Lenovo RackSwitch G8264ISCLI—Industry Standard CLICommand Referencefor Lenovo Enterprise Network Operating System 8.4

Lenovo RackSwitch G8264 Command Reference Manual

installation guide

Safety Information

Safety Statements

Other Important Safety Notices

Chapter 1. The RackSwitch G7028

Notices and Statements in this Document

Chapter 2. Switch Components

Management Panel

RJ-45 Management Port

System Status LEDs

SFP+ Ports

RJ-45 Ports

Rear Panel

Chapter 3. Installing G7028 Hardware and Options

Before Installing the G7028

Required Tools

Preventing Electric Shock

Handling Static-Sensitive Devices

Installing the G7028 in a Rack

Installing the G7028 in a Lenovo System x or Power Rack

Installing the G7028 in a Lenovo iDataPlex Rack

Installing the Air-Duct Option

Installing Port Transceivers

Installing an SFP+ Optical Transceiver

Chapter 4. Removing and Replacing G7028 Components

Removing the G7028 from a Standard Equipment Rack

Removing the G7028 from a Lenovo System x or Power Rack

Removing the G7028 from a Lenovo iDataPlex Rack

Removing the Air-Duct Option

Replacing the G7028

Chapter 5. Initializing the G7028

Using the Management Port

Configuring an IP Interface for Remote Access

Updating Firmware

Chapter 6. Troubleshooting

Appendix A. Getting Help and Technical Assistance

Appendix B. Notices

Trademarks

Recycling information

Particulate Contamination

Telecommunication Regulatory Statement

Germany Class A Statement

VCCI Class A Statement

Russia Electromagnetic Interference (EMI) Class A Statement

Appendix C. Technical Specifications

Power Specifications

RackSwitch G8264

features and specifications

connectors and leds

physical specifications

typical configurations

related publications

key features

system specifications

software features

rack installation

regulatory compliance

Preface

Who Should Use This Guide

What You'll Find in This Guide

Additional References

Typographic Conventions

Part 1: Getting Started

Chapter 1. Switch Administration

Administration Interfaces

Establishing a Connection

Using the Switch Data Ports

Using Telnet

Using SSH with Password Authentication

Using SSH with Public Key Authentication

Using a Web Browser

Browser‐Based Interface Summary

Using Simple Network Management Protocol

BOOTP/DHCP Client IP Address Services

DHCP SYSLOG Server

Domain‐Specific BOOTP Relay Agent Configuration

Easy Connect Wizard

Basic System Mode Configuration Example

Redundant Mode Configuration Example

Switch Login Levels

Administrator Password Recovery

Setup vs. the Command Line

Idle Disconnect

Boot Strict Mode

Acceptable Cipher Suites

Configuring Strict Mode

Scripting

Chapter 2. Initial Setup

Information Needed for Setup

Default Setup Options

Setting the Management Interface Default IP Address

Stopping and Restarting Setup Manually

Setup Part 1: Basic System Configuration

Setup Part 2: Port Configuration

Setup Part 3: VLANs

Setup Part 4: IP Configuration

Loopback Interfaces

Loopback Interface Limitations

Setup Part 5: Final Steps

Optional Setup for Telnet Support

Chapter 3. Switch Software Management

Loading New Software to Your Switch

Loading Software via BBI

Updating Software on vLAG Switches

USB Copy

The Boot Management Menu

Recovering from a Failed Boot Image

Part 2: Securing the Switch

Chapter 4. Securing Administration

Secure Shell and Secure Copy

To Enable or Disable SCP Apply and Save

To Load a Switch Configuration File from the SCP Host

To Load Switch Configuration Files from the SCP Host

end user access control

user access control

listing current users

Chapter 5. Authentication & Authorization Protocols

radius authentication and authorization

switch user accounts

command authorization and logging

ldap authentication and authorization

Chapter 6. 802.1X Port-Based Network Access Control

Extensible Authentication Protocol over LAN

EAPoL Authentication Process

EAPoL Message Exchange

EAPoL Port States

Supported RADIUS Attributes

EAPoL Configuration Guidelines

Chapter 7. Access Control Lists

Summary of Packet Classifiers

Summary of ACL Actions

Assigning Individual ACLs to a Port

Metering

ACL Port Mirroring

ACL Logging

Rate Limiting Behavior

ACL Configuration Examples

ACL Example 3

ACL Example 6

VLAN Maps

Management ACLs

Using Storm Control Filters

Chapter 8. Secure Input/Output Module

SIOM Overview

Setting an SIOM Security Policy

Secure Protocols

Lenovo RackSwitch G8264 Command Reference Manual

Product

Learn More

Legal