Users Guide
Table Of Contents
- Dell Configuration Guide for the S6000–ON System 9.14.0.0
 - About this Guide
 - Configuration Fundamentals
 - Getting Started
 - Management
- Configuring Privilege Levels
 - Configuring Logging
 - Log Messages in the Internal Buffer
 - Disabling System Logging
 - Sending System Messages to a Syslog Server
 - Track Login Activity
 - Limit Concurrent Login Sessions
 - Enabling Secured CLI Mode
 - Changing System Logging Settings
 - Display the Logging Buffer and the Logging Configuration
 - Configuring a UNIX Logging Facility Level
 - Synchronizing Log Messages
 - Enabling Timestamp on Syslog Messages
 - File Transfer Services
 - Terminal Lines
 - Setting Timeout for EXEC Privilege Mode
 - Using Telnet to get to Another Network Device
 - Lock CONFIGURATION Mode
 - Reloading the system
 - Restoring the Factory Default Settings
 - Viewing the Reason for Last System Reboot
 
 - 802.1X
- Port-Authentication Process
 - Configuring 802.1X
 - Important Points to Remember
 - Enabling 802.1X
 - Configuring dot1x Profile
 - Configuring MAC addresses for a do1x Profile
 - Configuring the Static MAB and MAB Profile
 - Configuring Critical VLAN
 - Configuring Request Identity Re-Transmissions
 - Forcibly Authorizing or Unauthorizing a Port
 - Re-Authenticating a Port
 - Configuring Timeouts
 - Configuring Dynamic VLAN Assignment with Port Authentication
 - Guest and Authentication-Fail VLANs
 
 - Access Control Lists (ACLs)
- IP Access Control Lists (ACLs)
 - Important Points to Remember
 - IP Fragment Handling
 - Configure a Standard IP ACL
 - Configure an Extended IP ACL
 - Configure Layer 2 and Layer 3 ACLs
 - Assign an IP ACL to an Interface
 - Applying an IP ACL
 - Configure Ingress ACLs
 - Configure Egress ACLs
 - IP Prefix Lists
 - ACL Remarks
 - ACL Resequencing
 - Route Maps
 - Flow-Based Monitoring
 - Configuring IP Mirror Access Group
 
 - Bidirectional Forwarding Detection (BFD)
 - Border Gateway Protocol (BGP)
- Border Gateway Protocol version 4 (BGPv4)
 - Autonomous Systems (AS)
 - Multiprotocol BGP
 - Sessions and Peers
 - Implementing BGP global and address family
 - BGP Attributes for selecting Best Path
 - Implement BGP with Dell EMC Networking OS
 - Configuration Information
 - Configuring a basic BGP network
- Enabling BGP
 - Configuring a BGP peer
 - Configuring AS4 Number Representations
 - Configuring a BGP VRF address family
 - Route-refresh and Soft-reconfiguration
 - Aggregating Routes
 - Filtering BGP Routes
 - Filtering BGP Routes Using Route Maps
 - Filtering BGP Routes Using AS-PATH Information
 - Configuring Peer Groups
 - Configuring BGP Fast Fall-Over
 - Configuring Passive Peering
 - Maintaining Existing AS Numbers During an AS Migration
 - Allowing an AS Number to Appear in its Own AS Path
 - Enabling Graceful Restart
 - Filtering on an AS-Path Attribute
 - Regular Expressions as Filters
 - Redistributing Routes
 - Enabling Additional Paths
 - Configuring IP Community Lists
 - Configuring an IP Extended Community List
 - Filtering Routes with Community Lists
 - Manipulating the COMMUNITY Attribute
 - Changing MED Attributes
 - Changing the LOCAL_PREFERENCE Attribute
 - Configuring the local System or a Different System to be the Next Hop for BGP-Learned Routes
 - Changing the WEIGHT Attribute
 - Enabling Multipath
 - Route Reflectors
 - Configuring BGP Confederations
 - Enabling Route Flap Dampening
 - Changing BGP Timers
 - Setting the extended timer
 - Enabling or disabling BGP neighbors
 - Route Map Continue
 
 - Enabling MBGP Configurations
 - MBGP support for IPv6
 - Configuring IPv6 MBGP between peers
 - Example-Configuring IPv4 and IPv6 neighbors
 - Configure IPv6 NH Automatically for IPv6 Prefix Advertised over IPv4 Neighbor
 - BGP Regular Expression Optimization
 - Debugging BGP
 
 - Content Addressable Memory (CAM)
 - Control Plane Policing (CoPP)
 - Data Center Bridging (DCB)
- Ethernet Enhancements in Data Center Bridging
 - Enabling Data Center Bridging
 - Data Center Bridging: Default Configuration
 - Configuring Priority-Based Flow Control
 - Configuring PFC in a DCB Map
 - Applying a DCB Map on a Port
 - Configuring PFC without a DCB Map
 - Configuring PFC Asymmetric
 - Priority-Based Flow Control Using Dynamic Buffer Method
 - Behavior of Tagged Packets
 - Configuration Example for DSCP and PFC Priorities
 - SNMP Support for PFC and Buffer Statistics Tracking
 - Performing PFC Using DSCP Bits Instead of 802.1p Bits
 - PFC and ETS Configuration Examples
 - Using PFC to Manage Converged Ethernet Traffic
 - Operations on Untagged Packets
 - Generation of PFC for a Priority for Untagged Packets
 - Configure Enhanced Transmission Selection
 - Hierarchical Scheduling in ETS Output Policies
 - Using ETS to Manage Converged Ethernet Traffic
 - Applying DCB Policies in a Switch Stack
 - Configure a DCBx Operation
 - Verifying the DCB Configuration
 - QoS dot1p Traffic Classification and Queue Assignment
 - Configuring the Dynamic Buffer Method
 - Sample DCB Configuration
 
 - Dynamic Host Configuration Protocol (DHCP)
- DHCP Packet Format and Options
 - Assign an IP Address using DHCP
 - Implementation Information
 - Configure the System to be a DHCP Server
 - Configure the System to be a DHCP Client
 - DHCP Relay When DHCP Server and Client are in Different VRFs
 - Configure the System for User Port Stacking (Option 230)
 - Configure Secure DHCP
 - Source Address Validation
 
 - Equal Cost Multi-Path (ECMP)
 - FIP Snooping
- Fibre Channel over Ethernet
 - Ensure Robustness in a Converged Ethernet Network
 - FIP Snooping on Ethernet Bridges
 - Using FIP Snooping
- FIP Snooping Prerequisites
 - Important Points to Remember
 - Enabling the FCoE Transit Feature
 - Enable FIP Snooping on VLANs
 - Configure the FC-MAP Value
 - Configure a Port for a Bridge-to-Bridge Link
 - Configure a Port for a Bridge-to-FCF Link
 - Impact on Other Software Features
 - FIP Snooping Restrictions
 - Configuring FIP Snooping
 
 - Displaying FIP Snooping Information
 - FCoE Transit Configuration Example
 
 - Flex Hash and Optimized Boot-Up
 - Force10 Resilient Ring Protocol (FRRP)
 - GARP VLAN Registration Protocol (GVRP)
 - Internet Group Management Protocol (IGMP)
- IGMP Implementation Information
 - IGMP Protocol Overview
 - Configure IGMP
 - Viewing IGMP Enabled Interfaces
 - Selecting an IGMP Version
 - Viewing IGMP Groups
 - Adjusting Timers
 - Enabling IGMP Immediate-Leave
 - IGMP Snooping
 - Fast Convergence after MSTP Topology Changes
 - Egress Interface Selection (EIS) for HTTP and IGMP Applications
- Protocol Separation
 - Enabling and Disabling Management Egress Interface Selection
 - Handling of Management Route Configuration
 - Handling of Switch-Initiated Traffic
 - Handling of Switch-Destined Traffic
 - Handling of Transit Traffic (Traffic Separation)
 - Mapping of Management Applications and Traffic Type
 - Behavior of Various Applications for Switch-Initiated Traffic
 - Behavior of Various Applications for Switch-Destined Traffic
 - Interworking of EIS With Various Applications
 
 - Designating a Multicast Router Interface
 
 - Interfaces
- Basic Interface Configuration
 - Advanced Interface Configuration
 - Interface Types
 - View Basic Interface Information
 - Resetting an Interface to its Factory Default State
 - Enabling a Physical Interface
 - Physical Interfaces
 - Automatic recovery of an Err-disabled interface
 - Egress Interface Selection (EIS)
 - Management Interfaces
 - VLAN Interfaces
 - Loopback Interfaces
 - Null Interfaces
 - Port Channel Interfaces
- Port Channel Definition and Standards
 - Port Channel Benefits
 - Port Channel Implementation
 - Interfaces in Port Channels
 - Configuration Tasks for Port Channel Interfaces
 - Creating a Port Channel
 - Adding a Physical Interface to a Port Channel
 - Reassigning an Interface to a New Port Channel
 - Configuring the Minimum Oper Up Links in a Port Channel
 - Adding or Removing a Port Channel from a VLAN
 - Assigning an IP Address to a Port Channel
 - Deleting or Disabling a Port Channel
 - Load Balancing Through Port Channels
 - Changing the Hash Algorithm
 
 - Bulk Configuration
 - Defining Interface Range Macros
 - Monitoring and Maintaining Interfaces
 - Non Dell-Qualified Transceivers
 - Splitting 40G Ports without Reload
 - Splitting QSFP Ports to SFP+ Ports
 - Converting a QSFP or QSFP+ Port to an SFP or SFP+ Port
 - Configuring wavelength for 10–Gigabit SFP+ optics
 - Link Dampening
 - Link Bundle Monitoring
 - Using Ethernet Pause Frames for Flow Control
 - Configure the MTU Size on an Interface
 - Port-Pipes
 - Auto-Negotiation on Ethernet Interfaces
 - View Advanced Interface Information
 - Dynamic Counters
 - Compressing Configuration Files
 
 - IPv4 Routing
- IP Addresses
 - Configuration Tasks for IP Addresses
 - Assigning IP Addresses to an Interface
 - Configuring Static Routes
 - Configure Static Routes for the Management Interface
 - Using the Configured Source IP Address in ICMP Messages
 - Configuring the Duration to Establish a TCP Connection
 - Enabling Directed Broadcast
 - Resolution of Host Names
 - Enabling Dynamic Resolution of Host Names
 - Specifying the Local System Domain and a List of Domains
 - Configuring DNS with Traceroute
 - ARP
 - Configuration Tasks for ARP
 - Configuring Static ARP Entries
 - Enabling Proxy ARP
 - Clearing ARP Cache
 - ARP Learning via Gratuitous ARP
 - Enabling ARP Learning via Gratuitous ARP
 - ARP Learning via ARP Request
 - Configuring ARP Retries
 - ICMP
 - Configuration Tasks for ICMP
 - Enabling ICMP Unreachable Messages
 - UDP Helper
 - Enabling UDP Helper
 - Configurations Using UDP Helper
 - UDP Helper with Broadcast-All Addresses
 - UDP Helper with Subnet Broadcast Addresses
 - UDP Helper with Configured Broadcast Addresses
 - UDP Helper with No Configured Broadcast Addresses
 - Troubleshooting UDP Helper
 
 - IPv6 Routing
- Protocol Overview
 - Implementing IPv6 with Dell EMC Networking OS
 - ICMPv6
 - Path MTU discovery
 - IPv6 Neighbor Discovery
 - Secure Shell (SSH) Over an IPv6 Transport
 - Configuration Tasks for IPv6
- Adjusting Your CAM-Profile
 - Assigning an IPv6 Address to an Interface
 - Assigning a Static IPv6 Route
 - Configuring Telnet with IPv6
 - SNMP over IPv6
 - Displaying IPv6 Information
 - Displaying an IPv6 Interface Information
 - Showing IPv6 Routes
 - Showing the Running-Configuration for an Interface
 - Clearing IPv6 Routes
 - Disabling ND Entry Timeout
 
 - Configuring IPv6 RA Guard
 
 - iSCSI Optimization
- iSCSI Optimization Overview
- Monitoring iSCSI Traffic Flows
 - Application of Quality of Service to iSCSI Traffic Flows
 - Information Monitored in iSCSI Traffic Flows
 - Detection and Auto-Configuration for Dell EqualLogic Arrays
 - Configuring Detection and Ports for Dell Compellent Arrays
 - Synchronizing iSCSI Sessions Learned on VLT-Lags with VLT-Peer
 - Enable and Disable iSCSI Optimization
 
 - Default iSCSI Optimization Values
 - iSCSI Optimization Prerequisites
 - Configuring iSCSI Optimization
 - Displaying iSCSI Optimization Information
 
 - iSCSI Optimization Overview
 - Intermediate System to Intermediate System
 - Link Aggregation Control Protocol (LACP)
 - Layer 2
- Manage the MAC Address Table
 - MAC Learning Limit
- Setting the MAC Learning Limit
 - mac learning-limit Dynamic
 - mac learning-limit mac-address-sticky
 - mac learning-limit station-move
 - mac learning-limit no-station-move
 - Learning Limit Violation Actions
 - Setting Station Move Violation Actions
 - Recovering from Learning Limit and Station Move Violations
 - Disabling MAC Address Learning on the System
 
 - NIC Teaming
 - Configure Redundant Pairs
 - Far-End Failure Detection
 
 - Link Layer Discovery Protocol (LLDP)
- 802.1AB (LLDP) Overview
 - Optional TLVs
 - TIA-1057 (LLDP-MED) Overview
 - Configure LLDP
 - CONFIGURATION versus INTERFACE Configurations
 - Enabling LLDP
 - Enabling LLDP on Management Ports
 - Advertising TLVs
 - Storing and Viewing Unrecognized LLDP TLVs
 - Viewing the LLDP Configuration
 - Viewing Information Advertised by Adjacent LLDP Neighbors
 - Configuring LLDPDU Intervals
 - Configuring LLDP Notification Interval
 - Configuring Transmit and Receive Mode
 - Configuring the Time to Live Value
 - Debugging LLDP
 - Relevant Management Objects
 
 - Microsoft Network Load Balancing
 - Multicast Source Discovery Protocol (MSDP)
- Protocol Overview
 - Anycast RP
 - Implementation Information
 - Configure Multicast Source Discovery Protocol
 - Enable MSDP
 - Manage the Source-Active Cache
 - Accept Source-Active Messages that Fail the RFP Check
 - Specifying Source-Active Messages
 - Limiting the Source-Active Messages from a Peer
 - Preventing MSDP from Caching a Local Source
 - Preventing MSDP from Caching a Remote Source
 - Preventing MSDP from Advertising a Local Source
 - Logging Changes in Peership States
 - Terminating a Peership
 - Clearing Peer Statistics
 - Debugging MSDP
 - MSDP with Anycast RP
 - Configuring Anycast RP
 - MSDP Sample Configurations
 
 - Multicast Listener Discovery Protocol
 - Multiple Spanning Tree Protocol (MSTP)
- Protocol Overview
 - Spanning Tree Variations
 - Configure Multiple Spanning Tree Protocol
 - Enable Multiple Spanning Tree Globally
 - Adding and Removing Interfaces
 - Creating Multiple Spanning Tree Instances
 - Influencing MSTP Root Selection
 - Interoperate with Non-Dell Bridges
 - Changing the Region Name or Revision
 - Modifying Global Parameters
 - Modifying the Interface Parameters
 - Configuring an EdgePort
 - Flush MAC Addresses after a Topology Change
 - MSTP Sample Configurations
 - Debugging and Verifying MSTP Configurations
 
 - Multicast Features
 - Multicast Listener Discovery Protocol
 - Multicast Listener Discovery Protocol
 - Object Tracking
 - Open Shortest Path First (OSPFv2 and OSPFv3)
- Protocol Overview
 - OSPF with Dell EMC Networking OS
 - Configuration Information
 - OSPFv3 NSSA
 - Configuration Task List for OSPFv3 (OSPF for IPv6)
- Enabling IPv6 Unicast Routing
 - Applying cost for OSPFv3
 - Assigning IPv6 Addresses on an Interface
 - Assigning Area ID on an Interface
 - Assigning OSPFv3 Process ID and Router ID Globally
 - Assigning OSPFv3 Process ID and Router ID to a VRF
 - Configuring Stub Areas
 - Configuring Passive-Interface
 - Redistributing Routes
 - Configuring a Default Route
 - Enabling OSPFv3 Graceful Restart
 - OSPFv3 Authentication Using IPsec
 - Troubleshooting OSPFv3
 
 
 - Policy-based Routing (PBR)
 - PIM Sparse-Mode (PIM-SM)
 - PIM Source-Specific Mode (PIM-SSM)
 - Port Monitoring
 - Private VLANs (PVLAN)
 - Per-VLAN Spanning Tree Plus (PVST+)
- Protocol Overview
 - Implementation Information
 - Configure Per-VLAN Spanning Tree Plus
 - Enabling PVST+
 - Disabling PVST+
 - Influencing PVST+ Root Selection
 - Modifying Global PVST+ Parameters
 - Modifying Interface PVST+ Parameters
 - Configuring an EdgePort
 - PVST+ in Multi-Vendor Networks
 - Enabling PVST+ Extend System ID
 - PVST+ Sample Configurations
 
 - Quality of Service (QoS)
- Implementation Information
 - Port-Based QoS Configurations
 - Policy-Based QoS Configurations
 - Enabling QoS Rate Adjustment
 - Enabling Strict-Priority Queueing
 - Queue Classification Requirements for PFC Functionality
 - Support for marking dot1p value in L3 Input Qos Policy
 - Weighted Random Early Detection
 - Pre-Calculating Available QoS CAM Space
 - Specifying Policy-Based Rate Shaping in Packets Per Second
 - Configuring Policy-Based Rate Shaping
 - Configuring Weights and ECN for WRED
 - Configuring WRED and ECN Attributes
 - Guidelines for Configuring ECN for Classifying and Color-Marking Packets
 - Applying Layer 2 Match Criteria on a Layer 3 Interface
 - Enabling Buffer Statistics Tracking
 
 - Routing Information Protocol (RIP)
 - Remote Monitoring (RMON)
 - Rapid Spanning Tree Protocol (RSTP)
- Protocol Overview
 - Configuring Rapid Spanning Tree
 - Important Points to Remember
 - Configuring Interfaces for Layer 2 Mode
 - Enabling Rapid Spanning Tree Protocol Globally
 - Adding and Removing Interfaces
 - Modifying Global Parameters
 - Modifying Interface Parameters
 - Enabling SNMP Traps for Root Elections and Topology Changes
 - Influencing RSTP Root Selection
 - Configuring an EdgePort
 - Configuring Fast Hellos for Link State Detection
 
 - Software-Defined Networking (SDN)
 - Security
- AAA Accounting
 - AAA Authentication
 - Obscuring Passwords and Keys
 - AAA Authorization
 - RADIUS
 - TACACS+
 - Protection from TCP Tiny and Overlapping Fragment Attacks
 - Enabling SCP and SSH
- Using SCP with SSH to Copy a Software Image
 - Removing the RSA Host Keys and Zeroizing Storage
 - Configuring When to Re-generate an SSH Key
 - Configuring the SSH Server Key Exchange Algorithm
 - Configuring the HMAC Algorithm for the SSH Server
 - Configuring the HMAC Algorithm for the SSH Client
 - Configuring the SSH Server Cipher List
 - Configuring the SSH Client Cipher List
 - Configuring DNS in the SSH Server
 - Secure Shell Authentication
 - Troubleshooting SSH
 
 - Telnet
 - VTY Line and Access-Class Configuration
 - Role-Based Access Control
 - Two Factor Authentication (2FA)
 - Configuring the System to Drop Certain ICMP Reply Messages
 - Dell EMC Networking OS Security Hardening
 
 - Service Provider Bridging
 - sFlow
 - Simple Network Management Protocol (SNMP)
- Protocol Overview
 - Implementation Information
 - SNMPv3 Compliance With FIPS
 - Configuration Task List for SNMP
 - Important Points to Remember
 - Set up SNMP
 - Reading Managed Object Values
 - Writing Managed Object Values
 - Configuring Contact and Location Information using SNMP
 - Subscribing to Managed Object Value Updates using SNMP
 - Enabling a Subset of SNMP Traps
 - Enabling an SNMP Agent to Notify Syslog Server Failure
 - Copy Configuration Files Using SNMP
- Copying a Configuration File
 - Copying Configuration Files via SNMP
 - Copying the Startup-Config Files to the Running-Config
 - Copying the Startup-Config Files to the Server via FTP
 - Copying the Startup-Config Files to the Server via TFTP
 - Copy a Binary File to the Startup-Configuration
 - Additional MIB Objects to View Copy Statistics
 - Obtaining a Value for MIB Objects
 
 - MIB Support to Display Reason for Last System Reboot
 - MIB Support for Power Monitoring
 - MIB Support to Display the Available Memory Size on Flash
 - MIB Support to Display the Software Core Files Generated by the System
 - MIB Support to Display the Available Partitions on Flash
 - MIB Support to Display Egress Queue Statistics
 - MIB Support to ECMP Group Count
 - MIB Support for entAliasMappingTable
 - MIB Support to Display the FCS Error Ratio Details
 - MIB Support for LAG
 - MIB Support to Display Unrecognized LLDP TLVs
 - MIB Support for PFC Storm Control
 - MIB Support for PFC no-drop-priority L2Dlf Drop
 - MIB Support for Monitoring the overall buffer usage for lossy and lossless traffic per XPE
 - Manage VLANs using SNMP
 - Managing Overload on Startup
 - Enabling and Disabling a Port using SNMP
 - Fetch Dynamic MAC Entries using SNMP
 - Example of Deriving the Interface Index Number
 - Monitoring BGP sessions via SNMP
 - Monitor Port-Channels
 - Troubleshooting SNMP Operation
 - Transceiver Monitoring
 
 - Storm Control
 - Spanning Tree Protocol (STP)
- Protocol Overview
 - Configure Spanning Tree
 - Important Points to Remember
 - Configuring Interfaces for Layer 2 Mode
 - Enabling Spanning Tree Protocol Globally
 - Adding an Interface to the Spanning Tree Group
 - Modifying Global Parameters
 - Modifying Interface STP Parameters
 - Enabling PortFast
 - Selecting STP Root
 - STP Root Guard
 - Enabling SNMP Traps for Root Elections and Topology Changes
 - Configuring Spanning Trees as Hitless
 - STP Loop Guard
 - Displaying STP Guard Configuration
 
 - SupportAssist
 - System Time and Date
 - Tunneling
 - Uplink Failure Detection (UFD)
 - Upgrade Procedures
 - Virtual LANs (VLANs)
 - Virtual Link Trunking (VLT)
- Overview
 - Configure Virtual Link Trunking
 - RSTP Configuration
 - PVST+ Configuration
 - Peer Routing Configuration Example
 - eVLT Configuration Example
 - PIM-Sparse Mode Configuration Example
 - Verifying a VLT Configuration
 - Additional VLT Sample Configurations
 - Troubleshooting VLT
 - Reconfiguring Stacked Switches as VLT
 - Specifying VLT Nodes in a PVLAN
- Association of VLTi as a Member of a PVLAN
 - MAC Synchronization for VLT Nodes in a PVLAN
 - PVLAN Operations When One VLT Peer is Down
 - PVLAN Operations When a VLT Peer is Restarted
 - Interoperation of VLT Nodes in a PVLAN with ARP Requests
 - Scenarios for VLAN Membership and MAC Synchronization With VLT Nodes in PVLAN
 
 - Configuring a VLT VLAN or LAG in a PVLAN
 - Proxy ARP Capability on VLT Peer Nodes
 - VLT Nodes as Rendezvous Points for Multicast Resiliency
 - Configuring VLAN-Stack over VLT
 - IPv6 Peer Routing in VLT Domains Overview
 - VXLAN on VLT
 
 - VLT Proxy Gateway
 - Virtual Extensible LAN (VXLAN)
- Overview
 - Components of VXLAN network
 - Functional Overview of VXLAN Gateway
 - VXLAN Frame Format
 - Limitations on VXLAN
 - Configuring and Controlling VXLAN from the NSX Controller GUI
 - Configuring and Controling VXLAN from Nuage Controller GUI
 - Configuring VxLAN Gateway
 - Displaying VXLAN Configurations
 - VXLAN Service nodes for BFD
 - Static Virtual Extensible LAN (VXLAN)
 - Preserving 802.1 p value across VXLAN tunnels
 - Routing in and out of VXLAN tunnels
 - NSX Controller-based VXLAN for VLT
 
 - Virtual Routing and Forwarding (VRF)
 - Virtual Router Redundancy Protocol (VRRP)
 - Debugging and Diagnostics
 - Standards Compliance
 - X.509v3
- Introduction to X.509v3 certification
 - X.509v3 support in
 - Information about installing CA certificates
 - Information about Creating Certificate Signing Requests (CSR)
 - Information about installing trusted certificates
 - Transport layer security (TLS)
 - Online Certificate Status Protocol (OSCP)
 - Verifying certificates
 - Event logging
 
 

• Secret: Specify the secret for the user.
2  Congure a password for privilege level.
CONFIGURATION mode
enable password [level level] [encryption-mode] password
Congure the optional and required parameters:
• level level: specify a level from 0 to 15. Level 15 includes all levels.
• encryption-type: enter 0 for plain text or 7 for encrypted text.
• password: enter a string up to 32 characters long.
To change only the password for the enable command, congure only the password parameter.
3  Congure level and commands for a mode or reset a command’s level.
CONFIGURATION mode
privilege mode {level level command | reset command}
Congure the following required and optional parameters:
• mode: enter a keyword for the modes (exec, configure, interface, line, route-map, or router)
• level level: the range is from 0 to 15. Levels 0, 1, and 15 are pre-congured. Levels 2 to 14 are available for custom 
conguration.
• command: an Dell EMC Networking OS CLI keyword (up to ve keywords allowed).
• reset: return the command to its default privilege mode.
Examples of Privilege Level Commands
To view the conguration, use the show running-config command in EXEC Privilege mode.
The following example shows a conguration to allow a user john to view only EXEC mode commands and all snmp-server commands. 
Because the 
snmp-server commands are enable level commands and, by default, found in CONFIGURATION mode, also assign the 
launch command for CONFIGURATION mode, configure, to the same privilege level as the snmp-server commands.
Line 1: The user john is assigned privilege level 8 and assigned a password.
Line 2: All other users are assigned a password to access privilege level 8.
Line 3: The configure command is assigned to privilege level 8 because it needs to reach CONFIGURATION mode where the snmp-
server commands are located.
Line 4: The snmp-server commands, in CONFIGURATION mode, are assigned to privilege level 8.
DellEMC(conf)#username john privilege 8 password john
DellEMC(conf)#enable password level 8 notjohn
DellEMC(conf)#privilege exec level 8 configure
DellEMC(conf)#privilege config level 8 snmp-server
DellEMC(conf)#end
DellEMC#show running-config
Current Configuration ...
!
hostname Force10
!
enable password level 8 notjohn
enable password Force10
!
username admin password 0 admin
username john password 0 john privilege 8
!
Security
809










