Page 3
including any code and software unless expressly authorized by THE PERSONAL USE OF A CONSUMER OR OTHER USES IN Extreme Networks. Unauthorized reproduction, transmission, WHICH IT DOES NOT RECEIVE REMUNERATION TO: (I) ENCODE dissemination, storage, and or use without the express written VIDEO IN COMPLIANCE WITH THE AVC STANDARD (“AVC consent of Extreme Networks can be a criminal, as well as a civil VIDEO”) AND/OR (II) DECODE AVC VIDEO THAT WAS ENCODED...
Page 4
For additional information on Extreme Networks trademarks, please see: http://www.extremenetworks.com/company/legal/...
Contents Chapter 1: Preface........................ 7 .......................... 7 Purpose .......................... 7 Training ...................... 7 Providing Feedback to Us .......................... 7 Getting Help .................... 8 Extreme Networks Documentation ................... 9 Subscribing to service notifications Chapter 2: New in this document.................. 10 Chapter 3: Fundamentals....................... 11 ........................
Page 6
Contents ...................... 42 Enabling remote access .................. 42 Using telnet to log on to the device ............... 43 Enabling the web server management interface ............... 43 Accessing the switch through the web interface ................ 44 Enabling or disabling Quick Configuration .................... 45 Recording a Quick Configuration ....................
This document provides basic instructions to install the hardware and perform basic configuration on the following platforms: • Extreme Networks Ethernet Routing Switch 4900 Series • Extreme Networks Ethernet Routing Switch 5900 Series Examples and network illustrations in this document may illustrate only one of the supported platforms.
Preface Product purchased from Extreme Networks If you purchased your product from Extreme Networks, use the following support contact information to get help. If you require assistance, contact Extreme Networks using one of the following methods: • GTAC (Global Technical Assistance Center) for Immediate Support - Phone: 1-800-998-2408 (toll-free in U.S.
Subscribing to service notifications Current Product Documentation www.extremenetworks.com/documentation/ Archived Documentation (for previous www.extremenetworks.com/support/documentation- archives/ versions and legacy products) Release Notes www.extremenetworks.com/support/release-notes Open Source Declarations Some software files have been licensed under certain open source licenses. More information is available at: www.extremenetworks.com/support/policies/software-licensing. Subscribing to service notifications Subscribe to receive an email notification for product and software release announcements, Vulnerability Notices, and Service Notifications.
• A foldout poster For more information about hardware specifications and installation procedures, see Installing Ethernet Routing Switch 5900 Series or Installing Ethernet Routing Switch 4900 Series. For more information about how to configure security, see Configuring Security on Ethernet Routing Switch 4900 and 5900 Series.
Fundamentals To use the console port, you need the following equipment: • A terminal or TeleTypewriter (TTY)-compatible terminal, or a portable computer with a serial port and terminal-emulation software. • An Underwriters Laboratories (UL)-listed straight-through or null modem RS-232 cable with a female DB-9 connector for the console port on the switch.
Secure and nonsecure protocols Table 1: Access levels and default logon values Access level Description Default Logon Default Password Read-only Permits view-only configuration user and status information. Is equivalent to Simple Network Management Protocol (SNMP) read-only community access. Read/write View and change configuration secure and status information across the switch.
Fundamentals Nonsecure protocols Default status Equivalent secure Default status protocols Important: You should take the appropriate security precautions within the network if you use HTTP. Note: On SSH, by default, HTTP is enabled and HTTPS is disabled. Out-of-band management Out-of-band management allows IPv4 or IPv6 switch or stack management using the dedicated out- of-band management port.
Page 15
Out-of-band management Only the base unit allows all commands for out-of-band management. if the base unit leaves the stack, the stack IP addresses and priveleges transfer to the temporary base unit (TBU). You need a link in the management port TBU for the IP address to be operational. On the base unit, if you configure the IP stack address, the base unit is the only active IP address in the stack.
Fundamentals New unit Quick Configuration You can use the new unit Quick Configuration feature to create a default configuration that applies to any new unit joining the stack. Quick Configuration can configure the VLAN IDs, port speed, PVID, tagging, and spanning tree groups for the new unit without resetting the stack. Password encryption The local passwords for the switch are stored in the configuration file.
Enterprise Device Manager Enterprise Device Manager Enterprise Device Manager (EDM) is an embedded graphical user interface (GUI) that you can use to manage and monitor the platform through a standard web browser. EDM is embedded in the switch software, and the switch operates as a web server, so you do not require additional client software.
Page 18
Fundamentals Table 3: EDM default user name and password User Name Password admin password Important: The default passwords and community strings are documented and well known. You should change the default passwords and community strings immediately after you first log on. For more information about changing user names and passwords, see Configuring Security on Ethernet Routing Switch 4900 and 5900 Series.
Page 19
Enterprise Device Manager Figure 1: Device Physical View EDM window The EDM window contains the following parts: 1. Navigation tree—The navigation pane on the left side of the window that displays available command folders in a tree format. 2. Navigation tree toolbar—The area displays buttons for common functions. 3.
Page 20
Fundamentals Figure 2: EDM window December 2017 Quick Start Configuration for ERS 4900 and 5900 Series...
See Installing Ethernet Routing Switch 5900 Series or Installing Ethernet Routing Switch 4900 Series for a list of the terminal emulation settings that must be used with any terminal emulation software used to connect to the switch.
Connecting and configuring the switch Configuring the switch Use the procedures in this section to configure the switch using Quick Start. Configuring Quick Start using CLI The Install script consists of a series of prompts that are used to set up the minimum configuration information.
Page 23
Configuring the switch Please provide the in-band sub-net mask [255.255.255.0]: 7. Enter the default gateway IP address at the following prompt: Please provide the Default Gateway [0.0.0.0]: 8. Enter the management sub-net mask at the following prompt: Please provide the management sub-net mask[0.0.0.0]: 9.
Connecting and configuring the switch Please provide the Quick Start VLAN <1-4094> [1]: Please provide the in-band IP Address[192.168.1.1]: Please provide the in-band sub-net mask[255.255.255.0]: Please provide the Default Gateway[0.0.0.0]: Please provide the management sub-net mask[0.0.0.0]: Please provide the management IP Address[0.0.0.0]: Please provide the management Default Gateway[0.0.0.0]: Please provide the Read-Only Community String[**********]: Please provide the Read-Write Community String[**********]:...
Configuring the terminal Configuring the terminal You can configure the switch terminal settings to suit your preferences for the terminal speed and display. About this task Use the following procedure to configure terminal settings including the terminal connection speed, and number of characters in the terminal display width and length. Important: After you modify the terminal configuration, the new settings are applied to the current active session and to all future sessions (serial, telnet or SSH).
Connecting and configuring the switch Variable Definition width Sets the width of the terminal display in characters. By default, 79 characters are displayed. DEFAULT: 79 Configuring BootP on the current instance of the switch or server About this task The default operational mode for BootP on the switch is BootP or DefaultIP. The switch requests an IP address from BootP only if one is not already configured from the console terminal (or if the IP address is the default IP address 192.168.1.1).
Configuring diagnostics quick mode Configuring diagnostics quick mode The diagnostics quick mode flag enables you to choose the diagnostic test behavior during boot. You can enable quick mode boot tests or all the diagnostic tests. The impact to boot time is 15 to 20 seconds when all diagnostic tests run during startup.
Connecting and configuring the switch Configuring multiple local read-write (RW) and read-only (RO) users accounts Use the following procedure to create, modify and delete local users. Procedure 1. Enter Global Configuration mode: enable configure terminal 2. To create a user, enter the following command: username add <username>...
Setting user access limitations using Enterprise Device Manager Enabling and disabling passwords After you set the read-only and read-write passwords, you can individually enable or disable them for the various switch-access methods. About this task Follow this procedure to enable or disable a password for a specific access method. Procedure 1.
Connecting and configuring the switch Configuring the console password using EDM About this task Use this procedure to configure a password for serial console access to a stack or standalone switch. Procedure 1. From the navigation tree, double-click Security. 2. In the Security tree, double-click Web/Telnet/Console. 3.
Setting user access limitations using Enterprise Device Manager Variable Value characters, two numbers, and two special characters. Read-Write Stack Password Specifies the read-write password for stack or switch access. The following are the requirements for the password: • The maximum length is 255 characters. •...
Connecting and configuring the switch Variable Value • RADIUS Authentication— uses RADIUS password authentication for Web and Telnet access. • TACACS Authentication— uses TACACS+ authentication, authorization, and accounting (AAA) services authentication for Web and Telnet access. Read-Only Stack Password Specifies the read-only password for stack or switch access.
Page 33
Configuring the CLI banner 2. Configure the switch to use a custom banner or use the default banner: banner {custom | static} 3. Create a custom banner: banner <line_number> "<LINE>" 4. Save the configuration: save config 5. Display the banner information: show banner 6.
Connecting and configuring the switch Variable definitions Use the definitions in the following table to use the banner command. Variable Definition custom Disable the use of the default banner. static Activate the use of the default banner. <line_number> Banner line number you are configuring. The range is 1 to 19 <LINE>...
Page 35
Configuring system identification If you ran the install script to set up the configuration information, the read-write community name is already configured. 5. Configure the system name: snmp-server name <text> 6. Configure the system contact: snmp-server contact <text> 7. Configure the location: snmp-server location <text>...
Connecting and configuring the switch Use the definitions in the following table to use the snmp-server host command. Table 8: snmp-server host command Variable Definition <host-ip> Specify an IPv4 or IPv6 address for a host intended to be the trap destination. <community-string>...
Configuring real-time clock configure terminal 2. Enter the following command to configure the SNTP server primary IP address: sntp server primary address [<A.B.C.D> | <primary_server_ipv6address>] 3. Enter the following command to configure the SNTP secondary server IP address: sntp server secondary address [<A.B.C.D> | <secondary_server_ipv6address>] Note: SNTP supports primary and secondary NTP servers.
Connecting and configuring the switch Variable definitions Use the definitions in the following table to use the clock set command. Variable Value <LINE> Specify a string in the format of mmddyyyyhhmmss that defines the current local time. <hh:mm:ss> Specify the current local time in the hh:mm:ss format.
Page 39
Configuring local time zone Switch#configure terminal Switch(config)#clock time-zone PST -8 This command sets the time zone to UTP minus 8 hours and the time zone is displayed as "PST." Configuring daylight saving time Switch(config)#clock summer-time BST date 28 Mar 2013 2:00 30 Aug 2013 15:00 +60 This command sets the daylight saving time to begin at 02:00 on March 28, 2013 and end on August 30, 2013 at 15:00.
Connecting and configuring the switch Variable Definition offset Number of minutes to add during the summertime. zone The time zone acronym to be displayed when daylight saving time is in effect. If unspecified, the acronym defaults to the time zone acronym that was configured when the time zone was configured.
Configuring a static route enable configure terminal 2. Enter the following command to enable IP routing globally: ip routing 3. Enter the following command to configure an IP address on a VLAN: ip address <ip address> <mask> [<MAC-offset>] 4. Enter the following command to configure a static route: ip route <destination ip>...
Connecting and configuring the switch Enabling remote access You can enable remote access for telnet, SSH (on SSH software images), SNMP, and webpage access. For more information, see Using CLI and EDM on Ethernet Routing Switch 4900 and 5900 Series and Configuring Systems on Ethernet Routing Switch 4900 and 5900 Series.
Enabling the web server management interface Procedure 1. From a computer or terminal, start a telnet session: telnet <IPv4_address> where <IPv4_address> is the IP address of the switch. The stand-alone units use the default IP address of 192.168.1.1 if the switch does not obtain its IP address from another source. 2.
Connecting and configuring the switch Before you begin • Ensure that the switch is running. • Note the switch IP address. • Ensure that the web server is enabled. • Note the user name and password. • Open one of the supported web browsers. For more information about the supported browsers, see Using CLI and EDM on Ethernet Routing Switch 4900 and 5900 Series.
Recording a Quick Configuration quickconfig enable 3. To disable Quick Configuration, enter the following command: no quickconfig enable 4. To default Quick Configuration, enter the following command: default quickconfig Next steps Use the quickconfig start-recording command to record a default configuration that applies to new units joining the stack.
Connecting and configuring the switch Example The following example records a Quick Configuration for VLAN and port configurations that applies to a new unit joining a stack if Quick Configuration is enabled: enable config term vlan port $/13-40 tag untagPvidonly vlan create 10 name vlan_10 type port vlan create 20 name vlan_20 type port vlan members add 10 $/13-40...
Page 47
Configuring a VLAN using CLI Example Creating a range of port-based VLANs: Switch(config)#vlan create 100,107,109-113,115 type port Creating a protocol-based VLAN: Switch(config)#vlan create 200 type protocol-decEther2 Creating and naming a voice-VLAN: Switch(config)#vlan create 300 name my_vlan type port voice-vlan Renaming an existing VLAN: Switch(config)#vlan name 300 my_vlan2 Creating a VLAN using a user-defined protocol and specifying the frame encapsulation header type:...
Page 48
Connecting and configuring the switch Variable definitions Use the definitions in the following table to use the vlan create command. Variable Definition <VID_list> Enter as an individual VLAN ID to create a single VLAN or enter as a range of VLAN IDs to create multiple VLANs simultaneously.
Configuring VLAN using EDM Variable Definition • ether <4096–65534> —Ethernet II user-defined VLAN with this Protocol ID • llc <1-65534> —LLC user-defined VLAN with this Protocol ID • snap <1-65534> —SNAP user-defined VLAN with this Protocol ID protocol-xnsEther2 Specify an xnsEther2 protocol-based VLAN. protocol-vinesEther2 Specify a vinesEther2 protocol-based VLAN.
Page 50
Connecting and configuring the switch 9. Select VoiceEnabled to indicate whether a VLAN is voice VLAN. 10. Select RspanEnabled to indicate whether a VLAN is RSPAN enabled. Field descriptions Use the descriptions in the following table to create a VLAN using EDM. Field Description Specify the ID for the VLAN.
Page 51
Configuring VLAN using EDM Field Description PortMembers Specifies the ports that are members of the VLAN. ActiveMembers Indicates the ports that are currently active in the VLAN. Active ports include all static ports and any dynamic ports where the VLAN policy was met. This is a read-only value.
Connecting and configuring the switch Field Description UserDefinedPid Indicates the user defined protocol identifier for a protocol based VLAN. This is a read-only value. Encap Indicates the encapsulation type for user defined protocol based VLANs only. This is a read-only value.
Saving the configuration If the switch is reset to default, the license file must be reinstalled to reenable licensed features. Resetting a switch to default removes the license file from its storage area in NVRAM. Store the license file on a TFTP server accessible by the switch or stack before starting the installation procedure.
Connecting and configuring the switch About this task Use this procedure to save the configuration. Procedure 1. Enter Privileged EXEC mode: enable 2. At the command prompt, enter the following command: save config Storing the configuration files Before and after you upgrade your switch software, make copies of the configuration files. If an error occurs, use backup configuration files to return to a previous state.
Page 55
Shutting down the switch Variable Definition <1-8> The unit number in which the USB device is inserted, if the unit is a part of the stack. Shutting down the switch The switch administrator can use this feature to safely shut down the switch without interrupting a process or corrupting the software image.
Page 56
Connecting and configuring the switch Reloading a remote switch after configuration This procedure is intended to be used by system administrators to reload a remote switch when configuration is complete. The configuration is not explicitly saved after the reload command is issued.
Chapter 5: Configuring management IP addresses using CLI This chapter provides procedural information you can use to assign, clear, and view in-band and out-of-band management IP addresses and gateway IP addresses. Configuring an in-band management IP address Use this procedure to configure the in-band management IPv4 address, subnet mask, and default gateway for a switch or stack.
Page 58
Configuring management IP addresses using CLI default gateway. Once an out-of-band management default gateway is configured, the in-band management address is reachable only through a directly attached subnet for the management VLAN. 3. To clear the in-band management IP address and the default gateway, enter the following commands at the command prompt: no ip address [switch | stack | unit <1–8>] no ip default-gateway...
Obtaining an in-band management IP address automatically Obtaining an in-band management IP address automatically Use this procedure to automatically obtain an in-band management IP address, subnet mask and default gateway on the switch or stack. About this task When you use DHCP, the switch or stack can also obtain up to three DNS server IP addresses. Procedure 1.
Configuring management IP addresses using CLI About this task This command displays the parameters for what is configured, what is in use, and the last BootP/ DHCP. If you do not enter any parameters, this command displays all IP-related configuration information.
Page 61
Configuring an out-of-band management IPv4 address Important: Only one management default gateway can operate for each unit or stack. The out-of- band management default gateway takes precedence over the in-band management default gateway. Once an out-of-band management default gateway is configured, the in-band management address is reachable only through a directly attached subnet for the management VLAN.
Configuring management IP addresses using CLI Variable Value DEFAULT: 0.0.0.0 Note: Although netmask appears as an optional parameter with the ip mgmt address command, you should change the netmask when you dynamically change the out-of-band management IP address for a switch or stack. default-gateway <A.B.C.D>...
Configuring a management route Variable Value Displays out-of-band management configuration information for all units within a stack. route Displays management VLAN information. Note: If you do not enter a variable with the show ip mgmt command, out-of-band management configuration information for the local switch is displayed. Configuring a management route Use this procedure to configure a management route.
Configuring management IP addresses using CLI Configuring an in-band management IPv6 address Use this procedure to configure the in-band management IPv6 address for a switch or stack. Important: Changing or clearing the in-band management IPv6 address disconnects any active IP management connections.
Displaying in-band IPv6 management information Switch(config)#ipv6 address unit 2 2001:db8:3::/32 Switch(config)#ipv6 address unit 3 2001:db8:4::/32 Variable definitions The following table describes the parameters for the ip address command. Variable Value switch Specifies an in-band management IPv6 address for an individual switch (standalone or stack unit). stack Specifies an in-band management IPv6 address for the stack.
Configuring management IP addresses using CLI Default Gateway: 2001:db8:4::/32 Status: NotActive Note: The status of the default gateway is active when the IPv6 address configured is reachable. Configuring an out-of-band management IPv6 address Use this procedure to configure the out-of-band management IPv6 address and default gateway for a switch or stack.
Page 67
Configuring an out-of-band management IPv6 address Note: You must configure the stack out-of-band management IPv6 address on the base unit. Important: Only one management default gateway can operate for each unit or stack. The out-of- band management default gateway takes precedence over the in-band management default gateway.
Page 68
Configuring management IP addresses using CLI Example Switch>enable Switch#config terminal Enter configuration commands, one per line. End with CNTL/Z. Switch(config)#ipv6 mgmt address stack 2001:db8:1::/32 % IPV6 Oob management interface does not exist Switch(config)#ipv6 mgmt interface Switch(config)#ipv6 mgmt address stack 2001:db8:1::/32 Switch(config)#show ipv6 mgmt interface 2013-08-06 17:28:49 GMT+02:00 UTC time: 2013-08-06 15:28:49...
Displaying out-of-band management IPV6 information The following table describes the parameters for the ipv6 mgmt command. Variable Value default-gateway <WORD> Specifies the management default gateway. Only specify an out-of-band default gateway if you do not route the management IP. WORD specifies an IPv6 address. Only one management default gateway can operate for each unit or stack.
Page 70
Configuring management IP addresses using CLI show ipv6 address interfaces 3. To display IPv6 management addresses, enter the following command at the command prompt: show ipv6 mgmt address [unit <1–8>] 4. To display IPv6 management default-gateway information, enter the following command at the command prompt: show ipv6 mgmt default-gateway 5.
Enabling or disabling the out-of-band management port Enabling or disabling the out-of-band management port Use this procedure to administratively enable or disable the Ethernet RJ-45 out-of-band management port. Procedure 1. Enter Global Configuration mode: enable configure terminal 2. To disable the out-of-band management port, enter the following command at the command prompt: ip mgmt shutdown [all | unit <1–8>] 3.
Page 72
Configuring management IP addresses using CLI Note: The file name, ip.cfg is case-insensitive. If a properly formatted file exists on a USB port, the switch uses that ip.cfg as the first option, rather than the last. You can specify one or more of the optional parameters in the ip.cfg file. All of the parameters are optional.
Page 73
Setting in-band management IP address parameters from the ip.cfg file on a USB device The stack IP will be the IP address defined in the ip.txt file if you have an ip.cfg file with the following commands: IP 192.0.2.2 Mask 255.255.255.0 Gateway 192.0.2.20 USBascii ip.txt Note:...
Configuring management IP addresses using CLI Configuring a Domain Name Server Use this procedure to set the default DNS domain name for the switch. Note: This default domain name is appended to all DNS queries or commands that do not already contain a DNS domain name.
Clearing the IP address enable configure terminal 2. At the command prompt, enter the following command: ip name-server [<ipv6_address> | <ip_address_1>] ip name-server [<ipv6_address> | <ip_address_2>] ip name-server [<ipv6_address> | <ip_address_3>] Variable definitions The following table describes the parameters for the ip name-server command. Note: The IPv6 parameter is valid only for switches that support IPv6.
Configuring management IP addresses using CLI About this task This command sets the IP address and subnet mask for a stack, switch, or unit to all zeros (0). Procedure 1. Enter Global Configuration mode: enable configure terminal 2. At the command prompt, enter the following command for IPv4 addresses: no ip address {stack | switch | unit <1–8>} for IPv6 addresses, enter the following command: no ipv6 address {stack | switch | unit <1–8>}...
Deleting the in-band default IP gateway address Deleting the in-band default IP gateway address Use this procedure to delete the default IP gateway address. Note: When the IP gateway is changed, connectivity to Telnet can be lost. Procedure 1. Enter Global Configuration mode: enable configure terminal 2.
Chapter 6: Configuring management IP addresses using EDM This chapter provides procedural information you can use to assign, clear, and view in-band and out-of-band management IP addresses and gateway IP addresses. Configuring out-of-band management using EDM Use this procedure to configure the out-of-band management IP address, subnet mask, and default gateway.
Page 79
Configuring out-of-band management using EDM Variable definitions Variable Value Unit Indicates a stack switch unit, for which to configure an out-of-band management IP address. Values range from 1 to 8. For a stack environment, a Unit value of 1 specifies the base unit.
Page 80
Configuring management IP addresses using EDM Variable Value DEFAULT for IPv6: 0::0/0 IpMgmtShutdown Specifies whether to enable or disable the management port for the unit. A value of true disables the port. DEFAULT: false December 2017 Quick Start Configuration for ERS 4900 and 5900 Series...
Chapter 7: Verification This chapter contains information about how to verify that your provisioning procedures result in a functional switch. Pinging an IP device You can ping a device to test the connection between a switch and another network device. After you ping a device, the switch sends an Internet Control Message Protocol (ICMP) packet to the target device.
Verification Example The following displays the output from the show boot command. Switch#show boot Unit Agent Image Secondary Image Active Image Diag Image Active Diag ----- ----------- --------------- ------------ ---------- ----------- 7.0.0.066 7.0.0.042 7.0.0.066 0.0.0.2c 0.0.0.2c * - Unit requires reboot for new Active Image to be made operational. # - Unit requires reboot for new Diag to be made operational.
Displaying local alarms raising and clearing of local alarms also creates a log entry for each event. Check alarms occasionally to ensure no alarms require additional operator attention. About this task Use this procedure to display local alarms. Procedure 1. Enter Global Configuration mode: enable configure terminal 2.
Need help?
Do you have a question about the 4900 Series and is the answer not in the manual?
Questions and answers