L2/L3 Switches System Configuration Guide Revision 1.0...
Page 2
Please Note: For the most up-to-date version of this manual, please see our web site at www.supermicro.com. Super Micro Computer, Inc. (“Supermicro”) reserves the right to make changes to the product described in this manual at any time and without notice.
• SBM-XEM-X10SM • SSE-X3348T The majority of this document applies to all the above listed Supermicro switch products. In any particular sub section however, the contents might vary across these switch product models. In those sections the differences are clearly identified with reference to particular switch product models. If any particular switch product model is not referenced, the reader can safely assume that the content is applicable to all the above listed models.
The “no ip address” command resets the switch IP address to 0.0.0.0. The example below shows the commands used to configure the management interface IP address manually. SMIS# configure terminal SMIS(config)# ip address 192.168.1.10 SMIS(config)# end Supermicro L2/L3 Switches Configuration Guide...
1.1.2 Management IP Address – DHCP Configuration Supermicro switches can be configured to obtain the management IP address through the DHCP protocol. In this case, a switch acts as a DHCP client and obtains the IP address for any DHCP server on the LAN.
The example below shows the commands used to configure IP gateway in TOR switches. SMIS# configure terminal SMIS(config)# ip route 0.0.0.0 0.0.0.0 10.1.1.1 SMIS(config)# end 1.2 Management Access Supermicro switches can enable access control of the switch by various mechanisms: Supermicro L2/L3 Switches Configuration Guide...
- Specify 1-15 for any of the privilege levels Step 3 Exits the configuration mode. Step 4 list users Displays the users available in the switch. show users Displays the users that are currently logged in. Supermicro L2/L3 Switches Configuration Guide...
Local Peer 1.2.2 Enable Supermicro switches provide support for configuring access to various CLI commands. This is achieved by Enable password and privilege levels. A total of 15 privilege levels can be specified. Follow the steps below to enable a privilege level.
SMIS# configure terminal SMIS(config)# enable password level 10 pwd1 1.2.4 IP Authorized Manager Supermicro switches allow configuration of IP authorized managers. This feature enhances security on the switch by using IP addresses to authorize computers to: Access the switch’s web browser interface •...
Page 13
Optional step – saves this configuration to be part of the startup configuration. If IP Authorized Managers are configured in a Supermicro switch, access to switch via telnet, ssh, etc. is possible only by those hosts given access. Other hosts will not be permitted access to the switch.
Gi0/21, Gi0/22, Gi0/23, Gi0/24 Ex0/1, Ex0/2, Ex0/3 Vlans allowed: All Available Vlans 1.3 Web Access Supermicro switches support a Web management interface. Some of the web management interface access configurations are configurable through CLI commands. Defaults – Web Access Parameter...
HTTP server status: Disabled HTTP port is: 80 When HTTP is enabled, Supermicro switches can be accessed from a web browser by specifying http:/<management-ip-address>. 1.3.2 HTTP Port The default HTTP port is 80. The HTTP port can be modified by the user.
1.3.3 WEB Session Timeout When a user session in the web interface is inactive, the user is logged out. In Supermicro switches, the session timeout for inactive WEB access users is configurable. The default web session time out value is 600 seconds.
SMIS# configure terminal SMIS(config)# statistics refresh-timer 5000 SMIS(config)# end 1.4 Interface Properties Supermicro switches support various types of interfaces: physical interfaces, port channel interfaces and VLAN interfaces. Each interface has different characteristics, some of which are configurable. Defaults – Interface Properties Parameter...
1.4.1 Description Supermicro switches allow users to configure a description string for the interfaces. This descriptive string will be useful to easily identify the interfaces. Follow the steps below to configure the interface description string. Step Command Description Step 1 configure terminal Enters the configuration mode.
Page 19
Gi0/9 down Gi0/10 down Gi0/11 down Gi0/12 down Gi0/13 down Gi0/14 down Gi0/15 down Gi0/16 down Gi0/17 down Gi0/18 down Gi0/19 down Gi0/20 down Gi0/21 down Gi0/22 server1-server2 Gi0/23 down Gi0/24 down Ex0/1 down Supermicro L2/L3 Switches Configuration Guide...
(-) between the start and end interface numbers. E.g.: int range gi 0/1-10 To provide multiple interfaces or ranges, separate with a comma (,). E.g.: int range gi 0/1-10, gi 0/20 Supermicro L2/L3 Switches Configuration Guide...
Page 21
Gi0/14 not connected Full 1 Gbps Auto Gi0/15 not connected Full 1 Gbps Auto Gi0/16 not connected Full 1 Gbps Auto Gi0/17 not connected Full 1 Gbps Auto Gi0/18 not connected Full 1 Gbps Auto Supermicro L2/L3 Switches Configuration Guide...
Interface speed can be configured for physical interfaces when auto negotiation is disabled. 1Gb RJ45 interfaces can be configured to operate at 10Mbps, 100Mbps or 1000Mbps speed. 10Gb interfaces in SSE-G24-TG4, SSE-G48-TG4, SBM-GEM-X2C, SBM-GEM-X2C+ and SBM-GEM-X3S+ switches can operate only at the fixed 10Gb speed.
Page 23
Gi0/1 not connected Full 1 Gbps Auto Gi0/2 not connected Full 1 Gbps Auto Gi0/3 not connected Full 1 Gbps Auto Gi0/4 not connected Full 1 Gbps Auto Gi0/5 not connected Full 1 Gbps Auto Supermicro L2/L3 Switches Configuration Guide...
No-Negotiation Ex0/3 not connected Full 10 Gbps No-Negotiation 1.4.4 Duplex Operation Supermicro switches support configuring physical interfaces to full-duplex or half-duplex operation. Follow the steps below to configure the duplex operation type. Step Command Description configure terminal Step 1 Enters the configuration mode.
Page 25
The example below shows the commands used to configure the duplex operation type. SMIS# configure terminal SMIS(config)# interface Gi 0/22 SMIS(config-if)# duplex half SMIS(config-if)# end SMIS# show interface status Port Status Duplex Speed Negotiation ---- ------ ------ ----- ----------- Gi0/1 not connected Full 1 Gbps Auto Supermicro L2/L3 Switches Configuration Guide...
Enters the configuration mode. interface <interface-type><interface-id> Step 2 Enters interface configuration mode. interface range <interface-type><interface-id> …. interface-type – may be any of the following: gigabit ethernet – gi extreme-ethernet – ex qx-ethernet – qx Supermicro L2/L3 Switches Configuration Guide...
Page 27
To change the MTU for all the interfaces, the “system mtu” command can be used. The example below shows the commands used to configure the interface MTU. SMIS# configure terminal SMIS(config)# interface Gi 0/22 SMIS(config-if)# mtu 9000 SMIS(config-if)# end Supermicro L2/L3 Switches Configuration Guide...
Pause Frames: 0 Discarded Packets: 0 Error Packets: 0 SMIS(config-if)# show interface mtu Gi 0/22 Gi0/22 MTU size is 9000 1.4.6 Flow Control Flow control enables Ethernet ports to control traffic during congestion to avoid packet loss. Supermicro L2/L3 Switches Configuration Guide...
Page 29
To provide multiple interfaces or ranges, separate with a comma (,). E.g.: int range gi 0/1-10, gi 0/20 If multiple interfaces are provided, the next step will perform the particular configuration on all these interfaces. Supermicro L2/L3 Switches Configuration Guide...
Storm control prevents traffic on a LAN from being disrupted by a broadcast, multicast, or unicast storm on one of the physical interfaces. A LAN storm occurs when packets flood the LAN due to errors in the Supermicro L2/L3 Switches Configuration Guide...
Page 31
To provide multiple interfaces or ranges, separate with a comma (,). E.g.: int range gi 0/1-10, gi 0/20 If multiple interfaces are provided, the next step will perform the particular configuration on all these interfaces. Supermicro L2/L3 Switches Configuration Guide...
Broadcast Storm Control: 50000 Multicast Storm Control: Disabled 1.5 Time Management The system time and date on Supermicro switches can be managed by Network Time Protocol (NTP) or configured manually. NTP provides synchronization of network resources by a synchronized network timestamp. Supermicro switches can function as a NTP client over UDP and receive the time from an NTP server in the network.
The “enable agent” command enables the agent. NTP servers can be deleted only when the NTP status is disabled. If the key is configured at a Supermicro switch that’s acting as an NTP client, ensure the same key is configured at the NTP server(s) as well.
Optional step – saves this configuration to be part of the startup configuration. The “ntp disable” command disables NTP in the switch. NTP can be enabled in Supermicro switches only after configuring at least 1 NTP server. The example below shows the commands used to configure NTP.
Time zone offset not set 1.5.3 NTP Authentication Supermicro switches support NTP authentication by the NTP server. The authentication data is encrypted by an MD5 algorithm. The NTP authentication key can be configured in the switch and this must be matched with the NTP authentication key in the NTP server. The authentication key is an NTP key number and text pair.
For-server1 Time zone offset not set 1.5.4 NTP Broadcast NTP server messages can be broadcast or unicast. By default, Supermicro switches receive unicast NTP messages. Follow the below steps to configure Supermicro switches to receive NTP broadcast messages from the NTP server.
Time zone offset not set 1.5.5 System Clock The system clock in Supermicro switches runs from the time the switch starts up and keeps track of the system date and time. The system clock can also be manually configured. System time configured manually will remain accurate until the next restart.
Page 38
Device Up Time: 0 days 0 hrs 48 mins 5 secs Boot-up Flash Area: Normal NTP Broadcast Mode: No [NTP] ntp is disabled Server Key Prefer =============== ===== ====== Key # Key ======= ==================================== Time zone offset value: 12:30 Supermicro L2/L3 Switches Configuration Guide...
Port mirroring direction Both 1.6.1 Switch Name Supermicro switches can be assigned a name for identification purposes. The default switch name is SMIS. The switch name is also used as a prompt. Follow the steps below to configure the switch name.
Key # Key ======= ==================================== Time zone offset not set 1.6.2 Switch Contact Supermicro switches provide an option to configure the switch in charge Contact details, usually an email ID. Follow the steps below to configure the switch contact. Step Command...
Page 41
Config Save IP Address: 0.0.0.0 Device Up Time: 0 days 0 hrs 50 mins 51 secs Boot-up Flash Area: Normal NTP Broadcast Mode: No [NTP] ntp is disabled Server Key Prefer =============== ===== ====== Key # Key ======= ==================================== Supermicro L2/L3 Switches Configuration Guide...
Time zone offset not set 1.6.3 System Location Supermicro switches provide an option to configure the switch location details. Follow the steps below to configure system location. Step Command Description Step 1 configure terminal Enters the configuration mode. Step 2 system location <location name>...
The “no system mtu” command resets the system MTU to its default value of 1500 bytes. The example below shows the commands used to configure the system MTU. SMIS# configure terminal SMIS(config)# system mtu 9200 SMIS(config)# end Supermicro L2/L3 Switches Configuration Guide...
Page 44
Gi0/16 MTU size is 9200 Gi0/17 MTU size is 9200 Gi0/18 MTU size is 9200 Gi0/19 MTU size is 9200 Gi0/20 MTU size is 9200 Gi0/21 MTU size is 9200 Gi0/22 MTU size is 9200 Supermicro L2/L3 Switches Configuration Guide...
Static MAC addresses can be unicast or multicast. • Forwarding Behavior for Static MAC Addresses: Supermicro switches provide the flexibility to configure the forwarding behavior for static MAC • addresses, i.e. how a port that receives a packet forwards it to another port for transmission.
Page 46
:aa:aa:aa>] [{interface <interface-type> <interface- id> }] show mac-address-table static unicast [vlan <vlan- range>] [address <aa:aa:aa:a a:aa:aa>] [{interface <interface-type> <interface- id> }] write startup-config Step 5 Optional step – saves this configuration to be part of the startup configuration. Supermicro L2/L3 Switches Configuration Guide...
Step 3 Exits the configuration mode. Step 4 show mac-address-table aging-time Displays the MAC address table aging time. write startup-config Step 5 Optional step – saves this configuration to be part of the startup configuration. Supermicro L2/L3 Switches Configuration Guide...
Enters the configuration mode. monitor session [session_number 1-1] Step 2 Configures port mirroring. destination interface <interface-type> <interface-id> | source interface <interface-type> <interface-id> [{ rx | tx | session_number – 1, indicates only one both }] } Supermicro L2/L3 Switches Configuration Guide...
Page 49
Step 3 Exits the configuration mode. show port-monitoring Step 4 Displays port monitoring configuration. Step 5 write startup-config Optional step – saves this configuration to be part of the startup configuration. Supermicro L2/L3 Switches Configuration Guide...
Ex0/3 Disabled Disabled Ex0/4 Disabled Disabled 1.7 System Logging (Syslog) Supermicro switches send system output messages to a logging process. This is called System Message Logging (Syslog). Logging can be done at various locations: Console • File • Server •...
LogBuffer(0 Entries) LogFile(0 Entries) 1.7.2 Syslog Server In Supermicro switches, Syslog messages can be re-directed to a Syslog server. Follow the steps below to configure the Syslog server. Step Command Description Step 1 configure terminal Enters the configuration mode. Step 2 logging <ip-address>...
<129> Apr 29 10:11:30 2013:INTF-1:Interface Gi0/22 status changed to UP <129> Apr 29 10:11:31 2013:INTF-1:Interface Gi0/22 status changed to UP SMIS# SMIS# show logging System Log Information ---------------------- Syslog logging: enabled(Number of messages 0) Console logging: disabled(Number of messages 0) Supermicro L2/L3 Switches Configuration Guide...
1.7.5 Logging Buffer The log messages are stored in a circular internal buffer in which older messages are overwritten once the buffer is full. The Syslog buffer size is configurable in Supermicro switches. Follow the steps below to configure the Syslog buffer.
The “no logging facility” command resets the logging facility to its default value of Local0. The example below shows the commands used to configure the Syslog facility. SMIS# configure terminal SMIS(config)# logging facility local5 SMIS(config)# end SMIS# show logging System Log Information ---------------------- Supermicro L2/L3 Switches Configuration Guide...
The example below shows the commands used to enable the logging of MAC address table updates. SMIS# configure terminal SMIS(config)# logging mac-address-table SMIS(config)# end 1.7.8 Trap Supermicro switches provide an option for specifying the type of traps that are to be logged. Supermicro L2/L3 Switches Configuration Guide...
Page 60
Displays the Syslog configuration. Step 5 write startup-config Optional step – saves this configuration to be part of the startup configuration. The “no logging trap” command resets the trap logging to its default value of ‘Critical’. Supermicro L2/L3 Switches Configuration Guide...
Buffered size: 50 Entries LogBuffer(0 Entries) LogFile(0 Entries) 1.8 Security Features Supermicro switches support four methods of user authentication: RADIUS – Remote Authentication Dial-In User Service (RADIUS) uses AAA service for ID • verification, granting access and tracking the actions of remote users.
SSL –Secure Socket Layer (SSL) provides server authentication, encryption and message integrity • as well as HTTP client authentication. 1.8.1 Login Authentication Mode Supermicro switches allow for the configuration of the user login authentication mechanism. Follow the steps below to configure the login authentication mechanism. Step Command Description...
Along with ACCEPT or REJECT packets, service options (Telnet, SSH, rlogin, or privileged EXEC services) and connection parameters like user timeouts are sent by the RADIUS server. Defaults – RADIUS Parameter Default Value Server None Supermicro L2/L3 Switches Configuration Guide...
Page 66
3 seconds None 1.8.2.1 RADIUS Server Supermicro switches function as a RADIUS client. The RADIUS server that is to be contacted for authentication can be configured in the switch. Follow the steps below to configure the RADIUS server’s parameters. Step Command...
TACACS provides access control to a switch through a client-server model, similar to RADIUS except that it provides enhanced security by encrypting all messages and reliability via TCP. Defaults – TACACS Parameter Default Value TACACS server None TACACS server re-tries TACACS TCP port Supermicro L2/L3 Switches Configuration Guide...
Page 68
1.8.3.1 TACACS Server Supermicro switches allow for the configuration of multiple TACACS servers. One of these servers provides the authentication support. Follow the steps below to configure a TACACS server. Step Command Description Step 1 configure terminal Enters the configuration mode.
Page 69
Connection failures: 0 1.8.3.2 Server Re-tries Supermicro switches will retry transmitting messages to the TACACS server if there is no response from the server. This retry count can be configured by the user. Follow the steps below to configure the TACACS server re-tries.
Page 70
SMIS(config)# end 1.8.3.3 TACACS Use-server Supermicro switches provide an option to configure multiple TACACS servers. Users can specify one of these available servers to be used at a time. Follow the steps below to configure the TACACS server to be used.
Acct. Sess. timeouts: 0 Malformed Pkts. rcvd.: 0 Socket failures: 0 Connection failures: 0 1.8.4 SSH Supermicro switches can act as a SSH client and support both SSH version 1 and SSH version 2. Defaults – SSH Supermicro L2/L3 Switches Configuration Guide...
Page 72
[hmac-sha1]) | port <(1024-65535)>}” command disables SSH. The example below shows the commands used to configure the SSH. SMIS# configure terminal SMIS(config)# ip ssh version compatibility SMIS(config)# end SMIS# show ip ssh Version: Both Cipher Algorithm: 3DES-CBC Authentication: HMAC-SHA1 Supermicro L2/L3 Switches Configuration Guide...
On a secure HTTP connection, data to and from an HTTP server is encrypted before being sent over the Internet. HTTP with SSL encryption (HTTPS) provides a secure connection to allow functions such as configuring a switch from a Web browser. Follow the steps below to configure Secure HTTP. Supermicro L2/L3 Switches Configuration Guide...
Page 74
CA servers are called as trustpoints, e.g. thawte.com. Supermicro switches c reate a Certificate Signing Request (CSR) using an RSA key pair and switch identification. Follow the steps below to configure a Certificate Signing Request (CSR) Supermicro L2/L3 Switches Configuration Guide...
Page 75
SMIS# show ssl server-cert Certificate: Data: Version: 1 (0x0) Serial Number: 10 (0xa) Signature Algorithm: md5WithRSAEncryption Issuer: C=US, ST=CA, L=SanJose, O=Supermicro, OU=Switch, CN=Switch/Email =support@supermicro.com Validity Not Before: Aug 11 22:18:10 2011 GMT Not After : Sep 10 22:18:10 2011 GMT Subject: CN=SMIS...
Page 76
Thawte) verifies your organization’s information and issues a unique certificate to you with that information. SSL certificates can be configured in Supermicro switches. The certificate should be specified in the PEM format. Follow the steps below to configure an SSL server certificate.
The default startup configuration file name is iss.conf. This startup configuration file is stored in the flash memory. Follow the steps below to write an existing switch configuration as the startup configuration. Supermicro L2/L3 Switches Configuration Guide...
– name of the configuration file. Step 2 show stored-config<filename> Displays the stored configuration file from local flash memory. filename – name of the configuration file. The external USB memory is available only in SSE-X24S, SSE-X3348S and SSE-X3348T switches. Supermicro L2/L3 Switches Configuration Guide...
1.9.3 Configuring Startup Configuration File Name Supermicro switches provide an option to select a file stored in flash memory as the startup configuration file that gets loaded when the switch is powered ON or restarted. Follow the steps below to configure the Startup configuration.
1.9.4 Copy Startup Configuration Supermicro switches can copy a switch’s startup configuration to a file in flash or to a remote location. Follow the steps below to copy the startup configuration to a file in remote location or to flash.
The example below shows the commands used to copy a file to another file in a remote site/flash. SMIS# copy flash:config1.txt flash:switch1.conf Copied flash:/mnt/config1.txt ==> flash:/mnt/switch1.conf SMIS# 1.9.6 Deleting Saved Configurations Supermicro switches allow users to delete the switch startup configuration and other stored configuration files. Supermicro L2/L3 Switches Configuration Guide...
SMIS# 1.9.7 Firmware Upgrades Supermicro switches support dual firmware images. The default firmware image is referred as “normal” and the backup firmware image is referred as the “fallback” image. The “firmware upgrade” command is used to update both the normal and the fallback image.
“set boot-up {normal | fallback}”. 1.9.8 Boot-up Options Supermicro switches support dual firmware images as “normal” and “fallback”. The switch boots up from the normal firmware image by default. Users can also configure the switch to boot from the fallback firmware image.
Key # Key ======= ==================================== Time zone offset not set 1.9.9 Reset to Factory Defaults Supermicro switches can be reset to factory defaults using a CLI command. Follow the steps below to reset a switch to its factory defaults. Step Command Description...
Page 85
SMIS(config)# reset-to-factory-defaults This command will reset settings to the factory defaults. After resetting to the factory defaults, a switch will be reloaded immediately. Do you really want to execute this command and reload the switch? [y/n] Supermicro L2/L3 Switches Configuration Guide...
Need help?
Do you have a question about the SSE-G48-TG4 and is the answer not in the manual?
Questions and answers