ExtremeXOS Installation and Release Notes 12.2.2
ExtremeXOS Installation and Release Notes 12.2.2
AccessAdapt, Alpine, Altitude, BlackDiamond, EPICenter, Essentials, Ethernet Everywhere, Extreme Enabled,
Extreme Ethernet Everywhere, Extreme Networks, Extreme Standby Router Protocol, Extreme Turbodrive, Extreme
Velocity, ExtremeWare, ExtremeWorks, ExtremeXOS, Go Purple Extreme Solution, ScreenPlay, Sentriant,
ServiceWatch, Summit, SummitStack, Triumph, Unified Access Architecture, Unified Access RF Manager, UniStack,
the Extreme Networks logo, the Alpine logo, the BlackDiamond logo, the Extreme Turbodrive logo, the Summit
logos, and the Powered by ExtremeXOS logo are trademarks or registered trademarks of Extreme Networks, Inc. or
its subsidiaries in the United States and/or other countries.
sFlow is a registered trademark of InMon Corporation.
Specifications are subject to change without notice.
All other registered trademarks, trademarks, and service marks are property of their respective owners.
2008-2009 Extreme Networks, Inc. All Rights Reserved.
Contents
Chapter 1: Overview ........................................................................................................................ 5
Unsupported Features in ExtremeXOS 12.2.2 on the BlackDiamond 20808 Platform ........................5
New Features or Feature Enhancements in ExtremeXOS 12.2.1.......................................................7
New Hardware Supported in ExtremeXOS 12.2.2 ...........................................................................7
New Hardware Supported in ExtremeXOS 12.2.1 ...........................................................................7
Supported Hardware....................................................................................................................8
BlackDiamond 10808 Switch Component Support ...................................................................8
BlackDiamond 8800 Series of Switches Component Support.....................................................9
BlackDiamond 12800 Series Switches Component Support ....................................................10
BlackDiamond 20808 Switch Component Support .................................................................11
Summit X150 and X350 Component Support ........................................................................11
Summit X250e Component Support......................................................................................11
Summit X450 Component Support .......................................................................................12
Summit X650 Component Support .......................................................................................13
SFP (Mini-GBIC) Support .....................................................................................................13
XENPAK Module Support .....................................................................................................17
XFP Module Support............................................................................................................20
ExtremeXOS Command Line Support.....................................................................................21
Unsupported Commands on the Summit X150 and X350 Series Switches ................................21
Tested Third-Party Products .......................................................................................................22
Tested RADIUS Servers .......................................................................................................22
Tested Third-Party Clients ....................................................................................................23
PoE Capable VoIP Phones ....................................................................................................23
Extreme Switch Security Assessment ..........................................................................................24
DoS Attack Assessment .......................................................................................................24
ICMP Attack Assessment .....................................................................................................24
Port Scan Assessment .........................................................................................................24
Contents
Chapter 3: Limits........................................................................................................................... 41
Supported Limits ......................................................................................................................41
Overview
These Release Notes document ExtremeXOS 12.2.2, which enables new hardware products and
software features.
This chapter contains the following sections:
CLEARFlow
CPU Monitor
Disable Learning
Egress Mirroring
Fast-direct Broadcast
Ignore-broadcast
IP Address Security
IP Directional Broadcast
IPv6
ACL
Overview
Multicast
netTools
Routing Information Protocol Next Generation (RIPng)/Open Shortest Path First (OSPFv3)
Routing protocol
Services
IS-IS
MAC Security
Load Sharing
RSVP
VPLS Packet Counts Maintained for First 1,000 Pseudo Wires (PWs) Only
VPLS Support for LSPs and PWs over Link Aggregation Trunk Ports
Netlogin-Dot1/MAC/Web
PBR_L2
Protocol VLAN
Remote Mirroring
sFlow
IPv6-in-IPv4 Tunneling
VLAN Aggregation
vMAN Enhancement
VPLS/QoS
Overview
Improved IP multicast scaling for BlackDiamond 8800 and Summit family switches.
Command line interface (CLI) commands have been added to display new counters:
The show ports <port_list> congestion [no-refresh] command displays port congestion
counters.
Link Layer Discovery Protocol (LLDP) extensions support for ReachNXT 100-8T.
Improved quality of service (QoS) for stackable switches. For stacking links, only one QoS queue is
now reserved and QoS scheduling is improved.
VIM1-SummitStack Versatile Interface Module (VIM) (four 1-gigabit SFP ports and two 40gigabit stacking ports)
24 10GBASE-T ports
VIM1-10G8X (eight 10GBASE-X SFP+ ports and two 40-gigabit stacking ports)
VIM1-SummitStack Versatile Interface Module (VIM) (four 1-gigabit SFP ports and two 40-gigabit
stacking ports)
Overview
Option cards for the Summit X450 a/e and Summit X350 series:
ReachNXT 100-8t
Supported Hardware
Refer to the Extreme Networks hardware installation guides for more information about supported
hardware. The following tables list the software filenames for the hardware that requires software.
ExtremeXOS Filenames
ExtremeXOS Required
BootROM Version
MSM-1
bd10k-12.2.2.xos
10.1.0
1.0.1.5
MSM-1XL
bd10k-12.2.2.xos
10.1.0
1.0.1.5
10G2X
N/A
11.1.1
1.3.0.0
10G2H
N/A
11.2.0
1.3.0.0
10G6X
N/A
10.1.0
1.3.0.0
G20X
N/A
11.1.1
1.3.0.0
G60X
N/A
10.1.0
1.3.0.0
G60T
N/A
10.1.0
1.3.0.0
PSU Controller
N/A
10.1.0
N/A
N/A
10.1.0
N/A
N/A
11.3.2.6
N/A
Following are the part numbers for the BlackDiamond 10808 modules with the Rev. D ASIC:
8000 Level
Part No.
G60T
804403-00,
after Rev. 16
904015-00
11.2.1.3
804408-00,
after Rev. 03
904015-10
11.2.1.3
804402-00,
after Rev. 16
904009-00/11
11.2.1.3
804404-00,
after Rev. 03
904009-10
11.2.1.3
G60X
ExtremeXOS
Required
Description
Overview
8000 Level
Part No.
G20X
804407-00,
after Rev. 03
904020-10
11.2.1.3
804470-00,
after Rev. 08
904020-00/11
11.2.1.3
804410-00,
after Rev. 03
904032-10
11.2.1.3
804471-00,
after Rev. 11
904032-00/11
11.2.1.3
804406-00,
after Rev. 09
904027-00/11
11.2.1.3
804411-00,
after Rev. 03
904027-10
11.2.1.3
804405-00,
after Rev. 18
904016-00/11
11.2.1.3
804409-00,
after Rev. 03
904016-10
11.2.1.3
10G2X
10G2H
10G6X
ExtremeXOS
Required
Description
ExtremeXOS Filenames
ExtremeXOS Required
BootROM Version
MSM-G8X
bd8800-12.2.2.xos
11.1.1.9
1.0.1.7
MSM-48
bd8800-12.2.2.xos
11.6.1.9
1.0.1.11
MSM-48c
bd8800-12.2.2.xos
12.1.1.4
1.0.3.7
G48Te
N/A
11.5.1.4
1.0.1.10
G48Pe
N/A
11.5.1.4
1.0.1.10
G48Ta
N/A
11.5.1.4
1.0.1.10
G48Xa
N/A
11.5.1.4
1.0.1.10
G48P
N/A
11.1.1.9
1.0.1.7
G48T
N/A
11.1.1.9
1.0.1.7
G48Tc
N/A
12.1.1.4
1.0.3.7
G48Te2
N/A
12.1.1.4
1.0.3.7
G48Xc
N/A
12.1.1.4
1.0.3.7
G24X
N/A
11.1.1.9
1.0.1.7
G24Xc
N/A
12.1.1.4
1.0.3.7
S-G8Xc
N/A
12.1.1.4
1.0.3.7
10G4X
N/A
11.1.1.9
1.0.1.7
10G4Xa
N/A
11.6.1.9
1.0.1.11
Overview
ExtremeXOS Filenames
ExtremeXOS Required
BootROM Version
10G4Ca
N/A
12.0.1.11
1.0.1.11
10G4Xc
N/A
12.1.1.4
1.0.3.7
10G8Xc
N/A
12.1.1.4
1.0.3.7
S-10G1Xc
N/A
12.1.1.4
1.0.3.7
PSU Controller
N/A
11.1.1.9
2.13
N/A
11.1.1.9
N/A
N/A
11.6.1.9
N/A
N/A
11.3.2.6
N/A
NOTE
Upgrading the BootROM on a BlackDiamond 8810 or BlackDiamond 8806 switch is not automatic when you
upgrade the software. You must be running the minimum required BootROM version or later. Use the install firmware
command after upgrading the ExtremeXOS image to insure the BootROM is at the latest level.
10
BlackDiamond 12802/12804
Components
ExtremeXOS Filenames
ExtremeXOS Required
BootROM Version
bd12k-12.2.2.xos
11.4.1.4
1.0.0.2
bd12k-12.2.2.xos
11.4.1.4
1.0.0.2
bd12k-12.2.2.xos
12.0.1.11
1.0.0.2
MSM-6R
bd12k-12.2.2.xos
12.0.2.25
1.0.1.8
bd12K-12.2.2.xos
12.0.1.11
1.0.0.2
XM-2X
N/A
12.2.2
N/A
XM-2XR
N/A
11.4.1.4
N/A
XM-2HR
N/A
12.1.1.4
N/A
GM-20XTR
N/A
11.4.1.4
N/A
GM-20XT
N/A
11.4.1.4
N/A
GM-20T
N/A
11.4.1.4
N/A
PSU Controller
N/A
11.4.1.4
2.13
N/A
11.4.1.4
N/A
Overview
ExtremeXOS Filenames
ExtremeXOS Required
BootROM Version
N/A
11.4.1.4
N/A
ExtremeXOS Filenames
ExtremeXOS Required
GM-40XB
bd20k-12.2.2.xos
12.2.2
XM-8XB
bd20k-12.2.2.xos
12.2.2
XFM-1
bd20k-12.2.2.xos
12.2.2
MM-Base
bd20k-12.2.2.xos
12.2.2
BootROM Version
Minimum
ExtremeXOS
Required
Minimum BootROM
Version
Summit X150-24t
summitX-12.2.2.xos
12.0.2.25
1.0.3.1
Summit X150-48t
summitX-12.2.2.xos
12.0.2.25
1.0.3.1
Summit X150-24p
summitX-12.2.2.xos
12.0.2.25
1.0.3.1
Summit X350-24t
summitX-12.2.2.xos
12.0.3.16
1.0.3.1
Summit X350-48t
summitX-12.2.2.xos
12.0.3.16
1.0.3.1
summitX-12.2.2.xos
12.2.1
N/A
summitX-12.2.2.xos
12.2.1
N/A
11
Overview
ExtremeXOS Filenames
Minimum
ExtremeXOS
Required
Summit X250e-24p
summitX-12.2.2.xos
12.0.1.11
1.0.3.0
Summit X250e-48p
summitX-12.2.2.xos
12.0.1.11
1.0.3.0
Summit X250e-24t
summitX-12.2.2.xos
12.0.1.11
1.0.3.0
Summit X250e-48t
summitX-12.2.2.xos
12.0.1.11
1.0.3.0
Summit X250e-24x
summitX-12.2.2.xos
12.0.2.25
1.0.3.1
Summit X250e-24tDC
summitX-12.2.2.xos
12.0.3.16
1.0.3.1
Summit X250e-24xDC
summitX-12.2.2.xos
12.0.3.16
1.0.3.1
Summit X250e-48tDC
summitX-12.2.2.xos
12.0.3.16
1.0.3.1
Minimum BootROM
Version
ExtremeXOS Filenames
Minimum
ExtremeXOS
Required
Minimum BootROM
Version
Summit X450a-48t
summitX-12.2.2.xos
11.5.1.4
1.0.2.2
Summit X450a-48tDC
summitX-12.2.2.xos
11.6.1.9
1.0.2.2
Summit X450a-24t
summitX-12.2.2.xos
11.5.1.4
1.0.2.2
Summit X450a-24tDC
summitX-12.2.2.xos
11.5.1.4
1.0.2.2
Summit X450a-24xDC
summitX-12.2.2.xos
11.6.1.9
1.0.2.2
Summit X450a-24x
summitX-12.2.2.xos
11.6.1.9
1.0.2.2
Summit X450e-24p
summitX-12.2.2.xos
11.5.1.4
1.0.2.2
Summit X450e-48p
summitX-12.2.2.xos
11.6.1.9
1.0.2.2
Summit X450-24x
summitX-12.2.2.xos
11.2.2.4
1.0.0.9
Summit X450-24t
summitX-12.2.2.xos
11.2.2.4
1.0.0.9
XGM-2xn
summitX-12.2.2.xos
N/A
N/A
summitX-12.2.2.xos
11.5.1.4
summitX-12.2.2.xos
11.5.1.4
summitX-12.2.2.xos
12.2.1
summitX-12.2.2.xos
12.2.1
Option Cards
12
Overview
ExtremeXOS Filenames
Minimum
ExtremeXOS
Required
Summit X650-24x
summitX-12.2.2.xos
12.2.1
1.0.5.5
Summit X650-24t
summitX-12.2.2.xos
12.2.2
1.0.5.5
VIM1-SummitStack
summitX-12.2.2.xos
12.2.1
N/A
VIM1-10G8X
summitX-12.2.2.xos
12.2.2
N/A
Minimum BootROM
Version
NOTE
Upgrading the BootROM on Summit family switches is not automatic when you upgrade the software.You must be
running the minimum required BootROM version. Use the download bootrom command to download a BootROM
image.
ExtremeXOS Required
1000BASE-T SFP
11.1.1.9
SX SFP
11.1.1.9
LX SFP
11.1.1.9
ZX SFP
11.1.1.9
100FX/1000LX SFP
11.3.1.3
100FX SFP
1000BX SFP
11.4.1.4
LX100 SFP
12.0.1.11
12.0.2.25
SFPs supported on the BlackDiamond 10808 switch with ExtremeXOS 12.2.2, and the minimum
ExtremeXOS version required, include
ExtremeXOS Required
LX100 SFP
12.0.1.11
SX SFP
10.1.0
13
Overview
ExtremeXOS Required
LX SFP
10.1.0
ZX SFP
10.1.0
1000BASE-T SFP
11.1.1.9
1000BX SFP
11.6.1.9
SFPs supported on the BlackDiamond 12804 switch with ExtremeXOS 12.2.2, and the minimum
ExtremeXOS version required, include:
ExtremeXOS Required
SX SFP
11.4.1.4
LX SFP
11.4.1.4
ZX SFP
11.4.1.4
1000BASE-T SFP
11.4.1.4
1000BX SFP
11.6.1.9
LX100 SFP
12.0.1.11
100FX/1000LX SFP
12.0.1.11
SFPs supported on the BlackDiamond 12802 switch with ExtremeXOS 12.2.2, and the minimum
ExtremeXOS version required, include:
ExtremeXOS Required
SX SFP
12.0.1.11
LX SFP
12.0.1.11
ZX SFP
12.0.1.11
1000BASE-T SFP
12.0.1.11
1000BX SFP
12.0.1.11
LX100 SFP
12.0.1.11
100FX/1000LX SFP
12.0.1.11
SFPs supported on the BlackDiamond 20808 switch with ExtremeXOS 12.2, and the minimum
ExtremeXOS version required, include:
14
SFP
ExtremeXOS Required
SX SFP
12.2
LX SFP
12.2
ZX SFP
12.2
LX100
12.2
BXU
12.2
BXD
12.2
Overview
SFPs supported on the Summit X150 series switches with ExtremeXOS 12.2.2, and the minimum
ExtremeXOS version required, include:
ExtremeXOS Required
12.0.2.25
100BASE-BX SFP
12.0.2.25
12.0.2.25
SX SFP
12.0.2.25
LX SFP
12.0.2.25
ZX SFP
12.0.2.25
LX100 SFP
12.0.2.25
1000BX SFP
12.0.2.25
SFPs supported on the Summit X250e switch with ExtremeXOS 12.2.2, and the minimum ExtremeXOS
version required, include:
ExtremeXOS Required
12.0.2.25
12.0.2.25
12.0.2.25
12.0.2.25
12.0.2.25
12.0.2.25
12.0.2.25
12.0.2.25
SFPs supported on the Summit X350 series switches with ExtremeXOS 12.2.2, and the minimum
ExtremeXOS version required, include:
Table 17: Summit X350 Series Switches SFP/SFP+ (XGM2-2sf Option Card Required) Support
SFP
ExtremeXOS Required
SX SFP
12.0.3.16
LX SFP
12.0.3.16
ZX SFP
12.0.3.16
LX100 SFP
12.0.3.16
1000BX SFP
12.0.3.16
SR SFP+
12.2.1
LR SFP+
12.2.1
12.2.1
15
Overview
SFPs supported on the Summit X450 switch with ExtremeXOS 12.2.2, and the minimum ExtremeXOS
version required, include:
ExtremeXOS Required
12.0.2.25
11.2.2.4
LX SFP
11.2.2.4
ZX SFP
11.2.2.4
1000BASE-T SFP
11.2.2.4
11.3.1.3
LX100 SFP
12.0.1.11
1000BX SFP
11.6.1.9
SFPs supported on the Summit X450a switch with ExtremeXOS 12.2.2, and the minimum ExtremeXOS
version required, include:
Table 19: Summit X450a Switch SFP/SFP+ (XGM2-2sf Option Card Required) Support
SFP
ExtremeXOS Required
12.0.2.25
11.2.2.4
LX SFP
11.2.2.4
ZX SFP
11.2.2.4
SR SFP+
12.2.1
LR SFP+
12.2.1
12.2.1
11.6.1.9
11.6.1.9
16
LX100 SFP
12.0.1.11
1000BX SFP
11.6.1.9
Overview
SFPs supported on the Summit X450e switch with ExtremeXOS 12.2.2, and the minimum ExtremeXOS
version required, include:
Table 20: Summit X450e Switch SFP/SFP+ (XGM2-2sf Option Card Required) Support
SFP
ExtremeXOS Required
SX SFP
11.6.1.9
LX SFP
11.6.1.9
ZX SFP
11.6.1.9
LX100 SFP
12.0.1.11
1000BX SFP
11.6.1.9
SFPs supported on the Summit X650 series switches with ExtremeXOS 12.2.2, and the minimum
ExtremeXOS version required, include:
ExtremeXOS Required
12.2.2
12.2.2
12.2.2
12.2.1
12.2.1
12.2.1
12.2.1
12.2.1
ExtremeXOS Required
LR
11.1.1.9
ER
11.1.1.9
SR
11.1.1.9
LX4
11.3.1.3
ZR
11.3.1.3
CX4
12.0.1.11
17
Overview
XENPAK modules supported on the BlackDiamond 10808 switch with ExtremeXOS 12.2.2, and the
minimum ExtremeXOS version required, include:
ExtremeXOS Required
LR
11.1.1.9
ER
11.1.1.9
SR
11.1.1.9
LX4
11.3.1.3
ZR
11.3.1.3
LW
11.4.1.4
XENPAK modules supported on the BlackDiamond 12804 switch with ExtremeXOS 12.2.2, and the
minimum ExtremeXOS version required, include:
ExtremeXOS Required
LR
11.4.1.4
ER
11.4.1.4
SR
11.4.1.4
LX4
11.4.1.4
ZR
11.4.1.4
LW
11.4.1.4
XENPAK modules supported on the BlackDiamond 12802 switch with ExtremeXOS 12.2.2, and the
minimum ExtremeXOS version required, include
ExtremeXOS Required
LR
12.0.1.11
ER
12.0.1.11
SR
12.0.1.11
LX4
12.0.1.11
ZR
12.0.1.11
LW
12.0.1.11
XENPAK modules supported on the Summit X450 switch with ExtremeXOS 12.2.2, and the minimum
ExtremeXOS version required, include:
18
XENPAK Module
ExtremeXOS Required
SR
11.3.1.3
LR
11.3.1.3
ER
11.3.1.3
Overview
ExtremeXOS Required
LX4
11.3.1.3
ZR
11.3.1.3
XENPAK modules supported on the Summit X450a switch with ExtremeXOS 12.2.2, and the minimum
ExtremeXOS version required, include:
ExtremeXOS Required
SR
11.6.1.9
LR
11.6.1.9
ER
11.6.1.9
LX4
11.6.1.9
ZR
11.6.1.9
LW
11.6.1.9
CX4
12.0.1.11
XENPAK modules supported on the Summit X450e switch with ExtremeXOS 12.2.2, and the minimum
ExtremeXOS version required, include:
ExtremeXOS Required
SR
11.5.1.4
LR
11.5.1.4
ER
11.5.1.4
LX4
11.5.1.4
ZR
11.5.1.4
CX4
12.0.1.11
XENPAK modules supported on the Summit X350 switch with ExtremeXOS 12.2.2, and the minimum
ExtremeXOS version required, include:
ExtremeXOS Required
SR
12.0.3.16
LR
12.0.3.16
ER
12.0.3.16
LX4
12.0.3.16
ZR
12.0.3.16
XENPAKs not supplied by Extreme Networks will show up as Unsupported Optic Module in the
show port x:y information detail and show port x:y configuration command output.
19
Overview
ExtremeXOS Required
SR
11.6.1.9
LR
11.6.1.9
ER
12.0.2.25
DWDM
12.1.2.17
ZR
12.1.2.17
XFP modules supported on the BlackDiamond 20808 switch with ExtremeXOS 12.2, the minimum
ExtremeXOS version required include:
ExtremeXOS Required
SR
12.2
LR
12.2
ER
12.2
ZR
12.2
XFP modules supported on the Summit X450a and X450e series switch with ExtremeXOS 12.2.2, the
minimum ExtremeXOS version required, and the manufacturers supported include:
Table 32: Summit X450a and X450e Series Switch XFP Support
XFP Module
ExtremeXOS Required
SR
11.5.1.4
LR
11.5.1.4
ER
12.0.2.25
DWDM
12.1.2.17
ZR
12.1.2.17
XFP modules supported on the Summit X350 switch with ExtremeXOS 12.2.2, the minimum
ExtremeXOS version required, and the manufacturers supported include:
20
XFP Module
ExtremeXOS Required
SR
12.0.3.16
LR
12.0.3.16
ER
12.0.3.16
DWDM
12.1.2.17
Overview
ExtremeXOS Required
ZR
12.1.2.17
Summit X150 and X350 series switches do not support L3 functionality; this platform does not
support CLI commands for L3 functionality.
Summit X150 and X350 series switches do not support stacking; all CLI commands for stacking are
not supported on this platform.
Summit X150 and X350 series switches do not support IP forwarding; however, CLI commands that
configure IP addresses function in order to access the management functionality of the switch are
supported.
Upgrade or trial licensing is not available on the Summit X150 and X350 series switches.
bgp
msdp
ospf
ospfv3
rip
ripng
pim
vrrp
brm
upm
Table 34 lists the CLI commands not supported on the Summit X150 and X350 series switches.
Description
configure
ipforwarding
ipmcforwarding
ipmroute
irdp
stacking
21
Overview
Description
UDP forwarding profile
Disable running system setting
esrp
ipforwarding
IP forwarding
ipmcforwarding
irdp
router-discovery
stacking
Stacking
enable
esrp <esrp-domain>
ipforwarding
IP forwarding
ipmcforwarding
irdp
router-discovery
stacking
Stacking
reboot
Reboot system
node-address
stack-topology
Reboot stack-topology
show
router-discovery
stacking
Stacking information
udp-profile
synchronize
stacking
unconfigure
stacking
22
Overview
Meetinghouse
FreeRADIUS
Odyssey 3.03.0.1194
Avaya 4620
Avaya 9620
Avaya 4602
Avaya 9630
Avaya 4621SW
Avaya 4610
Avaya 1616
Avaya one-X
Cisco 7970
Cisco 7910
Cisco 7960
ShoreTel ShorePhone IP BB 24
Siemens OpenStage 20
23
Overview
Siemens OpenStage 40
Siemens OpenStage 60
Siemens OpenStage 80
SSPing
Twinge
Nuke
WinFreeze
24
Nessus
Upgrading to ExtremeXOS
Staying Current
If you are an Extreme Assist customer, the latest release and release notes are available after logging in
to the Tech Support web site at
http://www.extremenetworks.com/go/esupport.htm.
For more information about ExtremeXOS, see the ExtremeXOS Concepts Guide and the ExtremeXOS
Command Reference Guide.
Upgrading ExtremeXOS
Upgrading your current ExtremeXOS installation to ExtremeXOS version is a multistep process. In this
section is a quick summary of the necessary steps, followed by detailed instructions.
NOTE
Hitless upgrade for network login is not supported when upgrading from an earlier version of ExtremeXOS software to
ExtremeXOS 12.1 or later. If a hitless upgrade is required, you must globally disable network login and re-enable it
when the upgrade is complete.
NOTE
See the Hitless Upgrade Caveats for BlackDiamond 8800 Series Switches Only in the ExtremeXOS Concepts
Guide for an important caution about performing an MSM failover.
NOTE
Beginning with ExtremeXOS, an ExtremeXOS core image (.xos file) must be downloaded and installed on the
alternate (non-active) partition. If you try to download to an active partition, the error message Error: Image can
only be installed to the non-active partition. is displayed. An ExtremeXOS modular software package (.xmod file)
can still be downloaded and installed on either the active or alternate partition.
25
Upgrading to ExtremeXOS
NOTE
With ExtremeXOS 12.2.2, the BlackDiamond 8800 series of switches and the BlackDiamond 12800 series switches
now require a firmware upgrade along with the standard software upgrade.
NOTE
A "Failed to install image" error occurs when trying to upgrade from ExtremeXOS 11.2.1 images to ExtremeXOS 11.6
or later. To upgrade to ExtremeXOS 12.2.2, you must currently be running ExtremeXOS 11.6 or later. If you are not
running 11.6 or later you must first upgrade to ExtremeXOS 11.6 or later and then upgrade to ExtremeXOS 12.2.2.
Quick Summary
To install and upgrade to ExtremeXOS on your system, you will be following these steps:
1 Download the image to your TFTP server.
2 Verify which virtual router connects to your TFTP server.
3 Save your configuration to a backup configuration file.
4 Determine your selected and booted image partitions.
5 Download and install the image to the switch.
6 Reboot the switch.
7 Save the configuration for the new image.
8 Upgrade the BootROMBlackDiamond 10808 switch only.
9 Upgrade the BootROM and PSU controller firmware--BlackDiamond 8800 series of switches only.
10 Upgrade the BootROM and PSU controller firmware--BlackDiamond 12804 series of switches only.
NOTE
If you have a dual MSM system, and the software image is not the same on both MSMs, see the section Dual MSM
Systems with Different Images Present on page 35.
Detailed Steps
NOTE
Extreme Networks recommends using a TFTP server that supports blocksize negotiation (per RFC-2348). Using this
type of server enables the switch to download the images faster.
26
Upgrading to ExtremeXOS
Use the following ping commands to test which virtual router you will need to specify when you
download the image to your switch. This example assumes that your TFTP servers IP address is
192.168.0.12; substitute your own address when you run the command:
ping vr vr-mgmt 192.168.0.12
ping vr vr-default 192.168.0.12
At least one of these commands must successfully reach your TFTP server for you to download the
image. When you download the image in step 5, specify the virtual router that allowed you to reach
your TFTP server.
3 Save your configuration to a backup configuration file.
You must save your configuration to a backup configuration file, or you will be unable to revert to
your currently running image, if the need arises. In this example, we use the software version
number as part of the name. Use the following command to save the configuration to the file
version11_6_1_7.cfg:
save configuration version11_6_1_7
As an optional, extra precaution, we suggest that you save this configuration to a TFTP server. Use
the tftp command to save your configuration. In the following example, the TFTP servers IP
address is 192.168.0.12, the virtual router determined in step 2 is vr-mgmt, and the configuration file
is version11_6_1_7.cfg:
tftp 192.168.0.12 -v vr-mgmt -p -l version11_6_1_7.cfg
primary
primary
11.6.1.7
11.6.1.7
Config Selected:
Config Booted:
primary.cfg
primary.cfg
27
Upgrading to ExtremeXOS
NOTE
For the BlackDiamond 8800 series of switchesYou will be prompted to upgrade the BootROM on the
BlackDiamond 8800 series of switches when installing the ExtremeXOS image. If you answer "y" for yes after the
prompt and install the image after downloading, you will also be prompted to install the new BootROM during
the installation process before the switch reboots.
This example assumes that you will use the same TFTP server and virtual router as in step 6 above.
You will be asked if you want to install the BootROM after downloading. Answer yes, or use the
install bootrom command to install later. Once the BootROM is downloaded and installed, it
replaces the previous image stored in the onboard FLASH memory, and will be used at the next
reboot.
9 Upgrade the BootROM and PSU controller firmware--BlackDiamond 8800 series of switches only.
NOTE
BootROMs installed by Manufacturing should never be forced to an earlier BootROM version unless explicitly
instructed by Extreme Networks support.
Extreme Networks requires that you upgrade the MSMs, I/O modules, and PSU controllers in the
BlackDiamond 8800 series of switches with the BootROM and firmware images included in this
release of ExtremeXOS.
This release of ExtremeXOS contains the following versions of the BootROM and firmware:
MSM BootROM
1.0.3.8
1.0.3.7
2.13
Use the show version command to display the versions of the BootROM and firmware currently
installed.
To install the new BootROM and firmware, wait until the show slot command indicates the MSMs
and I/O modules are operational. Then use the install firmware command. This command will
install the new BootROMs or firmware only on modules that have older BootROMs or firmware
installed. You will be asked if you want to install each type of BootROM or firmware. New PSU
28
Upgrading to ExtremeXOS
controller firmware is used immediately after it is installed without rebooting the switch. The new
BootROM and firmware overwrite the older versions stored in FLASH memory.
BD-8806.2 # install firmware
Installing version 1.0.1.11 of the MSM bootrom(s). Do you want to continue?
(y - yes, n - no, <cr> - cancel) Yes
Do you want to save configuration changes to primary.cfg? (y or n) Yes
Saving configuration on primary MSM ....... done!
Installing version 1.0.1.11 of the IO module bootrom(s). Do you want to continue?
(y - yes, n - no, <cr> - cancel) Yes
Installing version 2.13 of the PSU control module firmware. Do you want to
continue?
(y - yes, n - no, <cr> - cancel) Yes
Installing bootrom...
MSM bootrom(s) installed successfully
MSM bootrom(s) will be activated upon next MSM reboot
Installing bootrom...
IO module bootrom(s) installed successfully
IO module bootrom(s) will be activated upon next IO module reboot
Installing firmware...
PSU controller firmware installed successfully
BD-8806.3 #
10 Upgrade the BootROM and PSU controller firmware--BlackDiamond 12804 series of switches only.
NOTE
BootROMs installed by Manufacturing should never be forced to an earlier BootROM version unless explicitly
instructed by Extreme Networks support.
Extreme Networks requires that you upgrade the MSMs, I/O modules, and PSU controllers in the
BlackDiamond 12804 with the BootROM and firmware images included in this release of
ExtremeXOS.
This release of ExtremeXOS contains the following versions of the BootROM and firmware:
MSM Bootloader
1.0.0.3
2.13
Use the show version command to display the versions of the BootROM and firmware currently
installed.
NOTE
For single MSM systems, reboot the switch using the reboot command after the firmware installation is complete.
To install the new BootROM and firmware, wait until the show slot command indicates the MSMs
and I/O modules are operational. Then use the install firmware command. This command will
install the BootROMs and/or firmware only on modules that have older BootROMs or firmware
installed. Once this installation is complete, reboot the switch using the reboot command.
NOTE
For dual MSM systems, the install firmware command cannot install all the necessary software while the MSM
is primary. To completely install the firmware, an MSM failover is required. First, run the install firmware
29
Upgrading to ExtremeXOS
command on the primary MSM. When the installation is complete, run the run msm-failover command to allow
the switch to failover to the secondary MSM. Run the install firmware command on the new primary MSM. To
revert back to your original primary MSM, run the run msm-failover command. Because two failovers are
required for a dual-MSM firmware installation, you will not need to run the reboot command after executing the
install firmware procedure.
NOTE
Upgrading a BlackDiamond 12804 slot can take a minimum of six minutes per slot.
BD-12804.7 # install firmware
Installing version 1.0.0.2 of the MSM bootrom(s). Do you want to continue?
(y - yes, n - no, <cr> - cancel) Yes
Installing IO module firmware, a reboot is required. Do you want to continue?
(y - yes, n - no, <cr> - cancel) Yes
Installing version 2.13 of the PSU control module firmware. Do you want to
continue?
(y - yes, n - no, <cr> - cancel) Yes
Installing micro controller image on backup MSM requires rebooting backup MSM. Do
you want to continue?
(y - yes, n - no, <cr> - cancel) Yes
Installing bootrom...
Installing bootstrap
Installing active bootrom
Installing system FPGA image
Installing bootstrap
Installing active bootrom
Installing system FPGA image
MSM bootrom(s) installed successfully
MSM bootrom(s) will be activated upon next MSM reboot
Installing bootrom...
Installing microcontroller firmware to slot 1 ...
Installing FGPA firmware to slot 1. This will takes a
Installing microcontroller firmware to slot 2 ...
Installing FGPA firmware to slot 2. This will takes a
Installing microcontroller firmware to slot 5 ...
Installing FGPA firmware to slot 5. This will takes a
Installing microcontroller firmware to slot 6 ...
Installing FGPA firmware to slot 6. This will takes a
few minutes...
few minutes...
few minutes...
few minutes...
To verify that your firmware upgrade on both the MSM and I/O modules has been successful, verify
using the following command:
show version detail
BD-12804.1 # show version detail
Chassis
: 804030-00-05 07085-00026 Rev 5.0
Slot-1
: 804031-00-05 0706F-00200 Rev 5.0 uC: 5.00 FPGA: 5.0d
Slot-2
: 804031-00-05 0703F-00184 Rev 5.0 uC: 5.00 FPGA: 5.0d
Slot-5
: 804031-00-05 0703F-00185 Rev 5.0 uC: 5.00 FPGA: 5.0d
Slot-6
:
MSM-A : 804046-00-07 0706F-00117 Rev 7.0 BootROM: 1.0.0.3 IMG: 12.2.2 uC: 5.00
FPGA: 3.30
MSM-B
: 804046-00-07 0706F-00122 Rev 7.0 BootROM: 1.0.0.3
IMG: 12.2.2
uC: 5.00
30
Upgrading to ExtremeXOS
PSUCTRL-1 : 700111-00-01 06525-00997 Rev 1.0 BootROM: 2.13
PSUCTRL-2 : 700111-00-01 06525-00909 Rev 1.0 BootROM: 2.13
PSU-1
: PS 2336 4300-00145 0641K-22897 Rev 1.0
PSU-2
: PS 2336 4300-00145 0641K-23307 Rev 1.0
PSU-3
: PS 2336 4300-00145 0641K-23266 Rev 1.0
PSU-4
:
PSU-5
:
PSU-6
:
Image
: ExtremeXOS version 12.2.2 v1202b25 by release-manager
on Tue Nov 6 22:56:10 PST 2007
BootROM : 1.0.0.3
BD-12804.2 #
The backup MSM version is not shown until the MSM is made the primary MSM.
3 Determine your current active image partition by running the show switch command. The Image
Booted field shows the current active partition.
4 Download the ExtremeXOS 12.2.2 image to the alternate partition using the following command:
download image <ipaddress> <filename> vr <vrname> <image partition>
For example, if your current image is running in the primary partition, download the new image in
the secondary partition:
download image 10.60.116.11 summitX-12.2.2.xos vr vr-mgmt secondary
5 Run the show switch command again to determine that the image is downloaded into the partition
you have specified.
6 Reboot the switch.
Use the reboot command to reboot the switch.
7 When the switch comes up, run the save configuration command to save the configuration in the
upgraded image.
31
Upgrading to ExtremeXOS
2 Use the management VLAN virtual router to connect to your TFTP server by configuring an IP
address on the management VLAN using the following command:
configure mgmt ipaddress 192.168.1.134/24
NOTE
The default VLAN has no ports because it does not recognize the chassis.
32
Upgrading to ExtremeXOS
3 Test which virtual router you will need to specify when you download the image to your switch by
using the following command and your own IP address:
ping vr vr-mgmt 192.168.0.12
This command must successfully reach your TFTP server in order to download the image.
4 Download and install the image to the switch using the following command:
download image 192.168.0.12 bd12k-12.2.2.xos vr vr-mgmt
BD-12802
SysHealth check:
Recovery Mode:
System Watchdog:
Enabled (Normal)
All
Enabled
Current Time:
Timezone:
Boot Time:
Boot Count:
Next Reboot:
System UpTime:
Slot:
Current State:
MSM-A *
-----------------------MASTER
Image Selected:
Image Booted:
Primary ver:
Secondary ver:
secondary
secondary
12.0.0.13
12.2.2
Config Selected:
Config Booted:
NONE
Factory Default
33
Upgrading to ExtremeXOS
NOTE
For the BlackDiamond 8800 series of switches, a hitless upgrade to ExtremeXOS 12.2.2 from an earlier release is
not supported and should not be attempted. Use the normal software upgrade process for these switches.
Run the show switch command to determine which partition is the active partition and which
partition is the alternate partition.
2 In the following example, the secondary image is the active partition. The download is performed on
the primary image.
Execute the CLI command download image 10.201.14.13 bd12k-12.2.2.xos primary
* BD-12804.8 # download image 10.201.13.14 bd12k-12.2.2.xos primary
Do you want to install image after downloading? (y - yes, n - no, <cr> - cancel)
Yes
3 When the download is complete, run the show switch command to confirm the new image
downloaded to the primary image.
4 Verify the following before rebooting the backup MSM:
MSM-A *
MSM-B
------------------------------------Current State:
Image Selected:
Image Booted:
Primary ver:
Secondary ver:
MASTER
primary
secondary
12.2.1
11.4.1.4
Image Selected and Image Booted are both set for primary on the backup MSM.
MSM:
MSM-A *
MSM-B
------------------------------------Current State:
Image Selected:
Image Booted:
Primary ver:
Secondary ver:
MASTER
primary
secondary
12.2.1
11.4.1.4
7 Execute the run msm-failover command from the master MSM (MSM-A).
8 MSM-B becomes the master MSM, and MSM-A will reboot.
34
Upgrading to ExtremeXOS
9 Run the show switch command to:.
Verify that MSM-B is the master MSM and MSM-A is the backup MSM and displays (In Sync).
Verify that Image Selected and Image Booted are set for primary on both MSMs.
MSM:
MSM-A
MSM-B *
------------------------------------Current State:
Image Selected:
Image Booted:
MASTER
primary
primary
10 Run the run msm-failover command again so that MSM-A becomes the master MSM.
11 Run the show switch command to confirm the master MSM is now MSM-A.
MSM:
MSM-A *
MSM-B
------------------------------------Current State:
Image Selected:
Image Booted:
Primary ver:
Secondary ver:
MASTER
primary
primary
12.2.1
11.4.1.4
Answer n, for no, so that the image will not be installed after downloading.
Next, manually install the image, using the following command:
install image bd10k-12.2.2.xos
Now the two MSMs have the same image installed, but may not have the same configurations. Reboot
the secondary MSM using one of the following commands:
reboot msm b (if you are running on MSM A)
reboot msm a (if you are running on MSM B)
35
Upgrading to ExtremeXOS
If you have a Rev 10 (or later) MSM, the show version command output will look like this:
MSM-A :804407-00-10 0505F-00429 Rev 10.0 BootROM: 1.0.1.5 IMG:
Complete show version command output with Rev 10 MSMs will look like this:
BD-10808.2 #
BD-10808.2 # show version
Chassis
: 804300-00-03 0324X-00026 Rev 3.0
MSM-A
: 804407-00-10 0505F-00429 Rev 10.0 BootROM: 1.0.1.5 IMG:
MSM-B
: 804407-00-10 0505F-00431 Rev 10.0 BootROM: 1.0.1.5 IMG:
Image
: ExtremeXOS version 11.1.3.3 v11133 by release-manager on Thu Mar 31
19:12:57 PST 2005
BootROM : 1.0.1.7
BD-10808.3 #
NOTE
You must terminate and restart the thttpd process before you can use SSL.
Assuming that you have an installed and running ExtremeXOS 12.2.2 software on the active partition,
follow these steps to install the module:
1 Download the module image to your TFTP server.
Download the image you received from Extreme Networks to your TFTP server.
36
Upgrading to ExtremeXOS
2 Determine the active partition for your switch.
Run the show switch command to determine your current selected and booted image partitions.
The booted image partition indicates the currently active partition.
3 Download and install the module image to the active partition.
Download the image to the switch using the download image command. The filename for the only
available module image is bd10k-12.2.2-ssh.xmod.
The virtual router <vr> that you will use is the one that connects to your TFTP server (you
determined this in step 2, Verify which virtual router connects to your TFTP server. in the upgrade
procedure). Since the system virtual router names changed from release 10.1.2.17 to 11.2.3.3, the
name will be different from that used to download the initial upgrade image. Use vr-mgmt for this
step or vr-default.
This example assumes that you are using virtual router vr-mgmt and TFTP server 192.168.0.12,
substitute your own virtual router and IP address when you run the command:
download image 192.168.0.12 bd10k-12.2.2-ssh.xmod vr vr-mgmt <partition> (primary
or secondary)
Answer y, for yes, so that the image will be installed after downloading.
4 Run the run update command.
Run the following command:
run update
The run update command starts up the processes associated with the new module, and makes them
available to the system. You should now be able to run the commands associated with SSH2.
You can verify that the SSH2 module is running by issuing the following command:
show process
If SSH2 is running, you will see a process named exsshd listed. You can then configure and enable
SSH2 on the switch.
You can also verify that the SSH2 module is installed by issuing the following command:
show management
If the SSH module is installed, you will see text similar to the following:
SSH access : Disabled (Key invalid, tcp port 22 vr all)
If the SSH module is not installed, you will see text similar to the following:
SSH Access : ssh module not loaded.
37
Upgrading to ExtremeXOS
Downgrading Switches
Following are the instructions for downgrading your ExtremeXOS version 12.2.2 installation to a
previous version. It is assumed that you saved your configuration using the 11.4.1 image, and that the
11.4.1 image is currently installed on the switch, on the non-booted partition.
NOTE
Do not downgrade a BlackDiamond 8810 switch to an image earlier than 11.1.1 or a Summit X450 switch to an
image earlier than 11.2.1. Do not downgrade a BlackDiamond 8806 switch to an image earlier than 11.3.1.3. Do
not downgrade a Summit X450a or X450e switch to an ExtremeXOS image earlier than 11.5.1.
To downgrade to the existing ExtremeXOS version 11.4.1 image on your system, you will be following
these steps:
1 Determine your selected and booted image partitions.
Run the show switch command to determine your current selected and booted image partitions.
The selected image partition indicates which image will be used at the next reboot. The booted
image partition indicates which image was used at the last reboot.
Output from this command includes the version of the selected and booted images and if they are in
the primary or the secondary partition. In this example, the selected and booted images are in the
secondary partition.
...
Image Selected:
Image Booted:
Primary ver:
Secondary ver:
secondary
secondary
11.4.1.4
12.2.2
Config Selected:
Config Booted:
primary.cfg
primary.cfg
If you are currently running the image booted from the secondary partition, run this command:
use image primary
38
primary
secondary
11.4.1.4
12.2.2
Upgrading to ExtremeXOS
Config Selected:
Config Booted:
...
bdversion11_4_1_4.cfg
primary.cfg
39
Upgrading to ExtremeXOS
40
Limits
Supported Limits
Table 35 summarizes tested metrics for a variety of features, as measured in a per-system basis unless
otherwise noted. These limits may change but represent the current status. The contents of this table
supersede any values mentioned in the ExtremeXOS Concepts Guide.
NOTE
The scaling and performance information shown in Table 35 is provided for the purpose of assisting with network
design. It is recommended that network architects and administrators design and manage networks with an
appropriate level of network scaling head room. The scaling and performance figures provided have been verified
using specific network topologies using limited switch configurations. There is no guarantee that the scaling and
performance figures shown are applicable to all network topologies and switch configurations and are provided as a
realistic estimation only. If you experience scaling and performance characteristics that you feel are sufficiently
below what has been documented, contact Extreme Networks technical support for additional assistance.
NOTE
The route limits shown in Table 35 for IPv4 and IPv6 routing protocols are software limits only. The actual hardware
limits may be lower than the software limits, based on platform. The hardware limits for specific platforms are
specified as "IPv4/IPv6 routes (LPM entries in hardware)" in the following table.
NOTE
On a BlackDiamond 8800 or a Summit X650, X450, or X250e switch, it is not advised to have greater than 25,000
total IP routes from all routing protocols. Adverse effects can occur with routing tables larger than this, especially
when a single network event or CLI command affects a significant number of routes. For example, just after such a
network event, the added system load will cause a save configuration command to time out.
Product
Limit
BlackDiamond 10808
300,000
300,000
41
Limits
Metric
Product
Limit
128
1,016
a-series modules
2,048
c-series modules
4,096
e-series modules
1,024
BlackDiamond 10808
30,000
1,024
Summit X250e
per port groups 1-24 and 25-48
1,024
Summit X450
(per GigE port)
(per 10 GigE port)
128
1,016
Summit X450a
per port groups 1-24 and 25-48
2,048
Summit X450e
per port groups 1-24 and 25-48
1,024
2,048
2,048
2,048
42
2,048
16
Summit X450
16
Limits
Metric
Product
Limit
16
8
8
Summit X250e
per port groups 1-24 and 25-48
Summit X450a
per port groups 1-24 and 25-48
16
Summit X450e
per port groups 1-24 and 25-48
12
12
12
12
BlackDiamond 20808
8,000
BlackDiamond 20808
31,700
All platforms
16
256
1,024
43
Limits
Metric
Product
Limit
256*
BlackDiamond 10808
512
256
MSM-1XL
MSM-1
BlackDiamond 12800 series
MSM-5
MSM-5R
MSM-6R
256
256*
512
Summit X450
128*
Summit X450a
128*
Summit X450e
128*
Summit X650
128*
64
256
1,024
25,000
BlackDiamond 10808
MSM-1XL
MSM-1
1,000,000
400,000
400,000
400,000
1,000,000
Summit X450
25,000
Summit X450a
25,000
Summit X450e
25,000
Summit X650
25,000
25,000
BlackDiamond 10808
2,000,000
900,000
MSM-1XL
MSM-1
BlackDiamond 12800 series
MSM-5
MSM-5R
MSM-6R
44
900,000
900,000
2,000,000
Summit X450
25,000
Summit X450a
25,000
Summit X450e
25,000
Summit X650
25,000
Limits
Metric
Product
Limit
25,000
BlackDiamond 10808
MSM-1XL
MSM-1
1,000,000
450,000
450,000
450,000
1,000,000
Summit X450
25,000
Summit X450a
25,000
Summit X450e
25,000
Summit X650
25,000
All platforms
4,096
Summit X450a
2,048
Summit X650
2,048
All platforms
All platforms
4,094
All platforms
32
All platforms
32
All platforms
64
All platforms
128
12
Summit X450a
with 50 DACLs
with 500 DACLs
10
5
Summit X650
with 50 DACLs
with 500 DACLs
EAPS domainsmaximum number of EAPS
domains.
Note: An EAPS ring that is being spatially
reused cannot have more than four configured
EAPS domains.
EAPSv1 protected VLANsmaximum number of
protected VLANs.
10
5
64
BlackDiamond 10808
128
128
Summit series
32
2,000
BlackDiamond 10808
4,000
4,000
Summit series
1,000
45
Limits
Metric
Product
Limit
1,000
BlackDiamond 10808
4,000
4,000
Summit series
500
5,000
BlackDiamond 10808
5,000
5,000
All platforms
64
BlackDiamond 10808
128
64
Summit series
64
1,000
BlackDiamond 10808
3,000
3,000
Summit series
1,000
All platforms
All platforms
All platforms
10,000 pps
16,000 pps
Summit series
10,000 pps
16,000
16,000
8,000
16,000
Summit X450a
16,000
Summit X450e
8,000
Summit X650
32,000
256
1,024
1,024
256
Summit X450a
1,024
Summit X450e
1,024
Summit X650
1,024
BlackDiamond 10808
224,000
49,000
224,000
46
Limits
Metric
Product
Limit
16,384
16,384
32,768
8,192
128,000
BlackDiamond 20808
400,000
8,192
Summit X250e
8,192
Summit X450
16,384
Summit X450a
16,384
Summit X450e
8,192
Summit X650
32,768
SummitStack
128,000
4,076
4,076
4,076
4,076
1,024
2,048c
500
BlackDiamond 10808
15,000
15,000
BlackDiamond 20808
3,700
Summit X150
500d
Summit X250e
500d
Summit X350
500d
Summit X450
1,024
Summit X450a
1,024
Summit X450e
500d
Summit X650
2,048
47
Limits
Metric
Product
Limit
2,000d
2,000d
6,000d
500d
Summit X150
500d
Summit X250e
500d
Summit X350
500d
Summit X450
2,000d
Summit X450a
2,000d
Summit X450e
500d
Summit X650
6,000d
60
1,000
2,000
448
Summit X150
448
Summit X250e
448
Summit X350
448
Summit X450
60
Summit X450a
1,000
Summit X450e
448
Summit X650
1,000
All platforms
500
All platforms
50
1,000
2,000
BlackDiamond 10808
5,000
5,000
1,000
Summit X650
2,000
10,000
20,000
BlackDiamond 10808
30,000
30,000
10,000
Summit X650
20,000
All platforms
250
48
Limits
Metric
Product
Limit
1,000
2,000
BlackDiamond 10808
5,000
5,000
Summit series
1,000
10,000
20,000
BlackDiamond 10808
30,000
30,000
Summit series
10,000
All platforms
20,480
2,000d
8,000
8,000
1,000d
BlackDiamond 10808
224,000
49,000
224,000
BlackDiamond 20808
20,000
Summit X250e
1,000d
Summit X450
2,000d
Summit X450a
8,000
Summit X450e
1,000d
Summit X650
8,000
2,000d
2,000d
6,000d
500d
BlackDiamond 10808
224,000
49,000
224,000
Summit X250e
500d
Summit X450
2,000d
Summit X450a
2,000d
Summit X450e
500d
Summit X650
6,000d
49
Limits
Metric
Product
Limit
N/A
14,000d
18,000d
1,000d
BlackDiamond 10808
N/A
N/A
N/A
Summit X250e
1,000d
Summit X450
N/A
Summit X450a
14,000d
Summit X450e
1,000d
Summit X650
18,000d
1,000d
3,000d
250d
BlackDiamond 10808
112,000
24,500
112,000
Summit X250e
250d
Summit X450a
1,000d
Summit X450e
250d
Summit X650
2,000d
25,000
BlackDiamond 10808
1,000,000
1,000,000
Summit series
25,000
8,000
12,000
12,000
480
BlackDiamond 10808
256,000
MSM-1
MSM-1XL
98,000
229,000
50
49,000
229,000
229,000
Summit X250e
480
Summit X450
8,000
Summit X450a
12,000
Summit X450e
480
Summit X650
12,000
Limits
Metric
Product
Limit
6,000
6,000
240
BlackDiamond 10808
114,500
114,500
Summit X250e
240
Summit X450a
6,000
Summit X450e
240
Summit X650
6,000
512
All platforms
1,024
All platforms
1,024
2, 4, or 8
Summit X250e
2, 4, or 8
Summit X450
2, 4, or 8
Summit X450a
2, 4, or 8
Summit X450e
2, 4, or 8
Summit X650
2, 4, or 8
51
Limits
Metric
Product
Limit
511
1,023
255
511
1,023
255
511
1,023
255
31
63
15
BlackDiamond 10808
(with up to 8 gateways per destination)
7,136
7,136
Summit X250e
(default maximum gateways of 4)
(if maximum gateways is 2)
(if maximum gateways is 8)
31
63
15
Summit X450
(default maximum gateways of 4)
(if maximum gateways is 2)
(if maximum gateways is 8)
511
1,023
255
Summit X450a
(default maximum gateways of 4)
(if maximum gateways is 2)
(if maximum gateways is 8)
511
1,023
255
Summit X450e
(default maximum gateways of 4)
(if maximum gateways is 2)
(if maximum gateways is 8)
31
63
15
Summit X650
(default maximum gateways of 4)
(if maximum gateways is 2)
(if maximum gateways is 8)
IP multinetting (secondary IP addresses)
maximum number of secondary IP addresses
per VLAN.
52
All platforms
511
1,023
255
64
Limits
Metric
Product
Limit
128
255
255
Summit X450
128
Summit X450a
128
Summit X650
128
2, 4, or 8
BlackDiamond 10808
2, 4, or 8
2, 4, or 8
2, 4, or 8
All platforms
255
All platforms
256
20,000
BlackDiamond 10808
30,000
30,000
Summit X450
5,000
Summit X450a
5,000
Summit X650
20,000
25,000
BlackDiamond 10808
MSM-1
MSM-1XL
120,000
180,000
100,000
120,000
180,000
Summit X450
5,000
Summit X450a
5,000
Summit X650
25,000
25,000
BlackDiamond 10808
MSM-1
MSM-1XL
120,000
180,000
100,000
120,000
180,000
Summit X450
5,000
Summit X450a
5,000
Summit X650
25,000
53
Limits
Metric
Product
Limit
20,000
BlackDiamond 10808
20,000
25,000
MSM-1
MSM-1XL
BlackDiamond 12800 series
20,000
20,000
25,000
MSM-5
MSM-5R
MSM-6R
Summit X450
3,000
Summit X450a
3,000
Summit X650
20,000
10,000
BlackDiamond 10808
30,000
65,000
MSM-1
MSM-1XL
BlackDiamond 12800 series
30,000
40,000
65,000
MSM-5
MSM-5R
MSM-6R
Summit X450
5,000
Summit X450a
5,000
Summit X650
10,000
10,000
BlackDiamond 10808
30,000
65,000
MSM-1
MSM-1XL
BlackDiamond 12800 series
30,000
40,000
65,000
MSM-5
MSM-5R
MSM-6R
Summit X450
5,000
Summit X450a
5,000
Summit X650
10,000
10,000
BlackDiamond 10808
15,000
25,000
MSM-1
MSM-1XL
BlackDiamond 12800 series
MSM-5
MSM-5R
MSM-6R
54
15,000
15,000
25,000
Summit X450
3,000
Summit X450a
3,000
Summit X650
10,000
Limits
Metric
Product
Limit
20,000
BlackDiamond 10808
MSM-1
MSM-1XL
60,000
130,000
30,000
60,000
130,000
Summit X450
5,000
Summit X450a
5,000
Summit X650
20,000
20,000
BlackDiamond 10808
MSM-1
MSM-1XL
60,000
130,000
30,000
60,000
130,000
Summit X450
5,000
Summit X450a
5,000
Summit X650
20,000
20,000
BlackDiamond 10808
20,000
20,000
Summit X450
3,000
Summit X450a
3,000
Summit X650
20,000
All platforms
9,216
55
Limits
Metric
Product
Limit
with 10G4X
without 10G4X
32
128
BlackDiamond 10808
128
128
128
Summit X250e
128
Summit X450
32
Summit X450a
128
Summit X450e
128
Summit X650
128
SummitStack
56
32
32
128
128
BlackDiamond 10808
16
16
Summit series
All platforms
20,000
All platforms
1,024
BlackDiamond 10808
100,000
100,000
BlackDiamond 20808
100,000
BlackDiamond 10808
4,000
4,000
2,000
2,000
All platforms
16
All platforms
All platforms
16
All platforms
16
BlackDiamond 10808
32
32
BlackDiamond 20808
32
Limits
Metric
Product
Limit
BlackDiamond 10808
32
32
BlackDiamond 20808
32
BlackDiamond 10808
50
50
BlackDiamond 20808
50
BlackDiamond 10808*
40,000
30,000
BlackDiamond 20808
16,000
BlackDiamond 10808
1,000
1,000
BlackDiamond 20808
100
32
BlackDiamond 10808
32
32
Summit X450
16
Summit X650
16
16,000
BlackDiamond 10808
16,000
16,000
Summit X450
8,000
Summit X650
8,000
BlackDiamond 10808
Summit X450
Summit X650
1,024
2,048
BlackDiamond 10808
15,000
15,000
BlackDiamond 20808
3,700
Summit series
1,024
1,024
4,000
Summit X150
1,024
1,024
Summit X350
1,024
1,024
1,024
57
Limits
Metric
Product
Limit
All platforms
2,000
128
BlackDiamond 10808
255
255
BlackDiamond 20808
255
Summit X250e
128
Summit X450
128
Summit X650
128
All platforms
2, 4, or 8
BlackDiamond 10808
BlackDiamond 20808
16
2, 4, or 8
2, 4, or 8
2, 4, or 8
20,000
BlackDiamond 10808
130,000
130,000
BlackDiamond 20808
130,000
Summit X250e
5,000
Summit X450
5,000
Summit X650
5,000
7,000
BlackDiamond 10808
7,000
7,000
BlackDiamond 20808
7,000
Summit X250e
2,000
Summit X450
2,000
Summit X650
2,000
100
BlackDiamond 10808
200
100
BlackDiamond 20808
200
Summit X250e
50
Summit X450
50
Summit X650
50
400
58
Limits
Metric
Product
Limit
32
16
256
BlackDiamond 10808
384
256
Summit X450
128
Summit X450a
128
Summit X650
128
64
BlackDiamond 10808
128
128
Summit X450
64
Summit X450a
64
Summit X650
64
16
10,000
BlackDiamond 10808
60,000
50,000
Summit X450
10,000
Summit X450a
10,000
Summit X650
10,000
6,000
BlackDiamond 10808
6,000
6,000
Summit X450
3,000
Summit X450a
3,000
Summit X650
3,000
1,024
2,048c
BlackDiamond 10808
12,000
12,000
BlackDiamond 20808
3,700
Summit X150
500d
Summit X250e
500d
Summit X350
500d
Summit X450
1,024
Summit X450a
1,024
Summit X450e
500d
Summit X650
2,048
59
Limits
Metric
Product
Limit
2,000d
2,000d
6,000d
500d
Summit X150
500d
Summit X250e
500d
Summit X350
500d
Summit X450
2,000d
Summit X450a
2,000d
Summit X450e
500d
Summit X650
6,000d
1,024
2,048c
BlackDiamond 10808
12,000
12,000
BlackDiamond 20808
3,700
Summit series
1,024
Summit X650
2,048
1,024
2,048c
BlackDiamond 10808
15,000
15,000
BlackDiamond 20808
3,700
Summit series
1,024
Summit X650
2,048
All platforms
256
All platforms
256
All platforms
32
383
BlackDiamond 10808
1,400
1,400
25
23
60
49
47
23
Limits
Metric
Product
Limit
All platforms
512
All platforms
2,046
BlackDiamond 10808
MSM-1
MSM-1XL
98,000
100,000
49,000
100,000
100,000
All platforms
10,000
10,000
BlackDiamond 10808
10,000
Summit X250e
3,000
Summit X450
3,000
Summit X650
10,000
256
BlackDiamond 10808
384
Summit X250e
128
Summit X450
128
Summit X650
256
3,000
BlackDiamond 10808
5,000
5,000
Summit X250e
1,500
Summit X450
1,500
Summit X650
3,000
BlackDiamond 10808
32
32
BlackDiamond 20808
512
BlackDiamond 10808
400
400
BlackDiamond 20808
400
BlackDiamond 10808
2,000
2,000
BlackDiamond 20808
2,000
BlackDiamond 10808
4,000
3,000
BlackDiamond 20808
4,000
61
Limits
Metric
Product
Limit
BlackDiamond 10808
2,000
1,500
BlackDiamond 20808
2,000
BlackDiamond 10808
1,000
1,000
BlackDiamond 20808
1,000
BlackDiamond 10808
1,000
1,000
BlackDiamond 20808
1,000
BlackDiamond 10808
64
64
BlackDiamond 20808
64
All platforms
64
All platforms
128
All platforms
64
All platforms
500
All platforms
1,000
All platforms
All platforms
2,048
dot1d
560
dot1w
560
All platforms
256
1,024
1,024
1,024
BlackDiamond 10808
1,024
1,024
Summit X150
1,024
1,024
Summit X250e
1,024
256
Summit X450e
1,024
Summit X450a
1,024
Summit X650
1,024
62
Limits
Metric
Product
Limit
All platforms
128,000
256,000
49,000
229,000
All platforms
Not supported
BlackDiamond 10808
BlackDiamond 20808
Summit X250e
Not supported
Summit X450
Not supported
Summit X650
Not supported
VLAN aggregationmaximum number of portVLAN combinations on any one super VLAN and
all of its sub VLANs.
All platforms
1,000
All platforms
4,094
BlackDiamond 12804
50,029
All platforms
4,094
All platforms
512
All platforms
4,094
All platforms
15
383
BlackDiamond 10808
1,400
1,400
25
23
49
47
Summit X650
23
All platforms
512
All platforms
2,046
63
Limits
Metric
Product
Limit
BlackDiamond 10808
4,000
4,000
BlackDiamond 10808
16
16
BlackDiamond 20808
16
BlackDiamond 10808
60,000
60,000
BlackDiamond 20808
100,000
BlackDiamond 10808
100,000
80,000
BlackDiamond 10808
2,000 pointto-point
2,000 pointto-point
BlackDiamond 20808
500
BlackDiamond 10808
16
16
BlackDiamond 20808
32
BlackDiamond 10808
2,000
2,000
BlackDiamond 20808
2,000
128
64
2
4
Limits
Metric
Product
Limit
10
3
10
3
4
1
a. The table shows the total available; see the note included in PD3-77983510.
b. An ACL mask defines a unique match criteria and relative rule precedence. Masks are automatically generated based on
the contents of an access-list policy. Only adjacent rules within the policy that have identical match criteria will utilize
the same ACL mask. For this reason, it is advantageous to list all rules with the same match criteria together unless a relative precedence with other policy rules is required. Using VLAN-based or wildcard ACLs requires the ACL masks to be
allocated on every port in the system.
c. Applies only if all enabled BlackDiamond I/O modules are BlackDiamond 8800 c-series modules.
d. Effective capacity varies based on actual IP addresses and hash algorithm selected, but is higher for BlackDiamond
8800 c-series modules and Summit X650 switches compared to BlackDiamond 8800 a-series and e-series modules and
Summit X450a switches.
65
Limits
66
This chapter describes items needing further clarification and behaviors that might not be intuitive. The
numbers shown in column one of the following tables are for internal reference and can be ignored.
This chapter contains the following section:
Open Issues
Following are the open issues for supported features in ExtremeXOS 12.2.2. They are organized into the
following sections:
Description
General
PD4-624062541
PD3-131866114
LPM Hardware Forwarding Using IPv6 Routes With a Mask Length Greater Than 64
Bits is Not Supported
BlackDiamond 8800 series and Summit series switches do not support LPM hardware
forwarding using IPv6 routes with a mask length greater than 64 bits. As a result, IPv6
packets may be forwarded in hardware to a different next hop by using a route with a mask
length less or equal to 64. This occurs even though a route with a mask length greater
than 64 with the correct next hop is known in software, but not in hardware. The following
log message is logged when the first route with a mask length greater than 64 is added:
<Noti:HAL.IPv6FIB.Notice> MSM-A: vrId 2 dest 3218:: / 77 nexthop :
IPv6 routes w/ mask len > 64 not supported in HW. Packets may be
forwarded using less-specific routes.
PD4-491938681
PD4-489592307
PD4-489359602
67
Description
PD4-489142320
PD4-486972363
PD4-313453484
PD4-448603051
PIM VLAN Continues to Operate in SSM VLAN Even After Clearing the Configuration
The unconfigure pim vlan command clears (unconfigures) an SSM configuration on a
VLAN but the VLAN continues to operate in the SSM VLAN, even after running the
disable pim and enable pim commands.
PD4-470597781
Local VLAN with 32 IP Addresses is Down, Dynamic Route With Same IP Addresses
is Not Reachable
When a local VLAN with 32 subnet-mask IP addresses is down, the dynamic route with the
same 32 subnet-mask IP addresses is not reachable.
PD4-460892051
PD4-460157940
PD4-464587012
PD4-438482720
PD4-448681226
show l2stats Command Does Not Count ARP Packets to the CPU
The show l2stats command does not count address resolution protocol (ARP) packets
to the CPU, even though the packet goes to the CPU.
PD4-482808326
PD4-467944506
Routes Not Learned Through RIPng After Port in Tunnel Source VLAN is Changed
From Tagged to Untagged
With IPv6-in-IPv4 tunnels, routes are not learned through RIPng after the port in the
tunnel source VLAN is changed from tagged to untagged or vice versa.
PD4-469889565,
PD4-274249122
68
Description
If a Summit switch populated with an XGM2-2bt module is rebooted, a false link up is
seen on 10G links connected to the XGM2-2bt ports approximately 30 to 50 seconds
before the switch has fully booted.
PD3-210656503,
PD4-331224298
PD3-190363671
PD3-207678214
PD3-207576821
PD3-206179541
PD3-202580681
PD3-192821161
PD3-201570011
PD3-132775269
69
Description
The following error messages are shown in the log when running 50,000 unicast routes
with ECMP enabled:
02/05/2007 15:38:37.89 <Warn:HAL.Sys.Warning> MSM-A: hal: Reached
maximum otp index allocation
02/05/2007 15:38:37.56 <Warn:HAL.Sys.Warning> MSM-A: Previous
message repeated 999 additional times in the last 1 second(s)
PD3-68165111
PD3-41204902
Output for the "show platform ipv4mc group <group address>" Command Contains
an invalid Entry
The output for the show platform ipv4Mc group <group address> command
contains an invalid entry.
BD-10808.61 # show platform ipv4Mc g 239.255.255.1
Total Entries:27
Index
Type VrId
Port
Source Group PTI Vlan
004A6 -> 03E3A [3] - invalid
PD3-14127903,
PD3-13538171
Egress Mirror Packets are Being Sent to Mirror Port in Link Down State
Mirrored egress packets are being sent to the mirror port even when the port is in the link
down state.
PD3-187808062
Switch Does Not Show Warning Message for Down Revision MSM and I/O Modules
A BlackDiamond 12800 series switch does not show a warning message on the console for
down revision MSM and I/O modules after initialization.
PD3-187808062
PD3-125511903
PD3-86738591
PD3-98333969
Disabling and Enabling a Port Can Take 30 Seconds for Port to Activate
During continuous FDB learning, disabling/enabling a port can take up to 30 seconds for
the port to activate.
PD4-528151231
70
Description
A BlackDiamond 20808 switch crashes when configuring 10,000 IGMPv3 receivers and
5,000 streams and then running the disable ports all and enable ports all
commands.
PD4-483661511
PD4-466153001,
PD4-466153053
PD4-461858543
PD4-462788985
MSM Failover With Multiple EAPS Domains Causes a Continuous Loop with IGMP
Traffic
An MSM failover from MSM-A to MSM-B with multiple Ethernet Automatic Protection
Switching (EAPS) domains causes a continuous loop with Internet Group Management
Protocol (IGMP) traffic.
PD4-458894821
PD4-413420051
Hot Swapping Multiple I/O Modules Causes Most Modules to be Stuck in a Failed
State
Hot swapping multiple I/O modules at one time causes most of the I/O modules to be
stuck in a failed state.
PD4-444211398
Hot Swapping Multiple I/O Modules During a Soft Reboot Causes an I/O Failure
Hot swapping multiple I/O modules during an MSM soft reboot causes an I/O failure.
PD4-444211374
MSM Failover and Hot Swapping I/O Modules Causes I/O Failure
An MSM failover performed with hot swapping multiple I/O modules causes an I/O failure.
PD4-463434121
PD4-421365551
PD4-418743921
Booting Switch Takes Four Minutes after Disabling and Enabling XM-8XB Module
Booting a BlackDiamond 20808 switch with an XM-8XB module takes 4 minutes after
disabling and enabling the I/O slot.
PD4-272143930
Port 49 LED Does Not Light When Link Up on Summit X350-48t Switch
The LED for port 49 of a Summit X350-48t switch does not light when an XGM2-2sf or
XGM2-2bt module links up. This also occurs on the front and back LEDs except for port
50, which lights.
71
Description
PD4-310814981
PD3-204517991
Summit X250e-24X Combo Port Link May Come Up With the Correct Speed But in
Half-Duplex Mode
A Summit X250e-24X combo port link may come up with the correct speed but in halfduplex mode, even though the switch is configured as full-duplex mode when
autonegotiation is set to off on both sides of the link. For the link to come up in fullduplex mode as configured, you must disable and enable the port, or restart the port.
PD3-201233169
Port Does Not Come up After Disable/Enable or Reboot on Some Mitel IP Phones
A condition exists with some Mitel IP phones that are attached to an ExtremeXOS PoE
enabled platform that requires that you disable and enable inline power in order for the
phone to become active.
PD3-131375426
PD3-77711011
PD3-77711042
PD3-43606168
show log Command Output Filled with sFlow Receiver Missing Message
If sFlow does not have a collector configured using the configure sflow collector
command, the show log command generates the following messages:
08/23/2005 12:28:09.55 <Noti:sflow.debug.AddCntSmplFail> : Could
not add the counter sample for port 0:1020, as receiver is not
configured.
08/23/2005 12:07:49.55 <Noti:sflow.debug.AddCntSmplFail> : Previous
message repeated 61 additional times in the last 1200 second(s).
PD3-40266236,
PD3-40233121
Redundant Ports Not Correctly Moving to Other Ports in Load Sharing Mode
Traffic on load share ports configured as redundant ports incorrectly moves to other ports
in the load share group during link transition.
SummitStack
PD4-452191011
PD3-209191744
PD3-209191768
Some Port LEDs May Light Green Even Though Ports are Not Up
After running the disable port all command on a SummitStack, some port LEDs may
sometimes light green even though ports are not up.
72
Description
PD3-204744742
ACL
PD4-506754505
Dynamic Egress ALCs Set to Deny All Traffic, Traffic Still Hits ARP Reply Counter
When creating a dynamic egress ACL to deny all traffic, the traffic still hits the address
resolution protocol (ARP) reply counter but not denying the packets.
PD4-465744039
PD3-192175421
PD3-127190211
PD3-118223441,
PD3-57946832,
PD3-26612201,
PD3-24794592
Before Changing a VLAN Tag, Unconfigure all ACLs Applied to the VLAN
Before changing a VLAN tag, make sure you unconfigure all the ACLs applied to the VLAN.
Also, after changing the tag, reconfigure the ACLs to be applied on the VLAN.This applies
to BlackDiamond 10808 and 12800 series switches only.
PD3-126824622
PD3-28320363
BGP
PD4-588273813
PD3-209442785
CLEAR-Flow
PD4-278443631
CLI
73
Description
PD3-71725881
PD3-57182431
PD3-57182431
Control Protocols
PD3-125288233
Diagnostics
PD4-285686375
PD3-203116541
EAPS
PD4-471892924
PD4-326832374
Streams Are Flooded in All Active Ports for the Temporary Flood Duration
Streams are flooded in all active ports for the temporary flood duration after running the
restart ports all command because a kill entry is not getting installed.
PD3-104885349
PD3-97153785
74
Description
PD3-54870537,
PD3-45729158
ESRP
PD4-464792522
PD4-295424750
Running ESRP on Two Switches Causes the ESRP Domain on One Switch to
Remain in a Pre-Master State
Running ESRP on two switches causes the ESRP domain on one switch to remain in a premaster state and the neighboring switch to become the master. This issue is seen when
active ports are increased on both the master and slave switches at the same time.
PD3-52741820
Disabling a Shared Port Makes the ESRP Port Restart configuration disappears
Disabling a shared port results in the ESRP port restarting and the configuration
disappearing.
IGMP
PD4-443083317
IP Routing Protocols
PD3-132508261
IPv6 Unicast
PD3-139714881
IS-IS
PD3-190952336
Graceful Restart for IS-IS May Fail for the Entire Node
When one or more point-to-point interfaces are present on a router with IS-IS graceful
restart enabled, the graceful restart may fail for the entire node.
75
Description
When one or more point-to-point interfaces are present on a router with graceful restart
enabled, the graceful restart may fail for the entire node.
Workaround: Do not use point-to-point links if graceful restart is also used.
Mirroring
PD4-350969111
PD3-202013298
PD3-202013281
Running the enable learning Command on Remote Mirroring VLANs May Cause a
Loss of Traffic
Learning is disabled by default on remote mirroring VLANs. Running the enable
learning command on those VLANs may cause a loss of remote mirrored traffic.
PD3-79867211
PD3-28378521
MPLS
PD4-476351932
PD4-475414370
PD4-475414342
PD4-438179103,
PD4-385791701
PD4-476351932
76
Description
Performing a restart process mpls or a restart process ospf on a spoke node
in an HVPLS setup causes the Label Distribution Protocol (LDP) peer to go down with the
core node.
Workaround: Disable and enabled MPLS.
PD4-475414505
PD4-475414558
PD4-452308541
Secondary Pseudo Wire on ESRP Master Switch Not Accepted on Secondary Core
Node Pseudo Wire
The secondary pseudo wire on an Extreme Standby Router Protocol (ESRP) master switch
does not take the secondary core node pseudo wire after the primary core is rebooted.
PD3-208178928
PD3-157687121
Control Channel Type Router Alert Label Not Found in VCCV Packets
ExtremeXOS software uses Control Channel Type 2 to indicate router alert label mode. In
MPLS Router Alert Label mode, VCCV packets are encapsulated in a label stack. However,
the existing VCCV packets are sent like a stack without any PW label.
PD3-184989177
Enabling "LDP advertise static all" Removes Ingress LSPs Using Static Routes
When an LDP advertise static setting is set to all, all static routes are treated as
egress routes and egress LSPs are created. That is, a label is generated and advertised for
the static route. If the router at the end of the static route advertises a label matching that
static route, the LSP that was previously an egress LSP becomes a transit LSP. An ingress
LSP should also be created whenever a label is received, however, the ingress LSP is never
created.
Workaround: Do not use the LDP advertise static all configuration in situations
where an ingress LSP for a static route is required.
PD3-202184409
PD3-139423053
PD3-121985381
PD3-118914021
77
Description
When an OSPF neighbor is configured between two LSRs and MPLS, and an LDP session
is configured between them, the ABR router advertises a default route to the internal
router. The default route is not mapped to a label in the internal router because the ABR
does not advertise the label
PD3-97057691
PD3-92653036
Egress LSPs using Advertised Implicit NULL Labels are Not Displayed
The show mpls label, show mpls rsvp-te label, and show mpls rsvp-te
lsp command output currently does not display egress LSPs using advertised implicit
NULL labels.
PD3-111544904
PD3-93218551
Packets with Router Alert Label (0x00001) are Not being Forwarded
If either an egress or a transit LSP traverses the system, and an MPLS labelled packet
containing a router alert label is received, that packet is not forwarded.
PD3-93069318
PD3-104731701
ExtremeXOS Does Not Send Back ICMP Responses for Traceroute through NonPipe Mode LSPs
When a traceroute is performed by setting the MPLS TTL to the IP TTL, ExtremeXOS does
not correctly send back an ICMP response. The result is * characters in the traceroute
for the routers that timed out. If a route is available, ExtremeXOS should attempt to send
back an ICMP response.
PD3-93630853
PD4-475414505
PD4-475414558
PD3-204793983
PD3-203917264
Changing Explicit Route Object of LSP Does Not Clearly Show LSP Status
When an explicit route object (ERO) is changed for an LSP session that is up, the LSP that
is already up is not torn down. LSP stays up based on the older values. The retry count
continues to increment as LSP tries to come up with new values by querying routes every
30 seconds. This is done while the earlier LSP session is still active using the previously
configured values. See the retry count in the command output for the show mpls rsvpte lsp <lsp_name> detail command.
Multicast
PD4-573403233
78
Description
The MIB igmpCacheSelf from the SNMP MIB shows a value of "false" for reports that are
statically added to a switch.
PD4-521915271
PD4-584325495
PD4-449743037
PD4-478198808
PD4-438482713
PD4-438482695
PD4-438482687
When PIM Receives a Prune from Downstream Neighbor, Prune Hold Time is Not
Considered
When Protocol Independent Multicast (PIM) receives a prune from a downstream neighbor,
the prune hold time is not considered. This is the time for which the upstream neighbor
should hold the prune.
PD4-466821462
Certain MSDP Multicast Streams are Not Received When msdp sa-cache Entry is
Correct
Certain Multicast Source Discovery Protocol (MSDP) multicast streams are not received
when the msdp sa-cache entry is correct, but no Protocol Independent Multicast (PIM)
cache entries are received.
PD4-493683561,
PD4-449901506
PD4-339945634
PD4-308157118
Ingress Multicast Data Packets are Not Forwarded When vMAN Ethertype is 0x8100
When IGMP snooping is disabled, ingress multicast data packets are not forwarded when
vMAN Ethertype is 0x8100.
Workaround: Set the vMAN Ethertype to default (0x88a8).
79
Description
PD3-203759919
PD4-318846862
L3 Multicast Traffic in a VPLS vMAN is Forwarded Twice When the LSP is Changed
L3 multicast traffic in a Virtual Private LAN Services (VPLS) vMAN is forwarded twice when
the Label Switched Path (LSP) is changed to port sharing and is then changed back.
PD4-235071630
PD3-128093864
PD3-189399801
show pim rp-set Command Does Not Always Show All Rendezvous Points
The command output for the show pim rp-set command does not always show all the
Rendezvous Points for a multicast group.
Workaround: Do not configure the group address in the rp-list with a non-zero host portion.
PD3-200659931
PD3-78144711
PD3-79383551
IGMPv3 Report Record Type "5" Message Does Not Work Correctly
IGMPv3 Report Record type "5" does not work as expected when sent after a type "2" or a
type "4" message.
PD3-2841008
PD3-139683642,
PD3-16451411
Network Login
PD4-575731921
PD4-468366251
PD4-427423116
80
Description
When a dot1x client is authenticated at multiple VLANs, the output of the show
netlogin port command shows the client is sometimes authenticated at the local
server and other times at a RADIUS server.
Note: This occurs when dot1x and MAC authentication are enabled on the port.
PD4-422918807
Network Services
PD3-166858162
Second Combo Port Does Not Come After Reboot if First Combo Port is Redundant
to Another Port
On a Summit X250e-24x switch, if one of the combo ports is redundant to a front panel
port, after rebooting, the second combo port does not come up if the primary port for the
SRP is active.
PD3-93829391
PD3-67431351
Ingress Rate Limiting and Egress Rate Limiting are Mapping to Multiple Ports
Configuring an ingress traffic queue and an egress traffic queue association to multiple
ports in sequential order generates the following error:
Egress queue already associated to this ingress queue
Configuration failed on backup MSM, command execution aborted!
PD3-67727590
PD3-62778911
Converging MVR with EAPS on a BlackDiamond 8800 Causes a Large Packet Loss
With MVR enabled on a BlackDiamond 8800, when the ingress port is on the egress-list
this causes a high volume of traffic loss.
PD3-64743301
OSPF
PD4-299382986,
PD4-217017923
PD3-133427241
81
Description
QoS
PD4-259174051
PD3-202190332
HQoS Allows Multiple Egress Queues to be Linked to a Single Ingress allowegress Queue
Configuring HQoS allows multiple egress queues to be linked to a single ingress allowegress queue.
PD3-129177287
If IRL-ERL Traffic Queue Mapping Extends to all Ports, Port Selection is Void
Create an ingress traffic-queue with allow egress shaping and create an egress
traffic-queue. Map the IRL to ERL on all ports. Send unidirectional traffic, which should
hit the IRL rule at ingress. The same traffic is visible to the ERL at the egress port without
selecting the designated port of VLAN/vMAN.
PD3-16578296
RMON
PD3-12950492
ScreenPlay
PD3-204766394
PD3-111344472
Security
PD4-315092889
PD3-205012219
PD3-186939931
Ingress Mirroring is Not Working for DHCP Snooping When Snooping is Enabled
Ingress mirroring is not working for DHCP snooping when snooping is enabled on
BlackDiamond 12800 series switches. DHCP snooping works correctly when DHCP
snooping is disabled.
PD3-133763260
82
Description
A new backup MSM reboots twice after failover (run MSM-failover). The backup MSM
initially comes up correctly but is not in the "In SYNC" state. The MSM then reboots
without a core and comes up "In Sync" on a BlackDiamond 8800.
This problem does not occur consistently and should not affect data transmission. It is
recommended that you disable the notify function in the disable ip-security
anomaly-protection notify <log | cache | snmp> command to avoid potential
problems.
PD3-75120608
Unconfigure RADIUS and TACACS Does Not Reset Timeout Value to System Default
The unconfigure radius and unconfigure tacacs commands do not reset the
timeout value to the system default of 3 seconds.
PD3-74708933
sFlow
PD3-205380274
SNMP
PD3-206632121
PD3-181304741
entPhysicalDescr MIB for XENPAK Modules Always Shown as XGMAfter inserting a XENPAK in a stack (XGM2-38n, XGM-38n) and performing an snmpwalk
on the entityMib entPhysicalDescr variable, XGM- is always shown, not the complete
module description.
PD3-39411271
PD4-484447829,
PD4-344322578
PD3-189927343
83
Description
Stacking
PD3-136493921
AAA Services Do Not Become Available on Stacking Switch that has a Mismatched
License
If a switch is added to a stack whose master switch has a license level that is greater than
the level of the switch, the switch will fail. The complete condition can be seen using the
show slot detail command. In this state, the switch does not have AAA services
available. You will only be able to log into the switch using the failsafe account that was
last assigned to it. You must log into the switch to upgrade the license. If the switch is not
using the failsafe account configured on the stack, you can use the synchronize
stacking {node-address <node-address> | slot <slot-number>} command to
copy the failsafe account information from the master switch to the failed switch NVRAM.
You can also use the configure stacking license-level command to configure a
license level restriction on the entire stack and then reboot the stack. Once the stack is
restarted, there is no longer a license mismatch, enabling you to log into the switch and
upgrade the license. From the master switch, run the unconfigure stacking
license-level command to get the stack to operate at the desired license and then
reboot the stack.
PD3-126650411
Stackable Systems with Two or More Nodes may Experience Random VRRP Master/
Backup Flapping
A stackable system with two or more nodes may experience random VRRP master/backup
flapping issues after an MSM failover when configured with the maximum 128 VRRP
instances using the minimum advertisement interval of 100ms and maximum tracking
entries.
VRRP
PD3-202801091
WAN PHY
PD3-101226461
WAN PHY show Commands Should Not be Applied to non WAN PHY Ports
When show wan-phy commands are run on non WAN PHY ports, the ports display the
headers. It should only display the error wan command is not supported on nonwanphy port 25.
Known Behaviors
The following are limitations in ExtremeXOS system architecture that will not be resolved.
Description
General
84
PD3-197435644
PD4-334148318
While broadcasting jumbo frames, the "Rx Pkt Bcast" counter in the show ports
statistics command output is not updated. This issue is not seen in non-jumbo frames.
Description
PD3-204965477
PD3-204022938
If a MAC move occurs in an isolated subscriber VLAN without the link of the port going
down, the MAC address is not learned on the new port.
PD3-182634820
The thttpd process cannot be restarted using the start process or restart process
commands after the process exits preceded by a Thread thttpd ID does not respond log
message.
PD3-203517161
A BlackDiamond 10808 switch with a dual speed copper/fiber SFP shows a link as active
even though a cable is not connected.
Hitless upgrade is not supported for network login when upgrading from a previous version
of ExtremeXOS software to ExtremeXOS 12.1. If you attempt to perform a hitless upgrade,
all existing clients must be reauthenticated after a failover. Error messages such as
genesisNetLoginHandleGet: Port 0x08 NOT found, may be shown on the console and the
system log.
If a hitless upgrade is required, is it recommended that you globally disable network login
and re-enable it when the upgrade is complete.
PD3-131941899
Disabling and enabling a GM-20XT I/O module twice causes the slot to enter the Failed
state and displays the following error message.
Error Generic Error(-1) from HAL on CardExec POWER_OFF(10) for slot
1
PD3-130441271,
PD4-281640171
Traffic queues with metering are not applied correctly with large packets, such as 256, 512,
and 1,024. The traffic fluctuates between different rates when the packet size is above
200.
Static and dynamic ACL entries with a match condition of protocol ospf and an action of
deny is not stopping the OSPF packets.
Ports on Summit X450a and X450e series switches may stay in an active state even after
the cable is disconnected with certain QoS configurations.
ACL
85
Description
PD3-77983510
Summit X450a and Summit X450e series switches and BlackDiamond 8800 a-series and eseries modules provide more powerful ACL capabilities. Because of this, the amount and
complexity of ACL rules will naturally impact the time needed to process and apply the ACL
rules to the switch. This will also impact switch bootup time. Access Control List limitations
fall into two areas: physical and virtual.
Physical LimitsSummit X450a and Summit X450e series switches:
The per-VLAN, wildcard (port any), and single-port access list installation limitations are
1024 rules for the Summit X450e and 2048 rules for the Summit X450a.
Physical LimitsBlackDiamond 8800 a-series and e-series modules:
The per-VLAN, wildcard (port any), and single-port access list installation limitations are
1024 rules for the e-series modules, and 2048 rules for the a-series modules.
Extreme Networks recommends that you configure ACLs as per-VLAN, wildcard, or singleport. If either of the following is true, you will have to configure ACLs with multi-port lists:
Your application requires that ports do not have a homogeneous ACL policy.
When BlackDiamond 8800 original series modules are operational in the same chassis, it
may be necessary to configure ACLs to specific port-lists instead of as wildcard or per-VLAN.
This is because the original series modules have smaller physical limits.
Virtual LimitsSummit X450a and Summit X450e series switches:
When configuring a multi-port ACL, use the following guideline. The total ACL count (as
calculated by ACL rules times ports applied to) should not exceed 48,000 total ACL rules.
For example, applying a 1,000 rule policy file to a 48 port multi-port list is supported
(1,000 rules * 48 ports in the list <= 48,000).
Virtual LimitsBlackDiamond 8800 a-series and e-series modules:
When configuring a multi-port ACL, use the following guideline. For any a-series or e-series
blade in the system, its total ACL count (as calculated by ACL rules times ports applied to)
should not exceed 48,000 total ACL rules.
For example, applying a 1,000 rule policy file to a 48 port multi-port list on an a-series
module on slot 1 and an e-series module in slot 2 is fine. Neither module exceeds the
48,000 total ACL rules.
Excessive boot times and CPU resource starvation can be seen with larger total rule counts.
If your application requires additional capacity, contact Extreme Networks.
Device Management
PD3-126243853
Using a key length of 4,096 in an SSL certificate causes high CPU utilization during HTTPS
sessions.
IP Routing Products
PD3-188555286
Not all shared static IP routes may be utilized following a link flap to one or more gateways
used by those static routes. For better resiliency when sharing static routes, configure static
ARP and FDB entries for each gateway used by the shared static routes. To do this, run the
following commands for each gateway:
configure iparp add <ip_addr> {vr <vr_name>} <mac>
create fdbentry <mac_addr> vlan <vlan_name> ports <port_list>
This affects BlackDiamond 8800 series and Summit X650, X450 a-series, and
X450 e-series switches only.
Multicast
PD4-373791509
86
Multicast VLAN Registration (MVR) is not working properly on Summit X650 platforms.
Description
PD4-385392901
Load shared traffic may be disrupted when enabling sharing with traffic on.
PD4-459420440
PD4-491424381
An XGM2-2bt module causes a Summit X450 switch to display the following HAL port error
messages on a console:
<Erro:HAL.Port.Error> Xenpak on port 49 detected, unable to read
Oui, possible mdio read error
<Erro:HAL.Port.Error> summitIsXenpak2Operational: port 49 data=ffff
Diagnostics
PD3-204419978
IGMP
PD4-385405101
Per-VLAN Internet Group Management Protocol (IGMP) snooping does not work when an IP
address is removed after saving and rebooting the switch.
MPLS
PD3-99318269
If the transmit bandwidth between two RSVP-TE neighbors is sufficient for a given LSP, but
the receive bandwidth is not, the LSP does not come up. The reason for the error is not
displayed in the show mpls rsvp-te lsp detail output.
PD3-188594038,
PD3-133340423
The penultimate hop popping (PHP) feature will not work correctly and may break Label
Distribution Protocol (LDP) adjacency with its neighbors. Currently, there is no workaround.
Multicast
PD4-487728925
After deleting a VLAN from a Multiple Spanning Tree Protocol (MSTP) domain and adding it
back, some multicast streams are lost. This also occurs when MSTP converges.
PD4-375155917
Multicast forwarding ignores an Internet Group Management Protocol (IGMP) join received
on a source VLAN port when there is another IGMP join on the same port in another PIM
enabled VLAN.
OSPF
PD4-443087741
An OSPF neighbor is not formed after a graceful restart of the OSPF process.
Security
87
PD3-96212671
When DHCP snooping is enabled on a port in a VLAN in monitoring only mode (that is, with
the violation-action option set to none) and the switch is acting as a BOOTP relay,
DHCP packets are not relayed from the DHCP server on that port. As a workaround, the port
can be configured as a trusted-port (trusted for DHCP server packets) with DHCP snooping
enabled with a violation-action of drop-packet instead of none. This works the
same as setting the violation-action to none viz. The DHCP bindings database is
built up by monitoring DHCP traffic, but no rogue DHCP server traffic on that port is
dropped.
Adding a VLAN to STP domain (s0) and then enabling STP domain (s0) generates the
following error:
Error: Incorrect carrier vlan configuration of port 2 in stp
domain s0.
If you enable STP domain (s0) first and then add the VLAN to the STP domain, the
configuration is accepted.
Workaround: Enable the STP domain first and then add the VLAN.
PD4-292225290
A large number of Spanning Tree Protocol (STP) BPDUs are generated when an MSTP
configured switch is connected to another switch that is using a default configuration.
Each IP address configured VLAN occupies two longest prefix match (LPM) hardware entries
instead of one. One entry is for the directly attached subnet, and the other is a host route
for the interface itself. This issue affects the recommended value for the configure
iproute reserved-entries command. See the ExtremeXOS 12.1.2 Command
Reference Guide for new usage guidelines.
PD4-354531953
The ExtremeXOS CLI allows you to set both the primary and secondary vMAN ethertypes to
0x8100.The ExtremeXOS 12.1 Concepts Guide states that the primary and secondary vMAN
ethertype can be set separately as long as both are not set to 0x8100.
PD4-360515775
A loss of traffic occurs when deleting a VLAN translation member VLAN containing loopback
ports.
Workaround: If you change or delete the loopback port, save and reboot the switch, or
disable and re-enable the slot.
88
PD4-484169508,
PD4-389339527
A netTools process crash occurs when processing incoming BOOTP Reply when User
Datagram Protocol (UDP) forwarding is enabled.
PD4-477175087,
PD4-415496669
The command output for the show configuration command includes enable vman
port after adding a port to a vMAN, which should not be included in the output.
PD4-445383070,
PD4-443927611
Traffic does not egress a 10G4Xc or 10G8Xc module with load sharing enabled.
PD4-459420391,
PD4-337044674
A defective Power over Ethernet (PoE) module may cause a switch to continuously reboot.
PD4-486972003,
PD4-485801147
BlackDiamond 8806 and 8810 (a-,c-, or e-series) I/O modules may reset without an external
trigger. This problem occurs with ExtremeXOS 11.6, 12.0, and 12.1.
PD4-483940103,
PD4-348356921
PD4-469804042
PD4-444518321
Logging out of a CLI session established using SSH or Telnet may result in a
smbuf_xfer:terminal signal error followed by a switch reboot.
PD4-256803787,
PD4-328904792
PD4-340843040
The XGM2-2bt runs hot in a Summit X350 switch. The switch contains two fan speeds: low
and high. The fans are controlled by hardware using a thermal sensor, which does not
measure the thermal output of the XGM2-2bt module.
A BlackDiamond 10808 switch with an I/O module goes into a failed state and displays the
following error in the system log:
MSM-A: Slot-6 FAILED (1) L2 ping thru MSM-A timeout
MSM-A: Slot-2 FAILED (1) L2 ping thru MSM-A timeout
MSM-A: Slot-2 FAILED (1) Control link ping timeout
A Summit X250e-48t stack generates the following error message each time a user is
authenticated through MAC-based network login from the backup switch in the stack:
Unable to get vpif information IPmc add port.
PD4-316990197
On Summit X650 series switches, enabling jumbo frames on an ingress port and disabling
jumbo frames on the egress port does not cause IP fragmentation to occur on the L3 jumbo
frames.
ACL
PD4-376754432
When scaling ACLs by configuring 1,024 dynamic ACLs after configuring 1,024 ACLs using
a policy file, the system fails.
PD4-332583022
Ingress meter configuration changes are not effective until after the ACL policy file is
reinstalled.
PD4-377911268
When an ACL with counters configuration over a port range is scaled up, the watchdog times
out for the EPM application and a system failure occurs.
BGP
PD4-486115919,
PD4-331422601
A border gateway protocol (BGP) route can point to the wrong next-hop in a route table
when a default route is also learned by way of BGP in another scenario.
Diagnostics
PD4-384460740
Diagnostics fails during the run test loopback eth command when the management
port is set to 1 Gbps. This issue does not occur when the management port is set to 100
Mbps.
ELRP
PD4-477175023
When running the Extreme Loop Recovery Protocol (ELRP) between an ExtremeWare "e"
series switch and an ExtremeXOS switch, the ExtremeWare switch reports a checksum error.
IGMP
PD4-477175057,
PD4-409050568
When adding a static Internet Group Management Protocol (IGMP) group to a port not
belonging to the assigned VLAN, the switch silently drops the configuration without
displaying an error or warning message.
89
MPLS
PD3-109748431
The show tech command shows erroneous MPLS CLI on a non-MPLS license system
running on a BlackDiamond 10808. MPLS should determine if the system is MPLS licensed
and only then show the CLI.
PD3-99318269
If the transmit bandwidth between two RSVP-TE neighbors is sufficient for a given LSP, but
the receive bandwidth is not, the LSP does not come up. The reason for the error is not
displayed in the show mpls rsvp-te lsp detail output.
Multicast
PD3-188594038,
PD3-133340423
The penultimate hop popping (PHP) feature will not work correctly and may break Label
Distribution Protocol (LDP) adjacency with its neighbors. Currently, there is no workaround.
PD4-378262291
The age of a group in a multicast stream entry is not updated when PIM and IP multicast
forwarding is enabled.
PD4-375155917
Multicast forwarding ignores an Internet Group Management Protocol (IGMP) join received
on a source VLAN port when there is another IGMP join on the same port in another PIM
enabled VLAN.
Network Login
PD4-461738253,
PD4-457325458
The enable netlogin ports mac command is not causing a switch to purge all FDBs
on the corresponding MAC-based network login enabled ports to enforce netlogin
authentication.
PD4-461738181,
PD4-441418181
Using MAC-based network login, the MAC address is authenticated on the first VLAN only.
The same MAC address stays in the unauthenticated state in all other subsequent VLANs.
Security
PD3-96212671
90
When DHCP snooping is enabled on a port in a VLAN in monitoring only mode (that is, with
the violation-action option set to none) and the switch is acting as a BOOTP relay,
DHCP packets are not relayed from the DHCP server on that port. As a workaround, the port
can be configured as a trusted-port (trusted for DHCP server packets) with DHCP snooping
enabled with a violation-action of drop-packet instead of none. This works the
same as setting the violation-action to none viz. The DHCP bindings database is
built up by monitoring DHCP traffic, but no rogue DHCP server traffic on that port is
dropped.