Document Outline

• Contents (High Level)
• Contents (Detailed)
• Figures
• Tables
• About This Document
  • In this chapter
  • How this document is organized
  • Supported hardware and software
  • Document conventions
    • Text formatting
    • Notes, cautions, and warnings
    • Key terms
  • Notice to the reader
  • Additional information
    • Brocade resources
    • Other industry resources
  • Getting technical help
  • Document feedback
    • Network OS Administration
  • NETCONF Overview
    • In this chapter
    • NETCONF and YANG
    • NETCONF in client/server architecture
    • RPC request
    • RPC reply
    • RPC and error handling
      • Partial success behavior in logical chassis
    • SSH subsystem
    • RFC references
    • NETCONF support in Network OS
  • Basic NETCONF Operations
    • In this chapter
    • Establishing a NETCONF session
    • Hello messages exchange
    • Server capabilities
    • Client capabilities
    • Retrieving configuration data
    • Subtree filtering
    • xpath filtering
    • Retrieving operational data
    • Using custom RPCs
      • Retrieving operational data with pagination
    • Using the custom action mechanism
    • Editing the configuration
    • Managing the configuration
    • Disconnecting from a NETCONF session
• Basic Switch Management
  • In this chapter
  • Basic switch management with NETCONF overview
  • Connecting to the switch
    • Connecting through an SSH session
  • Switch attributes
    • Setting host attributes
    • Obtaining host attribute information
  • Disabling or enabling a chassis
  • Rebooting a Brocade switch
  • Interfaces, slots, and modules
    • Obtaining interface configuration information
    • Obtaining slot and module status information
    • Replacing an interface module
  • Configuring a switch banner
  • supportSave data
    • Uploading supportSave data to an external host interactively
    • Uploading supportSave to an external host using FTP
    • Uploading supportSave to an external host using SCP
    • Saving supportSave data to an attached USB device
    • Enabling or disabling FFDC
  • Syslog server setup
    • Adding syslog servers
    • Modifying the syslog server configuration
    • Importing a syslog CA certificate
    • Removing a syslog CA certificate
    • Removing a syslog server
  • RASlog configuration
    • Brocade VCS Fabric RASlog
    • Displaying the RASlog messages
    • Setting the RASlog severity filter
  • Audit log configuration
• Network Time Protocol
  • In this chapter
  • Time management with NETCONF overview
  • Date and time settings
    • Setting the date and time
  • Time zone settings
    • Setting the time zone
    • Retrieving the current local clock and time zone
    • Removing the time zone setting
  • Network Time Protocol
    • Synchronizing the local time with an external source
    • Retrieving an NTP server IP address
    • Removing an NTP server IP address
• Installing and Maintaining Firmware
  • In this chapter
  • Firmware upgrade with NETCONF overview
  • Preparing for a firmware download
    • Obtaining the switch firmware version
    • Obtaining and decompressing firmware
    • Connecting to the switch
  • Downloading the firmware from a remote server
  • Downloading firmware from a USB device
  • Evaluating a firmware upgrade
    • Downloading firmware to a single partition
    • Commiting the firmware upgrade
    • Restoring the previous firmware version
  • Firmware upgrade in Brocade VCS Fabric mode
• Administering Licenses
  • In this chapter
  • Licensing with NETCONF overview
  • Retrieving the switch license ID
  • Obtaining a license key
  • Installing or removing a license
  • Activating the Dynamic POD feature
  • Obtaining the Dynamic POD assignments
  • Overriding Dynamic POD assignments
    • Reserving a port assignment
    • Releasing a port from a POD set
• SNMP
  • In this chapter
  • SNMP management with NETCONF overview
  • SNMP community strings
    • Adding an SNMP community string
    • Changing the access of a read-only community string
    • Removing an SNMP community string
  • Obtaining SNMP user names
  • SNMP server hosts
    • Setting the SNMP version 1 or 2c server host
    • Setting the SNMP version 3 host
    • Removing the SNMP server host
    • Setting the SNMP server contact
    • Setting the SNMP server location
    • Returning the SNMP configuration
  • Support for multiple SNMP server contexts
    • Setting the SNMP server context
  • Support for password encryption for SNMPv3 users
• Fabric
  • In this chapter
  • Fabric management with NETCONF overview
  • Brocade VCS Fabric configuration management
    • Enabling VCS Fabric mode
    • Disabling VCS Fabric mode
  • Fabric interface configuration management
    • Enabling a fabric ISL
    • Enabling a fabric trunk
    • Disabling a fabric trunk
    • Broadcast, unknown unicast, and multicast forwarding
    • Priorities
    • Obtaining the running configuration
    • Configuring the VCS Fabric virtual IP address
    • Fabric ECMP load balancing
• Metro VCS
  • In this chapter
  • Metro VCS configuration with NETCONF overview
  • Configuring Metro VCS using the long-distance-isl element
    • Disabling a fabric ISL
  • Configuring Metro VCS using standard ISL
  • Configuring vLAGs for distributed Ethernet Fabrics
    • Retrieving Metro VCS configuration
• Administering Zones
  • In this chapter
  • Zoning with NETCONF overview
    • Zone configurations
  • Default zoning access modes
    • Setting the default zoning mode
  • Zone database size
    • Viewing database size information
  • Zone aliases
    • Creating an alias
    • Adding additional members to an existing alias
    • Removing a member from an alias
    • Deleting an alias
  • Zoning information
    • Retrieving the defined configuration
    • Retrieving the enabled configuration
  • Zone creation and management
    • Creating a zone
    • Adding a member to a zone
    • Removing a member from a zone
    • Deleting a zone
  • Zone configuration management
    • Creating a zone configuration
    • Adding a zone to a zone configuration
    • Removing a zone from a zone configuration
    • Enabling a zone configuration
    • Disabling a zone configuration
    • Deleting a zone configuration
    • Clearing changes to a zone configuration
    • Clearing all enabled-zone configurations
    • Saving a copy of the zone configuration
    • Restoring a configuration from backup
  • Zone configuration scenario
• Configuring Fibre Channel Ports
  • In this chapter
  • Fibre Channel ports configuration with NETCONF overview
  • Fibre Channel port attributes
  • Retrieving the Fibre Channel port configuration
  • Fibre Channel port activation and deactivation
    • Enabling a Fibre Channel port
    • Disabling a Fibre Channel port
  • Setting Fibre Channel port speed
  • Configuring a Fibre Channel port for long distance operation
  • Configuring a Fibre Channel port for trunking
  • Retrieving Fibre Channel interface information
• System Monitor Configuration
  • In this chapter
  • System Monitor configuration with NETCONF overview
  • FRU monitoring
    • Setting system thresholds
    • Setting FRU state alerts and actions
    • Obtaining the switch health status
    • Obtaining the system monitoring configuration
  • Alert notifications
    • Configuring e-mail alerts
    • Forwarding e-mail messages to a relay server
  • Resource monitoring
    • Configuring memory monitoring
    • Configuring CPU monitoring
    • Obtaining the threshold monitoring configuration
  • Security monitoring
    • Displaying security monitoring default values
    • Configuring security monitoring
  • Interface monitoring
    • Displaying interface monitoring default values
    • Configuring interface monitoring
• VMware vCenter
  • In this chapter
  • vCenter management with NETCONF overview
  • Configuring vCenter
    • Step 1: Enabling QoS
    • Step 2: Enabling CDP/LLDP
    • Step 3: Adding and activating vCenter
    • Step 4: Retrieving the discovered virtual assets
• Configuring Remote Monitoring
  • In this chapter
  • RMON configuration with NETCONF overview
  • RMON configuration and management
    • Default RMON configuration
    • Configuring RMON alarm settings
      • Network OS Security Configuration
• Managing User Accounts
  • In this chapter
  • Managing user accounts with NETCONF overview
  • User accounts
    • Default accounts in the local switch user database
    • Creating and modifying a user account
  • Role-based access control
    • Default roles
    • User-defined roles
  • Command access rules
    • Configuring a placeholder rule
    • Configuration examples
  • Password policies
    • Password strength policy
    • Password encryption policy
    • Account lockout policy
    • Password interaction with remote AAA servers
    • Managing password policies
  • Security event logging
• External Server Authentication
  • In this chapter
  • Remote server authentication with NETCONF overview
  • Login authentication mode
    • Setting and verifying the login authentication mode
  • RADIUS
    • Adding a RADIUS server to the client’s server list
    • Modifying the RADIUS server configuration
    • Removing a RADIUS server from a client’s server list
    • Configuring the client to use RADIUS for login authentication
  • TACACS+
    • Adding a TACACS+ server to the client’s server list
    • Modifying the TACACS+ server configuration
    • Removing a TACACS+ server from a client’s server list
    • Configuring the client to use TACACS+ for login authentication
  • TACACS+ accounting
    • Enabling login accounting
    • Enabling command accounting
    • Disabling accounting
  • LDAP
    • Server authentication
    • FIPS compliance
    • Client-side Active Directory server configuration
    • Active Directory groups
• Fabric Authentication
  • In this chapter
  • Fabric authentication with NETCONF overview
  • Device authentication configuration
    • Configuring DH-CHAP shared secrets
    • Setting the authentication policy parameters
    • Activating the authentication policy
  • Switch Connection Control policy configuration
    • Creating a defined SCC policy
    • Modifying the SCC policy
    • Activating the SCC policy
    • Removing the SCC policy
      • Network OS Layer 2 Switch Features
• Administering Edge-Loop Detection
  • In this chapter
  • Edge-loop detection overview
  • Configuring edge-loop detection
    • Setting global ELD for a Brocade VCS fabric cluster
    • Setting interface parameters on a port
  • Edge-loop detection troubleshooting
• Configuring AMPP
  • In this chapter
  • AMPP configuration with NETCONF overview
  • Configuring AMPP port-profiles
    • Configuring a new port-profile
    • Configuring VLAN profiles
    • Configuring FCoE profiles
    • Configuring QoS profiles
    • Configuring security profiles
    • Disassociating a port-profile from a MAC address
    • Deleting a port-profile
    • Deleting a subprofile
  • Obtaining the AMPP operational data
    • Obtaining the port-profile status
    • Obtaining interface to port-profile mapping
  • Configuring a port-profile-port
    • Configure the port-profile-port on the physical interface.
    • Association of multiple port-profiles with an interface
    • Deleting a port-profile-port
  • Configuring port-profile-domains
    • Configuring the basic port-profile-domain
    • Adding the port-profile to the port-profile-domain
    • Deleting a port-profile from the port-profile-domain
    • Deleting a port-profile-domain
    • Obtaining the port-profile-domain status
• Configuring FCoE Interfaces
  • In this chapter
  • FCoE configuration with NETCONF overview
  • Configuring FCoE interfaces
    • Assigning an FCoE map onto an interface
    • Assigning an FCoE map onto a LAG member
  • Obtaining FCoE status
    • Obtaining FCoE port interface information
    • Obtaining FCoE login information
• Configuring VLANs
  • In this chapter
  • VLAN configuration with NETCONF overview
  • VLAN configuration and management
    • Enabling and disabling an interface port
    • Configuring the MTU on an interface port
    • Creating a VLAN interface
    • Enabling STP on a VLAN
    • Disabling STP on a VLAN
    • Configuring an interface port as a Layer 2 switch port
    • Configuring an interface port as an access interface
    • Configuring an interface port as a trunk interface
    • Disabling a VLAN on a trunk interface
  • Configuring protocol-based VLAN classifier rules
    • Configuring a VLAN classifier rule
    • Configuring MAC address-based VLAN classifier rules
    • Creating a VLAN classifier group and adding rules
    • Deleting a VLAN classifier rule
    • Activating a VLAN classifier group with an interface port
    • Obtaining VLAN information
  • Configuring the MAC address table
    • Specifying or disabling the aging time for MAC addresses
    • Adding static addresses to the MAC address table
  • Private VLANs
    • Configuring a private VLAN
    • Configuring a community PVLAN
    • Configuring an isolated PVLAN
    • Displaying PVLAN information
• Configuring VXLANs
  • In this chapter
  • VXLAN configuration with NETCONF overview
  • VXLAN configuration and management
    • High-level communication in a VXLAN environment
    • Configuring the VXLAN Gateway
    • Configuring the NSX Controller
    • Displaying VXLAN information
• Configuring Virtual Fabrics
  • In this chapter
  • Virtual Fabric configuration with NETCONF overview
    • Configuring a Virtual Fabric instance
    • Configuring additional Layer 2 Virtual Fabric features
    • Configuring MAC groups
  • Transport service
    • Configuring transport service ID on a VLAN
• Configuring Spanning Tree Protocols
  • In this chapter
  • Spanning tree configuration with NETCONF overview
  • Configuring STP
  • Configuring RSTP
  • Configuring MSTP
  • Configuring PVST and Rapid PVST
  • Spanning tree configuration and management
    • Enabling STP, RSTP, MSTP, PVST, or Rapid PVST
    • Disabling STP, RSTP, MSTP, PVST, or Rapid PVST
    • Stopping STP, RSTP, MSTP, PVST, or Rapid PVST globally
    • Specifying the bridge priority for all xSTP
    • Specifying the bridge priority on a per-VLAN basis
    • Specifying the bridge forward delay for all xSTP
    • Specifying bridge forward delay on a per-VLAN basis
    • Specifying the bridge maximum aging time for all xSTP
    • Specifying the bridge maximum aging time
    • Enabling the error disable timeout timer for all xSTP
    • Specifying the error disable timeout interval for all xSTP
    • Specifying the port-channel path cost for all xSTP
    • Specifying the bridge hello time for all xSTP
    • Specifying the bridge hello time per VLAN (PVST or RPVST)
    • Specifying the transmit hold count
    • Enabling Cisco interoperability (MSTP)
    • Disabling Cisco interoperability (MSTP)
    • Mapping a VLAN to an MSTP instance
    • Specifying the maximum number of hops for a BPDU (MSTP)
    • Specifying a name for an MSTP region
    • Specifying a revision number for MSTP configuration
  • Retrieving spanning tree-related information
  • Configuring all xSTP on DCB interface ports
    • Enabling automatic edge detection (RSTP, MSTP, or RPVST)
    • Configuring the path cost for all xSTP
    • Configuring the path cost per VLAN (PVST or Rapid PVST)
    • Enabling a port (interface) as an edge port
    • Enabling the guard root (STP and RSTP)
    • Enabling the guard root per LAN (PVST and Rapid PVST)
    • Specifying the MSTP hello time
    • Specifying restrictions for an MSTP instance
    • Specifying a link type
    • Enabling port fast (STP and PVST)
    • Specifying the port priority
    • Specifying the port priority per VLAN (PVST and Rapid PVST)
    • Restricting the port from becoming a root port (MSTP)
    • Restricting the topology change notification (MSTP)
    • Enabling spanning tree
    • Disabling spanning tree
• Configuring UDLD
  • In this chapter
  • Overview of UDLD and NETCONF
  • Configuring UDLD
    • Disabling UDLD
    • Retrieving UDLD statistics
• Configuring Link Aggregation
  • In this chapter
  • Link aggregation with NETCONF overview
  • Configuring a vLAG
  • Configuring the vLAG ignore split option
    • Configuring the load balancing feature
  • LACP configuration and management
    • Enabling LACP on a DCB interface
    • Configuring the LACP system priority
    • Configuring the LACP timeout period on a DCB interface
• Configuring LLDP
  • In this chapter
  • LLDP configuration with NETCONF overview
  • Enabling and disabling LLDP
    • Enabling LLDP globally
    • Disabling and resetting LLDP globally
  • Configuring LLDP global options
    • Specifying a system name and LLDP description
    • Configuring the transmission of LLDP frames
    • Configuring the transmit frequency of LLDP frames
    • Configuring the hold time for receiving devices
    • Advertising the optional LLDP TLVs
    • Configuring the advertisement of LLDP DCBX-related TLVs
    • Configuring iSCSI priority
    • Configuring LLDP profiles
    • Configuring the iSCSI profile
    • Deleting an LLDP profile
  • Configuring LLDP interface-level options
• Configuring ACLs
  • In this chapter
  • ACL configuration with NETCONF overview
  • Default ACL configuration
  • ACL configuration and management
    • Creating a standard MAC ACL and adding rules
    • Creating an extended MAC ACL and adding rules
    • Applying a MAC ACL to a DCB interface
    • Applying a MAC ACL to a VLAN interface
    • Modifying MAC ACL rules
    • Removing a MAC ACL
    • Obtaining the MAC ACL applied to an interface
  • IP ACL
    • Creating a standard IP or IPv6 ACL
    • Creating an extended IP or IPv6 ACL
    • Applying an IP or IPv6 ACL to a management interface
    • Applying an IP ACL to a data interface
    • Binding an ACL in standalone mode or fabric cluster mode
    • Obtaining the IP or IPv6 ACL configuration
• Configuring QoS
  • In this chapter
  • QoS configuration under NETCONF overview
  • Standalone QoS
  • Rewriting
  • Queueing
    • User-priority mapping
    • Traffic class mapping
  • Congestion control
    • Tail drop
    • Configuring CoS thresholds
    • Random Early Detection
    • Ethernet Pause
    • Ethernet Priority Flow Control
  • Multicast rate limiting
    • Creating a receive queue multicast rate-limit
  • Broadcast, unknown unicast, and multicast storm control
    • Configuring BUM storm control
  • Scheduling
    • Scheduling the QoS queue
    • Multicast queue scheduling
  • Data Center Bridging map configuration
    • Creating a CEE map
    • Defining a priority group table
    • Defining a priority-table map
    • Applying a CEE provisioning map to an interface
    • Verifying the CEE maps
  • Brocade VCS Fabric QoS
    • Configuring Brocade VCS Fabric QoS
  • Restrictions for Layer 3 features in VCS mode
  • Port-based Policier
    • Configuring Policer functions
    • Configuring a class map
    • Configuring a police priority map
    • Configuring the policy map
    • Binding the policy map to an interface
    • Retrieving policing settings and policy maps
  • Configuring Auto-QOS
• Configuring 802.1x Port Authentication
  • In this chapter
  • 802.1x port authentication with NETCONF overview
  • 802.1x authentication configuration tasks
    • Configuring authentication between the switch and CNA or NIC
    • Setting a global timeout value for performing readiness checks
    • Disabling 802.1x globally
  • Interface-specific administrative tasks for 802.1x
    • 802.1x readiness check
    • Configuring 802.1x on specific interface ports
    • Configuring 802.1x timeouts on specific interface ports
    • Configuring 802.1x re-authentication on interface ports
    • Configuring 802.1x port-control on specific interface ports
    • Disabling 802.1x on specific interface ports
  • Checking 802.1x configurations
• Configuring sFlow
  • In this chapter
  • sFlow configuration with NETCONF overview
  • Configuring the sFlow protocol globally
  • Interface-specific administrative tasks for sFlow
    • Enabling and customizing sFlow on specific interfaces
    • Disabling sFlow on specific interfaces
  • Flow-based sFlow
    • Configuring flow-based sFlow
    • Disabling flow-based sFlow on specific interfaces
    • Retrieving flow-based sFlow statistics
• Configuring Switched Port Analyzer
  • In this chapter
  • SPAN configuration with NETCONF overview
  • Configuring ingress SPAN, egress SPAN, or bidirectional SPAN
  • Deleting a SPAN connection from a session
  • Deleting a SPAN session
  • SPAN in management cluster
  • Configuring RSPAN
    • Network OS Layer 3 Routing Features
• IP Route Policy
  • In this chapter
  • IP route policy configuration with NETCONF overview
  • Configuring an IP prefix list
  • Configuring a route map
  • Configuring and activating an IP route policy
• IP Route Management
  • In this chapter
  • IP route management with NETCONF overview
  • Configuring static routes
    • Specifying the next hop gateway
    • Specifying the egress interface
    • Configuring the default route
  • Other routing operations
    • Specifying route attributes
    • Enabling IP load sharing
    • Resolving the next hop using an OSPF route
    • Using recursion to resolve the next hop
• Configuring OSPF
  • In this chapter
  • OSPF configuration with NETCONF overview
  • OSPF over VRF
  • OSPF in a VCS environment
  • Performing basic OSPF configuration
    • OSPF configuration rules
    • Enabling and disabling OSPF on the router
    • Assigning OSPF areas
    • Assigning interfaces to an area
    • Assigning virtual links
    • Changing other settings
• Configuring VRRP
  • In this chapter
  • VRRP and VRRP-E configuration with NETCONF overview
  • VRRP basic configuration example
    • Configuring the master router
    • Configuring the backup router
    • VRRP-E differences for basic configuration
  • Enabling preemption
    • Enabling preemption for physical Ethernet or port-channel
    • Enabling preemption for a VE interface
  • Configuring the track priority
    • Configuring track priority for physical Ethernet or port-channel
    • Configuring track priority for a VE link interface
  • Enabling short-path forwarding (VRRP-E only)
  • Configuring a multigroup virtual router cluster
    • Configuring Router 1 as master for first virtual router group
    • Configuring Router 1 as backup for second virtual router group
    • Configuring Router 2 as backup for first virtual router group
    • Configuring Router 2 as master for second virtual router group
  • Verifying VRRP and VRRP-E configuration
• Configuring VRF
  • In this chapter
  • VRF configuration with NETCONF overview
  • Configuring VRF
    • Enabling VRRP for VRF
• Configuring BGP
  • In this chapter
  • BGP configuration with NETCONF overview
  • Configuring BGP
    • Enabling BGP on an RBridge
    • Disabling BGP on an RBridge
    • Configuring BGP global mode
    • Configuring IPv4 unicast address family
• Configuring IGMP
  • In this chapter
  • IGMP configuration with NETCONF overview
  • Configuring IGMP snooping
  • Configuring IGMP snooping querier
  • Monitoring IGMP snooping
• Configuring DHCP Relay
  • In this chapter
  • DHCP Relay configuration with NETCONF overview
  • Configuring DHCP Relay
    • DHCP server and client interface on different VRF instances
  • Removing the DHCP Relay address
  • Verifying configuration information
• Appendixes
  • Managing NETCONF
    • In this appendix
    • Viewing NETCONF client capabilities
    • Viewing NETCONF statistics and session information
• Index