====== EOS ======

==== CHECKSUM ====

<code>
# verify /sha512 flash:SMART-eMMC-fw-0x20-v1_0_0.swix
</code>

==== CONFIG SESSIONS ====

<code bash>
# commit
# abort                             // discard all the changes and exit config session
#show session-config diffs          // diff
#show session-config named NAME_1   // shows session config
</code>

Example diff:
<code bash>
-hostname AMS30-LAB-7280-01         // "-" - what's in the startup-config
+hostname R1                        // "+" - what's in the running-config
</code>
==== RESTORE ====

<code>
Aboot#fullrecover                   // Erases everything 
</code>

==== SCHEDULER ====

<code>
schedule clear_evpn_blacklist interval 5 timeout 1 max-log-files 1 command clear bgp evpn host-flap
</code>

==== SCP ====

Allow SCP:
<code>
username Admin privilege 15 secret root123
aaa authorization exec default local
</code>

Example copying to Arista switch using an SCP:
<code>
scp EOS-4.21.5F.swi admin@192.168.160.102://mnt/flash/EOS-4.21.5F.swi
</code>

==== EOS UPGRADE ====

<code>
localhost(config)#boot system flash:EOS-4.32.3M.swi
localhost(config)#exit
localhost#
localhost#show boot-config
Software image: flash:/EOS-4.32.3M.swi
</code>
==== SECRET BOOT IMAGE ====

<code>
/mnt/flash/.boot-image.swi
Aboot# boot /mnt/flash/.boot-image.swi
</code>

==== PORT SECURITY ====
To delete an address from the port security MAC cache, the address must be removed from the forwarding database prior to executing the “clear port-security” command:
<code>
Arista# no mac address-table static 0000.aaaa.bbbb vlan 52 interface ethernet 4/1/1
Arista# clear port-security interface Ethernet 4/1/1
</code>

==== EXTENSIONS ====

<code>
#dir extension:  // folder where you need to put an extension
#extension WORD  // installing an extension
#show extensions // show installed extensions
#copy installed-extensions boot-extensions // make it permanent
</code>

==== TCPDUMP ====

  * Only control plane!
  * But, we can redirect some data plane traffic to the CPU :) 


<code>
monitor session 1 source Ethernet1/1
monitor session 1 destination Cpu
</code>

==== DEFAULTING ALL INTERFACES ====

<code>
default interface ethernet 1-$
</code>

==== LOGING USING CERTIFICATE ====

<code>
Arista(config)#username <user> privilege 15 secret <secret password>     # Create account
Arista(config)#username <user> sshkey file flash:testkey.pub             # Associate the SSH key
</code>

Generate certificate and upload it on the switch:
<code bash>
$ ssh-keygen -t ecdsa -b 521 -f aristakey
$ scp aristakey.pub admin@leaf-ams://mnt/flash/aristakey.pub
</code>

Verify connectivity:
<code bash>
ssh -i aristakey Arista
</code>