I need some help with a Extreme Summit X440-24t configuration

  • 0
  • 1
  • Question
  • Updated 1 year ago
  • Answered
Hi guys, I need some help.

We bought a Extreme Summit X440-24t switch and the idea is to replace a Cisco 3560 switch. I have no experience with XOS and there are two port configurations that I don ́t know how to set up. These are the configurations on the cisco way:

## On these port how can I set up the port-security with MAC on ExtremeXOS

1. interface GigabitEthernet0/1:
    
      switchport access vlan 450
      switchport port-security mac-address c0ea.e46a.1821

## On these port how can I set up the port to L3 routing port and set up an IP to the port.

2. interface GigabitEthernet0/26:

      no switchport
      ip address 177.69.10.4 255.255.255.0


i appreciate your help!
Photo of Alysson Campos

Alysson Campos

  • 86 Points 75 badge 2x thumb

Posted 4 years ago

  • 0
  • 1
Photo of Sumit Tokle

Sumit Tokle, Alum

  • 5,738 Points 5k badge 2x thumb
In extreme everything is vlan based. You need to create vlan, configure tag on vlan, add the port in vlan, configure IP address on vlan and then enable routing(ipforwarding)

create vlan test
configure vlan test tag 450
configure vlan test add port 1,2 untagged  (untagged is same as Access port in cisco)
confiugre vlan test ipaddress 177.69.10.4 255.255.255.0
enable ipforwarding.
Photo of Alysson Campos

Alysson Campos

  • 86 Points 75 badge 2x thumb
Thank you Sumit Tokle. In that case what you ́re saying is that when I enable ipforwarding to a specific vlan X it turns those ports in that vlanX into a L3 routing ports? Because in my understanding a Vlan is a L2 usually.
Photo of Sumit Tokle

Sumit Tokle, Alum

  • 5,738 Points 5k badge 2x thumb
Yes, you are correct. 

I believe in Cisco, you need to configure "ip routing" command in order to enable routing. In same way, you could configure "enable ipforwarding <vlan_name>" to configure that interface as L3
Photo of Kevin Eaton

Kevin Eaton

  • 100 Points 100 badge 2x thumb
Hi Alysson,

To answer the first part of your question you can configure MAC security by connecting the device to the relevant port (so the MAC address appears on that port) and then running the following:

create vlan test tag 450
configure vlan test add port 1 untagged
configure port 1 vlan test lock-learning

This will lock the MAC address on port 1 so no other MAC addresses can be used. You can also use 'limit-learning' to limit the number of MACs learnt to a certain number. 'unlock-learning' removes the lock and 'unlimited-learning' removes the limit.

I hope this helps.

Kevin
Photo of Bin

Bin, Employee

  • 5,370 Points 5k badge 2x thumb
Photo of Rahul Auchare

Rahul Auchare

  • 60 Points
Hi Bin,

In this part you have explained how to bind MAC to a port. I want to know how I can bind public IP to a port. 

Thanks in advance...
Photo of Tripathy, Priya Ranjan

Tripathy, Priya Ranjan, ESE

  • 2,306 Points 2k badge 2x thumb
In addition to what Bin provided you can also have look at the below article for more info:

https://gtacknowledge.extremenetworks.com/articles/How_To/How-to-limit-the-number-of-MAC-addresses-l...
Photo of Tripathy, Priya Ranjan

Tripathy, Priya Ranjan, ESE

  • 2,306 Points 2k badge 2x thumb
Hope  the provided information helped you for fetching information which you were looking for. Please let us know if  you have any further queries or shall we close this discussion moving forward.....
Photo of venkatesh siddina

venkatesh siddina

  • 190 Points 100 badge 2x thumb
Hello Everyone,can somebody help me for taking console of extreme summit  x440-24t,i have serial console cable and putty software with me anything required other than this.

Thanks in advance.
Photo of venkatesh siddina

venkatesh siddina

  • 190 Points 100 badge 2x thumb
Hi Ram, I connected console cable laptop and switch and gave ip address in putty and same in laptop to but no use,can u pls help me on this.
Thanks in advance
Photo of venkatesh siddina

venkatesh siddina

  • 190 Points 100 badge 2x thumb
Hello,i gave ip address 192.168.10.x /24 in my pc and in putty i gave 192.168.10.x i was able to login the putty but getting network fatal error.
Please help on this,Thanks in advance.
Photo of Ram

Ram, Employee

  • 1,450 Points 1k badge 2x thumb
Did you try with a different switch and verify if it is working? Did you try to reinstall the putty application? Any firewall installed?
Photo of venkatesh siddina

venkatesh siddina

  • 190 Points 100 badge 2x thumb
Yes Ram , i reinstalled the putty but no luck,what i did is connected cable pc to switch and installed putty and checked serial and tried opening it,it is not responding.

Please help me out .Thanks in advance.
Photo of Erik Auerswald

Erik Auerswald, Embassador

  • 13,170 Points 10k badge 2x thumb
Hi,

could you be more specific as to what exaclty you did? What kind of cable connected between which interfaces exaclty?

If you tried a serial connection, did you verify that you used the correct name for the serial port? On Windows, you can use the hardware manager to find out which name(s) is (are) used for the serial port(s). USB to serial converters often use different names (resp. numbers).

Erik