Introduction to the ExtremeXOS User Guide
- Conventions
- Related Publications
- Providing Feedback to Us
- Getting Help
Getting Started
- Product Overview
- Software Required
- Simple Switch Configuration with Chalet
- Switch Configuration Using VLAN ID (VID)
- Zero Touch Provisioning (Auto Configuration)
- Logging in to the Switch
- Understanding the Command Syntax
- Port Numbering
- Line-Editing Keys
- Viewing Command History
- Common Commands
- Using Safe Defaults Mode
- Configuring Management Access
- Managing Passwords
- Accessing Both MSM/MM Console Ports--Modular Switches Only
- Accessing an Active Node in a SummitStack
- Domain Name Service Client Services
- Checking Basic Connectivity
  - Ping
  - Traceroute
- Displaying Switch Information
  - Filtering the Output of Show Commands
Managing the Switch
- EXOS Switch Management Overview
- Understanding the ExtremeXOS Shell
- Using the Console Interface
- Using the 10/100 or 10/100/1000 Ethernet Management Port
- Using NetSight or Ridgeline to Manage the Network
- Authenticating Users
- Using Telnet
- Using Secure Shell 2
  - Access Profile Logging for SSH2
- Using the Trivial File Transfer Protocol
  - TFTP Block-size Configuration
  - Connecting to Another Host Using TFTP
- Understanding System Redundancy
- Understanding Hitless Failover Support
- Understanding Power Supply Management
- Using Motion Detectors
- Using the Network Time Protocol
- Using the Simple Network Management Protocol
- Using the Simple Network Time Protocol
  - Configuring and Using SNTP
    - GMT Offsets
  - SNTP Example
- Using Zero Touch Provisioning (Auto Provisioning) on Edge Switches
  - Auto-provisioning Process
  - Auto-provisioning Configuration
- Access Profile Logging for HTTP/HTTPS
Managing the ExtremeXOS Software
- Using the ExtremeXOS File System
- Managing the Configuration File
- Managing ExtremeXOS Processes
- Understanding Memory Protection
Configuring Stacked Switches
- SummitStack Overview
- Logging into a Stack
- Stack Configuration Guidelines
- Configuring a New Stack
- Converting a Standalone Node Deployment to a Stack
- Stack Configuration Tasks
- Managing an Operating Stack
- Troubleshooting a Stack
- FAQs on the SummitStack Feature
Configuring Slots and Ports on a Switch
- Configuring Slots on Modular Switches
- Configuring Ports on a Switch
- Using the Precision Time Protocol
- DWDM Optics Support
- Jumbo Frames
- Link Aggregation on the Switch
- MLAG
- Mirroring
- Remote Mirroring
- Extreme Discovery Protocol
- EXOS Cisco Discovery Protocol
  - EXOS CDP Support
  - EXOS CDP Protocol Operations
- Software-Controlled Redundant Port and Smart Redundancy
- Configuring Automatic Failover for Combination Ports
  - Summit Family Switches with Shared Copper/Fiber Gigabit Ports Only
- Displaying Port Information
  - DDMI
- EXOS Port Description String
  - Configure Port decription-string
- Port Isolation
  - Configuring Port Isolation
- Energy Efficient Ethernet
  - Configuring Energy Efficient Ethernet
Universal Port
- Profile Types
  - Static Profiles
  - Dynamic Profiles
- Dynamic Profile Trigger Types
- How Device-detect Profiles Work
- How User Authentication Profiles Work
- Profile Configuration Guidelines
- Collecting Information from Supplicants
- Supplicant Configuration Parameters
- Universal Port Configuration Overview
- Using Universal Port in an LDAP or Active Directory Environment
- Configuring Universal Port Profiles and Triggers
- Managing Profiles and Triggers
- Sample Universal Port Configurations
Using CLI Scripting
- Setting Up Scripts
- Displaying CLI Scripting Information
- CLI Scripting Examples
LLDP Overview
- Supported Advertisements (TLVs)
- LLDP Packets
- Transmitting LLDP Messages
- Receiving LLDP Messages
- LLDP Management
- Configuring and Managing LLDP
- Displaying LLDP Information
  - Displaying LLDP Port Configuration Information and Statistics
  - Display LLDP Information Collected from Neighbors
OAM
- CFM
- Y.1731--Compliant Performance Monitoring
- Y.1731 MIB Support
- EFM OAM--Unidirectional Link Fault Management
  - Unidirectional Link Fault Management
  - Configuring Unidirectional Link Fault Management
- Two-Way Active Measurement Protocol
  - TWAMP-Test Protocol
- Bidirectional Forwarding Detection (BFD)
PoE
- Extreme Networks PoE Devices
- Summary of PoE Features
- Power Checking for PoE Module
- Power Delivery
- Configuring PoE
- Displaying PoE Settings and Statistics
Status Monitoring and Statistics
- Viewing Port Statistics
- Viewing Port Errors
- Using the Port Monitoring Display Keys
- Viewing VLAN Statistics
  - BlackDiamond 8000 Series modules, SummitStack and Summit Family Switches Only
    - Configuring VLAN Statistics
    - Guidelines and Limitations
- Performing Switch Diagnostics
- Using the System Health Checker
- Setting the System Recovery Level
- Using ELSM
- Viewing Fan Information
  - Fan Behavior on X440-24t Model Switches
- Viewing the System Temperature
  - System Temperature Output
    - Modular Switches and SummitStack Only
    - Summit Family Switches Only
  - Power Supply Temperature--Modular Switches Only
- Using the Event Management System/Logging
- Using the XML Notification Client
- Using sFlow
- Using RMON
- Monitoring CPU Utilization
VLANs
- VLANs Overview
- Configuring VLANs on the Switch
- Displaying VLAN Information
- Private VLANs
- VLAN Translation
- Port-Specific VLAN Tag
  - Port-Specific Tags in L2VPN
  - Configuring Port-Specific VLAN Tags
VMAN (PBN)
- VMAN Overview
- VMAN Configuration Options and Features
- Configuration
  - Configuring VMANs (PBNs)
    - Guidelines for Configuring VMANs
    - Procedure for Configuring VMANs
  - Configuring VMAN Options
    - Configuring the Ethertype for VMAN Ports
    - Selecting the Tag used for Egress Queue Selection
- Displaying Information
  - Displaying VMAN Information
- Configuration Examples
FDB
- FDB Contents
- How FDB Entries Get Added
- How FDB Entries Age Out
- FDB Entry Types
- Managing the FDB
- Displaying FDB Entries and Statistics
  - Display FDB Entries
  - Display FDB Statistics
- MAC-Based Security
- Managing MAC Address Tracking
Data Center Solutions
- Data Center Overview
- Managing the DCBX Feature
- Managing the XNV Feature, VM Tracking
- Managing Direct Attach to Support VEPA
- Managing the FIP Snooping Feature
AVB
- Overview
- AVB Feature Pack License
- Configuring and Managing AVB
- Displaying AVB Information
TRILL
- Overview
- TRILL Capabilities
  - TRILL Interoperability with Layer 2 Protocols
- TRILL Data Center Solution
- Data Path Packet Forwarding
- TRILL Control Plane Protocol
- TRILL Network Configuration Example
- Restrictions and Limitations
- Configuring TRILL
Layer 2 Tunneling and Filtering
- Layer 2 Protocol Tunneling
- Protocol Tunneling
  - Implementing L2PT in EXOS
- Protocol Filtering
  - Implementing Protocol Filtering in EXOS
  - Protocol Filters
- L2PT Limitations
Virtual Routers
- Overview of Virtual Routers
  - Types of Virtual Routers
  - VR Configuration Context
- Managing Virtual Routers
- Virtual Router Configuration Example
Policy Manager
- Policy Manager and Policies Overview
- Creating and Editing Policies
- Applying Policies
  - Applying ACL Policies
  - Applying Routing Policies
ACLs
- ACLs Overview
- ACL Two-Stage Policy
  - Feature Description
  - Two-Stage Policy Example
- ACL Rule Syntax
- Layer-2 Protocol Tunneling ACLs
- ACL Byte Counters
- Dynamic ACLs
- CVID ACL Match Criteria
- ACL Evaluation Precedence
  - Precedence
- Applying ACL Policy Files
  - Displaying and Clearing ACL Counters
  - Example ACL Rule Entries
- ACL Mechanisms
- Policy-Based Routing
- ACL Troubleshooting
Routing Policies
- Routing Policies Overview
- Routing Policy File Syntax
- Applying Routing Policies
- Policy Examples
  - Translating an Access Profile to a Policy
  - Translating a Route Map to a Policy
Quality of Service
- Applications and Types of QoS
- Traffic Groups
- Introduction to Rate Limiting, Rate Shaping, and Scheduling
- Introduction to WRED
- Meters
- QoS Profiles
- Class of Service (CoS)
- Configuring QoS
- Displaying QoS Configuration and Performance
  - Displaying Traffic Group Configuration Data
  - Displaying Performance Statistics
    - Displaying QoS Profile Traffic Statistics
    - Displaying Congestion Statistics
Network Login
- Network Login Overview
- Configuring Network Login
- Authenticating Users
- Local Database Authentication
- 802.1X Authentication
- Web-Based Authentication
- MAC-Based Authentication
- Additional Network Login Configuration Details
ONEPolicy
- ONEPolicy Overview
- Implementing Policy
- NetSight Policy Manager
- Roles in a Secure Network
- The Policy Role
- Policy Roles
- VLAN to Policy Mapping
- Applying Policy Using the RADIUS Response Attributes
- Classification Rules
- Standard and Enhanced Policy Considerations
- Configuring Policy
- Policy Configuration Example
- Terms and Definitions
Identity Management
- Identity Management Overview
- Identity Management Feature Limitations
- Configuring Identity Management
- Managing the Identity Management Feature
- Displaying Identity Management Information
Security
- Security Features Overview
- Safe Defaults Mode
- MAC Security
  - MAC Locking
  - Limiting Dynamic MAC Addresses
  - MAC Address Lockdown
  - MAC Address Lockdown with Timeout
- DHCP Server
  - Enabling and Disabling DHCP
  - Configuring the DHCP Server
  - Displaying DHCP Information
- IP Security
  - DHCP Snooping and Trusted DHCP Server
  - Source IP Lockdown
  - ARP Learning
  - Gratuitous ARP Protection
    - Configuring Gratuitous ARP
    - Displaying Gratuitous ARP Information
  - ARP Validation
    - Configuring ARP Validation
    - Displaying ARP Validation Information
- Denial of Service Protection
  - Configuring Simulated Denial of Service Protection
  - Configuring Denial of Service Protection
    - Configuring Trusted Ports
    - Displaying DoS Protection Settings
  - Protocol Anomaly Protection
  - Flood Rate Limitation
- Authenticating Management Sessions Through a TACACS+ Server
  - Configuring the TACACS+ Client for Authentication and Authorization
  - Configuring the TACACS+ Client for Accounting
- Authenticating Management Sessions Through a RADIUS Server
  - How Extreme Switches Work with RADIUS Servers
  - Configuration Overview for Authenticating Management Sessions
- Authenticating Network Login Users Through a RADIUS Server
  - Differences Between Network Login Authentication and Management Session Authentication
  - Configuration Overview for Authenticating Network Login Users
- Authentication
  - Authentication Retransmission Algorithm
- Accounting
  - Accounting Retransmission Algorithm
- Authentication NMS Realm
- Per Realm Authentication Enable/Disable
- Supported RADIUS Attributes
- Configuring the RADIUS Client
  - Configuring the RADIUS Client for Authentication and Authorization
  - Configuring the RADIUS Client for Accounting
- RADIUS Server Configuration Guidelines
  - Configuring User Authentication (Users File)
  - Configuring the Dictionary File
  - Additional RADIUS Configuration Examples
  - Implementation Notes for Specific RADIUS Servers
  - Setting Up Open LDAP
- Configuring a Windows 7/Windows 8 Supplicant for 802.1X Authentication
- Hypertext Transfer Protocol
- Secure Shell 2
  - Enabling SSH2 for Inbound Switch Access
  - Viewing SSH2 Information
  - Using ACLs to Control SSH2 Access
    - Sample SSH2 Policies
    - Configuring SSH2 to Use ACL Policies
  - Using SCP2 from an External SSH2 Client
  - Understanding the SSH2 Client Functions on the Switch
    - SSH/SCP Client Upgrade Limitations
  - Using SFTP from an External SSH2 Client
- Secure Socket Layer
  - Enabling and Disabling SSL
  - Creating Certificates and Private Keys
  - Displaying SSL Information
CLEAR-Flow
- CLEAR-Flow Overview
- Configuring CLEAR-Flow
- Displaying CLEAR-Flow Configuration and Activity
- Adding CLEAR-Flow Rules to ACLs
- CLEAR-Flow Rule Examples
EAPS
- EAPS Protocol Overview
- Configuring EAPS
- Displaying EAPS Information
- Configuration Examples
ERPS
- ERPS Overview
- Supported ERPS Features
- G.8032 Version 2
- Configuring ERPS
  - ERPS Version 1 Commands
  - ERPS Version 2 Commands
- Sample Configuration
- Debugging ERPS
- ERPS Feature Limitations
STP
- Spanning Tree Protocol Overview
- Span Tree Domains
- STP Configurations
- Per VLAN Spanning Tree
  - STPD VLAN Mapping
  - Native VLAN
- Rapid Spanning Tree Protocol
  - RSTP Concepts
  - RSTP Operation
- Multiple Spanning Tree Protocol
  - MSTP Concepts
  - MSTP Operation
- STP and Network Login
- STP Rules and Restrictions
- Configure STP on the Switch
  - STP FDB Flush Criteria
- Display STP Settings
- STP Configuration Examples
ESRP
- ESRP Overview
- Configuring ESRP
- Operation with Other ExtremeXOS Features
- Advanced ESRP Features
- Display ESRP Information
- ESRP Configuration Examples
VRRP
- VRRP Overview
- Configuring VRRP
- Managing VRRP
  - Enabling and Disabling VRRP and VRRP Router Instances
  - Clearing VRRP Counters
- Displaying VRRP Information
- VRRP Configuration Examples
MPLS
- MPLS Overview
- Configuring MPLS
- Displaying MPLS Configuration Information
- MPLS Configuration Example
- Configuring MPLS Layer-2 VPNs (VPLS and VPWS)
- VPLS VPN Configuration Examples
- Configuring H-VPLS
- Configuring Protected VPLS
- Configuring RSVP-TE
- RSVP-TE Configuration Example
- Troubleshooting MPLS
IPv4 Unicast Routing
- IPv4 Unicast Overview
- Configuring Unicast Routing
- Displaying the Routing Configuration and Statistics
- Routing Configuration Example
- Duplicate Address Detection
- Proxy ARP
  - ARP-Incapable Devices
  - Proxy ARP Between Subnets
- IPv4 Multinetting
- DHCP/BOOTP Relay
- DHCP Smart Relay
- Broadcast UDP Packet Forwarding
  - Configuring UDP Forwarding
  - Configuring UDP Echo Server Support
- IP Broadcast Handling
  - IP Broadcast Handling Overview
- VLAN Aggregation
IPv6 Unicast Routing
- IPv6 Unicast Overview
- Neighbor Discovery Protocol
- Managing Duplicate Address Detection
- Managing IPv6 Unicast Routing
- IPv6 ECMP and 32-Way ECMP
- DHCPv6 Relay Remote-ID Option
- DHCPv6 Relay Agent Prefix Delegation
  - Relay Agent Behavior in Prefix Delegation
- DHCPv6 Client
- Configuring DHCPv6 BOOTP Relay
- Configure Route Compression
- Hardware Forwarding Behavior
  - Hardware Forwarding Limitations
  - Hardware Tunnel Support
- Routing Configuration Example
- Tunnel Configuration Examples
  - 6in4 Tunnel Configuration Example
  - 6to4 Tunnel Configuration Example
    - Host Configurations
RIP
- IGPs Overview
  - RIP Versus OSPF and IS-IS
  - Advantages of RIP, OSPF, and IS-IS
- Overview of RIP
- Route Redistribution
  - Configuring Route Redistribution
    - Redistribute Routes into RIP
- RIP Configuration Example
RIPng
- RIPng Overview
  - RIPng versus OSPFv3 and IS-IS
  - Advantages of RIPng, OSPFv3, and IS-IS
- RIPng Routing
- Route Redistribution
  - Configuring Route Redistribution
    - Redistributing Routes into RIPng
- RIPng Configuration Example
OSPF
- OSPF Overview
- Route Redistribution
- Configuring OSPF
  - Configuring OSPF Wait Interval
  - OSPF Wait Interval Parameters
- OSPF Configuration Example
  - Configuration for ABR 1
  - Configuration for IR 1
- Displaying OSPF Settings
OSPFv3
- OSPFv3 Overview
- Import Policy
- Route Redistribution
  - Configuring Route Redistribution
    - Redistributing Routes into OSPFv3
  - OSPFv3 Timers
IS-IS
- IS-IS Overview
- Route Redistribution
  - Configuring Route Redistribution
- Configuring IS-IS
- Displaying IS-IS Information
- Managing IS-IS
- Configuration Example
BGP
- BGP Overview
- Configuring BGP
- Managing BGP
- Displaying BGP Information
- Configuration Examples
Layer 3 Virtual Private Network
- Overview of Layer 3 VPN
- Overview of BGP/MPLS Network
- Overlapping Customer Address Spaces
- Multi-protocol BGP Extension
- Multiple Forwarding Tables
- Quality of Service in BGP/MPLS VPN
- Virtual Routing and Forwarding Instances
- L3VPN Configuration Example
Multicast Routing and Switching
- Multicast Routing Overview
- Multicast Table Management
- PIM Overview
- IGMP Overview
- Configuring EAPS Support for Multicast Traffic
- Configuring IP Multicast Routing
- Multicast VLAN Registration
- Displaying Multicast Information
- Troubleshooting PIM
  - Multicast Trace Tool
  - Multicast Router Information Tool
IPv6 Multicast
- Multicast Listener Discovery (MLD) Overview
- Managing MLD
MSDP
- MSDP Overview
  - Supported Platforms
  - Limitations
- PIM Border Configuration
- MSDP Peers
- MSDP Mesh-Groups
- Anycast RP
- SA Cache
  - Maximum SA Cache Entry Limit
- Redundancy
- SNMP MIBs
Software Upgrade and Boot Options
- ExtremeXOS Upgrade Process
- Installing a Modular Software Package
  - Guidelines for Activating SSL
  - Upgrading a Modular Software Package
- Understanding Hitless Upgrade--Modular Switches Only
- Configuration Changes
- Using TFTP to Upload the Configuration
- Using TFTP to Download the Configuration
- Synchronizing Nodes--Modular Switches and SummitStack Only
  - Additional Behavior on the BlackDiamond 8800 Series Switches Only
  - Automatic Synchronization of Configuration Files
- Accessing the Bootloader
- Upgrading the BootROM
  - Summit Family Switches and SummitStack Only
    - Accessing the Bootstrap CLI on the Summit Family Switches
- Upgrading the Firmware
  - BlackDiamond 8800 Series Switches Only
  - BlackDiamond X8 Series Switches Only
- Displaying the BootROM and Firmware Versions
Troubleshooting
- Troubleshooting Checklists
  - Layer 1
  - Layer 2
  - Layer 3
- LEDs
- Using the Command Line Interface
- Using ELRP to Perform Loop Tests
- Using the Rescue Software Image
- Debug Mode
- Saving Debug Information
- Evaluation Precedence for ACLs
- TOP Command
- TFTP Server Requirements
- System Odometer
  - Monitored Components
  - Recorded Statistics
- Temperature Operating Range
  - Modular Switches
  - Summit Family Switches and SummitStack
- Unsupported Module Type
  - BlackDiamond 8800 Series Switches Only
- Corrupted BootROM on BlackDiamond 8800 Series Switches
- Inserting Powered Devices in the PoE Module
  - BlackDiamond 8800 Series Switches Only
- Modifying the Hardware Table Hash Algorithm
  - BlackDiamond X8 Switches
  - BlackDiamond 8800 Series Switches, SummitStack, and Summit Family Switches Only
- Understanding the Error Reading Diagnostics Message
  - Summit Family Switches Only
- Proactive Tech Support
- Service Verification Test Tool
  - Configuring the Service Verification Test Tool
Supported Standards, Protocols, and MIBs
Extreme Networks Proprietary MIBs
- ExtremeXOS Configuration Management Enhancements
- EXTREME-MAC-AUTH-MIB
- EXTREME-AUTOPROVISION-MIB
- EXTREME-CLEARFLOW-MIB
- EXTREME-EDP-MIB
- EXTREME-ENTITY-MIB
- EXTREME-ESRP-MIB
- EXTREME-FDB-MIB
- EXTREME-MPLS-MIB
- EXTREME-MPLS-TE-MIB
- EXTREME-OSPF-MIB
- EXTREME-PoE-MIB
- EXTREME-PORT-MIB
- Pseudowire LSP Sharing MIB
- EXTREME-QOS-MIB
- EXTREME-RMON-MIB
- EXTREME-PVLAN-MIB
- EXTREME-SNMPv3-MIB
- EXTREME-STP-EXTENSIONS-MIB
- EXTREME-STPNOTIFICATIONS-MIB
- EXTREME-SYSTEM-MIB
- EXTREME-TRAP-MIB
- EXTREME-TRAPPOLL-MIB
- EXTREME-V2TRAP-MIB
- EXTREME-VLAN-MIB
- EXTREME-VM-MIB
MIB Support Details
- IEEE 802.1AB (LLDP-MIB)
- IEEE 802.1AB (LLDP-EXT-DOT1-MIB)
- IEEE 802.1AB (LLDP-EXT-DOT3-MIB)
- IEEE 802.1AG (CFM MIB)
- IEEE8021-PAE-MIB
- IEEE8021X-EXTENSIONS-MIB
- ISIS-MIB (draft-ietf-isis-wg-mib-10.txt)
- PIM-MIB (draft-ietf-pim-mib-v2-01.txt)
- SNMPv3 MIBs
- RFC 1213 (MIB-II)
- RFC 1215
- RFC 1493 (BRIDGE-MIB) and draft-ietf-bridge-rstpmib-03.txt
- RFC 4363 (Q-BRIDGE-MIB)
- RFC 1724 (RIPv2-MIB)
- RFC 1757 (RMON-MIB)
- RFC 1850 (OSPF-MIB)
- RFC 2021 (RMON2-MIB)
- RFC 2233 (IF-MIB)
- RFC 2465 (IPV6 MIB)
- RFC 2466 (IPV6 ICMP MIB)
- RFC 2613 (SMON)
- RFC 2665 (EtherLike-MIB)
- R_RFC 2668 (MAU-MIB)
- RFC 6933 (ENTITY-MIB)
- RFC 2787 (VRRP-MIB)
- RFC 3621 (PoE-MIB)
- RFC 5601 (PW-STD-MIB)
- RFC 5602 (PW-MPLS-STD-MIB)
- RFC 5603 (PW-ENET-STD-MIB)
- VPLS-MIB (draft-ietf-l2vpn-vpls-mib-02.txt)

Setting Default VLAN for Policy Role

A default VLAN can be configured for a policy role. A default VLAN will only be used when either a VLAN is not specifically assigned by a classification rule or all policy role classification rules are missed. To configure a default VLAN, enable pvid-status and specify the port VLAN to be used. pvid-status is disabled by default.

Note

ExtremeXOS supports the assignment of port VLAN-IDs 1 - 4094. Use of VLAN ID 4094 is supported by stackable and standalone devices running v6.51.xx and higher. VLAN-IDs 0 and 4095 can not be assigned as port VLAN-IDs, but do have special meanings within a policy context and can be assigned to the pvid parameter. Within a policy context: