topic Re: Extreme 5520 VOSS 8.4.1.1 - Telnet/SSH/https connection from end device to mgmt vlan IP in ExtremeSwitching (VSP/Fabric Engine)

Extreme 5520 VOSS 8.4.1.1 - Telnet/SSH/https connection from end device to mgmt vlan IP

kevin_phi — Thu, 23 Sep 2021 21:38:09 GMT

Dear all,

I’m currently testing the last VOSS 8.4.1.1 version on Extreme 5520 switch.

I tried to connect (telnet/ssh/https) to the switch via vlan mgmt interface from my computer (192.168.202.100/24) connected directly on the switch (port 1/24) without success. The mgmt vlan IP doesn’t respond to the ping from computer and vice/versa.

You can see below my basic configuration :

boot config flags sshd
boot config flags telnetd
web-server enable

vlan members remove 1 1/1-1/24,2/1-2/4 portmember
vlan create 202 name "NLS Mgmt VLAN" type port-mstprstp 0
vlan members 202 1/24 portmember
interface Vlan 202
ip address 192.168.202.99 255.255.255.0 0

mgmt vlan 202
mac-offset 0
ip address 192.168.202.99/24
enable

Does someone know if I missed something in the configuration ?

Many thanks

Re: Extreme 5520 VOSS 8.4.1.1 - Telnet/SSH/https connection from end device to mgmt vlan IP

Dilraj_Singh_Kh — Thu, 23 Sep 2021 22:57:55 GMT

Try removing the IP under VLAN interface and then do:

int vlan 202
no enable
enable

Re: Extreme 5520 VOSS 8.4.1.1 - Telnet/SSH/https connection from end device to mgmt vlan IP

Chi — Thu, 30 Sep 2021 05:23:14 GMT

Is your computer plugged into the switch out-of-band management port on the universal 5520 running VOSS? (Sorry, old Nortel/Avaya/Extreme guy, 5520 could be ERS or Universal to me.)

Either way, I’ve had to assign a different IP address for the management port, but on the same subnet as the segmented management VLAN’s IP address.

Something like:

interface Vlan 202
ip address 192.168.202.99 255.255.255.0 0

mgmt vlan 202
ip address 192.168.202.199/24

Re: Extreme 5520 VOSS 8.4.1.1 - Telnet/SSH/https connection from end device to mgmt vlan IP

gfriedl — Tue, 12 Oct 2021 15:46:49 GMT

This looks fine. I would though not specify the mac-offset in both cases and let the node choose a free one.
but can't believe this creates your issue. What does 'show mgmt ip arp" show ?

Re: Extreme 5520 VOSS 8.4.1.1 - Telnet/SSH/https connection from end device to mgmt vlan IP

Thomas_Gfeller — Tue, 12 Oct 2021 17:22:21 GMT

Hi Kevin

As Dilraj already said, i would remove the config from the Interface vlan 202 and only configure the mgmt vlan part. This is how we do it:

vlan create {{ mgmtvlanid }} name {{ mgmtvlanname }} typ port-mstprstp 0

vlan i-sid {{ mgmtvlanid }} 900{{ mgmtvlanid }}

vlan members {{ mgmtvlanid }} 1/24 portmember

no mgmt dhcp-client

mgmt vlan {{ mgmtvlanid }}

Ip address {{ mgmtipaddress }} {{ mgmtsubnetmask }}

enable

ip route 0.0.0.0 0.0.0.0 next-hop {{ mgmtgateway }}

force-topology-ip

exit

Re: Extreme 5520 VOSS 8.4.1.1 - Telnet/SSH/https connection from end device to mgmt vlan IP

poddy — Wed, 13 Oct 2021 01:31:10 GMT

And disable the firewall on your PC.

Re: Extreme 5520 VOSS 8.4.1.1 - Telnet/SSH/https connection from end device to mgmt vlan IP

PaulF2 — Wed, 13 Oct 2021 12:39:08 GMT

I had a similar problem until I added a route in the mgmt VLAN context even though the switch already had a default route.

So in your case try:

mgmt vlan (yes without the VLAN id)
ip route 0.0.0.0/0 next-hop your.router.ip.here

You may find you can then connect.

Re: Extreme 5520 VOSS 8.4.1.1 - Telnet/SSH/https connection from end device to mgmt vlan IP

Ludovico_Steven — Wed, 13 Oct 2021 13:00:22 GMT

Under library, see entry

RE: segmented management on 5520 running VOSS

It has a pdf attached explaining the new VOSS Segmednted Mgmt interface starting from VOSS 8.2.0.0

Re: Extreme 5520 VOSS 8.4.1.1 - Telnet/SSH/https connection from end device to mgmt vlan IP

bfaltys — Wed, 13 Oct 2021 15:55:59 GMT

Is port 1/24 tagging?

vlan ports 1/24 tagging untagall