<span role="presentation" dir="ltr" style="top:13.37%; left:10.65%">Lenovo Flex System Fabric CN4093 10 Gb Converged Scalable Switch</span><span role="presentation" dir="ltr" style="top:18.25%; left:10.65%">User’s Guide</span>

Lenovo CN4093 User Manual

Preface

Additional References

Typographic Conventions

Part 1:. Getting Started

Chapter 1. Switch Administration

Industry Standard Command Line Interface

Establishing a Connection

Using Telnet

Using a Web Browser

Configuring HTTPS Access to the BBI

BBI Summary

Using Simple Network Management Protocol

BOOTP/DHCP Client IP Address Services

SYSLOG Server

Switch Login Levels

Secure FTP

Boot Strict Mode

Acceptable Cipher Suites

Limitations

Chapter 2. Initial Setup

Default Setup Options

Setup Part 2: Port Configuration

Setup Part 3: VLANs

Setup Part 4: IP Configuration

Default Gateways

IP Routing

Optional Setup for Telnet Support

Chapter 3. Service Location Protocol

SLP Configuration

Chapter 4. System License Keys

Transferring Activation Keys

Part 2:. Securing the Switch

Chapter 5. Securing Administration

Secure Shell and Secure Copy

To Enable or Disable the SSH Feature

To Load a Switch Configuration File from the SCP Host

To Load Switch Configuration Files from the SCP Host

SSH/SCP Integration with RADIUS Authentication

End User Access Control

User Access Control Menu

Re‐enabling Locked Accounts

Listing Current Users

Stacking Mode

Chapter 6. Authentication & Authorization Protocols

RADIUS Authentication and Authorization

RADIUS Authentication Features in Lenovo N/OS

Switch User Accounts

RADIUS Attributes for Lenovo N/OS User Privileges

TACACS+ Authentication

TACACS+ Authentication Features in Lenovo N/OS

Accounting

TACACS+ Password Change

LDAP Authentication and Authorization

Chapter 7. 802.1X Port-Based Network Access Control

Extensible Authentication Protocol over LAN

EAPoL Authentication Process

EAPoL Message Exchange

EAPoL Port States

Supported RADIUS Attributes

EAPoL Configuration Guidelines

Chapter 8. Access Control Lists

Summary of Packet Classifiers

viewing acl statistics

acl configuration examples

Part 3:. Switch Basics

Chapter 9. VLANs

vlans overview

vlans and port vlan id numbers

vlan topologies and design considerations

Protocol‐Based VLANs

PVLAN Priority Levels

Private VLANs

Configuration Guidelines

Chapter 10. Ports and Trunking

Configuring Port Modes

Configuring QSFP+ Ports

Trunking Overview

Static Trunks

Configuring a Static Port Trunk

Configurable Trunk Hash Algorithm

Link Aggregation Control Protocol

LACP individual

Configuring LACP

Chapter 11. Spanning Tree Protocols

Global STP Control

Port States

Simple STP Configuration

Per‐VLAN Spanning Tree Groups

VLAN and STG Assignment

Manually Assigning STGs

Flex System Fabric CN4093

Additional References

Typographic Conventions

Industry Standard Command Line Interface

Establishing a Connection

Using Telnet

Using SSH with Password Authentication

Using a Web Browser

Configuring HTTPS Access to the BBI

BBI Summary

Using Simple Network Management Protocol

BOOTP/DHCP Client IP Address Services

SYSLOG Server

Switch Login Levels

Secure FTP

Boot Strict Mode

Acceptable Cipher Suites

Configuring Strict Mode

Configuring No-Prompt Mode

Default Setup Options

Setup Part 1: Basic System Configuration

Setup Part 2: Port Configuration

Setup Part 3: VLANs

Setup Part 4: IP Configuration

Default Gateways

IP Routing

Setup Part 5: Final Steps

Optional Setup for Telnet Support

Chapter 3. Switch Software Management

Loading New Software to Your Switch

Loading Software via BBI

The Boot Management Menu

Boot Recovery Mode

Recover from a Failed Image Upgrade using TFTP

Recovering from a Failed Image Upgrade using XModem Download

Physical Presence

Chapter 4. Securing Administration

Secure Shell and Secure Copy

Configuring SSH/SCP Features on the Switch

To Copy the Switch Configuration File to the SCP Host

To Copy the Switch Image and Boot Files to the SCP Host

SSH and SCP Encryption of Management Messages

End User Access Control

User Access Control Menu

Re-enabling Locked Accounts

Protected Mode

Chapter 5. Authentication & Authorization Protocols

RADIUS Authentication and Authorization

Configuring RADIUS on the Switch

Switch User Accounts

RADIUS Attributes for Lenovo N/OS User Privileges

TACACS+ Authentication

TACACS+ Authentication Features in Lenovo N/OS

Command Authorization and Logging

TACACS+ Password Change

LDAP Authentication and Authorization

Configuring LDAP Authentication on the Switch

Chapter 6. 802.1X Port-Based Network Access Control

Extensible Authentication Protocol over LAN

EAPoL Authentication Process

EAPoL Message Exchange

Guest VLAN

Supported RADIUS Attributes

EAPoL Configuration Guidelines

Chapter 7. Access Control Lists

Summary of Packet Classifiers

Summary of ACL Actions

ACL Groups

ACL Metering and Re-Marking

ACL Port Mirroring

ACL Configuration Examples

ACL Example 3

VLAN Maps

VMap Example

Management ACLs

Chapter 8. VLANs

key features

system specifications

software features

physical specifications

network connectivity

supported transceivers and cables

features and specifications

connectors and leds

Part 3: Switch Basics

Part 5: IP Routing

Part 7: Network Management

Administration Interfaces

Browser‐Based Interface

Using SSH with Password Authentication

Easy Connect Wizard

Basic System Mode Configuration Example

Transparent Mode Configuration Example

Redundant Mode Configuration Example

Administrator Password Recovery

Configuring Strict Mode

Configuring No‐Prompt Mode

Information Needed for Setup

Setup Part 1: Basic System Configuration

Setup Part 5: Final Steps

Loading New Software to Your Switch

Loading Software via BBI

Updating Software on vLAG Switches

The Boot Management Menu

Boot Recovery Mode

Recover from a Failed Image Upgrade using TFTP

Recovering from a Failed Image Upgrade using XModem Download

Physical Presence

Lenovo CN4093 User Manual

Product

Learn More

Legal