run provisioning

run provisioning

Description

Allows you to change management access to your device and to enhance security.

Syntax Description

This command has no arguments or variables.

Default

N/A.

Usage Guidelines

This command runs an interactive script that lets you configure IP management connectivity if you choose not to use Auto Provisioning. It also lets you choose whether to enable or disable SNMP, Telnet, and ports.

Refer to “Using Safe Defaults Mode” in the ExtremeXOS 32.7.1 User Guide for complete information on the safe default mode.

After you issue this command, the system presents you with the following interactive script:

Example

The following command reruns the interactive script to configure management access:

# run provisioning         
This switch is in a default state. Before entering the Command Line Interface,
please answer these questions about management connectivity and security.
You may quit by answering 'q' to accept the defaults for remaining questions.
Press <ENTER> to accept the default value listed, or shown in upper case.

By default, Auto-Provisioning uses DHCP on all Ethernet ports as this switch
attempts to connect to an Extreme Networks management product.
Instead of using DHCP, do you want to 'disable auto-provision' and
configure a static IP address, default gateway and DNS server now? [y/N/q]: y

You may answer 's' to skip questions about management connectivity
to keep Auto-Provisioning enabled and proceed to the next section.
Which Ethernet port will be used for a management connection?
Enter 'Mgmt' for switch's Mgmt port, or an in-band port number
[MGMT / <port num> / s to skip]: <ENTER> 

Enter the IPv4 or IPv6 address/subnet mask length for this VLAN, e.g.
'192.168.4.5/24' or '192.168.4.5 255.255.255.0', '2001::1/64' or 's' to skip
: 10.99.16.200/16
IP interface for VLAN Mgmt has been created.

If a network management product is not present on this subnet 10.99.16.200/24,
a default route is needed to establish a management connection.
To create a default route, enter the gateway IP address, or enter
'none' if a management product is on this subnet.
[Default is 10.99.16.1 / none / s to skip]: <ENTER> 

Enter a DNS (Domain Name System) name server [Default is 8.8.8.8 / q]
: q 

Management connectivity section completed. Auto-Provisioning has been disabled.

Multiple Spanning Tree Protocol (MSTP) is enabled by default to prevent
broadcast storms
Would you like to disable MSTP? [y/N/q]: 

The switch offers an enhanced security mode. Would you like to read more,
and have the choice to enable this enhanced security mode? [y/N/q]:

Telnet is enabled by default. Telnet is unencrypted and has been the target of 
security exploits in the past.

Would you like to disable Telnet? [y/N/q]: 

SNMP access is disabled by default. SNMPv1/v2c uses no encryption, SNMPv3 can be 
configured to eliminate this problem.

Would you like to enable SNMPv1/v2c? [y/N/q]: 

Would you like to enable SNMPv3? [y/N/q]: 

All ports are enabled by default. In some secure applications, it may be more 
desirable for the ports to be turned off.

Would you like unconfigured ports to be turned off by default? [y/N/q]: 

No failsafe account username and password are in effect.  If you choose to 
configure them, please remember them because they cannot be recovered. 
Would you like to configure the failsafe username and password now? [y/N/q]:

Do you want to see the list of CLI commands executed by this provisioning
script? [y/N/q]: y
    configure vlan Mgmt ipaddress 10.99.16.200/24
    configure iproute add default 10.99.16.1 vr VR-Mgmt
    configure dns-client add name-server 8.8.8.8 vr VR-Mgmt
    disable auto-provision
    configure auto-provision cloud-connector server vr VR-Mgmt
    enable auto-provision cloud-connector

Do you want to see some basic CLI commands before entering the CLI? [y/N/q]: y
    Operation               Monitoring        Configuration
    ------------------      ------------      -----------------------------
    save configuration      show vlan         configure vlan add ports
    download image          show ports        configure ports
    ping                    show sharing      enable sharing
    reboot                  show log          configure stacking easy-setup

To run this initial provisioning script again, use "run provisioning".
For help with CLI commands, press the <TAB> key or question mark <?> key.

History

This command was first available in ExtremeXOS 32.7.1.

Platform Availability

This command is available on ExtremeSwitching X435, X440-G2, X450-G2, X460-G2, X465, X590, X620, X690, and X695 series switches.