Documenti di Didattica
Documenti di Professioni
Documenti di Cultura
ReleaseNotes
ForNetworkingOS8.3
Note:Beforeusingthisinformationandtheproductitsupports,readthegeneralinformationinthe
SafetyinformationandEnvironmentalNoticesandUserGuidedocumentsontheLenovoDocumentationCD
andtheWarrantyInformationdocumentthatcomeswiththeproduct.
FirstEdition(May2015)
CopyrightLenovo2015
PortionsCopyrightIBMCorporation2014.
LIMITEDANDRESTRICTEDRIGHTSNOTICE:IfdataorsoftwareisdeliveredpursuantaGeneral
ServicesAdministrationGSAcontract,use,reproduction,ordisclosureissubjecttorestrictionsset
forthinContractNo.GS35F05925.
LenovoandtheLenovologoaretrademarksofLenovointheUnitedStates,othercountries,orboth.
Release Notes
ThisreleasesupplementprovidesthelatestinformationregardingLenovo
Networking OS8.3fortheLenovoRackSwitchG8052(referredtoasG8052
throughoutthisdocument).
ThissupplementmodifiesandextendsthefollowingLenovoN/OSdocumentation
forusewithN/OS8.3:
LenovoNetworking OS8.3ApplicationGuide
LenovoNetworking OS8.3ISCLIReference
LenovoRackSwitchG8052InstallationGuide
Thepublicationslistedaboveareavailablefromthefollowingwebsite:
http://publib.boulder.ibm.com/infocenter/systemx/documentation/index.jsp
Pleasekeepthesereleasenoteswithyourproductmanuals.
Release Notes 3
Hardware Support
N/OS8.3softwareissupportedontheG8052,ahighperformanceLayer23
networkswitch.
TheG8052isa1Urackmountableaggregationswitchwithunmatchedlinerate
Layer2performance.TheG8052usesawirespeed,nonblockingswitchingfabric
thatprovidessimultaneouswirespeedtransportofmultiplepacketsatlow
latencyonallports.
Theswitchunitcontainsthefollowingswitchingports:
FortyeightGigabitEthernet(GbE)RJ45ports
Four10GbESmallFormPluggablePlus(SFP+)ports
Figure 1. RackSwitchG8052frontpanel
Management
Panel
RJ-45 Ports
SFP+ Ports
showversion
Thetypicalupgradeprocessforthesoftwareimageconsistsofthefollowingsteps:
LoadanewsoftwareimageandbootimageontoanFTPorTFTPserveronyour
network.
Transferthenewimagestoyourswitch.
Specifythenewsoftwareimageastheonewhichwillbeloadedintoswitch
memorythenexttimeaswitchresetoccurs.
Resettheswitch.
Forinstructionsonthetypicalupgradeprocess,seeLoadingNewSoftwareto
YourSwitchonpage 6.
Note: DuetoLenovofirmwaresecurityguidelines,itisnotpossibleatthistimeto
upgradeormigrateaswitchfromIBMNetworkingOStoLenovoNetworkingOS.
2. UseTFTPorFTPtocopythenewOSimageandbootimageontobothvLAG
switches.
3. ShutdownallportsexcepttheISLportsandthehealthcheckportontheprimary
switch(Switch1).
Note: Donotsavethisconfiguration.
4. ReloadSwitch1,Switch2willassumethevLAGprimaryrole
5. OnceSwitch1hasrebooted,Switch1willtakethesecondaryrole.
6. ShutdownallportsexcepttheISLportsandthehealthcheckportonSwitch2.
Note: Donotsavethisconfiguration.
7. ReloadSwitch2,Switch1willreassumethevLAGprimaryswitchrole.
Copyright Lenovo 2015
Release Notes 5
8. OnceSwitch2hasreloaded,makesureSwitch1hastransitionedtovLAGprimary
andSwitch2hastransitionedtosecondary.
9. VerifyallthevLAGclientshaveconvergedusingthefollowingcommand:
RS G8052(config)#showvlaginformation
TheimageandbootsoftwareloadedonanFTPorTFTPserveronyournetwork.
Note: Besuretodownloadboththenewbootfileandthenewimagefile.
ThehostnameorIPaddressoftheFTPorTFTPserver
Note: TheDNSparametersmustbeconfiguredifspecifyinghostnames.
Thenameofthenewsoftwareimageorbootfile
Whenthesoftwarerequirementsaremet,usethefollowingproceduresto
downloadthenewsoftwaretoyourswitch.
1. InPrivilegedEXECmode,enterthefollowingcommand:
RS G8052(config)# copy{sftp|tftp|ftp}{image1|image2|bootimage}
2. EnterthehostnameorIPaddressoftheFTPorTFTPserver.
Addressornameofremotehost:<nameorIPaddress>
3. Enterthenameofthenewsoftwarefileontheserver.
Sourcefilename:<filename>
Theexactformofthenamewillvarybyserver.However,thefilelocationis
normallyrelativetotheFTPorTFTPdirectory(forexample,tftpboot).
4. IfrequiredbytheFTPorTFTPserver,entertheappropriateusernameand
password.
5. Theswitchwillpromptyoutoconfirmyourrequest.
Onceconfirmed,thesoftwarewillbeginloadingintotheswitch.
6. Whenloadingiscomplete,usethefollowingcommandstoenterGlobal
Configurationmodetoselectwhichsoftwareimage(image1orimage2)youwant
toruninswitchmemoryforthenextreboot:
RS G8052# configureterminal
RS G8052(config)# bootimage{image1|image2}
Thesystemwillthenverifywhichimageissettobeloadedatthenextreset:
Nextbootwilluseswitchsoftwareimage1insteadofimage2.
7. Reboottheswitchtorunthenewsoftware:
RS G8052(config)#reload
Thesystempromptsyoutoconfirmyourrequest.Onceconfirmed,theswitchwill
reboottousethenewsoftware.
Note: IfyouselectNowhenaskedtoconfirmthereload,anychangesmadeto
theconfigurationsincethelastrebootwillbelost.
Release Notes 7
IGMPv3 VLAG
ThisreleaseprovidesIGMPv3supportonswitchesinVLAGconfiguration.
SNSC
ThisreleaseaddstheoptiontodisableterminalpromptinginSNSC.
Stacking
Thisreleaseprovidesthestackingfeature.Astackisagroupofuptoeight
RackSwitchG8052switcheswithLenovoN/OSthatworktogetherasaunified
system.ThestackismanagedthroughtheMasterswitch.TheMasterswitchthen
pushesconfigurationchangesandruntimeinformationtotheMemberswitches.
TheG8052switchhasseparatestack/standaloneimages.
Release Notes 9
Supplemental Information
Thissectionprovidesadditionalinformationaboutconfiguringandoperatingthe
G8052andN/OS.
TheBootManagementmenuallowsyoutoperformthefollowingactions:
Tochangethebootingimage,pressIandfollowthescreenprompts.
Tochangetheconfigurationblock,pressC,andfollowthescreenprompts.
ToperformaTFTP/Xmodemdownload,pressRandfollowthescreenprompts.
Toreboottheswitch,pressQ.Thebootingprocessrestarts
ToexittheBootManagementmenu,pressE.Thebootingprocesscontinues.
10
Speed:
9600bps
DataBits:
StopBits:
Parity:
None
FlowControl:
None
3. ToaccesstheBootManagementmenu,youmustinterruptthebootprocessfrom
theConsoleport.BoottheG8052,andwhenthesystembeginsdisplayingMemory
Testprogress(aseriesofdots),press<Shift B>.TheBootManagementmenuwill
display:
Resettingat10:55:49SunApr19,2015
MemoryTest................................
BootManagementMenu
IChangebootingimage
CChangeconfigurationblock
RBootinrecoverymode(tftpandxmodemdownloadofimagestorecover
switch)
QReboot
EExit
Pleasechooseyourmenuoption:
IfyouchooseoptionX(Xmodemserialdownload),gotostep5.
IfyouchooseoptionT(TFTPdownload),gotostep6.
Release Notes 11
5. Xmodemdownload:Whenyouseethefollowingmessage,changetheSerialPort
characteristicsto115200bps:
Change the baud rate to 115200 bps and hit the <ENTER> key before
initiating the download.
a. Press<Enter>tosetthesystemintodownloadacceptmode.Whenthereadiness
meterdisplays(aseriesofCcharacters),startXModemonyourterminal
emulator.
b. Whenyouseethefollowingmessage,changetheSerialPortcharacteristicsto
9600bps:
Change the baud rate back to 9600 bps, hit the <ESC> key.
c. Whenyouseethefollowingprompt,entertheimagenumberwhereyouwantto
installthenewsoftwareandpress<Enter>.
Installimageasimage1or2(hitreturntojustbootimage):1
d. Thefollowingmessageisdisplayedwhentheimagedownloadiscomplete.
Continuetostep7.
EnteringRescueMode.
Pleaseselectoneofthefollowingoptions:
X)Usexmodem1Ktoserialdownloadanimage
P)Physicalpresence(lowsecuritymode)
R)Reboot
E)Exit
Option?:
12
6. TFTPdownload:Theswitchpromptsyoutoenterthefollowinginformation:
PerformingTFTPrescue.Pleaseanswerthefollowingquestions(enter'q'
toquit):
IPaddr:
Serveraddr:
Netmask:
Gateway:
ImageFilename:
a. Entertherequiredinformationandpress<Enter>.
b. Youwillseeadisplaysimilartothefollowing:
HostIP:10.10.98.110
ServerIP:10.10.98.100
Netmask:255.255.255.0
Broadcast:10.10.98.255
Gateway:10.10.98.254
InstallingimageG80528.2.1.0_OS.imgfromTFTPserver10.10.98.100
c. Whenyouseethefollowingprompt,entertheimagenumberwhereyouwantto
installthenewsoftwareandpress<Enter>.
Installimageasimage1or2(hitreturntojustbootimage):1
d. Thefollowingmessageisdisplayedwhentheimagedownloadiscomplete.
Continuetostep7.
EnteringRescueMode.
Pleaseselectoneofthefollowingoptions:
X)Usexmodem1Ktoserialdownloadanimage
P)Physicalpresence(lowsecuritymode)
R)Reboot
E)Exit
Option?:
7. Imagerecoveryiscomplete.Performoneofthefollowingsteps:
Pressrtoreboottheswitch.
PressetoexittheBootManagementmenu
PresstheEscapekey(<Esc>)toredisplaytheBootManagementmenu.
Release Notes 13
Speed:
9600bps
DataBits:
StopBits:
Parity:
None
FlowControl: None
3. BoottheswitchandaccesstheBootManagementmenubypressing<Shift B>
whiletheMemoryTestisinprogressandthedotsarebeingdisplayed.
4. SelectXforXmodem download.Youwillseethefollowingdisplay:
Performxmodemdownload
Todownloadanimageuse1KXmodemat115200bps.
5. Whenyouseethefollowingmessage,changetheSerialPortcharacteristicsto
115200bps:
Changethebaudrateto115200bpsandhitthe<ENTER>keybefore
initiatingthedownload.
a. Press<Enter>tosetthesystemintodownloadacceptmode.Whenthereadiness
meterdisplays(aseriesofCcharacters),startXmodemonyourterminal
emulator.Youwillseeadisplaysimilartothefollowing:
Extractingimages...Do*NOT*powercycletheswitch.
****RAMDISK****
UnProtected38sectors
ErasingFlash...
......................................done
Erased38sectors
WritingtoFlash...9....8....7....6....5....4....3....2....1....done
Protected38sectors
****KERNEL****
UnProtected24sectors
ErasingFlash...
........................done
Erased24sectors
WritingtoFlash...9....8....7....6....5....4....3....2....1....
b. Whenyouseethefollowingmessage,changetheSerialPortcharacteristicsto
9600bps:
Changethebaudratebackto9600bps,hitthe<ESC>key.
Bootimagerecoveryiscomplete.
14
VLAGs
ForoptimalVLAGoperation,adheretothefollowingconfiguration
recommendations:
Anyportrelatedconfiguration,suchasappliedACLs,mustbethesameforall
portsincludedinthesameVLAG,acrossbothpeerswitches.
ConfigureVLAGhealthcheckingasshownintheApplicationGuide.
AfterconfiguringVLAG,ifyouneedtochangeanyconfigurationontheVLAG
ports,youmustadheretothefollowingguidelines:
IfyouwanttochangetheSTPmode,firstdisableVLAGonboththepeers.Make
theSTPmoderelatedchangesandreenableVLAGonthepeers.
IfyouhaveMSTPon,andyouneedtochangetheconfigurationoftheVLAG
ports,followthesesteps:
OntheVLAGSecondaryPeer:
1. ShutdowntheVLAGportsonwhichyouneedtomakethechange.
2. DisabletheirVLAGinstanceusingthecommand:
RS G8052 (config)#novlagadminkey<key>enable(or)
RS G8052 (config)#novlagportchannel<number>enable
3. Changetheconfigurationasneeded.
OntheVLAGPrimaryPeer:
4. DisabletheVLAGinstance.
5. Changetheconfigurationasneeded.
6. EnabletheVLAGinstance.
OntheVLAGSecondaryPeer:
7. EnabletheVLAGinstance.
8. EnabletheVLAGports.
Note: ThisisnotrequiredonnonVLAGportsorwhenSTPisofforwhenSTPis
PVRST.
Release Notes 15
Known Issues
ThissectiondescribesknownissuesforN/OS8.3ontheRackSwitchG8052.
Note: PleasereviewtheChangeHistorydocumentationpostedwiththeSwitch
Firmwaretocheckifanyoftheseissueshavebeenfixedinthelatestrelease.
ACLs
ACLloggingdoesnotblocktrafficsenttotheCPU.UseManagementACLsifyou
needtofilterorblockinboundtraffic.(ID:XB211816)
BBI
IntheBBIDashboard,MSTPinformationarea,CISTinformation,CISTbridge
informationandCISTportsinformationisdisplayedintheGeneralpage.Thereis
nodisplayavailablefortheCISTBridgeorCISTPortsmenuitems.(ID:35988)
BGP Debug
WhileenablingordisablingBGPdebugforaparticularpeer/IPaddress,the
loggingbehaviormaynotbeasexpected.Followingisaworkaround:(ID:59104)
ToenableBGPdebugforaparticularpeer:
1. EnableBGPdebugforallthepeers.
2. DisableBGPdebugforallthepeers.
3. EnableBGPdebugforaparticularpeer.
TodisableBGPdebugforaparticularpeer:
1. EnableBGPdebugforallthepeers.
2. DisableBGPdebugforallthepeers.
3. EnableBGPdebugforallthepeersexcepttheoneforwhichyouwantitdisabled.
Debug
LenovoN/OSdebugcommandsareforadvancedusers.Usethedebugcommands
withcautionastheycandisrupttheoperationoftheswitchunderhighload
conditions.Thiscouldbedangerousinmissioncriticalproductionenvironments.
Beforedebugging,checktheMPutilizationtoverifythereissufficientoverhead
availableforthedebugfunctionality.Whendebugisrunningunderhighload
conditions,theCLIpromptmayappearunresponsive.Inmostcases,controlcanbe
returnedbyissuinganodebug<function>command.
IP Gateways
Whenalinkisdisabledandthenreenabled,youmightseethefollowing
notifications,whichcanbeignored(ID:42953,37969):
Staticroutegatewayxisdown.
16
Staticroutegatewayxisup.
IPsec
WhenconfiguringIPsectooperatebetweenLenovoswitches,keysofvarious
lengthsaresupported.However,whenusingIPsectoconnectwithnonIBM
devices,themanualpolicysessionkeysmustbeofthefollowingfixedlengths:
FortheAHkey:
SHA1=20bytes
MD5=16bytes
FortheESPauthkey:
SHA1=20bytes
MD5=16bytes
FortheESPcipherkey:
3DES=24bytes
AEScbc=24bytes
DES=8bytes
ISCLI
Ifaportneedstobeamemberofmorethan500VLANs,werecommendthatyou
firstshutdowntheportandthenaddtheportasamemberoftheVLANs.(ID:
70739)
LACP
Underheavyswitchloadconditions,LACPlinksmayflapwhenconfiguredwith
shorttimeoutmode.TostabilizeLACPunderheavyload,itisrecommendedtouse
thelongtimeoutmodeinstead.(ID:66173)
MLD
Incasethemulticastfloodingfeatureisdisabled,MLDpacketsarestillsoftware
floodedforatleastoneIPv6interfaceconfigured.Itdoesnothavetobelinkedto
theVLANwheretheMLDpacketsneedtobeflooded.(ID:LV305657)
Openflow
WhenyouconfigureaporttouseOpenflow,spanningtreeprotocolis
automaticallydisabledonthatport.(ID:XB266710)
OSPF
Cannotredistributefixed/static/RIP/eBGP/iBGProutesintoOSPFonaswitch
withtwoNSSAareasenabled.Thefollowingmessageappearsontheconsole
whentryingtoexportroutestomultipleNSSAareas(ID:37181):
Limitation:CannotexportroutestomultipleNSSAareasconcurrently.
Release Notes 17
WhenOSPFv3isenabled,theOSPFbackbonearea(0.0.0.0)iscreatedbydefault
andisalwaysactive.(ID:37932)
SomechangestoOSPFconfiguration(suchascreatinganewareaorchanging
anareastype)mayresultinOSPFstatereconvergence.(ID:46445,48483)
OSPFv3overIPsec
Thiscombinationcanonlybeconfiguredonlyonaperinterfacebasis.
ThecurrentimplementationforOSPFv3allowstheuseofonlyoneprotocol
(AHorESP)atanygiventime.AHandESPcannotbeappliedtogether.
IPsecdoesnotsupportOSPFv3virtuallinks.(ID:48914)
Port Mirroring
Ifthetrafficlinerateonthemonitorportexceedstheportsrate,pauseframesare
sent.Toavoidpauseframes,disableFlowControlonthemirroredports.(ID:
27755)
TheportspeedsettingisnotconfigurableforFinisarSFPs.Updatingfrom
BLADEOS6.5(orprior)toN/OS6.8(orlater)willresultinportspeed
configurationsettingsbeingresettodefaultvaluesforportsusingFinisarSFPs.
(ID:55063)
QoS
Whenthefollowingcommandisissuedcommandisissued,DroppedPackets
andDroppedBytescounterswillbedisplayedas0duetohardwarelimitations:
(ID:XB233503)
G8052(config)#
showinterfaceport<swunit:port_num>egressmcastqueuecounters
Forexample:
RS8264CS(config)#showinterfaceport1:24egressmcastqueuecounters
MulticastQoSstatisticsforport1:24:
QoSQueue8:
TxPackets:377
DroppedPackets:0
TxBytes:50883
DroppedBytes:0
Routed Ports
SNMPorBBIshouldnotbeusedtoconfigureroutedports,ortoconfigureany
otherfeatureifaroutedportisalreadyconfiguredontheswitch.
Ifaroutedportisconfiguredontheswitch,theconfiguration,apply,andsave
commandsarenotdisplayedinBBI;inSNMP,youmaybeabletoenterthe
configurationcommands,butyouwillnotbeabletosavetheconfiguration.(ID:
57983)
18
sFLOW
Egresstrafficisnotsampled.PortsFlowsamplingappliesonlytoingresstraffic.
(ID:42474)
SNMP
WhenDirectedrequestisenabled,usersconnectedviaTelnetcannotbeejected
fromtheswitch.(ID:37144)
SNMPreadandwritefunctionsareenabledbydefault.ForbestsecuritY
practices,ifthesefunctionsarenotneededforyournetwork,itisrecommended
thatyoudisablethesefunctionspriortoconnectingtheswitchtoyournetwork.
(ID:40056)
PortinformationdisplayedinMIBsrelatedtoportbasedVLANsdoesnot
distinguishbetweenaregularportoratrunkport.UsetheRS
G8052(config)#showmacaddresstablestaticcommandtoview
detailsonregularportsandtrunkports.(ID:57194)
IfyoudeletemultipleVLANsusingSNMP,youmayseeanerroriftheSNMP
packetsizeexceeds1800bytes.(ID:XB228120)
WhenusingLACPwithPVRST,itisnotrecommendedtoconfiguretheswitch
astheSTProotbridge.Whendoingso,trafficcanbediscardedforupto30
secondsonaffectedLACPportswhileinitialSTPpathstatesarebeingresolved
(discarding,learning,forwarding).(ID:63315)
AfterchangingfromMSTPtoadifferentSTPmode,someMSTPcommandswill
stillappearintheconfigurationfile.ThenonapplicableMSTPcommandsdo
notaffectswitchoperationandcanbeignored.(ID:64388)
Spanning Tree
Statistics
ThealleventscounterforOSPFv3includesthetotalnumberofchanges
associatedwithanyOSPFv3interface,includingchangestointernalstates.
(ID:38783)
UFP
Thecommandshowufpinformationport<x>doesnotshowdisabled
vPorts.(ID:XB267210)
ThefollowingfeaturesarenotsupportedonportsparticipatinginVLAGs:
Hotlinks
IGMPrelay
PrivateVLANs
InamultilayerVLAGtopology,theVLAGportsmaybedisabledinCISTifyou
changetheSTPmodeonthesecondaryswitchtoMSTP.(ID:58696)
Release Notes 19
VLANs
WhenaVLANappearsintheVLANrangeforaportinaconfigurationdump,
thisdoesnotguaranteethattheportisactuallyamemberofthatVLAN.The
actualporttoVLANmappingcanbedisplayedbyusingtheshowvlan
command.(ID:XB267491)
WhenVLAGportsareremovedfromaVLAGVLAN,theportliststillcontains
boththeVLAGportsjustremovedandtheISLports.(ID:XB278681)
VMsbelongingtodifferentESXserverscannotpingeachotheracrossdifferent
VMgroups.BecausetheVMgroupsbelongtodifferentVLANs,thisis
appropriateandexpectedbehavior.
VMready
20