Fujitsu PRIMERGY BX900 Configuration Manual

Blade server systems, ethernet connection blade module sb6 / sb11a / sb11 ibp version
Hide thumbs Also See for PRIMERGY BX900:

Advertisement

Configuration Guide
PRIMERGY BX900/BX400
Blade Server Systems
Ethernet Connection Blade Module SB6 / SB11a / SB11
IBP Version
English

Advertisement

Table of Contents
loading

Summary of Contents for Fujitsu PRIMERGY BX900

  • Page 1 Configuration Guide PRIMERGY BX900/BX400 Blade Server Systems Ethernet Connection Blade Module SB6 / SB11a / SB11 IBP Version English...
  • Page 3: Configuration Guide

    PRIMERGY BX400/BX900 Connection Blades Ethernet Connection Blades PY CB Eth Switch/IBP 1 GB 18/6 (SB6) PY CB Eth Switch/IBP 1 GB 36/12 (SB11a) PY CB Eth Switch/IBP 1 GB 36/8+2 (SB11) Configuration Guide IBP version Edition July 2011...
  • Page 4 Fax forms for sending us your comments are included at the back of the manual. There you will also find the addresses of the relevant User documentation Department. Copyright and Trademarks Copyright © 2011 Fujitsu Technology Solutions GmbH. All rights reserved. Delivery subject to availability; right of technical modifications reserved.
  • Page 5: Table Of Contents

    Configuring SNMP Agent ..................59 17.1 Configuring SNMP Community ................. 59 17.2 Configuring SNMP User ................... 60 17.3 Configuring SNMP Remote EngineID ............... 61 17.4 Configuring SNMP Traps ..................62 17.5 Configuring SNMP Informs ..................63 2011 Fujitsu Technology Solutions ©...
  • Page 6 Configuring System Log ..................64 2011 Fujitsu Technology Solutions ©...
  • Page 7: Revision History

    Revision History Revision Date Editor Remark 2/18/2009 Moore C. J. Lee 1st Draft 1/31/2011 Moore C. J. Lee Add SNMP informs 7/29/2011 Moore C. J. Lee Extended VLAN Group 0.35 1/19/2012 E.Schröer Merged SB6/SB11a/SB11 2011 Fujitsu Technology Solutions ©...
  • Page 8: Configuration Guide Overview

    Configuring QoS Configuring IGMP/MLD snooping Configuring IEEE 802.1X Authentication Configuring Port Mirroring Configuring SNMP Agent Configuring System Log Mode Prompt privileged EXEC mode (BX900-CB1)# Configuration mode (BX900-CB1)(Config)# Interface mode (BX900-CB1)(Interface BX900-CB1/0/1)# Interface range mode (BX900-CB1)(if-range)# 2011 Fujitsu Technology Solutions ©...
  • Page 9: Configuring Management

    DHCP if the IP and default gateway are assigned by DHCP server successfully. This chapter will describe how to configure IP address for the in-band and out-of-band management interfaces and how to configure the default gateway for the system on the BX900 Ethernet Connection Blade. 2011 Fujitsu Technology Solutions ©...
  • Page 10: Configuring In-Band Management Ip Setting

    (BX900-CB1)(Config)#ip address 192.168.2.1 255.255.255.0 (BX900-CB1)(Config)#exit (BX900-CB1)#show ip interface IP address and netmask: 192.168.2.1 255.255.255.0, and address mode: User specified. InBand Mgmt Granted Ports: BX900-CB1/0/1, BX900-CB1/0/2, BX900-CB1/0/3, BX900-CB1/0/4, BX900-CB1/0/5, BX900-CB1/0/6, BX900-CB1/0/7, BX900-CB1/0/8, BX900-CB1/0/9, BX900-CB1/0/10, BX900-CB1/0/11, BX900-CB1/0/12, BX900-CB1/0/13, BX900-CB1/0/14, BX900-CB1/0/15, 2011 Fujitsu Technology Solutions ©...
  • Page 11 InBand Mgmt Granted Ports: BX900-CB1/0/1, BX900-CB1/0/2, BX900-CB1/0/3, BX900-CB1/0/4, BX900-CB1/0/5, BX900-CB1/0/6, BX900-CB1/0/7, BX900-CB1/0/8, BX900-CB1/0/9, BX900-CB1/0/10, BX900-CB1/0/11, BX900-CB1/0/12, BX900-CB1/0/13, BX900-CB1/0/14, BX900-CB1/0/15, BX900-CB1/0/16, BX900-CB1/0/17, BX900-CB1/0/18, BX900-CB1/0/19, BX900-CB1/0/20, BX900-CB1/0/21, BX900-CB1/0/22, BX900-CB1/0/23, BX900-CB1/0/24, BX900-CB1/0/25, BX900-CB1/0/26, BX900-CB1/0/27, BX900-CB1/0/28, BX900-CB1/0/29, BX900-CB1/0/30, BX900-CB1/0/31, BX900-CB1/0/32, BX900-CB1/0/33, BX900-CB1/0/34, BX900-CB1/0/35, BX900-CB1/0/36, 2011 Fujitsu Technology Solutions ©...
  • Page 12 BX900-CB1/0/37, BX900-CB1/0/38, BX900-CB1/0/39, BX900-CB1/0/40, BX900-CB1/0/41, BX900-CB1/0/42, BX900-CB1/0/43, BX900-CB1/0/44, BX900-CB1/0/45, BX900-CB1/0/46, BX900-CB1/0/47, BX900-CB1/0/48 InBand Mgmt Denied Ports: - (BX900-CB1)# 2011 Fujitsu Technology Solutions ©...
  • Page 13: Configuring Oob Ip Setting

    Changing protocol mode will reset ip configuration. Are you sure you want to continue? (y/n)y (BX900-CB1)(Config)#exit (BX900-CB1)#show oob IP Address........172.16.2.125 Subnet Mask........255.255.255.0 Default Gateway........ 172.16.2.254 IPv6 Address........FE80::21E:68FF:FE85:F760/64 OOB interface Configured Protocol....DHCP Burned In MAC Address......00:1E:68:85:F7:60 (BX900-CB1)# 2011 Fujitsu Technology Solutions ©...
  • Page 14 Are you sure you want to continue? (y/n)y (BX900-CB1)(Config)#oob ip 192.168.2.1 255.255.255.0 (BX900-CB1)#show oob IP Address........192.168.2.1 Subnet Mask........255.255.255.0 Default Gateway........ 0.0.0.0 IPv6 Address........FE80::21E:68FF:FE85:F760/64 OOB interface Configured Protocol....None Burned In MAC Address......00:1E:68:85:F7:60 (BX900-CB1)# 2011 Fujitsu Technology Solutions ©...
  • Page 15: Configuring Default Gateway Setting

    Are you sure you want to continue? (y/n)y (BX900-CB1)(Config)#oob ip 10.1.20.1 255.255.255.0 (BX900-CB1)(Config)#oob gateway 10.1.20.254 (BX900-CB1)(Config)#exit (BX900-CB1)#show oob IP Address........10.1.20.1 Subnet Mask........255.255.255.0 Default Gateway........ 10.1.20.254 IPv6 Address........FE80::21E:68FF:FE85:F760/64 OOB interface Configured Protocol....None Burned In MAC Address......00:1E:68:85:F7:60 (BX900-CB1)# 2011 Fujitsu Technology Solutions ©...
  • Page 16 The gateway of in-band and out-of-band (oob) management interface can’t be set at the same time. If the gateway of oob has been set, you have to remove it before you configure the gateway of in-band management interface. 2011 Fujitsu Technology Solutions ©...
  • Page 17: Upload Firmware Image And Configuration File

    TFTP Filename........sb11a-sw-r-0.30.0213.img Data Type........Code Management access will be blocked for the duration of the transfer Are you sure you want to start? (y/n)y TFTP code transfer starting File transfer operation completed successfully. (BX900-CB1)# 2011 Fujitsu Technology Solutions ©...
  • Page 18 TFTP Path......../ TFTP Filename........backup_config.cfg Data Type........Config File Management access will be blocked for the duration of the transfer Are you sure you want to start? (y/n)y File transfer operation completed successfully. (BX900-CB1)# 2011 Fujitsu Technology Solutions ©...
  • Page 19: Overview Uplink And Downlink

    Downlink port provides a network connection with 1Gbps full-duplex speed for the server blades. The downlink ports could be configured as a member of a LAG to combine server blade NICs connected to same Ethernet Connection Blade to provide a higher network bandwidth for a server blade. 2011 Fujitsu Technology Solutions ©...
  • Page 20: Packet Handling In Different Group Types

    VLAN ID are dropped at the uplink. Tagged packets with a VLAN ID that does not match the VLAN ID of any other VLAN Port Group defined for this uplink set will be dropped. All 2011 Fujitsu Technology Solutions ©...
  • Page 21: Service Lan

    Note that (VLAN) Port Group and Service (V)LAN may overlap on the internal ports (downlinks). The untagged packets received from the server blade or uplink ports should obey the rule of the (VLAN) Port Group. 2011 Fujitsu Technology Solutions ©...
  • Page 22 Port Group or incl. the VLAN tag. At the external ports VLAN Port Group definition. the tagged packets leave including their tags. Table: Packet handling for the downlink/internal ports 2011 Fujitsu Technology Solutions ©...
  • Page 23 Service VLAN. The handling of packets according to the Port Group or with other tags depends on the Port VLAN Port Group definition. Group or VLAN Port Group definitions. Table: Packet handling for the uplink/external ports 2011 Fujitsu Technology Solutions ©...
  • Page 24 Group Service LAN Service VLAN Group (native) Port Group VLAN Port Group VLAN Port Group (native) Service LAN Service VLAN N/A Legend: not allowed allowed, based on different VLAN ID N/A: don’t care, duplicate information 2011 Fujitsu Technology Solutions ©...
  • Page 25: Configuring Uplink Sets

    To display the uplink set, use show uplink-set privileged EXEC command. In this example, uplink-set up1 is created and interfaces 0/41 and 0/42 are assigned to this uplink set. (BX900-CB1)#configure (BX900-CB1)(Config)#uplink-set up1 2011 Fujitsu Technology Solutions ©...
  • Page 26 Backup snoop LACP ---------- ---------- -------------- -------------- -------------- ----- ------ ----- ---- default BX900-CB1/1/1 BX900-CB1/0/43, BX900-CB1/0/43, - BX900-CB1/1/2 BX900-CB1/0/44, BX900-CB1/0/44, BX900-CB1/0/45, BX900-CB1/0/45, BX900-CB1/0/46, BX900-CB1/0/46, BX900-CB1/0/47, BX900-CB1/0/47, BX900-CB1/0/48 BX900-CB1/0/48 BX900-CB1/1/3 BX900-CB1/0/41, BX900-CB1/0/41, - BX900-CB1/1/4 BX900-CB1/0/42 BX900-CB1/0/42 (BX900-CB1)# 2011 Fujitsu Technology Solutions ©...
  • Page 27: Configuring Link State

    To display the link state setting, use show linkstate privileged EXEC command. In this example, link state function is enabled on uplink-set up1. (BX900-CB1)#configure (BX900-CB1)(Config)#linkstate up1 (BX900-CB1)(Config)#exit (BX900-CB1)#show linkstate Uplink Set name Linkstate --------------------------------- --------- default (BX900-CB1)# 2011 Fujitsu Technology Solutions ©...
  • Page 28: Configuring Backup Port

    Try to set interface 0/42 to be the backup port of the uplink set up1. (BX900-CB1)#configure (BX900-CB1)(Config)#interface 0/42 (BX900-CB1)(Interface BX900-CB1/0/42)#port-backup (BX900-CB1)(Interface BX900-CB1/0/41)#interface 0/42 (BX900-CB1)(Interface BX900-CB1/0/42)#exit (BX900-CB1)(Config)#exit (BX900-CB1)#show port-backup up1 Uplink Set name Port Backup External active ports External backup ports --------------------- ----------------- ---------------------------- --------------------- BX900-CB1/0/41 BX900-CB1/0/42 (BX900-CB1)# 2011 Fujitsu Technology Solutions ©...
  • Page 29: Configuring Port Groups

    To create a port group, use port-group global configuration command. To add/remove an interface to a port group, use port-group/no port-group interface configuration command. To display the port group, use show port-group privileged EXEC command. 2011 Fujitsu Technology Solutions ©...
  • Page 30 (BX900-CB1)(Config)#port-group pg_2 up1 (BX900-CB1)(Config)#interface 0/2 (BX900-CB1)(Interface BX900-CB1/0/2)#no port-group (BX900-CB1)(Interface BX900-CB1/0/2)#port-group pg_2 (BX900-CB1)(Interface BX900-CB1/0/2)#exit (BX900-CB1)(Config)#exit (BX900-CB1)#show port-group pg_2 Port Group Name Internal Ports Uplink Set Name External Ports -------------------------- -------------------- ------------------------ ---------------------- pg_2 BX900-CB1/0/2 up1 BX900-CB1/0/41 BX900-CB1/0/42 (BX900-CB1)# 2011 Fujitsu Technology Solutions ©...
  • Page 31: Configuring Vlan Groups

    VLAN group. (BX900-CB1)#configure (BX900-CB1)(Config)#vlan-group vlang_1 2 up1 (BX900-CB1)(Config)#interface 0/1 (BX900-CB1)(Interface BX900-CB1/0/1)#no port-group (BX900-CB1)(Interface BX900-CB1/0/1)#no vlan-group (BX900-CB1)(Interface BX900-CB1/0/1)#vlan-group vlang_1 (BX900-CB1) (Interface BX900-CB1/0/1)#interface 0/2 (BX900-CB1) (Interface BX900-CB1/0/2)#no port-group (BX900-CB1) (Interface BX900-CB1/0/2)#vlan-group vlang_1 tagged (BX900-CB1)(Interface BX900-CB1/0/2)#exit 2011 Fujitsu Technology Solutions ©...
  • Page 32 VLAN group, you have to remove it from current group first. A downlink port is allowed to be the untagged member of a VLAN port group at a time, but it could be the tagged member of many different VLAN port group. 2011 Fujitsu Technology Solutions ©...
  • Page 33 In this example, set VLAN group vlang_1 to a native VLAN group. (BX900-CB1)#configure (BX900-CB1)(Config)#vlan-group-nativeVLAN vlang_1 (BX900-CB1)(Config)#exit (BX900-CB1)#show vlan-group vlang_1 VLAN Native VLAN port group name ID Internal ports UplinkSet name External ports VLAN -------------------- ------- ----------------- -------------- -------------------- ------ vlang_1 BX900-CB1/0/1 up1 BX900-CB1/0/41, yes BX900-CB1/0/42 (BX900-CB1)# 2011 Fujitsu Technology Solutions ©...
  • Page 34: Configuring Service Lan

    (BX900-CB1)(Config)#svc-lan slan_1 100 up2 (BX900-CB1)(Config)#interface 0/2 (BX900-CB1)(Interface BX900-CB1/0/2)# svc-lan slan_1 (BX900-CB1)(Interface BX900-CB1/0/2)#exit (BX900-CB1)(Config)#exit (BX900-CB1)#show svc-lan slan_1 Service LAN name VLAN ID Internal ports Uplink Set name External ports -------------------- ------- -------------- -------------------- -------------- slan_1 BX900-CB1/0/2 BX900-CB1/0/43, BX900-CB1/0/44 (BX900-CB1)# 2011 Fujitsu Technology Solutions ©...
  • Page 35: Configuring Service Vlan

    (BX900-CB1)( Config)#interface 0/3 (BX900-CB1)(Interface BX900-CB1/0/3)# svc-vlan svlan_1 (BX900-CB1)(Interface BX900-CB1/0/3)#exit (BX900-CB1)(Config)#exit (BX900-CB1)#show svc-vlan svlan_1 Service VLAN name VLAN ID Internal ports Uplink Set name External ports -------------------- ------- -------------- -------------------- -------------- svlan_1 BX900-CB1/0/3 BX900-CB1/0/45, BX900-CB1/0/46 (BX900-CB1)# 2011 Fujitsu Technology Solutions ©...
  • Page 36: Combining Port Groups And Service (V)Lan

    (BX900-CB1)(Config)#interface range 0/10 – 0/12 (BX900-CB1)(if-range)#svc-vlan svlan_overlap (BX900-CB1)(if-range)#exit (BX900-CB1)(Config)#exit (BX900-CB1)#show port-group pg_overlap Port Group Name Internal Ports Uplink Set Name External Ports -------------------------- -------------------- ------------------------ ---------------------- pg_overlap BX900-CB1/0/1 uplink_1 BX900-CB1/0/41 BX900-CB1/0/2 BX900-CB1/0/42 BX900-CB1/0/3 BX900-CB1/0/4 BX900-CB1/0/5 BX900-CB1/0/6 BX900-CB1/0/7 2011 Fujitsu Technology Solutions ©...
  • Page 37 BX900-CB1/0/8 BX900-CB1/0/9 BX900-CB1/0/10 BX900-CB1/0/11 BX900-CB1/0/12 (BX900-CB1)#show svc-vlan svlan_overlap Service VLAN name VLAN ID Internal ports Uplink Set name External ports -------------------- ------- -------------- -------------------- -------------- svlan_overlap 4094 BX900-CB1/0/10 uplink_2 BX900-CB1/0/45, BX900-CB1/0/11 BX900-CB1/0/46 BX900-CB1/0/12 (BX900-CB1)# 2011 Fujitsu Technology Solutions ©...
  • Page 38 (BX900-CB1)(if-range)#exit (BX900-CB1)(Config)#exit (BX900-CB1)#show port-group pg_overlap Port Group Name Internal Ports Uplink Set Name External Ports -------------------------- -------------------- ------------------------ ---------------------- pg_overlap BX900-CB1/0/1 uplink_1 BX900-CB1/0/41 BX900-CB1/0/2 BX900-CB1/0/42 BX900-CB1/0/3 BX900-CB1/0/4 BX900-CB1/0/5 BX900-CB1/0/6 BX900-CB1/0/7 BX900-CB1/0/8 BX900-CB1/0/9 BX900-CB1/0/10 BX900-CB1/0/11 BX900-CB1/0/12 2011 Fujitsu Technology Solutions ©...
  • Page 39 (BX900-CB1)#show svc-vlan svlan_overlap Service VLAN name VLAN ID Internal ports Uplink Set name External ports -------------------- ------- -------------- -------------------- -------------- svlan_overlap 4094 BX900-CB1/0/20 uplink_1 BX900-CB1/0/41, BX900-CB1/0/21 BX900-CB1/0/42 BX900-CB1/0/22 BX900-CB1/0/23 BX900-CB1/0/24 (BX900-CB1)# 2011 Fujitsu Technology Solutions ©...
  • Page 40: Configuring Downlink Lag

    This chapter describes how to configure the Link Aggregation for downlink ports in the PRIMERGY BX900 Ethernet Connection Blade system. Only the downlink ports are allowed to be the member of the LAG in this firmware version. It is provided to combine server blade NICs connected to same Ethernet Connection Blade.
  • Page 41 Link Mode Mode Mode Type LB Ports Speed Active ------ --------------- ------ ---- ---- ------ ---- --- ------ --------- ------ BX900-CB1/1/3 downlink-lag1 Down En. En. En. Dy. SDM BX900-CB1/0/1 Auto False BX900-CB1/0/2 Auto False BX900-CB1/0/3 Auto False BX900-CB1/0/4 Auto False (BX900-CB1)# 2011 Fujitsu Technology Solutions ©...
  • Page 42: Configuring Static Link Aggregation

    0/1, 0/2, 0/3 and 0/4 are set to the member of this port-channel group. (BX900-CB1)#configure (BX900-CB1)(Config)#port-channel downlink-lag1 Interface BX900-CB1/1/3 created for port-channel downlink-lag1 (BX900-CB1)(Config)#interface BX900-CB1/1/3 (BX900-CB1)(Interface BX900-CB1/1/3)#staticcapability (BX900-CB1)(Interface BX900-CB1/1/3)#exit (BX900-CB1)(Config)#interface range 0/1 – 0/4 (BX900-CB1)(if-range)#channel-group BX900-CB1/1/3 (BX900-CB1)(if-range)#exit 2011 Fujitsu Technology Solutions ©...
  • Page 43 Link Mode Mode Mode Type LB Ports Speed Active ------ --------------- ------ ---- ---- ------ ---- --- ------ --------- ------ BX900-CB1/1/3 downlink-lag1 Down En. En. En. St. SDM BX900-CB1/0/1 Auto False BX900-CB1/0/2 Auto False BX900-CB1/0/3 Auto False BX900-CB1/0/4 Auto False (BX900-CB1)# 2011 Fujitsu Technology Solutions ©...
  • Page 44: Configuring Load Balance Of Link Aggregation

    Link Mode Mode Mode Type LB Ports Speed Active ------ --------------- ------ ---- ---- ------ ---- --- ------ --------- ------ BX900-CB1/1/3 downlink-lag1 Down En. En. En. St. SDI BX900-CB1/0/1 Auto False BX900-CB1/0/2 Auto False BX900-CB1/0/3 Auto False 2011 Fujitsu Technology Solutions ©...
  • Page 45 BX900-CB1/0/4 Auto False (BX900-CB1)# 2011 Fujitsu Technology Solutions ©...
  • Page 46: Private Network

    In this example, the interface 0/1, the member of the port group, is set to use downlink isolation. (BX900-CB1)#configure (BX900-CB1)(Config)#interface 0/1 (BX900-CB1)(Interface BX900-CB1/0/1)#isolate (BX900-CB1)(Interface BX900-CB1/0/1)#exit (BX900-CB1)(Config)#exit (BX900-CB1)#show interface status 0/1 Interface......BX900-CB1/0/1 ifIndex......1 Description....... Admin Mode......Disable E-Keying Status....Connected Physical Mode..... Auto Physical Status....Link Status....... Down 2011 Fujitsu Technology Solutions ©...
  • Page 47 Link Trap......Enable Flow Control Mode....Disable Capability Status....1GF MAC Address....... 00:1E:68:85:F7:61 Bit Offset Val....1 MDI Status......Normal MDI Config......Normal Isolate......Enabled (BX900-CB1)# 2011 Fujitsu Technology Solutions ©...
  • Page 48: Configuring Qos

    User priority value (CoS) in VLAN tag: (BX900-CB1)#configure (BX900-CB1)(Config)#interface 0/1 (BX900-CB1)(Interface BX900-CB1/0/1)#queue trust dot1p (BX900-CB1)(Interface BX900-CB1/0/1)#queue cos-map 0 1 (BX900-CB1)(Interface BX900-CB1/0/1)#queue cos-map 1 2 (BX900-CB1)(Interface BX900-CB1/0/1)#queue cos-map 4 2 (BX900-CB1)(Interface BX900-CB1/0/1)#exit (BX900-CB1)#show queue cos-map 0/1 User Priority Traffic Class 2011 Fujitsu Technology Solutions ©...
  • Page 49 ------------- ------------- (BX900-CB1)# 2011 Fujitsu Technology Solutions ©...
  • Page 50: Configuring Priority Control Rewrite

    To configure an IP precedence rewrite to interface, use the DiffServ configuration command. To display the policy configuration, use show policy-map privileged EXEC command. To display the class configuration, use show class-map privileged EXEC command. 2011 Fujitsu Technology Solutions ©...
  • Page 51 Reference Class Name ------------------------------- ----- ------------------------------- class1 (BX900-CB1)#show policy-map Policy Name Policy Type Class Members ------------------------------- ----------- ------------------------------- policy1 class1 (BX900-CB1)#show policy-map interface 0/1 in Interface........BX900-CB1/0/1 Direction........In Operational Status......Down Policy Name........policy1 Interface Summary: 2011 Fujitsu Technology Solutions ©...
  • Page 52 Class Name........class1 In Offered Packets......0 In Discarded Packets......0 (BX900-CB1)# 2011 Fujitsu Technology Solutions ©...
  • Page 53: Change Queue Of Packets In Vlan

    In this example, DiffServ is configured on interface 0/1 to change queue which the received packets in ingress port use in egress port: (BX900-CB1)#configure (BX900-CB1)(Config)#diffserv (BX900-CB1)(Config)#class-map match-all class2 (BX900-CB1)(Config-classmap)#match cos 2 (BX900-CB1)(Config-classmap)#exit (BX900-CB1)(Config)#policy-map policy2 in 2011 Fujitsu Technology Solutions ©...
  • Page 54 ------------------------------- ----- ------------------------------- class1 class2 (BX900-CB1)#show policy-map Policy Name Policy Type Class Members ------------------------------- ----------- ------------------------------- policy1 class1 policy2 class2 (BX900-CB1)#show policy-map policy2 Policy Name........policy2 Policy Type........In Class Name........class2 Assign Queue........7 (BX900-CB1)# 2011 Fujitsu Technology Solutions ©...
  • Page 55: Configuring Igmp/Mld Snooping

    Return to privileged mode. Step 4 show igmpsnooping Display IGMP/MLD snooping information. In this example, IGMP/MLD snooping is configured on default uplink set: (BX900-CB1)#configure (BX900-CB1)(Config)#igmpsnooping default (BX900-CB1)(Config)#exit (BX900-CB1)#show igmpsnooping Uplink Set name Igmp snooping --------------------------------- -------------- default (BX900-CB1)# 2011 Fujitsu Technology Solutions ©...
  • Page 56: Configuring Ieee 802.1X Authentication

    (BX900-CB1)(Config)#dot1x port-control all force-authorized (BX900-CB1)(Config)#interface 0/6 (BX900-CB1)(Interface BX900-CB1/0/6)#dot1x port-control auto (BX900-CB1)(Interface BX900-CB1/0/6)#exit (BX900-CB1)(Config)#exit (BX900-CB1)#show dot1x summary 0/6 Operating Reauthentication Interface Control Mode Control Mode Enabled Port Status --------- ------------------ ------------------ ---------------- ------------ BX900-CB1/0/6 auto auto FALSE Authorized 2011 Fujitsu Technology Solutions ©...
  • Page 57 (BX900-CB1)# 2011 Fujitsu Technology Solutions ©...
  • Page 58: Using Remote Radius Server

    (BX900-CB1)(Config)#radius-server key auth 192.168.3.1 0 secret (BX900-CB1)(Config)#authentication login test-list radius (BX900-CB1)(Config)#dot1x system-auth-control (BX900-CB1)(Config)#dot1x default-login test-list (BX900-CB1)(Config)#dot1x port-control all auto (BX900-CB1)(Config)#exit (BX900-CB1)#show authentication Authentication Login List Method 1 Method 2 Method 3 ------------------------- -------- -------- -------- defaultList local undefined undefined 2011 Fujitsu Technology Solutions ©...
  • Page 59 Current Server Host Address....192.168.3.1 Number of Configured Servers....1 Number of Retransmits......4 Timeout Duration....... 5 RADIUS Accounting Mode......Disable RADIUS Dead Time....... 255 RADIUS Attribute 4 Mode......Disable RADIUS Attribute 4 Value....... 0.0.0.0 (BX900-CB1)# 2011 Fujitsu Technology Solutions ©...
  • Page 60: Configuring Port Mirroring

    (BX900-CB1)(Config)#port-monitor session 1 source interface 0/41 rx (BX900-CB1)(Config)#port-monitor session 1 destination interface 0/46 (BX900-CB1)(Config)#exit (BX900-CB1)# (BX900-CB1)#show port-monitor session 1 Session ID Admin Mode Dest.Port Sour.Port Type ---------- ---------- ---------- ------------- ----- Enable BX900-CB1/0/46 BX900-CB1/0/40 Rx,Tx BX900-CB1/0/41 (BX900-CB1)# 2011 Fujitsu Technology Solutions ©...
  • Page 61: Configuring Snmp Agent

    (BX900-CB1)(Config)#snmp-server community rw private (BX900-CB1)(Config)#exit (BX900-CB1)#show snmp SNMP Community Name Client IP Address Client IP Mask Access Mode Status ------------------- ----------------- ----------------- ----------- -------- public 0.0.0.0 0.0.0.0 Read Only Enable private 0.0.0.0 0.0.0.0 Read/Write Enable (BX900-CB1)# 2011 Fujitsu Technology Solutions ©...
  • Page 62: Configuring Snmp User

    In this example, one SNMPv3 user is created for MD5 authentication and plain password: (BX900-CB1)(Config)#snmp-server user v3_user auth md5 0 v3_password (BX900-CB1)(Config)#exit (BX900-CB1)#show snmp user User Name Authentication Encryption ----------------- ------------------- ----------------- v3_user None (BX900-CB1)# 2011 Fujitsu Technology Solutions ©...
  • Page 63: Configuring Snmp Remote Engineid

    A remote engine ID is required when a SNMPv3 inform is configured. The remote engine ID is used to compute the security digest for authenticating and encrypting packets sent to a user on the remote host. 2011 Fujitsu Technology Solutions ©...
  • Page 64: Configuring Snmp Traps

    (BX900-CB1)(Config)#snmptrap public 192.168.2.2 snmpversion snmpv2 (BX900-CB1)(Config)#snmptrap v3_user 192.168.2.2 snmpversion snmpv3 auth (BX900-CB1)(Config)#exit (BX900-CB)#show snmptrap SNMP Trap Name IP Address SNMP Version Status ------------------- ----------------- -------------- -------- public 192.168.2.2 snmpv2 Enable v3_user 192.168.2.2 snmpv3 Enable (BX900-CB)# 2011 Fujitsu Technology Solutions ©...
  • Page 65: Configuring Snmp Informs

    (BX900-CB1)(Config)#snmpinform public 192.168.2.2 version snmpv2 (BX900-CB1)(Config)#snmpinform v3_user 192.168.2.2 version snmpv3 auth (BX900-CB1)(Config)#exit (BX900-CB)#show snmpinform SNMP Inform Name IP Address SNMP Version Status ------------------- ----------------- -------------- -------- public 192.168.2.2 snmpv2 Enable v3_user 192.168.2.2 snmpv3(Auth) Enable (BX900-CB)# 2011 Fujitsu Technology Solutions ©...
  • Page 66: Configuring System Log

    CLI Command Logging : disabled Console Logging : disabled Console Logging Severity Filter : alert Buffered Logging : enabled Syslog Logging : enabled Log Messages Received : 94 Log Messages Dropped Log Messages Relayed : 14 2011 Fujitsu Technology Solutions ©...
  • Page 67 (BX900-CB1)#show logging hosts Index IP Address Severity Port Status ----- ----------------- ----------- ------ ------------- 172.16.2.109 critical Active 2011 Fujitsu Technology Solutions ©...

This manual is also suitable for:

Primergy bx400

Table of Contents