Skip to content

Commit

Permalink
Merge branch '57-finalize' into stage
Browse files Browse the repository at this point in the history
  • Loading branch information
cumulusAnia committed Dec 13, 2023
2 parents 6197fd2 + ed7d186 commit 53e78c9
Show file tree
Hide file tree
Showing 9 changed files with 20 additions and 11 deletions.
Original file line number Diff line number Diff line change
Expand Up @@ -117,15 +117,22 @@ To configure DHCP Agent Information Option 82:
{{< tabs "TabID117 ">}}
{{< tab "NVUE Commands ">}}

The following example enables Option 82, enables circuit ID, and sets the remote ID to MAC address 44:38:39:BE:EF:AA:
The following example enables Option 82 and enables circuit ID:

```
cumulus@leaf01:~$ nv set service dhcp-relay <vrf-id> agent enable on
cumulus@leaf01:~$ nv set service dhcp-relay default agent remote-id 44:38:39:BE:EF:AA
cumulus@leaf01:~$ nv set service dhcp-relay <vrf-id> agent use-pif-circuit-id enable on
cumulus@leaf01:~$ nv config apply
```

The following example enables Option 82 and sets the remote ID to MAC address 44:38:39:BE:EF:AA:

```
cumulus@leaf01:~$ nv set service dhcp-relay <vrf-id> agent enable on
cumulus@leaf01:~$ nv set service dhcp-relay default agent remote-id 44:38:39:BE:EF:AA
cumulus@leaf01:~$ nv config apply
```

{{< /tab >}}
{{< tab "Linux Commands ">}}

Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -698,7 +698,7 @@ cumulus@switch:~$ sudo ip link set swp2 protodown_reason linkflap off
cumulus@switch:~$ sudo ip link set swp2 protodown off
```

After a few seconds the port state returns to UP. Run the `ip link show <interface>` command to verify that the interface is no longer in a protodown state and that the reason clears:
After a few seconds, the port state returns to UP. To verify that the interface is no longer in a protodown state and that the reason clears, run the `ip link show <interface>` command:

```
cumulus@switch:~$ ip link show swp2
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -98,7 +98,7 @@ cumulus@switch:~$ sudo lldpcli configure system interface pattern ""

The <span style="background-color:#F5F5DC">[SNMP](## "Simple Network Management Protocol")</span> subagent allows SNMP queries to retrieve LLDP information from the `lldpd` service.

If you enable SNMP with the NVUE `nv set service snmp-server enable on` command, NVUE enables the SNMP subagent automatically. To disable the SNMP subagent, disable SNMP with the NVUE `nv set service snmp-server enable off` command.
If you enable SNMP with NVUE commands, NVUE enables the SNMP subagent automatically. To disable the SNMP subagent, disable SNMP with the NVUE `nv set service snmp-server enable off` command.

If you use Linux commands to configure the switch, Cumulus Linux does not enable the SNMP subagent by default. To enable the SNMP subagent, edit the `/etc/default/lldpd` file and add the `-x` option:

Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -390,7 +390,7 @@ ipv6
fe80::4ab0:2dff:fea2:4c79 48:b0:2d:a2:4c:79 reachable is-router
```
To show all IPv4 table entries for an interface, run the `nv sh interface <interface> neighbor ipv4` command:
To show all IPv4 table entries for an interface, run the `nv show interface <interface> neighbor ipv4` command:
```
cumulus@leaf01:mgmt:~$ nv show interface swp1 neighbor ipv4
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -1509,6 +1509,8 @@ leaf01# exit
{{< /tab >}}
{{< /tabs >}}

To show the input and output message queue configuration, run the `nv show router bgp queue-limit` command.

## Route Reflectors

<span style="background-color:#F5F5DC">[iBGP](## "internal BGP")</span> rules state that BGP cannot send a route learned from an iBGP peer to another iBGP peer. In a data center spine and leaf network using iBGP, this prevents a spine from sending a route learned from a leaf to any other leaf. As a workaround, you can use a *route reflector*. When an iBGP speaker is a route reflector, it *can* send iBGP learned routes to other iBGP peers.
Expand Down
2 changes: 1 addition & 1 deletion content/cumulus-linux-57/Layer-3/Neighbor-Discovery-ND.md
Original file line number Diff line number Diff line change
Expand Up @@ -557,7 +557,7 @@ fe80::4ab0:2dff:fe3f:69d6 dev peerlink.4094 lladdr 48:b0:2d:3f:69:d6 router REAC
...
```

To all show table entries for a specific interface, run the `nv show interface <interface_id> neighbor` command:
To show all table entries for a specific interface, run the `nv show interface <interface_id> neighbor` command:

```
cumulus@leaf01:mgmt:~$ nv show interface swp51 neighbor
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -4,15 +4,15 @@ author: NVIDIA
weight: 190
toc: 4
---
Various add-on packages enable [RADIUS](## "Remote Authentication Dial-In User Service") users to log in to a Cumulus Linux switch in a transparent way with minimal configuration. There is no need to create accounts or directories on the switch. Authentication uses PAM and includes login, `ssh`, `sudo` and `su`.
Cumulus Linux provides add-on packages to enable [RADIUS](## "Remote Authentication Dial-In User Service") users to log into the switch transparently with minimal configuration. There is no need to create accounts or directories on the switch. Authentication uses PAM and includes login, `ssh`, `sudo` and `su`.

## Install the RADIUS Packages

{{%notice note%}}
NVUE automatically installs the RADIUS AAA packages; you do **not** have to install the packages if you use NVUE commands to configure RADIUS AAA.
{{%/notice%}}

If you use Linux commands to configure RADIUS AAA, you must install the RADIUS packages `libnss-mapuser` and `libpam-radius-auth` before you start configuration. The packages are in the `cumulus-local-apt-archive` repository, which is {{<link url="Adding-and-Updating-Packages#add-packages-from-the-cumulus-linux-local-archive" text="embedded">}} in the Cumulus Linux image. You can install the packages even when the switch is not connected to the internet.
If you use Linux commands to configure RADIUS AAA, you must install the RADIUS `libnss-mapuser` and `libpam-radius-auth` packages before you start configuration. The packages are in the `cumulus-local-apt-archive` repository, which is {{<link url="Adding-and-Updating-Packages#add-packages-from-the-cumulus-linux-local-archive" text="embedded">}} in the Cumulus Linux image. You can install the packages even when the switch is not connected to the internet.

To install the RADIUS packages:

Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -235,7 +235,7 @@ nvshow / ro allow
sudo / all allow
```

To show the configuration and state of the command-paths for a class, run the `nv show system aaa class <class>` command:
To show the configuration and state of the command paths for a class, run the `nv show system aaa class <class>` command:

```
cumulus@switch:~$ nv show system aaa class class3
Expand Down
4 changes: 2 additions & 2 deletions content/cumulus-linux-57/Whats-New/_index.md
Original file line number Diff line number Diff line change
Expand Up @@ -38,11 +38,11 @@ Cumulus Linux 5.7.0 supports new platforms, contains several new features and im
- {{<link url="DHCP-Relays/#dhcp-agent-information-option-option-82" text="DHCP agent information (Option 82) commands">}}
- {{<link url="DHCP-Servers/#basic-configuration" text="DNS server interface name command">}} for IPv4
- {{<link url="Link-Layer-Discovery-Protocol/#snmp-subagent" text="NVUE enables the SNMP subagent for LLDP by default ">}} when you enable SNMP
- Enhanced {{<link url="NVUE-API/#certificates" text="nv show system api">}} command output to show the certificate used for the API and additional {{<link url="NVUE-API/#certificates" text="nv show system api certificate">}} commands to show information about the certificates installed on the switch
- Enhanced {{<link url="NVUE-API/#show-nvue-rest-api-information" text="nv show system api">}} command output to show the certificate used for the API and additional {{<link url="NVUE-API/#show-certificate-information" text="nv show system api certificate">}} commands to show information about the certificates installed on the switch
- Commands to show {{<link url="Troubleshooting-EVPN" text="VLAN to VNI mapping for all bridges">}} and {{<link url="Troubleshooting-EVPN" text="VLAN to VNI mapping for a specific bridge">}}
- Commands to show the {{<link url="Address-Resolution-Protocol-ARP/#show-the-arp-table" text="ARP table">}} and {{<link url="Neighbor-Discovery-ND#show-the-ip-neighbor-table" text="ND table">}} and to add static entries to the {{<link url="Address-Resolution-Protocol-ARP/#add-static-arp-table-entries" text="ARP table">}} and {{<link url="Neighbor-Discovery-ND/#add-static-ip-neighbor-table-entries" text="ND table">}}
- Enhanced {{<link url="NVUE-CLI/#configuration-management-commands" text="show config history">}} command output now in table format
- Improvements to {{<link url="Multi-Chassis-Link-Aggregation-MLAG" text="nv show mlag command outputs">}}
- Improvements to {{<link url="Multi-Chassis-Link-Aggregation-MLAG/#troubleshooting" text="nv show mlag command outputs">}}
- FRR now restarts only when you enable or disable a routing protocol, change the BGP ASN, or disable the SNMP server

{{< expand "Commands that no longer require a switchd restart" >}}
Expand Down

0 comments on commit 53e78c9

Please sign in to comment.