85ca8d6e2ca9f38888da17b4016ad7fce73a19b6
Guides/Switch/Quanta.md
... | ... | @@ -43,10 +43,9 @@ write memory |
43 | 43 | |
44 | 44 | ## Mise à jour du firmware |
45 | 45 | |
46 | -Pour bénéficier d'un firmware facile à configurer et plus riche en fonctionnalités, il est recommandé de mettre à jour le switch que vous configurez. **Attention, cette opération est risquée et peut rendre le switch inopérant si elle est mal réalisée.** La méthode la plus sûre consiste à rapatrier la nouvelle image sur le switch depuis un serveur TFTP. L'intégrité du fichier ainsi transféré sera vérifiée par le switch pour éviter toute mauvaise surprise. |
|
46 | +Pour bénéficier d'un firmware facile à configurer et plus riche en fonctionnalités, il est recommandé de mettre à jour le switch que vous configurez. :warning: **Attention, cette opération est risquée et peut rendre le switch inopérant si elle est mal réalisée.** La méthode la plus sûre consiste à rapatrier la nouvelle image sur le switch depuis un serveur TFTP. L'intégrité du fichier ainsi transféré sera vérifiée par le switch pour éviter toute mauvaise surprise. |
|
47 | 47 | |
48 | - |
|
49 | -Pour cela il vous faudra suivre le tuto suivant (https://seansblag.com/2016/07/updating-the-firmware-on-quanta-lb4m-switches/ et aussi [en PDF](/uploads/Quanta_firmware_update.pdf)), qui est résumé ci-dessous : |
|
48 | +:warning: Pour cela il vous faudra suivre le tuto suivant (https://seansblag.com/2016/07/updating-the-firmware-on-quanta-lb4m-switches/ et aussi [en PDF](/uploads/Quanta_firmware_update.pdf)), qui est résumé ci-dessous : |
|
50 | 49 | |
51 | 50 | 1. Configurer un serveur TFTP sur une des machines du VLAN 998, et aussi **tester son bon fonctionnement avec un client TFTP** depuis une autre machine quelconque. |
52 | 51 | 2. Uploader l'image qui vous conviendra sur le serveur TFTP. |
... | ... | @@ -60,3 +59,497 @@ Les images disponibles sont téléchargeables sur cette page (https://puck.nethe |
60 | 59 | * FASTPATH Switching 1.1.1.8 : lb4m.1.1.1.8.bin |
61 | 60 | * FASTPATH Routing (non testé) 5.13.12.14 : lb4m.5.13.12.14.bin |
62 | 61 | |
62 | +Une fois le firmware mis à jour, vous pouvez passer à la phase de configuration proprement dite. |
|
63 | + |
|
64 | +## Configuration du switch |
|
65 | + |
|
66 | +Voici un exemple de configuration ci-dessous (pour la curiosité, valerian.sw dans le bâtiment des chambres à Rennes) : |
|
67 | + |
|
68 | +``` |
|
69 | +!Current Configuration: |
|
70 | +! |
|
71 | +!System Description "LB4M 48x1G 2x10G, 1.1.1.8, VxWorks 6.6" |
|
72 | +!System Software Version "1.1.1.8" |
|
73 | +!System Up Time "0 days 23 hrs 34 mins 5 secs" |
|
74 | +!Cut-through mode is configured as disabled |
|
75 | +!Additional Packages FASTPATH QOS |
|
76 | +!Current SNTP Synchronized Time: Not Synchronized |
|
77 | +! |
|
78 | +set prompt "valerian" |
|
79 | +enable password 733cf0477f752cea0d670c985aba4a86cfce0702f57a00fc90ce3310801f659b9428ea80acf5b5063ea740df5e4e1d4d3da999ea662123d757c274f7b930ef16 encrypted |
|
80 | +vlan database |
|
81 | +vlan 998-999 |
|
82 | +vlan name 998 "Admin-Switch" |
|
83 | +vlan name 999 "User" |
|
84 | +exit |
|
85 | + |
|
86 | +network mgmt_vlan 998 |
|
87 | +ip ssh server enable |
|
88 | +ip ssh protocol 2 |
|
89 | +configure |
|
90 | +aaa authentication login "ResEl" radius local |
|
91 | +aaa authentication enable "ResEl" none deny |
|
92 | +radius server host auth "172.23.0.235" name "lussac" |
|
93 | + |
|
94 | +radius server key auth "172.23.0.235" encrypted 48e073aa48876140e07251428acbd6527d3ebb0e3720c16bece39e7692037785fe8ad8aca8924c7e823e6555615889fdc952e9cb203ed3cb43d050f5af37ca0d |
|
95 | +radius server primary "172.23.0.235" |
|
96 | +line console |
|
97 | +exit |
|
98 | + |
|
99 | +line telnet |
|
100 | +exit |
|
101 | + |
|
102 | +line ssh |
|
103 | +login authentication ResEl |
|
104 | +enable authentication ResEl |
|
105 | +exit |
|
106 | + |
|
107 | +snmp-server sysname "valerian" |
|
108 | +snmp-server location "Batiment C1 - Etage 1" |
|
109 | +snmp-server contact "gestion@resel.fr" |
|
110 | +! |
|
111 | +ip dhcp snooping |
|
112 | +ip dhcp snooping vlan 999 |
|
113 | +interface 0/1 |
|
114 | +description 'Chambre 001' |
|
115 | +spanning-tree edgeport |
|
116 | +spanning-tree bpdufilter |
|
117 | +vlan pvid 999 |
|
118 | +vlan acceptframe admituntaggedonly |
|
119 | +vlan participation include 999 |
|
120 | +exit |
|
121 | + |
|
122 | +interface 0/2 |
|
123 | +description 'Chambre 002' |
|
124 | +spanning-tree edgeport |
|
125 | +spanning-tree bpdufilter |
|
126 | +vlan pvid 999 |
|
127 | +vlan acceptframe admituntaggedonly |
|
128 | +vlan participation include 999 |
|
129 | +exit |
|
130 | + |
|
131 | +interface 0/3 |
|
132 | +description 'Chambre 003' |
|
133 | +spanning-tree edgeport |
|
134 | +spanning-tree bpdufilter |
|
135 | +vlan pvid 999 |
|
136 | +vlan acceptframe admituntaggedonly |
|
137 | +vlan participation include 999 |
|
138 | +exit |
|
139 | + |
|
140 | +interface 0/4 |
|
141 | +description 'Chambre 004' |
|
142 | + |
|
143 | +spanning-tree edgeport |
|
144 | +spanning-tree bpdufilter |
|
145 | +vlan pvid 999 |
|
146 | +vlan acceptframe admituntaggedonly |
|
147 | +vlan participation include 999 |
|
148 | +exit |
|
149 | + |
|
150 | +interface 0/5 |
|
151 | +description 'Chambre 005' |
|
152 | +spanning-tree edgeport |
|
153 | +spanning-tree bpdufilter |
|
154 | +vlan pvid 999 |
|
155 | +vlan acceptframe admituntaggedonly |
|
156 | +vlan participation include 999 |
|
157 | +exit |
|
158 | + |
|
159 | +interface 0/6 |
|
160 | +description 'Chambre 006' |
|
161 | +spanning-tree edgeport |
|
162 | +spanning-tree bpdufilter |
|
163 | +vlan pvid 999 |
|
164 | +vlan acceptframe admituntaggedonly |
|
165 | +vlan participation include 999 |
|
166 | +exit |
|
167 | + |
|
168 | +interface 0/7 |
|
169 | +description 'Chambre 007' |
|
170 | +spanning-tree edgeport |
|
171 | +spanning-tree bpdufilter |
|
172 | +vlan pvid 999 |
|
173 | +vlan acceptframe admituntaggedonly |
|
174 | +vlan participation include 999 |
|
175 | +exit |
|
176 | + |
|
177 | +interface 0/8 |
|
178 | +description 'Chambre 008' |
|
179 | +spanning-tree edgeport |
|
180 | +spanning-tree bpdufilter |
|
181 | +vlan pvid 999 |
|
182 | +vlan acceptframe admituntaggedonly |
|
183 | +vlan participation include 999 |
|
184 | +exit |
|
185 | + |
|
186 | +interface 0/9 |
|
187 | +description 'Chambre 009' |
|
188 | +spanning-tree edgeport |
|
189 | +spanning-tree bpdufilter |
|
190 | +vlan pvid 999 |
|
191 | +vlan acceptframe admituntaggedonly |
|
192 | +vlan participation include 999 |
|
193 | +exit |
|
194 | + |
|
195 | +interface 0/10 |
|
196 | +description 'Chambre 010' |
|
197 | +spanning-tree edgeport |
|
198 | +spanning-tree bpdufilter |
|
199 | +vlan pvid 999 |
|
200 | +vlan acceptframe admituntaggedonly |
|
201 | +vlan participation include 999 |
|
202 | +exit |
|
203 | + |
|
204 | +interface 0/11 |
|
205 | +description 'Chambre 011' |
|
206 | +spanning-tree edgeport |
|
207 | +spanning-tree bpdufilter |
|
208 | +vlan pvid 999 |
|
209 | +vlan acceptframe admituntaggedonly |
|
210 | +vlan participation include 999 |
|
211 | +exit |
|
212 | + |
|
213 | +interface 0/12 |
|
214 | +description 'Chambre 020' |
|
215 | +spanning-tree edgeport |
|
216 | +spanning-tree bpdufilter |
|
217 | +vlan pvid 999 |
|
218 | +vlan acceptframe admituntaggedonly |
|
219 | +vlan participation include 999 |
|
220 | +exit |
|
221 | + |
|
222 | +interface 0/13 |
|
223 | +description 'Chambre 021' |
|
224 | +spanning-tree edgeport |
|
225 | +spanning-tree bpdufilter |
|
226 | +vlan pvid 999 |
|
227 | +vlan acceptframe admituntaggedonly |
|
228 | +vlan participation include 999 |
|
229 | +exit |
|
230 | + |
|
231 | +interface 0/14 |
|
232 | +description 'Chambre 022' |
|
233 | +spanning-tree edgeport |
|
234 | +spanning-tree bpdufilter |
|
235 | +vlan pvid 999 |
|
236 | +vlan acceptframe admituntaggedonly |
|
237 | +vlan participation include 999 |
|
238 | +exit |
|
239 | + |
|
240 | + |
|
241 | +interface 0/15 |
|
242 | +description 'Chambre 023' |
|
243 | +spanning-tree edgeport |
|
244 | +spanning-tree bpdufilter |
|
245 | +vlan pvid 999 |
|
246 | +vlan acceptframe admituntaggedonly |
|
247 | +vlan participation include 999 |
|
248 | +exit |
|
249 | + |
|
250 | +interface 0/16 |
|
251 | +description 'Chambre 024' |
|
252 | +spanning-tree edgeport |
|
253 | +spanning-tree bpdufilter |
|
254 | +vlan pvid 999 |
|
255 | +vlan acceptframe admituntaggedonly |
|
256 | +vlan participation include 999 |
|
257 | +exit |
|
258 | + |
|
259 | +interface 0/17 |
|
260 | +description 'Chambre 025' |
|
261 | +spanning-tree edgeport |
|
262 | +spanning-tree bpdufilter |
|
263 | +vlan pvid 999 |
|
264 | +vlan acceptframe admituntaggedonly |
|
265 | +vlan participation include 999 |
|
266 | +exit |
|
267 | + |
|
268 | +interface 0/18 |
|
269 | +description 'Chambre 026' |
|
270 | +spanning-tree edgeport |
|
271 | +spanning-tree bpdufilter |
|
272 | +vlan pvid 999 |
|
273 | +vlan acceptframe admituntaggedonly |
|
274 | +vlan participation include 999 |
|
275 | +exit |
|
276 | + |
|
277 | +interface 0/19 |
|
278 | +description 'Chambre 027' |
|
279 | +spanning-tree edgeport |
|
280 | +spanning-tree bpdufilter |
|
281 | +vlan pvid 999 |
|
282 | +vlan acceptframe admituntaggedonly |
|
283 | +vlan participation include 999 |
|
284 | +exit |
|
285 | + |
|
286 | +interface 0/20 |
|
287 | +description 'Chambre 028' |
|
288 | +spanning-tree edgeport |
|
289 | +spanning-tree bpdufilter |
|
290 | +vlan pvid 999 |
|
291 | +vlan acceptframe admituntaggedonly |
|
292 | +vlan participation include 999 |
|
293 | +exit |
|
294 | + |
|
295 | +interface 0/21 |
|
296 | +description 'Chambre 029' |
|
297 | +spanning-tree edgeport |
|
298 | +spanning-tree bpdufilter |
|
299 | +vlan pvid 999 |
|
300 | +vlan acceptframe admituntaggedonly |
|
301 | +vlan participation include 999 |
|
302 | +exit |
|
303 | + |
|
304 | +interface 0/22 |
|
305 | +description 'Chambre 101' |
|
306 | +spanning-tree edgeport |
|
307 | +spanning-tree bpdufilter |
|
308 | +vlan pvid 999 |
|
309 | +vlan acceptframe admituntaggedonly |
|
310 | +vlan participation include 999 |
|
311 | +exit |
|
312 | + |
|
313 | +interface 0/23 |
|
314 | +description 'Chambre 102' |
|
315 | +spanning-tree edgeport |
|
316 | +spanning-tree bpdufilter |
|
317 | +vlan pvid 999 |
|
318 | +vlan acceptframe admituntaggedonly |
|
319 | +vlan participation include 999 |
|
320 | +exit |
|
321 | + |
|
322 | +interface 0/24 |
|
323 | +description 'Chambre 103' |
|
324 | +spanning-tree edgeport |
|
325 | +spanning-tree bpdufilter |
|
326 | +vlan pvid 999 |
|
327 | +vlan acceptframe admituntaggedonly |
|
328 | +vlan participation include 999 |
|
329 | +exit |
|
330 | + |
|
331 | +interface 0/25 |
|
332 | +description 'Chambre 104' |
|
333 | +spanning-tree edgeport |
|
334 | +spanning-tree bpdufilter |
|
335 | +vlan pvid 999 |
|
336 | +vlan acceptframe admituntaggedonly |
|
337 | +vlan participation include 999 |
|
338 | +exit |
|
339 | + |
|
340 | +interface 0/26 |
|
341 | +description 'Chambre 105' |
|
342 | +spanning-tree edgeport |
|
343 | +spanning-tree bpdufilter |
|
344 | +vlan pvid 999 |
|
345 | +vlan acceptframe admituntaggedonly |
|
346 | +vlan participation include 999 |
|
347 | +exit |
|
348 | + |
|
349 | +interface 0/27 |
|
350 | +description 'Chambre 106' |
|
351 | +spanning-tree edgeport |
|
352 | +spanning-tree bpdufilter |
|
353 | +vlan pvid 999 |
|
354 | +vlan acceptframe admituntaggedonly |
|
355 | +vlan participation include 999 |
|
356 | +exit |
|
357 | + |
|
358 | +interface 0/28 |
|
359 | +description 'Chambre 107' |
|
360 | +spanning-tree edgeport |
|
361 | +spanning-tree bpdufilter |
|
362 | +vlan pvid 999 |
|
363 | +vlan acceptframe admituntaggedonly |
|
364 | +vlan participation include 999 |
|
365 | +exit |
|
366 | + |
|
367 | +interface 0/29 |
|
368 | +description 'Chambre 108' |
|
369 | +spanning-tree edgeport |
|
370 | +spanning-tree bpdufilter |
|
371 | +vlan pvid 999 |
|
372 | +vlan acceptframe admituntaggedonly |
|
373 | +vlan participation include 999 |
|
374 | +exit |
|
375 | + |
|
376 | +interface 0/30 |
|
377 | +description 'Chambre 109' |
|
378 | +spanning-tree edgeport |
|
379 | +spanning-tree bpdufilter |
|
380 | +vlan pvid 999 |
|
381 | +vlan acceptframe admituntaggedonly |
|
382 | +vlan participation include 999 |
|
383 | +exit |
|
384 | + |
|
385 | +interface 0/31 |
|
386 | +description 'Chambre 110' |
|
387 | +spanning-tree edgeport |
|
388 | +spanning-tree bpdufilter |
|
389 | +vlan pvid 999 |
|
390 | +vlan acceptframe admituntaggedonly |
|
391 | +vlan participation include 999 |
|
392 | +exit |
|
393 | + |
|
394 | +interface 0/32 |
|
395 | +description 'Chambre 111' |
|
396 | +spanning-tree edgeport |
|
397 | +spanning-tree bpdufilter |
|
398 | +vlan pvid 999 |
|
399 | +vlan acceptframe admituntaggedonly |
|
400 | +vlan participation include 999 |
|
401 | +exit |
|
402 | + |
|
403 | +interface 0/33 |
|
404 | +description 'Chambre 112' |
|
405 | +spanning-tree edgeport |
|
406 | +spanning-tree bpdufilter |
|
407 | +vlan pvid 999 |
|
408 | +vlan acceptframe admituntaggedonly |
|
409 | +vlan participation include 999 |
|
410 | +exit |
|
411 | + |
|
412 | +interface 0/34 |
|
413 | +description 'Chambre 113' |
|
414 | +spanning-tree edgeport |
|
415 | +spanning-tree bpdufilter |
|
416 | +vlan pvid 999 |
|
417 | +vlan acceptframe admituntaggedonly |
|
418 | +vlan participation include 999 |
|
419 | +exit |
|
420 | + |
|
421 | +interface 0/35 |
|
422 | +description 'Chambre 114' |
|
423 | +spanning-tree edgeport |
|
424 | +spanning-tree bpdufilter |
|
425 | +vlan pvid 999 |
|
426 | +vlan acceptframe admituntaggedonly |
|
427 | +vlan participation include 999 |
|
428 | +exit |
|
429 | + |
|
430 | +interface 0/36 |
|
431 | +description 'Chambre 115' |
|
432 | +spanning-tree edgeport |
|
433 | +spanning-tree bpdufilter |
|
434 | +vlan pvid 999 |
|
435 | +vlan acceptframe admituntaggedonly |
|
436 | +vlan participation include 999 |
|
437 | +exit |
|
438 | + |
|
439 | +interface 0/37 |
|
440 | +description 'Chambre 116' |
|
441 | +spanning-tree edgeport |
|
442 | +spanning-tree bpdufilter |
|
443 | +vlan pvid 999 |
|
444 | +vlan acceptframe admituntaggedonly |
|
445 | +vlan participation include 999 |
|
446 | +exit |
|
447 | + |
|
448 | +interface 0/38 |
|
449 | +description 'Chambre 117' |
|
450 | +spanning-tree edgeport |
|
451 | +spanning-tree bpdufilter |
|
452 | +vlan pvid 999 |
|
453 | +vlan acceptframe admituntaggedonly |
|
454 | +vlan participation include 999 |
|
455 | +exit |
|
456 | + |
|
457 | +interface 0/39 |
|
458 | +description 'Chambre 118' |
|
459 | +spanning-tree edgeport |
|
460 | +spanning-tree bpdufilter |
|
461 | +vlan pvid 999 |
|
462 | +vlan acceptframe admituntaggedonly |
|
463 | +vlan participation include 999 |
|
464 | +exit |
|
465 | + |
|
466 | +interface 0/40 |
|
467 | +description 'Chambre 119' |
|
468 | +spanning-tree edgeport |
|
469 | +spanning-tree bpdufilter |
|
470 | +vlan pvid 999 |
|
471 | +vlan acceptframe admituntaggedonly |
|
472 | +vlan participation include 999 |
|
473 | +exit |
|
474 | + |
|
475 | +interface 0/41 |
|
476 | +description 'Chambre 120' |
|
477 | +spanning-tree edgeport |
|
478 | +spanning-tree bpdufilter |
|
479 | +vlan pvid 999 |
|
480 | +vlan acceptframe admituntaggedonly |
|
481 | +vlan participation include 999 |
|
482 | +exit |
|
483 | + |
|
484 | +interface 0/42 |
|
485 | +description 'Chambre 121' |
|
486 | +spanning-tree edgeport |
|
487 | +spanning-tree bpdufilter |
|
488 | +vlan pvid 999 |
|
489 | +vlan acceptframe admituntaggedonly |
|
490 | +vlan participation include 999 |
|
491 | +exit |
|
492 | + |
|
493 | +interface 0/43 |
|
494 | +description 'Chambre 122' |
|
495 | +spanning-tree edgeport |
|
496 | +spanning-tree bpdufilter |
|
497 | +vlan pvid 999 |
|
498 | +vlan acceptframe admituntaggedonly |
|
499 | +vlan participation include 999 |
|
500 | +exit |
|
501 | + |
|
502 | +interface 0/44 |
|
503 | +description 'Chambre 123' |
|
504 | +spanning-tree edgeport |
|
505 | +spanning-tree bpdufilter |
|
506 | +vlan pvid 999 |
|
507 | +vlan acceptframe admituntaggedonly |
|
508 | +vlan participation include 999 |
|
509 | +exit |
|
510 | + |
|
511 | +interface 0/45 |
|
512 | +description 'Chambre 124' |
|
513 | +spanning-tree edgeport |
|
514 | +spanning-tree bpdufilter |
|
515 | +vlan pvid 999 |
|
516 | +vlan acceptframe admituntaggedonly |
|
517 | +vlan participation include 999 |
|
518 | +exit |
|
519 | + |
|
520 | +interface 0/46 |
|
521 | +description 'Chambre 125' |
|
522 | +spanning-tree edgeport |
|
523 | +spanning-tree bpdufilter |
|
524 | +vlan pvid 999 |
|
525 | +vlan acceptframe admituntaggedonly |
|
526 | +vlan participation include 999 |
|
527 | +exit |
|
528 | + |
|
529 | +interface 0/47 |
|
530 | +description 'Rouky.sw SFP2' |
|
531 | +ip dhcp snooping trust |
|
532 | +ip dhcp snooping log-invalid |
|
533 | +vlan acceptframe vlanonly |
|
534 | +vlan participation include 998-999 |
|
535 | +vlan tagging 998-999 |
|
536 | +exit |
|
537 | + |
|
538 | +interface 0/48 |
|
539 | +description 'Backup 998' |
|
540 | +vlan pvid 998 |
|
541 | +vlan acceptframe admituntaggedonly |
|
542 | +vlan participation include 998 |
|
543 | +exit |
|
544 | + |
|
545 | +interface 0/49 |
|
546 | +description 'Uplink 10G' |
|
547 | +exit |
|
548 | + |
|
549 | +interface 0/50 |
|
550 | +description 'Uplink 10G' |
|
551 | +exit |
|
552 | + |
|
553 | +exit |
|
554 | +``` |
|
555 | + |