Dell S4048-ON - Page 109

To Next Page

To Previous Page

L2 MAC Entries : 160K 32K

L3 Host Entries : 144K 16K

L3 Route Entries : 16K 128K

Dell#

Access Control List (ACL) VLAN Groups and Content Addressable Memory (CAM) 109

Main Page

Default Chapter3
- Table of Contents3
1 About this Guide36
- Audience36
- Conventions36
- Related Documents36
2 Configuration Fundamentals37
- Accessing the Command Line37
- CLI Modes37
  - Navigating CLI Modes39
- The Do Command42
- Undoing Commands42
- Obtaining Help43
- Entering and Editing Commands43
- Command History44
- Filtering Show Command Outputs44
  - Example of the Grep Keyword44
- Multiple Users in Configuration Mode45
3 Getting Started46
- Console Access47
  - Serial Console47
- Accessing the CLI Interface and Running Scripts Using SSH48
  - Entering CLI Commands Using an SSH Connection48
  - Executing Local CLI Scripts Using an SSH Connection48
- Default Configuration49
- Configuring a Host Name49
- Accessing the System Remotely49
- Configuring the Enable Password50
- Configuration File Management51
- Managing the File System58
- Enabling Software Features on Devices Using a Command Option58
- View Command History59
- Upgrading Dell Networking os59
- Verify Software Images before Installation59
- Using HTTP for File Transfers60
4 Management62
- Configuring Privilege Levels62
  - Creating a Custom Privilege Level63
  - Removing a Command from EXEC Mode63
  - Moving a Command from EXEC Privilege Mode to EXEC Mode63
  - Allowing Access to CONFIGURATION Mode Commands63
  - Allowing Access to Different Modes63
  - Applying a Privilege Level to a Username65
  - Applying a Privilege Level to a Terminal Line65
- Configuring Logging65
  - Audit and Security Logs66
  - Configuring Logging Format68
  - Display the Logging Buffer and the Logging Configuration68
  - Setting up a Secure Connection to a Syslog Server69
  - Sending System Messages to a Syslog Server70
- Track Login Activity70
  - Restrictions for Tracking Login Activity70
  - Configuring Login Activity Tracking70
  - Display Login Statistics71
- Limit Concurrent Login Sessions72
  - Restrictions for Limiting the Number of Concurrent Sessions72
  - Configuring Concurrent Session Limit73
  - Enabling the System to Clear Existing Sessions73
- Enabling Secured CLI Mode74
- Log Messages in the Internal Buffer74
  - Configuration Task List for System Log Management74
- Disabling System Logging74
- Sending System Messages to a Syslog Server75
  - Configuring a UNIX System as a Syslog Server75
- Changing System Logging Settings75
- Display the Logging Buffer and the Logging Configuration76
- Configuring a UNIX Logging Facility Level77
- Synchronizing Log Messages78
- Enabling Timestamp on Syslog Messages78
- File Transfer Services79
  - Configuration Task List for File Transfer Services79
  - Enabling the FTP Server79
  - Configuring FTP Server Parameters79
  - Configuring FTP Client Parameters80
- Terminal Lines80
  - Denying and Permitting Access to a Terminal Line81
  - Configuring Login Authentication for Terminal Lines82
- Setting Timeout for EXEC Privilege Mode83
- Using Telnet to Get to Another Network Device83
- Lock CONFIGURATION Mode84
  - Viewing the Configuration Lock Status84
- Reloading the System84
- Restoring the Factory Default Settings85
  - Important Points to Remember85
  - Restoring Factory Default Environment Variables86
- 802.1X88
  - Port-Authentication Process90
    - EAP over RADIUS90
  - Configuring 802.1X91
    - Related Configuration Tasks91
  - Important Points to Remember91
  - Enabling 802.1X92
  - Configuring Dot1X Profile93
  - Configuring MAC Addresses for a Do1X Profile94
  - Configuring the Static MAB and MAB Profile94
  - Configuring Critical VLAN95
  - Configuring Request Identity Re-Transmissions96
    - Configuring a Quiet Period after a Failed Authentication96
  - Forcibly Authorizing or Unauthorizing a Port97
  - Re-Authenticating a Port98
  - Configuring Timeouts99
  - Configuring Dynamic VLAN Assignment with Port Authentication100
  - Guest and Authentication-Fail Vlans101
    - Configuring a Guest VLAN101
    - Configuring an Authentication-Fail VLAN101
6 Access Control List (ACL) VLAN Groups and Content Addressable Memory (CAM)103
- Optimizing CAM Utilization During the Attachment of Acls to Vlans103
- Guidelines for Configuring ACL VLAN Groups104
- Configuring ACL VLAN Groups and Configuring FP Blocks for VLAN Parameters104
  - Configuring ACL VLAN Groups104
  - Configuring FP Blocks for VLAN Parameters105
- Viewing CAM Usage106
- Allocating FP Blocks for VLAN Processes107
- Unified Forwarding Table (UFT) Modes108
  - Configuring UFT Modes108
7 Access Control Lists (Acls)110
- IP Access Control Lists (Acls)111
  - CAM Usage112
  - Implementing Acls on Dell Networking os112
- Important Points to Remember114
- IP Fragment Handling120
  - IP Fragments ACL Examples120
  - Layer 4 ACL Rules Examples120
- Configure a Standard IP ACL121
  - Configuring a Standard IP ACL Filter122
- Configure an Extended IP ACL123
  - Configuring Filters with a Sequence Number123
  - Configuring Filters Without a Sequence Number124
- Configure Layer 2 and Layer 3 Acls125
- Assign an IP ACL to an Interface126
- Applying an IP ACL126
  - Counting ACL Hits127
- Configure Ingress Acls127
- Configure Egress Acls127
  - Applying Egress Layer 3 Acls (Control-Plane)128
- IP Prefix Lists129
  - Implementation Information129
  - Configuration Task List for Prefix Lists129
- ACL Resequencing133
  - Resequencing an ACL or Prefix List133
- Route Maps135
  - Implementation Information135
- Logging of ACL Processes135
  - Guidelines for Configuring ACL Logging136
  - Configuring ACL Logging136
- Flow-Based Monitoring Support for Acls137
  - Behavior of Flow-Based Monitoring137
  - Enabling Flow-Based Monitoring138
- Configuring UDF ACL139
- Configuring IP Mirror Access Group142
  - Sample Configuration143
  - Example of Viewing IP Mirror-Access-Group Applied to an Interface143
8 Bidirectional Forwarding Detection (BFD)144
- How BFD Works144
- Important Points to Remember149
- Configure BFD149
9 Border Gateway Protocol Ipv4 (Bgpv4)176
- Autonomous Systems (AS)176
- Sessions and Peers178
  - Establish a Session178
- Route Reflectors179
- BGP Attributes180
- Multiprotocol BGP185
- Implement BGP with Dell Networking os186
- Configuration Information191
- BGP Configuration191
- Enabling MBGP Configurations224
  - Configure Ipv6 NH Automatically for Ipv6 Prefix Advertised over Ipv4 Neighbor225
- BGP Regular Expression Optimization225
- Debugging BGP225
- Sample Configurations228
10 Content Addressable Memory (CAM)235
- CAM Allocation235
- Test CAM Usage237
- View CAM-ACL Settings237
- View CAM Usage239
- CAM Optimization239
- Troubleshoot CAM Profiling239
  - Qos CAM Region Limitation239
11 Control Plane Policing (Copp)241
- Configure Control Plane Policing242
12 Data Center Bridging (DCB)252
- Ethernet Enhancements in Data Center Bridging252
  - Priority-Based Flow Control253
  - Enhanced Transmission Selection254
  - Data Center Bridging Exchange Protocol (Dcbx)255
  - Data Center Bridging in a Traffic Flow256
- Enabling Data Center Bridging256
  - DCB Maps and Its Attributes257
- Data Center Bridging: Default Configuration258
- Configuring Priority-Based Flow Control258
  - Configuring Lossless Queues259
- Configuring PFC in a DCB Map260
  - PFC Configuration Notes260
  - PFC Prerequisites and Restrictions261
- Applying a DCB Map on a Port261
- Configuring PFC Without a DCB Map262
  - Configuring Lossless Queuesexample262
- Priority-Based Flow Control Using Dynamic Buffer Method264
  - Pause and Resume of Traffic264
  - Buffer Sizes for Lossless or PFC Packets264
- Behavior of Tagged Packets265
- Configuration Example for DSCP and PFC Priorities265
- Using PFC to Manage Converged Ethernet Traffic266
- Configure Enhanced Transmission Selection266
  - ETS Prerequisites and Restrictions266
  - Creating an ETS Priority Group266
  - ETS Operation with Dcbx268
  - Configuring Bandwidth Allocation for Dcbx CIN268
  - Configuring ETS in a DCB Map269
- Hierarchical Scheduling in ETS Output Policies270
- Using ETS to Manage Converged Ethernet Traffic271
- Applying DCB Policies in a Switch Stack271
- Configure a Dcbx Operation271
  - Dcbx Operation271
  - Dcbx Port Roles272
  - DCB Configuration Exchange273
  - Configuration Source Election273
  - Propagation of DCB Information274
  - Auto-Detection and Manual Configuration of the Dcbx Version274
  - Dcbx Example275
  - Dcbx Prerequisites and Restrictions275
  - Configuring Dcbx275
- Verifying the DCB Configuration279
- Qos Dot1P Traffic Classification and Queue Assignment288
- Configuring the Dynamic Buffer Method289
- Sample DCB Configuration290
  - PFC and ETS Configuration Command Examples292
13 Dynamic Host Configuration Protocol (DHCP)293
- DHCP Packet Format and Options293
- Assign an IP Address Using DHCP295
- Implementation Information296
- Configure the System to be a DHCP Server296
- Configure the System to be a Relay Agent300
- Configure the System to be a DHCP Client302
- Configure the System for User Port Stacking (Option 230)305
- Configure Secure DHCP305
- Source Address Validation312
14 Equal Cost Multi-Path (ECMP)315
- ECMP for Flow-Based Affinity315
- Link Bundle Monitoring316
- Rtag7318
- Flow-Based Hashing for ECMP319
15 FIP Snooping322
- Fibre Channel over Ethernet322
- Ensure Robustness in a Converged Ethernet Network322
- FIP Snooping on Ethernet Bridges324
- FIP Snooping in a Switch Stack326
- Using FIP Snooping326
- Displaying FIP Snooping Information330
- Fcoe Transit Configuration Example335
16 Flex Hash and Optimized Boot-Up337
- Flex Hash Capability Overview337
- Configuring the Flex Hash Mechanism337
- Configuring Fast Boot and LACP Fast Switchover338
- Optimizing the Boot Time338
  - Booting Process When Optimized Boot Time Mechanism Is Enabled338
  - Guidelines for Configuring Optimized Booting Mechanism339
- Interoperation of Applications with Fast Boot and System States340
- RDMA over Converged Ethernet (Roce) Overview342
- Preserving 802.1Q VLAN Tag Value for Lite Subinterfaces343
17 FIPS Cryptography344
- Configuration Tasks344
- Preparing the System344
- Enabling FIPS Mode345
- Generating Host-Keys345
- Monitoring FIPS Mode Status345
- Disabling FIPS Mode346
18 Force10 Resilient Ring Protocol (FRRP)347
- Protocol Overview347
- Implementing FRRP351
- FRRP Configuration351
- Troubleshooting FRRP355
  - Configuration Checks355
- Sample Configuration and Topology355
- FRRP Support on VLT356
  - Example Scenario357
  - Important Points to Remember358
19 GARP VLAN Registration Protocol (GVRP)359
- Important Points to Remember359
- Configure GVRP360
  - Related Configuration Tasks360
- Enabling GVRP Globally361
- Enabling GVRP on a Layer 2 Interface361
- Configure GVRP Registration361
- Configure a GARP Timer362
- RPM Redundancy362
20 High Availability (HA)364
- Component Redundancy364
- Pre-Configuring a Stack Unit Slot366
- Removing a Provisioned Logical Stack Unit366
- Hitless Behavior367
- Graceful Restart367
- Software Resiliency367
- Hot-Lock Behavior368
21 Internet Group Management Protocol (IGMP)369
- IGMP Implementation Information369
- IGMP Protocol Overview369
- Configure IGMP374
  - Related Configuration Tasks374
- Viewing IGMP Enabled Interfaces375
- Selecting an IGMP Version375
- Viewing IGMP Groups375
- Adjusting Timers376
  - Adjusting Query and Response Timers376
- Preventing a Host from Joining a Group377
- Enabling IGMP Immediate-Leave380
- IGMP Snooping380
- Fast Convergence after MSTP Topology Changes383
- Egress Interface Selection (EIS) for HTTP and IGMP Applications383
- Designating a Multicast Router Interface390
22 Interfaces392
- Basic Interface Configuration392
- Advanced Interface Configuration392
- Interface Types393
- View Basic Interface Information393
- Resetting an Interface to Its Factory Default State395
- Enabling a Physical Interface396
- Physical Interfaces396
  - Configuration Task List for Physical Interfaces396
  - Overview of Layer Modes396
  - Configuring Layer 2 (Data Link) Mode397
  - Configuring Layer 2 (Interface) Mode397
  - Configuring Layer 3 (Network) Mode398
  - Configuring Layer 3 (Interface) Mode398
- Egress Interface Selection (EIS)399
  - Important Points to Remember399
  - Configuring EIS399
- Management Interfaces400
  - Configuring Management Interfaces400
  - Configuring a Management Interface on an Ethernet Port401
- VLAN Interfaces402
- Loopback Interfaces403
- Null Interfaces403
- Port Channel Interfaces403
  - Port Channel Definition and Standards404
  - Port Channel Benefits404
  - Port Channel Implementation404
  - Interfaces in Port Channels405
  - Configuration Tasks for Port Channel Interfaces405
  - Creating a Port Channel405
  - Adding a Physical Interface to a Port Channel406
  - Reassigning an Interface to a New Port Channel407
  - Configuring the Minimum Oper up Links in a Port Channel408
  - Adding or Removing a Port Channel from a VLAN408
  - Assigning an IP Address to a Port Channel409
  - Deleting or Disabling a Port Channel410
  - Load Balancing through Port Channels410
  - Changing the Hash Algorithm410
- Bulk Configuration411
  - Interface Range411
  - Bulk Configuration Examples411
- Defining Interface Range Macros413
  - Define the Interface Range413
  - Choosing an Interface-Range Macro413
- Monitoring and Maintaining Interfaces414
  - Maintenance Using TDR415
- Non Dell-Qualified Transceivers415
- Splitting 40G Ports Without Reload416
- Splitting QSFP Ports to SFP+ Ports417
- Converting a QSFP or QSFP+ Port to an SFP or SFP+ Port418
  - Important Points to Remember418
  - Example Scenarios418
- Configuring Wavelength for 10-Gigabit SFP+ Optics420
- Link Dampening420
  - Important Points to Remember420
  - Enabling Link Dampening420
- Link Bundle Monitoring422
- Using Ethernet Pause Frames for Flow Control422
  - Enabling Pause Frames423
- Configure the MTU Size on an Interface424
- Port-Pipes424
- Auto-Negotiation on Ethernet Interfaces425
  - Setting the Speed of Ethernet Interfaces425
  - Set Auto-Negotiation Options426
- View Advanced Interface Information427
  - Configuring the Interface Sampling Size428
- Configuring the Traffic Sampling Size Globally429
- Dynamic Counters430
  - Clearing Interface Counters431
23 Internet Protocol Security (Ipsec)432
- Configuring Ipsec432
24 Ipv4 Routing434
- IP Addresses435
  - Implementation Information435
- Configuration Tasks for IP Addresses435
- Assigning IP Addresses to an Interface435
- Configuring Static Routes436
- Configure Static Routes for the Management Interface437
- Ipv4 Path MTU Discovery Overview438
- Using the Configured Source IP Address in ICMP Messages438
  - Configuring the ICMP Source Interface438
- Configuring the Duration to Establish a TCP Connection439
- Enabling Directed Broadcast439
- Resolution of Host Names439
- Enabling Dynamic Resolution of Host Names440
- Specifying the Local System Domain and a List of Domains440
- Configuring DNS with Traceroute441
- Arp441
- Configuration Tasks for ARP442
- Configuring Static ARP Entries442
- Enabling Proxy ARP442
- Clearing ARP Cache443
- ARP Learning Via Gratuitous ARP443
- Enabling ARP Learning Via Gratuitous ARP443
- ARP Learning Via ARP Request443
- Configuring ARP Retries444
- Icmp445
- Configuration Tasks for ICMP445
- Enabling ICMP Unreachable Messages445
- UDP Helper445
  - Configure UDP Helper445
  - Important Points to Remember446
- Enabling UDP Helper446
- Configuring a Broadcast Address446
- Configurations Using UDP Helper447
- UDP Helper with Broadcast-All Addresses447
- UDP Helper with Subnet Broadcast Addresses448
- UDP Helper with Configured Broadcast Addresses448
- UDP Helper with no Configured Broadcast Addresses449
- Troubleshooting UDP Helper449
25 Ipv6 Routing450
- Protocol Overview450
- Implementing Ipv6 with Dell Networking os456
- Icmpv6457
- Path MTU Discovery458
- Ipv6 Neighbor Discovery458
  - Ipv6 Neighbor Discovery of MTU Packets459
- Configuration Task List for Ipv6 RDNSS459
- Secure Shell (SSH) over an Ipv6 Transport461
- Configuration Tasks for Ipv6462
- Configuring Ipv6 RA Guard468
  - Configuring Ipv6 RA Guard on an Interface469
  - Monitoring Ipv6 RA Guard470
26 Iscsi Optimization471
- Iscsi Optimization Overview471
- Default Iscsi Optimization Values476
- Iscsi Optimization Prerequisites476
- Configuring Iscsi Optimization476
- Iscsi Enable477
- Displaying Iscsi Optimization Information478
27 Intermediate System to Intermediate System480
- IS-IS Protocol Overview480
- IS-IS Addressing480
- Multi-Topology IS-IS481
- Graceful Restart482
  - Timers482
- Implementation Information482
- Configuration Information483
- IS-IS Metric Styles498
- Configure Metric Values498
- Sample Configurations501
28 Link Aggregation Control Protocol (LACP)503
- Introduction to Dynamic Lags and LACP503
- LACP Configuration Tasks505
- Shared LAG State Tracking507
  - Configuring Shared LAG State Tracking507
  - Important Points about Shared LAG State Tracking509
- LACP Basic Configuration Example509
  - Configure a LAG on ALPHA509
29 Layer 2518
- Manage the MAC Address Table518
- MAC Learning Limit519
- NIC Teaming523
- Configure Redundant Pairs524
  - Important Points about Configuring Redundant Pairs526
- Far-End Failure Detection527
30 Link Layer Discovery Protocol (LLDP)532
- 802.1AB (LLDP) Overview532
  - Protocol Data Units532
- Optional Tlvs533
  - Management Tlvs533
- TIA-1057 (LLDP-MED) Overview535
  - TIA Organizationally Specific Tlvs535
- Configure LLDP539
- CONFIGURATION Versus INTERFACE Configurations540
- Enabling LLDP540
  - Disabling and Undoing LLDP541
- Enabling LLDP on Management Ports541
  - Disabling and Undoing LLDP on Management Ports541
- Advertising Tlvs541
- Viewing the LLDP Configuration543
- Viewing Information Advertised by Adjacent LLDP Agents543
- Configuring LLDPDU Intervals544
- Configuring Transmit and Receive Mode545
- Configuring the Time to Live Value545
- Debugging LLDP546
- Relevant Management Objects547
31 Microsoft Network Load Balancing552
- NLB Unicast Mode Scenario552
- NLB Multicast Mode Scenario552
- Limitations of the NLB Feature553
- Microsoft Clustering553
- Enable and Disable VLAN Flooding553
- Configuring a Switch for NLB553
  - Enabling a Switch for Multicast NLB554
32 Multicast Source Discovery Protocol (MSDP)555
- Protocol Overview555
- Anycast RP556
- Implementation Information557
- Configure Multicast Source Discovery Protocol557
  - Related Configuration Tasks557
- Enable MSDP561
- Manage the Source-Active Cache562
- Accept Source-Active Messages that Fail the RFP Check563
- Specifying Source-Active Messages566
- Limiting the Source-Active Messages from a Peer567
- Preventing MSDP from Caching a Local Source567
- Preventing MSDP from Caching a Remote Source568
- Preventing MSDP from Advertising a Local Source568
- Logging Changes in Peership States569
- Terminating a Peership569
- Clearing Peer Statistics570
- Debugging MSDP570
- MSDP with Anycast RP571
- Configuring Anycast RP572
  - Reducing Source-Active Message Flooding573
  - Specifying the RP Address Used in SA Messages573
- MSDP Sample Configurations575
33 Multiple Spanning Tree Protocol (MSTP)578
- Protocol Overview578
- Spanning Tree Variations579
  - Implementation Information579
- Configure Multiple Spanning Tree Protocol579
  - Related Configuration Tasks580
- Enable Multiple Spanning Tree Globally580
- Adding and Removing Interfaces580
- Creating Multiple Spanning Tree Instances581
- Influencing MSTP Root Selection582
- Interoperate with Non-Dell Bridges582
- Changing the Region Name or Revision583
- Modifying Global Parameters583
- Modifying the Interface Parameters584
- Configuring an Edgeport585
- Flush MAC Addresses after a Topology Change586
- MSTP Sample Configurations586
  - Router 1 Running-Configurationrouter 2 Running-Configurationrouter 3 Running-Configurationsftos Example Running-Configuration587
- Debugging and Verifying MSTP Configurations590
34 Multicast Features592
- Enabling IP Multicast592
- Implementation Information592
- Multicast Policies593
  - Ipv4 Multicast Policies593
- Understanding Multicast Traceroute (Mtrace)600
  - Important Points to Remember601
- Printing Multicast Traceroute (Mtrace) Paths601
- Supported Error Codes602
- Mtrace Scenarios603
35 Object Tracking609
- Object Tracking Overview609
- Object Tracking Configuration612
- Displaying Tracked Objects618
36 Open Shortest Path First (Ospfv2 and Ospfv3)620
- Protocol Overview620
- OSPF with Dell Networking os626
- Configuration Information629
- Configuration Task List for Ospfv3 (OSPF for Ipv6)656
37 Policy-Based Routing (PBR)671
- Overview671
- Implementing PBR672
- Configuration Task List for Policy-Based Routing672
- Sample Configuration677
  - Create the Redirect-List Goldassign Redirect-List GOLD to Interface 2/11View Redirect-List GOLD678
38 PIM Sparse-Mode (PIM-SM)682
- Implementation Information682
- Protocol Overview682
- Configuring PIM-SM683
  - Related Configuration Tasks684
- Enable PIM-SM684
- Configuring S,G Expiry Timers685
- Configuring a Static Rendezvous Point686
  - Overriding Bootstrap Router Updates686
- Configuring a Designated Router686
- Creating Multicast Boundaries and Domains687
39 PIM Source-Specific Mode (PIM-SSM)688
- Implementation Information688
  - Important Points to Remember688
- Configure PIM-SSM689
  - Related Configuration Tasks689
- Enabling PIM-SSM689
- Use PIM-SSM with IGMP Version 2 Hosts689
  - Configuring PIM-SSM with Igmpv2690
- Electing an RP Using the BSR Mechanism691
  - Enabling RP to Server Specific Multicast Groups692
40 Port Monitoring693
- Important Points to Remember693
- Port Monitoring694
- Configuring Port Monitoring696
- Configuring Monitor Multicast Queue697
- Enabling Flow-Based Monitoring698
- Remote Port Mirroring699
- Encapsulated Remote Port Monitoring705
- ERPM Behavior on a Typical Dell Networking os707
  - Decapsulation of ERPM Packets at the Destination IP/ Analyzer707
- Port Monitoring on VLT708
41 Private Vlans (PVLAN)711
- Private VLAN Concepts711
- Using the Private VLAN Commands712
- Configuration Task List713
- Private VLAN Configuration Example717
- Inspecting the Private VLAN Configuration718
42 Per-VLAN Spanning Tree Plus (PVST+)720
- Protocol Overview720
- Implementation Information721
- Configure Per-VLAN Spanning Tree Plus721
  - Related Configuration Tasks721
- Enabling PVST721
- Disabling PVST722
- Influencing PVST+ Root Selection722
- Modifying Global PVST+ Parameters724
- Modifying Interface PVST+ Parameters725
- Configuring an Edgeport726
- PVST+ in Multi-Vendor Networks726
- Enabling PVST+ Extend System ID726
- PVST+ Sample Configurations727
43 Quality of Service (Qos)730
- Implementation Information732
- Port-Based Qos Configurations732
- Policy-Based Qos Configurations735
- DSCP Color Maps745
- Enabling Qos Rate Adjustment747
- Enabling Strict-Priority Queueing747
- Weighted Random Early Detection748
- Pre-Calculating Available Qos CAM Space750
- Configuring Weights and ECN for WRED751
  - Global Service Pools with WRED and ECN Settings752
- Configuring WRED and ECN Attributes753
- Guidelines for Configuring ECN for Classifying and Color-Marking Packets753
- Sample Configuration to Mark Non-Ecn Packets as "Yellow" with Multiple Traffic Class754
  - Classifying Incoming Packets Using ECN and Color-Marking754
  - Sample Configuration to Mark Non-Ecn Packets as "Yellow" with Single Traffic Class756
- Applying Layer 2 Match Criteria on a Layer 3 Interface757
- Applying DSCP and VLAN Match Criteria on a Service Queue758
- Classifying Incoming Packets Using ECN and Color-Marking759
- Guidelines for Configuring ECN for Classifying and Color-Marking Packets760
- Sample Configuration to Mark Non-Ecn Packets as "Yellow" with Multiple Traffic Class761
- Sample Configuration to Mark Non-Ecn Packets as "Yellow" with Single Traffic Class761
- Enabling Buffer Statistics Tracking762
44 Routing Information Protocol (RIP)765
- Protocol Overview765
  - Ripv1765
  - Ripv2765
- Implementation Information766
- Configuration Information766
  - Configuration Task List766
  - RIP Configuration Example772
45 Remote Monitoring (RMON)778
- Implementation Information778
- Fault Recovery778
46 Rapid Spanning Tree Protocol (RSTP)782
- Protocol Overview782
- Configuring Rapid Spanning Tree782
  - Related Configuration Tasks782
- Important Points to Remember782
  - RSTP and VLT783
- Configuring Interfaces for Layer 2 Mode783
- Enabling Rapid Spanning Tree Protocol Globally784
- Adding and Removing Interfaces786
- Modifying Global Parameters786
  - Enabling SNMP Traps for Root Elections and Topology Changes788
- Modifying Interface Parameters788
- Influencing RSTP Root Selection788
- Configuring an Edgeport789
- Configuring Fast Hellos for Link State Detection790
47 Software-Defined Networking (SDN)791
48 Security792
- AAA Accounting792
  - Configuration Task List for AAA Accounting792
- AAA Authentication794
  - Configuration Task List for AAA Authentication795
- Obscuring Passwords and Keys798
- AAA Authorization798
  - Privilege Levels Overview798
  - Configuration Task List for Privilege Levels799
- Radius803
- Tacacs808
- Protection from TCP Tiny and Overlapping Fragment Attacks811
- Enabling SCP and SSH811
- Telnet819
- VTY Line and Access-Class Configuration819
- Role-Based Access Control821
- Two Factor Authentication (2FA)832
- Configuring the System to Drop Certain ICMP Reply Messages833
49 Service Provider Bridging835
- VLAN Stacking835
- VLAN Stacking Packet Drop Precedence844
- Dynamic Mode Cos for VLAN Stacking846
  - Mapping C-Tag to S-Tag Dot1P Values847
- Layer 2 Protocol Tunneling848
- Provider Backbone Bridging851
50 Sflow852
- Overview852
- Implementation Information852
  - Important Points to Remember853
- Enabling Extended Sflow853
- Enabling and Disabling Sflow on an Interface854
- Enabling Sflow Max-Header Size Extended854
- Sflow Show Commands855
- Configuring Specify Collectors857
- Changing the Polling Intervals857
- Back-Off Mechanism857
- Sflow on LAG Ports858
- Enabling Extended Sflow858
  - Important Points to Remember859
51 Simple Network Management Protocol (SNMP)860
- Protocol Overview861
- Implementation Information861
- Snmpv3 Compliance with FIPS861
- Configuration Task List for SNMP862
  - Related Configuration Tasks862
- Important Points to Remember863
- Set up SNMP863
  - Creating a Community863
  - Setting up User-Based Security (Snmpv3)863
- Reading Managed Object Values865
- Writing Managed Object Values865
- Configuring Contact and Location Information Using SNMP866
- Subscribing to Managed Object Value Updates Using SNMP866
- Enabling a Subset of SNMP Traps867
- Enabling an SNMP Agent to Notify Syslog Server Failure869
- Copy Configuration Files Using SNMP870
  - Copying a Configuration File872
  - Copying Configuration Files Via SNMP872
  - Copying the Startup-Config Files to the Running-Config873
  - Copying the Startup-Config Files to the Server Via FTP873
  - Copying the Startup-Config Files to the Server Via TFTP874
  - Copy a Binary File to the Startup-Configuration874
  - Additional MIB Objects to View Copy Statistics874
  - Obtaining a Value for MIB Objects875
- MIB Support for Power Monitoring876
- MIB Support to Display the Available Memory Size on Flash876
  - Viewing the Available Flash Memory Size876
- MIB Support to Display the Software Core Files Generated by the System877
  - Viewing the Software Core Files Generated by the System877
- SNMP Support for WRED Green/Yellow/Red Drop Counters878
- MIB Support to Display the Available Partitions on Flash879
  - Viewing the Available Partitions on Flash879
- MIB Support to Display Egress Queue Statistics880
  - Viewing the ECMP Group Count Information881
- MIB Support for Entaliasmappingtable883
  - Viewing the Entaliasmappingtable MIB883
- MIB Support for LAG884
  - Viewing the LAG MIB885
- Manage Vlans Using SNMP885
  - Creating a VLAN885
  - Assigning a VLAN Alias886
  - Displaying the Ports in a VLAN886
  - Add Tagged and Untagged Ports to a VLAN887
- Managing Overload on Startup888
- Enabling and Disabling a Port Using SNMP888
- Fetch Dynamic MAC Entries Using SNMP889
- Deriving Interface Indices890
- Monitor Port-Channels891
- Enabling an SNMP Agent to Notify Syslog Server Failure892
- Troubleshooting SNMP Operation893
- Transceiver Monitoring893
52 Stacking895
- Stacking Overview895
- Important Points to Remember902
- Stacking Installation Tasks902
- Stacking Configuration Tasks910
- Verify a Stack Configuration914
  - Displaying the Status of Stacking Ports915
- Remove Units or Front End Ports from a Stack916
  - Removing a Unit from a Stack916
  - Removing Front End Port Stacking917
- Troubleshoot a Stack917
  - Recover from Stack Link Flaps918
  - Recover from a Card Problem State on a Stack918
53 Storm Control920
- Configure Storm Control920
  - Configuring Storm Control from INTERFACE Mode920
  - Configuring Storm Control from CONFIGURATION Mode921
54 Spanning Tree Protocol (STP)922
- Protocol Overview922
- Configure Spanning Tree923
  - Related Configuration Tasks923
- Important Points to Remember923
- Configuring Interfaces for Layer 2 Mode924
- Enabling Spanning Tree Protocol Globally925
- Adding an Interface to the Spanning Tree Group927
- Modifying Global Parameters927
- Modifying Interface STP Parameters928
- Enabling Portfast928
  - Prevent Network Disruptions with BPDU Guard929
- Selecting STP Root931
- STP Root Guard931
  - Root Guard Scenario931
  - Configuring Root Guard932
- Enabling SNMP Traps for Root Elections and Topology Changes933
- Configuring Spanning Trees as Hitless933
- STP Loop Guard933
  - Configuring Loop Guard935
- Displaying STP Guard Configuration935
55 Supportassist937
- Configuring Supportassist Using a Configuration Wizard938
- Configuring Supportassist Manually938
- Configuring Supportassist Activity940
- Configuring Supportassist Company941
- Configuring Supportassist Person942
- Configuring Supportassist Server942
- Viewing Supportassist Configuration943
56 System Time and Date945
- Network Time Protocol945
- Dell Networking os Time and Date951
57 Tunneling955
- Configuring a Tunnel955
- Configuring Tunnel Keepalive Settings956
- Configuring a Tunnel Interface956
- Configuring Tunnel Allow-Remote Decapsulation957
- Configuring the Tunnel Source Anylocal957
58 Uplink Failure Detection (UFD)959
- Feature Description959
- How Uplink Failure Detection Works960
- UFD and NIC Teaming961
- Important Points to Remember961
- Configuring Uplink Failure Detection962
- Clearing a UFD-Disabled Interface963
- Displaying Uplink Failure Detection964
- Sample Configuration: Uplink Failure Detection966
59 Upgrade Procedures968
- Get Help with Upgrades968
60 Virtual Lans (Vlans)969
- Default VLAN970
- Port-Based Vlans970
- Vlans and Port Tagging971
- Configuration Task List971
- Configuring Native Vlans974
- Enabling Null VLAN as the Default VLAN975
61 Virtual Link Trunking (VLT)976
- Overview976
- Configure Virtual Link Trunking983
- RSTP Configuration995
- PVST+ Configuration1006
  - Sample PVST+ Configuration1006
- Peer Routing Configuration Example1007
- Evlt Configuration Example1017
  - Evlt Configuration Step Examples1017
- PIM-Sparse Mode Configuration Example1019
- Verifying a VLT Configuration1020
- Additional VLT Sample Configurations1023
- Troubleshooting VLT1025
- Reconfiguring Stacked Switches as VLT1026
- Specifying VLT Nodes in a PVLAN1026
- Configuring a VLT VLAN or LAG in a PVLAN1030
  - Creating a VLT LAG or a VLT VLAN1030
  - Associating the VLT LAG or VLT VLAN in a PVLAN1031
- Proxy ARP Capability on VLT Peer Nodes1032
  - Working of Proxy ARP for VLT Peer Nodes1032
- VLT Nodes as Rendezvous Points for Multicast Resiliency1033
- Configuring VLAN-Stack over VLT1033
- Ipv6 Peer Routing in VLT Domains Overview1037
62 VLT Proxy Gateway1043
- Proxy Gateway in VLT Domains1043
- Configuring a Static VLT Proxy Gateway1048
- Configuring an LLDP VLT Proxy Gateway1048
- VLT Proxy Gateway Sample Topology1048
63 Virtual Extensible LAN (VXLAN)1053
- Overview1053
- Components of VXLAN Network1054
- Functional Overview of VXLAN Gateway1055
- VXLAN Frame Format1055
  - Components of VXLAN Frame Format1056
- Configuring and Controlling VXLAN from the NVP Controller GUI1056
- Configuring Vxlan Gateway1058
  - Connecting to an NVP Controller1058
  - Advertising VXLAN Access Ports to Controller1059
- Displaying VXLAN Configurations1060
- VXLAN Service Nodes for BFD1061
  - Examples of the Show Bfd Neighbors Command1062
- Static Virtual Extensible LAN (VXLAN)1062
- Preserving 802.1 P Value Across VXLAN Tunnels1064
64 Virtual Routing and Forwarding (VRF)1065
- VRF Overview1065
- VRF Configuration Notes1066
  - Dhcp1068
- VRF Configuration1068
- Sample VRF Configuration1072
- Route Leaking Vrfs1077
- Dynamic Route Leaking1078
  - Configuring Route Leaking Without Filtering Criteria1078
  - Configuring Route Leaking with Filtering1081
65 Virtual Router Redundancy Protocol (VRRP)1084
- VRRP Overview1084
- VRRP Benefits1085
- VRRP Implementation1085
- VRRP Configuration1086
  - Configuration Task List1086
    - Configuring Vrrp Authentication1090
    - Show Track1093
  - Setting VRRP Initialization Delay1095
- Sample Configurations1096
66 Debugging and Diagnostics1108
- Offline Diagnostics1108
  - Important Points to Remember1108
  - Running Offline Diagnostics1108
- Trace Logs1111
- Auto Save on Crash or Rollover1111
- Last Restart Reason1111
- Hardware Watchdog Timer1112
- Using the Show Hardware Commands1112
- Enabling Environmental Monitoring1113
- Troubleshooting Packet Loss1116
- Enabling Application Core Dumps1124
- Mini Core Dumps1124
- Enabling TCP Dumps1125
67 Standards Compliance1126
- IEEE Compliance1126
- RFC and I-D Compliance1127
- MIB Location1137
509 V31138
- Introduction to X.509V3 Certification1138
- X.509V3 Support in Dell Networking os1139
- Information about Installing CA Certificates1141
  - Installing CA Certificate1141
- Information about Creating Certificate Signing Requests (CSR)1141
  - Creating Certificate Signing Requests (CSR)1142
- Information about Installing Trusted Certificates1143
  - Installing Trusted Certificates1143
- Transport Layer Security (TLS)1143
  - Syslog over TLS1144
- Online Certificate Status Protocol (OSCP)1144

Dell S4048-ON - Page 109

Table of Contents

Related product manuals