Configuraciones en redes interoperables

======================================================================
BANNER MOTD
======================================================================
configure banner before-login acknowledge save-to-configuration
********************************************************************
********************************************************************
WARNING!!!! YOU ARE ACCESSING A RESTRICTED DEVICE...
ACCESS ONLY FOR IT PERSONAL!!!!
IF YOU DON'T HAVE ANY PERMISSION LEAVE THIS SITE RIGHT NOW
********************************************************************
********************************************************************

************************************************************************

WARNING: This system is for the use of authorized clients only.

Individuals using the computer network system without
authorization, or in excess of their authorization, are
subject to having all their activity on this computer
network system monitored and recorded by system
personnel. To protect the computer network system from
unauthorized use and to ensure the computer network systems
is functioning properly, system administrators monitor this
system. Anyone using this computer network system
expressly consents to such monitoring and is advised that
if such monitoring reveals possible conduct of criminal
activity, system personnel may provide the evidence of
such activity to law enforcement officers.

Access is restricted to authorized users only.

Unauthorized access is a violation of state and federal,
civil and criminal laws.
**************************************************************************

======================================================================
CREATE VLAN
======================================================================
create vlan <NAME>
configure "VLAN" tag <x>
configure "VLAN" ipaddress x.x.x.x x.x.x.x
enable ipforwarding "VLAN"
configure "VLAN" add ports <PORTS> tagged / untagged (tagged = trunk / untagged =
access)

create vlan <NAME> tag X

======================================================================
CREATE VRRPs
======================================================================
create vrrp "VLAN" vrid <x>
configure vrrp "VLAN" vrid <x> preempt
configure vrrp "VLAN" vrid <x> priority <x>
configure vrrp "VLAN" vrid <x> add x.x.x.x
enable vrrp "VLAN" vrid <x>

======================================================================
 CREATE EXTREME-DHCP
======================================================================
enable bootprelay vlan DATOS

configure vlan "VLAN" dhcp-address-range x.x.x.x - x.x.x.x

configure vlan "VLAN" dhcp-lease-timer "time"
configure vlan "VLAN" dhcp-options default-gateway x.x.x.x
configure vlan "VLAN" dhcp-options dns-server primary x.x.x.x
configure vlan "VLAN" dhcp-options dns-server secondary x.x.x.x

configure bootprelay add x.x.x.x vr "VR-Default"

enable dhcp ports 1 vlan "vlan"

unconfigure vlan "vlan" dhcp

======================================================================
CREATE SHARING
======================================================================
enable sharing <x> grouping <PORT RANGE> (static)
enable sharing <x> grouping <PORT RANGE> lacp (creado para trabajar multi-vendor)

======================================================================
CREATE MLAG (Multichassis Link Aggregation)
======================================================================

Para crear MLAG con vendor diferente a Extreme se debe contar con version 15.3 o
superior

create mlag peer <peer-name>

configure mlag peer <peer-name> ipaddress x.x.x.x
configure mlag peer <peer-name> interval xxx
enable mlag port x peer <peer-name> id x (puerto que conecta a a los switches
clientes a tráves de etherchannel)

*****VLAN DE CONTROL EN MLAG******

(Se debe tener en cuenta que esta vlan esta configurada entre los dos switch master
del MLAG por puertos dedicados)

create vlan ISC tag 4000 <<== TAG DEDICADO

configure vlan ISC ipaddress x.x.x.x/x

======================================================================
Create STP (Spanning Tree Protocol peer vlan)
======================================================================

configure stpd s0 delete vlan default ports all

disable stpd s0 auto-bind vlan default
create stpd s1
configure stpd s1 mode dot1w
configure stpd s1 priority 0
configure stpd s1 default-encapsulation pvst-plus
enable stpd s1 auto-bind vlan "VLAN" (vlan a la que se va a asignar el stpd)
enable stpd s0 auto-bind vlan Default
configure stpd s1 tag "TAG" (tag de la vlan asignada)
enable stpd s1

=============================================================================
 EXTREME MSTP vs. CISCO
=============================================================================

spanning-tree mode mst

spanning-tree mst configuration
name Region1
revision 3
instance 1 vlan 10,20
show spanning-tree mst configuration

configure mstp region Region1

configure mstp revision 3
configure mstp format 0
create stpd mst0
configure stpd mst0 mode mstp cist
configure stpd mst0 forwarddelay 15
configure stpd mst0 hellotime 2
configure stpd mst0 maxage 20
configure stpd mst0 max-hop-count 20
configure stpd mst0 priority 28672
configure stpd mst0 default-encapsulation dot1d
disable stpd mst0 auto-bind vlan default
enable mst0

create stpd mst1

configure stpd mst1 mode mstp msti 1
configure stpd mst1 max-hop-count 20
configure stpd mst1 priority 28672
configure stpd mst1 default-encapsulation dot1d
enable stpd mst1 auto-bind vlan <>
enable mst1

configure mst1 delete "print" ports all (sacar vlan de mst en extreme)

configure stpd mst0 ports link-type edge <range> edge-safeguard enable bpdu-
restrict recovery-timeout 60
configure stpd mst1 ports link-type edge <range> edge-safeguard enable bpdu-
restrict recovery-timeout 60

=============================================================================
ENABLE / DISABLE TRIAL LICENSES - 30 Days
=============================================================================
debug epm enable trial-license
debug epm clear trial-license

=============================================================================

vlans
1-1005 Normales
1006-4094 Extendidas
4095 Mgmt en EXOS

configure vlan Default delete ports all

configure vlan DATA add ports 1 tagged
configure vlan Default add ports 1 untagged

configure s1 priority 8192

configure stpd s0 delete vlan default ports all
disable stpd s0 auto-bind vlan default
configure stpd s0 mode dot1w
create stpd s1
configure stpd s1 mode dot1w
configure stpd s1 default-encapsulation dot1d
configure stpd s1 add vlan DATA ports 1
configure stpd s1 add vlan Default ports 1
configure stpd s1 tag 7
enable stpd s1
enable "s1" rapid-root-failover

=============================================================================
REDUNDANT PORT
=============================================================================

sh confi | in redundant
configure port <> redundant port <> link on
unconfigure port -- redundant

=============================================================================
EXTREME LOOP RECOVERY PROTOCOL
=============================================================================
El ELRP no debe ser configurado en puertos troncales.

enable elrp-client
configure elrp-client one-shot <> ports <> log
configure elrp-client periodic <> ports <> log
create upm profile disable_port_elrp
disable port $EVENT.LOG_PARAM_7
.
create log target upm "disable_port_elrp"
create log filter filtro
configure log filter filtro add event ELRP.Report.Message match string "LOOP"
enable log target upm "disable_port_elrp"
configure log target upm "disable_port_elrp" filter filtro

show upm history

show configuration upm
show configuration ems

=============================================================================
BASIC LLDP FOR IP-PHONES
=============================================================================
enable lldp ports all
configure lldp ports <> advertise vendor-specific med capabilities
configure lldp ports <> advertise vendor-specific dot1 vlan-name vlan <>
configure lldp ports <> advertise vendor-specific med power-via-mdi
configure lldp ports <> advertise vendor-specific med policy application voice vlan
<> dscp 46
configure lldp ports <> advertise system-capabilities
configure lldp ports <> advertise vendor-specific dot1 port-protocol-vlan-id vlan
<>

=============================================================================
BASIC QoS FOR IP-PHONES
=============================================================================
create qosprofile "Perfil" (qp1, qp2, qp3, qp4, qp5, qp6, qp7, qp8)
enable diffserv examination ports (all - port-list)
enable dot1p replacement ports (all - port-list)
configure qosprofile QP6 minbw 0 maxbw 100 ports (all - port-list)
configure dot1p type (tipo 1 -6) qosprofile (perfil QoS)
configure diffserv examination code-point 46 qosprofile QP6
configure diffserv replacement priority 5 code-point 46

=============================================================================
Static Routing
=============================================================================
configure iproute add default x.x.x.x <<== Gateway IPadd
configure iproute add x.x.x.x x.x.x.x x x.x.x.x

=============================================================================
Homólogo a BPDU Guard de Cisco
=============================================================================

Spanguard Negros
set spantree spanguard enable Habilitarlo Global
set spantree adminedge <ports> true Puertos en los que se habilita spanguard
set spantree spanguardtimeout <0-65535> Segundos que estará bloqueado el
puerto
set spantree spanguardtrapenable enable Manda traps de snmp cuando hay otro
switch

Edge Safeguard Morados

configure stpd s0 ports link-type edge 1-24 edge-safeguard enable bpdu-restrict
configure stpd s0 ports edge-safeguard enable 1-23 bpdu-restrict recovery-timeout
60
show stpd s0 ports non-forwarding-reason Para ver el motivo del bloqueo por STP