Hello,

I'm trying to access to my switch using SSH. The ssh server is up and running, but cannot connect to it. The ssh connection starts, but get stuck, without providing the password prompt.

I've tried many configurations, without success.

Here is my last configuration, any advice?

username "admin" password xxxxxxxxxxxx privilege 15 encrypted
aaa authentication login "localmethod" local
line ssh
login authentication localmethod
exit
ip ssh server
ip ssh protocol 2

DSA and RSA keys have been already generated.

I have the issue on 2 different devices, runnning firmware 6.3.0.9.

Thanks!

Hey everyone, I'm new to Dell switches and am trying to troubleshoot several issues and concerns for a N3048P stack. We've got a few counters that are increasing but wanted some clarification on their meaning. I can't seem to find anything "definitive" from searches on Google and within the forum.

On most of our interfaces, the Total Received Packets Not Forwarded counters are slowly increasing with Unacceptable Frame Type normally matching it. (Increases by 2-4 per second.) A few searches and posts seem to indicate that this originates from from Spanning-tree or interfaces receiving (un)tagged packets that do not match the configuration. (Ex. tagged VLAN 500 packet where the interface specifies it should be untagged.) While we have had issues with Spanning-tree configuration on the stack in getting it to work with a Cisco 6509 that feeds it, it's also possible that we may not have correctly set up all ports in regard to access/general/trunk. Is Unacceptable Frame Type a "catch-all" for both of these issues, or is it specific to just one?

We have several interfaces connected to some Aruba APs. These interfaces display a (very gradual) increase in counters for Total Packets Received with MAC Errors. I can't seem to find any explanation on what this indicates. (They also increase with Total Received Packets Not Forwarded.)

Here's an example of interface output for just frame type and its config:

OurSwitch#show interfaces gigabitethernet 2/0/9

Interface Name : .............................. Gi2/0/9
SOC Hardware Info :............................ BCM56340_A0
Link Status : ................................. Up
VLAN Membership Mode: ......................... Trunk Mode
VLAN Membership: .............................. (1),100,200,300-301,333,500,503,
600-602,700-701,706,921,977,991,
1400,1768,1801,1921
MTU Size : .................................... 1518
Port Mode [Duplex] : .......................... Full
Port Speed : .................................. 1000
Link Debounce Flaps : ......................... 0
Auto-Negotation Status : ...................... Auto
Total Packets Received Without Errors.......... 294192292
Unicast Packets Received....................... 260526055
Multicast Packets Received..................... 33298359
Broadcast Packets Received..................... 367878
Total Packets Received with MAC Errors......... 0
Jabbers Received............................... 0
Fragments/Undersize Received................... 0
Alignment Errors............................... 0
FCS Errors..................................... 0
Overruns....................................... 0
Total Received Packets Not Forwarded........... 24780969
Total Packets Transmitted Successfully......... 1559085703
Unicast Packets Transmitted.................... 837319714
Multicast Packets Transmitted.................. 277449678
Broadcast Packets Transmitted.................. 444316311
Transmit Packets Discarded..................... 3750
Total Transmit Errors.......................... 0
Total Transmit Packets Discarded............... 3750
Single Collision Frames........................ 0
Multiple Collision Frames...................... 0
Excessive Collision Frames..................... 0

OurSwitch#show run interface gigabitethernet 2/0/9

!
interface Gi2/0/9
description "Neeeeeerrrrrrdddd"
switchport mode trunk
switchport trunk allowed vlan 1,100,200,300-301,333,500,503,600-602,700-701,706,921,977,991,1400,1768,1801,1921
exit
!

(From my switch, a Cisco 3560CG which connects to this interface)

!
interface GigabitEthernet0/10
description OurSwitch G2/0/9
switchport trunk encapsulation dot1q
switchport trunk allowed vlan 100,200,300,301,333,500-503,600-602,700
switchport trunk allowed vlan add 701,706,921,977,991,1400,1768,1801,1921
switchport mode trunk
end

Here's an example of statistics output for MAC errors:

OurSwitch#show statistics gigabitethernet 2/0/45

Total Packets Received (Octets)................ 94248692
Packets Received 64 Octets..................... 3957
Packets Received 65-127 Octets................. 464550
Packets Received 128-255 Octets................ 76837
Packets Received 256-511 Octets................ 17164
Packets Received 512-1023 Octets............... 979
Packets Received 1024-1518 Octets.............. 11622
Packets Received > 1518 Octets................. 7268
Packets RX and TX 64 Octets.................... 956447
Packets RX and TX 65-127 Octets................ 1904727
Packets RX and TX 128-255 Octets............... 1046452
Packets RX and TX 256-511 Octets............... 280204
Packets RX and TX 512-1023 Octets.............. 53576
Packets RX and TX 1024-1518 Octets............. 68709
Packets RX and TX 1519-2047 Octets............. 3634
Packets RX and TX 2048-4095 Octets............. 0
Packets RX and TX 4096-9216 Octets............. 0

Total Packets Received Without Errors.......... 575109
Unicast Packets Received....................... 552940
Multicast Packets Received..................... 22148
Broadcast Packets Received..................... 21
Receive Packets Discarded...................... 4

Total Packets Received with MAC Errors......... 3634
Jabbers Received............................... 0
Fragments/Undersize Received................... 0
Alignment Errors............................... 0
FCS Errors..................................... 0
Overruns....................................... 0

Total Received Packets Not Forwarded........... 3638
802.3x Pause Frames Received................... 0
Unacceptable Frame Type........................ 4

Total Packets Transmitted (Octets)............. 574887327
Packets Transmitted 64 Octets.................. 952490
Packets Transmitted 65-127 Octets.............. 1440177
Packets Transmitted 128-255 Octets............. 969615
Packets Transmitted 256-511 Octets............. 263040
Packets Transmitted 512-1023 Octets............ 52597
Packets Transmitted 1024-1518 Octets........... 57087
Packets Transmitted > 1518 Octets.............. 0
Max Frame Size................................. 1518

I would appreciate any input as to what these counters may mean. We will be upgrading the firmware from 6.2 to 6.3 tonight after reading that Total Received Packets Not Forwarded may just be a "cosmetic issue," but I would like to understand them as much as possible.

hi,

is it possible to have both dot1x & ACL on the same one port?

and which one goes first?

would an ACL allow a MAC (supplicant without dot1) on a port with "dot1x port-control mac-based" ?

best regards

Hello,

I have a Dell PowerConnect 6224 and wish to configure a route redistribution filter for static routes into OSPF. The problem is that the layer 3 switch is on a production network and I don't have much space for error.

On Cisco I would configure a standard ACL and then apply it to the OSPF config using the distribute-list command. Now on Dell I have no idea on how to create this ACL since it asks me for protocol, source and destination IP (extended acl) and all I wanna do is block a single prefix.

Here are this week's top-rated support articles based on accuracy, usefulness, & ease of understanding: 

• Windows Server: Slow network performance on Hyper-V virtual machines with Virtual Machine Queue (VMQ) enabled
• Exporting RAID controller logs using PercCLI on 13G PowerEdge servers running VMware ESXi
• How to set up and manage iDRAC6 and Lifecycle Controller on 11G PowerEdge servers
• Force10 S60 switch: L2 multicast traffic is flooded in the VLAN when no receivers are present
• Understanding HDD types, RAID, & PERC controllers on PowerEdge tower, rack, & blade servers

Hi all,

This may seem trivial to most of you, but i am still wrapping my head around the dells.

I have just noticed that my vlan traffic that is trunking over a LAG has the egress rule for vlans as untagged.

I used the switchport mode trunk and allowed the vlans needed on both ends, coming from Cisco this was all that really needed to be done.

What else do i need to do on the dells to tag the VLAN traffic and can it be done during production without any down time?

Thanks in advanced!

That's not a huge amount of discards given how long the port has been up but its still indicating some network congestion.  I've noticed this on several trunks and was wondering if anyone thought it excessive?  

Thanks for any comments! 

I have a switch configured with dual vlans ( data/voice   ).

I have a PC, and I need to  manually assign an IP from Voice VLAN56.  

But something I'm missing here ( VLAN / general, access mode... )  and I cannot make this happen. 

the switch is Dell N3048 

switchport voice detect auto
spanning-tree portfast
switchport mode general
switchport general pvid 53
switchport general allowed vlan add 53
switchport general allowed vlan add 56 tagged
lldp transmit-tlv sys-desc sys-cap
lldp transmit-mgmt
lldp notification
lldp med confignotification
voice vlan 56
voice vlan data priority untrust

Evening,

I have a bit of a challenge which I'm still trying to get working. I need to rate limit the total traffic, in and out, to two ports. Each port is connected to a firewall, active\active configuration, and the IP addresses are fixed (and as they belong to third party, cannot be changed)

So, I have gigabit port 1 and 2, which need to be limited to 200Mbps total, with client IP addresses 192.168.0.3 and .4 connecting to gateway on 192.168.0.1 on port 24, so a /31 subnet mask doesn't work for matching in ACL or DiffServ, neither does a /30 due to gateway address.

Any suggestions on how this can most effectively be achieved?

--Richard

I tried to enable telnet login to privileged mode on a powerconnect 8132f. I did the following configurations:

aaa authentication enable default enable

line console 

enable authentication default

I did the configurations via a serial port connection. After a while, I got logged out from the privileged mode. And now it expects a password. What is this password? Is there a default one?

Thanks for help!

Running a total of 8 different PowerConnect switches here. Models: 5424, 5324, 5524.

Topology:

The issue at hand is I'm monitoring for STP changes and there are constant topology changes occurring, maybe 15-20 times a day, but none of the root bridge ID's are changing. They stay the same (NSW001.)

When using show spanning-tree it is showing the number of topology changes increasing but the "last changed occurred" is not. In the below example, this switch has had easily 50 topology changes this week alone.

Example.

Number of topology changes 336969 last change occurred 163:49:06 ago
Times: hold 1, topology change 35, notification 2
hello 2, max age 20, forward delay 15

hi,

I have 4 vlans and a number of hosts connected to it - and one oddity, well, it boggles my mind and I cannot see - most likely obvious - reason for this weird situation.

Very last Vlan I created for the moment has no connections to any port, but! - as soon as any one member port goes up - physical link on - then one of the hosts/nodes becomes unavailable to some some part of the network, let me call it hostXX

Vlans:

1        vlan 1          192.168.2.1      255.255.255.0  

2        vlan 2          192.168.3.1      255.255.255.0  

3        vlan 3          172.25.12.201    255.255.255.0  # here is Vlan which when a port is active then ...

4        vlan 4          10.5.6.1         255.255.255.0  

and that hostXX's routing:

Kernel IP routing table

Destination     Gateway         Genmask         Flags Metric Ref    Use Iface

0.0.0.0         10.5.6.1        0.0.0.0         UG    100    0        0 p3p1

0.0.0.0         192.168.2.100   0.0.0.0         UG    110    0        0 em2

0.0.0.0         131.111.42.62   0.0.0.0         UG    199    0        0 em3

one difference between hostXX and other hosts which remain accessible & unaffected is, other hosts have:

Kernel IP routing table

Destination     Gateway         Genmask         Flags Metric Ref    Use Iface

0.0.0.0         192.168.2.100   0.0.0.0         UG    100    0        0 enp2s0f0

That 192.168.2.100 gateway is a host(not the switch) that connects to external Intranet and switch's 192.168.2.0/24 is the Default Vlan as above.

My wild guess is that hostXX's gateway - 10.5.6.1 is switch's Vlan 4 - being first on kernel routing list, does not do something to manage that traffic from hostXX's 10.5.6.100.

But why would this only happen when there is a link on any member port of Vlan 3 and problem does not exist when no port is active/connected?

many thanks.

We have several 5524P and some 5548P switches. All of them non-stacked powering up Aruba AP105.

We started to replace them today with AP325 and run into problems. This switch has 15 AP105. We replaced the first five without issues. But when we replaced the sixth, it wouldn't power at all.

At first we thought it was a patch cable issue, Did cable testing and everything is showing fine. But neither the new AP nor the old one would power up then.

I kept checking different ports and eventually I found another empty one that would power up the AP. Config is straight forward (single vlan). Tried to play with LLDP settings, but nothing. Updated firmware.

After rebooting, one port came back, but the others one didn't. Power consumption shows each port that works at about 6w. Total power consumption is 91 watts out of 500.

Bad switch? I have a spare and will try to replace it. Just doesn't make any sense... Do I need to configure LLDP-MED options?

TIA.

Here are this week's top-rated support articles based on accuracy, usefulness, & ease of understanding: 

• Windows Server: Slow network performance on Hyper-V virtual machines with Virtual Machine Queue (VMQ) enabled
• Exporting RAID controller logs using PercCLI on 13G PowerEdge servers running VMware ESXi
• How to set up and manage iDRAC6 and Lifecycle Controller on 11G PowerEdge servers
• Force10 S60 switch: L2 multicast traffic is flooded in the VLAN when no receivers are present
• Understanding HDD types, RAID, & PERC controllers on PowerEdge tower, rack, & blade servers

I followed the guide to set up a switchport in General mode on my N2048P to support voice and data vlans on the same port. My IP phones will get a DHCP IP address and I can make calls, however, data devices such as a laptop do not get an IP address via DHCP, and setting a static IP address doesn't work either. Below is my config:

configure
vlan 2-3,7,20-22,30
exit
vlan 2
name "Network"
exit
vlan 3
name "Wireless"
exit
vlan 7
name "Warehouse_PCs/Printers"
exit
vlan 20
name "Wireless_WMS"
exit
vlan 21
name "Wireless_Office"
exit
vlan 22
name "Wireless_Guest"
exit
vlan 30
name "Phones"
exit
ip telnet server disable
hostname "TBG_WHSE_IDF_01A"
slot 1/0 9    ! Dell Networking N2048P
sntp unicast client enable
sntp server 10.2.0.100
clock summer-time recurring USA
clock timezone -5 minutes 0
stack
member 1 9    ! N2048P
exit
ip domain-name "XXXXXX"
no ip http server
ip http secure-server
interface vlan 2
ip address 10.2.2.201 255.255.255.0
exit
ip default-gateway 10.2.2.1
voice vlan
ip ssh server
ip ssh protocol 2
spanning-tree mode pvst
classofservice dot1p-mapping 5 5
cos-queue min-bandwidth 0 0 5 5 10 30 40
!
interface Gi1/0/1
cos-queue strict 5
spanning-tree portfast
switchport mode general
switchport general pvid 7
switchport general allowed vlan add 7
switchport general allowed vlan add 30 tagged
voice vlan 30
voice vlan auth disable
exit
!
interface Gi1/0/47
cos-queue strict 5
spanning-tree portfast
switchport mode general
switchport general pvid 7
switchport general allowed vlan add 7
switchport general allowed vlan add 30 tagged
voice vlan 30
voice vlan auth disable
exit
!
interface Gi1/0/48
switchport mode trunk

Folks,

Can you please advise if this is by design or if this in an 'unintended feature'?

I am in the process of migrating a config from a cisco switch and not having the ability to label the various interfaces is not ideal.

thanks

Hello,

The fan in our Power Connect 2724 has become very loud.

Is there anything we can do to remedy this?  We're concerned with it overheating.

Please advise.

Thank you,

Sharon

Hi there

I have two Force10 S60n's and after a power surge a few weeks back I have some issues with one of them. It's somewhat mysterious so bear with me here.

Over snmp it reported: Status Alert: s60-01 Unit 0 PowerSupply 2 entered ALERT state: down (previous: up)

And in the terminal I see this:

--  Power Supplies  --

Unit   Bay   Status       Type

---------------------------------------------------------------------------

  0     0     up            AC 

  0     1     absent   

There's no active alarms on the switch and no RED or AMBER LED's on front of it. I have green power LED and green PS0 LED and nothing else.

I have replaced the PS1 with a new one with no change of state nor LED on front. When unplugging PS0 or PS1 the switch runs for a few minutes and after that all LED's goes dark but the fans are still running in the PSU's. I have to reseat the PSU and unplug all power and replug it to get it back up. 

Not really sure what's going on here and what do do about it. Have anyone seen a similar state? 

Cheers and thanks

I have a stack with two N1524 (firmware version 6.3.0.18) and on a server OME (versione 2.2.0.2056)

in the devices list i have 2 host with IDRAC Enterprise and a Compellent Scv2020 with a green icon but I have the switch stack with the yellow alert.

I checked each item of the web console but I have seen no warning

Help me ?

Thk

Nicola

I have a Dell PC 5548 in my production environment.  I am attempting to connect a Gallagher 6000 Control Module for our security system.  I can see there is traffic on the port, however, the control module can never communicate with the server on the distant end.  Here is how things are set up:

1.  Communication from the Gallagher 6000 to port 45

2.  LAG out from port 1 to FortiGate Firewall

3.  Through Internet back to FortiGate Firewall

4.  Fortigate Firewall to another PC 5548 to server

Cannot get any communication from the Gallagher beyond the switch.  I can ping the switch from the server at the distant end.  I have contended the problem is with the controller.  However, when I put a Cisco Switch between the Controller and the Dell PC 5548 communication works.

I am not strong in networking and have been given this problem to solve for our production system.  Any and all help would be greatly appreciated!

I can provide any networking information you need that I can gleen from the switch.

Sincerely,

Lee