Hello,

We have 4 Dell PowerConnect 5548P switches which are stacked. These two switches are going to be connected to desktops/notebooks and printers on one VLAN, and then some IP phones on a Voice VLAN. These switches are going to be connected to two 6248s which will act as core switches. Our physical servers will connect to the Core switch which will be another VLAN.

I think I have the VLAN config worked out, however, is there a best practice document or site for configuring these switches? Such as enabling Jumbo Frames, Flow Control, Tree Spanning, RIP, OSPF, etc?

Thanks.

I have a 3424P with a Faulty PoE Power Status.

How do I fix it?

Thanks

Tim

I have a PowerConnect 2808 switch that is in Managed Mode. I can connect to it through the we interface as well as through telnet but I'm just not clear how to flash the switch with the new firmware. It currently has:

I've downloaded the latest release (PowerConnect,2800,V1.0.0.45,A07) from the Dell web site and after extracting the files I attempted to put the file powerconnect_28xx-10045.ros on the switch using the web interface. It says the file uploaded without errors. I reboot the switch but the  software verson is still at 1.0.0.44. I've read the instructions on using a TFTP server but I don't have access to one on my network and would like to know if it is possible to do the update using the web interface.

Thanks

Jeff

Hi, I am wanting to configure the 3424 over a LAN connection by using this serial Ethernet converter. Does anybody have any experience or recommendations with using such a setup? I assume that I would have to install some kind of COM port drivers on my computer that the converter can use.

Hi,

I am trying to set up Port Mirroring on a PC 6224.

From the Configuration Guide, I read "You can configure many switch ports as source ports and one switch port as a destination port." .

But when I am trying to add a fifth port as source port mirroring, it returns the message "No more source ports can be added."

console(config)#monitor session 1 mode
console(config)#monitor session 1 destination interface 1/g24
console(config)#monitor session 1 source interface 1/g1
console(config)#monitor session 1 source interface 1/g2
console(config)#monitor session 1 source interface 1/g3
console(config)#monitor session 1 source interface 1/g5
console(config)#monitor session 1 source interface 1/g6

No more source ports can be added.

console(config)#

Did someone has experimented the same problem? Is there a limit in the source interface number?

Thank you

Good Day All

I Just rebuilt my network using Dell S25N switches, I have some old Dell Powerconnect 5448's that are my VOIP switches meaning I have PoE Phones plugged into them and I have a Fonality Box which controls all my Telephone Traffic. These switches are uplinked to my VRRP'ed S25N and External VOIP Traffic is forwarded out a pair of HA Sonicwall 3500's.

I am getting some complaints of noise, some lag and a few drops. If I look at the traffic it is minimal on my external WAN interface on the SonicWall, Fonality tells me it sounds like a QoS issue. So I wanted to configure the QoS on the S25n To provide greater bandwidth and throughput for the VOIP VLAN.

I am already looking at the SonicWalls and asking the Sonicwall engineers about the Settings, It is not as straight forward for the Sonicwall, you have limited options for configuration.

Any advice, contributions or possible technical links would be moist greatly appreciated

I received several Dell PowerConnect 2824's to put in to implementation, but in checking the status of the hardware found an overheating issue in the Diagnostic log.  I have to run all tests in Diagnostic Mode and then print the log to see the error, but have the same error on all my units.  The exact message is:

-A-TEMP-RISING-ALARM: Overheat temperature (sensor 1)

Has anyone else seen this error, or know of a hardware upgrade to fix this?

I'm trying desperately to add 2 VLANs to our existing LAN. 

We have a Sonicwall at 192.168.111.1 and our existing LAN machines can connect to the internet with the following:

192.168.111.n 255.255.255.0 192.168.111.1

I've added 3 VLANs to the 6224 (10: 10.10.0.1, 11: 192.168.111.3 [for management], 20: 10.20.0.1)

1/g1 : VLAN 10 switchport mode access vlan 10

1/g2 : VLAN 20 switchport mode access vlan 20

1/g24 : VLAN 11 switchport mode trunk allowed vlan 10-11,20

I can ping between machines on the VLANs 10 and 20. I can not ping the firewall at 192.168.111.1 nor any machines on the existing LAN. I also can not ping any of the machines on VLAN 10/20 from our existing LAN. I can manage the 6224 via 192.168.111.3 from our existing LAN.

Here is the running config:

console#show running-config 
!Current Configuration:
!System Description "PowerConnect 6224, 3.3.5.5, VxWorks 6.5"
!System Software Version 3.3.5.5
!Cut-through mode is configured as disabled
!
configure
vlan database
vlan 10-11,20
vlan routing 10 1
vlan routing 20 2
vlan routing 11 3
exit
stack
member 1 1
exit
switch 1 priority 1
ip address 1.1.1.1 255.255.255.0
ip routing
ip route 10.10.0.0 255.255.255.0 10.10.0.2
ip route 10.10.0.0 255.255.255.0 192.168.111.1
ip route 10.20.0.0 255.255.255.0 10.20.0.2


ip route 0.0.0.0 0.0.0.0 192.168.111.1
interface vlan 10
routing
ip address 10.10.0.1 255.255.255.0
bandwidth 10000
ip mtu 1500
exit
interface vlan 11
routing
ip address 192.168.111.3 255.255.255.0
bandwidth 10000
ip mtu 1500
exit
interface vlan 20
routing
ip address 10.20.0.1 255.255.255.0
exit
username "admin" password 12345 level 15 encrypted
!
interface ethernet 1/g1
spanning-tree portfast


mtu 9216
switchport access vlan 10
exit
!
interface ethernet 1/g2
spanning-tree portfast
mtu 9216
switchport access vlan 20
exit
!
interface ethernet 1/g3
spanning-tree portfast
mtu 9216
switchport access vlan 10
exit
!
interface ethernet 1/g4
spanning-tree portfast
mtu 9216
switchport access vlan 10
exit


!
interface ethernet 1/g5
spanning-tree portfast
mtu 9216
switchport access vlan 10
exit
!
interface ethernet 1/g6
spanning-tree portfast
mtu 9216
switchport access vlan 20
exit
!
interface ethernet 1/g7
spanning-tree portfast
mtu 9216
switchport access vlan 20
exit
!
interface ethernet 1/g8
spanning-tree portfast


mtu 9216
switchport access vlan 20
exit
!
interface ethernet 1/g9
spanning-tree portfast
mtu 9216
switchport access vlan 20
exit
!
interface ethernet 1/g10
spanning-tree portfast
mtu 9216
switchport access vlan 20
exit
!
interface ethernet 1/g11
spanning-tree portfast
mtu 9216
exit
!


interface ethernet 1/g12
spanning-tree portfast
mtu 9216
exit
!
interface ethernet 1/g13
spanning-tree portfast
mtu 9216
exit
!
interface ethernet 1/g14
spanning-tree portfast
mtu 9216
exit
!
interface ethernet 1/g15
spanning-tree portfast
mtu 9216
exit
!
interface ethernet 1/g16


spanning-tree portfast
mtu 9216
exit
!
interface ethernet 1/g17
spanning-tree portfast
mtu 9216
exit
!
interface ethernet 1/g18
spanning-tree portfast
mtu 9216
exit
!
interface ethernet 1/g19
spanning-tree portfast
mtu 9216
exit
!
interface ethernet 1/g20
spanning-tree portfast


mtu 9216
exit
!
interface ethernet 1/g21
spanning-tree portfast
mtu 9216
switchport mode general
switchport general pvid 11
switchport general allowed vlan add 10-11,20
exit
!
interface ethernet 1/g22
spanning-tree portfast
mtu 9216
exit
!
interface ethernet 1/g23
spanning-tree portfast
mtu 9216
switchport mode general
switchport general pvid 11


switchport general allowed vlan add 10-11,20
exit
!
interface ethernet 1/g24
spanning-tree portfast
mtu 9216
switchport mode trunk
switchport trunk allowed vlan add 10-11,20
exit
exit

I can't for the life of me figure out what I am doing wrong. I've tried adding all kinds of routes and changing up the switchport modes and trying configs from various forum posts. 

I basically just want to get to where I can ping the firewall; I understand there will be some more jiggering that needs to be done on the firewall to get internet access, but one step at a time. 

Does this config look close? 

Hi all,

First of all I want to say that I read a lot of threads on this forum in order to debug my problem. I ruled out STP since I have it disabled on all ports.

My configuration is as follows:

• 2 dell 6224 configured in stacking mode
• 2 routers with OSPF connected to the above dell switches
• One cisco connected with 2 ports on each dell switch using LACP
• This is a beta environment and I can run all sorts of testing/commands on the switches. Including connecting and disconnecting cables

Here are some details:

# show version

Image Descriptions

image1 : default image
image2 :

Images currently available on Flash

--------------------------------------------------------------------
unit image1 image2 current-active next-active
--------------------------------------------------------------------

1 3.3.7.3 3.3.6.4 image1 image1
2 3.3.7.3 3.3.6.4 image1 image1

# show process cpu

Memory Utilization Report

status bytes
------ ----------
free 26290208
alloc 188391952

CPU Utilization:

PID Name 5 Sec 1 Min 5 Min
---------------------------------------------------------
3369760 tTffsPTask 0.00% 0.04% 0.00%
3380590 tNetTask 0.00% 0.04% 0.16%
356ca70 ipnetd 0.00% 0.02% 0.00%
357f010 tXbdService 0.00% 0.02% 0.00%
359a050 osapiTimer 1.26% 1.09% 1.10%
368b920 bcmL2X.0 0.15% 0.19% 0.34%
36ba780 bcmCNTR.0 0.31% 0.31% 0.30%
36d4010 bcmTX 0.31% 0.11% 0.03%
3ccb260 bcmRX 1.74% 2.16% 2.26%
--More-- or (q)uit
3ceb450 bcmNHOP 0.15% 0.05% 0.00%
3cfd7a0 bcmATP-TX 1.11% 0.74% 0.70%
3d06ca0 bcmATP-RX 0.00% 0.19% 0.15%
3f01490 MAC Send Task 0.15% 0.07% 0.01%
3f0a990 MAC Age Task 0.00% 0.04% 0.00%
4a8a7e0 bcmLINK.0 0.31% 0.48% 0.27%
518b970 tL7Timer0 0.00% 0.04% 0.01%
51b1250 osapiMonTask 0.00% 0.00% 0.15%
5e9fe80 simPts_task 0.00% 0.04% 0.00%
61b0f60 UtilTask 0.15% 0.02% 0.00%
62d4310 dtlTask 1.90% 1.06% 0.96%
6366060 hapiRxTask 0.63% 1.02% 0.74%
6986b60 DHCP snoop 0.00% 0.02% 0.00%
6c50f50 Dynamic ARP Inspection 0.00% 0.00% 0.15%
6c5b340 SNMPTask 0.00% 1.22% 0.97%
765e9f0 dot1s_timer_task 0.00% 0.14% 0.30%
84193b0 radius_task 0.00% 0.02% 0.00%
8483920 tacacs_rx_task 0.00% 0.02% 0.00%
8637410 snoopTask 0.00% 0.00% 0.15%
94c7dc0 sFlowTask 0.00% 0.02% 0.00%
95b3fb0 tCkptSvc 0.00% 0.08% 0.01%
95f88a0 ipMapForwardingTask 12.38% 12.99% 12.23%
96ce9c0 tArpCallback 0.31% 0.26% 0.39%
--More-- or (q)uit
96f64a0 ARP Timer 0.95% 1.09% 0.84%
99cbdf0 OSPF Proto 0.00% 0.02% 0.00%
cbe8420 lldpTask 0.31% 0.20% 0.17%
d441970 tCptvPrtl 0.00% 0.02% 0.00%
e0cc4d0 RMONTask 0.15% 0.09% 0.15%
e0d8b70 boxs Req 0.00% 0.06% 0.01%
e6d9790 OSPF Receive 0.15% 0.16% 0.17%
---------------------------------------------------------
Total CPU Utilization 22.42% 24.14% 22.72%

# devs ipForwardStatsShow

IP Packets to CPU: 282355
ARP Packets to CPU: 3817
Packets to IP forwarding task: 286172
IP packets dropped. mbuf alloc failure: 465
IP packets dropped. buffer pool alloc failure: 0
IP packets dropped. ingress interface not router interface: 0
IP packets dropped. ingress interface not valid: 5711
IP packets dropped while not in Execute state: 0
IP packets dropped because IP forwarding queue is full: 0
IP packets forwarded: 198853
IP packets to IP stack: 11749
IP packets to end driver: 5579
ARP packets to end driver: 49
value = 30 = 0x1e

# show arp

Age Time (seconds)............................. 300
Response Time (seconds)........................ 1
Retries........................................ 4
Cache Size..................................... 1024
Dynamic Renew Mode ............................ Enable
Total Entry Count Current / Peak .............. 179 / 213
Static Entry Count Configured / Active / Max .. 0 / 0 / 64

# show arp switch

MAC Address IP Address Interface
------------------- ---------------- ------------
5254.0014.45E7 10.10.0.229 1/g24
5254.007C.FFDC 10.10.0.255 1/g24

This are actually 2 virtual machines with tunnels and bridges on them.
I have a Cisco switch configured in LAG with this 2 dell switches but I ruled that out as the cause of my problems. I disconnected both uplinks and the CPU was still around 20 - 25%.

Again spanning tree is disabled on all ports and I have nothing in logs. When I activate logging for debug I see nothing. I had some errors there but fixed all of them.

Any ideas how I can debug this?

Good Day, 

I have set up a PC5548 with a LAG to another switch and a LAG to a WS2012 Server. I have configured both Lags correctly and they appear as "up". One thing I am having trouble with is speed, it does not look like it is utilizing all 2GB avalable, speeds still max out at 1GB rthough all tests, also in LAG config current speed is 1000M, not 2000M as it should be. Am I missing something?

Thanks All. 

I have setup a stack of Dell PC6224 and connected to a DELL PC2824. 

The PC2824 is also linked to a Linksys SRW2024P.

Everytime I plugin the PC6224 switch the Linksys starts blocking ports.

How do I fix this?

why is there no "copy run start" command for the 2824?

how do i save my running config using CLI? I cant find it anywhere

thanks.

Good Day all

This is a bit (actually a lot) of an engineering question. I have two 3548P's with a VLAN for VOIP and  A VLAN for Management and nothing but Polycom phones plugged into it, , They are stacked (I guess) together By Ethernet connections between the two. I recently changed my network from where these switches had a single trunk to a pair of stacked 6224's to 2 Port channesl on each switch with a link to a pair of NEW S25N's using VRRP for Virtual redundancy. After this new config I am getting complaints of Static, Noise some choppiness and some drops. So the 3548's look like a basic setup for VOIP with

QOS BASIC

QOS TRUST COS

SO I am trying to figure out how to configure QoS on either the 3548's or the S25N's for optimal traffic flow for my VOIP TRAFFIC. There is NO QoS on the S25N's configured as of yet I am not sure if I need it if it is on the 3548's. I am certain I need to in order to tell the switch that the VOIP Traffic has priority. But Not sure how.

Can Anyone assist?

We have turned on Protected Ports feature on two switches (PowerConnect 6248). All is working as expected (our goal was to separate ports, see more on http://en.community.dell.com/support-forums/network-switches/f/866/t/19518231.aspx), but there is unexpected strange behavior.

The sub-switches which are directly connected to PowerConnect learns some (but not all) MAC addresses from devices which are connected to different PowerConnect ports.

Our network is as follows:

PCs are connected to 3Com and DLink switches. 3Com and DLink switches mainly are direct connected to PowerConnect. We have two separate PowerConnect switches. PCs groups on 3Com and DLink switches should not see each other (they should be completely separated).

On PowerConnectA

(PC1, PC2, PC3) --- 3COM switch1 --- PowerConnectA g1

(PC4, PC5, PC6) --- 3COM switch2 --- PowerConnectA g2

On PowerConnectB

(PC7, PC8, PC9) --- DLink switch1 --- PowerConnectB g1

(PC10, PC11, PC12) --- DLink switch2--- PowerConnectB g2

(PC13, PC14, PC15) --- DLink switch3 --- DLink switch4 g1 --- PowerConnectB g3

(PC16, PC17, PC18) --- DLink switch5 --- DLink switch4 g2 --- PowerConnectB g3

On DLink switch4 also Private VLAN Edge feature is turned on.

PCs from one group can not PING PCs from another group (for example PC1 can PING PC2, but can not PING PC4). 3Com switch1 can not PING 3Com switch2. All - as expected.

BUT... For some unknown reason 3Com switch1 on up-link port has learned PC4 MAC and PC5 MAC (despite PowerConnectA g1 should not see PowerConnectA g2 MACs). The same problem exists on 3Com switch2, DLink switch1 and DLink switch2 up-link ports.

We have done a lot of testing and it seems like a bug.

Buy the way if we look at this configuration:

(PC13, PC14, PC15) --- DLink switch3 --- DLink switch4 g1 --- PowerConnectB g3

(PC16, PC17, PC18) --- DLink switch5 --- DLink switch4 g2 --- PowerConnectB g3

where another DLink switch4 is in between with Private VLAN Edge feature for every down-link port turned on, there is no such problem. DLink switch2 up-link port has not learned any of PC13, PC14, PC15, PC16, PC17, PC18 MACs. But DLink switch2 has learned PC7 MAC (!), which comes from PowerConnectB g1 port.

Hello everyone,

I hope I can get some help. I am new to Dell 6224 and trying to get vlan routing working. Starting with a basic configuration.

Vlan 30 = 200.168.30.x

vlan 35= 200.168.35.x

laptop#1 vlan 35: 200.168.35.200 /24 and Default gateway of 200.168.35.254

laptop#2 vlan 30: 200.168.30.200/24 and default gateway of 200.168.30.254

When testing from either laptop I am not able to ping the the respective default gateway. Also when I put another laptop on each vlan I am able to ping clients on same vlan. But I can not ping clients on different vlans.

my current test lab config is below.for the switch When I put a laptop and plug it into switch port 1 and use a 200.168.35.200 and a default gateway address of 200.168.35.254

!Current Configuration:
!System Description "PowerConnect 6224, 3.3.6.4, VxWorks 6.5"
!System Software Version 3.3.6.4
!Cut-through mode is configured as disabled
!
configure
vlan database
vlan 30,35
vlan routing 30 1
vlan routing 35 2
exit

stack
member 1 1
exit
ip address 128.20.30.1 255.255.0.0

ip default-gateway 128.20.22.12
ip routing
interface vlan 30
name "vlan30 Clients"
routing
ip address 200.168.30.254 255.255.255.0
exit
interface vlan 35
name "vlan35 clients"
routing
ip address 200.168.35.254 255.255.255.0
exit
username "admin" password 70e8ae439a6fd4f5817c6a04f026f48f level 15 encrypted
!
interface ethernet 1/g1
switchport mode general
switchport general allowed vlan add 35
exit
!
interface ethernet 1/g22
switchport mode general
switchport general allowed vlan add 30
exit

Hi there!
i want to limit traffic to manage the PowerConnect devices PC8164 for ssh and https.
let say, that only this subnet: 192.168.7.0/24 and host 192.168.8.8 to have access for ssh and https for managing the devices.
How is this done on dell PC 8164?
Regards!

We have 5 x 8024f switches set up as 2 clusters of 2 and 1 stand alone.

They are running fine with firmware v4.2.1.3, but there is some extra functionality was can use with V5 for connecting Equal-logic units

I tried to do a firmware upgrade to 5.1.1.7, using the upgrading Power Connect switches from version 2.x.x.x or 3.x.x.x etc instructions, but on restart, both stacks couldn’t connect to the rest of the network properly.

I couldn’t ping the stacks from an external source, and when using the console, issuing a show running-config command completely hung the console. The only option then was to restart.

Various other commands hung the console too. I could ping the addresses assigned internally to the cluster, but nothing external to the cluster, in fact pinging an external address hung the console.

We have a third, single 8024f which upgraded ok (MH-PC8024F), but its config isn’t nearly as complex as these two. These two stacks are our primary and secondary L3 switching units and have VRRP setup for any failover.

I do not think the startup-configs loaded into the running-configs of these stacks.

I eventually had to reload the previous firmware – 4.2.1.3 back on, the get the environment working again.

Each of the switches in the stacks, uses ports 23 and 24 for stacking

In each stack, port 10 on both switches is set up as a port channel connecting the other stack.

Each stack has a connection back into the rest of our cisco network (Te1/0/2)

Any help or an explanation would be greatly appreciated

hi there!

How to use SSH and Https to connect to PC8164 and PC5524?

Hi there!
I've a stack with only two switches that have this configurations:

Physically switch above: Is standby, and have Unit nr 2
Physically switch below: Is master, and have Unit nr 1

Now, i want to make this changes manually or in some way:
1. I want to change unit number, so Switch that is above to be Unit 1
    and switch below to have Unit nr 2

2. Change the master unit from switch below, to switch above

Can i do these?
Regards!

Good Morning Everyone,

I am a newly hired sys admin for a small company. Currently we have 802.1x authentication on all switch ports but it does not work because our Cisco ACS unit has failed and it was doing the RADIUS authentication. I have not dealt with 802.1x before so I have been doing my research as to the best method of temporarily removing 802.1x from all network ports until I have a NAP server ready to authenticate requests with.

Below I have included a snippet of my current running-config with explanations of what each of the 802.1x command does which are in bold. I would like to make as few of changes to the current configuration as possible until I become more familiar with the network topology.

QUESTION 1: I am thinking if I change "aaa authentication dot1x default radius" to "aaa authentication dot1x default none" or "no aaa accounting dot1x default" there will be no authentication and users will simply connect. I found the following explaination below

"Use the no variant of this command to disable AAA accounting for 802.1x-based Port Authentication globally."

QUESTION 2: Every interface has the below commands for guest-vlan and unauth-vlan. Do I need to remove these configurations as well?

dot1x guest-vlan 80

dot1x unauth-vlan 80

QUESTION 3: If my solution isnt going to work what would be the prescribed method to move forward?

[Running-Config - Truncated]

RIVET-IDF-4B#show running-config

aaa authentication login "radiuslist" radius none (aaa list of radius servers for login)

dot1x system-auth-control (globally enables 802.1x)

aaa authentication dot1x default radius (enables default auth to aaa radius server)

aaa authorization network default radius (enables switch to accept VLAN assignment by radius server)

radius-server attribute 4 10.10.80.3 (no clue)

radius-server source-ip 10.10.80.3 (source ip for radius server to use)

radius-server host auth 10.10.3.10 (specified radius server)

primary

name "radius"

key "PASSWORD" (radius server shared key)

exit

VLAN Database Configuration

interface vlan 80

name "Users"

routing

ip address 10.10.80.3 255.255.252.0

exit

interface vlan 200

name "Guest Internet Access Only"

routing

ip address 192.168.200.3 255.255.255.0

ip access-group Wifi in 1

exit

Port Configuration

interface ethernet 1/g1

spanning-tree portfast

dot1x guest-vlan 80

dot1x unauth-vlan 80

exit

!

interface ethernet 1/g2

spanning-tree portfast

dot1x guest-vlan 80 (guest VLAN, access if auth fails)

dot1x unauth-vlan 80 (guest VLAN, access if auth fails)

dot1x port-control force-authorized (Force authentication on ports)

Any help, tips or suggestions are absolutely welcome.

Antony 303