Dell Power Connect Switch Configuration

Dell Power Connect Switch configuration

The following commands are useful while configuring the  Dell Power connect switches.

VLAN

Configure

Vlan database

Vlan 3-10

Exit

Hostname   name of the switch

Enable password

enable password da119xxxxxxxxxxxxxxxx encrypted

Create stack

Stack

Member 1 5

Exit

Assign ip address and gateway

ip address x.x.x,x mask

ip default-gateway x.x.x.x

ip address vlan #

SSH authentication

Line ssh

login authentication local

enable authentication local

password daxxxxxxxxxxxxxxxxxx encrypted

exit

Spanning Tree configuration

spanning-tree mode mstp

spanning-tree mst 2 priority  priority higher #

spanning-tree mst configuration

instance 2 add vlan 1

instance 2 add vlan 3

instance 2 add vlan 4

instance 2 add vlan 5

instance 2 add vlan 6

exit

spanning-tree mst 3 priority  priority lower #

spanning-tree mst configuration

instance 3 add vlan 4

exit

spanning-tree mst configuration

name nameofMST

exit

Interface configuration

interface ethernet 1/g1

description  description

spanning-tree portfast

switchport access vlan #

exit

TRUNK Configuration

interface ethernet 1/g48

channel-group 1 mode on

switchport mode trunk

switchport trunk allowed vlan add vlan# range(3-6)

switchport trunk allowed vlan remove 1

exit

Port Channel Configuration

interface port-channel 1

switchport mode trunk

switchport trunk allowed vlan add 3-4(vlan range)

switchport trunk allowed vlan remove 1

exit

Zoning Configuration of Cisco Nexus 5000 Switches

 SAN-Zoning Configuration using Cisco NEXUS 5k Switch

for example pwwn # is 10:00:00:00:c9:62:82:36

fcid 0x01002e  get the id from show flogi database

fcalis name is sql02_hba2_p0
zonename ql02_hba2_p0_VMAX_4634_10E0
vsan database# 212

vsan 212 wwn 10:00:00:00:c9:62:82:36 fcid 0x01002d dynamic
fcalias name sql02_hba2_p0 vsan 212
    member pwwn 10:00:00:00:c9:62:82:76

zone name sql02_hba2_p0_VMAX_4634_10E0 vsan 212
   
    member fcalias vmbkp02_hba2_p0

zone name sqlp02_hba2_p0_TLB01_TAPE2 vsan 212
   
    member fcalias sqlp02_hba2_p0
zoneset name Zoneset_B_01242012 vsan 212


The procedure is

• create zone
• add members to zone
• create zoneset
• add multiple zones to a zoneset
• activate the zone set
• save the config

conf t

switch(config)# zone name sql02_hba2_p0_VMAX_4634_10E0 vsan 212
sswitch(config-zone)# member pwwn 10:00:00:00:c9:62:82:36
 switch(config-zone)# member fcid 0x01002e

(fcalias can be called accounting for easy undestanding)
switch(config-zone)# member fcalias sql02_hba2_p0

create ZONE set

conf t

switch(config)# zoneset name Zoneset_B_01242012 vsan 212
witch(config-zoneset)# member sql02_hba2_p0_VMAX_4634_10E0

(If the specified zone name was not previously configured,
 this command will return the Zone not present error message)


switch(config-zoneset)# zone name sqlp02_hba2_p0_TLB01_TAPE2 


Activate a Zone set

switch(config)# zoneset activate name zoneset_B_01242012 vsan 212



DISPLAY ZONE CONFIG


show zone vsan 212
show zoneset vsan 212
show zone member pwwn #
show zone active
 show zone status

it is better to have single Zoneset and several zones assigned to it.

Cisco IOS Troubleshooting commands

Cisco troubleshooting commands

Hardware

show process cpu sorted- cpu utilization

show debug memory leaks summary

show process cpu history

VOICE

show voip rtp conn

show call active voice

show sccp conn- useful for fax transcoder issues

show voice call summary

show call active voice br

show call active voice

show call active voice summary

show mgcp endpoint

show voice port mod #/slot#/port#

show call-manager-fallback all  test SRST

show dial-peer voice summary

debug mgcp packets

debug isdn q931- check pri

IP flow

show ip flow top-talkers

show ip cache flow

IP ROUTING

show ip bgp summary

show ip bgp neighbor x.x.x.x

show ip mroute- multicast routing table

IPSEC Tunnel

show crypto ipsec sa

show crypto isakmp sa

show crypto isakmp policy

debug crypto ipsec

debug crypto isakmp

DELL Sonic Firewall and Cisco layer 3 switches

DELL Sonic Firewall and Cisco layer 3 switches Configuration

It is sometimes difficult for the Sonic firewall to communicate with TRUNK settings of Cisco Switches.

The switch has multiple VLANs configured and there will be a single cable connecting to the DELL Sonic  firewall.

 Firewall need to learn all the Subnets configured in the switch network.

Please configure port to the firewall on the switch side

Enable interface VLAN 1 in switch—VLAN 1 is default VLAN

 conf t

interface Vlan1

 ip address 192.168.1.6 255.255.255.0

exit

 

ip default-gateway  192.168.1.1  (ip of firewall interface)

ip route 0.0.0.0 0.0.0.0 192.168.1.1

SONIC  Firewall port Configuration

interface FastEthernet1/0/1

 description Uplink to SonicWall

 switchport access vlan 1

 switchport mode access

 spanning-tree portfast

end

                                                           SONIC FIREWALL SIDE

Assign an IP address to the inside interface like 192.168.1.1

Create static route – do not summarize the routes pointing all the internal subnets to the Cisco switch example 192.168.1.6

For example

ip route 10.20.2.0 255.255.255.0 192.168.1.6

ip route 10.30.2.0 255.255.255.0 192.168.1.6

ip route 10.40.2.0 255.255.255.0 192.168.1.6

 Firewall will start to communicate with Switch side subnets.

Cisco Nexus 5000 software Upgrade

Cisco NEXUS 5000 Upgrade

Save the current config files into local memory using command copy run startup.

Also copy all the files the memory to a remote server using ftp or TFTP

The vrf for management is vrf management

Download both kickstart file and image files both have extension .bin

Copy the files from the local tftp server to Nexus switch using following command

copy tftp://10.0.1.1/n5000-uk9-kickstart.5.1.x.N1.1.bin bootflash:n5000-uk9-kickstart.5.1.x.N1.1.bin

vrf :management

Install Operation

Run the following command

install all kickstart bootflash:n5000-uk9-kickstart.5.1.x.N1.1.bin system bootflash:n5000-uk9.5.1.x.N1.1.bin

Switch will be reloaded once the upgrade is successful

Once reloaded, check the running version, it will update the new image.

Software
  BIOS:      version 3.5.0
  loader:    version N/A
  kickstart: version 5.1(3)N1(1)
  system:    version 5.1(3)N1(1)

 

Check the status of all PVCs, communication to FEXs, if all looks good- save the running config to memory.