Docker

Can I use VirtualBox alongside Docker 4 Windows?

Unfortunately, VirtualBox (and other hypervisors like VMWare) cannot run when Hyper-V is enabled on Windows.

https://ewc-docs.extremenetworks.com/install/docker.html

https://www.docker.com/community-edition

https://store.docker.com/editions/community/docker-ce-desktop-windows

https://docs.docker.com/docker-for-windows/

https://docs.docker.com/compose/install/

Docker Compose relies on Docker Engine for any meaningful work, so make sure you have Docker Engine installed either locally or remote, depending on your setup.

  • On desktop systems like Docker for Mac and Windows, Docker Compose is included as part of those desktop installs.

 

Workflow Composer

https://content.extremenetworks.com/extreme-networks-blog/leveraging-automation-and-orchestration-the-precursor-to-ml-and-ai

https://www.extremenetworks.com/product/workflow-composer/

Ubuntu Server:

  1. sudo apt-get install curl
  2. curl -sSL https://stackstorm.com/packages/install.sh | bash -s — –user=st2admin –password=’Ch@ngeMe’

Take EWC for a spin!

https://ewc-docs.extremenetworks.com/start.html

You can also do a lot through the Web UI: Check the history, run actions, configure rules, install packs…check it out at https://{YOUR_ST2_IP}. Login is the same as via the st2 CLI. Default is st2admin/Ch@ngeMe.

https://ewc-docs.extremenetworks.com/reference/cli.html

https://docs.stackstorm.com/

Converting existing scripts into actions:

https://ewc-docs.extremenetworks.com/actions.html#ref-actions-converting-scripts

st2 run packs.setup_virtualenv packs=default
#####################################################################

Action Registration

To register a new action:

  1. Place it into the content location.
  2. Tell the system that the action is available.

The actions are grouped in packs and located at /opt/stackstorm/packs

For hacking one-off actions, the convention is to use the default pack – just create your action in /opt/stackstorm/packs/default/actions. Once you have tested it out, you should move it to a dedicated pack.

Register an individual action by calling st2 action create my_action_metadata.yaml. To reload all actions, use st2ctl reload --register-actions

###############################################

Restart network services:

sudo vim /etc/network/interfaces

# The secondary network interface
auto eth1
iface eth1 inet dhcp

sudo /etc/init.d/networking restart

or

sudo ifdown -a
sudo ifup -a

Enable FTP:

sudo apt install vsftpd

sudo vi /etc/vsftpd.conf

sudo systemctl restart vsftpd.service

https://help.ubuntu.com/lts/serverguide/ftp-server.html.en

sudo chmod -R 777 .

https://content.extremenetworks.com/extreme-network-videos/automated-distributed-packet-capture-and-performance-monitoring

 

Access Policy

A default access-policy ID 1 exists for services such as FTP, HTTP, TFTP, Telnet and SSH (optional SNMPv3 and rlogin). Access-policy is globally disabled by default. If enabled the policy will be enabled with mode allow.

VSP-8284XSQ:1(config)#show access-policy

AccessPolicyEnable: on

Id: 1
Name: default
PolicyEnable: true
Mode: allow
Service: ftp|http|tftp|telnet|ssh
Precedence: 128
NetAddrType: any
NetAddr: N/A
NetMask: N/A
TrustedHostAddr: N/A
TrustedHostUserName: none
AccessLevel: readOnly
AccessStrict: false
Usage: 5

This can cause a log message like below if a third party application uses SNMPv2 to communicate with the switch.

Example,

VSP-8284XSQ:1(config)#show log file tail
1 2018-05-17T10:44:47.329Z VSP-8284XSQ CP1 – 0x00004746 – 00000000 GlobalRouter SNMP INFO snmpv3 connection access from IP 10.10.10.10 is denied by no matching policy

Enhanced Secure Mode

After enabling enhanced security mode on the switch, you will be able to login for the first time using a user name and password of admin/admin and then will be prompted to change both the user name and password. The password for the admin user must be 15 characters and made up of two of the following characters:

 Two uppercase character, from the range: ABCDEFGHIJKLMNOPQRSTUVWXYZ

 Two lowercase character, from the range: abcdefghijklmnopqrstuvwxyz

 Two numeric character, from the range: 1234567890

 Two special character, from the range: `~!@#$%^&*()_-+={[}]|\:;”’<,>.?/

Please note the above requirement applies only to the administrator user.

enhanced

Boot Flags

VSP-8284XSQ:1(config)#show boot config flags
flags block-snmp false
flags debug-config false
flags debugmode false
flags dvr-leaf-mode false
flags enhancedsecure-mode false
flags factorydefaults false
flags flow-control-mode false
flags ftpd false
flags hsecure false
flags ipv6-egress-filter false
flags ipv6-mode false
flags logging true
flags nni-mstp false
flags reboot true
flags rlogind false
flags spanning-tree-mode mstp
flags spbm-config-mode true
flags sshd false
flags syslog-rfc5424-format true
flags telnetd false
flags tftpd false
flags trace-logging false
flags urpf-mode false
flags verify-config true
flags vrf-scaling false
flags vxlan-gw-full-interworking-mode false

flags1

flags2

 

Running Config Modules

VSP-8284XSQ:1(config)#show run mod ?
boot          Display boot configuration
cfm           Display cfm configuration
chef          Display chef configuration
cli           Display cli configuration
diag          Display diag configuration
dvr           Display dvr configuration
eap           Display eap configuration
energy-saver  Display energy-saver configuration
fa            Display fa configuration
fhs           Display fhs configuration
filter        Display filter configuration
ike           Display ike configuration
ip            Display ip configuration
ipsec         Display ipsec configuration
ipv6          Display ipv6 configuration
isis          Display isis configuration
i-sid         Display i-sid configuration
lacp          Display lacp configuration
license       Display license configuration
lldp          Display lldp configuration
lst           Display lst configuration
macsec        Display macsec configuration
mlt           Display mlt configuration
naap          Display naap configuration
nls           Display nls configuration
ntp           Display ntp configuration
ovsdb         Display ovsdb configuration
port          Display port configuration
qos           Display qos configuration
radius        Display radius configuration
rmon          Display rmon configuration
sflow         Display sflow configuration
security      Display security configuration
slamon        Display slamon configuration
slpp          Display slpp configuration
smtp          Display smtp configuration
spbm          Display spbm configuration
stg           Display stg configuration
sys           Display sys configuration
tacacs        Display tacacs configuration
vlan          Display vlan configuration
web           Display web configuration
vxlan         Display vxlan configuration

Trace Level

core1:1#show trace modid-list
0   – COMMON                     126 – MRP
1   – SNMP                       127 – EFM
2   – RMON                       128 – DHU
3   – PORT_MGR                   129 – N/A
4   – CHAS_MGR                   130 – N/A
5   – BRIDGE                     131 – ERCD_DHCPS
6   – OSPF                       132 – KHI
7   – HWIF                       133 – NETWRS
8   – SIM                        134 – NETINET
9   – CPP                        135 – OS
10  – NETDRV                     136 – VXNET
11  – VLAN_MGR                   137 – USR
12  – CLI                        138 – VXCONFIG
13  – MAIN                       139 – OSAL
14  – P2IP                       140 – MISC
15  – RCIP                       141 – SHELL
16  – WEBSRV                     142 – MESSAGE
17  – ACIF                       143 – LCD
18  – GBIF                       144 – COP
19  –                            145 – ZLIB
20  – TDP                        146 – SF
21  – MAN_DIAG                   147 – MESSAGE
22  – MAN_TEST                   148 – LCD

23  – IGMP                       149 – COP
24  – IPFIL                      150 – QOS
25  – MLT                        151 – COP
26  – IPPOLICY                   152 – IM
27  – IPMC                       153 – IMG_SYNC
28  – SYSLOG                     154 – LOG
29  – DVMRP                      155 – CAN
30  – P2IPX                      156 – LC
31  – RCIPX                      157 – RESET
32  – RAPTARU                    158 – CPP-AGENT
33  – OCTAPID                    159 – HBELIB
34  – BOOT                       160 – CORE
35  – IOM                        161 – SHRLOG
36  – QOS                        162 – WD_APP
37  – FLEXDB                     163 – WD_PROC
38  – SMM                        164 – CPP_COMMON
39  – ATM                        165 – PatchManager
40  – POS                        166 – RCIP_OSPF
41  – RADIUS                     167 – RCIP_RIP
42  – SIO_COM                    168 – RCIP_PIM
43  – PGM                        169 – RCIP_IGMP
44  – ORNA                       170 – RCIP_DHCP
45  – RTM                        171 – RCIP_VRRP

46  – P2CMN                      172 – RCIP_UDP
47  – RIP                        173 – RCIP_RSMLT
48  – PIM                        174 – RCIP_POLICY
49  – RPS                        175 – VSP_TALK
50  – NTP                        176 – CLILOG
51  – TCP                        177 – SNMPLOG
52  – BGP                        178 – L2VPN
53  – EPILOGUE                   179 – ERCD_SPBM
54  – SSH                        180 – LLDP
55  – AUTOMAT                    181 –
56  – HAL                        182 –
57  – WIND                       183 – SPBPT
58  – EAP                        184 – LMF
59  – LACP                       185 – VPE_MAC
60  – PING                       186 – HCK
61  – DNS                        187 – VPE_VLAN
62  – DPM                        188 – VPE_IPV4
63  – BOOTP                      189 – VPE_ARP
64  – DPMMSG                     190 – VPE_IPMC
65  – FILTER                     191 – VPE_IPV6
66  – RCIP6                      192 – SLAMON
67  – MESSAGE                    193 – VPE_BRIDGE
68  – LCD                        194 – VPE_MLT

69  – RCD                        195 – VPE_PORT
70  – RLCD                       196 – VPE_SPBM
71  – PD                         197 – DBG
72  – COP                        198 – PORT_L1
73  – ERCD                       199 – POE
74  – ERCD_VLAN                  200 – VPE_FILTER
75  – ERCD_PORT                  201 – VPE_QOS
76  – ERCD_MLT                   202 – VPE_IPFIX
77  – ERCD_MGID                  203 – EVT
78  – ERCD_MAC                   204 – VPE_FABRIC
79  – ERCD_HA                    205 – VPE_DRIVER
80  – ERCD_IP                    206 – VPE_TBLMGR
81  – ERCD_IPMC                  207 – UNI
82  – ERCD_IPX                   208 – VPE_CONCHK
83  – ERCD_IPV6                  209 – VPE_UTL
84  – ERCD_IPFIX                 210 – VPE_POLICER
85  – ERCD_FILTER                211 – MACSEC
86  – ERCD_QOS                   212 – VPE_HEARTBEAT
87  – ERCD_MPLS                  213 – VPE_CMD
88  – ERCD_IPVPN                 214 – VPE_VL
89  – F2I                        215 – VPE_COB
90  – F2E                        216 – VPE_PATCH
91  – FOQ                        217 – VPE_RSP

92  – HWIFCOP                    218 – ASG
93  – IPFIX                      219 – ASG_UTILS
94  – IPMC6                      220 – VPE_MACSEC
95  – MCAST6_CMN                 221 – FA
96  – MLD                        222 – ONA
97  – PIM6                       223 – PIMGW
98  – SLPP                       224 – MOCANA
99  – INFINITY                   225 – FHS
100 – MPLS                       226 – ERCD_FHS
101 – RCMPLS                     227 – VRRPV3
102 – ACLI                       228 – DBSYNC
103 – VRF                        229 – DVR
104 – NSNA                       230 – SMTP
105 – MIRRORFPGA                 231 – VXLAN
106 – MSTP                       232 – SFLOW
107 – RSTP                       233 – IKE
108 – MSDP                       234 – DIGITALCERT
109 – TACACS                     235 – OPENSSL
110 – BFD                        236 – CHEF
111 – OPM                        237 – CHEFCLIENT
112 – MSG_API                    238 – IPSEC
113 – DISPATCHER                 239 – SECURITY
114 – MAILBOX_DRV                240 – ERCD_SECURITY

115 – TLS                        241 – SLPPG
116 – ADM                        242 – NLS_BASE
117 – RBS                        243 – NLS_SSIO
118 – TDCONT                     244 – OVSDBIF
119 – ISIS                       245 – VCS
120 – CFM                        246 – VCS_CLIENT
121 – OERCD                      247 – NICKNAME_SERVER
122 – PWE3                       248 – NICKNAME_CLIENT
123 – EXTENDED_PING              249 – ENERGY_SAVER
124 – LOOPBACK                   250 – MULTIPLE_USERS
125 – SPBM                       251 – LST
252 – NLS_NFT

core1:1#trace level 9 ?
<0-4>   Trace level (0-Disabled; 1-Very terse; 2-Terse; 3-Verbose; 4-Very verbose)

core1:1#clear trace

core1:1#trace level 9 2

core1:1#trace shut

core1:1#show trace file tail

core1:1#save trace

Save trace to file /intflash/systrace successful.
283 written to /intflash/systrace

 

Run SPBM

VSP-8284XSQ:1(config)#run ?
Run commands
spbm  Run SPBM commands
VSP-8284XSQ:1(config)#run spbm
**********************************************************
*** This script will guide you through configuring the ***
*** Extreme Networks switch for optimal operation of SPB.         ***
*** Extreme Networks switch for optimal operation of SPB.         ***
*** —————————————————***
*** The values in [] are the default values, you can   ***
*** input alternative values at any of the prompts.    ***
*** If you wish to terminate or exit this script       ***
*** enter ^C <control-C> at any prompt.                ***
*** NOTE: THE COMMAND WILL TEMPORARILY FLAP IS-IS,SPBM ***
**********************************************************
SPB Ethertype <0x8100,0x88a8> [0x8100]:
SPBM instance <1-100> [1]:
SPB primary BVLAN <2-4059> [4051]:
SPB secondary BVLAN <2-4059> [4052]:
ISIS system id <xxxx.xxxx.xxxx> [0051.0064.c884]:
SPB nickname <x.xx.xx> [4.c8.84]:
SPB Manual Area <xx.xxxx.xxxx…xxxx> [49.0000]:
ISIS System Name [VSP-8284XSQ]:
Enable SPBM multicast (y/n) [n]:
Enable IP shortcuts (y/n) [n]:
Configure SPBM SMLT? (y/n) [n]:
ISIS port interfaces <a/b,c/d>[]:
ISIS MLT interface <MLT ID LIST> []:
Enable CFM SPBM (y/n) [n]:

****CONFIGURATION IN PROGRESS****

VSP-8284XSQ:1(config)#no router isis enable
VSP-8284XSQ:1(config)#router isis
VSP-8284XSQ:1(config-isis)#no ip-source-address
VSP-8284XSQ:1(config-isis)#no system-id
VSP-8284XSQ:1(config-isis)#configure terminal
Enter configuration commands, one per line.  End with CNTL/Z.
VSP-8284XSQ:1(config)#spbm
VSP-8284XSQ:1(config)#spbm ethertype 0x8100
VSP-8284XSQ:1(config)#router isis
VSP-8284XSQ:1(config-isis)#spbm 1
VSP-8284XSQ:1(config-isis)#spbm 1 nick-name 4.c8.84
VSP-8284XSQ:1(config-isis)#spbm 1 b-vid 4051,4052 primary 4051
VSP-8284XSQ:1(config-isis)#vlan create 4051 type spbm-bvlan
VSP-8284XSQ:1(config)#vlan create 4052 type spbm-bvlan
VSP-8284XSQ:1(config)#router isis
VSP-8284XSQ:1(config-isis)#system-id 0051.0064.c884

Error: Attribute field already configured to the same value.

VSP-8284XSQ:1(config-isis)#manual-area 49.0000
VSP-8284XSQ:1(config-isis)#sys-name VSP-8284XSQ
VSP-8284XSQ:1(config-isis)#router isis enable
VSP-8284XSQ:1(config)#

****SCRIPT EXECUTION COMPLETE****
VSP-8284XSQ:1(config)#1 2018-05-16T11:03:24.585Z VSP-8284XSQ CP1 – 0x00000003 – 00000000 GlobalRouter SW INFO Dynamic nick-name client has been started
1 2018-05-16T11:03:24.707Z VSP-8284XSQ CP1 – 0x00000004 – 00000000 GlobalRouter SW INFO Dynamic nick-name client has been stopped

VSP-8284XSQ:1(config)#