User Tools

Site Tools


networking:arista_eos

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Next revision
Previous revision
networking:arista_eos [2026/01/13 11:50] – created v1ctornetworking:arista_eos [2026/04/10 08:25] (current) – [DEFAULTING ALL INTERFACES] v1ctor
Line 1: Line 1:
 ====== EOS ====== ====== EOS ======
  
-Verify checksum:+==== CHECKSUM ==== 
 <code> <code>
 # verify /sha512 flash:SMART-eMMC-fw-0x20-v1_0_0.swix # verify /sha512 flash:SMART-eMMC-fw-0x20-v1_0_0.swix
 </code> </code>
  
 +==== CONFIG SESSIONS ====
 +
 +<code bash>
 +# commit
 +# abort                             // discard all the changes and exit config session
 +#show session-config diffs          // diff
 +#show session-config named NAME_1   // shows session config
 +</code>
 +
 +Example diff:
 +<code bash>
 +-hostname AMS30-LAB-7280-01         // "-" - what's in the startup-config
 ++hostname R1                        // "+" - what's in the running-config
 +</code>
 +==== RESTORE ====
 +
 +<code>
 +Aboot#fullrecover                   // Erases everything 
 +</code>
 +
 +==== SCHEDULER ====
 +
 +<code>
 +schedule clear_evpn_blacklist interval 5 timeout 1 max-log-files 1 command clear bgp evpn host-flap
 +</code>
 +
 +==== SCP ====
 +
 +Allow SCP:
 +<code>
 +username Admin privilege 15 secret root123
 +aaa authorization exec default local
 +</code>
 +
 +Example copying to Arista switch using an SCP:
 +<code>
 +scp EOS-4.21.5F.swi admin@192.168.160.102://mnt/flash/EOS-4.21.5F.swi
 +</code>
 +
 +==== EOS UPGRADE ====
 +
 +<code>
 +localhost(config)#boot system flash:EOS-4.32.3M.swi
 +localhost(config)#exit
 +localhost#
 +localhost#show boot-config
 +Software image: flash:/EOS-4.32.3M.swi
 +</code>
 +==== SECRET BOOT IMAGE ====
 +
 +<code>
 +/mnt/flash/.boot-image.swi
 +Aboot# boot /mnt/flash/.boot-image.swi
 +</code>
 +
 +==== PORT SECURITY ====
 +To delete an address from the port security MAC cache, the address must be removed from the forwarding database prior to executing the “clear port-security” command:
 +<code>
 +Arista# no mac address-table static 0000.aaaa.bbbb vlan 52 interface ethernet 4/1/1
 +Arista# clear port-security interface Ethernet 4/1/1
 +</code>
 +
 +==== EXTENSIONS ====
 +
 +<code>
 +#dir extension:  // folder where you need to put an extension
 +#extension WORD  // installing an extension
 +#show extensions // show installed extensions
 +#copy installed-extensions boot-extensions // make it permanent
 +</code>
 +
 +==== TCPDUMP ====
 +
 +  * Only control plane!
 +  * But, we can redirect some data plane traffic to the CPU :) 
 +
 +
 +<code>
 +monitor session 1 source Ethernet1/1
 +monitor session 1 destination Cpu
 +</code>
 +
 +==== DEFAULTING ALL INTERFACES ====
 +
 +<code>
 +default interface ethernet 1-$
 +</code>
 +
 +==== LOGING USING CERTIFICATE ====
 +
 +<code>
 +Arista(config)#username <user> privilege 15 secret <secret password>     # Create account
 +Arista(config)#username <user> sshkey file flash:testkey.pub             # Associate the SSH key
 +</code>
 +
 +Generate certificate and upload it on the switch:
 +<code bash>
 +$ ssh-keygen -t ecdsa -b 521 -f aristakey
 +$ scp aristakey.pub admin@leaf-ams://mnt/flash/aristakey.pub
 +</code>
 +
 +Verify connectivity:
 +<code bash>
 +ssh -i aristakey Arista
 +</code>
networking/arista_eos.1768305059.txt.gz · Last modified: by v1ctor