Extreme Certified Professional - Extreme Switching flashcards

32 cards. Read the term and the definition here. The deck at the top of this page is optional.

EXOS vs VOSS

EXOS runs on Summit and X-series platforms with a flat CLI; VOSS runs on VSP/Fabric Engine with a different CLI and configuration model. Commands and syntax are not interchangeable between them.

SummitStack master election

A SummitStack elects one master and one backup master based on priority and MAC. The stack is managed as a single logical device with one management IP address.

Fabric Connect encapsulation

Extreme Fabric Connect is based on IEEE 802.1aq Shortest Path Bridging, using IS-IS as the control plane and MAC-in-MAC encapsulation to provide virtualized L2/L3 services.

Port numbering slot:port

EXOS identifies physical ports as slot:port, such as 1:5. The slot ID is assigned at stack formation and determines the prefix used in interface commands.

Default console settings

EXOS console access uses 9600 baud, 8 data bits, no parity, one stop bit. The default login is admin with no password, so set credentials immediately.

Save configuration command

Running `save configuration` writes the active configuration to non-volatile storage. Without it, changes are lost on reboot; `show configuration` displays the saved config.

Image download and reboot

EXOS updates use `download image <server> <file> primary` followed by a reboot. `show version` confirms the running image, and `use image` selects the boot image.

NTP configuration

Configure time synchronization with `configure ntp server add <ip>` and `enable ntp`. Accurate time is required for log timestamps, certificates, and AAA accounting records.

VLAN creation syntax

Create a VLAN with `create vlan <name> tag <id>`, then add ports using `configure vlan <name> add ports <portlist> tagged` or untagged.

Untagged port rule

A port can be untagged in only one VLAN; tagged ports may carry multiple VLANs. Untagged traffic belongs to the port's configured untagged VLAN.

MSTP instance mapping

MSTP maps VLANs to instances with `configure stpd <name> add vlan <vlan> dot1d <instance>`. Region name and revision must match on all member switches.

STP edge port

An edge port skips listening and learning states, forwarding immediately for end devices. BPDU guard disables it if a BPDU is received, preventing loops.

Root guard purpose

Root guard on a port prevents it from becoming the spanning-tree root port. If superior BPDUs arrive, the port is placed in a blocking state.

LAG creation command

Create a LAG with `create lag <name>` and add members with `configure lag <name> add ports <portlist>`. Alternatively use `enable sharing <master> grouping <portlist>`.

LACP active vs passive

LACP active mode initiates negotiation; passive mode only responds. At least one side must be active for the LAG to form successfully.

LAG load-sharing algorithm

Choose L2 (MAC), L3 (IP), or L4 (port) hashing to match traffic. Mismatched algorithms across switches can cause polarization and uneven link utilization.

LAG member requirements

All LAG members must share speed, duplex, and VLAN membership. A port can belong to only one LAG, and the master port carries the LAG configuration.

Enable IP forwarding

Routing requires `enable ipforwarding` globally and `enable ipforwarding vlan <name>` on each VLAN interface before the switch forwards between subnets.

Static route syntax

Add a static route with `configure iproute add <network> <mask> <gateway>`. The default route uses 0.0.0.0/0. `show iproute` displays the routing table.

OSPF interface configuration

Enable OSPF with `enable ospf`, then add interfaces using `configure ospf add vlan <name> area <id>`. Area 0 is the backbone area.

VRF purpose

A VRF creates an independent routing table. Create with `create vrf <name>` and bind VLAN interfaces, giving separate routing and forwarding per tenant.

ECMP routing

Equal-Cost Multi-Path installs multiple equal-metric next hops for one prefix, spreading traffic across paths. EXOS supports ECMP for static, OSPF, and BGP routes.

Port security MAC limit

Limit learned MAC addresses per port with `configure ports <port> limit-learned-mac <n>`. Lock learning to enforce the limit and drop or disable on violation.

802.1X netlogin

802.1X authentication uses `configure netlogin dot1x` with a RADIUS server. Supplicants authenticate before the port becomes authorized for traffic.

DHCP snooping

DHCP snooping marks trusted ports that may send DHCP offers. Untrusted ports drop server replies, preventing rogue DHCP servers from assigning addresses.

Dynamic ARP inspection

DAI validates ARP packets against the DHCP snooping binding table. Invalid ARP entries on untrusted ports are dropped, mitigating ARP spoofing attacks.

ACL application

Create an ACL with `create access-list <name>` and apply it with `configure access-list <name> ports <port>` or to a VLAN. ACLs match L2 through L4 fields.

Show port statistics

`show ports <portlist> statistics` displays per-port counters, and `clear ports <portlist> counters` resets them. Use for error and utilization analysis.

Log targets

`configure log target <target>` sets log destinations such as memory-buffer, console, or syslog server. Severity levels range from emergency down to debug.

show tech-support

`show tech-support` collects a diagnostic bundle including logs, configuration, and counters for technical support analysis of complex issues.

sFlow configuration

Enable traffic sampling with `enable sflow` and point to a collector with `configure sflow collector <ip>`. Verify with `show sflow`.

CLI ping and traceroute

EXOS provides `ping <ip> count <n>` and `traceroute <ip>` from the CLI. Use `show iparp` to confirm ARP resolution when pings fail.