Brocade Communications Systems 6650 specs

6 SNMP v3 configuration examples

170	Brocade ICX 6650 Administration Guide
	53-1002600-01

Image 188

Brocade Communications Systems manual Brocade ICX 6650 Administration Guide 53-1002600-01

Contents

Brocade ICX 6650 Administration Guide Brocade ICX 6650 Administration Guide Title Publication number Summary of changes Date Contents Chapter Operations, Administration, and Maintenance Chapter Ports on Demand Licensing Chapter IPv6 Configuration on Brocade ICX 6650 Switch Full Layer 3 IPv6 feature support Chapter Snmp Access Snmp overview FDP configuration FDP OverviewDisplaying FDP information Clearing FDP and CDP information Digital optical monitoring configuration limitations Setting the alarm intervalDisplaying information about installed media Digital optical monitoring Viewing configuration information Basic system managementViewing system information Viewing port statistics Local user password changes NIAP-CCEVS certified Brocade equipment Ironware releases Xii Brocade ICX 6650 Administration Guide 53-1002600-01 Brocade ICX 6650 slot and port numbering AudienceSupported hardware and software Command syntax conventions Command Option, option Argument, arg ArgumentsDocument conventions Text formatting Show WWN Brocade resources Related publicationsAdditional information Other industry resources Getting technical helpDocument feedback Brocade ICX 6650 slot and port numbering Feature This chapterManagement port overview How the management port works CLI Commands for use with the management port Syntax show running-config interface management numSyntax show interfaces management num Syntax show interfaces brief management num Syntax show statistics brief management num Logging on through the CLISyntax show statistics management num Scroll control Command completionOnline help Ctrl+Key combination Description Using slot number, and port number with CLI commandsLine editing commands Searching and filtering output from CLI commands Searching and filtering output from Show commandsCLI nomenclature on Brocade ICX 6650 models Displaying lines containing a specified string Results of the search are displayed Searching and filtering output at the --More-- promptDisplaying lines starting with a specified string Character Operation Using special characters in regular expressionsFiltered results are displayed Character Operation Creating an alias for a CLI command Configuration notes for creating a command aliasSyntax unalias alias-name Syntax alias Brocade ICX 6650 Administration Guide 53-1002600-01 Using slot number, and port number with CLI commands Basic System Parameters Basic Port Parameters Basic system parameter configuration Entering system administration information Snmp parameter configurationBasic system parameter configuration Specifying an Snmp trap receiver Specifying a single trap source Syntax snmp-server host ip-addr0 1 string port value Setting the Snmp trap holddown time Syntax no snmp-server enable traps holddown-time secsDisabling Snmp traps Snmp Layer 2 traps Disabling Syslog messages and traps for CLI access Syntax no snmp-server enable traps trap-typeSyntax no enable snmp ve-statistics Displaying virtual routing interface statistics Disabling the Syslog messages and traps Examples of Syslog messages for CLI accessSyntax show logging Specifying an Sntp server Cancelling an outbound Telnet sessionSyntax no logging enable user-login Field Description Syntax no sntp poll-intervalSyntax show sntp associations Output from the show sntp associations details command Syntax show sntp associations details Syntax show sntp status Configuring the device as an Sntp serverConfiguring the device as an Sntp server Sntp server-mode authentication-key 2 $QHMiR3NzQA= Enabling broadcast mode for an Sntp client Output from the show sntp server-modecommandDisplaying Sntp server information Syntax show sntp server-mode Setting the system clock Syntax sntp broadcast client System time for daylight saving time. command New start and end dates for US daylight saving timeSyntax sntp sync Syntax no clock summer-time CLI banner configuration Setting a message of the day bannerLimiting broadcast, multicast, and unknown unicast traffic Syntax no clock timezone us timezone-type Use the no form of the command to disable the requirement Syntax no banner motd require-enter-key Setting a privileged Exec CLI level banner Local MAC address for Layer 2 management trafficSyntax no banner execmode delimiting-character Syntax no banner incoming delimiting-character Basic port parameter configuration Assigning a port nameSyntax no use-local-management-mac Syntax port-name text Port speed and duplex mode modification Port speed and duplex mode configuration syntaxBasic port parameter configuration Syntax speed-duplex value Syntax no speed-duplex 10g-full 1000-full-master Modifying port duplex mode Port duplex mode configuration syntaxValue can be one of the following Full Half Auto default Maximum port speed application notes Flow control configuration Flow control configuration notesDisabling or re-enabling a port Disabling or re-enabling flow control Syntax no flow-control neg-on Negotiation and advertisement of flow controlSyntax no flow-control Symmetric flow control on Brocade ICX 6650 devices Displaying flow-control status 40G ports About XON and Xoff thresholds1G or 10G ports Interpacket Gap IPG on a Brocade ICX 6650 switch Changing the Gbps fiber negotiation modeIPG configuration notes Enabling and disabling symmetric flow control Port flap dampening configuration Port flap dampening configuration notesSyntax gig-default neg-full-auto auto-gig neg-off Port priority QoS modification Configuring port flap dampening on an interface Configuring port flap dampening on a trunkRe-enabling a port disabled by port flap dampening Displaying ports configured with port flap dampening Column Description Syntax show link-error-disable allSyslog messages for port flap dampening Recovering disabled ports Port loopback detection configuration notesPort loop detection Types of loop detection Configuring a global loop detection interval Configuring the device to automatically re-enable portsEnabling loop detection Syntax no loop-detection Specifying the recovery time interval Syntax no errdisable recovery cause loop-detectionSyntax no errdisable recovery interval seconds Clearing loop-detection FieldDescription Displaying loop detection resource informationSyntax show loop-detection resource Syslog message due to disabled port in loop detection Loop Detection is Enabled Basic port parameter configuration Operations, Administration, and Maintenance Feature Brocade ICX 6650 Software versions installed and running on a device OAM OverviewDetermining the flash image version running on the device Brocade ICX 6650 devices Displaying the boot image version running on the device Displaying the image versions installed in flash memorySoftware versions installed and running on a device Boot code version is shown in bold type Flash image verification Flash image CLI commandsUse the following command syntax to verify the flash image Image file types Software upgradesViewing the contents of flash files Using Snmp to upgrade software Using Snmp to upgrade softwareSyntax show dir Syntax copy flash console filename Snmp-server community string ro rw Software reboot Displaying the boot preferenceSoftware boot configuration notes Software reboot Syntax show boot-preference Loading and saving configuration filesLoading and saving configuration files Logging changes to the startup-config file Syntax no logging enable config-changed Copying a configuration file to or from a Tftp server Dynamic configuration loadingDynamic configuration usage considerations Preparing the configuration file CLI responds like this Following command line will not initiate batch mode Loading and saving configuration files with IPv6 Using the IPv6 copy commandCopying a file from the running or startup configuration Copying a file to an IPv6 Tftp server Copying a file to the running or startup configuration Loading and saving configuration files with IPv6Copying a file from an IPv6 Tftp server Copying a file to flash memory IPv6 ncopy command IPv6 Tftp server file upload Using Snmp to save and load configuration information Erasing image and configuration files System reload schedulingReloading at a specific time Syntax reload at hhmmss mm-dd-yyprimary secondary Diagnostic error codes and remedies for Tftp transfers Canceling a scheduled reloadError Message Explanation and action Code Reloading after a specific amount of time Pinging an IPv4 address Network connectivity testingNetwork connectivity testing Network connectivity testing Tracing an IPv4 route Network connectivity testing Feature Brocade ICX Ports on Demand Overview PoD licensing configuration tasks Ports on Demand terminologyPoD licensing rules Ports on Demand terminology Configuration task Reference Obtaining a PoD license Shows the Software Portal Login window Brocade Software Portal Login window License Management Welcome window PoD licensing configuration tasks Brocade ICX 6650 Administration Guide 53-1002600-01 LID Shows an example of the license query results Transferring a PoD license Syslog message informationPorts on Demand Licensing Front panel PoD Ports on Demand Licensing Rear panel Flexible Ports on DemandPoD licenses Enabling ports on the front panel Ports on Demand Licensing PoD licensesTrial licenses are not available for PoD licensing License SKU License Name Function Example, the license is copied to unit Syntax scp licensefileonhost user@IPaddresslicenseunit id Deleting a ICX6650-10G-LIC-POD license Example above, the license is copied to unit IPaddress variable is the address of the IPv4 Tftp server Enabling ports on the rear panelSyntax show pod Syntax no fpod-40g-enable group groupID Enter the following command to disable the ports in group Enable ports for groupEnable ports in group Disabling the FPoD ports on the rear panel Deleting a 10 GbE or 40 GbE license Viewing information about PoD licenses Syntax license delete unit unitid all index licenseindex Syntax show license Displaying general license information for PoD portsViewing information about PoD licenses Syntax show license unit unitid Syntax show license unit unitid index indexnumber Field Description Lic-Used Field Description 40GigabitEthernet1/2/1 is up, line protocol is up Viewing information about PoD licenses IPv6 Configuration on Brocade ICX 6650 Switch IPv6 copy Using the IPv6 copy command on Full Layer 3 IPv6 feature support IPv6 addressing overview IPv6 address types IPv6 addressing overview IPv6 address types Address Description Address structure Type IPv6 command Description Switch code Router code IPv6 CLI command supportIPv6 stateless auto-configuration Description Switch code Router code IPv6 host address on a Layer 2 switch Syntax no ipv6 enable Syntax ipv6 address ipv6-addresslink-local Configuring basic IPv6 connectivity on a Layer 3 switch IPv6 configuration on each router interfaceEnabling IPv6 routing Syntax no ipv6 unicast-routing Ospf Configuring a link-local IPv6 address on an interface Configuring basic IPv6 connectivity on a Layer 3 switch Syntax ip address ip-addresssub-net-masksecondary Configuring IPv4 and IPv6 protocol stacksConfiguring an IPv6 anycast address on an interface Configuring IPv6 management ACLs Syntax no ipv6 access-list ACL name Restricting Snmp access to an IPv6 node Configuring Snmp V3 over IPv6Configuring Sntp over IPv6 Specifying an IPv6 Snmp trap receiver Establishing a Telnet session from an IPv6 host IPv6 TelnetIPv6 traceroute Syntax no ipv6 dns domain-name domain name Defining an IPv6 DNS entrySyntax traceroute ipv6 ipv6-address Pinging an IPv6 address Configuring an IPv6 Syslog server Viewing IPv6 Snmp server addresses Disabling router advertisement and solicitation messages Static IPv6 route configurationDisabling IPv6 on a Layer 2 switch Configuring a static IPv6 route Prefix-length parameter Parameter Configuration details StatusDest-ipv6-prefix parameter IPv6 over IPv4 tunnel configuration notes Configuring a manual IPv6 tunnelIPv6 over IPv4 tunnels IPv6 over IPv4 tunnels Clearing IPv6 tunnel statistics Displaying IPv6 tunnel information Displaying a summary of tunnel informationDisplaying tunnel interface information Syntax clear ipv6 tunnel number Displaying interface level IPv6 settings Syntax show interfaces tunnel number Display command above reflects the following configuration Ecmp load sharing for IPv6 Ecmp load sharing for IPv6 Displaying Ecmp load-sharing information for IPv6 Disabling or re-enabling Ecmp load sharing for IPv6Changing the maximum load sharing paths for IPv6 IPv6 Icmp feature configuration Configuring Icmp rate limitingIPv6 Icmp feature configuration Syntax ipv6 icmp error-interval interval number-of-tokens IPv6 neighbor discovery configuration IPv6 neighbor discovery configurationEnabling IPv6 Icmp redirect messages Syntax no ipv6 redirects Neighbor discovery is not supported on tunnel interfaces IPv6 neighbor discovery configuration notesNeighbor solicitation and advertisement messages Router advertisement and solicitation messages Neighbor redirect messages Setting IPv6 router advertisement parameters Here is another example with a specified range Prefixes advertised in IPv6 router advertisement messages Syntax no ipv6 nd suppress-ra Setting flags in IPv6 router advertisement messagesEnabling and disabling IPv6 router advertisements Configuring reachable time for remote IPv6 nodes Configuration notes and feature limitations for IPv6 MTUIPv6 MTU IPv6 MTU Syntax no ipv6 mtu bytes Static neighbor entries configurationChanging the IPv6 MTU Limiting the number of hops an IPv6 packet can traverse IPv6 source routing security enhancementsClearing global IPv6 information Syntax no ipv6 hop-limit number Clearing global IPv6 information Clearing the IPv6 cacheClearing IPv6 neighbor information Displaying global IPv6 information Clearing IPv6 routes from the IPv6 route tableClearing IPv6 traffic statistics Displaying IPv6 cache information Displaying IPv6 interface information 142 Brocade ICX 6650 Administration Guide 53-1002600-01 Icmp Displaying IPv6 neighbor information Displaying the IPv6 route table Displaying local IPv6 routers Port Displaying IPv6 TCP informationSyntax show ipv6 router Syntax show ipv6 tcp connections Free TCP = percentage General IPv6 TCP connection fields = percentage Location of the TCP Field Description IPv6 statistics Displaying IPv6 traffic statisticsSyntax show ipv6 traffic ICMP6 statistics Applies to received only TCP statistics Snmp Access Snmp overview Snmp community strings Encryption of Snmp community stringsAdding an Snmp community string Snmp community strings Snmp-server community 1 encrypted-string rw Displaying the Snmp community strings Syntax show snmp server Configuring your NMS Configuring Snmp version 3 on Brocade ICX 6650 devicesUser-based security model Defining the engine id Syntax no snmp-server engineid local hex-string Snmp version 3. If you want commandDefining an Snmp group Defining an Snmp user account 162 Brocade ICX 6650 Administration Guide 53-1002600-01 Syntax no snmp-server view name mibtree included excluded Defining Snmp viewsSyntax system-max view number-of-views Snmp version 3 traps To delete a view, use the no parameter before the commandSnmp version 3 traps Defining the UDP port for Snmp v3 traps Trap MIB changes Restricting Snmp Access to an IPv6 Node Specifying an IPv6 host as an Snmp trap receiverSnmp v3 over IPv6 Backward compatibility with SMIv1 trap format Displaying Snmp Information Displaying the Engine IDDisplaying Snmp Information Syntax show snmp engineid Displaying Snmp groups Displaying user informationInterpreting varbinds in report packets Syntax show snmp group Snmp v3 configuration examples Simple Snmp v3 configurationMore detailed Snmp v3 configuration Snmp v3 configuration examples 170 Brocade ICX 6650 Administration Guide 53-1002600-01 FDP Overview FDP Overview CDP packets FDP configuration Changing the FDP update timerEnabling FDP globally Enabling FDP at the interface level Syntax no fdp timer secs Displaying FDP informationChanging the FDP hold time Displaying neighbor information This line Displays Entry addresses Brocade ICX 6650 Administration Guide 175 53-1002600-01 Clearing FDP and CDP information Displaying FDP information for an interfaceDisplaying FDP and CDP statistics Clearing FDP and CDP neighbor information CDP packets Enabling interception of CDP packets globallyEnabling interception of CDP packets on an interface Clearing FDP and CDP statistics Displaying CDP information Displaying neighbors Displaying CDP entries Syntax show fdp entry * device-id Displaying CDP statistics To clear CDP statistics, enter the following commandClearing CDP information Lldp and LLDP-MED Lldp terms used in this chapter Supported Lldp features Lldp terms used in this chapter Lldp overview Illustrates Lldp connectivity LLDP-MED overview LLDP-MED overviewBenefits of Lldp Benefits of LLDP-MED LLDP-MED connectivity Lldp transmit mode General Lldp operating principlesLLDP-MED class Lldp operating modes Lldp receive mode Lldp packets Organizationally-specific TLVs TLV supportLldp TLVs LLDP-MED TLVs Mandatory TLVsChassis ID Chassis ID TLV is always the first TLV in the Lldpdu Port ID TLV packet format TTL value MIB support TTL TLV format is shown below MIB supportSyslog messages Lldp configuration Lldp configuration notes and considerationsLldp configuration Global task Default behavior / value when Lldp is enabled Enabling support for tagged Lldp packets Changing a port Lldp operating modeEnabling and disabling Lldp Enabling and disabling receive only mode Enabling and Disabling Transmit Only Mode Syntax no lldp max-total-neighbors value Maximum number of Lldp neighborsSpecifying the maximum number Lldp neighbors per device Syntax no lldp max-neighbors-per-port value Enabling Lldp Snmp notifications and Syslog messagesSpecifying the maximum number Lldp neighbors per port Syntax no lldp snmp-notification-interval seconds Syntax no lldp transmit-delay secondsChanging the minimum time between Lldp transmissions Changing the interval between regular Lldp transmissions Changing the holdtime multiplier for transmit TTLSyntax no lldp transmit-interval seconds Syntax no lldp transmit-hold value Syntax no lldp reinit-delay seconds Changing the minimum time between port reinitializationsLldp TLVs advertised by the Brocade device General system information for Lldp Management Address Port description System capabilities System description Vlan name CapabilitiesSystem name Untagged Vlan ID Link aggregation TLV MAC and PHY configuration status LLDP-MED configuration LLDP-MED configurationThis section provides the details for configuring LLDP-MED Maximum frame size Default behavior / value Changing the fast start repeat count Syntax no lldp med fast-start-repeat-count value Defining a location id Coordinate-based location Example coordinate-based location configuration Example coordinate-based location advertisement Configuring civic address location Type value elem CA type value elem CA type value LLDP-MED configuration Elements used with civic address Description Acceptable values / examples Type Number variable is a number from 10 to 25 digits in length Configuring emergency call serviceExample civic address location advertisement Example ECS Elin location advertisements LLDP-MED network policy configuration syntaxDefining an LLDP-MED network policy 216 Brocade ICX 6650 Administration Guide 53-1002600-01 LLDP-MED attributes advertised by the Brocade device LLDP-MED capabilities LLDP-MED attributes advertised by the Brocade device Displaying Lldp statistics and configuration settingsLldp configuration summary Displaying Lldp statistics Syntax show lldp Clear lldp statistics all command was issued Syntax show lldp statistics Displaying Lldp neighbors Syntax show lldp neighbors Displaying Lldp configuration details Displaying Lldp neighbors detail Resetting Lldp statistics Clearing cached Lldp neighbor information Digital optical monitoring configuration limitations Digital optical monitoringEnabling digital optical monitoring Syntax no optical-monitor Syntax no optical-monitor alarm-interval Setting the alarm intervalDisplaying information about installed media Empty Viewing optical monitoring information Syntax show media slot slot ethernet stack-unit/slot/port Viewing optical transceiver thresholds Status value Description Syslog messages for optical transceivers Syntax show optic threshold stack-unit/slot/port Syslog About Syslog messages Displaying Syslog messages Enabling real-time display of Syslog messages Enabling real-time display for a Telnet or SSH sessionSyntax no logging console Syntax terminal monitor Syslog service configuration Displaying the Syslog configurationSyslog service configuration Displaying real-time Syslog messages Static and dynamic buffers Field Definition Syntax clear logging dynamic-buffer static-buffer Clearing log entriesTime stamps Brocade ICX 6650 Administration Guide 237 53-1002600-01 To specify a Syslog server, enter the logging host command Disabling or re-enabling SyslogSpecifying a Syslog server Syntax no logging on udp-port Specifying an additional Syslog server Disabling logging of a message levelChanging the number of entries the local buffer can hold Syntax no logging buffered level num-entries Syntax logging facility facility-name Local buffer configuration notesChanging the log facility Syntax no Ip show-portname Displaying interface names in Syslog messagesDisplaying TCP or UDP port numbers in Syslog messages Clearing the Syslog messages from the local buffer Retaining Syslog messages after a soft rebootSyslog reboot configuration considerations Basic system management Viewing system information Viewing configuration information Syntax show version Viewing port statistics Syntax show optionSyntax show statistics ethernet stack-unit/slot/port Port statistics Statistics Basic system management Port statisticsParameter Description Viewing STP statistics Clearing statistics Syntax clear option Viewing egress queue counters Syntax show interface ethernet stack-unit/slot/port Rmon support Maximum number of entries allowed Rmon control tableClearing the egress queue counters Syntax clear statistics ethernet stack-unit/slot/port Statistics Rmon group Rmon supportSyntax show rmon statistics ethernet stack-unit/slot/port ParameterDefinition Rmon support Export configuration and statistics Parameter Definition Event Rmon group Alarm Rmon groupHistory Rmon group SFlow SFlow version Extended gateway information SFlow support for IPv6 packetsExtended router information SFlow configuration considerations IPv6 packet samplingSFlow and hardware support SFlow and CPU utilization SFlow and sampling rate Configuring and enabling sFlowSFlow and source port Syntax no sflow destination ip-addrdest-udp-port Specifying the collectorSpecifying an sFlow collector on IPv4 devices Changing the polling interval Changing the sampling rateSpecifying an sFlow collector on IPv6 devices Syntax no sflow destination ipv6 ip-addrdest-udp-port Configuration considerations Configured rate and actual rateChange to global rate Module rate Changing the default sampling rate Syntax no sflow sample numChanging the sampling rate of a module Changing the sampling rate on a port Changing the sampling rate for a trunk port Command syntax for enabling sFlow forwarding Enabling sFlow forwardingChanging the sFlow source port Syntax no sflow source-port num SFlow version 5 feature configuration Syntax no sflow enable Syntax no sflow forwarding Specifying the sFlow version format Specifying the sFlow agent IP addressSpecifying the version used for exporting sFlow data Syntax no sflow agent-ip ipv4-addr Specifying the maximum flow sample size Syntax no sflow version 2Syntax no sflow max-packet-size size Syntax no sflow export system-info Displaying sFlow information Enabling the sFlow agent to export CPU-directed dataSyntax no sflow export cpu-traffic Specifying the sampling rate for exported CPU-directed data Syntax show sflow Syntax clear statistics Clearing sFlow statisticsSFlow SFlow information Utilization list for an uplink port Utilization list for an uplink port command syntaxUtilization list for an uplink port Displaying utilization percentages for an uplink Syntax show relative-utilization num 272 Brocade ICX 6650 Administration Guide 53-1002600-01 Brocade Syslog messages Message ExplanationFan num, location , failed Mac-address on portnum Syslog messages Brocade Syslog messages PCI-config-register-offset PCI-bus-number, DevPCI-device-number, Reg Offset Addr memory-address Message level Explanation Level shutdown-degrees C degreesFrom session-id Username from session-id filter User username from session-id Root ID root-id Stp-state Vlan-id IP=ipaddr MAC address any, dst mac = DestinationMAC address any Port-number Fan speed Unit/slot/port to Unit/slot/port on VLANs vlan-id to Vlan-idUnit/slot/port on vlan-id Unit/slot/port on Vlan vlan-id Mac-address MgmtPriChg Mac-address MsgAgeExpiryVlan vlan-id interface portnum STP Mac-address RootPort portnum Portnum DOT1X Port portid Mac macaddress State ospf-state Macaddress on port portidRid router-id, intf addr ip-addr 286 Brocade ICX 6650 Administration Guide 53-1002600-01 Pkt type pkt-type Ip-addr, pkt type type Type Area area-id, LSA type lsa-type LSA id lsa-id, LSA rid lsa-router-idRid router-id, limit num Ospf-state Brocade ICX 6650 Administration Guide 291 53-1002600-01 Interface configuration error has occurred Rid router-id, area area-id Nbr ip-addr, state ospf-state Rid router-id, nbr addr ip-addr Mac-addr interface portnum State vrrp-stateMac-address List ACL-num denied ip-proto Ethernet portnum mac-addrEportnum, address mac-address Portnum src macaddr mac-addr Chassis temperature has risen above the warning level 298 Brocade ICX 6650 Administration Guide 53-1002600-01 Brocade product Brocade IronWare Discussed Software version Local user password changesNIAP-CCEVS certified Brocade equipment Ironware releases 300 Brocade ICX 6650 Administration Guide 53-1002600-01 Index Lldp advertise mac-phy-config-status ports Lldp enable receive portsIpv6 nd prefix-advertisement,134 Clear fdp table, 176 Brocade ICX 6650 Administration Guide 303 53-1002600-01 FDP Icmp 131 LLDP-MED 266 Snmp SSH XON and Xoff thresholds 312 Brocade ICX 6650 Administration Guide 53-1002600-01