Home » Dell Manuals » Servers » Dell PowerEdge M420 » Manual Viewer

Dell PowerEdge M420 Dell Converged Enhanced Ethernet Administrator's Guide - Page 130

x authentication configuration tasks, Con authentication between the switch and CNA or NIC

View all Dell PowerEdge M420 manuals

Add to My Manuals
Save this manual to your list of manuals

Page 130 highlights

11 802.1x authentication configuration tasks 802.1x authentication configuration tasks The tasks in this section describe the common 802.1x operations that you will need to perform. For a complete description of all the available 802.1x CLI commands for the Dell FCoE hardware, see the Converged Enhanced Ethernet Command Reference. Configure authentication between the switch and CNA or NIC For complete information on the aaaConfig command, see the Fabric OS Command Reference and the Fabric OS Administrator's Guide. NOTE The aaaConfig command attempts to connect to the first RADIUS server. If the RADIUS server is not reachable, the next RADIUS server is contacted. However, if the RADIUS server is contacted and the authentication fails, the authentication process does not check for the next server in the sequence. To configure authentication, perform the following steps. 1. Connect to the switch and log in using an account assigned to the admin role. 2. Add the RADIUS to the switch as the authentication server. This Fabric OS CLI command moves the new RADIUS server to the top of the access list. switch:admin> aaaconfig --add 10.2.2.147 -conf radius 1 3. Enter global configuration mode. switch:admin>cmsh switch#configure t 4. Enable 802.1x authentication globally switch(config)#dot1x enable 5. Enter the copy command to save the running-config file to the startup-config file. switch(config)#end switch#copy running-config startup-config Interface-specific administrative tasks for 802.1x It is essential to configure the 802.1x port authentication protocol globally on the Dell FCoE hardware, and then enable 802.1x and make customized changes for each interface port. Since 802.1x was enabled and configured in "802.1x authentication configuration tasks", use the administrative tasks in this section to make any necessary customizations to specific interface port settings. NOTE 802.1x port authentication functions only on external ports. 112 Dell Converged Enhanced Ethernet Administrator's Guide 53-1002116-01

Section	Page
Contents	3
Figures	11
Tables	13
About This Document	15
In this chapter	15
How this document is organized	15
Supported hardware and software	16
Document conventions	16
Text formatting	16
Command syntax conventions	17
Notes, cautions, and warnings	17
Notice to the reader	18
Getting technical help	18
Contacting Dell	18
Introducing FCoE	19
In this chapter	19
FCoE terminology	19
FCoE overview	19
FCoE hardware	20
Layer 2 Ethernet overview	21
Layer 2 forwarding	21
VLAN tagging	22
Loop-free network environment	23
Frame classification (incoming)	23
Congestion control and queuing	24
Access control	25
Access Gateway	25
Trunking	26
Flow Control	26
FCoE Initialization Protocol	26
FIP discovery	26
FIP login	27
FIP logout	28
FCoE login	28
FCoE logout	28
Logincfg	29
Name server	29
FC zoning	29
Registered State Change Notification (RSCN)	30
FCoE queuing	30
Using the CEE CLI	31
In this chapter	31
Management Tools	31
CEE Command Line Interface	31
Saving your configuration changes	32
CEE CLI RBAC permissions	32
Accessing the CEE CLI through the console or Telnet	33
Accessing the CEE CLI from the Fabric OS shell	33
CEE CLI command modes	33
CEE CLI keyboard shortcuts	35
Using the do command as a shortcut	36
Displaying CEE CLI commands and command syntax	36
CEE CLI command completion	37
CEE CLI command output modifiers	37
Internal and external 10 Gbps Ethernet interfaces syntax	38
Initial FCoE and CEE Configuration	39
In this chapter	39
Overview	39
Configuring the FCoE interfaces	39
Configuring FCoE VLAN	40
Assigning FCoE map on to an interface	41
Configuring the CEE interfaces	41
Configuring DCBX	42
Configuring Spanning Tree Protocol	43
Configuring VLAN membership	43
Configuring protect mode	44
Configuring IP static routes	45
In this chapter	45
IP static routes overview	45
Configuring IP static routes	46
Recursive IP static routes	47
Floating IP static routes	47
Displaying and clearing IP static routes	47
Configuring VLANs Using the CEE CLI	49
In this chapter	49
VLAN overview	49
Ingress VLAN filtering	49
VLAN configuration guidelines and restrictions	51
Default VLAN configuration	51
VLAN configuration and management	52
Enabling and disabling an interface port	52
Configuring the MTU on an interface port	52
Creating a VLAN interface	53
Enabling STP on a VLAN	53
Disabling STP on a VLAN	53
Configuring a VLAN interface to forward FCoE traffic	54
Configuring an interface port as a Layer 2 switch port	54
Configuring an interface port as an access interface	54
Configuring an interface port as a trunk interface	55
Disabling a VLAN on a trunk interface	55
Configuring an interface port as a converged interface	55
Disabling a VLAN on a converged interface	56
Configuring protocol-based VLAN classifier rules	56
Configuring a VLAN classifier rule	57
Configuring MAC address-based VLAN classifier rules	57
Deleting a VLAN classifier rule	57
Creating a VLAN classifier group and adding rules	57
Activating a VLAN classifier group with an interface port	58
Clearing VLAN counter statistics	58
Displaying VLAN information	58
Configuring the MAC address table	58
Specifying or disabling the aging time for MAC addresses	59
Adding static addresses to the MAC address table	59
Configuring STP, RSTP, and MSTP using the CEE CLI	61
In this chapter	61
STP overview	61
Configuring STP on Dell FCoE hardware	62
RSTP overview	63
MSTP overview	65
Configuring MSTP on Dell FCoE hardware	66
STP, RSTP, and MSTP configuration guidelines and restrictions	67
Default STP, RSTP, and MSTP configuration	68
STP, RSTP, and MSTP configuration and management	69
Enabling STP, RSTP, or MSTP	69
Disabling STP, RSTP, or MSTP	69
Shutting down STP, RSTP, or MSTP globally	69
Specifying the bridge priority	70
Specifying the bridge forward delay	70
Specifying the bridge maximum aging time	71
Enabling the error disable timeout timer	71
Specifying the error disable timeout interval	71
Specifying the port-channel path cost	72
Specifying the bridge hello time (STP and RSTP)	72
Specifying the transmit hold count (RSTP and MSTP)	72
Enabling Cisco interoperability (MSTP)	73
Disabling Cisco interoperability (MSTP)	73
Mapping a VLAN to an MSTP instance	73
Specifying the maximum number of hops for a BPDU (MSTP)	74
Specifying a name for an MSTP region	74
Specifying a revision number for an MSTP configuration	74
Flushing MAC addresses (RSTP and MSTP)	75
Clearing spanning tree counters	75
Clearing spanning tree-detected protocols	75
Displaying STP, RSTP, and MSTP-related information	76
Configuring STP, RSTP, or MSTP on CEE interface ports	76
Enabling automatic edge detection	76
Configuring the path cost	76
Enabling a port (interface) as an edge port	77
Enabling the guard root	77
Specifying the MSTP hello time	78
Specifying restrictions for an MSTP instance	78
Specifying a link type	79
Enabling port fast (STP)	79
Specifying the port priority	79
Restricting the port from becoming a root port	80
Restricting the topology change notification	80
Enabling spanning tree	80
Disabling spanning tree	81
Configuring Link Aggregation using the CEE CLI	83
In this chapter	83
Link aggregation overview	83
Link Aggregation Group configuration	83
Link Aggregation Control Protocol	86
Dynamic link aggregation	86
Static link aggregation	86
Dell-proprietary aggregation	86
LAG distribution process	86
LACP configuration guidelines and restrictions	87
Default LACP configuration	87
LACP configuration and management	87
Enabling LACP on a CEE interface	87
Configuring the LACP system priority	88
Configuring the LACP timeout period on a CEE interface	88
Configuring minimum links feature	88
Configuring interface tracking	89
Clearing LACP counter statistics on a LAG	89
Clearing LACP counter statistics on all LAG groups	90
Displaying LACP information	90
LACP troubleshooting tips	90
Configuring LLDP using the CEE CLI	93
In this chapter	93
LLDP overview	93
Layer 2 topology mapping	94
DCBX overview	96
Enhanced Transmission Selection (ETS)	96
Priority Flow Control (PFC)	97
DCBX interaction with other vendor devices	97
LLDP configuration guidelines and restrictions	97
Default LLDP configuration	98
LLDP configuration and management	98
Enabling LLDP globally	98
Disabling and resetting LLDP globally	98
Configuring LLDP global command options	99
Configuring LLDP interface-level command options	102
Clearing LLDP-related information	103
Displaying LLDP-related information	103
Configuring ACLs using the CEE CLI	105
In this chapter	105
ACL overview	105
Default ACL configuration	106
ACL configuration guidelines and restrictions	106
ACL configuration and management	106
Creating a standard MAC ACL and adding rules	106
Creating an extended MAC ACL and adding rules	107
Modifying MAC ACL rules	107
Removing a MAC ACL	108
Reordering the sequence numbers in a MAC ACL	108
Applying a MAC ACL to a CEE interface	109
Applying a MAC ACL to a VLAN interface	109
Configuring QoS using the CEE CLI	111
In this chapter	111
QoS overview	111
Rewriting	112
Queueing	112
User-priority mapping	112
Traffic class mapping	115
Congestion control	118
Tail drop	118
Ethernet pause	119
Ethernet Priority Flow Control	120
Multicast rate limiting	121
Scheduling	122
Strict priority scheduling	122
Deficit weighted round robin scheduling	122
Traffic class scheduling policy	123
Multicast queue scheduling	124
Converged Enhanced Ethernet map configuration	125
Configuring 802.1x Port Authentication	129
In this chapter	129
802.1x protocol overview	129
802.1x configuration guidelines and restrictions	129
802.1x authentication configuration tasks	130
Configure authentication between the switch and CNA or NIC	130
Interface-specific administrative tasks for 802.1x	130
Configuring 802.1x on specific interface ports	131
Configuring 802.1x timeouts on specific interface ports	131
Configuring 802.1x re-authentication on specific interface ports	131
Disabling 802.1x on specific interface ports	132
Configuring sFlow using the CEE CLI	133
In this chapter	133
sFlow protocol overview	133
Interface flow samples	133
Packet counter samples	133
Configuring the sFlow protocol globally	134
Interface-specific administrative tasks for sFlow	134
Disabling sFlow on specific interfaces	134
Configuring sFlow on specific interfaces	135
Configuring Port Mirroring using the CEE CLI	137
In this chapter	137
Port Mirroring protocol overview	137
Port Mirroring limitations	137
Configuring ingress Port Mirroring	138
Configuring egress Port Mirroring	138
Configuring bidirectional Port Mirroring	138
Deleting a Port Mirroring connection from a session	139
Deleting a Port Mirroring session	139
Configuring RMON using the CEE CLI	141
In this chapter	141
RMON overview	141
RMON configuration and management	141
Default RMON configuration	141
Configuring RMON settings	141
Configuring RMON events	142
Configuring RMON group statistics collection	142
Configuring RMON history collection	143
Configuring IGMP	145
In this chapter	145
About IGMP	145
Active IGMP snooping	145
Multicast routing	146
Configuring IGMP	146
Configuring IGMP snooping querier	146
Monitoring IGMP	147
FCoE configuration using the Fabric OS CLI	149
In this chapter	149
FCoE configuration guidelines and restrictions	149
Managing and displaying the FCoE configuration	150
Enabling or disabling an FCoE port	150
Configuring FCMAP values for a VLAN	150
Configuring FIP multicast advertisement intervals	150
Clearing logins	151
Displaying FCoE configuration-related information	151
Managing and displaying the FCoE login configuration	151
Enabling or disabling FCoE login configuration management	151
Displaying or aborting the current configuration transaction	152
Cleaning up login groups and VN_port mappings	152
Displaying the FCoE login configuration	153
Saving the current FCoE configuration	153
Creating and managing the FCoE login group configuration	153
Creating an FCoE login group	153
Modifying the FCoE login group device list	154
Deleting an FCoE login group	154
Renaming an FCoE login group	155
CEE configuration management	157
In this chapter	157
CEE configuration management guidelines and restrictions	157
CEE configuration management tasks	157
Display the running configuration file	158
Saving the running configuration file	158
Loading the startup configuration file	158
Erasing the startup configuration file.	158
Archiving the running configuration file	159
Restore an archived running configuration file	159
Archiving the startup configuration file	159
Restore an archived startup configuration file	159
Archive a startup configuration from Flash	159
Restore a startup configuration file from Flash	160
CEE configuration management commands	160
Flash file management commands	160
Debugging and logging commands	161