You are viewing a cached version of this page.

You are currently offline. This page was loaded from cache.

RUCKUS FastIron Management Configuration Guide, 10.0.10

Provides step-by-step instructions to help you understand and configure management technology features for the current release of FastIron OS. Organized by technology, for example, Network Time Protocol (NTP), Power over Ethernet (PoE ), and SNMP.

1 Vistance Legal Statements
Preface RUCKUS
- 3 Contact Information, Resources, and Conventions
  - 3.1 Contacting RUCKUS Customer Services and Support
  - 3.2 Document Feedback
  - 3.3 RUCKUS Product Documentation Resources
  - 3.4 Online Training Resources
  - 3.5 Document Conventions
  - 3.6 Command Syntax Conventions
4 About This Document
- 4.1 New in This Document
- 4.2 Supported Hardware
Configuration Fundamentals
- 5 Configuration Fundamentals
  - 5.1 Management port overview
    - 5.1.1 Displaying Information About Management Ports
  - 5.2 Consideration for Accessing Factory Default Device
  - 5.3 Open and Closed UDP and TCP Ports
  - 5.4 Web Management Interface
  - 5.5 Management VRFs
    - 5.5.1 Source interface and management VRF compatibility
    - 5.5.2 Management Applications Supporting Management VRFs
    - 5.5.3 Configuring a Global Management VRF
    - 5.5.4 Configuring the OOB management port to be a member of a management VRF
    - 5.5.5 Displaying management VRF information
  - 5.6 Additional OOB management configuration options
    - 5.6.1 Controlling Traffic on Management Ports in a VLAN or VRF
  - 5.7 System clock
    - 5.7.1 Daylight saving time
    - 5.7.2 Time zones
    - 5.7.3 Setting the clock parameters for the device
  - 5.8 Basic System Parameter Configuration
    - 5.8.1 Configuring Basic System Parameters
    - 5.8.2 Examples of Syslog messages for CLI access
  - 5.9 Displaying and modifying system parameter default settings
    - 5.9.1 System default settings configuration considerations
    - 5.9.2 Modifying system parameter default values
    - 5.9.3 Displaying system parameter default values
  - 5.10 Password and Device Recovery
  - 5.11 Forwarding Profiles
    - 5.11.1 Configuration Considerations for Forwarding Profiles
    - 5.11.2 Configuring a Forwarding Profile
  - 5.12 Basic port parameter configuration
    - 5.12.1 About Port Regions
    - 5.12.2 Specifying a Port Address
    - 5.12.3 Static MAC entry configuration
    - 5.12.4 Multi-port static MAC address
      - 5.12.4.1 Multi-port static MAC address configuration notes
    - 5.12.5 Configuring Basic Port Parameters
    - 5.12.6 Displaying the Port Name for an Interface
    - 5.12.7 Port speed and duplex mode modification
      - 5.12.7.1 Port Speed and Duplex Mode Configuration
    - 5.12.8 Auto-negotiation
      - 5.12.8.1 Enabling auto-negotiation maximum port speed advertisement
        
        5.12.8.1.1 Maximum port speed advertisement application notes
        
        5.12.8.1.2 Configuring maximum port speed advertisement
    - 5.12.9 Force mode configuration
      - 5.12.9.1 Force mode configuration syntax
    - 5.12.10 MDI and MDIX configuration
      - 5.12.10.1 MDI and MDIX configuration notes
      - 5.12.10.2 MDI and MDIX configuration syntax
    - 5.12.11 Disabling or re-enabling a port
    - 5.12.12 Enabling and disabling support for 100BaseFX
      - 5.12.12.1 Enabling and disabling 100BaseFX on Chassis-based and stackable devices
    - 5.12.13 Changing the Gbps fiber negotiation mode
    - 5.12.14 Flow Control Configuration
      - 5.12.14.1 Flow control configuration notes
      - 5.12.14.2 Configuring Flow Control
      - 5.12.14.3 Displaying flow-control status
    - 5.12.15 Symmetrical Flow Control
      - 5.12.15.1 Configuration Notes and Feature Limitations for Symmetrical Flow Control
      - 5.12.15.2 Configuring Symmetrical Flow Control
      - 5.12.15.3 Displaying Symmetrical Flow Control Status
    - 5.12.17 Port priority (QoS) modification
    - 5.12.18 Dynamic configuration of Voice over IP (VoIP) phones
      - 5.12.18.1 VoIP configuration notes
      - 5.12.18.2 Enabling dynamic configuration of a Voice over IP (VoIP) phone
      - 5.12.18.3 Viewing voice VLAN configurations
    - 5.12.19 Port flap dampening configuration
      - 5.12.19.1 Port flap dampening configuration notes
      - 5.12.19.2 Configuring port flap dampening on an interface
      - 5.12.19.3 Configuring port flap dampening on a trunk
      - 5.12.19.4 Re-enabling a port disabled by port flap dampening
      - 5.12.19.5 Displaying ports configured with port flap dampening
      - 5.12.19.6 Syslog messages for port flap dampening
    - 5.12.20 Configuring link dampening and alarms
    - 5.12.21 Port Loop Detection
      - 5.12.21.1 Types of loop detection
      - 5.12.21.2 Recovering Disabled Ports
      - 5.12.21.3 Port loopback detection configuration notes
      - 5.12.21.4 Configuring Port Loopback Detection
      - 5.12.21.5 Displaying Loop Detection Information
      - 5.12.21.6 Displaying loop detection resource information
      - 5.12.21.7 Displaying loop detection configuration status on an interface
      - 5.12.21.8 Syslog message due to disabled port in loop detection
      - 5.12.21.9 Shutdown prevention for loop-detection on an interface
      - 5.12.21.10 Periodic log message generation for shutdown prevention
      - 5.12.21.11 Syslog for port shutdown prevention
  - 5.13 Replacing a primary IPv4 address automatically
  - 5.14 Ethernet loopback
    - 5.14.1 Ethernet loopback operational modes
    - 5.14.2 Ethernet loopback configuration considerations
    - 5.14.3 Configuring Ethernet loopback in VLAN-unaware mode
    - 5.14.4 Configuring Ethernet loopback in VLAN-aware mode
    - 5.14.5 Ethernet loopback syslog messages
  - 5.15 Disabling the automatic learning of MAC addresses
    - 5.15.1 MAC address learning configuration notes and feature limitations
  - 5.16 Changing the MAC age time and disabling MAC address learning
    - 5.16.1 Disabling the automatic learning of MAC addresses
      - 5.16.1.1 MAC address learning configuration notes and feature limitations
    - 5.16.2 Displaying the MAC address table
  - 5.17 Clearing MAC address entries
  - 5.18 Defining MAC address filters
  - 5.19 Monitoring MAC address movement
    - 5.19.1 Configuring the MAC address movement threshold rate
    - 5.19.2 Viewing the MAC address movement threshold rate configuration
    - 5.19.3 Configuring an interval for collecting MAC address move notifications
    - 5.19.4 Disabling Syslog for MAC Address Moves
    - 5.19.5 Viewing MAC address movement statistics for the interval history
  - 5.20 Overview of Breakout Ports
    - 5.20.1 Configuring Breakout Ports and Subports
    - 5.20.2 Displaying Information for Breakout Ports
    - 5.20.3 Setting Module 2 to Uplink-100-Gbps Mode
    - 5.20.4 Removing Breakout Configuration
    - 5.20.5 1G Breakout Subports
    - 5.20.6 Configuring 1G Breakout Ports
  - 5.21 Configuring the CLI Banner
  - 5.23 CLI command history
    - 5.23.1 CLI command history persistence limitations
    - 5.23.2 Displaying and clearing command log history
  - 5.25 Cut-through switching
  - 5.26 Jumbo frame support
  - 5.27 Multi-Process Memory Leak Detection
  - 5.28 Wake-on-LAN support across VLANs
  - 5.30 Secure Wipe
    - 5.30.1 Secure Wipe Configuration Notes and Considerations
    - 5.30.2 Starting Secure Wipe
- 6 Configuration File Management
  - 6.1 Loading and Saving Configuration Files
    - 6.1.1 Logging Changes to the Startup-config File
    - 6.1.2 Copying a Configuration File To or From a TFTP Server
    - 6.1.3 Maximum File Sizes for Startup-config File and Running-config File
    - 6.1.4 Dynamic Configuration Loading
      - 6.1.4.1 Preparing the Configuration File
      - 6.1.4.2 Loading the Configuration Information into the Running-config
  - 6.2 Loading and Saving Configuration Files with IPv6
  - 6.3 Configuration Archive and Replace
    - 6.3.1 Configuration Archives
    - 6.3.2 Creating a Configuration Archive
    - 6.3.3 Performing a Reload Using a Configuration Archive
    - 6.3.4 Managing Configuration Archive Files
    - 6.3.5 Configuration Archive Auto-Revert
    - 6.3.6 Verifying Configuration Archives
    - 6.3.7 Enabling Configuration Archive Auto-Revert
    - 6.3.8 Enabling Configuration Archive Auto-Revert Options
7 Network Time Protocol Version 4 (NTPv4)
- 7.1 Network Time Protocol Version 4 Overview
  - 7.1.1 Limitations
  - 7.1.2 Network Time Protocol leap second
    - 7.1.2.1 How Ruckus supports leap second handling for NTP
  - 7.1.3 NTP server
    - 7.1.3.1 System as an Authoritative NTP Server
  - 7.1.4 NTP Client
  - 7.1.5 NTP peer
  - 7.1.6 NTP broadcast server
  - 7.1.7 NTP broadcast client
  - 7.1.8 NTP associations
    - 7.1.8.1 NTP poll-based associations
    - 7.1.8.2 NTP broadcast-based associations
  - 7.1.9 Synchronizing time
  - 7.1.10 Authentication
  - 7.1.11 NTP and a Configured VLAN
- 7.2 Configuring NTP
  - 7.2.1 Enabling NTP
  - 7.2.2 Disabling NTP
  - 7.2.3 NTP Server Start Delay
  - 7.2.4 Enabling NTP Authentication
  - 7.2.5 Defining an Authentication Key
  - 7.2.6 Specifying a Source Interface
  - 7.2.7 Enabling or Disabling the VLAN Containment for NTP
  - 7.2.8 Configuring the NTP Client
  - 7.2.9 Configuring the Master
  - 7.2.10 Configuring the NTP Peer
  - 7.2.11 Configuring NTP on an Interface
  - 7.2.12 Configuring the Broadcast Client
  - 7.2.13 Configuring the Broadcast Destination
  - 7.2.14 Displaying NTP Status
  - 7.2.15 Displaying NTP Association Information
  - 7.2.16 Displaying NTP Association Details
  - 7.2.17 NTP Client Mode Configuration Example
  - 7.2.18 NTP Client Mode Configuration Example
  - 7.2.19 NTP Strict Authentication Configuration Example
  - 7.2.20 NTP Loose Authentication Configuration Example
  - 7.2.21 NTP Interface Context for the Broadcast Server or Client Mode Example
  - 7.2.22 NTP Broadcast Client Configuration Example
  - 7.2.23 NTP over Management VRF
    - 7.2.23.1 NTP over Management VRF Limitations
    - 7.2.23.2 Configuring NTP over Management VRF on an NTP Server
    - 7.2.23.3 Configuring NTP over Management VRF on an NTP Client
    - 7.2.23.4 Configuration Example for NTP over Management VRF Using IPv6
8 Precision Time Protocol
Cisco Discovery Protocl (CDP)
- 9 Cisco Discovery Protocol
Foundry Discovery Protocol (FDP)
- 10 Foundry Discovery Protocol
  - 10.1 Foundry Discovery Protocol overview
  - 10.2 Enabling FDP
  - 10.3 Verifying FDP
  - 10.4 Clearing FDP statistics and neighbor information
11 LLDP and LLDP-MED
- 11.1 LLDP terms used in this chapter
- 11.2 LLDP overview
  - 11.2.1 Benefits of LLDP
- 11.3 LLDP-MED overview
  - 11.3.1 Benefits of LLDP-MED
  - 11.3.2 LLDP-MED class
- 11.4 General LLDP operating principles
  - 11.4.1 LLDP operating modes
    - 11.4.1.1 LLDP receive mode
  - 11.4.2 LLDP packets
  - 11.4.3 TLV support
    - 11.4.3.1 LLDP TLVs
    - 11.4.3.2 LLDP-MED TLVs
    - 11.4.3.3 Mandatory TLVs
- 11.5 MIB support
- 11.6 Syslog Messages
- 11.7 LLDP Configuration
  - 11.7.1 LLDP Configuration Notes and Considerations
  - 11.7.2 Managing LLDP on a Global Basis
  - 11.7.3 Enabling Support for Tagged LLDP packets
  - 11.7.4 Disabling LLDP receive and transmit mode
  - 11.7.5 Re-enabling LLDP receive and transmit mode
  - 11.7.6 Enabling LLDP receive only mode
  - 11.7.7 Enabling transmit only mode
  - 11.7.8 LLDP port's operating mode change
  - 11.7.9 Configuring the LLDP parameters (Optional)
  - 11.7.10 LLDP TLVs advertised by the Brocade device
    - 11.7.10.1 Management address
    - 11.7.10.2 Advertising IP management address
    - 11.7.10.3 Port parameters
      - 11.7.10.3.1 Disabling advertisement of the port description
    - 11.7.10.4 System capabilities
      - 11.7.10.4.1 Disabling the advertise system capabilities
    - 11.7.10.5 System description
      - 11.7.10.5.1 Advertising the system description
    - 11.7.10.6 General system information for LLDP
    - 11.7.10.7 802.1 capabilities
    - 11.7.10.8 802.3 capabilities
- 11.8 LLDP-MED configuration
  - 11.8.1 Enabling LLDP-MED
  - 11.8.2 Enabling SNMP notifications and Syslog messages for LLDP-MED topology changes
  - 11.8.3 Changing the fast start repeat count
  - 11.8.4 Defining a location id
    - 11.8.4.1 Coordinate-based location
    - 11.8.4.2 Configuring civic address location
    - 11.8.4.3 Configuring emergency call service
  - 11.8.5 Defining an LLDP-MED network policy
- 11.9 LLDP-MED attributes advertised by the Ruckus device
  - 11.9.1 LLDP-MED capabilities
  - 11.9.2 Extended power-via-MDI information
  - 11.9.3 Displaying LLDP statistics and configuration settings
  - 11.9.4 LLDP configuration summary
  - 11.9.5 Displaying LLDP statistics
  - 11.9.6 Displaying LLDP neighbors
  - 11.9.7 Displaying LLDP neighbors detail
  - 11.9.8 Displaying LLDP configuration details
- 11.10 LLDP port ID subtype configuration for E-911
  - 11.10.1 Configuring the LLDP port ID subtype to advertise
- 11.11 Resetting LLDP statistics
- 11.12 Clearing cached LLDP neighbor information
Power over Ethernet
- 12 Power over Ethernet
  - 12.1 Power over Ethernet Overview
    - 12.1.1 Power over Ethernet Terms
    - 12.1.2 IEEE 802.3bt Features
    - 12.1.3 Methods for Delivering Power over Ethernet
      - 12.1.3.1 PoE Endspan Method
      - 12.1.3.2 PoE Midspan Method
    - 12.1.4 Perpetual PoE and Fast Boot PoE
      - 12.1.4.1 Configuring Perpetual PoE
      - 12.1.4.2 Disabling Perpetual PoE
    - 12.1.5 PoE Refactoring
    - 12.1.6 PoE Autodiscovery
    - 12.1.7 Power Class
    - 12.1.8 Power over Ethernet Cabling Requirements
    - 12.1.9 Auto Firmware Download
    - 12.1.10 PoE and CPU Utilization
    - 12.1.11 PoE Support Matrix
  - 12.2 Auto-Enabling of PoE
    - 12.2.1 PoE Power Management Methods
    - 12.2.2 Enabling Power over Ethernet
    - 12.2.3 Disabling Power over Ethernet
    - 12.2.4 Enabling PoE Power Management Policy
  - 12.3 Support for PoE Legacy Power-Consuming Devices
  - 12.4 Enabling the Detection of PoE Power Requirements Advertised Through CDP
    - 12.4.1 Command Syntax for PoE Power Requirements
  - 12.5 Setting the Maximum Power Level for a PoE Power-Consuming Device
    - 12.5.1 Considerations for Setting Power Levels
    - 12.5.2 Configuring Power Levels
  - 12.6 Setting the Power Class for a PoE Power-Consuming Device
    - 12.6.1 Setting the Power Class
  - 12.7 Setting the Inline Power Priority for a PoE Port
  - 12.8 Resetting PoE Parameters
  - 12.9 Inline Power on PoE LAG Ports
    - 12.9.1 Configuring Inline Power on PoE Ports in a LAG
  - 12.10 Fanless Mode Support
  - 12.11 Automatic Fanless Mode Support for RUCKUS AV 8200 Switch
  - 12.12 Displaying Power over Ethernet Information
    - 12.12.1 Displaying PoE Operational Status
    - 12.12.2 Displaying Detailed Information About PoE Power Supplies
  - 12.13 Troubleshooting
- 13 Port Profile
  - 13.1 Port Profile Overview
  - 13.2 Configuring a Static Port Profile
  - 13.3 Configuring a Dynamic Port Profile
  - 13.4 Displaying Port Profile Information
SNMP
- 14 SNMP
  - 14.1 SNMP Overview
  - 14.2 Disabling SNMP
  - 14.3 SNMP Community Strings
    - 14.3.1 Encryption of SNMP Community Strings
    - 14.3.2 Adding an SNMP Community String
    - 14.3.3 Displaying the SNMP Community Strings
  - 14.4 Suppress SNMP Authentication Failure Timer
  - 14.5 User-based Security Model
    - 14.5.1 Configuring Your NMS
    - 14.5.2 Configuring SNMPv3 on RUCKUS Devices
  - 14.6 SNMP Parameter Configuration
    - 14.6.1 SNMP Trap Receiver
    - 14.6.2 Single Trap Source
    - 14.6.3 SNMP Trap Holddown Time
    - 14.6.4 Configuring SNMP Parameters
    - 14.6.5 Disabling SNMP Traps
    - 14.6.6 SNMP ifIndex
  - 14.7 Defining SNMP Views
  - 14.8 SNMP Version 3 Traps
    - 14.8.1 Configuring SNMP Version 3 Trap Notifications
    - 14.8.2 Trap MIB changes
      - 14.8.2.1 Backward compatibility with SMIv1 trap format
    - 14.8.3 SNMP MAC-notification trap support
      - 14.8.3.1 Requirements and limitations for MAC-notification trap support
      - 14.8.3.2 Configuring SNMP traps for MAC-notification
      - 14.8.3.3 MAC-notification events
    - 14.8.4 Specifying IPv6 SNMP Parameters
    - 14.8.5 Viewing IPv6 SNMP Server Addresses
  - 14.9 Displaying SNMP Information
  - 14.10 Interpreting Varbinds in Report Packets
  - 14.11 SNMPv3 Configuration Examples
    - 14.11.1 SNMP Group, SNMP User, and SNMP Trap Receiver Configuration
    - 14.11.2 SNMP Configuration with Various Parameters
- 15 Remote Access to the Switch
  - 15.1 Remote Access Overview
  - 15.2 Configuring Remote Access Using Telnet
  - 15.3 Remote Access Using SSH
    - 15.3.1 Configuring SSH
  - 15.4 Remote Access Using SNMP
    - 15.4.1 Configuring Remote Access for SNMP
  - 15.5 Remote Web Management Access
    - 15.5.1 Configuring Web Access
  - 15.6 Remote Access Using RESTCONF
  - 15.9 Restricting Remote Access Using IP Addresses or MAC Addresses
  - 15.10 Restricting Remote Access to the Device to Specific VLAN IDs
    - 15.10.1 Using a Specific VLAN to Restrict Remote Access
SmartZone ICX-Management
- 16 Managing ICX Switches from SmartZone
Managing ICX Switches from RUCKUS One
- 17 Managing ICX Switches from RUCKUS One
- 18 Managing ICX Switches from Unleashed
  - 18.1 ICX Management in Unleashed
  - 18.2 Audio-Visual Profile Support for an ICX Switch
19 ICX-Management Troubleshooting
- 19.1 Troubleshooting ICX-to-SmartZone or ICX-to-RUCKUS One Connectivity

Did you find what you were looking for?