networking:arista_eos
Differences
This shows you the differences between two versions of the page.
| Next revision | Previous revision | ||
| networking:arista_eos [2026/01/13 11:50] – created v1ctor | networking:arista_eos [2026/04/10 08:25] (current) – [DEFAULTING ALL INTERFACES] v1ctor | ||
|---|---|---|---|
| Line 1: | Line 1: | ||
| ====== EOS ====== | ====== EOS ====== | ||
| - | Verify checksum: | + | ==== CHECKSUM ==== |
| < | < | ||
| # verify /sha512 flash: | # verify /sha512 flash: | ||
| </ | </ | ||
| + | ==== CONFIG SESSIONS ==== | ||
| + | |||
| + | <code bash> | ||
| + | # commit | ||
| + | # abort // discard all the changes and exit config session | ||
| + | #show session-config diffs // diff | ||
| + | #show session-config named NAME_1 | ||
| + | </ | ||
| + | |||
| + | Example diff: | ||
| + | <code bash> | ||
| + | -hostname AMS30-LAB-7280-01 | ||
| + | +hostname R1 // " | ||
| + | </ | ||
| + | ==== RESTORE ==== | ||
| + | |||
| + | < | ||
| + | Aboot# | ||
| + | </ | ||
| + | |||
| + | ==== SCHEDULER ==== | ||
| + | |||
| + | < | ||
| + | schedule clear_evpn_blacklist interval 5 timeout 1 max-log-files 1 command clear bgp evpn host-flap | ||
| + | </ | ||
| + | |||
| + | ==== SCP ==== | ||
| + | |||
| + | Allow SCP: | ||
| + | < | ||
| + | username Admin privilege 15 secret root123 | ||
| + | aaa authorization exec default local | ||
| + | </ | ||
| + | |||
| + | Example copying to Arista switch using an SCP: | ||
| + | < | ||
| + | scp EOS-4.21.5F.swi admin@192.168.160.102:// | ||
| + | </ | ||
| + | |||
| + | ==== EOS UPGRADE ==== | ||
| + | |||
| + | < | ||
| + | localhost(config)# | ||
| + | localhost(config)# | ||
| + | localhost# | ||
| + | localhost# | ||
| + | Software image: flash:/ | ||
| + | </ | ||
| + | ==== SECRET BOOT IMAGE ==== | ||
| + | |||
| + | < | ||
| + | / | ||
| + | Aboot# boot / | ||
| + | </ | ||
| + | |||
| + | ==== PORT SECURITY ==== | ||
| + | To delete an address from the port security MAC cache, the address must be removed from the forwarding database prior to executing the “clear port-security” command: | ||
| + | < | ||
| + | Arista# no mac address-table static 0000.aaaa.bbbb vlan 52 interface ethernet 4/1/1 | ||
| + | Arista# clear port-security interface Ethernet 4/1/1 | ||
| + | </ | ||
| + | |||
| + | ==== EXTENSIONS ==== | ||
| + | |||
| + | < | ||
| + | #dir extension: | ||
| + | #extension WORD // installing an extension | ||
| + | #show extensions // show installed extensions | ||
| + | #copy installed-extensions boot-extensions // make it permanent | ||
| + | </ | ||
| + | |||
| + | ==== TCPDUMP ==== | ||
| + | |||
| + | * Only control plane! | ||
| + | * But, we can redirect some data plane traffic to the CPU :) | ||
| + | |||
| + | |||
| + | < | ||
| + | monitor session 1 source Ethernet1/1 | ||
| + | monitor session 1 destination Cpu | ||
| + | </ | ||
| + | |||
| + | ==== DEFAULTING ALL INTERFACES ==== | ||
| + | |||
| + | < | ||
| + | default interface ethernet 1-$ | ||
| + | </ | ||
| + | |||
| + | ==== LOGING USING CERTIFICATE ==== | ||
| + | |||
| + | < | ||
| + | Arista(config)# | ||
| + | Arista(config)# | ||
| + | </ | ||
| + | |||
| + | Generate certificate and upload it on the switch: | ||
| + | <code bash> | ||
| + | $ ssh-keygen -t ecdsa -b 521 -f aristakey | ||
| + | $ scp aristakey.pub admin@leaf-ams:// | ||
| + | </ | ||
| + | |||
| + | Verify connectivity: | ||
| + | <code bash> | ||
| + | ssh -i aristakey Arista | ||
| + | </ | ||
networking/arista_eos.1768305059.txt.gz · Last modified: by v1ctor
