Local user password changes | Brocade Communications Systems 6650

Appendix A	Syslog messages
Appendix B	NIAP-CCEVS Certification
	NIAP-CCEVS certified Brocade equipment and
	Ironware releases	299
	Local user password changes	299

Index

Brocade ICX 6650 Administration Guide	xi
53-1002600-01

Image 11

Brocade Communications Systems 6650 NIAP-CCEVS certified Brocade equipment Ironware releases, Local user password changes

Contents

Brocade ICX 6650 Administration Guide Title Publication number Summary of changes Date Brocade ICX 6650 Administration Guide Contents Chapter Operations, Administration, and Maintenance Chapter Ports on Demand Licensing Full Layer 3 IPv6 feature support Chapter IPv6 Configuration on Brocade ICX 6650 Switch Snmp overview Chapter Snmp Access Clearing FDP and CDP information FDP configurationFDP Overview Displaying FDP information Digital optical monitoring Digital optical monitoring configuration limitationsSetting the alarm interval Displaying information about installed media Viewing port statistics Viewing configuration informationBasic system management Viewing system information NIAP-CCEVS certified Brocade equipment Ironware releases Local user password changes Xii Brocade ICX 6650 Administration Guide 53-1002600-01 Brocade ICX 6650 slot and port numbering AudienceSupported hardware and software Text formatting Command syntax conventionsCommand Option, option Argument, arg Arguments Document conventions Show WWN Brocade resources Related publicationsAdditional information Other industry resources Getting technical helpDocument feedback Brocade ICX 6650 slot and port numbering How the management port works FeatureThis chapter Management port overview Syntax show interfaces brief management num CLI Commands for use with the management portSyntax show running-config interface management num Syntax show interfaces management num Syntax show statistics brief management num Logging on through the CLISyntax show statistics management num Scroll control Command completionOnline help Ctrl+Key combination Description Using slot number, and port number with CLI commandsLine editing commands Displaying lines containing a specified string Searching and filtering output from CLI commandsSearching and filtering output from Show commands CLI nomenclature on Brocade ICX 6650 models Results of the search are displayed Searching and filtering output at the --More-- promptDisplaying lines starting with a specified string Character Operation Using special characters in regular expressionsFiltered results are displayed Character Operation Syntax alias Creating an alias for a CLI commandConfiguration notes for creating a command alias Syntax unalias alias-name Brocade ICX 6650 Administration Guide 53-1002600-01 Using slot number, and port number with CLI commands Basic Port Parameters Basic System Parameters Basic system parameter configuration Specifying an Snmp trap receiver Entering system administration informationSnmp parameter configuration Basic system parameter configuration Syntax snmp-server host ip-addr0 1 string port value Specifying a single trap source Snmp Layer 2 traps Setting the Snmp trap holddown timeSyntax no snmp-server enable traps holddown-time secs Disabling Snmp traps Displaying virtual routing interface statistics Disabling Syslog messages and traps for CLI accessSyntax no snmp-server enable traps trap-type Syntax no enable snmp ve-statistics Disabling the Syslog messages and traps Examples of Syslog messages for CLI accessSyntax show logging Specifying an Sntp server Cancelling an outbound Telnet sessionSyntax no logging enable user-login Field Description Syntax no sntp poll-intervalSyntax show sntp associations Syntax show sntp associations details Output from the show sntp associations details command Syntax show sntp status Configuring the device as an Sntp serverConfiguring the device as an Sntp server Sntp server-mode authentication-key 2 $QHMiR3NzQA= Syntax show sntp server-mode Enabling broadcast mode for an Sntp clientOutput from the show sntp server-modecommand Displaying Sntp server information Syntax sntp broadcast client Setting the system clock Syntax no clock summer-time System time for daylight saving time. commandNew start and end dates for US daylight saving time Syntax sntp sync Syntax no clock timezone us timezone-type CLI banner configurationSetting a message of the day banner Limiting broadcast, multicast, and unknown unicast traffic Syntax no banner motd require-enter-key Use the no form of the command to disable the requirement Syntax no banner incoming delimiting-character Setting a privileged Exec CLI level bannerLocal MAC address for Layer 2 management traffic Syntax no banner execmode delimiting-character Syntax port-name text Basic port parameter configurationAssigning a port name Syntax no use-local-management-mac Syntax speed-duplex value Port speed and duplex mode modificationPort speed and duplex mode configuration syntax Basic port parameter configuration Syntax no speed-duplex 10g-full 1000-full-master Maximum port speed application notes Modifying port duplex modePort duplex mode configuration syntax Value can be one of the following Full Half Auto default Disabling or re-enabling flow control Flow control configurationFlow control configuration notes Disabling or re-enabling a port Syntax no flow-control neg-on Negotiation and advertisement of flow controlSyntax no flow-control Displaying flow-control status Symmetric flow control on Brocade ICX 6650 devices 40G ports About XON and Xoff thresholds1G or 10G ports Enabling and disabling symmetric flow control Interpacket Gap IPG on a Brocade ICX 6650 switchChanging the Gbps fiber negotiation mode IPG configuration notes Port priority QoS modification Port flap dampening configurationPort flap dampening configuration notes Syntax gig-default neg-full-auto auto-gig neg-off Displaying ports configured with port flap dampening Configuring port flap dampening on an interfaceConfiguring port flap dampening on a trunk Re-enabling a port disabled by port flap dampening Column Description Syntax show link-error-disable allSyslog messages for port flap dampening Types of loop detection Recovering disabled portsPort loopback detection configuration notes Port loop detection Syntax no loop-detection Configuring a global loop detection intervalConfiguring the device to automatically re-enable ports Enabling loop detection Clearing loop-detection Specifying the recovery time intervalSyntax no errdisable recovery cause loop-detection Syntax no errdisable recovery interval seconds FieldDescription Displaying loop detection resource informationSyntax show loop-detection resource Loop Detection is Enabled Syslog message due to disabled port in loop detection Basic port parameter configuration Feature Brocade ICX 6650 Operations, Administration, and Maintenance Brocade ICX 6650 devices Software versions installed and running on a deviceOAM Overview Determining the flash image version running on the device Boot code version is shown in bold type Displaying the boot image version running on the deviceDisplaying the image versions installed in flash memory Software versions installed and running on a device Flash image verification Flash image CLI commandsUse the following command syntax to verify the flash image Image file types Software upgradesViewing the contents of flash files Syntax copy flash console filename Using Snmp to upgrade softwareUsing Snmp to upgrade software Syntax show dir Snmp-server community string ro rw Software reboot Software rebootDisplaying the boot preference Software boot configuration notes Syntax show boot-preference Loading and saving configuration filesLoading and saving configuration files Syntax no logging enable config-changed Logging changes to the startup-config file Preparing the configuration file Copying a configuration file to or from a Tftp serverDynamic configuration loading Dynamic configuration usage considerations CLI responds like this Following command line will not initiate batch mode Copying a file to an IPv6 Tftp server Loading and saving configuration files with IPv6Using the IPv6 copy command Copying a file from the running or startup configuration Copying a file to flash memory Copying a file to the running or startup configurationLoading and saving configuration files with IPv6 Copying a file from an IPv6 Tftp server IPv6 ncopy command IPv6 Tftp server file upload Using Snmp to save and load configuration information Syntax reload at hhmmss mm-dd-yyprimary secondary Erasing image and configuration filesSystem reload scheduling Reloading at a specific time Reloading after a specific amount of time Diagnostic error codes and remedies for Tftp transfersCanceling a scheduled reload Error Message Explanation and action Code Pinging an IPv4 address Network connectivity testingNetwork connectivity testing Network connectivity testing Tracing an IPv4 route Network connectivity testing Ports on Demand Overview Feature Brocade ICX Ports on Demand terminology PoD licensing configuration tasksPorts on Demand terminology PoD licensing rules Obtaining a PoD license Configuration task Reference Brocade Software Portal Login window Shows the Software Portal Login window License Management Welcome window PoD licensing configuration tasks Brocade ICX 6650 Administration Guide 53-1002600-01 LID Shows an example of the license query results Front panel PoD Transferring a PoD licenseSyslog message information Ports on Demand Licensing Ports on Demand Licensing Rear panel Flexible Ports on DemandPoD licenses License SKU License Name Function Enabling ports on the front panelPorts on Demand Licensing PoD licenses Trial licenses are not available for PoD licensing Syntax scp licensefileonhost user@IPaddresslicenseunit id Example, the license is copied to unit Example above, the license is copied to unit Deleting a ICX6650-10G-LIC-POD license IPaddress variable is the address of the IPv4 Tftp server Enabling ports on the rear panelSyntax show pod Syntax no fpod-40g-enable group groupID Disabling the FPoD ports on the rear panel Enter the following command to disable the ports in groupEnable ports for group Enable ports in group Deleting a 10 GbE or 40 GbE license Syntax license delete unit unitid all index licenseindex Viewing information about PoD licenses Syntax show license Displaying general license information for PoD portsViewing information about PoD licenses Syntax show license unit unitid index indexnumber Syntax show license unit unitid Field Description Lic-Used Field Description 40GigabitEthernet1/2/1 is up, line protocol is up Viewing information about PoD licenses IPv6 Configuration on Brocade ICX 6650 Switch IPv6 copy Using the IPv6 copy command on IPv6 addressing overview Full Layer 3 IPv6 feature support IPv6 address types Address Description Address structure Type IPv6 addressing overview IPv6 address types IPv6 command Description Switch code Router code IPv6 CLI command supportIPv6 stateless auto-configuration Description Switch code Router code IPv6 host address on a Layer 2 switch Syntax ipv6 address ipv6-addresslink-local Syntax no ipv6 enable Syntax no ipv6 unicast-routing Configuring basic IPv6 connectivity on a Layer 3 switchIPv6 configuration on each router interface Enabling IPv6 routing Ospf Configuring basic IPv6 connectivity on a Layer 3 switch Configuring a link-local IPv6 address on an interface Syntax ip address ip-addresssub-net-masksecondary Configuring IPv4 and IPv6 protocol stacksConfiguring an IPv6 anycast address on an interface Syntax no ipv6 access-list ACL name Configuring IPv6 management ACLs Specifying an IPv6 Snmp trap receiver Restricting Snmp access to an IPv6 nodeConfiguring Snmp V3 over IPv6 Configuring Sntp over IPv6 Establishing a Telnet session from an IPv6 host IPv6 TelnetIPv6 traceroute Syntax no ipv6 dns domain-name domain name Defining an IPv6 DNS entrySyntax traceroute ipv6 ipv6-address Pinging an IPv6 address Viewing IPv6 Snmp server addresses Configuring an IPv6 Syslog server Disabling router advertisement and solicitation messages Static IPv6 route configurationDisabling IPv6 on a Layer 2 switch Configuring a static IPv6 route Prefix-length parameter Parameter Configuration details StatusDest-ipv6-prefix parameter IPv6 over IPv4 tunnels IPv6 over IPv4 tunnel configuration notesConfiguring a manual IPv6 tunnel IPv6 over IPv4 tunnels Clearing IPv6 tunnel statistics Syntax clear ipv6 tunnel number Displaying IPv6 tunnel informationDisplaying a summary of tunnel information Displaying tunnel interface information Syntax show interfaces tunnel number Displaying interface level IPv6 settings Display command above reflects the following configuration Ecmp load sharing for IPv6 Ecmp load sharing for IPv6 Displaying Ecmp load-sharing information for IPv6 Disabling or re-enabling Ecmp load sharing for IPv6Changing the maximum load sharing paths for IPv6 Syntax ipv6 icmp error-interval interval number-of-tokens IPv6 Icmp feature configurationConfiguring Icmp rate limiting IPv6 Icmp feature configuration Syntax no ipv6 redirects IPv6 neighbor discovery configurationIPv6 neighbor discovery configuration Enabling IPv6 Icmp redirect messages Neighbor discovery is not supported on tunnel interfaces IPv6 neighbor discovery configuration notesNeighbor solicitation and advertisement messages Neighbor redirect messages Router advertisement and solicitation messages Setting IPv6 router advertisement parameters Here is another example with a specified range Prefixes advertised in IPv6 router advertisement messages Syntax no ipv6 nd suppress-ra Setting flags in IPv6 router advertisement messagesEnabling and disabling IPv6 router advertisements IPv6 MTU Configuring reachable time for remote IPv6 nodesConfiguration notes and feature limitations for IPv6 MTU IPv6 MTU Syntax no ipv6 mtu bytes Static neighbor entries configurationChanging the IPv6 MTU Syntax no ipv6 hop-limit number Limiting the number of hops an IPv6 packet can traverseIPv6 source routing security enhancements Clearing global IPv6 information Clearing global IPv6 information Clearing the IPv6 cacheClearing IPv6 neighbor information Displaying IPv6 cache information Displaying global IPv6 informationClearing IPv6 routes from the IPv6 route table Clearing IPv6 traffic statistics Displaying IPv6 interface information 142 Brocade ICX 6650 Administration Guide 53-1002600-01 Icmp Displaying IPv6 neighbor information Displaying the IPv6 route table Displaying local IPv6 routers Port Displaying IPv6 TCP informationSyntax show ipv6 router Free TCP = percentage Syntax show ipv6 tcp connections = percentage General IPv6 TCP connection fields Location of the TCP Field Description IPv6 statistics Displaying IPv6 traffic statisticsSyntax show ipv6 traffic ICMP6 statistics Applies to received only TCP statistics Snmp overview Snmp Access Snmp community strings Snmp community stringsEncryption of Snmp community strings Adding an Snmp community string Snmp-server community 1 encrypted-string rw Syntax show snmp server Displaying the Snmp community strings Defining the engine id Configuring your NMSConfiguring Snmp version 3 on Brocade ICX 6650 devices User-based security model Syntax no snmp-server engineid local hex-string Snmp version 3. If you want commandDefining an Snmp group Defining an Snmp user account 162 Brocade ICX 6650 Administration Guide 53-1002600-01 Syntax no snmp-server view name mibtree included excluded Defining Snmp viewsSyntax system-max view number-of-views Snmp version 3 traps To delete a view, use the no parameter before the commandSnmp version 3 traps Trap MIB changes Defining the UDP port for Snmp v3 traps Backward compatibility with SMIv1 trap format Restricting Snmp Access to an IPv6 NodeSpecifying an IPv6 host as an Snmp trap receiver Snmp v3 over IPv6 Syntax show snmp engineid Displaying Snmp InformationDisplaying the Engine ID Displaying Snmp Information Syntax show snmp group Displaying Snmp groupsDisplaying user information Interpreting varbinds in report packets Snmp v3 configuration examples Snmp v3 configuration examplesSimple Snmp v3 configuration More detailed Snmp v3 configuration 170 Brocade ICX 6650 Administration Guide 53-1002600-01 FDP Overview CDP packets FDP Overview Enabling FDP at the interface level FDP configurationChanging the FDP update timer Enabling FDP globally Displaying neighbor information Syntax no fdp timer secsDisplaying FDP information Changing the FDP hold time Entry addresses This line Displays Brocade ICX 6650 Administration Guide 175 53-1002600-01 Clearing FDP and CDP neighbor information Clearing FDP and CDP informationDisplaying FDP information for an interface Displaying FDP and CDP statistics Clearing FDP and CDP statistics CDP packetsEnabling interception of CDP packets globally Enabling interception of CDP packets on an interface Displaying neighbors Displaying CDP information Syntax show fdp entry * device-id Displaying CDP entries Displaying CDP statistics To clear CDP statistics, enter the following commandClearing CDP information Lldp and LLDP-MED Lldp terms used in this chapter Lldp terms used in this chapter Supported Lldp features Illustrates Lldp connectivity Lldp overview LLDP-MED overview LLDP-MED overviewBenefits of Lldp LLDP-MED connectivity Benefits of LLDP-MED Lldp operating modes Lldp transmit modeGeneral Lldp operating principles LLDP-MED class Lldp packets Lldp receive mode Organizationally-specific TLVs TLV supportLldp TLVs Chassis ID TLV is always the first TLV in the Lldpdu LLDP-MED TLVsMandatory TLVs Chassis ID TTL value Port ID TLV packet format MIB support TTL TLV format is shown below MIB supportSyslog messages Global task Default behavior / value when Lldp is enabled Lldp configurationLldp configuration notes and considerations Lldp configuration Enabling support for tagged Lldp packets Changing a port Lldp operating modeEnabling and disabling Lldp Enabling and Disabling Transmit Only Mode Enabling and disabling receive only mode Syntax no lldp max-total-neighbors value Maximum number of Lldp neighborsSpecifying the maximum number Lldp neighbors per device Syntax no lldp max-neighbors-per-port value Enabling Lldp Snmp notifications and Syslog messagesSpecifying the maximum number Lldp neighbors per port Syntax no lldp snmp-notification-interval seconds Syntax no lldp transmit-delay secondsChanging the minimum time between Lldp transmissions Syntax no lldp transmit-hold value Changing the interval between regular Lldp transmissionsChanging the holdtime multiplier for transmit TTL Syntax no lldp transmit-interval seconds General system information for Lldp Syntax no lldp reinit-delay secondsChanging the minimum time between port reinitializations Lldp TLVs advertised by the Brocade device Management Address System capabilities Port description System description Vlan name CapabilitiesSystem name Link aggregation TLV Untagged Vlan ID MAC and PHY configuration status Maximum frame size LLDP-MED configurationLLDP-MED configuration This section provides the details for configuring LLDP-MED Default behavior / value Syntax no lldp med fast-start-repeat-count value Changing the fast start repeat count Coordinate-based location Defining a location id Example coordinate-based location advertisement Example coordinate-based location configuration Type value elem CA type value elem CA type value Configuring civic address location LLDP-MED configuration Elements used with civic address Description Acceptable values / examples Type Number variable is a number from 10 to 25 digits in length Configuring emergency call serviceExample civic address location advertisement Example ECS Elin location advertisements LLDP-MED network policy configuration syntaxDefining an LLDP-MED network policy 216 Brocade ICX 6650 Administration Guide 53-1002600-01 LLDP-MED capabilities LLDP-MED attributes advertised by the Brocade device LLDP-MED attributes advertised by the Brocade device Displaying Lldp statistics and configuration settingsLldp configuration summary Syntax show lldp Displaying Lldp statistics Syntax show lldp statistics Clear lldp statistics all command was issued Syntax show lldp neighbors Displaying Lldp neighbors Displaying Lldp neighbors detail Displaying Lldp configuration details Resetting Lldp statistics Clearing cached Lldp neighbor information Syntax no optical-monitor Digital optical monitoring configuration limitationsDigital optical monitoring Enabling digital optical monitoring Syntax no optical-monitor alarm-interval Setting the alarm intervalDisplaying information about installed media Empty Syntax show media slot slot ethernet stack-unit/slot/port Viewing optical monitoring information Status value Description Viewing optical transceiver thresholds Syntax show optic threshold stack-unit/slot/port Syslog messages for optical transceivers Syslog Displaying Syslog messages About Syslog messages Syntax terminal monitor Enabling real-time display of Syslog messagesEnabling real-time display for a Telnet or SSH session Syntax no logging console Displaying real-time Syslog messages Syslog service configurationDisplaying the Syslog configuration Syslog service configuration Field Definition Static and dynamic buffers Syntax clear logging dynamic-buffer static-buffer Clearing log entriesTime stamps Brocade ICX 6650 Administration Guide 237 53-1002600-01 Syntax no logging on udp-port To specify a Syslog server, enter the logging host commandDisabling or re-enabling Syslog Specifying a Syslog server Syntax no logging buffered level num-entries Specifying an additional Syslog serverDisabling logging of a message level Changing the number of entries the local buffer can hold Syntax logging facility facility-name Local buffer configuration notesChanging the log facility Syntax no Ip show-portname Displaying interface names in Syslog messagesDisplaying TCP or UDP port numbers in Syslog messages Clearing the Syslog messages from the local buffer Retaining Syslog messages after a soft rebootSyslog reboot configuration considerations Viewing system information Basic system management Syntax show version Viewing configuration information Port statistics Viewing port statisticsSyntax show option Syntax show statistics ethernet stack-unit/slot/port Statistics Basic system management Port statisticsParameter Description Viewing STP statistics Syntax clear option Clearing statistics Syntax show interface ethernet stack-unit/slot/port Viewing egress queue counters Syntax clear statistics ethernet stack-unit/slot/port Rmon supportMaximum number of entries allowed Rmon control table Clearing the egress queue counters ParameterDefinition Statistics Rmon groupRmon support Syntax show rmon statistics ethernet stack-unit/slot/port Parameter Definition Rmon support Export configuration and statistics Event Rmon group Alarm Rmon groupHistory Rmon group SFlow version SFlow Extended gateway information SFlow support for IPv6 packetsExtended router information SFlow and CPU utilization SFlow configuration considerationsIPv6 packet sampling SFlow and hardware support SFlow and sampling rate Configuring and enabling sFlowSFlow and source port Syntax no sflow destination ip-addrdest-udp-port Specifying the collectorSpecifying an sFlow collector on IPv4 devices Syntax no sflow destination ipv6 ip-addrdest-udp-port Changing the polling intervalChanging the sampling rate Specifying an sFlow collector on IPv6 devices Module rate Configuration considerationsConfigured rate and actual rate Change to global rate Changing the sampling rate on a port Changing the default sampling rateSyntax no sflow sample num Changing the sampling rate of a module Changing the sampling rate for a trunk port Syntax no sflow source-port num Command syntax for enabling sFlow forwardingEnabling sFlow forwarding Changing the sFlow source port Syntax no sflow enable Syntax no sflow forwarding SFlow version 5 feature configuration Syntax no sflow agent-ip ipv4-addr Specifying the sFlow version formatSpecifying the sFlow agent IP address Specifying the version used for exporting sFlow data Syntax no sflow export system-info Specifying the maximum flow sample sizeSyntax no sflow version 2 Syntax no sflow max-packet-size size Specifying the sampling rate for exported CPU-directed data Displaying sFlow informationEnabling the sFlow agent to export CPU-directed data Syntax no sflow export cpu-traffic Syntax show sflow Syntax clear statistics Clearing sFlow statisticsSFlow SFlow information Utilization list for an uplink port Utilization list for an uplink port command syntaxUtilization list for an uplink port Syntax show relative-utilization num Displaying utilization percentages for an uplink 272 Brocade ICX 6650 Administration Guide 53-1002600-01 Mac-address on portnum Brocade Syslog messagesMessage Explanation Fan num, location , failed Syslog messages Brocade Syslog messages Addr memory-address PCI-config-register-offsetPCI-bus-number, Dev PCI-device-number, Reg Offset Username from session-id filter Message level ExplanationLevel shutdown-degrees C degrees From session-id Root ID root-id User username from session-id Stp-state Vlan-id IP=ipaddr MAC address any, dst mac = DestinationMAC address any Fan speed Port-number Unit/slot/port on Vlan vlan-id Unit/slot/port toUnit/slot/port on VLANs vlan-id to Vlan-id Unit/slot/port on vlan-id Mac-address RootPort portnum Mac-address MgmtPriChgMac-address MsgAgeExpiry Vlan vlan-id interface portnum STP DOT1X Port portid Mac macaddress Portnum State ospf-state Macaddress on port portidRid router-id, intf addr ip-addr 286 Brocade ICX 6650 Administration Guide 53-1002600-01 Pkt type pkt-type Type Ip-addr, pkt type type Area area-id, LSA type lsa-type LSA id lsa-id, LSA rid lsa-router-idRid router-id, limit num Ospf-state Brocade ICX 6650 Administration Guide 291 53-1002600-01 Interface configuration error has occurred Nbr ip-addr, state ospf-state Rid router-id, area area-id Rid router-id, nbr addr ip-addr Mac-addr interface portnum State vrrp-stateMac-address Portnum src macaddr mac-addr List ACL-num denied ip-protoEthernet portnum mac-addr Eportnum, address mac-address Chassis temperature has risen above the warning level 298 Brocade ICX 6650 Administration Guide 53-1002600-01 Brocade product Brocade IronWare Discussed Software version Local user password changesNIAP-CCEVS certified Brocade equipment Ironware releases 300 Brocade ICX 6650 Administration Guide 53-1002600-01 Index Clear fdp table, 176 Lldp advertise mac-phy-config-status portsLldp enable receive ports Ipv6 nd prefix-advertisement,134 Brocade ICX 6650 Administration Guide 303 53-1002600-01 FDP Icmp 131 LLDP-MED 266 Snmp SSH XON and Xoff thresholds 312 Brocade ICX 6650 Administration Guide 53-1002600-01