Extreme SLX-OS Management Configuration Guide, 20.5.1
> Remote Attestation
Published April 2023
Search this document
Print this page
Email this page
View PDF
Previous
Next
Preface
Text Conventions
Documentation and Training
Help and Support
Send Feedback
About This Document
What‘s New in this Document
Supported Hardware
Regarding Ethernet interfaces and chassis devices
Configuration Fundamentals
Configuration Files
Auto-Persistence of Configuration Data
Displaying configurations
Backing up a running configuration
Applying previously saved configuration changes
Backing up configurations
Copying a configuration file to an external host
Backing up the startup configuration to a USB device
Configuration restoration
Restoring the default configuration
Tracking Configuration Changes
Turning off tracking of configuration changes
Managing flash files
Viewing the contents of a file in the flash memory
Rebooting the device
Copying Support Save Files
Session connection
Telnet
Connecting to an Extreme device with Telnet
Connecting to a remote device with Telnet
Enable or Disable Telnet service
SSH
Feature support for SSH
Connecting to an Extreme device with SSH
Connecting to a remote server with SSH
Managing SSH Client Public Keys
Enable or Disable SSH Service
Configuring the terminal session parameters
Configuring a login banner
Ethernet management interfaces
Configuring a static ethernet address
Displaying the management interface
Redundant Management Interface
Configure Redundant Management
Configure Redundant Management with a Mellanox Adapter
Force 1G connection speed on physical interfaces
Configuring an IPv6 address on the SLX platform
Port management
SLX 100G ports
Configuring breakout mode
10G/1G auto negotiation and auto detection mode
Port flap dampening
Configuring port flap dampening
Port transition hold timer
Configuring the port transition hold timer
Link fault signaling
Configuring link fault signaling
Interface Ethernet ports
Displaying device interfaces
Interface reload delay to prevent traffic black-holing in vLAG
Chassis and host names
Customizing chassis and host names
System clock
Setting the clock
Management VRFs
VRF reachability
VRF reachability for device-initiated services
VRF reachability for server-based services
Telnet, HTTP, and SSH limitations and considerations
Heartbeat between SLX and EFA
Heartbeat Setting
Zero Touch Provisioning
Using ZTP
ZTP configuration
Example of ZTP in a two-node topology
MAC address aging
TCAM application-resource monitoring
Hardware profiles
TCAM profiles
Specifying a TCAM profile
TCAM sharing
Enabling TCAM sharing
Counter profiles
Specifying a counter profile
FIB compression
Configuring FIB compression
Border profiles for Internet peering
Configuring support for border profiles
Hardware profile show commands
Enter Maintenance Mode Before Performing Device Maintenance
Rebooting into Maintenance Mode
Support for OpenConfig Telemetry
OpenConfig-Interface YANG Module
OpenConfig-BGP Yang Module
OpenConfig-Platform Yang Module
Enabling OpenConfig Telemetry Support
Securing OpenConfig Telemetry Connections
Importing gNMI Server Private Key and Server Certificate
Importing gNMI Client CA Root Certificate
Static Prefix Independent Convergence
Static Prefix Independent Convergence
Configuring Static PIC
SLX-OS and Linux Shell Interoperability
Overview
Limitations
Executing Linux shell commands from SLX-OS
Executing scripts from SLX-OS
Accessing the Linux shell from SLX-OS
Executing SLX-OS commands from the Linux shell
Escalating Linux permissions to root
Saving and appending show command output to a file
Logs of Linux shell activities
Configuring remote logging of Linux shell activities
Guest OS for TPVM
VM Access Management
Extreme SLX-OS VM Access Management
Default credentials for the hosts
VM access
SLX-OS CLI to VM access
Serial Console Access
Accessing the Linux shell from SLX-OS
Serial console to VM access
TPVM Console Access
TVPM address assignment
Insight Interface and TPVM
Insight interface port-channel
TPVM on the SLX 9150 series
Configuring the Insight Interface for the SLX 9150/9250
Insight interface
Insight interface supported features
Insight Interface Data Path
Configure the Insight Interface SLX Endpoint
Configure the Insight Interface TVPM Endpoint for Analytic Mirroring
Configure the Insight Interface TVPM Endpoint for Routing
Configure the Insight Interface TVPM Endpoint for Switching
Inbound ACL-based mirroring
Enabling ACL-based port mirroring
Configuring inbound ACL-based mirroring to the insight interface
Insight interface traffic management and QoS
QoS egress scheduling
QoS rate shaping
Configuring QoS egress scheduling
Troubleshooting port-mirroring
Troubleshooting port-mirroring
SLX-OS VM commands
TPVM
Supported third-party applications, packages, and hardware
perfSONAR
ARP sponge
TPVM Management
TPVM Package Information
Using the tpvm command
Using the tpvm config Command
Using tpvm deploy
Upgrading TPVM
Uninstalling TPVM completely
Docker containers
Linux containers
Utilities installation and management
Assigning a static IP address on the TPVM Linux OS
Update TPVM Gateway
IPv6 Support for TPVM
TPVM Configuration Persistence
How it Works
Deploy with TPVM Configuration Persistence
Managing Snapshots
Upgrading TPVM
TPVM Migration
Remove TPVM on Copying Default Config as Startup Config
Uninstalling TPVM completely
Uninstalling TPVM completely
Restoring Configuration from Backup File
Measured Boot
Measured Boot
Verifying Measured Boot
Remote Attestation
Remote Attestation
Configure Remote Attestation
Network Time Protocol (NTP)
Network Time Protocol overview
Network Time Protocol Server Overview
Network Time Protocol Client Overview
Network Time Protocol Associations
Network Time Protocol Authentication
Configuring NTP
Authenticating an NTP server
Displaying the active NTP server
SNMP
SNMP overview
Basic SNMP operation
SNMP community strings
SNMP groups
SNMP users
SNMP views
SNMP server hosts
SNMP Engine ID
Multiple SNMP server context to VRF mapping
SNMP source interface
Configuring SNMPv2
Configuring SNMPv3
Configuring an SNMP server context to a VRF
Offline SNMP ifIndex generation tool
Generating ifIndexes for various interfaces
Configuration examples for generating ifIndexes offline
LLDP
LLDP overview
Layer 2 topology mapping
LLDP configuration guidelines and restrictions
Configuring and managing LLDP
Understanding the default LLDP
Disabling LLDP globally
Configuring LLDP global parameters
Configuring LLDP profiles
Configuring an LLDP profile to an interface
Displaying LLDP information
Clearing LLDP-related information
Account and Password Recovery
Recover the admin password from the root account
Root account and password recovery
Recover the root login account
Recover the root password when shell prompt is available
Recover the root password when ONIE is available
Force Password Change At First Login
Force Password Age Out
Configure an account to disable automatically
Configure an account with inactivity warning
Python Event-Management and Scripting
Python under Extreme operating systems
Python overview
Working interactively in the Python shell
Python scripts
Guidelines for writing Python scripts
Testing Python-script statements
Copying Python files to the device
Copying a file from a USB device
Downloading a file from a network
Running Python scripts from the command line
Python scripts and run-logs
Script illustrating the .get_output function (get_output.py)
Event-handler script
Python event-management
Configuring an event-handler profile
Activating an event-handler
Configuring event-handler options
Troubleshooting event-management
Aborting an event-handler action
Event-management show commands
Configuration Rollback
Configuration rollback overview
Configuration rollback details
Configuration rollback considerations and limitations
Configuring rollback
Remote Attestation
