic ARP Inspection Interface Information
FHS configuration
Enable or Disable FHS Globally
Managing the FHS IPv6 access list
Displaying FHS IPv6 access list information
Managing the FHS MAC access list
Displaying FHS MAC access list information
Displaying current FHS configuration
DHCPv6 Guard Policy Configuration
Enable or Disable DHCPv6 Guard Globally
Manage the DHCPv6 Guard Policy
Attach a DHCPv6 Guard Policy to a Port
Configure DHCPv6 Guard in dhcp-guard Mode
Display the DHCPv6 Guard Policy
RA Guard Configuration
Enable or Disable RA Guard Globally
Manage the RA Guard Policy
Configure RA Guard on an Interface
Configure RA Guard in RA Guard Mode
Display RA Guard Configuration
IPv6 Neighbor Discovery inspection configuration
Enabling ND inspection globally
Clear Neighbor Discovery Inspection Statistics
Enabling Neighbor Discovery inspection on a VLAN
Enabling Neighbor Discovery inspection on a port
Viewing Neighbor Discovery inspection status globally
Viewing Neighbor Discovery inspection status on a port
Viewing Neighbor Discovery inspection statistics on a port
IPv6 DHCP Snooping Configuration
Creating a static Security Binding Table entry
Clearing a dynamic SBT entry
Enable IPv6 DHCP Snooping on a VLAN
Viewing IPv6 DHCP snooping and ND inspection status on a VLAN
Viewing SBT entries
IP Source Guard Configuration
Enable IP Source Guard on a Port for IPv4 Addresses
Disable IP Source Guard for IPv4 Addresses
View IP Source Guard Configuration on a Port
View IPv4 Address Bindings
Enable IP Source Guard on a Port for IPv6 Addresses
Disable IP Source Guard for IPv6 Addresses
Clear IP Source Guard Overflow Counters
View IP Source Guard Configuration for IPv6 Addresses
View IPv6 Address Bindings
Layer 2 Security Configuration using EDM
Dynamic ARP Inspection Configuration Using EDM
Configure Dynamic ARP Inspection on VLANs
Configure Dynamic ARP Inspection on Ports
Configure FHS Globals
IPv6 access list configuration
Creating IPv6 access list
View IPv6 access List
Delete the IPv6 Access List
MAC access list configuration
Create MAC Access List
View a MAC Access List
Delete a MAC Access List
DHCPv6 Guard Policy Configuration
Create DHCPv6 Guard Policy
View a DHCPv6 Guard Policy
Delete a DHCPv6 Guard Policy
RA Guard Policy Configuration
Create RA Guard Policy
View RA Guard Policy
Delete an RA Guard Policy
Port Policy Mapping Configuration
Create Port to Policy Mapping
View Port Policy Mapping
Delete Port Policy Mapping
DHCP Snooping Configuration Using EDM
Enable DHCP Snooping Globally
Configure DHCP Snooping on VLANs
Configure Trusted and Untrusted Ports
DHCP binding configuration
Create DHCP Binding Table Entries
Viewing DHCP Binding Information
SBT configuration
Create an SBT Entry
View SBT Entries
Delete an SBT Entry
IP Source Guard Configuration using EDM
Enable IP Source Guard on a Port for IPv4 Addresses
View IPv4 Address Bindings
Configure IP Source Guard on a Port for IPv6 Addresses
View IPv6 Address Bindings
Layer 2 security example scenarios
FHS Deployment Scenario
Creating FHS IPv6 ACL
Creating an FHS MAC ACL
Create a DHCPv6 Guard Policy for the Router
Create an RA Guard Policy for the Router
Attach FHS policies to the Interfaces
IPv6 DHCP Snooping and ND Inspection Configuration Example
Configure IP Source Guard
Licensing
Licensing Fundamentals
Factory Default Premier Trial License
License Types
Feature Licensing for VSP 4450 Series, VSP 4900 Series, VSP 7200 Series, VSP 7400 Series, VSP 8200 Series, and VSP 8400 Series
Port Licensing for the VSP 7200 Series
Subscription Licensing for XA1400 Series
XA1400 Series License Types and Part Numbers
License Installation using CLI
Install a License File
Extend the Factory Default Premier Trial License
Show a License File
License Installation using EDM
Install a License File
View License File Information
Link Aggregation Control Protocol
Link Aggregation Overview
MultiLink Trunking with LACP
Input/output port redundancy
LACP configuration considerations
Important Information and Restrictions
LACP with Simplified vIST/SPB NNI links
vIST VLAN IP addresses
Simplified vIST and egress port-based filters
LACP configuration using CLI
Configuring global LACP parameters
Configure LACP on a Port
Configure LACP on an MLT
Configuring LACP and Private VLANs
Viewing LACP configuration information
Displaying LACP Statistics for Specific Ports
LACP configuration using EDM
Configuring global LACP parameters
Configuring LACP parameters
Configure LACP on a Port
Configuring LACP on an Extreme Integrated Application Hosting Port
Viewing LACP Port Statistics
Link Layer Discovery Protocol
Link Layer Discovery Protocol (802.1AB) Fundamentals
Link Layer Discovery Protocol-Media Endpoint Discovery
Link Layer Discovery Protocol configuration using CLI
Configuring global LLDP transmission parameters
Configuring LLDP status on ports
Enable CDP Mode on a Port
Configure LLDP Tx-TLVs
Enable Dot3 LLDP TLVs
Configure LLDP MED TLVs for Transmission on Ports
View Global LLDP Information
View LLDP Neighbor Information
Viewing global LLDP statistics
Viewing Port-based LLDP Statistics
LLDP-MED Configuration Using CLI
Configure LLDP-MED Network Policies on Ports
Configure LLDP-MED Civic Address Location Information
Configure LLDP-MED Coordinate Based Location Information
Configure LLDP-MED Emergency Call Service Location
Display Local LLDP-MEDLocation Information
Display LLDP-MED Local Network Policies Configuration
Link Layer Discovery Protocol configuration using EDM
Configure LLDP Global Information
View the LLDP Port Information
View LLDP Transmission Statistics
View LLDP Reception Statistics
View LLDP Local System Information
View LLDP Local Port Information
View LLDP CDP Remote Information
View LLDP Neighbor Information
LLDP-MED Configuration Using EDM
View LLDP-MED Local Policy Information
Add LLDP-MED Local Location Information
View LLDP-MED Local PoE PSE Information
View LLDP-MED Neighbor Capabilities Information
View LLDP-MED Neighbor Policy Information
View LLDP-MED Neighbor Location Information
View LLDP-MED Neighbor PoE Information
View LLDP-MED Neighbor PoE PSE Information
View LLDP-MED Neighbor PoE PD Information
View LLDP-MED Neighbor Inventory Information
Link State Change Control
Link Debounce
Link State Change Control Using CLI
Controlling Link State Changes
Displaying Link State Changes
Configure Link Debounce
Link State Change Control Using EDM
Controlling Link State Changes
Configure Link Debounce
Link-state tracking (LST)
Link-state tracking (LST) Overview
LST Configuration Using CLI
Configure LST
LST Configuration Using EDM
Configure LST
Logs and Traps
Logs and Traps Fundamentals
Overview of Traps and Logs
Secure Syslog
Simple Network Management Protocol
Log Message Format
Log Files
Log File Transfer
Email Notification
Log Configuration Using CLI
Configure a UNIX System Log and Syslog Host
Configuring Secure Forwarding
Installing Root Certificate for Syslog Client
Configuring Logging
Configuring the Remote Host Address for Log Transfer
Configuring System Logging
Configuring System Message Control
Extending System Message Control
Viewing Logs
Configuring CLI Logging
Configure Email Notification
Configure Certificate Authority Trustpoint for Syslog
Variable Definitions
Configure the Minimum Version of TLS for Syslog
Variable Definitions
Log Configuration Using EDM
Configure the System Log
Configure the System Log Table
Configure the Syslog Certificate Authority Common Name
Configure Email Notification
SNMP Trap Configuration Using CLI
Configuring an SNMP Host
Configuring an SNMP Notify Filter Table
Configure SNMP Interfaces
Enabling SNMP Trap Logging
SNMP Trap Configuration Using EDM
Configure an SNMP Host Target Address
Configure Target Table Parameters
Configure SNMP Notify Filter Profiles
Configure SNMP Notify Filter Profile Table Parameters
Enable Authentication Traps
View the Trap Sender Table
MACsec
MACsec Fundamentals
MACsec keys
MACsec Security Modes
Connectivity Associations and Secure Channels
MACsec 2AN and 4AN mode
MACsec components
MACsec Key Agreement Protocol
MACsec Encryption Cipher Suites
MACsec Operation
Automatic QoS Priority for MACsec Packets on Intermediate Switches
MACsec Configuration Using CLI
Configure MACsec Encryption on a Port
Configure a MACsec Cipher Suite on a Port
Configure a Connectivity Association
Update the Connectivity Association for a port
View MACsec Status
View the MACsec Connectivity Association Details
Configure Static MACsec using CLI
Enable Static MACsec on a Port
Configure the Confidentiality Offset on a Port
Configure MKA MACsec using CLI
Create an MKA Profile
Apply an MKA Profile to a Port
Configure MKA Actor Priority
Enable MKA on a Port
Configure MKA Confidentiality Offset
Configure MKA Replay Protect
Configure SCI Tagging for a MACsec Enabled Switch
Display MKA Profiles
Display MKA Participants
MACsec Configuration using EDM
Configure Connectivity Associations
Associate a Port with a Connectivity Association
Configure MKA MACsec using EDM
Configure an MKA Profile
Apply an MKA Profile to a Port
Enable MKA on a Port
Configure MKA Actor Priority
MACsec Performance
MACsec Statistics
Interoperability Behaviors
View MACsec Statistics using CLI
View MACsec Statistics
Clear MACsec Statistics
View MKA MACsec Statistics using CLI
Display MKA Statistics
Clear MKA Statistics
View MACsec Statistics using EDM
View MACsec Interface Statistics
View Secure Channel Inbound Statistics
View Secure Channel Outbound Statistics
View MKA MACsec Statistics using EDM
Display MKA Statistics for a Port
MultiLink Trunking and Split MultiLink Trunking
Virtual Inter-Switch Trunk (vIST)
Simplified Virtual-IST
MultiLink Trunking
Split MultiLink Trunking
SLPP Guard
MLT and SMLT Configuration Requirements
MLT and Private VLANs
MLT and SMLT link aggregation configuration using the CLI
Configure an MLT
Viewing MLT Statistics
Viewing MLT port members
Adding ports to an MLT LAG
Removing ports from an MLT LAG
Create an SMLT from an Existing MLT
Virtual interswitch trunk (vIST)
Creating a Virtual IST
Viewing vIST Statistics
Editing a virtual IST
Configuring Simplified vIST in SMLT topologies
Viewing all ports configured for SMLT
Viewing information about collision errors
Viewing information about Ethernet errors
SLPP Guard configuration
Configuring SLPP Guard
Reenabling an operationally disabled port
Viewing SLPP Guard status
MLT and SMLT Link Aggregation Configuration using EDM
Adding a multilink or LACP trunk
Adding ports to an MLT
Viewing SMLT Statistics
Viewing MLT Interface Statistics
Viewing MLT Ethernet Error Statistics
Viewing trunks
Create a Virtual IST using EDM
Editing a virtual IST
Configuring Simplified vIST in SMLT topologies
SLPP Guard configuration
Configuring SLPP Guard
Reenabling an operationally disabled port
Viewing SLPP Guard status
MLT Configuration Examples
MultiLink Trunking
MultiLink Trunking with Link Aggregation Control Protocol
MLT network topology and configuration reference
Example 1: Switch-to-switch MLT
Example 2: Switch-to-server MLT
Example 3: Client/Server MLT
Network Time Protocol
NTP fundamentals
NTP Overview
NTP system implementation model
Time distribution within a subnet
Synchronization
NTP Modes of Operation
NTP authentication
NTP Configuration Using CLI
Enable NTP Globally
Add an NTP Server
View NTP Statistics
Configure Authentication Keys
Configure NTP Master Mode
Create NTP Restrict Entries
NTP Configuration Using EDM
Configure NTP Globally
Add an NTPv4 Server
Configure Authentication Keys for NTPv4
Create NTPv4 Restrict Entries
OSPF
OSPF fundamentals
OSPF overview
OSPFv3
Dijkstras algorithm
Autonomous system and areas
OSPF neighbors
Router types
OSPF Interfaces
OSPFv3 Support for CLIP Interfaces
OSPF and IP
OSPF Packets
Intra-area Link-state Advertisements
ASE routes
OSPF virtual links
OSPF ASBRs
OSPF metrics
OSPF security mechanisms
IPsec Support with OSPFv3
OSPF and route redistribution
ECMP with OSPFv3
OSPFv3 and Route Redistribution
OSPF configuration considerations
OSPF host route advertisements and nonbackbone areas
OSPF with switch clustering
OSPF Graceful Restart
Helper Mode
Open Shortest Path First guidelines
OSPF configuration using CLI
Configuring OSPF globally
Configure OSPF for a Port or VLAN
Viewing OSPF errors on a port
Configuring OSPF areas on the router
Viewing the OSPF area information
Configuring OSPF aggregate area ranges on the router
Viewing the OSPF area range information
Enabling automatic virtual links
Configuring an OSPF area virtual interface
Configure an OSPF area on a VLAN or port
Configuring an OSPF host route
Configuring OSPF NBMA neighbors
Enabling or disabling Helper mode for OSPFv2
Apply OSPF Route Acceptance Policies
View the OSPF Configuration Information
Viewing the OSPF link-state database
Viewing the OSPF external link-state database
Configuring route redistribution to OSPF
Viewing the OSPF redistribution configuration information
Configuring interVRF route redistribution for OSPF
Forcing shortest-path calculation updates
Viewing the OSPF default cost information
Viewing the OSPF timer information
Viewing the OSPF neighbor information
Viewing the OSPF authentication information
View the OSPF Interface Statistics
View OSPF Range Statistics
Clearing IP OSPF Statistics
Showing OSPF Error Statistics on a Port
Viewing Basic OSPF Statistics for a Port
Showing Extended OSPF Statistics
Viewing the OSPF virtual link information
Viewing the VRF configurations
Viewing the VRFIDS
OSPFv3 Configuration using CLI
Configuring OSPF globally
Creating an OSPF area
Creating OSPF area ranges
Creating an OSPF virtual link
Configure IPsec for the OSPF Virtual Link
Configuring OSPF default metrics
Configuring OSPF on a port or VLAN
Configuring OSPF on a tunnel
Configure OSPFv3 on the CLIP Interface for the Global Router
Configure OSPFv3 on the CLIP Interface for a VRF Instance
View OSPFv3 Information
Viewing OSPFv3 Default Cost Information
Adding an NBMA neighbor
Configuring link LSA suppression
Configuring Route Redistribution to OSPFv3 in GRT mode
Viewing the Status of OSPFv3 Redistribution
View OSPFv3 Statistics
Clear OSPFv3 Statistics
Disabling Helper mode for OSPFv3
OSPF configuration using EDM
Configuring OSPF globally
Enabling OSPF globally
Configuring global default metrics
Configure an OSPF interface
Changing an OSPF non-passive interface type
Changing an OSPF passive interface type
View the OSPF Advanced Interface
Configuring NBMA interface neighbors
Configuring OSPF interface metrics
Viewing all OSPF-enabled interfaces
Configure OSPF on a Port
Viewing Port OSPF Statistics
Graphing OSPF Statistics for a Port
Configure OSPF on a VLAN
Graphing OSPF Statistics for a VLAN
Viewing graphs for OSPF on a VLAN
Creating stubby or not-so-stubby OSPF areas
Configuring stub area metrics advertised by an ABR
Inserting OSPF area aggregate ranges
Enabling automatic virtual links
Configuring a manual virtual interface
Viewing virtual neighbors
Configuring host routes
Enabling ASBR status
Managing OSPF neighbors
View the Link-State Database
View the Local Link-State Database
View AS-Scope Link-State Advertisements
View Virtual Links in the Link-State Database
View the Area LSA Count
View OSPF Statistics
Configure Route Redistribution to OSPF
Forcing shortest-path calculation updates
OSPFv3 Configuration using EDM
Configuring OSPFv3 globally
Creating an OSPFv3 Area
Create OSPFv3 Area Ranges
Creating an OSPFv3 Virtual Link
Create an OSPF Interface on a Brouter Port
Create an OSPF Interface on a CLIP
Create an OSPF VLAN Interface
Create an OSPF Interface on a Tunnel
Viewing the AS-scope link-state database
Viewing the area-scope LSDB
Viewing the link-scope LSDB
Adding an NBMA neighbor
Configuring Route Redistribution to OSPFv3
Modify an OSPFv3 Interface
Viewing OSPFv3 neighbors
Viewing virtual neighbors
View OSPFv3 Statistics
OSPFv3 Configuration Example
Port Performance Management
Digital Diagnostic Monitoring
Port Performance Management Using CLI
Configure DDM
View DDI Port Information
View DDI Temperature Information
View DDI Voltage Information
Port Performance Management using EDM
View DDI Information
Power over Ethernet Fundamentals
PoE Overview
PoE Detection Types
Power Usage Threshold
Port Power Limit
Port Power Priority
PoE/PoE+ Allocation Using LLDP
Fast PoE and Perpetual PoE
PoE Ports in EDM
Power over Ethernet Configuration using CLI
Disabling PoE on a port
Configure PoE Detection Type
Configuring PoE Power Usage Threshold
Configure Power Limits for Channels
Configuring Port Power Priority
Enable Fast PoE Globally
Enable Perpetual PoE Globally
Enable Fast PoE on a Port
Enable Perpetual PoE on a Port
Display Global PoE Configuration
Displaying PoE Port Status
Displaying Port Power Measurement
Power over Ethernet configuration using EDM
Configure PoE Globally
Configure PoE on Ports
Power Savings
Energy Saver
Energy Efficient Ethernet
Power Savings Configuration Using CLI
Enable Energy Saver on Ports
Create an Energy Saver Schedule
Enable Energy Saver Globally
Enable and Configure Energy Saver using Quick Configuration
Activate or Deactivate Energy Saver Manually
Energy Saver Show Commands
Display Energy Saver Global Information
Display Energy Saver Interface Information
Display Energy Saver Power Savings Information
Display Energy Saver Schedule Information
Enable Energy Efficient Ethernet (EEE)
Display Energy Efficient Ethernet (EEE) Statistics
Clear Energy Efficient Ethernet (EEE) Statistics
Power Savings Configuration Using EDM
Enable Energy Saver Globally
Configure Energy Saver Schedule
Enable Energy Saver or EEE on Ports
Enable Energy Saver or EEE on Ports
Enable Energy Saver or EEE on Ports
View Energy Savings
Display Energy Efficient Ethernet Statistics
Quality of Service
QoS fundamentals
Introduction to QoS
Traffic management
Differentiated Services (DiffServ)
Traffic traversing the switch
Classification and mapping
Service classes
Internal QoS level
Ingress mappings
Egress mappings
Port-Based Rate Limiting, Policing, and Shaping
Ingress port-rate limiter
Queuing
CPU Queues
Queue profiles
Configuration considerations
QoS Support for 10 GbE Interface in 1GbE mode
802.1p and 802.1Q Best Practices
Network congestion and QoS design
Layer 2 and Layer 3 trusted and untrusted ports
Broadcast, Unknown Unicast, and Multicast Traffic Bandwidth Limiters per Ingress Port
QoS and VoIP
QoS re-marking on a Transparent Port UNI
QoS and Channelization
QoS examples and Best Practices
Egress Tunnel Shaping
QoS Behavior Differences
Basic DiffServ configuration using CLI
Enabling DiffServ on a port
Configuring Layer 3 trusted or untrusted ports
Configuring Layer 2 trusted or untrusted ports
Viewing the port 802.1p override status
Configuring the port QoS level
Basic DiffServ configuration using EDM
Enabling DiffServ for a port
Configuring Layer 3 trusted or untrusted ports
Configuring Layer 2 trusted or untrusted ports
Configuring the port QoS level
QoS configuration using CLI
Configure Broadcast, Unknown Unicast, and Multicast Bandwidth Limiting
Viewing the port-based shaper information
Configuring the port-based shaper
Configuring a port-based policer
View Ingress Policer Statistics
Configuring the ingress port-rate limiter
View the Ingress Port-Rate Limit Information
Viewing Ingress Port-rate Limit Statistics
Configuring ingress mappings
Configuring egress mappings
View Port Egress CoS Queue Statistics
Clearing port egress CoS queue statistics
View CPU Queue Statistics
Clearing CPU queue statistics
Display CPU COSQ Counters
Configure an Egress QoS Queue Profile
Configure Egress Tunnel Shaping
Viewing Logical Interface CoS Queue Statistics
Clearing Logical Interface CoS Queue Statistics
QoS configuration using EDM
Configuring port-based shaping
Configure Port-Based Policing
View Port Policer Statistics
Configuring ingress port-rate limiter
Graphing Stat Rate Limit Statistics for a Port
Modifying ingress 802.1p to QoS mappings
Modifying ingress DSCP to QoS mappings
Modifying egress QoS to 802.1p mappings
Modifying egress QoS to DSCP mappings
Viewing port egress CoS queue statistics
Clearing CPU statistics for the chassis
Viewing CPU queue statistics
View Tunnel CoS Queue Statistics
Configuring an egress QoS queue profile
Editing queue profile information
Configure Port Rate Limits
Configuring Rate Limits on an Extreme Integrated Application Hosting Port
RADIUS
RADIUS Fundamentals
RADIUS Server Support for IPv6
How RADIUS Works
Configuration of the RADIUS Server and Client
RADIUS Authentication
Use of RADIUS to Modify User Access to CLI Commands
RADIUS Accounting
RFC 4675 RADIUS Attributes: Egress VLAN
RADIUS Server Reachability
RFC 3580 RADIUS Attributes: IEEE 802.1X Remote Authentication Dial In User Service
RFC 5176 — Dynamic Session Change
RADSec
RADIUS configuration using CLI
Configure RADIUS Attributes
Configuring RADIUS profile
Enabling RADIUS authentication
Enabling RADIUS accounting
Enabling RADIUS-SNMP accounting
Configuring RADIUS accounting interim request
Configure RADIUS Authentication and RADIUS Accounting Attributes
Add a RADIUS Server
Modify RADIUS Server Settings
View RADIUS Information
View RADIUS Server Information
Showing RADIUS Server Statistics
Configuring RADIUS server reachability
Displaying RADIUS server reachability
Showing RADIUS SNMP configurations
Displaying RADIUS dynamic server information
Configuring a RADIUS dynamic-server client
RADSec Configuration Using CLI
Create and Configure a RADIUS Secure Profile
Display RADIUS Secure Profile information
Associate a RADSec Profile with a RADIUS Server
Configure RADSec Secure Mode
Enable RADSec
Change the logging level for RADSec secure profile
Display Log Information for Secure RADIUS Instance
RADIUS configuration using Enterprise Device Manager
Enable RADIUS Authentication
Enable RADIUS Accounting
Disable RADIUS Accounting
Enable RADIUS Accounting Interim Request
Add a RADIUS Server
Showing RADIUS Server Statistics
Reauthenticate the RADIUS SNMP Server Session
Configure RADIUS SNMP
Modify a RADIUS Configuration
Delete a RADIUS Configuration
Configure RADIUS Server Reachability
Configure a RADIUS Dynamic-server Client
Displaying RADIUS CoA Disconnect Statistics
Displaying RADIUS CoA Reauthenticate Statistics
Displaying RADIUS CoA Statistics
RADSec Configuration Using EDM
Configure a RADIUS Secure Profile
RADIUS Attributes
Vendor Specific Attributes
RADIUS Vendor Specific Frame Format
FA-VLAN-ISID
FA-Client-Type
Extreme-Dynamic-MHSA
Extreme-Dynamic-ACL
Extreme-Dynamic-Config
Operational Considerations
Examples
Extreme-Dynamic-Client-Assignments
Operational Considerations
EAP-Port-Priority
IETF Attributes
VLAN RADIUS Attributes
EGRESS-VLAN-ID
EGRESS-VLAN-NAME
RADIUS Tunnel Attributes
Representational State Transfer Configuration Protocol (RESTCONF)
Representational State Transfer Configuration Protocol (RESTCONF) Fundamentals
RESTCONF configuration using CLI
Enable the RESTCONF Server
Configure HTTPS Access to the RESTCONF Server
Modifying the RESTCONF Server Settings
Showing the RESTCONF Configuration Information
Show Conflicting Interface Name Information
Show Special Characters in VLAN or MLT Names
RESTCONF Configuration using EDM
Configuring the RESTCONF Server
Use Representational State Transfer Configuration Protocol (RESTCONF) to Configure a Switch
RESTCONF Operational Behavior Examples
RIP
RIP fundamentals
Routing Information Protocol
RIP and route redistribution
RIPng fundamentals
RIP configuration using CLI
Configuring RIP globally
Configuring RIP on an interface
Configuring route redistribution to RIP
Configuring interVRF route redistribution for RIP
Forcing a RIP Update for a Port or VLAN
Viewing the RIP redistribution configuration information
RIPng Configuration using CLI
Configuring RIPng globally
Configuring RIPng on an interface
Configuring RIPng custom values
Configuring RIPng route distribution
RIP configuration using EDM
Configuring RIP globally
Viewing RIP status
Configuring RIP interface compatibility
Configuring RIP on an interface
Configuring RIP on a port
Configuring RIP on a VLAN
Configuring route redistribution to RIP
RIPng Configuration using EDM
Configuring RIPng globally
Configuring an IPv6 RIPng interface
Configuring an IPv6 RIPng VLAN interface
Configuring an IPv6 RIPng brouter port interface
Graphing IPv6 RIPng statistics
Configuring route redistribution to RIPng
Viewing stats for RIPng interfaces
Remote Monitoring
Remote Monitoring
RMON 2
RMON2 Considerations
RMON Configuration Using CLI
Configuring RMON
Enable Remote Monitoring on an Interface
Enable RMON2 on a Segmented Management Instance Interface
View RMON Information
Displaying RMON Address Maps
View RMON Statistics
Displaying RMON Statistics for Specific Ports
View RMON Application Host Statistics
View RMON Control Tables
Displaying RMON Network Host Statistics
View RMON Protocol Distribution Statistics
Displaying RMON Status
View the RMON2 Configuration State of Management Interfaces
RMON Configuration Using EDM
Enabling RMON Globally
Enabling RMON on a Port or VLAN
Enabling RMON1 History
Disabling RMON1 History
Viewing RMON1 History Statistics
Creating an RMON1 Alarm
Viewing RMON1 Alarms
Deleting an RMON1 Alarm
Creating an RMON1 Event
Viewing RMON1 Events
Deleting an Event
Viewing the RMON Log
Enabling RMON Statistics
Viewing RMON Statistics
View the Protocol Directory
Viewing the Data Source for Protocol Distribution Statistics
Viewing Protocol Distribution Statistics
Viewing the Host Interfaces Enabled for Monitoring
Viewing Address Mappings
Viewing the Data Source for Host Statistics
Viewing Network Host Statistics
Viewing Application Host Statistics
RMON Alarm Variables
Route Filtering and IP Policies
Route Filtering and IP Policies
Accept Policies
Redistribution Filters
Announce Policies
Route Filtering Stages
Prefix list
Route Policy Definition
IP policy configuration using the CLI
Configuring prefix lists
Configure IP Route Policies
Configure a Policy to Accept External Routes from a Router
Apply OSPF Accept Policy Changes
Configure Inter-VRF Redistribution Policies
IP Policy Configuration using Enterprise Device Manager
Configure a Prefix List
Configure a Route Policy
Apply a Route Policy
Configure an OSPF Accept Policy
Configure Inbound and Outbound Filtering Policies on a RIP Interface
Delete Inbound or Outbound Filtering Policies on a RIP Interface
Routed Split MultiLink Trunking
RSMLT
IPv6 RSMLT
SMLT and RSMLT Operation in Layer 3 Environments
Router R1 Failure
Router R1 Recovery
RSMLT Network Design and Configuration
RSMLT Edge Support
RSMLT Configuration using CLI
Configure RSMLT on a VLAN
Enable RSMLT Edge Support
View RSMLT Information
RSMLT Configuration using EDM
Configuring RSMLT on a VLAN
Enabling RSMLT Edge support
View and Edit IPv4 RSMLT Local Information
Modify the IPv6 RSMLT Local Information
Modify IPv6 RSMLT Peer Information
View IPv4 RSMLT Peer Information
View IPv6 RSMLT Edge Peers
View IPv4 RSMLT Edge Support Information
Secure Shell
Secure Shell Fundamentals
Outbound Connections
SSH Version 2
User ID Logs
User Key Files
Block SNMP
SCP command
Third-Party SSH and SCP Client Software
DSA Authentication Access Level and File Name
RSA Authentication Access Level and File Name
SSH Rekeying
Configure Secure Shell using CLI
Enabling the SSHv2 server
Changing the SSH server authentication mode
Configure SSH Authentication Type
Enable DSA Authentication
Generate the DSA Host Key
Generate a DSA User Key
Import DSA and RSA Private or Public Keys
Configure Encryption Type
Configure the Key-Exchange Method
Configure the Maximum Number of SSH Sessions
Enable SSH Password Authentication
Configure the SSH Connection Port
Enable RSA Authentication
Generate an RSA Host Key
Generate an RSA User Key
Enable SSH Secure Mode
Configure the SSH version
Configure the SSH Authentication Timeout
Resetting the SSH
Configure X.509 V3 Authentication
Verify and Display SSH Configuration Information
Connect to a Remote Host using the SSH Client
Generate User Key Files
Manage an SSL Certificate
Disabling SFTP without disabling SSH
Enable SSH Rekey
Configure the SSH Rekey Data Limit Threshold
Configure the SSH Rekey Time Interval
Display SSH Rekey Information
Enabling or Disabling the SSH Client
Downgrading or Upgrading from Releases that Support Different Key Sizes
Secure Shell configuration using Enterprise Device Manager
Change Secure Shell Parameters
SD-WAN
Security
Security Fundamentals
Security overview
Security Modes
hsecure Mode
CLI Passwords
Port Lock feature
Access Policies for Services
User-based policy support
Denial-of-Service Attack Prevention
Authentication for Privileged EXEC Command Mode
Configuration Considerations
Interoperability configuration
Unicast Reverse Path Forwarding (uRPF)
Digital Certificate/PKI
Certificate Order Priority
Two-Factor Authentication for SSH
Security Configuration using CLI
Enable hsecure
Change an Invalid-Length Password
Configure New Passwords
Configure Password Hash
Configuring directed broadcast
Preventing certain types of DOS attacks
Configuring port lock
Unicast Reverse Path Forwarding configuration using CLI
Enable urpf-mode Boot Flag
Configure Unicast Reverse Path Forwarding on a Port
Configure Unicast Reverse Path Forwarding on a VLAN
Configuring Digital Certificates using CLI
Configure Device Subject Parameters
Configure Subject Alternative Names
Generate the Key Pair
Configure a Trustpoint CA
Install the Certificate
Generate the Certificate Signing Request
Display Configured Key Pairs
View the Certificate Details
Configure a Web Server Certificate
Configure Certificate Authority Trustpoint for Syslog
Variable Definitions
Digital certificate configuration examples
Obtain an Online CA-signed Subject Certificate
Install an Offline CA Certificate
Configuring X.509 V3 certificates for SSH Two Factor Authentication
Install Online Certificates for Fabric Extend with IPsec
Configure TCP Keepalive and TCP Timestamp
Enable Authentication for Privileged EXEC Command Mode using CLI
Enable MAC Move Protection on vIST
Security Configuration using EDM
Enable Port Lock
Lock a Port
Change Passwords
Configure Directed Broadcast on a VLAN
Unicast Reverse Path Forwarding configuration using EDM
Configure Reverse Path Checking on a Port
Configure Reverse Path Checking on an IPv6 Port
Configure Reverse Path Checking on a VLAN
Configure Reverse Path Checking on an IPv6 VLAN
Digital certificate configuration using EDM
Configure Device Subject Parameters
Configure Device Subject Entries Parameters
Generate the Key Pair
Configure the Certificate Authority
View the Certificate Details
Install the Root CA Certificate
View the Certificate Store
Configure TCP Keepalive and TCP Timestamp
Enable Authentication for Privileged EXEC Command Mode
Service Level Agreement Monitor
SLA Mon Server and Agent
QoS tests
Limitations
SLA Mon configuration using CLI
Configure the SLA Mon Agent
SLA Mon Configuration using EDM
Configure the SLA Mon Agent
sFlow
sFlow Fundamentals
sFlow Configuration Using CLI
Configure the Agent IP Address and Enable sFlow Globally
Configuring an sFlow Collector
Configuring the Packet Sampling Rate
Configuring sFlow Maximum Header Size
Configuring the Counter Sampling Interval
Viewing sFlow Statistics
Clearing sFlow Statistics
sFlow Configuration Using EDM
Enable sFlow and Configure the Agent IP Address
Configuring an sFlow Collector
Configure the Packet Samples and Counter Samples
Displaying sFlow Statistics
Simple Network Management Protocol (SNMP)
SNMPv3
SNMP Community Strings
SNMPv3 support for VRF
SNMPv3 Remote Engine ID Discovery
SNMP Configuration Using CLI
Configure SNMP settings
Creating a user
Create a New User Group
Creating a new entry for the MIB in the view table
Creating a community
Add a User to a Group
Block SNMP Access
View SNMP System Information
SNMP Configuration Using EDM
Create a User
Create a New Group Membership
Create Access for a Group
Create Access Policies for SNMP Groups
Assign MIB View Access for an Object
Create a Community
View All Contexts for an SNMP Entity
Showing SNMP Statistics
Spanning Tree Configuration
Spanning Tree Fundamentals
BPDU Guard
Rapid Spanning Tree Protocol and Multiple Spanning Tree Protocol
Spanning Tree Configuration Using CLI
Configure the Spanning Tree Mode
Configure BPDU Guard
Configuring Rapid Spanning Tree Protocol
Configuring Rapid Spanning Tree Protocol for a port
Configuring the Rapid Spanning Tree Protocol version
Viewing the global RSTP configuration information
Viewing RSTP statistics
Viewing the RSTP status
Viewing the RSTP Configuration Information
Viewing the RSTP Status for a Port
Viewing RSTP information for a selected port
Viewing the RSTP role
Viewing spanning tree configuration
Configuring Multiple Spanning Tree Protocol
Configuring MSTP MSTI options
Configuring Ethernet MSTP
Configuring Ethernet MSTP MSTI
Viewing MSTP configurations
Viewing MSTP status
Viewing MSTP Port Information
Viewing MSTP MSTI Information
Viewing MSTP statistics
Configuring tc-receive-alarm-threshold
Displaying the tc-receive-alarm-threshold configuration
Spanning Tree Configuration Using EDM
Configuring the Spanning Tree mode
Configure BPDU Guard
Configuring RSTP global parameters
Configuring RSTP ports
Viewing RSTP port status
Viewing RSTP Status Statistics
Viewing Port Spanning Tree Statistics
Configuring MSTP global parameters
Configuring CIST ports for MSTP
Configuring MSTI bridges for MSTP
Configuring MSTI ports for MSTP
Viewing VLAN and Spanning Tree CIST Statistics
Viewing VLAN and Spanning Tree MSTI Statistics
SPB-PIM Gateway configuration
SPB-PIM Gateway fundamentals
IP Multicast over Fabric Connect in Protocol Independent Multicast networks
SPB-PIM Gateway
SPB-PIM GW components
SPB-PIM Gateway Controller Node
SPB-PIM Gateway Node
MSDP overview
Source Active messages
Reverse Path Forwarding check
SA redistribution and filtering
MSDP and SPB-PIM GW
Full mesh group
Multicast Source Discovery Protocol configuration
Basic MSPD configuration using the CLI
Configuring the MSDP originator ID
Configuring MSDP on a VRF
Enabling MSDP globally
Creating an MSDP peer
MSDP Peer Configuration using the CLI
Configuring a peer description
Securing control messages
Configuring the MSDP peer SA limit
Limiting which packets the router sends
Configuring the MSDP peer keep alive messages
Configuring the MSDP peer connect-retry period
Clearing the peer connection
Deleting an MSDP peer
MSDP Message Control using the CLI
Filtering PIM routes
Filtering SA messages
Configuring MSDP mesh groups
Clearing the MSDP SA cache
MSDP Verification using the CLI
Displaying the peer information
Displaying the SA cache
Displaying the MSDP count
Displaying the MSDP summary
Displaying the RPF peer information
Displaying the MSDP mesh group information
Displaying the SA check information
Displaying all MSDP information
Clearing IPv4 MSDP Statistics
Basic MSDP configuration using the EDM
Configure the MSDP Originator ID
Enable MSDP
Create an MSDP Peer
MSDP Peer Configuration using the EDM
Secure Control Messages
Configure the MSDP Peer SA Limit
Configure a Peer Description
Configure the MSDP Peer Time-to-Live Threshold
Configuring the MSDP peer keepalive messages
Configure the MSDP Peer connect-retry Period
Change the MSDP Peer Status
Clear the MSDP Peer Connection
Delete an MSDP Peer
MSDP Message Control using the EDM
Filter PIM Routes
Filter SA Messages
Configure the MSDP Mesh Groups
Clear the MSDP SA Cache
MSDP Verification using the EDM
View Peer Information
View the Local SA Cache
View the Foreign SA Cache
View the Mesh Group
Controller configuration
Controller Configuration using the CLI
Enabling the Controller
Displaying the Controller admin status
Displaying the active Controller and Gateway Nodes
Configuring a static foreign source on the global router
Configuring a static foreign source on a VRF
Displaying foreign sources
Displaying Multicast over Fabric Connect sources
Controller Configuration using the EDM
Enabling the Controller
Displaying the Controller and Gateway admin status
Displaying active Controller and Gateway nodes
Configuring a static foreign source globally
Configuring a static foreign source on a VRF
Displaying foreign sources
Displaying Multicast over Fabric Connect sources
Gateway configuration
Gateway Configuration using the CLI
Enabling the Gateway
Displaying the Gateway admin status
Gateway Configuration using the EDM
Enabling the Gateway globally
Displaying foreign sources
SPB-PIM Gateway interface configuration
SPB-PIM Gateway Interface Configuration using the CLI
Enabling SPB-PIM Gateway on a VLAN
Enabling SPB-PIM Gateway on a brouter port interface
Configuring the SPB-PIM Gateway VLAN optional parameters
Configuring the SPB-PIM Gateway brouter port optional parameters
Displaying the SPB-PIM Gateway brouter port information
Displaying the SPB-PIM Gateway VLAN information
Displaying the SPB-PIM Gateway neighbor information
Displaying the SPB-PIM Gateway multicast routes
Display the IP mroute Routes
SPB-PIM Gateway Interface Configuration using the EDM
Enabling SPB-PIM Gateway on a VLAN
Enabling SPB-PIM Gateway on a Brouter port interface
Configuring SPB-PIM Gateway VLAN optional parameters
Configuring the SPB-PIM Gateway optional parameters
Displaying the SPB-PIM Gateway interface default values
Displaying the SPB-PIM Gateway brouter port information
Displaying the SPB-PIM Gateway VLAN information
Displaying the SPB-PIM Gateway neighbor information
Displaying the IP mroute routes
SPB-PIM Gateway Interface Deployment Scenarios
SPB-PIM Gateway Base Case Deployment Scenario
Source Specific Multicast
Peer Mesh Group
Multi domain
SPB domain interconnect
System Access
System access fundamentals
Logging On to the System
Managing the System using Different VRF Contexts
CLI Passwords
Access Policies for Services
Web interface passwords
Multiple CLI Users for Each Role
Enhanced Secure Mode
Password Requirements
Sensitive File Protection
System access configuration using CLI
Change the Default Username
Enabling CLI access levels
Changing passwords
Configure an Access Policy
Specifying a name for an access policy
Allowing a network access to the switch
Configuring access policies by MAC address
Creating multiple CLI users
Deleting a username
Displaying CLI usernames and roles
Enable a CLI User
System access security enhancements
Display the Boot Config Flags Status
Enabling enhanced secure mode
Create Accounts for Different Access Levels
Deleting Accounts in Enhanced Secure Mode
Configuring a password for a specific user
Return the System to the Factory Defaults
Configuring the Password Complexity Rule
Configuring the password length rule
Configuring the change interval rule
Configuring the reuse rule
Configuring the maximum number of sessions
Configuring the maximum age rule
Configuring the Pre-notification and Post-notification Rule
System access configuration using EDM
Configuring CLI Access using EDM
Enable Access Levels
Change Passwords
Configure the Logon Banner
Create an Access Policy
Enable an Access Policy
Creating Multiple Users
Modify User Passwords
Disable a User Account
Delete a User Account
System access security enhancements using EDM
Enable Enhanced Secure Mode
TACACS+
TACACS+ Fundamentals
TACACS+ Operation
TACACS+ Architecture
Authentication, authorization, and accounting
TACACS+ authentication
TACACS+ authorization
TACACS+ Accounting
Privilege Level Changes at Runtime
TACACS+ and RADIUS differences
TACACS+ Feature Limitations
TACACS+ configuration using CLI
Enabling TACACS+
Add a TACACS+ Server
Configuring TACACS+ authentication
Configuring TACACS+ accounting
Configuring command authorization with TACACS+
Changing privilege levels at runtime
TACACS+ configuration using EDM
Configure TACACS+ Globally
Add a TACACS+ Server
Modify a TACACS+ Configuration
TACACS+ Configuration Example
TACACS+ Configuration on the Switch
Traffic Filtering
Traffic filtering fundamentals
Overview of Traffic Filtering
QoS and Filters
Access Control Lists
Access Control Entries
Operators
Attributes
Actions
Internal QoS Level and Remarking
Conflict and Precedence
Common ACE uses and configuration
Switched UNI ACL Filters
Traffic filter configuration
Ingress Bandwidth Rate Limiter
ACL and ACE configuration guidelines
ACL Filters Behavior Differences
Access control list configuration using CLI
Creating an IPv4 ACL
Create an IPv6 ACL
Associating VLANs with an ACL
Associating ports with an ACL
Associate an I-SID with an ACL
Configure Global and Default Actions for an ACL
Renaming an ACL
Disabling an ACL
Resetting an ACL to default values
Deleting an ACL
Clear ACL Statistics
Enable IPv6 Egress Filters
Display Filter Access Control List Configuration
Access control list configuration using EDM
Configuring an access control list
Viewing ACL Statistics
Clearing ACL Statistics
Enable IPv6 Egress Filters
Access Control Entry Configuration using CLI
Configure ACEs
Configure ACE actions
Configuring ARP ACEs
Configuring an Ethernet ACE
Configure an IP ACE
Configure an IPv6 ACE
Configuring a protocol ACE
Configure Ingress Policer and Port Rate Limiter
Viewing ACL and ACE configuration data
View ACE Statistics
Access Control Entry Configuration using EDM
Configure an ACE
Configure ACE Actions
Configure ACE ARP entries
View ACE ARP Entries for an ACL
Configure an ACE Ethernet Source Address
Configure an ACE Ethernet Destination Address
Configure an ACE LAN Traffic Type
Configure an ACE Ethernet VLAN Tag Priority
Configure an ACE Ethernet Port
Configure an ACE Ethernet VLAN ID
Viewing All ACE Ethernet Entries for an ACL
Configure an ACE IP Source Address
Configure an ACE IP Destination Address
Configure an ACE IP DSCP
Configure an ACE IP protocol
Configure ACE IP options
Configure ACE IP Fragmentation
View all ACE IP Entries for an ACL
Configuring an ACE IPv6 source address
Configuring an ACE IPv6 destination address
Configuring an ACE IPv6 next header
Configuring an ACE IPv6 traffic class
Viewing all ACE IPv6 entries for an ACL
Configuring an ACE source port
Configuring an ACE destination port
Configuring an ACE ICMP message type
Configuring an ACE ICMPv6 message type
Configuring an ACE TCP flag
Configure an ACE to Filter IPv4 Routed Packets
Configure an ACE to Filter IPv6 Routed Packets
Configure Ingress Policer and Port Rate Limiter
Viewing ACE Port Statistics
Viewing all ACE protocol entries for an ACL
Troubleshooting
Data Collection Required for Technical Support Cases
Data Collection for an Outage
Collect Data Before You Restart
Collecting Data After You Restart
Data Collection for Non Outage Problems
Gathering Critical Information
Troubleshooting Planning Fundamentals
Proper Installation and Routine Maintenance
Network Configuration
Normal Behavior on the Network
Troubleshooting Fundamentals
Connectivity Problems
Routing Table Problems
Cable Connection Problems
Alarm Database
LED Indications of Problems
Connectivity Fault Management
CFM Fundamentals
Autogenerated CFM and Explicitly Configured CFM
Maintenance Domain (MD)
Maintenance Association (MA)
Maintenance Association Endpoint (MEP)
Fault Verification
LBM Message
L2 Ping
Fault Isolation
Link Trace Message
L2 Traceroute
L2 Tracetree
L2 Tracetree-fan
Maintenance Domain Intermediate Point (MIP)
Layer 2 Tracemroute
Nodal MPs
Nodal B-VLAN MIPs with SMLT
Configuration Considerations
CFM Configuration Using CLI
Autogenerated CFM
Configuring Autogenerated CFM on SPBM B-VLANs
Configure Autogenerated CFM on C-VLANs
Configuring Explicit Mode CFM
Configuring CFM MD
Configuring CFM MA
Configuring CFM MEP
Assigning a MEP/MIP Level to an SPBM B-VLAN
Assigning MEP/MIP Levels to SPBM B-VLANs Globally
Trigger a Loopback Test (LBM)
Trigger Linktrace (LTM)
Trigger a Layer 2 Ping
Trigger a Layer 2 Traceroute
Trigger a Layer 2 Tracetree
Triggering a Layer 2 Tracetree-fan
Trigger a Layer 2 Tracemroute
Use Trace CFM to Diagnose Problems
Use Trace SPBM to Diagnose Problems
CFM Configuration Using EDM
Autogenerated CFM
Configure Autogenerated CFM on SPBM B-VLANs
Configure Autogenerated CFM on C-VLANs
Configuring Explicit CFM
Configure CFM MD
Configure CFM MA
Configure CFM MEP
Configure CFM Nodal MEP
Configure Layer 2 Ping
Initiate a Layer 2 Traceroute
View Layer 2 Traceroute Results
Configure Layer 2 IP Ping
View Layer 2 IP Ping Results
Configure Layer 2 IP Traceroute
View Layer 2 IP Traceroute Results
Trigger a Loopback Test
Trigger Linktrace
View Linktrace Results
Configure a Layer 2 Tracetree
View Layer 2 Tracetree Results
Configure Layer 2 Trace Multicast Route on a VLAN
Configure Layer 2 Tracemroute on a VRF
View Layer 2 Trace Multicast Route Results
CFM Configuration Example
CFM Configuration Example
CFM Sample Output
Software Troubleshooting Tool Configuration
Troubleshooting Tool Fundamentals
Troubleshooting Overview
Debug Files
Digital Diagnostic Monitoring
Flight Recorder
Port Mirroring
Port Mirroring Considerations and Restrictions
General Diagnostic Tools
Fabric RSPAN (Mirror to I-SID)
Software Troubleshooting Tool Configuration Using CLI
Using CLI for Troubleshooting
Display NIC Counters
Using Software Record Dumps
Use Trace to Diagnose Problems
Use Trace to Diagnose IPv6 Problems
View and Delete Debug Files
Configuring Port Mirroring
Displaying Mirror Resource Usage
Configuring Global Mirroring Actions with an ACL
Configure ACE Actions to Mirror
Clearing ARP Information for an Interface
Flush Routing, MAC, and ARP Tables for a Port
Flush Routing, MAC, and ARP Tables for a VLAN
Ping an IP Device
Run a Traceroute Test
Showing SNMP Logs
Using Trace to Examine IS-IS Control Packets
Viewing the Metric Type of IS-IS Route in TLVs – Detailed
Viewing the Metric Type of IS-IS Route in TLVs – Summarized
Configuring I-SID Monitoring
Displaying I-SID Monitoring Diagnostics
Displaying I-SID Mirroring Statistics
Clearing Fabric RSPAN (Mirror to I-SID) Statistics
Software Troubleshooting Tool Configuration Using EDM
Flush Routing Tables by VLAN
Flush Routing Tables by Port
Configure Port Mirroring
Configure ACLs for Mirroring
Configure ACEs for Mirroring
Run a Ping Test
View Ping Results
View Ping Probe History
Run a Traceroute Test
View Traceroute Results
View the Traceroute History
Configure I-SID Monitoring
View and Clear Fabric RSPAN (Mirror to I-SID) Statistics
General Troubleshooting
Hardware Troubleshooting
Using Trace to Diagnose Hardware Problems
Troubleshooting USB Viewing Problems
Software Troubleshooting
Failure to Read Failed Configuration File
No Web Management Interface Access to a Device
Configuration in EDM is not applied using CLI
Layer 1 Troubleshooting
Troubleshooting Fiber Optic Links
Reset a QSFP+ or QSFP28 Transceiver
Layer 2 and 3 Troubleshooting
Troubleshooting BPDU Guard
No Packets Received on the Port
Troubleshooting IPv6 VRRP
VRRP Transitions
Enabling Trace Messages for IPv6 VRRP Troubleshooting
Risks Associated with Enabling Trace Messages
VRRP with Higher Priority Running as Backup
Troubleshooting RSMLT
RSMLT Peers Not Up
Enabling Trace Messages for RSMLT Troubleshooting
Troubleshooting IPv6 Connectivity Loss
Troubleshooting vIST Failure
Multicast Troubleshooting
Multicast Feature Troubleshooting
Troubleshooting IGMP Layer 2 Querier
Troubleshoot IGMPv3 Backwards Compatibility
Multicast Routing Troubleshooting Using CLI
View IGMP Interface Information
View Multicast Group Trace Information for IGMP Snoop
View IGMP Group Information
Determine the Data Stream Learned with IP Multicast over Fabric Connect on the VLAN
Display the SPBM Multicast Database
Troubleshoot IP Multicast over Fabric Connect for Layer 2 VSNs
Troubleshoot IP Multicast over Fabric Connect for Layer 3 VSNs
Troubleshoot IP Multicast over Fabric Connect for IP Shortcuts
View the Hardware Resource Usage
Using PIM Debugging Commands
Determine the Protocol Configured on the Added VLAN
Multicast routing troubleshooting using EDM
View IGMP Interface Information
Determine the Data Stream Learned when IP Multicast over Fabric Connect is Configured on the VLAN
Show the SPBM Multicast Database
Troubleshooting Fabric Attach
Troubleshoot Fabric Attach using CLI
View Fabric Attach Configuration
Troubleshoot Fabric Attach using EDM
Graph LLDP Reception Statistics
Graph LLDP Transmission Statistics
Troubleshooting FA Server Rejection of I-SID-to-VLAN Assignments Using Trace
Troubleshooting FAN Transit
View FAN Transit information - Detailed
Upper Layer Troubleshooting
Troubleshooting SNMP
SNMP Trap not Received
Troubleshooting DHCP
Troubleshooting DHCP Relay
Troubleshooting Client Connection to the DHCP Server
Troubleshooting IPv6 DHCP Relay
IPv6 DHCP Relay Switch Side Troubleshooting
IPv6 DHCP Relay Server Side Troubleshooting
IPv6 DHCP Relay Client Side Troubleshooting
Enabling Trace Messages for IPv6 DHCP Relay
Troubleshooting TACACS+
Unable to Log On Using Telnet
Unable to Log On Using SSH
Unable to Log On by any Means
Administrator Unable to Obtain Accounting Information from the TACACS+ Server
Trap Server Cannot Receive Trap Packets from the Switch
Troubleshoot TACACS+ Problems
Using BGP Debugging Commands
Traps Reference
Proprietary Traps
Standard Traps
Virtual Link Aggregation Control Protocol
Virtual Link Aggregation Control Protocol
VLACP Flap Detect and Damping
VLACP Configuration using CLI
Configure VLACP on a port
View the VLACP Port Configuration
Displaying VLACP Statistics for Specific Ports
Enabling or disabling VLACP globally
Configure VLACP Flap Detect and Damping on a Port
Clear VLACP Flap Detect and Damping Statistics for a Port
VLACP Configuration using EDM
Enabling VLACP globally
Configure VLACP on a Port
Configuring VLACP on an Extreme Integrated Application Hosting Port
VLAN Configuration
VLAN Fundamentals
Port-Based VLANs
Private VLANs
Policy-Based VLANs
SPBM B-VLAN
VLAN Tagging and Port Types
VLAN Router Interfaces
IP routing and VLANs
VLAN Implementation
VLAN Configuration Rules
VLAN Feature Support
Secondary IP Interfaces
Network Load Balancing
Supported NLB Topologies
NLB and Directed Broadcast Resource Limits
VLAN MAC-layer Filtering Database and MAC Security
Prevention of IP Spoofing within a VLAN
VLAN loop prevention
Spanning Tree and Protection against Isolated VLANs
IGMP Layer 2 Querier
Switched UNI Layer 3
VLAN Configuration Using CLI
Create a VLAN
Create a Private VLAN
Assign an IP Address to a VLAN
Display All Configured IP Addresses
View the IPv4 and IPv6 Interface Configuration on a VLAN
Remove All Secondary IP Interfaces From a VLAN
Performing a general VLAN action
Configuring static MAC addresses for a VLAN
Limit MAC Address Learning
Configuring the forwarding database timeout globally
Adding or removing ports in a VLAN
Add a Source MAC Addresses for a VLAN
Configure NLB support
Configuring a tagged port to discard untagged frames
Configuring SLPP
Configuring SLPP packet-rx on a port
Configuring SLPP packet-tx on a VLAN
Viewing SLPP information
Viewing SLPP information for a port
Configuring spoof detection
View VLAN Information
View Private VLAN Information
Viewing brouter port information
Viewing VLAN port member status
Viewing VLAN source MAC addresses
Viewing VLAN forwarding database information
Viewing manual edit MAC addresses
View Port-Level MAC Security
View NLB-Mode Information
Enable DvR on a Layer 2 VSN (VLAN)
Configure a Single IP Address for All DvR Controllers on a VLAN Subnet
VLAN Configuration using EDM
Configure a VLAN on a Port
Configure the VLAN Feature on an Extreme Integrated Application Hosting Port
View existing VLANs
Create a Port-Based VLAN
Create a Private VLAN
View Private VLAN Information
Configure a Primary IP Address for a VLAN
Modify the Administrative State of an IP Interface on a VLAN
Configure a Secondary IP Interface for a VLAN
Change VLAN Port Membership
Create a Protocol-Based VLAN
Create a SPBM B-VLAN
Configure Advanced VLAN Features
Configure NLB Support
Configure a Port to Accept Tagged or Untagged Frames
Configure Untagging Default VLAN on a Tagged Port
Configuring SLPP globally
Configuring the SLPP by VLAN
Configuring the SLPP by port
Configuring the forwarding database timeout globally
Viewing VLAN forwarding database information
Viewing the Forwarding Database for a Specific VLAN
Clearing learned MAC addresses by VLAN
Clearing learned MAC addresses for all VLANs by port
Configuring static forwarding
Configure Limit Learning
VRF Lite
VRF Lite Fundamentals
VRF Lite Capability and Functionality
VRF Lite and inter-VRF route redistribution
Route Redistribution Operation
Port parameters and VRF Lite management
Management VRF
Management Port
Management Router VRF
Non Virtualized Client Management Applications
Virtualized Management Applications
VRF Lite Configuration Rules
VRF Lite configuration using the CLI
Create a VRF Instance
Associate a VLAN or Port with a VRF Instance
Create an IP VPN Instance on a VRF
Create an IPv6 VPN Instance
Configure the Maximum Number of VRFs
Enabling IPv6 trap notifications
Display IPv6 max-routes Information
VRF Lite configuration using Enterprise Device Manager
Configuring a VRF instance
Associating a port to a VRF instance
Associating an Extreme Integrated Application Hosting Port to a VRF Instance
Configuring interVRF route redistribution policies
Viewing brouter port and VRF associations
Viewing global VRF status information
Viewing VRF instance statistics and status information
Viewing Statistics for a VRF
Select and Launch a VRF Context View
Create an IP VPN Instance on a VRF
Create an IPv6 VPN Instance on a VRF
Configure the Maximum Number of VRFs
Virtual Router Redundancy Protocol
VRRP Fundamentals
Critical IP Address
VRRP and SMLT
VRRP Fast Hello Timers
Handling of IPv4 Layer 2 Unicast Packets at VRRP Backup Master
VRRP Guidelines
VRRP for IPv6
VRRPv3
VRRPv3 guidelines
Configure VRRP Using CLI
Configure the VRRP Version on an Interface
Configure VRRP on a Port or a VLAN
Show Information for all Configured VRRP Addresses
Showing Extended VLAN VRRP
Show VRRP Interface Information
Viewing IP VRRPv3 Statistics
Enable Ping to a Virtual IP Address
Configure VRRP Notification Control
Enabling IPv4 VRRP preempt-mode
IPv6 VRRP Configuration using CLI
Configuring the VRRP interface
View VRRP Information
Configuring VRRP notification control
Configuring additional VRRP parameters for an interface
Viewing IPv6 VRRP Statistics
Enabling IPv6 VRRP preempt-mode
Configure VRRP using EDM
Enable VRRP Global Variables
Modifying VRRP parameters for an interface
Add a Secondary Virtual IP for VRRPv2
Configuring VRRP on a V3 interface
Add a Secondary Virtual IP for VRRPv3
Configuring VRRPv3 Checksum
Configuring Fast Advertisement Interval on a port or a VRF instance
Configuring Fast Advertisement Interval on a VLAN or a VRF instance
Viewing VRRP Statistics
Viewing VRRP Interface Statistics
Viewing IP VRRPv3 Statistics
Graphing IP VRRPv3 Statistics
IPv6 VRRP Configuration using EDM
Configure VRRP for an Interface
Configuring VRRP notification control
View IPv6 VRRP Statistics
Viewing IPv6 VRRP Statistics for an Interface
Configure IPv6 VRRP Statistics
Graphing IPv6 VRRP Statistics
Configuring additional addresses on the VRRP brouter port
Configuring additional addresses on the VRRP interface
VXLAN Gateway
VXLAN Gateway Fundamentals
VXLAN Gateway Licensing
VXLAN Modes
Types of VXLAN Gateway Deployments
VXLAN-to-VLAN Layer 2 Gateway Deployment
VXLAN-to-VXLAN Layer 3 Gateway Deployment
VXLAN-to-SPB Gateway Deployment
VXLAN Gateway Considerations and Limitations
OVSDB protocol support for VXLAN Gateway Considerations and Limitations
VXLAN Gateway configuration using the CLI
Enable VXLAN Gateway in Full Interworking Mode
Configure VXLAN Gateway
Flush the MAC Forwarding Table
VXLAN Gateway show commands
Display VTEP Source Information
Display Remote VTEP Information
Display the Name of the Remote VTEP
Display VNID Information
Display the MAC Addresses in the VNID FDB
Display the VXLAN Running Configuration
OVSDB protocol support for VXLAN Gateway configuration using CLI
Configure OVSDB Managed Interfaces
Configure OVSDB protocol support for VXLAN Gateway
Configure OVSDB Replication
Display the OVSDB Configuration
Display the OVSDB Controller Status
Display the OVSDB Replication State
Display the OVSDB Managed Interfaces
VXLAN Gateway configuration using EDM
Configure the VXLAN Gateway Boot Flag
Configure a VTEP Source IP Address
Configure a Remote VTEP
Configure a VNID
Configure VNID Endpoints
Configure ELAN Endpoints
Display the VTEP Next Hop
Display the VNID Forwarding Database
OVSDB protocol support for VXLAN Gateway configuration using EDM
Configure OVSDB Globally
Configure an OVSDB Controller
Display the OVSDB Controller Status
Configure OVSDB Managed Interface
Configuration Examples
VXLAN Gateway Configuration Example
OVSDB protocol support for VXLAN Gateway Configuration Example
Port Numbering and MAC Address Assignment Reference
Port Numbering
VSP 4450 Series
VSP 4900 Series
VSP 7200 Series
VSP 7400 Series
VSP 8200 Series and VSP 8400 Series
XA1400 Series
Interface Indexes
Port Interface Index
VLAN interface index
MLT interface index
MAC Address Assignment
Supported Standards, RFCs, and MIBs
Supported IEEE Standards
Supported RFCs
Quality of service
Network management
MIBs
Standard MIBs
Proprietary MIBs
ICMPv6 Type and Code
Enable DSA Authentication
Procedure
Enter Global Configuration mode:
enable
configure terminal
Enable DSA authentication:
ssh dsa-auth
