OptiSwitch 900 Technical Training Part III - Management

Optical Networking Technologies

Connectivity Unlimited

Course contents
Config File Management Enabling Management on an Interface SNMP Setup Upgrading Firmware Time and NTP Syslog

Slide No. 2

Connectivity Unlimited

Management
By default management by SSH / telnet or SNMP is Disable To Enable Management enter to Interface level (interface Must be with ip address) Management can be enable for SSH, Telnet, SNMP, and TFTP You can set Management for range of ip address by using Mask You can set Management only to one ip address

910(config)# interface vlan vif4003 910(config-vif4003)# tag 4003 910(config-vif4003)# ip 192.168.1.1/24 910(config-vif4003)# ports 3,7-8,9 910(config-vif4003)# description *** To management ** 910(config-vif4003)# management snmp 192.168.1.0/24 910(config-vif4003)# management telnet 192.168.1.254/32 910(config-vif4003)# management ssh 0.0.0.0/0

Slide No. 3

Connectivity Unlimited

Interface out-of-band eth0

The OS9000 is equipped with an Out-of-Band Management interface The OS9000 internal firewall blocks all types of management by default Only ping is allowed

The Out-of-Band Management interface Connected directly to the CPU Not influenced by in-band traffic Used Only for management
910(config)# interface out-of-band eth0 910(config-eth0)# ip 192.168.1.1/24 910(config-eth0)# management

Note: Only ARPs, BPDUs & Unicasts sends to one of the interfaces MACs will reach the CPU.
Slide No. 4

Connectivity Unlimited

Upgrade Software
The OS has the following partitions

2 partitions for firmware images (current, backup) 2 partitions for configuration files (current, backup) Configure an interface and verify connectivity to the FTP server: Open A FTP server software , check user directory and authorization

Slide No. 5

Connectivity Unlimited

How to change running partition

The OS910 maintains two software images on two separate partitions.

1.
2. 3.

Connect with a serial to the machine. Boot or reboot the machine. When you see the first lines of U-Boot initialization on your termin

U-Boot 1.1.1 (Apr 18 2004 - 16:11:20)

CPU: MPC8245 Revision 1.4 at 266.666 MHz: 16 kB I-Cache 16 kB DCache I2C: ready DRAM: 256 MB Board: MRV SBC Revision: 1.1 Serial Number: 0000000001 FLASH: 68 MB

Type the following command

stop <ENTER>

Slide No. 7

Connectivity Unlimited

SNMP Management
For SNMP management of the OS900, you need to:

Verify connectivity between the OS900 and the SNMP manager

Enable SNMP management

Configure SNMP parameters (e.g., SNMP NMS IP address, community names, etc.)

The OS900 can be used to perform access control with the

following SNMP versions: 1. SNMP version 1/2c 2. SNMP version 3

Slide No. 8

Connectivity Unlimited

Show Date and Time

Show Time OS910# date June 7 2005 OS910# show date

Show date OS910# time 9:10 OS910# show time

Slide No. 15

Connectivity Unlimited

NTP
OS910(config)# ntp OS910(config-ntp)# server 192.168.1.253 OS910(config-ntp)# enable OS910(config-ntp)# show ntp status NTP STATUS: SERVERS: server=192.168.1.253 PEERS: peers are not defined BROADCAST SERVER: broadcast is disable BROADCAST CLIENT: broadcast client is disable AUTHENTICATE: authentication parameters are not defined MISCELANIOUS: broadcast delay is not defined NTP ACTIVE MODE: ntp status = enable but not running (no defined servers are accessible).
Connectivity Unlimited

Slide No. 16

NTP
OS910_B(config-ntp)# show ntp associations remote refid st t when poll reach delay offset jitter =============================================== =============================== 192.168.1.253 192.168.0.253 10 u 27 64 1 1.843 287.594 0.002 OS910_B(config-ntp)# do show time Fri Oct 5 16:10:01 GMT 2007

Depending on the time server you may need to do more configuration in the command like give it a password and version, i.e OS910_B(config-ntp)# server 192.168.1.253 version 3 key 12345 prefer

Slide No. 17

Connectivity Unlimited

NTP
To load the the timezone settings ...

Go to FTP site (ftp://serviceftp.mrv.com/usr/share/lib/zoneinfo/) Find file for your timezone from the list FTP it into the OS
OS910_B(config)# clock timezone ftp 192.168.1.253 / MST7MDT user Check route to 192.168.1.253 Netmask = 255.255.255.0 FTP file //MST7MDT from 192.168.1.253 user password ... FTP Succeed Please, make reboot after this command. OS910_B(config)# do reboot-force

Slide No. 18

Connectivity Unlimited

The SYSLOG / Rsyslog

Syslog is a standard logging mechanism that stores system messages and events. Events for all processes except for the Operative Software are, by default, logged in Syslog

The Syslog file is stored at: /var/log/messages

Slide No. 19

Connectivity Unlimited

Syslog
OS910(config)# rsyslog 192.168.1.253 OS910(config)# log syslog OS910(config)# log syslog trap ?
alerts Log alerts, emergencies critical Log critical errors, alerts, emergencies debugging Log debugging messages, informational messages, notifications, warnings,

errors, critical errors, alerts, emergencies disable Log nothing emergencies Log emergencies errors Log errors, critical errors, alerts, emergencies informational Log informational messages, notifications, warnings, errors, critical errors, alerts, emergencies notifications Log notifications, warnings, errors, critical errors, alerts, emergencies warnings Log warnings, errors, critical errors, alerts, emergencies

OS910(config)# log syslog trap informational

Slide No. 20

Connectivity Unlimited

Optical Networking Technologies

Connectivity Unlimited

Kobi Alfasi MRV Communications