Switch Configurations – RoCE and iWarp Reference Guide
Notes, cautions, and warnings
Notes, cautions, and warnings
About copying commands from this guide
About copying commands from this guide
To address this known limitation, do one of the following:
- Paste the copied commands into a text editor and remove the line breaks.
- Use the HTML version of this document when you are copying commands.
Revision history
Revision history
The revision history of the document is listed in the following table.
| Date | Document revision | Description of changes |
| April 2026 | 5 |
|
| May 2025 | 4 | Updates due to product rebranding |
| March 2025 | 3 | Updates due to feedback |
| January 2025 | 2 | Updates related to release |
| March 2023 | 1 | Updates not documented |
| March 2022 | 0 | Initial publication |
Reference Guide
Reference Guide
Switch configuration recommendations for Mellanox, Intel E810, and Broadcom
This guide consists of switch configuration recommendations for all Mellanox, Intel E810, and Broadcom based deployments.
Mellanox, Intel E810, and Broadcom based deployments
Dell Technologies recommends that you use DCB (PFC/ETS) for all Mellanox and Intel E810 based deployments on switch ports that are used for RDMA traffic.
The following table shows topology recommendations for both converged and non-converged deployment configurations.
| Topology | Converged | Non-converged |
| Flow Control | DCB (PFC/ETS) | DCB (PFC/ETS) 1 2 |
| UDP RDMA (RoCE) |
|
|
| iWARP | Intel E810 (iWARP) | Intel E810 (iWARP) |
- Dell Technologies has updated its guidance for all Mellanox and Intel E810-based deployments. If you have existing deployments that followed our earlier guidance, when using Network ATC with Azure Stack HCI OS 23H2 and later, we recommend that you configure PFC/ETS for all RDMA ports, including the ones using Qlogic 41262 cards with iWarp traffic.
- For brownfield deployments where DCB is already configured on the switch, changing the cluster-traffic priority to 7 is optional.
- Historically, Dell Technologies used Priority 5 for cluster traffic. Microsoft supports both Priority 5 and Priority 7. This guide references Priority 5, but Priority 7 is also supported. You can implement either priority.
ToR switches
Top-of-rack (ToR) switches that are used in Azure Local instance deployments and that forward RDMA storage-network traffic must be listed in the Azure Local ToR switch list on the Microsoft page: Physical network requirements for Azure Local > Network switches for Azure Local.
Dell Networking S4112F-ON switch
Sample configurations for Dell Networking S4112F-ON switch in Mellanox and Intel E810-based deployments
| S4112F-ON (TOR1) | S4112F-ON (TOR2) |
|
|
|
|
|
|
| S4112F-ON (TOR1) | S4112F-ON (TOR2) |
|
|
| S4112F-ON (TOR1) | S4112F-ON (TOR2) |
|
|
Dell Networking S4148F-ON switch
Sample configurations for Dell Networking S4148F-ON switch in Mellanox and Intel E810-based deployments
| S4148F-ON (TOR1) | S4148F-ON (TOR2) |
|
|
|
|
|
|
| S4148F-ON (TOR1) | S4148F-ON (TOR2) |
|
|
| S4148F-ON (TOR1) | S4148F-ON (TOR2) |
|
|
Dell Networking S5212F-ON switch
Sample configurations for Dell Networking S5212F-ON switch in Mellanox and Intel E810-based deployments
| S5212F-ON (TOR1) | S5212F-ON (TOR2) |
|
|
|
|
|
|
|
|
| S5212F-ON (TOR1) | S5212F-ON (TOR2) |
|
|
| S5212F-ON (TOR1) | S5212F-ON (TOR2) |
|
|
Dell Networking S5148F-ON switch
Sample configurations for Dell Networking S5148F-ON switch in Mellanox and Intel E810-based deployments
| S5148F-ON (TOR1) | S5148F-ON (TOR2) |
|
|
|
|
|
|
|
|
| S5148F-ON (TOR1) | S5148F-ON (TOR2) |
|
|
| S5148F-ON (TOR1) | S5148F-ON (TOR2) |
|
|
Dell Networking S5232F-ON switch
Sample configurations for Dell Networking S5232F-ON switch in Mellanox and Intel E810-based deployments
| S5232F-ON (TOR1) | S5232F-ON (TOR2) |
|
|
|
|
|
|
|
|
| S5232F-ON (TOR1) | S5232F-ON (TOR2) |
|
|
| S5232F-ON (TOR1) | S5232F-ON (TOR2) |
|
|
Dell Networking S5248F-ON switch
Sample configurations for Dell Networking S5248F-ON switch in Mellanox and Intel E810-based deployments
| S5248F-ON (TOR1) | S5248F-ON (TOR2) |
|
|
|
|
|
|
|
|
| S5248F-ON (TOR1) | S5248F-ON (TOR2) |
|
|
| S5248F-ON (TOR1) | S5248F-ON (TOR2) |
|
|
Switch security and other settings
The following switch settings are generic settings that a customer or Dell Services personnel may require during a switch configuration or deployment. Many of the commands are related to switch environment security. Use these commands and settings only if required for a given environment.
Backup switch license
!!!
!!! REQUIRED - Backup license
!!!
! license is located in base OS /mnt/license
! copy license to management VM and provide to customer
! usb key mounts to base OS /mnt/usb
! alternatively one can use SCP or other protocols if the network is available
! below command assumes USB key is inserted
system "sudo -i"
cp /mnt/license/<SVCTAG>.lic /mnt/usb
exit
Disable support assist
!!!
!!! REQUIRED - EULA reject
!!!
eula-consent support-assist reject
! confirm EULA reject
FIPS compliance
crypto fips enable
! confirm fips enablement
Set Daylight Saving time
! by default this has been set to Pacific Time Zone US Daylight Saving time.
clock summer-time PDT 2 Sun Mar 02:00 1 Sun Nov 02:00 60
Customer banner MTOD
banner motd #
Insert your own customer banner here.
#
Password update
! enable password <NEW.PASSWORD>
! enable password <NEW.PASSWORD>
! username azsadmin-lmuvl password <NEW.PASSWORD> role network-admin
Password attributes and max-auth-tries
!
password-attributes character-restriction upper 1 lower 1 numeric 1 special-char 1 min-length 15 lockout-period 15 max-retry 3
!
ip ssh server max-auth-tries 3
Login statistics, session timeout, and concurrent session limits
!
login-statistics enable
!
exec-timeout 600
!
login concurrent-session limit 3
SSH server settings
ip ssh server cipher aes256-ctr aes192-ctr aes128-ctr
ip ssh server mac hmac-sha1 hmac-sha2-256
ip ssh server enable
Configure RADIUS servers
! radius-server host <WDS Server IP> key 0 <secret> authentication accounting
! role name Prefix-BMCAdmin
! description Radius authenticated accounts
! rule 1 permit read-write
! aaa group server radius Prefix-BMCAdmin
! server <IP>
! source-interface mgmt0
! aaa authentication login default group <Group>
! aaa accounting default group <Group>
! aaa authentication login mschapv2 enable
TACACS
! feature tacacs+
! tacacs-server key <secret>
! ip tacacs source-interface mgmt0
! tacacs-server host <IP>
! aaa group server tacacs+ tacacs
! server <IP>
Configure syslog
! logging server 10.128.0.116 7 facility syslog use-vrf management
! no logging console
Configure syslog source interface
logging source-interface mgmt 1/1/1
Configure logging audit enable
logging audit enable
Configure logging to not display to non-authorized users
logging console disable
Configure unused ports to non-default VLAN
!
interface vlan 2
description "Unused port vlan"
shutdown
!
interface range ethernet 1/1/4-1/1/28,1/1/33-1/1/34
shutdown
switchport access vlan 2
!
Remove access to system command
system-cli disable
Remove default user admin
no username admin
Reset password of Linux user linuxadmin
system-user linuxadmin password <password>
References
References
Dell Technologies documentation
These links provide more information from Dell Technologies:
- Dell AX Solutions for Microsoft documentation
- Dell AX System for Azure Local specification sheet
- iDRAC documentation
- Azure Local Support Matrix
- For more information about manually configuring iDRAC, see PowerEdge: Support Articles for the iDRAC and the CMC.