SPOJE.NET

Technická dokumentace

Uživatelské nástroje

Nástroje pro tento web


howto:network:brocade

Switche Brocade

FastIron FCX648S(-HPOE)

Bypass hesla

behem bootu vypise tohle:

 FCX Boot Code Version 7.0.01 (grz07001)
 Enter 'a' to stop at memory test
 Enter 'b' to stop at boot monitor

zmacknout [B] (aktivuje "boot monitor"). tam spustit prikazy:

 no password 
 boot system flash primary 

Deaktivace stackovani

Pokud se stane, ze ani po bypassnuti hesla a enable nejde nic nastavovat (napr. zadat "configure terminal"), muze to bejt tim, ze je switch ve slave modu do stacku. To se vyresi tohle.

 enable
 stack unconfigure me

Reset nastaveni

 enable
 erase startup-config

Nastaveni hesla

  enable
  configure terminal
  enable super-user-password <text>

dalsi enable hesla:

  enable port-config-password <text>
  enable read-only-password <text>

Nastaveni IP adresy

 enable
 configure terminal
 ip address 10.11.57.66 255.255.255.128
 ip default-gateway 10.11.57.1

Vygenerovat klice a nastavit ssh

 configure terminal
 crypto key generate

3) set an idle timeout

 ip ssh idle-time 20  !time in minutes

4) set a login timeout

 ip ssh timeout 60  !time in seconds

5) consider disabling telnet (optional)

 no telnet server

6) Now create the local login accounts:

 user icxadmin privilege 0 pass <yourSuperSecurePassword>

7) Configure AAA to use the local user database as default

 aaa authentication login default local

8) Consider enabling user/pass requirement for console access too (optional)

 enable aaa console

Povolit prihlasovani lokalnich useru

povolit prebirani loginu ze seznamu user ("local") jinak se pouziva jen superuser heslo ("enable")

 enable
 configure terminal
 aaa authentication login default local
 aaa authentication web-server default local

povolit zmeny hesel pres vsechny interfacy (jinak to nejde treba pres web)

 password-change any

Zalozit lokalniho usera

 enable
 configure terminal
 username USERNAME password HESLO

Ulozit konfiguraci

 write memory

Dump konfigurace

 write terminal

LACP

lag-hash exclude-l2mac
!
lag <jmeno> dynamic id 1                                         
 ports ethernet 1/1/43 to 1/1/46                                  
 primary-port 1/1/43                                              
 lacp-timeout long              

~ na linuxu: 802.3ad, balancing per IP adresa (default je MAC) bonding mode=4 miimon=100 lacp_rate=1 xmit_hash_policy=1

Odkazy

howto/network/brocade.txt · Poslední úprava: 2016/10/29 23:05 autor: 127.0.0.1