Nortel 55x0 - Revision history

Adj: /* I can haz VLANs? */

2017-06-15T18:01:28Z

I can haz VLANs?

← Older revision		Revision as of 18:01, 15 June 2017
Line 257:		Line 257:

	The only significant difference from the port 25 on VLAN 99 configuration is that VLAN 199 is actually created as the first configuration change command.		The only significant difference from the port 25 on VLAN 99 configuration is that VLAN 199 is actually created as the first configuration change command.

			=== Broadcast and multicast rate limiting ===

			Restrict broadcast traffic to 10% of total packet rate for all ports:

			5520-48T-PWR#'''configure terminal'''
			Enter configuration commands, one per line. End with CNTL/Z.
			5520-48T-PWR(config)#'''interface fastEthernet 1-48'''
			5520-48T-PWR(config-if)#'''rate-limit both percent 10'''
			5520-48T-PWR(config-if)#'''^Z'''

			5520-48T-PWR#

Adj: /* Clock setting */

2017-06-11T04:28:12Z

Clock setting

Show changes

Adj: /* Got logins? */

2017-06-10T04:39:27Z

Got logins?

← Older revision		Revision as of 04:39, 10 June 2017
Line 100:		Line 100:

	'''Important Note:''' Providing a username and password is not required on the console unless the <code>serial-security</code> configuration setting is enabled.		'''Important Note:''' Providing a username and password is not required on the console unless the <code>serial-security</code> configuration setting is enabled.

			=== Clock setting ===
			Pretty simple, really:
			5520-48T-PWR>'''enable'''
			5520-48T-PWR#'''configure terminal'''
			Enter configuration commands, one per line. End with CNTL/Z.
			5520-48T-PWR(config)#'''sntp server primary address 10.10.0.1'''
			5520-48T-PWR(config)#'''sntp enable'''
			5520-48T-PWR(config)#'''sntp sync-interval 1'''
			5520-48T-PWR(config)#'''^Z'''

			5520-48T-PWR#'''write memory'''

			And now, every hour, the switch will do a quick SNTP query to 10.10.0.1 and set its clock based on the response.

Adj at 21:46, 28 May 2016

2016-05-28T21:46:26Z

← Older revision		Revision as of 21:46, 28 May 2016
Line 17:		Line 17:

	== A funny thing ==		== A funny thing ==
	This physical box for these switches is very nearly identical to the Force10 S50s I have. So much so that the Force10 rack mount ears fit.		This physical box for these switches is very nearly identical to the Force10 S50s I have. So much so that the Force10 rack mount ears fit. Yay for reference designs.

	== Get an old switch up to date ==		== Get an old switch up to date ==

Adj: /* wipe the config */

2016-05-23T19:16:16Z

wipe the config

@@ Line 50: / Line 50: @@
 == Basic configuration items ==
 === wipe the config ===
 Put the factory blank config back onto the switch from the CLI:

Adj: /* Why to avoid this one */

2016-05-23T18:23:25Z

Why to avoid this one

← Older revision		Revision as of 18:23, 23 May 2016
Line 15:		Line 15:
	* It's not a Cisco or Juniper or ProCurve or something else that will translate 1-for-1 to an enterprise switching certification. But they're capable and can do pretty much anything a mid-high end 48 port 1000baseT switch should do.		* It's not a Cisco or Juniper or ProCurve or something else that will translate 1-for-1 to an enterprise switching certification. But they're capable and can do pretty much anything a mid-high end 48 port 1000baseT switch should do.
	* It isn't even remotely black. All the other switches I've had in recent memory have been black or grey. This is a light grey/putty color.		* It isn't even remotely black. All the other switches I've had in recent memory have been black or grey. This is a light grey/putty color.

			== A funny thing ==
			This physical box for these switches is very nearly identical to the Force10 S50s I have. So much so that the Force10 rack mount ears fit.

	== Get an old switch up to date ==		== Get an old switch up to date ==

Adj: /* Firmware update overview */

2016-05-19T20:55:59Z

Firmware update overview

← Older revision		Revision as of 20:55, 19 May 2016
Line 44:		Line 44:
	# Last firmware step to bring us to the final 6.3.6 release: '''<code>download address 192.168.20.1 diag 5xxx_60021_diags.bin</code>''' followed by '''<code>download address 192.168.20.1 secondary image-if-newer 5xxx_636017s.img</code>'''.		# Last firmware step to bring us to the final 6.3.6 release: '''<code>download address 192.168.20.1 diag 5xxx_60021_diags.bin</code>''' followed by '''<code>download address 192.168.20.1 secondary image-if-newer 5xxx_636017s.img</code>'''.
	# confirm software versions with '''<code>show boot</code>''' and '''<code>show system</code>'''		# confirm software versions with '''<code>show boot</code>''' and '''<code>show system</code>'''


			== Basic configuration items ==
			=== wipe the config ===
			Put the factory blank config back onto the switch from the CLI:

			5520-48T-PWR>'''enable'''
			5520-48T-PWR#'''restore factory-default'''
			Warning the switch/stack will be reset to factory default configuration,
			Do you wish to continue (y/n) ? '''y'''
			Switch is now resetting to factory default configuration . . .

			Switch will reboot with a clean config. The config can also be wiped using the Nortel button on the front panel or from the diags menu when first powered on.

			=== Got logins? ===
			It might be nice to have the switch ask for a password when a user connects to it. We'll set up two users, <code>user</code> and <code>admin</code>. Passwords are prompted for, but these lines are overwritten on the terminal so aren't recorded here.

			5520-48T-PWR>'''enable'''
			5520-48T-PWR#'''configure terminal'''
			Enter configuration commands, one per line. End with CNTL/Z.
			5520-48T-PWR(config)#'''username user ro'''
			% Invalid password length - must be from 10 to 15 characters in length
			5520-48T-PWR(config)#'''username user ro'''
			% Minimum 2 upper,2 lowercase letters,2 numbers,2 chars like !@#$%^&*() require
			d
			5520-48T-PWR(config)#'''username user ro'''
			% Minimum 2 upper,2 lowercase letters,2 numbers,2 chars like !@#$%^&*() require
			d
			5520-48T-PWR(config)#'''username user ro'''
			% Minimum 2 upper,2 lowercase letters,2 numbers,2 chars like !@#$%^&*() require
			d
			5520-48T-PWR(config)#'''username user ro'''
			5520-48T-PWR(config)#

			Note that it took several tries to get select a password that met the complexity requirements. And now for the privileged user:
			5520-48T-PWR(config)#'''username admin rw'''
			5520-48T-PWR(config)#

			'''<code>Let!Me!L00k!</code>''' and '''<code>L3t!M3!Chang3!</code>''' are possible passwords that '''do''' meet the complexity requirements.

			'''Important Note:''' Providing a username and password is not required on the console unless the <code>serial-security</code> configuration setting is enabled.

Adj: /* Get an old switch up to date */

2016-05-19T17:28:57Z

Get an old switch up to date

← Older revision		Revision as of 17:28, 19 May 2016
Line 23:		Line 23:
	* Terminal emulator. I like [http://www.kermitproject.org/ C-Kermit].		* Terminal emulator. I like [http://www.kermitproject.org/ C-Kermit].
	* Google		* Google
	* A collection of Nortel/Avaya software images. (See above for hints on finding these. Also note that they're popular with the [https://reddit.com/r/homelab/ HomeLab crowd on Reddit)		* A collection of Nortel/Avaya software images. (See above for hints on finding these. Also note that they're popular with the [https://reddit.com/r/homelab/ HomeLab crowd on Reddit]
	* Enough network infrastructure to have a functional TFTP server.		* Enough network infrastructure to have a functional TFTP server.

Adj: /* Firmware update overview */

2016-05-19T05:24:19Z

Firmware update overview

← Older revision		Revision as of 05:24, 19 May 2016
Line 43:		Line 43:
	# Let switch reboot and move on to the v6.3.0 update. This one has a new diags image file: 5xxx_60015_diags.bin. The diags image is supposed to be updated before the agent image so we'll do "'''<code>download address 192.168.20.1 diag 5xxx_60015_diags.bin</code>''' and let the switch reboot. Follow with '''<code>download address 192.168.20.1 secondary image-if-newer 5xxx_630013s.img</code>'''.		# Let switch reboot and move on to the v6.3.0 update. This one has a new diags image file: 5xxx_60015_diags.bin. The diags image is supposed to be updated before the agent image so we'll do "'''<code>download address 192.168.20.1 diag 5xxx_60015_diags.bin</code>''' and let the switch reboot. Follow with '''<code>download address 192.168.20.1 secondary image-if-newer 5xxx_630013s.img</code>'''.
	# Last firmware step to bring us to the final 6.3.6 release: '''<code>download address 192.168.20.1 diag 5xxx_60021_diags.bin</code>''' followed by '''<code>download address 192.168.20.1 secondary image-if-newer 5xxx_636017s.img</code>'''.		# Last firmware step to bring us to the final 6.3.6 release: '''<code>download address 192.168.20.1 diag 5xxx_60021_diags.bin</code>''' followed by '''<code>download address 192.168.20.1 secondary image-if-newer 5xxx_636017s.img</code>'''.
			# confirm software versions with '''<code>show boot</code>''' and '''<code>show system</code>'''

Adj: /* Get an old switch up to date */

2016-05-19T04:52:39Z

Get an old switch up to date

← Older revision		Revision as of 04:52, 19 May 2016
Line 23:		Line 23:
	* Terminal emulator. I like [http://www.kermitproject.org/ C-Kermit].		* Terminal emulator. I like [http://www.kermitproject.org/ C-Kermit].
	* Google		* Google
	* A collection of Nortel/Avaya software images. (See above for hints on finding these. Also ~~not~~ that they're popular with the [https://reddit.com/r/homelab/ HomeLab crowd on Reddit)		* A collection of Nortel/Avaya software images. (See above for hints on finding these. Also note that they're popular with the [https://reddit.com/r/homelab/ HomeLab crowd on Reddit)
	* Enough network infrastructure to have a functional TFTP server.		* Enough network infrastructure to have a functional TFTP server.