VOSS Configuring SNMPv3

#VSP8000-1

snmp-server view ALL 1
snmp-server group HOMELAB “” auth-priv read-view ALL write-view ALL notify-view ALL
snmp-server user snmpuser group HOMELAB md5 authcred des privcred
snmp-server host 192.168.0.250 v3 authpriv snmpuser
snmp-server sender-ip 192.168.0.250 10.0.0.81

Note: Empty string for GlobalRouter VRF.

# Show snmp-server commands

show snmp-server
show snmp-server group
show snmp-server user
show snmp-server view

no snmp-server view ALL 1
no snmp-server group HOMELAB
no snmp-server user snmpuser
no snmp-server host 192.168.0.250 v3 snmpuser

Note: To remove the host address the “authpriv” should not be included.

5520-VIM-4YE module

Question:

Does the 5520-VIM-4YE support 1G connections along with 10G and 25G?

Answer:

No. The 5520-VIM-4YE only supports 10G and 25G port speeds. If 1G and 10G is required you can use the 5520-VIM-4XE instead.

Note:

In Fabric Engine, you must use the sys vim-speed command to set the speed to 10G or
25G for 5520-VIM-4YE. The default is 25G. A reboot is not necessary after setting the speed.
In Switch Engine, use the configure ports partition command with 4×25 or 4×10.

Example,  for 5520-48p with 5520-VIM-4YE

configure ports partition 57 4x10G

The show ports partition-template command will confirm configuration in place.

YouTube Channel Open today

Featured

I thought why not have a go at creating some videos to compliment the posts I publish on my blog, so I’ve created a YouTube channel and uploaded a couple of videos to get started.

My videos use GNS3 and simulated switches to help demonstrate something useful from an Extreme Networks experience with operating systems such as EXOS or VOSS.

Please check it out and subscribe if you like them and I will create some more.

https://www.youtube.com/channel/UC-lME2FRFCEG-sLwZmPDCbw

Thanks

Rob

Change Default SNMP v2c Community in VOSS

For security hardening change the default SNMP v2c communities of public (read only) and private (read write).

Under global configuration mode:

no snmp-server community public

no snmp-server community private

snmp-server community NewRead group readgrp index first secname readview

snmp-server community NewWrite group v1v2grp index second secname initialview

Type show snmp-server community and see the list of indexes in the Community Table (first, second etc…) as there may be others as well created for VRFs.

VSP Premier License

Generate a license .XML file on the support portal using a valid voucher ID and match against the switch base MAC address and serial number (type show sys-info command).

Copy .XML file to /intflash and then type load-license command from configuration mode. This will install the premier license. Type show license command to confirm license is in place and type save config.

On the portal the license files can be seen against the customer and switch type under assets. In the event of a replacement switch the license file can be edited with a new base MAC and serial number.

Spreadsheet Comparison

Compare two Excel files using the Microsoft Spreadsheet Comparison application.

On the Start screen, click Spreadsheet Compare.

Click Home > Compare Files.

Click the blue folder icon next to the Compare box to browse to the location of the earlier version of your workbook.

Click the green folder icon next to the To box to browse to the location of the workbook that you want to compare to the earlier version, and then click OK.

In the left pane, choose the options you want to see in the results of the workbook comparison by checking or unchecking the options, such as FormulasMacros, or Cell Format. Or, just Select All.

Click OK to run the comparison.

Differences are highlighted with a cell fill color or text font color, depending on the type of difference. For example, cells with “entered values” (non-formula cells) are formatted with a green fill color in the side-by-side grid, and with a green font in the pane results list. The lower-left pane is a legend that shows what the colors mean.

Note: If the files are .CSV files then open in Excel and save them as Excel Workbook (*.xlsx) files so they can be opened by the tool.

VSP Segmented Management Interface Explained

Since VSP 8.2 release a new Segmented Management Interface has been introduced which provides a more unambiguous management interface and avoids asymmetric routing problems when OOB and VLAN us used. There are three type of mgmt interface which are OOB, CLIP and VLAN. Existing switches pre 8.2 can be configured to migrate one of their management interface types to a SMI (migrate-to-mgmt command present in 7.1.3, 8.0.1 and 8.1.0).

Be aware that after the upgrade the GRT interface will disappear and if a VLAN IP was used for management on a L3 BEB or L3 router then traffic inbound on a different VLAN will not reach the mgmt VLAN. For this type of switch it is recommended to use a CLIP for management.

The slides below explain the reason for the change and the recommendations to follow when upgrading to 8.2 or higher.

It might be simpler to assign a new CLIP for management purposes and keep existing CLIP used by ISIS Source IP or as Router ID for OSPF and/or BGP. If you do this consider external servers that have discovered the switch using a different IP and also external RADIUS servers which are configured with the previous IP address.

After the upgrade ISIS Source IP is no longer necessary but is recommended if IP shortcuts are used. If the original CLIP is used for management it will disappear and not be available for ISIS Source IP so a new CLIP should be considered.

Decide which VRF to use for management and which type of interface (OOB, CLIP or VLAN) based on L3 BEB, L3 Router, L2 BEB or L2 Switch.

https://community.extremenetworks.com/HigherLogic/System/DownloadDocumentFile.ashx?DocumentFileKey=c247b77e-8e47-fb70-c9c8-76384b0d1cb3&forceDialog=0