Contents

Chapter 1

About This Guide ........................................................................................................xiii

Supported Platforms ........................................................................................................xiii

Who Should Read this Manual? ...................................................................................... xiv

When Should I Read this Manual? .................................................................................. xiv

What is in this Manual? ................................................................................................... xiv

What is Not in this Manual? ............................................................................................ xiv

How is the Information Organized? ................................................................................. xv

Documentation Roadmap ................................................................................................. xv

Related Documentation .................................................................................................. xvii

User Manual CD ............................................................................................................. xix

Technical Support ........................................................................................................... xix

Managing System Files .............................................................................................1-1

In This Chapter ................................................................................................................1-1

File Management Specifications .....................................................................................1-2

Switch Administration Overview ....................................................................................1-3

File Transfer .............................................................................................................1-3

Switch Directories ....................................................................................................1-4

File and Directory Management ......................................................................................1-5

Using Wildcards .......................................................................................................1-7

Multiple Characters ...........................................................................................1-7

Single Characters ...............................................................................................1-7

Directory Commands ...............................................................................................1-8

Determining Your Location in the File Structure ..............................................1-8

Changing Directories .........................................................................................1-9

Displaying Directory Contents ........................................................................1-10

Making a New Directory .................................................................................1-12

Displaying Directory Contents Including Subdirectories ................................1-13

Copying an Existing Directory ........................................................................1-13

Removing a Directory and its Contents ...........................................................1-14

File Commands ......................................................................................................1-15

Creating or Modifying Files ............................................................................1-15

Copy an Existing File ......................................................................................1-15

Secure Copy an Existing File ..........................................................................1-16

Move an Existing File or Directory .................................................................1-16

Change File Attribute and Permissions ...........................................................1-18

Delete an Existing File ....................................................................................1-18

Managing Files on Switches ............................................................................1-19

OmniSwitch 6800/6850/9000 Switch Management Guide December 2007 iii

Chapter 2

iv

Contents

Utility Commands ..................................................................................................1-20

Displaying Free Memory Space ......................................................................1-20

Performing a File System Check .....................................................................1-20

Deleting the Entire File System .......................................................................1-20

Loading Software onto the Switch ................................................................................1-21

Using the Switch as an FTP Server ........................................................................1-21

Using the Switch as an FTP Client .........................................................................1-23

Using Secure Shell FTP .........................................................................................1-25

Closing a Secure Shell FTP Session ......................................................................1-26

Using Zmodem .......................................................................................................1-27

Registering Software Image Files .................................................................................1-28

Directories on the Switch .......................................................................................1-28

Available Image Files .............................................................................................1-29

Application Examples for File Management ................................................................1-30

Transferring a File to the Switch Using FTP .........................................................1-30

Creating a File Directory on the Switch .................................................................1-31

FTP Client Application Example ....................................................................1-32

Creating a File Directory Using Secure Shell FTP ................................................1-34

Transfer a File Using Secure Shell FTP .................................................................1-36

Closing a Secure Shell FTP Session ......................................................................1-36

Verifying Directory Contents ........................................................................................1-36

Setting the System Clock ..............................................................................................1-37

Setting Date and Time ............................................................................................1-37

Date ..................................................................................................................1-37

Time Zone .......................................................................................................1-37

Time .................................................................................................................1-38

Daylight Savings Time Configuration ...................................................................1-39

Enabling DST ..................................................................................................1-40

Logging Into the Switch ............................................................................................2-1

In This Chapter ................................................................................................................2-1

Login Specifications ........................................................................................................2-3

Login Defaults .................................................................................................................2-3

Quick Steps for Logging Into the Switch ........................................................................2-5

Overview of Switch Login Components .........................................................................2-6

Management Interfaces ............................................................................................2-6

Logging Into the CLI .........................................................................................2-6

Using the WebView Management Tool ............................................................2-7

Using SNMP to Manage the Switch ..................................................................2-7

User Accounts ..........................................................................................................2-7

Using Telnet ....................................................................................................................2-8

Logging Into the Switch Via Telnet .........................................................................2-8

Starting a Telnet Session from the Switch ...............................................................2-8

Using FTP .....................................................................................................................2-10

Using FTP to Log Into the Switch .........................................................................2-10

OmniSwitch 6800/6850/9000 Switch Management Guide December 2007

Contents

Chapter 3

Chapter 4

Using Secure Shell ........................................................................................................2-12

Secure Shell Components .......................................................................................2-12

Secure Shell Interface ......................................................................................2-12

Secure Shell File Transfer Protocol .................................................................2-12

Secure Shell Application Overview .......................................................................2-13

Secure Shell Authentication ...................................................................................2-14

Protocol Identification .....................................................................................2-14

Algorithm and Key Exchange .........................................................................2-14

Authentication Phase .......................................................................................2-14

Connection Phase ............................................................................................2-15

Using Secure Shell DSA Public Key Authentication .............................................2-15

Starting a Secure Shell Session ..............................................................................2-15

Closing a Secure Shell Session ..............................................................................2-17

Log Into the Switch with Secure Shell FTP ...........................................................2-17

Closing a Secure Shell FTP Session ......................................................................2-19

Modifying the Login Banner .........................................................................................2-20

Modifying the Text Display Before Login .............................................................2-21

Configuring Login Parameters ......................................................................................2-22

Configuring the Inactivity Timer ..................................................................................2-22

Enabling the DNS Resolver ..........................................................................................2-23

Verifying Login Settings ...............................................................................................2-24

Configuring Network Time Protocol (NTP) ..........................................................3-1

In This Chapter ................................................................................................................3-1

NTP Specifications ..........................................................................................................3-2

NTP Defaults Table .........................................................................................................3-2

NTP Quick Steps .............................................................................................................3-3

NTP Overview ................................................................................................................3-5

Stratum .....................................................................................................................3-6

Using NTP in a Network ..........................................................................................3-6

Authentication ..........................................................................................................3-8

Configuring NTP .............................................................................................................3-9

Configuring the OmniSwitch as a Client .................................................................3-9

NTP Servers ...........................................................................................................3-10

Using Authentication ..............................................................................................3-12

Verifying NTP Configuration .......................................................................................3-13

Managing CMM Directory Content ........................................................................4-1

In This Chapter ................................................................................................................4-1

CMM Specifications .......................................................................................................4-2

CMM Files ......................................................................................................................4-3

CMM Software Directory Structure .........................................................................4-3

Where is the Switch Running From? .................................................................4-4

Software Rollback Feature .......................................................................................4-4

OmniSwitch 6800/6850/9000 Switch Management Guide December 2007 v

Chapter 5

Contents

Software Rollback Configuration Scenarios for a Single Switch .....................4-5

Redundancy ..............................................................................................................4-9

Redundancy Scenarios .......................................................................................4-9

Managing the Directory Structure (Non-Redundant) ...................................................4-13

Rebooting the Switch .............................................................................................4-13

Copying the Running Configuration to the Working Directory ............................4-16

Rebooting from the Working Directory .................................................................4-18

Copying the Working Directory to the Certified Directory ...................................4-21

Copying the Certified Directory to the Working Directory ...................................4-22

Show Currently Used Configuration ......................................................................4-23

Show Switch Files ..................................................................................................4-24

Managing Redundancy in a Stack and CMM ...............................................................4-25

Rebooting the Switch .............................................................................................4-25

Copying the Working Directory to the Certified Directory ...................................4-26

Synchronizing the Primary and Secondary CMMs ................................................4-27

CMM Switching Fabric ..........................................................................................4-28

Swapping the Primary CMM for the Secondary CMM .........................................4-29

Show Currently Used Configuration ......................................................................4-30

NI Module Behavior During Takeover ...........................................................4-31

Emergency Restore of the boot.cfg File ........................................................................4-32

Can I Restore the boot.file While Running from Certified? ..................................4-32

Displaying CMM Conditions ........................................................................................4-33

Using the CLI ...............................................................................................................5-1

CLI Specifications ...........................................................................................................5-2

CLI Overview ..................................................................................................................5-2

Online Configuration ................................................................................................5-2

Offline Configuration Using Configuration Files ....................................................5-3

Command Entry Rules and Syntax .................................................................................5-3

Text Conventions .....................................................................................................5-3

Using “Show” Commands .......................................................................................5-4

Using the “No” Form ...............................................................................................5-4

Using “Alias” Commands ........................................................................................5-4

Partial Keyword Completion ....................................................................................5-5

Command Help ...............................................................................................................5-5

Tutorial for Building a Command Using Help .........................................................5-7

CLI Services ....................................................................................................................5-9

Command Line Editing ............................................................................................5-9

Deleting Characters ...........................................................................................5-9

Recalling the Previous Command Line ...........................................................5-10

Inserting Characters .........................................................................................5-10

Syntax Checking ....................................................................................................5-11

Prefix Recognition ..................................................................................................5-11

Example for Using Prefix Recognition ...........................................................5-12

Prefix Prompt ...................................................................................................5-13

Command History ..................................................................................................5-13

vi OmniSwitch 6800/6850/9000 Switch Management Guide December 2007

Contents

Chapter 6

Logging CLI Commands and Entry Results .................................................................5-15

Enabling Command Logging ..........................................................................5-15

Disabling Command Logging .........................................................................5-15

Viewing the Current Command Logging Status .............................................5-16

Viewing Logged CLI Commands and Command Entry Results ....................5-16

Customizing the Screen Display ...................................................................................5-17

Changing the Screen Size .......................................................................................5-17

Changing the CLI Prompt ......................................................................................5-17

Displaying Table Information ................................................................................5-18

Filtering Table Information ....................................................................................5-19

Multiple User Sessions ..................................................................................................5-20

Listing Other User Sessions ...................................................................................5-20

Listing Your Current Login Session ......................................................................5-21

Terminating Another Session .................................................................................5-22

Application Example .....................................................................................................5-23

Using a Wildcard to Filter Table Information ........................................................5-23

Verifying CLI Usage .....................................................................................................5-24

Working With Configuration Files .........................................................................6-1

In This Chapter ................................................................................................................6-1

Configuration File Specifications ...................................................................................6-2

Tutorial for Creating a Configuration File ......................................................................6-2

Quick Steps for Applying Configuration Files ...............................................................6-4

Setting a File for Immediate Application .................................................................6-4

Setting an Application Session for a Date and Time ...............................................6-4

Setting an Application Session for a Specified Time Period ...................................6-5

Configuration Files Overview .........................................................................................6-6

Applying Configuration Files to the Switch ............................................................6-6

Verifying a Timed Session ................................................................................6-6

Cancelling a Timed Session ..............................................................................6-7

Configuration File Error Reporting ...................................................................6-7

Setting the Error File Limit ...............................................................................6-8

Syntax Checking ................................................................................................6-8

Displaying a Text File ..............................................................................................6-9

Text Editing on the Switch .......................................................................................6-9

Invoke the “Vi” Editor .......................................................................................6-9

Creating Snapshot Configuration Files .........................................................................6-10

Snapshot Feature List .............................................................................................6-10

User-Defined Naming Options ........................................................................6-11

Editing Snapshot Files .....................................................................................6-11

Verifying File Configuration .........................................................................................6-14

OmniSwitch 6800/6850/9000 Switch Management Guide December 2007 vii

Chapter 7

Chapter 8

viii

Contents

Managing Switch User Accounts ............................................................................7-1

In This Chapter ................................................................................................................7-1

User Database Specifications ..........................................................................................7-2

User Account Defaults ....................................................................................................7-2

Overview of User Accounts ............................................................................................7-4

Startup Defaults ........................................................................................................7-5

Quick Steps for Network Administrator User Accounts ..........................................7-6

Quick Steps for Creating Customer Login User Accounts ......................................7-7

Default User Settings ...............................................................................................7-8

Account and Password Policy Settings ....................................................................7-8

How User Settings Are Saved ..................................................................................7-9

Creating a User ..............................................................................................................7-10

Removing a User ....................................................................................................7-10

User-Configured Password ....................................................................................7-10

Configuring Password Policy Settings ..........................................................................7-12

Setting a Minimum Password Size .........................................................................7-12

Configuring the Username Password Exception ....................................................7-12

Configuring Password Character Requirements ....................................................7-13

Configuring Password Expiration ..........................................................................7-13

Default Password Expiration ...........................................................................7-13

Specific User Password Expiration .................................................................7-14

Configuring the Password History .........................................................................7-14

Configuring the Minimum Age for a Password .....................................................7-14

Configuring Global User Lockout Settings ...................................................................7-15

Configuring the User Lockout Window .................................................................7-15

Configuring the User Lockout Threshold Number ................................................7-15

Configuring the User Lockout Duration Time .......................................................7-16

Manually Locking and Unlocking User Accounts .................................................7-16

Configuring Privileges for a User .................................................................................7-17

Setting Up SNMP Access for a User Account ..............................................................7-18

SNMP Access Without Authentication/Encryption ...............................................7-18

SNMP Access With Authentication/Encryption ....................................................7-19

Removing SNMP Access From a User ..................................................................7-19

Setting Up End-User Profiles ........................................................................................7-20

Creating End-User Profiles ....................................................................................7-21

Setting Up Port Ranges in a Profile .......................................................................7-21

Setting Up VLAN Ranges in a Profile ...................................................................7-21

Associating a Profile With a User ..........................................................................7-22

Removing a Profile From the Configuration ..........................................................7-22

Verifying the User Configuration .................................................................................7-23

Managing Switch Security ........................................................................................8-1

In This Chapter ................................................................................................................8-1

Switch Security Specifications ........................................................................................8-2

Switch Security Defaults .................................................................................................8-2

OmniSwitch 6800/6850/9000 Switch Management Guide December 2007

Contents

Chapter 9

Switch Security Overview ...............................................................................................8-3

Authenticated Switch Access ..........................................................................................8-4

AAA Servers—RADIUS or LDAP ..........................................................................8-4

Authentication-only—ACE/Server ..........................................................................8-4

Interaction With the User Database .........................................................................8-5

ASA and Authenticated VLANs ..............................................................................8-5

Configuring Authenticated Switch Access .....................................................................8-6

Quick Steps for Setting Up ASA ....................................................................................8-7

Setting Up Management Interfaces for ASA ..................................................................8-9

Enabling Switch Access .........................................................................................8-10

Configuring the Default Setting .............................................................................8-10

Using Secure Shell .................................................................................................8-11

Configuring Accounting for ASA .................................................................................8-12

Verifying the ASA Configuration .................................................................................8-13

Using WebView ...........................................................................................................9-1

In This Chapter ................................................................................................................9-1

WebView CLI Defaults ...................................................................................................9-2

Browser Setup .................................................................................................................9-2

WebView CLI Commands ..............................................................................................9-3

Enabling/Disabling WebView ..................................................................................9-3

Changing the HTTP Port ..........................................................................................9-3

Enabling/Disabling SSL ...........................................................................................9-3

Changing the HTTPS Port ........................................................................................9-4

Quick Steps for Setting Up WebView ............................................................................9-5

WebView Overview ........................................................................................................9-5

WebView Page Layout .............................................................................................9-5

Banner ................................................................................................................9-6

Toolbar ..............................................................................................................9-6

Feature Options .................................................................................................9-7

View/Configuration Area ..................................................................................9-7

Configuring the Switch With WebView .........................................................................9-8

Accessing WebView ................................................................................................9-8

Home Page ...............................................................................................................9-9

Configuration Page .................................................................................................9-10

Global Configuration Page ..............................................................................9-10

Table Configuration Page ................................................................................9-11

Table Features .................................................................................................9-13

Adjacencies ............................................................................................................9-17

WebView Help ..............................................................................................................9-18

General WebView Help .........................................................................................9-18

Specific-page Help .................................................................................................9-18

OmniSwitch 6800/6850/9000 Switch Management Guide December 2007 ix

Chapter 10

Contents

Using SNMP ...............................................................................................................10-1

In This Chapter ..............................................................................................................10-1

SNMP Specifications ....................................................................................................10-2

SNMP Defaults .............................................................................................................10-2

Quick Steps for Setting Up An SNMP Management Station .......................................10-4

Quick Steps for Setting Up Trap Filters ........................................................................10-5

Filtering by Trap Families ......................................................................................10-5

Filtering by Individual Traps ..................................................................................10-6

SNMP Overview ...........................................................................................................10-7

SNMP Operations ..................................................................................................10-7

Using SNMP for Switch Management ...................................................................10-8

Setting Up an SNMP Management Station .....................................................10-8

SNMP Versions ......................................................................................................10-8

SNMPv1 ..........................................................................................................10-8

SNMPv2 ..........................................................................................................10-9

SNMPv3 ..........................................................................................................10-9

SNMP Traps Table ...............................................................................................10-10

Using SNMP For Switch Security ..............................................................................10-27

Community Strings (SNMPv1 and SNMPv2) .....................................................10-27

Configuring Community Strings ...................................................................10-27

Encryption and Authentication (SNMPv3) ..........................................................10-28

Configuring Encryption and Authentication .................................................10-28

Setting SNMP Security .................................................................................10-29

Working with SNMP Traps ........................................................................................10-30

Trap Filtering ........................................................................................................10-30

Filtering by Trap Families .............................................................................10-30

Filtering By Individual Trap ..........................................................................10-30

Authentication Trap ..............................................................................................10-31

Trap Management ................................................................................................10-31

Replaying Traps .............................................................................................10-31

Absorbing Traps ............................................................................................10-31

Sending Traps to WebView ...........................................................................10-31

SNMP MIB Information .............................................................................................10-32

MIB Tables ...........................................................................................................10-32

MIB Table Description ..................................................................................10-32

Industry Standard MIBs .......................................................................................10-33

Enterprise (Proprietary) MIBs ..............................................................................10-38

Verifying the SNMP Configuration ............................................................................10-43

x OmniSwitch 6800/6850/9000 Switch Management Guide December 2007

Contents

Appendix A Software License and Copyright Statements ......................................................A-1

Alcatel-Lucent License Agreement ................................................................................ A-1

ALCATEL-LUCENT SOFTWARE LICENSE AGREEMENT ............................ A-1

Third Party Licenses and Notices .................................................................................. A-4

A. Booting and Debugging Non-Proprietary Software .......................................... A-4

B. The OpenLDAP Public License: Version 2.4, 8 December 2000 ..................... A-4

C. Linux .................................................................................................................. A-5

D. GNU GENERAL PUBLIC LICENSE: Version 2, June 1991 .......................... A-5

E. University of California ................................................................................... A-10

F. Carnegie-Mellon University ............................................................................ A-10

G. Random.c ......................................................................................................... A-10

H. Apptitude, Inc. ................................................................................................. A-11

I. Agranat ............................................................................................................. A-11

J. RSA Security Inc. ............................................................................................ A-11

K. Sun Microsystems, Inc. .................................................................................... A-11

L. Wind River Systems, Inc. ................................................................................ A-12

M. Network Time Protocol Version 4 ................................................................... A-12

Index ...................................................................................................................... Index-1

OmniSwitch 6800/6850/9000 Switch Management Guide December 2007 xi

Contents xii OmniSwitch 6800/6850/9000 Switch Management Guide December 2007