We created a access management rule on our switch to prevent in-band management, and since then we are getting a lot of the following log entries:

<189> Mar 8 11:17:48 DenCoreSW01-1 MGMT_ACAL[SNMPTask]: macal_api.c(872) 35968 %% macalRuleActionGet(): List does not exist.

This is the configuration we are using to only allow OOB Managment:

management access-list "DenyInBandMGMT"
deny service any priority 1
exit
management access-class DenyInBandMGMT

System Model ID: N4064

Firmware
unit     active
----     -----------
1        6.3.1.13

Can anyone help with preventing these log entries?

Thank you

Hi All,

Currently i'm working in big project we have two blade chassis (switch powerconnect), PowerEdge M360 server, 

connected to TOR DEll switch by external port of powerconnect switch.

from the server to LAN customer it's ok the configuration is done , i already configure vlan 80 for the production , segment ip used is 10.101.x.x

Now the customer ask for the Hearbeat configuration, segment ip is 172.16.X.X, vlan 100

the problem is the server have two internal ports , so to configure the hearbeat i need to create teaming that mean we will have two physical interface and two virtual interface .

for the segment ip 10.101.x.x there is no issue i can ping the other machine in the second chest without issue.

i change the mode of the switch mode simple to mode easy
Configure
Vlan 80
Exit
Vlan 100
exit
Configuration MSTP:
Configure
Enabling MSTP
1. Set the STP operational mode to MSTP.
console(config)#spanning-tree mode mst
2. Create and MST instance and associate it to a VLAN
console(config)#spanning-tree mst configuration
console(config-mst)#instance 10 add vlan 80
console(config-mst)#instance 10 add vlan 100

console(config)#spanning-tree priority 8192
external port are 17,18,19,20 (port 20 are free), port 19 is for hearbeat, (port 17,18 connection with TOR to customer network)
console(config)#interface te1/0/19
console(config-if)#spanning-tree portfast
console(config-if)switchport general allowed add vlan 100 tagged

ip-snooping-mode

interface tengigabitethernet 1/0/17
spanning-tree portfast
exit

interface tengigabitethernet 1/0/18
spanning-tree portfast
exit

feature fip-snooping

interface range tengigabitethernet 1/0/17-18
ip-snooping port-mode fcf
lldp dchx port-role configuration-source
switchport mode general
switchport general allowed vlan add 80 tagged
exit

ip-snooping enable
exit
inter range teng te1/0/1-16
switchport mode general
switchport general allowed vlan add 80,100 tagged
exit

can someone confirm 

For the hearbeat what i prupose for the customer is to connect external port from the powerconnect switch directly to powerconnect switch of the seconde chassis.

i'm affraid i will have a loop, so i will share with u my configuration .

I am new to Dell switches 

We are connecting two 10GB SFP+ ports to pass traffic between our two switches.

The settings on these switches are as follows:

interface ethernet 1/xg2
spanning-tree portfast
mtu 9216
switchport mode general
switchport general allowed vlan add 10,100,200,250-251,3000 tagged

However traffic is not flowing between the two switches, what am i missing here?

Thanks 

Hi community.

I have 2 Stacked N4000 switches, an equallogic SAN and R730 servers.

I am planning to use half of the N4000 for iSCSI traffic and the other half for normal network operations.

Is it possible to setup Jumbo frames (MTU 9216) only for my ports for iSCSI traffic and the rest of the ports have a normal MTU?

I can see that there is a global configuration for MTU's but this would then apply for all ports?

Any help appreciated.

Hello, I understand that this forum related to PowerConnect switches, but anyway I'll try to ask my question here since i didn't find more suitable place.

We have set of Force10 MXL switches configured in stack mode inside Dell m1000e chassis, several of them periodically crashing with following or similar errors related to heatbeat issue:

[12/15 1:52:5] IRC-(irc):CPBLOB:0: ====================================================
[12/15 1:52:5] IRC-(irc):CPBLOB:0:  WARNING: 9 heartbeats not received from peer, BCM link status 1
[12/15 1:52:6] ****** ERROR TME-(chmgr):CPBLOB:0: Error: f10_tmeGetPeerIpAddrByName failed service 56(F10STKMGR) inst 4 

[12/15 1:52:10] IRC-(irc):CPBLOB:0: ====================================================
[12/15 1:52:10] IRC-(irc):CPBLOB:0:  WARNING: 10 heartbeats not received from peer, BCM link status 1
[12/15 1:52:10] IPC-(irc):CPBLOB:0: IPC link with CP slot 0 is in state Yellow - Skewed Heartbeat Packet(s), total missed HB: 10. Collect system status.
[12/15 1:52:11] ****** ERROR TME-(chmgr):CPBLOB:0: Error: f10_tmeGetPeerIpAddrByName failed service 56(F10STKMGR) inst 4 

[12/15 1:52:15] IRC-(irc):CPBLOB:0: ====================================================
[12/15 1:52:15] IRC-(irc):CPBLOB:0:  WARNING: 11 heartbeats not received from peer, BCM link status 1
[12/15 1:52:16] ****** ERROR TME-(chmgr):CPBLOB:0: Error: f10_tmeGetPeerIpAddrByName failed service 56(F10STKMGR) inst 4 

[12/15 1:52:20] IRC-(irc):CPBLOB:0: ====================================================
[12/15 1:52:20] IRC-(irc):CPBLOB:0:  WARNING: 12 heartbeats not received from peer, BCM link status 1
[12/15 1:52:21] ****** ERROR TME-(chmgr):CPBLOB:0: Error: f10_tmeGetPeerIpAddrByName failed service 56(F10STKMGR) inst 4 

[12/15 1:52:25] IRC-(irc):CPBLOB:0: ====================================================
[12/15 1:52:25] IRC-(irc):CPBLOB:0:  WARNING: 13 heartbeats not received from peer, BCM link status 1
[12/15 1:52:25] IPC-(irc):CPBLOB:0: IPC link with CP slot 0 is in state Red - Bad or Dead Connection, total missed HB: 13. Collect system status.
[12/15 1:52:26] ****** ERROR TME-(chmgr):CPBLOB:0: Error: f10_tmeGetPeerIpAddrByName failed service 56(F10STKMGR) inst 4


Main problem that failed switch is not just rebooting, it's hanging in transit state and leaving the stack.
So both switches in stack are showing itself as Master, and we're getting classic split-brain.
We already tried to replace stack cable, failing switch, tried to upgrade firmware, 
currently we're using 9.9

Any thoughts?

Hi,

I have the following relatively simple setup at the moment, mostly configured via the GUI:

* Dell PowerConnect 6248 (current f/w 3.2.0.7, which will be upgraded)
** Ports 1/g1-1/g44 (RJ45) configured as Access Ports, PVID 10.  Connected to these ports are local non-VLAN aware devices.
** Port 1/g46 (SFP) configured as Trunk Port (PVID 8; VIDs 10), reserved for the following

The trunk configuration is for an upcoming connection to another network switch over our provider's infrastructure, where it is passed over a fiber network to a remote office, which is also running networking equipment on VID 10.

The VLAN ID we have been given for the S-TAG is 66.  Their equipment on the remote end will strip the outer VLAN tag, so only VID 10 should be passed through and handled by the remote switch.

So, I assume an example frame egress Port 1/g46 to the provider network should ultimately look like:

[Dest_MAC][Src_MAC][TPID=0x88a8,VID=66][TPID=0x8100,VID=10][...]

and should strip the outer [TPID=0x88a8,VID=66] tag on ingress.

How configuration would I need to accomplish this?

Thanks in advance.

Hello,

I wonder if anyone could shed any light on the following question.

I'm currently reviewing a Dell network topology, however I'm unsure if it's a supported topology. I've found documentation, dated from 2012, which suggests it's not supported. Would anyone know if this has changed? Or have links to any recent documentation which confirms whether it's supported or not?

The topology is as follows:

Any comments/advice would be greatly appreciated.

Many thanks.

Hello. I have a situation where we have 2 separate adjacent office buildings, each on their own internet connection and separate LAN's/VLAN's. The firewalls at each office are Palo Alto firewalls with BGP configured over a MPLS network. This works great for our many other remote offices to connect in. However, we want to physically connect these two particular adjacent buildings by running conduit and fiber between them, in order to increase file transfer speeds between the two adjacent buildings.

So my question is, is there a way to configure our N4032F switches to route a specific subnet/VLAN directly between our adjacent buildings, before that connection reaches the BGP routing on our Palo Alto firewall? We want to route the connection directly from one building to the other without it ever going out to to the BGP/MPLS, and without interrupting the BGP allowing connectivity with our other offices. Does that make any sense?

So Building 1 with VLAN 111 192.168.111.0 wants to connect directly to Building 2 with VLAN 222 192.168.222.0, but without going out over the BGP, while retaining the BGP for connectivity with other offices on the MPLS network.

My first thought is that we would be better served doing this directly off of the Palo Alto's. However, with our threat prevention and url filtering services, we lose the throughout we want to achieve by directly connecting the 2 buildings in the first place. So going this route would require a significant upgrade on our firewalls. We would like to use the N4032F's we already have in place.

Any help is appreciated. Thank you!

Hi

Could you provide VRTX R1-2401 switch 1.0.0.63 frimware download link to me ?

the offical site unable finding it.

ths.

I was trying to reset an N2048P to factory defaults and inadvertently selected the option to reformat the filesystem instead.

Now the switch boots only to a u-boot menu. I tried to reload the firmware via TFTP, but I get an Error: Ethernet external port not connected.

How can I recover this switch?

I'm trying to get a Dell S4048 connected to our network and am having some issues getting the trunk port successfully connected.  I think it's either the port-channel or that the default route isn't assigned correctly.  The Dell S4048 should be in layer 2 mode with all layer 3 traffic being handled by the core.  Interface TenGigabitEthernet 1/25-1/26 are Servers.  Interface TenGigabitEthernet 1/47 is the trunk port

interface TenGigabitEthernet 1/25
no ip address
switchport
spanning-tree pvst edge-port
no shutdown
!
interface TenGigabitEthernet 1/26
no ip address
switchport
spanning-tree pvst edge-port
no shutdown
!

interface TenGigabitEthernet 1/47
description Uplink_to_Core1
no ip address
no shutdown
!

interface Port-channel 1

no ip address
switchport
channel-member TenGigabitEthernet 1/47
no shutdown
!
interface Vlan 1
!untagged TenGigabitEthernet 1/25-1/46
!
interface Vlan 10
name Network_10
no ip address
tagged Port-channel 1
no shutdown
!
interface Vlan 11
name Network_11
no ip address
tagged Port-channel 1
no shutdown
!
interface Vlan 13
name Network_13
no ip address
tagged Port-channel 1
no shutdown
!
interface Vlan 20
name Network_20
no ip address
tagged Port-channel 1
no shutdown
!

management route 0.0.0.0/0 10.1.1.1

Switchy#sh ip route

Codes: C - connected, S - static, R - RIP,
B - BGP, IN - internal BGP, EX - external BGP,LO - Locally Originated,
O - OSPF, IA - OSPF inter area, N1 - OSPF NSSA external type 1,
N2 - OSPF NSSA external type 2, E1 - OSPF external type 1,
E2 - OSPF external type 2, i - IS-IS, L1 - IS-IS level-1,
L2 - IS-IS level-2, IA - IS-IS inter area, * - candidate default,
> - non-active route, + - summary route

Gateway of last resort is not set

Destination Gateway Dist/Metric Last Change
----------- ------- ----------- -----------

switchy#sh vlan

Codes: * - Default VLAN, G - GVRP VLANs, R - Remote Port Mirroring VLANs, P - Primary, C - Community, I - Isolated
O - Openflow
Q: U - Untagged, T - Tagged
x - Dot1x untagged, X - Dot1x tagged
o - OpenFlow untagged, O - OpenFlow tagged
G - GVRP tagged, M - Vlan-stack
i - Internal untagged, I - Internal tagged, v - VLT untagged, V - VLT tagged

NUM Status Description Q Ports
* 1 Active U Te 1/25-1/46
2 Active T Te 1/1-1/24
10 Active T Po1(Te 1/47)
11 Active T Po1(Te 1/47)
13 Active T Po1(Te 1/47)
20 Active T Po1(Te 1/47)
100 Active T Po1(Te 1/47)
101 Active T Po1(Te 1/47)
102 Active T Po1(Te 1/47)
103 Active T Po1(Te 1/47)
110 Active T Po1(Te 1/47)
115 Active T Po1(Te 1/47)
116 Active T Po1(Te 1/47)
254 Active Management T Po1(Te 1/47)

When I attempt to add a route I get an error:

Switchy(conf)#ip route 0.0.0.0/0 10.1.1.1
% Error: Address in the same subnet as management port.

Any assistance would be greatly appreciated.  

Hi all,

I'm planning upgrading my switches to the last FW version.

Below the current fw version and the future i plan to install:

I would like to know if it's possible to upgrade directly from the current version to the last one without going through intermediates one...

Many thanks for your help,

hi, I'm reading docs searching for bits that talk of private vlans and I'd have a question, to be sure.

What is the shortest path to make two ports(same vlan memebers and the only members of the vlan) forward only to each other but NOT to any other ports / vlans?

b.w.

L.

How can I change the default vlan 1 for one of my vlans, for example my vlan 4 that I use to manage the switches on my network, and to manage it from my office while I was on vlan 4.

Hello,

I am in the process of ensuring all of our Switches are updated as far as they can be and wanted to make sure I did this correctly in order to not break our network. Since this is my first time, I had a few potentially amateur questions.

To start with our setup, we have around 20 Dell Switches ranging from 34xx's to 35xx's as well as two 62xx's

The average software version is 2.0.0.40 with a few of the 34xx's showing in the 1.0.1.10 range. My concern is that these are really, really old versions and the switches haven't been updated in close to half a decade.

I know with our router the amount of time between updates was so long that configuration phrasing had changed, commands changed syntax or were removed etc, and I don't want to upgrade and have our config be entirely broken. I dont know if that same thing applies to switches (although I dont see why not) but wanted to check. I am also curious if I need to do intermediate updates or if I can just apply the latest release?

So in summary my questions are.

1. Is it possible that updates after 2.0.0.40 for 35xx series and 1.0.1.10 for 34xx series will break/void the config I have saved for them?

2. Do I need to install updates in any specific order, or any intermediate updates? Can I just simply install the latest update?

I downloaded the latest update for one of these and read through the PDFs included, although they had instructions on HOW to do the updates, it didn't include any warnings or best practices that answered my concerns.

If theres some pertinent information I left out please let me know.

Thanks,

GT

We have 2 PowerConnect 8024F stacked units.  Over the past 2 nights our VMWare hosts have frozen up causing us to have to reboot them.  The common thread is the PowerConnect / EqualLogic storage system.  The logs in both PowerConnect units show the following:

I do not know what is causing this issue.  Has anyone experienced this before and can you give me some insight on where to begin?  Our systems have been running without these issues for the past 3 years on firmware 3.1.4.5 without issues.

Thank you for your help.

Hey everyone, I was wondering if there was a way to schedule a script to run automatically on the N-Series switches. What I am trying to accomplish is a short script that will copy the running configuration of the switch to either a TFTP server or to a USB stick, and I would like for it to execute on a weekly schedule.

I have the script together to copy the files but I cant find any way in the manual to schedule tasks. I was hoping that someone might know how to do this, or if its not possible if there was any other way to accomplish this.

Thank You!

Here are this week's top-rated support articles based on accuracy, usefulness, & ease of understanding:

• Step-by-step install guide for OpenManage Server Administrator 
• Windows Server: DHCP reservations vs. exclusions
• How to offline a hard disk using OpenManage Server Administrator
• Manage QSFP ports on a N4000 Series switch 
• How to properly turn off Windows Firewall in Windows Server 2008 and above

Hello friends,

I have no knowledge of switch configuration, so I've come to you for help, for never working with Dell scwitch primarily.

I have a network already running with some computers, servers and an internet router, all connected in a simple 3com switch.

VLAN is not used.

I need to replace the 3com switch with Dell.

Basically it's disconnecting all 3com and connecting to Dell, so I believe.

But I wanted to connect the Dell 3524 to the 3com first and then go migrating the 3com's cabling to the Dell 3524 bit by bit. Even because 3com does not have enough ports for me to connect to the new servers that are installed.

As far as I'm concerned, I know I can use the UPLINK port between the switches or use a crossover cable using standard ports between switches.

Another detail is the DHCP service that is currently used.

The windows server is what provides the IPs.

Does this switch do DHCP management, do I need to disable this switch management? I know we need SonicWall to be uninhabited.

If I install another DHCP server on the network, using this switch, it works always need to configure anything in swtich, right?

Thank you.

How do I connect a Power Connect 3524 to a single switch?