I have two Force10s sitting between a 3 host VMWare cluster and a EqualLogic SAN. In working with the EqualLogic support team, they suggested that best practice on our iSCSI network is to have Flow Control enabled with rx ON and tx OFF. So I have that configured for all ports that are part of the iSCSI network and can verify with show running-config. However, if I run the command show interfaces configured, those same interfaces show "Flowcontrol rx on tx on".

Can anyone explain why there's a discrepancy here? I reset the interface counter to watch for any Outbound throttles, and so far there are none. So it would seem that it's set to rx on tx off, but how can I be sure?

I attended the Dell training for the Force10 Networking gear. A question came up regarding the MXL cards and I wanted to get user forum feedback. I have two MXL cards in a single MXL chassis. These cards will get connected to two Cisco 4507 switches using a VSS. IS it best practice to form a iVLT between the two MXL cards or to stack them together. Ultimately there will be 4 chassis daisy chained together. Not sure if that info helps at all.

I have two Dell S4810 switches configured in a VLT. I have two Cisco 2811 routers that have two 1GB interfaces each. I want one interface gi0/0 to connect to the Dell S4810 and the other gi0/1 to connect to my ISP router for Internet connectivity. I want the Cisco routers to be in an HSRP configuration for redundancy and have a seprate VLAN for Inetrnet access. Can someone help me with a configuration? THis is a lab enviironment and I am trying to learn Dell S4810 switches.

Hi,

I need some help to know if what I'll do make sense or not.

An ISP installed 2 cisco routers with the HSRP protocol. I want to configure on the same vlan and switch, the 2 routers, a firewall and another machine in the future.

Cisco Router 1 <-------HSRP IP=GATEWAY------->Cisco Router 2

The 2 routers connected to :

PowerConn5548 VLAN 10 with General 10U ports :

Connect to the Firewall with also General 10U port.

I'll Use the HSRP IP as a gateway and a Public IP on the firewall, and after that nating other Public IPs through the firewall. I don't have any IP configured in the VLAN configuration.

Thanks for the help.

I have installed an snmp key  in de switch and created an entry in scom

scom displays the switch correctly but  only displays  memory en cpu instance

I want to see the Port utilisation  .

Is there any one using this monitoring in scom .

I have the need to create several VLANs that will primarily be housed on this 6224, but need to be accessed over our general network.  I think I have the configuration mostly complete, but I can't currently ping any of the new VLANs over the network.  How much of the VLAN configuration needs to be transferred to the other switches on the network?  New switch config:

vlan database
vlan 110-119
vlan routing 110 1
vlan routing 111 2
vlan routing 112 3
vlan routing 113 4
vlan routing 114 5
vlan routing 115 6
vlan routing 116 7
vlan routing 117 8
vlan routing 118 9
vlan routing 119 10
exit
stack
member 1 1
exit
ip address 10.1.0.110 255.255.252.0
ip default-gateway 10.1.1.1
ip routing
interface vlan 110
routing
ip address 10.1.10.1 255.255.255.0
exit
interface vlan 111
routing
ip address 10.1.11.1 255.255.255.0
exit

.
<snip>

.

interface vlan 118
routing
ip address 10.1.18.1 255.255.255.0
exit
interface vlan 119
routing
ip address 10.1.19.1 255.255.255.0
exit
username <snip>
ip ssh server
management access-list "SSH"
permit ip-source 10.x.x.x mask 255.255.252.0 ethernet 1/g1 service ssh priority 1
exit
!
interface ethernet 1/g1
spanning-tree portfast
switchport mode general
switchport general allowed vlan add 110-119 tagged
exit
!
interface ethernet 1/g2
spanning-tree portfast
switchport mode general
switchport general allowed vlan add 110-119 tagged
exit
!
interface ethernet 1/g3
.

<snip>

.

!
interface ethernet 1/xg4
spanning-tree portfast
switchport mode general
switchport general allowed vlan add 110-119 tagged
exit
exit

Is there a way to disable default Vlan 1 on an N2000 series switch

We have 8024F switches and we would like to connect them to Cisco through 10G connection.

Currently we don't have Dell SFP+ module but we have Cisco SFP-10G-LR modules.

Is that SFP+ modules compatible with our switch? our environment is in operational, therefore we cannot test it on production. 

Is there any compatibility matrix for Dell 8024F and SFP+ modules? 

I have multiple 3524P switches within my organization.  We are testing backup/restore procedures and I am having issues restoring a configuration taken from one 3524P to another "test" 3524P. 

Note that the file that I am trying to restore is exactly what was copied from a "production" switch to the TFTP server before trying to copy to the "test" 3524P.

It gives me an error:

console# copy t192.168.3.100/3524P_27_backup startup-config

Overwrite file [startup-config] ? [Yes/press any key for no]....01-Jan-2000 01:39:14 %COPY-I-FILECPY: Files Copy - source URL t192.168.3.100/3524P_27_backup destination URL flash://startup-config

Copy: Error inconfiguration download Line: 1 Command: interface Ethernet e48

01-Jan-2000 02:39:14 %TFTP-A-TftpTxERROR: An error message was sent: 0 <Closed by application>

01-Jan-2000 01:39:14 %COPY-W-TRAP: The copy operation has failed.

Any help would be appreciated because it doesn't do me any good to do backups of configurations if I am unable to copy them back to a "replacement" switch when something fails.  Thanks.

Hi

Probably I have been looking in the wrong manuals but i am looking into figuring out  what is the default key size when issuing the command  crypto generate command on Powerconnect M6348

HOSTNAME(config)#crypto key generate ?

dsa                      Generate DSA key pairs.
rsa                      Generate RSA key pairs.

I have tried the following command show crypto key mypubkey  but only getting a long chain, but still unable to get defined number.

Any thoughts?

Many Thanks!

Here is my problem...

I Have curently 1 Vlan per location that all terminate to one 8024F per location via our Fiber.  We have 4 hubs serving 28 locations and the admin office to witch all hubs trunk and including 7 other locations to the core 8024F

What we would like is to add 2 more Vlans per location that all terminate at the admin office.

Video - 2

Phone - 3  ----------all 3 go from a 3548P -- 8024F --and another 8024F Hub then to 8024F Core switch

Data - 4

We dont want the vlans at any one location to be able to see each other

is there a simple way of doing this also, I am  a little confused on what type of port modes I should be using...General, Access,  Trunk, Customer or PVE-P I or C

Any help would be much appreciated

Thks

Glenn Tataryn

Video (VLAN239) ----------------------------------------                   Fiber Connect   Gateway)     

                                                                            |--PC3548P---PC8024F----PC8024F

Phones/Data(Voice VLAN 139/Data VLAN 39)--

Hello,

I have two N4032Fs running 6.2.0.5 with two MLAGs connecting to two partner switches. MLAG Po2 connects to partner A, MLAG Po4 connects to partner B.   VLAN 2 is tagged on Po2 and Po4.  VRRP is configured between the N4032Fs to route for VLAN 2.  I also have a L3 connection with OSPF between the N4032Fs and partner B.   I'm simulating migration of routes from partner B to the N4032Fs.  Partner B will act as an access switch when the migration is complete.  

Partner A has 3 hosts connected at 10.0.0.4, 10.0.0.5, and 10.0.0.6.  These are pingable from the N4032Fs and partner A.  Each host runs a web service on port 80/tcp.

On partner B and hosts connected to partner B I can ping to some of the hosts connected to partner A.  Hosts connected to partner B and partner B are not on VLAN 2.  I can traceroute to the same hosts I can ping.  I can connect to the web service on all of the hosts.  I can reliably ping and traceroute the VLAN addresses and the VRRP address from all hosts and switches.

OSPF on partner B is correctly showing the routes to each of the 4032Fs.  The L3 links are single interface connections between each N4032F and partner B, not an MLAG.  Should this be done with an MLAG?

If I disable the L3 link between one of the N4032Fs and disable the MLAG member on the same N4032F, I am able to communicate with all of the hosts connected to partner A from partner B and any hosts attached to partner B.  This holds for either N4032F.

It seems to be an issue with packets moving across the VPC peer-link, which suggests to me a configuration problem.  I've used version 1.3 of the MLAG deployment guide to configure the switches.   That guide states six areas need to be in sync between the MLAG peers -- does this apply to non-MLAG interfaces on the peers, such as used for L3 connections to other switches?

Below is part of the sanitized configuration from the N4032Fs.

Thank you in advance for any advice you may have.

Tom

4032-1:

interface vlan 2
ip address 10.0.0.2 255.255.255.128
ip helper-address 10.100.100.100
vrrp 1
vrrp 1 mode
vrrp 1 ip 10.0.0.1
vrrp 1 accept-mode
vrrp 1 authentication simple "sekret"
exit

interface port-channel 1
spanning-tree disable
switchport mode trunk
vpc peer-link

interface port-channel 2
switchport mode trunk
switchport trunk native vlan 999
switchport trunk allowed vlan 2
vpc 2

interface port-channel 4
switchport mode trunk
switchport trunk native vlan 999
switchport trunk allowed 2
vpc 4

4032-2:

interface vlan 2
ip address 10.0.0.3 255.255.255.128
ip helper-address 10.100.100.100
vrrp 1
vrrp 1 mode
vrrp 1 ip 10.0.0.1
vrrp 1 accept-mode
vrrp 1 authentication simple "sekret"
exit

interface port-channel 1
spanning-tree disable
switchport mode trunk
vpc peer-link

interface port-channel 2
switchport mode trunk
switchport trunk native vlan 999
switchport trunk allowed vlan 2
vpc 2

interface port-channel 4
switchport mode trunk
switchport trunk native vlan 999
switchport trunk allowed 2
vpc 4

HI All

I need a bit of help with this configuration please.

I have a stacked pair of m3048 switches with a default route for 5 vlans to 10.10.10.2 which goes to a firewall with a vpn back to my office

I now need a route to an mpls via ge1/0/25 for all the vlans to go to 10.10.10.250 on the mpls router.

I have created a port group lag on port 1/0/25 with all the vlans added to it, I am seeing the remote mac address and the MPLS can see some of my ip addresses in the vlans, so something is correct.

I thought I knew how to do it (the routing) but my attempts have not been successful, can anyone help with some instructions please?

 Thanks in advance for any help...

Hi all fri,

Please help me to have Password Recovery step by step Procedure for Dell Powerconnect 3548p switch.

Thanks so much.

Hello everyone,

we had a strange behaviour on one of our PowerConnect 8024F switches. The uplink port of the device (connected to a 10Gig port on a Cisco Catalyst 6513) went down. The output of 'show interfaces status' looked like that:

Port       Description                Duplex  Speed    Neg   Link   Flow Control
                                                             State  Status
---------  -------------------------  ------  -------  ----  ------ ------------
Te1/0/1    cat6500-rz-1 (te11/2)      Full    10000    Off   D-Down Inactive
Te1/0/2    pc8024-ub-1 (te1/0/1)      Full    10000    Off   Up     Active
Te1/0/3    pc8024-uv-1 (te1/0/1)      Full    10000    Off   Up     Active
Te1/0/4    pc5500-naf02n-1 (te1/0/1)  Full    10000    Off   Up     Active
Te1/0/5    pc5500-naf04n-1 (te1/0/1)  Full    10000    Off   Up     Active
Te1/0/6    pc5500-naf03-1 (te1/0/2)   Full    10000    Off   Up     Active
Te1/0/7    pc8024-mensa-1 (te1/0/1)   Full    10000    Off   Up     Active
Te1/0/8    defekt                     N/A     Unknown  Auto  Down   Inactive
Te1/0/9    pc5500-naf03-2 (te1/0/1)   Full    10000    Off   Up     Active
Te1/0/10   pc5500-naf03-3 (te1/0/1)   Full    10000    Off   Up     Active
...

...and so on. Firmware is 5.1.2.3. We rebooted the device and it went back to normal behaviour.

Now, can anyone explain to me what the state "D-Down" means? I did not find anything in the documentation nor did using google have any success.

The port configuration looks like the following:

description "cat6500-rz-1 (te11/2)"
mtu 9216
switchport mode general
switchport general allowed vlan add 4-5,14,22-27,29-33,36,39-41,43 tagged
switchport general allowed vlan add 47,51-52,54-56,58-60,63-64,66,75,78-79 tagged
switchport general allowed vlan add 81,86-90,93-99,107,120,122 tagged
switchport general allowed vlan add 124,132-135,137,140,142-143,147-152,154 tagged
switchport general allowed vlan add 156-157,160,165-166,171,173-175 tagged
switchport general allowed vlan add 177-178,180-181,183,189,192,195-196 tagged
switchport general allowed vlan add 199,201,203-205,207-208,210-212 tagged
switchport general allowed vlan add 219-222,224-225,227-233,235-244,246 tagged
switchport general allowed vlan add 248-249,253,256,258-260,262-267 tagged
switchport general allowed vlan add 269-272,274-276,278-279,282,284,286-288 tagged
switchport general allowed vlan add 292,295-298,323,344,347,349 tagged
switchport general allowed vlan add 354,362,366,370,372,378-380,382-383,385-386 tagged
switchport general allowed vlan add 391,399,405,431,443,447 tagged
switchport general allowed vlan add 475-476,485,488,511,522,584,700-703,710-714 tagged
switchport general allowed vlan add 725,734,838,854-855,909 tagged
switchport general allowed vlan add 950,961-962,981,999,1234,1236,2205,2218-2220 tagged
switchport general allowed vlan add 2222,2233,2414,2417 tagged
switchport general allowed vlan add 2506-2507,2519,2521,2621,2699 tagged
mac access-group PVST-Filter out 1
lldp transmit-tlv sys-name sys-cap
lldp transmit-mgmt

The used mac access-group PVST-Filter is:

mac access-list extended PVST-Filter
deny any 0100.0CCC.CCCD 0000.0000.0000
permit any any
exit

Thank you for reading and any suggestions!

Robin

Dear Dell Support Team,

I'm searching for a solution for a high CPU utilisation on a PowerConnect 5548. (We have about 20 of this PC5548, but only one has this problem!).

The switch with that symptom is an edge device, just 5-6 end-user are connected. No servers, no uplinks to other switches.

All PC5548 in our enviroment are on the latest Firmware - 4.1.0.16!

The Icinga CPU monitoring example shows the following:

The CPU utilisation is always about 85 %, even at night when the office is empty!

When logging into the switch management (Telnet / HTTP) of our problematic device, the utilisation sink down immediately to the same ranges as all our other PC5548 switches (about 2-4 % CPU):

console# show cpu utilization
CPU utilization service is on.

CPU utilization
---------------
five seconds: 3%; one minute: 2%; five minutes: 4%

How can I enable the CPU counters for the device?

console# show cpu counters
CPU counters are Inactive

When executing the following command on a PC6248, i get the following CPU process table as shown in the following example:

6248#show process cpu

Memory Utilization Report

status      bytes
------ ----------
  free   24770496
 alloc  189969376



CPU Utilization:

 PID     Name                     5 Sec    1 Min    5 Min
---------------------------------------------------------
 3372330 tNetTask                 0.31%    0.16%    0.02%
 355e810 ipnetd                   0.15%    0.07%    0.01%
 3570db0 tXbdService              0.00%    0.02%    0.01%
 358bdf0 osapiTimer               1.11%    1.06%    1.24%
 370b730 bcmL2X.0                 0.31%    0.21%    0.30%
 373a830 bcmCNTR.0                0.63%    0.32%    0.24%
 37540c0 bcmTX                    0.00%    0.02%    0.07%
 3c98690 bcmL2X.1                 0.47%    0.29%    0.18%
 3caf4b0 bcmCNTR.1                0.15%    0.32%    0.40%
....

Is there a possibility to have the same statistics on the PC5548? I guess this would help to investigate the problems source...

Thank you very much,
KNKA

Is there a way to find ip's of devices that are configured with static ip connected to powerconnect 3548 switch.

Thanks

What is the maximum number of 6248 switches we can stack together? Do we run into possible issue after a certain amount of switches? 

thanks,

Leo

Hi all,

I am having some difficulty getting RADIUS authentiation working for a couple of stacks of Dell N3048 switches I have.

First, some info about the environment:

• 2 stacks of N3048's (5 switches and 6 switches)
• Windows Network Policy Server, used as the RADIUS server
• Both stacks of switches are linked using a port channel
• Both stacks of switches running OSPF to exchange routes, running VRRP for 1 VLAN
• The RADIUS server is connected to one stack
• Both stacks experience the same issue
• Both stacks are on the latest firmware, 6.2.0.5
• Both stacks have 10 VLAN's setup

The only configuration I put in is this:

aaa authentication login "networkList" local radius
radius-server key hidden
radius-server host auth 192.168.30.240
primary
name "dc1"

As the switches have multiple IP's assigned, I also tried with setting

radius-server source-ip 192.168.39.2

I have left that off for now.

Now for the problem. Once RADIUS has been configured as above, I then try to telnet or SSH to the switch stack. Once I put in my username and password it then times out for the RADIUS request. I verify this by showing the radius statistics on the switch, the timeout counter increases.

Before the first RADIUS authentication attempt, I run a ping to the RADIUS server, and it works:

level12-stack#ping 192.168.30.240 source 192.168.39.2

Pinging 192.168.30.240 with 0 bytes of data:

Reply From 192.168.30.240: icmp_seq = 0. time= 1604 usec.

Reply From 192.168.30.240: icmp_seq = 1. time= 1050 usec.

Reply From 192.168.30.240: icmp_seq = 2. time= 961 usec.

Reply From 192.168.30.240: icmp_seq = 3. time= 1004 usec.

----192.168.30.240 PING statistics----

4 packets transmitted, 4 packets received, 0% packet loss

round-trip (msec) min/avg/max = 0/1/1

After I have tried to authenticate I can no longer ping it, or any other host in the network:

level12-stack#ping 192.168.30.240 source 192.168.39.2

Pinging 192.168.30.240 with 0 bytes of data:

Ping failed.

level12-stack#ping 192.168.31.254

Pinging 192.168.30.240 with 0 bytes of data:

Ping failed.

When I check the log on the switch the following error is logged for each ping request:

<188> Apr 22 10:11:30 level12-stack-1 General[procLOG]: ping_debug.c(627) 3859 %% [VRF-ID:0] Cannot allocate entry - duplicate name and index

I can still ping the switch stack from hosts in the network.

Once I reload the stack master so that the master transfers to another switch, ping starts working again as normal. As soon as I try and authenticate with RADIUS again, the same problem repeats.

I repeated this process while taking a packet capture on the RADIUS server, I see no requests come in at all.

My next step was to ring 100 pings, while the ping was still running I then try to authenticate with my RADIUS login, and it worked. Once the ping was done I tried to login again and it failed, I get the same problem when trying to ping again. I have to then reload the master so I can ping hosts on the network again.

I don't have any VRF's setup, so I am guessing VRF 0 is the default.

Has anyone been able to get RADIUS auth working on these switches without issue? I am not sure what I could be missing. I have opened a support case already for this but am waiting to hear back from that as well.

<duplicate posting>