UNSOLVED

serbian

updated

3 years ago

Closed

S

serbian

1 Rookie

7 Posts

0

1080

June 16th, 2023 03:00

Configure management access to two VLT Dell Switch

Hi, 

I have configured two Dell S4128t switches in VLT domain in order to migrate servers port from old 1G Brocades to new Dell switches.

I "stack" them via 100g 1/1/25 and 1/1/26 port and make back connection between mgmt 1/1/1on the first and mgmt 1/1/1 on second dell for VLT backup link  (as book said) with IP mgmt ip addresses that belongs to my mgmt vlan.

 Question is, how to configure mgmt access to that to switches because those mgmt port are oob.

I have to access them via old brocade that I am mentioned above via portchanell lacp lag interface btw brocade and dell switches.

I belive it is all about mgmt vrf but I am not sure and familiar with.

 

serbian_0-1686912355745.png

 

 

  • DELL-Chris H

    7 Practitioner

    9682 Posts

    48046 Points

    150

    0

    Posted June 16th, 2023 08:00

    Serbian,

     

    Ideally OOB would be on their own management network, but if you have IP addresses they should be reachable for in band on those ports.Would you confirm what subnet you're trying to manage them from,? I ask as a 172.16.2.x address should be able to reach the management ports.

     

    Let me know. 

     

    DELL-Chris H

    Social Media and Communities Professional

    Dell Technologies | Enterprise Support Services

    #IWork4Dell

    Did I answer your query? Please click on ‘Mark as Accepted Answer’. ‘Thumbs up’ the posts you like!

  • serbian

    1 Rookie

    7 Posts

    125

    0

    Posted June 19th, 2023 00:00

    Hi, 

    I am trying to manage them from management LAN 172.16.2.x/24. This is a LAN for managing all devices in infrastructure.

    Those two management ports: 1/1/1 of first Dell, and 1/1/1 of second Dell are connected between themself with short network cable for VLT backup link purpose.

    First management 1/1/1 port on Dell have IP address 172.16.2.11/24

    Second management 1/1/1 port on Dell have  IP address 172.16.2.12/24

    On the scheme above, I have RA_VPN configured on router and from them I have access to management network 172.16.2.0/24 for entire organisation.

    How should my configuration need lookalike so I can be able to access those two dell switch on their management ports? So, my management request came from router via brocade switch, thru portchanell between old brocade and new Dells.

    Am I clear now:

    I tried with vrf:

    https://www.dell.com/support/kbdoc/en-us/000184302/dell-emc-networking-os10-how-to-configure-out-of-band-management#Management-VRF 

    https://www.dell.com/support/kbdoc/en-my/000201924/dell-emc-networking-os10-basic-switch-management-configuration 

     

    DELL1# show running-configuration
    ! Version 10.5.5.3
    ! Last configuration change at Jun 16 11:24:13 2023
    !
    ip vrf default
    !
    iscsi enable
    iscsi target port 860
    iscsi target port 3260
    interface breakout 1/1/25 map 100g-1x
    interface breakout 1/1/26 map 100g-1x

    hostname DELL2
    spanning-tree mode rstp
    spanning-tree rstp priority 4096
    username admin password **** role sysadmin priv-lvl 15 password-expiry 0
    aaa authentication login default local
    aaa authentication login console local
    !
    class-map type application class-iscsi
    !
    policy-map type application policy-iscsi
    !
    interface vlan1
    no shutdown
    !
    interface vlan10
    vlan-name LAN
    no shutdown

    interface vlan100
    vlan-name Management
    no shutdown
    !
    interface vlan200
    vlan-name Novi_Management
    no shutdown
    !
    interface port-channel1
    description Link_ka_Brocade_donja
    no shutdown
    switchport mode trunk
    switchport trunk allowed vlan 10,100,200
    vlt-port-channel 1
    !
    interface mgmt1/1/1
    no shutdown
    no ip address dhcp
    ip address 172.16.2.11/24
    !

  • DELL-Erman O

    Moderator

    2984 Posts

    14874 Points

    120

    0

    Posted June 19th, 2023 02:00

    Hi, please check VLT domain and VLT interconnect, you need to create a VLT domain by the same domain id on each peer sw and set VLTi ports and associate the VLTi LAG to the VLT domain. 

    Dell EMC Networking OS10 How to set up Virtual Link Trunking (VLT) https://dell.to/43Jiidu

    How to set up Virtual Link Trunking (VLT) on Dell Networking OS9 Force10 Switches https://dell.to/3Ni58xd

    DELL-Erman O

    Social Media and Communities Professional

    Dell Technologies | Enterprise Support Services

    #IWork4Dell

    Did I answer your query? Please click on ‘Mark as Accepted Answer’. ‘Thumbs up’ the posts you like!

  • serbian

    1 Rookie

    7 Posts

    119

    0

    Posted June 19th, 2023 04:00

    I have configured VLT domain in the same steps when and VLT backup link. It is fine and work properly.

    I have connected two pc on each switch and I they can ping each other.

    Switch are still at my desk, not in the production.

    I just have problem accessing them to mgmt port via ssh.

    Other thing, when I create for example IP interface vlan on switch, i can ssh to that IP.

    But can not do the same with mgmt port.

     

  • DELL-Erman O

    Moderator

    2984 Posts

    14874 Points

    118

    0

    Posted June 19th, 2023 05:00

    it could be SSH service is disabled. I would enable SSH service and SSH keys

    OS10# configure terminal
    OS10 (config)# ip ssh server enable
    OS10 (config)# crypto key generate rsa 2048

    DELL-Erman O

    Social Media and Communities Professional

    Dell Technologies | Enterprise Support Services

    #IWork4Dell

    Did I answer your query? Please click on ‘Mark as Accepted Answer’. ‘Thumbs up’ the posts you like!